spring-projects/spring-security 7.0.6 on GitHub

🪲 Bug Fixes

FormPostRedirectStrategy should not emit percent-encoded values into hidden form inputs #19137
AbstractAuthenticationFilterConfigurer should not automatically pick up servlet path #19128
Principal Extractor should select the left-most RDN attribute value #19254

Bump antora from 3.2.0-alpha.11 to 3.2.0-alpha.12 in /docs #19184
Bump ch.qos.logback:logback-classic from 1.5.32 to 1.5.34 #19266
Bump com.webauthn4j:webauthn4j-core from 0.31.3.RELEASE to 0.31.5.RELEASE #19151
Bump com.webauthn4j:webauthn4j-core from 0.31.5.RELEASE to 0.31.6.RELEASE #19265
Bump gradle-wrapper from 8.14.4 to 8.14.5 #19160
Bump io-micrometer from 1.16.5 to 1.16.6 #19292
Bump io.mockk:mockk from 1.14.9 to 1.14.11 #19247
Bump io.projectreactor:reactor-bom from 2025.0.5 to 2025.0.6 #19298
Bump org-bouncycastle from 1.80 to 1.80.2 #19193
Bump org.apache.maven:maven-resolver-provider from 3.9.15 to 3.9.16 #19192
Bump org.slf4j:slf4j-api from 2.0.17 to 2.0.18 #19174
Bump org.springframework.data:spring-data-bom from 2025.1.5 to 2025.1.6 #19294
Bump org.springframework.ldap:spring-ldap-core from 4.0.3 to 4.0.4 #19289
Bump org.springframework:spring-framework-bom from 7.0.7 to 7.0.8 #19288
Bump spring-io/spring-release-actions from 0.0.4 to 0.0.5 #19182
Update to Micrometer 1.16.5 #19225