github spring-projects/spring-security 7.0.8

latest releases: 7.2.0-RC1, 7.1.2
5 hours ago

⭐ New Features

  • Polish onetimetoken references

🪲 Bug Fixes

  • AuthenticatorTransport#values should include SMART_CARD
  • Empty or null scope claim in dynamic client registration request should be lenient
  • Fix HeaderWriterFilter race condition during async requests
  • Fix TokenType comparison logic
  • Fix typos in Javadocs
  • NPE with authenticationValidator in OAuth2AuthorizationCodeRequestValidatingFilter
  • SecurityContextHolderThreadLocalAccessor should not share SecurityContext instance across threads

🔨 Dependency Upgrades

  • Bump @antora/atlas-extension from 1.0.0-alpha.5 to 1.0.0-alpha.6 in /docs
  • Bump antora from 3.2.0 to 3.2.1 in /docs
  • Bump antora from 3.2.0-rc.2 to 3.2.0-rc.3 in /docs
  • Bump antora from 3.2.0-rc.3 to 3.2.0 in /docs
  • Bump gradle-wrapper from 8.14.5 to 8.14.6
  • Bump io-spring-javaformat from 0.0.47 to 0.0.48
  • Bump io.spring.develocity.conventions from 0.0.25 to 0.0.27
  • Bump io.spring.gradle:spring-security-project-plugin from 1.0.19 to 1.0.20
  • Bump io.spring.gradle:spring-security-release-plugin from 1.0.15 to 1.0.17
  • Bump io.spring.gradle:spring-security-release-plugin from 1.0.17 to 1.0.20
  • Bump org.slf4j:slf4j-api from 2.0.18 to 2.0.19
  • Bump org.slf4j:slf4j-api from 2.0.19 to 2.0.20
  • Bump spring-io/spring-release-actions/compute-next-version from 0.0.5 to 0.0.6
  • Bump spring-io/spring-release-actions/get-todays-release-version from 0.0.5 to 0.0.6
  • Bump spring-io/spring-security-release-tools/.github/actions/send-notification from 1.0.17 to 1.0.18
  • Bump spring-io/spring-security-release-tools/.github/workflows/build.yml from 1.0.15 to 1.0.17
  • Bump spring-io/spring-security-release-tools/.github/workflows/deploy-artifacts.yml from 1.0.17 to 1.0.18
  • Bump spring-io/spring-security-release-tools/.github/workflows/deploy-schema.yml from 1.0.17 to 1.0.18
  • Bump spring-io/spring-security-release-tools/.github/workflows/release-announcements-publish.yml from 1.0.17 to 1.0.18
  • Bump spring-io/spring-security-release-tools/.github/workflows/test.yml from 1.0.17 to 1.0.18
  • Bump spring-io/spring-security-release-tools/.github/workflows/test.yml from ed473b4dafba053c63a453d2d88a89df3b3e18b3 to 9ca0acea761aa79d71c78cc462048c49ed5c4230

🔩 Build Updates

  • Configure for Reproducible Builds

❤️ Contributors

Thank you to all the contributors who worked on this release:

@Kehrlann, @bdshadow, @ngocnhan-tran1996, @therepanic, and @ttddyy

Don't miss a new spring-security release

NewReleases is sending notifications on new releases.