Releases: spring-projects/spring-security
Releases · spring-projects/spring-security
5.8.8
⭐ New Features
- Document how to publish an
AuthenticationManager@BeanwithoutWebSecurityConfigurerAdapter#11926 - Use Gradle's Version Catalog #13868
🪲 Bug Fixes
- Fix
snapshot_testson CI workflow #13876 - fix corrupted saml2 metadata once special characters are present #13777
- Saml-Metadata with special characters is corrupted #13776
- Saml2LogoutRequestMixin relayState property should be binding #12539
🔨 Dependency Upgrades
- Bump com.github.spullara.mustache.java:compiler from 0.9.10 to 0.9.11 #13982
- Bump com.github.spullara.mustache.java:compiler from 0.9.4 to 0.9.10 #13927
- Bump com.google.code.gson:gson from 2.8.6 to 2.8.9 #13890
- Bump com.gradle.enterprise from 3.11.1 to 3.11.4 #13928
- Bump io.projectreactor.netty:reactor-netty from 1.0.35 to 1.0.36 #13885
- Bump io.projectreactor.netty:reactor-netty from 1.0.36 to 1.0.38 #13998
- Bump io.projectreactor:reactor-bom from 2020.0.35 to 2020.0.36 #13944
- Bump io.projectreactor:reactor-bom from 2020.0.36 to 2020.0.37 #13997
- Bump io.spring.ge.conventions from 0.0.7 to 0.0.14 #13925
- Bump org-aspectj from 1.9.20 to 1.9.20.1 #13893
- Bump org-eclipse-jetty from 9.4.51.v20230217 to 9.4.52.v20230823 #13909
- Bump org-eclipse-jetty from 9.4.52.v20230823 to 9.4.53.v20231009 #13996
- Bump org.apache.logging.log4j:log4j-core from 2.17.1 to 2.17.2 #13926
- Bump org.jfrog.buildinfo:build-info-extractor-gradle from 4.29.0 to 4.29.4 #13954
- Bump org.springframework.data:spring-data-bom from 2021.2.15 to 2021.2.16 #13907
- Bump org.springframework.data:spring-data-bom from 2021.2.16 to 2021.2.17 #14018
- Bump org.springframework:spring-framework-bom from 5.3.29 to 5.3.30 #13908
❤️ Contributors
We'd like to thank all the contributors who worked on this release!
6.2.0-M3
⭐ New Features
- Adopt dedicated AssertJ assertions for more expressive test failure messages #13619
- Automate spring-security.xsd #13826
- Correct mentioned HTTP Method in Documentation #13751
- Fix grammar on logout page of the docs #13750
- Fix untitled page title in documentation #13575
- Improve StrictHttpFirewall error messaging #13615
- Improve StrictHttpFirewall error messaging #13614
- Replace wildcard type ? with * in Kotlin and fix typo in Spring docs #13719
- Support nested suspend calls for Kotlin coroutines #13766
- Update OAuth2 docs landing page with examples #13784
- Add OIDC Back-channel Logout Support #7845
🪲 Bug Fixes
- CookieCsrfTokenRepository resets httpOnly to true in case a cookieCustomizer is set #13748
- CookieRequestCache ignores user Locale #13797
- Default Security Configuration adds WWW-Authenticate Twice #13760
- OAuth2AuthenticationExceptionMixin doesn't work in JDK 17 #13802
- Problem uploading multipart file after migrating to latest Spring Security. #13821
- Saml2AuthenticationExceptionMixin doesn't work in JDK 17 #13807
- Spring ACL and native compilation fail to process datasource properties #13815
🔨 Dependency Upgrades
- Update io.projectreactor to 2023.0.0-M3 #13829
- Update jakarta.xml.bind-api to 4.0.1 #13831
- Update micrometer-observation to 1.12.0-M3 #13828
- Update org.aspectj to 1.9.20.1 #13832
- Update org.eclipse.jetty to 11.0.16 #13833
- Update org.jetbrains.kotlin to 1.9.10 #13835
- Update org.springframework to 6.1.0-M5 #13837
- Update org.springframework.data to 2023.1.0-M3 #13838
- Update reactor-netty to 1.1.11 #13830
- Update slf4j-api to 2.0.9 #13836
- Update Spring Framework to 6.1.0-SNAPSHOT #13765
- Update spring-ldap-core to 3.2.0-M3 #13839
❤️ Contributors
We'd like to thank all the contributors who worked on this release!
6.1.4
⭐ New Features
- Automate spring-security.xsd #13825
🪲 Bug Fixes
- CookieCsrfTokenRepository resets httpOnly to true in case a cookieCustomizer is set #13659
- CookieRequestCache ignores user Locale #13796
- Default Security Configuration adds WWW-Authenticate Twice #13759
- Fix inaccurate information about permitting the FORWARD dispatcher in Kotlin #13729
- OAuth2AuthenticationExceptionMixin doesn't work in JDK 17 #13800
- Problem uploading multipart file after migrating to latest Spring Security. #13820
- Saml2AuthenticationExceptionMixin doesn't work in JDK 17 #13806
- Spring ACL and native compilation fail to process datasource properties #13814
❤️ Contributors
We'd like to thank all the contributors who worked on this release!
6.0.7
⭐ New Features
- Automate spring-security.xsd #13824
🪲 Bug Fixes
- CookieRequestCache ignores user Locale #13795
- Default Security Configuration adds WWW-Authenticate Twice #13758
- OAuth2AuthenticationExceptionMixin doesn't work in JDK 17 #13799
- Problem uploading multipart file after migrating to latest Spring Security. #13731
- Resolve The matchingRequestParameterName From The Query String #13817
- Saml2AuthenticationExceptionMixin doesn't work in JDK 17 #13805
- Spring ACL and native compilation fail to process datasource properties #12653
❤️ Contributors
We'd like to thank all the contributors who worked on this release!
5.8.7
5.7.11
6.2.0-M2
⭐ New Features
- Add MvcRequestMatcher reference documentation #13727
- Adds integrity attribute for bootstrap signin.css #13608
- Allow JWT issuer AuthenticationManagerResolvers to accept predicate issuer validator #13428
- Default RequestMatchers for Saml2WebSsoAuthenticationFilter and OpenSamlAuthenticationTokenConverter should align #13653
- Fix method typo in Gh3409Tests (gh-3409) #13402
- Fix minor typo in docs #13304
- Fix typo: you're -> your #13430
- Fixing ArrayIndexOutOfBoundsException in XorCsrfTokenRequestAttribute… #13550
- Include information about -parameters flag in 6.2 upgrade notes #13552
- Polishing #13470
- requestMatchers servlet validation error should include information about servlet paths #13723
- requestMatchers should not count servlets without mappings #13725
- Return content-type from saved request #13440
- Return statement of the roleHierarchy method is omitted in the Reference #13636
- Simplify configuration of OAuth2 Client component model #13587
🪲 Bug Fixes
- Fix typo in docs #13638
- Referrer Header is set in Reactive Web Applications by default, although doc says it is not. #13591
- RequestMatcherMetadataResponseResolver only shows last RelyingPartyRegistration #13701
- saml2Login should not override OpenSaml4AuthenticationProvider bean #13656
- The bean 'preFilterAuthorizationAdvisor', defined in class path resource could not be registered #13581
- Update links in adocs #13634
🔨 Dependency Upgrades
- Update hibernate-core to 6.3.0.CR1 #13691
- Update io.projectreactor to 2023.0.0-M2 #13686
- Update junit-bom to 5.10.0 #13694
- Update junit-platform-launcher to 1.10.0 #13696
- Update logback-classic to 1.4.11 #13683
- Update maven-resolver-provider to 3.9.4 #13688
- Update micrometer-observation to 1.12.0-M2 #13684
- Update mockk to 1.13.7 #13685
- Update org.apache.maven.resolver to 1.9.15 #13689
- Update org.aspectj to 1.9.20 #13690
- Update org.jetbrains.kotlinx to 1.7.3 #13693
- Update org.junit.jupiter to 5.10.0 #13695
- Update org.springframework to 6.1.0-M4 #13697
- Update org.springframework.data to 2023.1.0-M2 #13698
- Update reactor-netty to 1.1.10 #13687
- Update spring-ldap-core to 3.2.0-M2 #13699
❤️ Contributors
We'd like to thank all the contributors who worked on this release!
6.1.3
⭐ New Features
- Add MvcRequestMatcher reference documentation #13726
- Refactor for readability #13472
- requestMatchers servlet validation error should include information about servlet paths #13722
- requestMatchers should not count servlets without mappings #13724
🪲 Bug Fixes
- Add return statement of the roleHierachy method in the servlet/author… #13596
- Fix typo in docs #13637
- Referrer Header is set in Reactive Web Applications by default, although doc says it is not. #13590
- RequestMatcherMetadataResponseResolver only shows last RelyingPartyRegistration #13700
- saml2Login should not override OpenSaml4AuthenticationProvider bean #13655
- The bean 'preFilterAuthorizationAdvisor', defined in class path resource could not be registered #13580
- Update links in adocs #13632
🔨 Dependency Upgrades
- Update io.projectreactor to 2022.0.10 #13674
- Update logback-classic to 1.4.11 #13669
- Update micrometer-observation to 1.10.10 #13672
- Update mockk to 1.13.7 #13673
- Update org.aspectj to 1.9.20 #13676
- Update org.springframework.data to 2022.0.9 #13677
- Update reactor-netty to 1.1.10 #13675
- Update spring-ldap-core to 3.0.5 #13678
❤️ Contributors
We'd like to thank all the contributors who worked on this release!
6.0.6
⭐ New Features
- requestMatchers servlet validation error should include information about servlet paths #13721
- requestMatchers should not count servlets without mappings #13720
🪲 Bug Fixes
- Doc : typo in Custom DSLs section #13325
- Fix typo in docs #13605
- Referrer Header is set in Reactive Web Applications by default, although doc says it is not. #13589
- saml2Login should not override OpenSaml4AuthenticationProvider bean #13654
- The bean 'preFilterAuthorizationAdvisor', defined in class path resource could not be registered #13579
- Update links in adocs #13565
🔨 Dependency Upgrades
- Update io.projectreactor to 2022.0.10 #13710
- Update logback-classic to 1.4.11 #13707
- Update micrometer-observation to 1.10.10 #13708
- Update mockk to 1.13.7 #13709
- Update org.aspectj to 1.9.20 #13712
- Update org.springframework.data to 2022.0.9 #13713
- Update reactor-netty to 1.1.10 #13711
- Update spring-ldap-core to 3.0.5 #13714
❤️ Contributors
We'd like to thank all the contributors who worked on this release!
5.8.6
⭐ New Features
- Closes #11450 - Add Java beans configuration for Remmember Me Docs #13570
- Dependencies are resolved from appropriate repositories #13582
- requestMatchers servlet validation error should include information about servlet paths #13667
- requestMatchers should not count servlets without mappings #13666
🪲 Bug Fixes
- Fix Bearer Token RestTemplate Support example #13434
- Referrer Header is set in Reactive Web Applications by default, although doc says it is not. #13561
- The bean 'preFilterAuthorizationAdvisor', defined in class path resource could not be registered #13572
🔨 Dependency Upgrades
- Update io.projectreactor to 2020.0.35 #13702
- Update org.aspectj to 1.9.20 #13704
- Update org.springframework.data to 2021.2.15 #13705
- Update reactor-netty to 1.0.35 #13703
❤️ Contributors
We'd like to thank all the contributors who worked on this release!