From 6eb7ef6e6dc6f9b495d6e35562cffdfd23dcecd1 Mon Sep 17 00:00:00 2001
From: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
Date: Fri, 17 Apr 2026 10:33:06 -0600
Subject: [PATCH] Update What's New

Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
---
 docs/modules/ROOT/pages/whats-new.adoc | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/docs/modules/ROOT/pages/whats-new.adoc b/docs/modules/ROOT/pages/whats-new.adoc
index b16df69bec..d92dfca119 100644
--- a/docs/modules/ROOT/pages/whats-new.adoc
+++ b/docs/modules/ROOT/pages/whats-new.adoc
@@ -8,3 +8,8 @@
 == Web
 
 * Since Spring Framework's `HttpMethod#valueOf` now normalizes casing, `StrictServerWebExchangeFirewall` no longer detects a non-canonical-case HTTP method (for example, `get` instead of `GET`) as a distinct value; such requests are processed as the canonical method instead of being rejected. Applications with a customized `ServerExchangeRejectedHandler` should be aware it is no longer invoked for this case.
+
+== OAuth 2.0
+
+* https://github.com/spring-projects/spring-security/pull/18895[gh-18895] - Add `authenticationSuccessHandler` to the Reactive Resource Server DSL
+