⭐ New Features
- Fix Javadoc warnings in spring-security-web #18473
- Fix/gradle 9 deprecations #18485
- Fix/gradle 9 deprecations #18477
- Replace method call with 'Builder.configureMessageConverters()' #18378
- Replacing use of deprecated 'check' in authorization documentation #18390
- Use DefaultParameterNameDiscoverer#getSharedInstance #18481
🪲 Bug Fixes
- Authorization Server fails to start with multiple PasswordEncoder beans #18645
- BearerTokenAuthenticationEntryPoint uses context path #18528
- Create SHA-1 MessageDigest for every new check request in Compromised Password Checker #18594
- Document Client PKCE settings #18304
- Fix docs typo X-Requested-By -> X-Requested-With #18123
- Fix Formatting in mfa.adoc #18134
- Fix typo in documentation #18344
- Fix typos #18121
🔨 Dependency Upgrades
- Bump ch.qos.logback:logback-classic from 1.5.22 to 1.5.24 #18384
- Bump ch.qos.logback:logback-classic from 1.5.24 to 1.5.28 #18684
- Bump ch.qos.logback:logback-classic from 1.5.28 to 1.5.29 #18711
- Bump com.fasterxml.jackson:jackson-bom from 2.20.1 to 2.20.2 #18660
- Bump com.webauthn4j:webauthn4j-core from 0.29.7.RELEASE to 0.31.0.RELEASE #18687
- Bump gradle-wrapper from 8.14 to 8.14.4 #18705
- Bump io.mockk:mockk from 1.14.7 to 1.14.9 #18681
- Bump io.projectreactor:reactor-bom from 2025.0.1 to 2025.0.2 #18658
- Bump io.projectreactor:reactor-bom from 2025.0.2 to 2025.0.3 #18717
- Bump io.spring.develocity.conventions from 0.0.24 to 0.0.25 #18683
- Bump io.spring.gradle:spring-security-release-plugin from 1.0.13 to 1.0.14 #18725
- Bump jakarta.xml.bind:jakarta.xml.bind-api from 4.0.4 to 4.0.5 #18706
- Bump org-apache-maven-resolver from 1.9.24 to 1.9.25 #18309
- Bump org-aspectj from 1.9.25 to 1.9.25.1 #18326
- Bump org.apache.httpcomponents.client5:httpclient5 from 5.5.1 to 5.5.2 #18346
- Bump org.apache.maven:maven-resolver-provider from 3.9.11 to 3.9.12 #18327
- Bump org.assertj:assertj-core from 3.27.6 to 3.27.7 #18682
- Bump org.junit:junit-bom from 6.0.1 to 6.0.2 #18385
- Bump org.springframework.data:spring-data-bom from 2025.1.1 to 2025.1.2 #18655
- Bump org.springframework.ldap:spring-ldap-core from 4.0.0 to 4.0.1 #18316
- Bump org.springframework.ldap:spring-ldap-core from 4.0.1 to 4.0.2 #18733
- Bump org.springframework:spring-framework-bom from 7.0.3 to 7.0.4 #18732
- Bump org.springframework:spring-framework-bom from 7.0.3-SNAPSHOT to 7.0.4-SNAPSHOT #18657
- Bump spring-io/spring-doc-actions from 0.0.20 to 0.0.22 #18651
- Bump tools.jackson:jackson-bom from 3.0.3 to 3.0.4 #18659
- Update Antora UI Spring to v0.4.25 #18249
- Update to Spring Framework 7.0.3 #18667
- Update to spring-data-bom 2025.1.3 #18735
❤️ Contributors
Thank you to all the contributors who worked on this release:
@Been24, @Fr05ty-hub, @Kehrlann, @Rigu1, @bloomsei, @martinboulais, @ngocnhan-tran1996, @paulvas, @rwinch, @therepanic, and @vincentstradiot