From 4ce48297f67f84afebb2b0c0e853bff32faf1ff1 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 28 Aug 2026 03:05:36 +0000 Subject: [PATCH 1/8] Bump io.spring.gradle:spring-security-release-plugin Bumps [io.spring.gradle:spring-security-release-plugin](https://github.com/spring-io/spring-security-release-tools) from 1.0.15 to 1.0.17. - [Release notes](https://github.com/spring-io/spring-security-release-tools/releases) - [Changelog](https://github.com/spring-io/spring-security-release-tools/blob/main/RELEASE.adoc) - [Commits](https://github.com/spring-io/spring-security-release-tools/compare/v1.0.15...v1.0.17) --- updated-dependencies: - dependency-name: io.spring.gradle:spring-security-release-plugin dependency-version: 1.0.17 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- gradle/libs.versions.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml index 3039af98f5..5b0ff58e01 100644 --- a/gradle/libs.versions.toml +++ b/gradle/libs.versions.toml @@ -38,7 +38,7 @@ io-spring-javaformat-spring-javaformat-checkstyle = { module = "io.spring.javafo io-spring-javaformat-spring-javaformat-gradle-plugin = { module = "io.spring.javaformat:spring-javaformat-gradle-plugin", version.ref = "io-spring-javaformat" } io-spring-nohttp-nohttp-checkstyle = { module = "io.spring.nohttp:nohttp-checkstyle", version.ref = "io-spring-nohttp" } io-spring-nohttp-nohttp-gradle = { module = "io.spring.nohttp:nohttp-gradle", version.ref = "io-spring-nohttp" } -io-spring-security-release-plugin = "io.spring.gradle:spring-security-release-plugin:1.0.15" +io-spring-security-release-plugin = "io.spring.gradle:spring-security-release-plugin:1.0.17" jakarta-annotation-jakarta-annotation-api = "jakarta.annotation:jakarta.annotation-api:3.0.0" jakarta-inject-jakarta-inject-api = "jakarta.inject:jakarta.inject-api:2.0.1" jakarta-persistence-jakarta-persistence-api = "jakarta.persistence:jakarta.persistence-api:3.2.0" From 4193b73d4734c7d68af6bf5eccb7f255bc42ddf8 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 28 Aug 2026 00:35:14 +0000 Subject: [PATCH 2/8] Bump actions/setup-java from 5.7.0 to 6.0.0 Bumps [actions/setup-java](https://github.com/actions/setup-java) from 5.7.0 to 6.0.0. - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](https://github.com/actions/setup-java/compare/b6effb05e454b25005698d916606bdc6ffcbf961...dd06d9cba3e5552c54d9f8ea23572deb30010f7c) --- updated-dependencies: - dependency-name: actions/setup-java dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/gradle-wrapper-upgrade-execution.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/gradle-wrapper-upgrade-execution.yml b/.github/workflows/gradle-wrapper-upgrade-execution.yml index f063842278..cb552c44c9 100644 --- a/.github/workflows/gradle-wrapper-upgrade-execution.yml +++ b/.github/workflows/gradle-wrapper-upgrade-execution.yml @@ -21,7 +21,7 @@ jobs: - name: Checkout uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Set up JDK 17 - uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0 + uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v6.0.0 with: java-version: '17' distribution: 'temurin' From 8ef5bcd003dfcc9c0094f95d48faf3dc94528757 Mon Sep 17 00:00:00 2001 From: Tran Ngoc Nhan Date: Wed, 12 Aug 2026 22:04:51 +0700 Subject: [PATCH 3/8] Fix typos in Javadocs - Remove duplicate words - Remove unnecessary parentheses - Fix grammar Signed-off-by: Tran Ngoc Nhan --- .../method/PostFilterAuthorizationMethodInterceptor.java | 2 +- .../security/concurrent/DelegatingSecurityContextCallable.java | 2 +- .../security/concurrent/DelegatingSecurityContextRunnable.java | 2 +- .../org/springframework/security/core/token/TokenService.java | 2 +- .../org/springframework/security/core/userdetails/User.java | 2 +- .../security/core/userdetails/UserDetailsService.java | 2 +- .../org/springframework/security/provisioning/package-info.java | 2 +- 7 files changed, 7 insertions(+), 7 deletions(-) diff --git a/core/src/main/java/org/springframework/security/authorization/method/PostFilterAuthorizationMethodInterceptor.java b/core/src/main/java/org/springframework/security/authorization/method/PostFilterAuthorizationMethodInterceptor.java index 0264e6eceb..0080f8da92 100644 --- a/core/src/main/java/org/springframework/security/authorization/method/PostFilterAuthorizationMethodInterceptor.java +++ b/core/src/main/java/org/springframework/security/authorization/method/PostFilterAuthorizationMethodInterceptor.java @@ -123,7 +123,7 @@ public final class PostFilterAuthorizationMethodInterceptor implements Authoriza /** * Filter a {@code returnedObject} using the {@link PostFilter} annotation that the * {@link MethodInvocation} specifies. - * @param mi the {@link MethodInvocation} to check check + * @param mi the {@link MethodInvocation} to check * @return filtered {@code returnedObject} */ @Override diff --git a/core/src/main/java/org/springframework/security/concurrent/DelegatingSecurityContextCallable.java b/core/src/main/java/org/springframework/security/concurrent/DelegatingSecurityContextCallable.java index d612348428..cb7fc115cb 100644 --- a/core/src/main/java/org/springframework/security/concurrent/DelegatingSecurityContextCallable.java +++ b/core/src/main/java/org/springframework/security/concurrent/DelegatingSecurityContextCallable.java @@ -131,7 +131,7 @@ public final class DelegatingSecurityContextCallable implements Callable { /** * Creates a {@link DelegatingSecurityContextCallable} and with the given * {@link Callable} and {@link SecurityContext}, but if the securityContext is null - * will defaults to the current {@link SecurityContext} on the + * will default to the current {@link SecurityContext} on the * {@link SecurityContextHolder} * @param delegate the delegate {@link DelegatingSecurityContextCallable} to run with * the specified {@link SecurityContext}. Cannot be null. diff --git a/core/src/main/java/org/springframework/security/concurrent/DelegatingSecurityContextRunnable.java b/core/src/main/java/org/springframework/security/concurrent/DelegatingSecurityContextRunnable.java index b8e9576c6b..d8e7df569d 100644 --- a/core/src/main/java/org/springframework/security/concurrent/DelegatingSecurityContextRunnable.java +++ b/core/src/main/java/org/springframework/security/concurrent/DelegatingSecurityContextRunnable.java @@ -47,7 +47,7 @@ public final class DelegatingSecurityContextRunnable implements Runnable { .getContextHolderStrategy(); /** - * The {@link SecurityContext} that the delegate {@link Runnable} will be ran as. + * The {@link SecurityContext} that the delegate {@link Runnable} will be run as. */ private SecurityContext delegateSecurityContext; diff --git a/core/src/main/java/org/springframework/security/core/token/TokenService.java b/core/src/main/java/org/springframework/security/core/token/TokenService.java index a6248a8306..24aa5f0d2f 100644 --- a/core/src/main/java/org/springframework/security/core/token/TokenService.java +++ b/core/src/main/java/org/springframework/security/core/token/TokenService.java @@ -35,7 +35,7 @@ import org.jspecify.annotations.Nullable; * building block for more sophisticated token-based solutions. For example, * authentication systems that depend on stateless session keys. These could, for * instance, place the username inside the user-specified extended information associated - * with the key). It is important to recognise that we do not intend for this interface to + * with the key. It is important to recognise that we do not intend for this interface to * be expanded to provide such capabilities directly. *

* diff --git a/core/src/main/java/org/springframework/security/core/userdetails/User.java b/core/src/main/java/org/springframework/security/core/userdetails/User.java index 46839eeec0..4fbf6a8dbe 100644 --- a/core/src/main/java/org/springframework/security/core/userdetails/User.java +++ b/core/src/main/java/org/springframework/security/core/userdetails/User.java @@ -323,7 +323,7 @@ public class User implements UserDetails, CredentialsContainer { /** * Builds the user to be added. At minimum the username, password, and authorities - * should provided. The remaining attributes have reasonable defaults. + * should be provided. The remaining attributes have reasonable defaults. */ public static final class UserBuilder { diff --git a/core/src/main/java/org/springframework/security/core/userdetails/UserDetailsService.java b/core/src/main/java/org/springframework/security/core/userdetails/UserDetailsService.java index 22ac216297..2fe823ee59 100644 --- a/core/src/main/java/org/springframework/security/core/userdetails/UserDetailsService.java +++ b/core/src/main/java/org/springframework/security/core/userdetails/UserDetailsService.java @@ -38,7 +38,7 @@ public interface UserDetailsService { * may possibly be case sensitive, or case insensitive depending on how the * implementation instance is configured. In this case, the UserDetails * object that comes back may have a username that is of a different case than what - * was actually requested.. + * was actually requested. * @param username the username identifying the user whose data is required. * @return a fully populated user record (never null) * @throws UsernameNotFoundException if the user could not be found or the user has no diff --git a/core/src/main/java/org/springframework/security/provisioning/package-info.java b/core/src/main/java/org/springframework/security/provisioning/package-info.java index fb0add19ed..6850abd647 100644 --- a/core/src/main/java/org/springframework/security/provisioning/package-info.java +++ b/core/src/main/java/org/springframework/security/provisioning/package-info.java @@ -16,7 +16,7 @@ /** * Contains simple user and authority group account provisioning interfaces together with - * a a JDBC-based implementation. + * a JDBC-based implementation. */ @NullMarked package org.springframework.security.provisioning; From 39383ab97025b76b955cbcb12918ec317dbc1d2e Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 28 Aug 2026 00:35:03 +0000 Subject: [PATCH 4/8] Bump spring-io/spring-security-release-tools/.github/workflows/test.yml Bumps [spring-io/spring-security-release-tools/.github/workflows/test.yml](https://github.com/spring-io/spring-security-release-tools) from ed473b4dafba053c63a453d2d88a89df3b3e18b3 to 9ca0acea761aa79d71c78cc462048c49ed5c4230. - [Release notes](https://github.com/spring-io/spring-security-release-tools/releases) - [Changelog](https://github.com/spring-io/spring-security-release-tools/blob/main/RELEASE.adoc) - [Commits](https://github.com/spring-io/spring-security-release-tools/compare/ed473b4dafba053c63a453d2d88a89df3b3e18b3...9ca0acea761aa79d71c78cc462048c49ed5c4230) --- updated-dependencies: - dependency-name: spring-io/spring-security-release-tools/.github/workflows/test.yml dependency-version: 9ca0acea761aa79d71c78cc462048c49ed5c4230 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- .github/workflows/check-snapshots.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/check-snapshots.yml b/.github/workflows/check-snapshots.yml index 554ff181ed..b82a1dde02 100644 --- a/.github/workflows/check-snapshots.yml +++ b/.github/workflows/check-snapshots.yml @@ -14,7 +14,7 @@ permissions: jobs: snapshot-test: name: Test Against Snapshots - uses: spring-io/spring-security-release-tools/.github/workflows/test.yml@ed473b4dafba053c63a453d2d88a89df3b3e18b3 # v1 + uses: spring-io/spring-security-release-tools/.github/workflows/test.yml@9ca0acea761aa79d71c78cc462048c49ed5c4230 # v1 strategy: matrix: include: From 364c153e17c85edb856c6ff9018e9dde595c6639 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 28 Aug 2026 00:34:59 +0000 Subject: [PATCH 5/8] Bump spring-io/spring-release-actions/compute-next-version Bumps [spring-io/spring-release-actions/compute-next-version](https://github.com/spring-io/spring-release-actions) from 0.0.5 to 0.0.6. - [Release notes](https://github.com/spring-io/spring-release-actions/releases) - [Commits](https://github.com/spring-io/spring-release-actions/compare/a1f321783a0769dd2aea4fad6c2ae2f95a52b885...1b8671612c3eb3d9b9763e2d7b66f1a80d00ee95) --- updated-dependencies: - dependency-name: spring-io/spring-release-actions/compute-next-version dependency-version: 0.0.6 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/defer-issues.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/defer-issues.yml b/.github/workflows/defer-issues.yml index d26efafc5f..12b99922c6 100644 --- a/.github/workflows/defer-issues.yml +++ b/.github/workflows/defer-issues.yml @@ -28,7 +28,7 @@ jobs: milestone-token: ${{ secrets.GITHUB_TOKEN }} - name: Compute Next Version id: next-version - uses: spring-io/spring-release-actions/compute-next-version@a1f321783a0769dd2aea4fad6c2ae2f95a52b885 # 0.0.5 + uses: spring-io/spring-release-actions/compute-next-version@1b8671612c3eb3d9b9763e2d7b66f1a80d00ee95 # 0.0.6 with: version: ${{ steps.todays-release.outputs.release-version }} - name: Schedule Next Milestone From 812ad9c547d7a6af37ed12d978edb48fa62f2058 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 28 Aug 2026 00:34:56 +0000 Subject: [PATCH 6/8] Bump spring-io/spring-security-release-tools/.github/workflows/build.yml Bumps [spring-io/spring-security-release-tools/.github/workflows/build.yml](https://github.com/spring-io/spring-security-release-tools) from 1.0.15 to 1.0.17. - [Release notes](https://github.com/spring-io/spring-security-release-tools/releases) - [Changelog](https://github.com/spring-io/spring-security-release-tools/blob/main/RELEASE.adoc) - [Commits](https://github.com/spring-io/spring-security-release-tools/compare/b92832ecbc7cbe969201e6beafbde0ee400cf095...3f6cc7ffc137ca160061749d5f34dc30d5f36986) --- updated-dependencies: - dependency-name: spring-io/spring-security-release-tools/.github/workflows/build.yml dependency-version: 1.0.17 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/continuous-integration-workflow.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/continuous-integration-workflow.yml b/.github/workflows/continuous-integration-workflow.yml index 328e82e906..b220d1d6f0 100644 --- a/.github/workflows/continuous-integration-workflow.yml +++ b/.github/workflows/continuous-integration-workflow.yml @@ -17,7 +17,7 @@ permissions: jobs: build: name: Build - uses: spring-io/spring-security-release-tools/.github/workflows/build.yml@b92832ecbc7cbe969201e6beafbde0ee400cf095 # v1.0.15 + uses: spring-io/spring-security-release-tools/.github/workflows/build.yml@3f6cc7ffc137ca160061749d5f34dc30d5f36986 # v1.0.17 strategy: matrix: os: [ ubuntu-latest, windows-latest ] From cc89707b03952cf4aef4cdd58fd517d1e702504d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 21 Aug 2026 00:37:40 +0000 Subject: [PATCH 7/8] Bump antora from 3.2.0-rc.2 to 3.2.0-rc.3 in /docs Bumps [antora](https://gitlab.com/antora/antora) from 3.2.0-rc.2 to 3.2.0-rc.3. - [Changelog](https://gitlab.com/antora/antora/blob/main/CHANGELOG.adoc) - [Commits](https://gitlab.com/antora/antora/compare/v3.2.0-rc.2...v3.2.0-rc.3) --- updated-dependencies: - dependency-name: antora dependency-version: 3.2.0-rc.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- docs/package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/package.json b/docs/package.json index cea078dac7..253ac52433 100644 --- a/docs/package.json +++ b/docs/package.json @@ -1,6 +1,6 @@ { "dependencies": { - "antora": "3.2.0-rc.2", + "antora": "3.2.0-rc.3", "@antora/atlas-extension": "1.0.0-alpha.5", "@antora/collector-extension": "1.0.3", "@asciidoctor/tabs": "1.0.0-beta.6", From 3dff446d189c0700d3bd06a2117134bc748cd7dd Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 28 Aug 2026 00:34:52 +0000 Subject: [PATCH 8/8] Bump spring-io/spring-release-actions/get-todays-release-version Bumps [spring-io/spring-release-actions/get-todays-release-version](https://github.com/spring-io/spring-release-actions) from 0.0.5 to 0.0.6. - [Release notes](https://github.com/spring-io/spring-release-actions/releases) - [Commits](https://github.com/spring-io/spring-release-actions/compare/a1f321783a0769dd2aea4fad6c2ae2f95a52b885...1b8671612c3eb3d9b9763e2d7b66f1a80d00ee95) --- updated-dependencies: - dependency-name: spring-io/spring-release-actions/get-todays-release-version dependency-version: 0.0.6 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/defer-issues.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/defer-issues.yml b/.github/workflows/defer-issues.yml index 12b99922c6..e9f852842a 100644 --- a/.github/workflows/defer-issues.yml +++ b/.github/workflows/defer-issues.yml @@ -21,7 +21,7 @@ jobs: uses: spring-io/spring-release-actions/compute-version@a1f321783a0769dd2aea4fad6c2ae2f95a52b885 # 0.0.5 - name: Get Today's Release Version id: todays-release - uses: spring-io/spring-release-actions/get-todays-release-version@a1f321783a0769dd2aea4fad6c2ae2f95a52b885 # 0.0.5 + uses: spring-io/spring-release-actions/get-todays-release-version@1b8671612c3eb3d9b9763e2d7b66f1a80d00ee95 # 0.0.6 with: snapshot-version: ${{ steps.compute-version.outputs.version }} milestone-repository: ${{ github.repository }}