c568ba715b
Bump actions/setup-java from 5.2.0 to 5.6.0
...
Bumps [actions/setup-java](https://github.com/actions/setup-java ) from 5.2.0 to 5.6.0.
- [Release notes](https://github.com/actions/setup-java/releases )
- [Commits](https://github.com/actions/setup-java/compare/be666c2fcd27ec809703dec50e508c2fdc7f6654...03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 )
---
updated-dependencies:
- dependency-name: actions/setup-java
dependency-version: 5.6.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-17 00:33:33 +00:00
d2366650ec
Polish Serialization Test
...
This commit makes the version calculation work for
intermediate version numbers like 7.0.5.1
2026-07-09 11:01:06 -06:00
5338b7a05b
Move Wildcards to Minor Versions
...
This commit targets the major.minor version pair that
matches Spring Security 7.0.x
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-07-09 08:43:57 -06:00
bd86d0b233
Add Micrometer to Snapshot Test
...
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-07-09 08:32:11 -06:00
f8442794a8
Check Only JDK 17
...
This commit removes the extra build for
JDK 21 to save time on builds.
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-07-09 08:32:11 -06:00
57c2af4900
Merge branch '6.5.x' into 7.0.x
2026-06-09 14:30:37 -04:00
6da4ea0d0d
Next development version
2026-06-09 16:06:39 +00:00
8f69721f24
Next development version
2026-06-09 16:02:59 +00:00
acd131c3d1
Release 7.0.6
2026-06-09 15:31:10 +00:00
73b077790f
Release 6.5.11
2026-06-09 15:25:02 +00:00
62c4d60524
Merge branch '6.5.x' into 7.0.x
2026-06-09 10:01:20 -04:00
d884913175
Sync branch '7.0.x'
2026-06-09 10:00:13 -04:00
fd5dae5e4d
Sync branch '6.5.x'
2026-06-09 09:57:02 -04:00
d29c761135
Merge branch '6.5.x' into 7.0.x
2026-06-09 09:04:33 -04:00
700a4533aa
Bump ch.qos.logback:logback-classic from 1.5.32 to 1.5.34
...
Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback ) from 1.5.32 to 1.5.34.
- [Release notes](https://github.com/qos-ch/logback/releases )
- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.32...v_1.5.34 )
---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-classic
dependency-version: 1.5.34
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-09 08:27:37 -04:00
3a394c633f
Update micrometer-bom to 1.15.12
...
Closes gh-19302
2026-06-09 08:18:31 -04:00
79f9bec818
Update to reactor-bom 2024.0.18
...
Closes gh-19301
2026-06-09 08:18:30 -04:00
5b019365b7
Bump org.hibernate.orm:hibernate-core from 6.6.51.Final to 6.6.53.Final
...
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm ) from 6.6.51.Final to 6.6.53.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases )
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/6.6.53/changelog.txt )
- [Commits](https://github.com/hibernate/hibernate-orm/compare/6.6.51...6.6.53 )
---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
dependency-version: 6.6.53.Final
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-09 07:37:50 -04:00
038da0289e
Bump io.projectreactor:reactor-bom from 2025.0.5 to 2025.0.6
...
Bumps [io.projectreactor:reactor-bom](https://github.com/reactor/reactor ) from 2025.0.5 to 2025.0.6.
- [Release notes](https://github.com/reactor/reactor/releases )
- [Commits](https://github.com/reactor/reactor/compare/2025.0.5...2025.0.6 )
---
updated-dependencies:
- dependency-name: io.projectreactor:reactor-bom
dependency-version: 2025.0.6
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-09 07:37:14 -04:00
f9b4afdfc5
Bump com.fasterxml.jackson:jackson-bom from 2.18.7 to 2.18.8
...
Bumps [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom ) from 2.18.7 to 2.18.8.
- [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.18.7...jackson-bom-2.18.8 )
---
updated-dependencies:
- dependency-name: com.fasterxml.jackson:jackson-bom
dependency-version: 2.18.8
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-09 07:36:02 -04:00
65aaedbc83
Bump org.springframework.data:spring-data-bom from 2025.1.5 to 2025.1.6
...
Bumps [org.springframework.data:spring-data-bom](https://github.com/spring-projects/spring-data-bom ) from 2025.1.5 to 2025.1.6.
- [Release notes](https://github.com/spring-projects/spring-data-bom/releases )
- [Commits](https://github.com/spring-projects/spring-data-bom/compare/2025.1.5...2025.1.6 )
---
updated-dependencies:
- dependency-name: org.springframework.data:spring-data-bom
dependency-version: 2025.1.6
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-09 07:33:17 -04:00
f325ddbdaa
Bump org.springframework:spring-framework-bom from 6.2.18 to 6.2.19
...
Bumps [org.springframework:spring-framework-bom](https://github.com/spring-projects/spring-framework ) from 6.2.18 to 6.2.19.
- [Release notes](https://github.com/spring-projects/spring-framework/releases )
- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.18...v6.2.19 )
---
updated-dependencies:
- dependency-name: org.springframework:spring-framework-bom
dependency-version: 6.2.19
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-09 07:32:45 -04:00
bc9bdbaf83
Bump io-micrometer from 1.16.5 to 1.16.6
...
Bumps `io-micrometer` from 1.16.5 to 1.16.6.
Updates `io.micrometer:micrometer-bom` from 1.16.5 to 1.16.6
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases )
- [Commits](https://github.com/micrometer-metrics/micrometer/compare/v1.16.5...v1.16.6 )
Updates `io.micrometer:micrometer-observation` from 1.16.5 to 1.16.6
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases )
- [Commits](https://github.com/micrometer-metrics/micrometer/compare/v1.16.5...v1.16.6 )
---
updated-dependencies:
- dependency-name: io.micrometer:micrometer-bom
dependency-version: 1.16.6
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: io.micrometer:micrometer-observation
dependency-version: 1.16.6
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-09 07:32:09 -04:00
6da29433cc
Merge branch '6.5.x' into 7.0.x
2026-06-09 06:23:22 -04:00
4adfdf66b9
Bump org.apache.maven:maven-resolver-provider from 3.9.15 to 3.9.16
...
Bumps org.apache.maven:maven-resolver-provider from 3.9.15 to 3.9.16.
---
updated-dependencies:
- dependency-name: org.apache.maven:maven-resolver-provider
dependency-version: 3.9.16
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-09 05:50:28 -04:00
e91b81a5aa
Bump org-bouncycastle from 1.80 to 1.80.2
...
Bumps `org-bouncycastle` from 1.80 to 1.80.2.
Updates `org.bouncycastle:bcpkix-jdk18on` from 1.80 to 1.80.2
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html )
- [Commits](https://github.com/bcgit/bc-java/commits )
Updates `org.bouncycastle:bcprov-jdk18on` from 1.80 to 1.80.2
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html )
- [Commits](https://github.com/bcgit/bc-java/commits )
---
updated-dependencies:
- dependency-name: org.bouncycastle:bcpkix-jdk18on
dependency-version: 1.80.2
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.bouncycastle:bcprov-jdk18on
dependency-version: 1.80.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-09 05:49:36 -04:00
0949d3b3ea
Bump org.slf4j:slf4j-api from 2.0.17 to 2.0.18
...
Bumps org.slf4j:slf4j-api from 2.0.17 to 2.0.18.
---
updated-dependencies:
- dependency-name: org.slf4j:slf4j-api
dependency-version: 2.0.18
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-09 05:33:00 -04:00
d44efc899d
Bump org.hibernate.orm:hibernate-core from 6.6.50.Final to 6.6.51.Final
...
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm ) from 6.6.50.Final to 6.6.51.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases )
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/6.6.51/changelog.txt )
- [Commits](https://github.com/hibernate/hibernate-orm/compare/6.6.50...6.6.51 )
---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
dependency-version: 6.6.51.Final
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-09 05:29:40 -04:00
c5870a746a
Bump @springio/antora-extensions from 1.14.11 to 1.14.12 in /docs
...
Bumps [@springio/antora-extensions](https://github.com/spring-io/antora-extensions ) from 1.14.11 to 1.14.12.
- [Changelog](https://github.com/spring-io/antora-extensions/blob/main/CHANGELOG.adoc )
- [Commits](https://github.com/spring-io/antora-extensions/compare/v1.14.11...v1.14.12 )
---
updated-dependencies:
- dependency-name: "@springio/antora-extensions"
dependency-version: 1.14.12
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-09 05:28:18 -04:00
58bca0e895
Bump @springio/antora-extensions from 1.14.11 to 1.14.12 in /docs
...
Bumps [@springio/antora-extensions](https://github.com/spring-io/antora-extensions ) from 1.14.11 to 1.14.12.
- [Changelog](https://github.com/spring-io/antora-extensions/blob/main/CHANGELOG.adoc )
- [Commits](https://github.com/spring-io/antora-extensions/compare/v1.14.11...v1.14.12 )
---
updated-dependencies:
- dependency-name: "@springio/antora-extensions"
dependency-version: 1.14.12
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-09 05:27:42 -04:00
1bc3fd9ea9
Bump io.mockk:mockk from 1.14.9 to 1.14.11
...
Bumps [io.mockk:mockk](https://github.com/mockk/mockk ) from 1.14.9 to 1.14.11.
- [Release notes](https://github.com/mockk/mockk/releases )
- [Commits](https://github.com/mockk/mockk/compare/1.14.9...v1.14.11 )
---
updated-dependencies:
- dependency-name: io.mockk:mockk
dependency-version: 1.14.11
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-09 05:26:59 -04:00
e84b949719
Bump com.webauthn4j:webauthn4j-core
...
Bumps [com.webauthn4j:webauthn4j-core](https://github.com/webauthn4j/webauthn4j ) from 0.31.5.RELEASE to 0.31.6.RELEASE.
- [Release notes](https://github.com/webauthn4j/webauthn4j/releases )
- [Commits](https://github.com/webauthn4j/webauthn4j/compare/0.31.5.RELEASE...0.31.6.RELEASE )
---
updated-dependencies:
- dependency-name: com.webauthn4j:webauthn4j-core
dependency-version: 0.31.6.RELEASE
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-09 05:24:07 -04:00
33bd1abb9d
Bump ch.qos.logback:logback-classic from 1.5.32 to 1.5.34
...
Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback ) from 1.5.32 to 1.5.34.
- [Release notes](https://github.com/qos-ch/logback/releases )
- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.32...v_1.5.34 )
---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-classic
dependency-version: 1.5.34
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-09 05:23:13 -04:00
ea62b200f7
Bump actions/checkout from 6.0.2 to 6.0.3
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.2 to 6.0.3.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...df4cb1c069e1874edd31b4311f1884172cec0e10 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 6.0.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-09 05:22:11 -04:00
5eb41b8a06
Bump actions/checkout from 6.0.2 to 6.0.3
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.2 to 6.0.3.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...df4cb1c069e1874edd31b4311f1884172cec0e10 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 6.0.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-09 05:21:32 -04:00
8f0c077fc7
Bump org.springframework:spring-framework-bom from 7.0.7 to 7.0.8
...
Bumps [org.springframework:spring-framework-bom](https://github.com/spring-projects/spring-framework ) from 7.0.7 to 7.0.8.
- [Release notes](https://github.com/spring-projects/spring-framework/releases )
- [Commits](https://github.com/spring-projects/spring-framework/compare/v7.0.7...v7.0.8 )
---
updated-dependencies:
- dependency-name: org.springframework:spring-framework-bom
dependency-version: 7.0.8
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-09 05:19:47 -04:00
430b9bb8c6
Bump org.springframework.ldap:spring-ldap-core from 4.0.3 to 4.0.4
...
Bumps [org.springframework.ldap:spring-ldap-core](https://github.com/spring-projects/spring-ldap ) from 4.0.3 to 4.0.4.
- [Release notes](https://github.com/spring-projects/spring-ldap/releases )
- [Changelog](https://github.com/spring-projects/spring-ldap/blob/main/changelog.txt )
- [Commits](https://github.com/spring-projects/spring-ldap/compare/4.0.3...4.0.4 )
---
updated-dependencies:
- dependency-name: org.springframework.ldap:spring-ldap-core
dependency-version: 4.0.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-09 05:19:11 -04:00
0fa81bfb6d
Merge branch '7.0.x'
2026-06-04 14:55:31 -04:00
54e9575391
Merge branch '6.5.x' into 7.0.x
2026-06-02 12:42:44 -06:00
e3ad551ab3
Backport SubjectX500PrincipalExtractor
...
This commit backports SubjectX500PrincipalExtractor so as to provide
folks moving from 6.x to 7.x a migration path from
SubjectDnX509PrincipalExtractor.
Issue gh-16980
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-06-01 14:30:33 -06:00
7fc97c6ee2
Select Most Specific RDN in X500 Principal Extractor
...
SubjectX500PrincipalExtractor now returns the left-most, most-specific
matching RDN value, matching both convention and
SubjectDnX509PrincipalExtractor. Since LdapName#getRdns lists RDNs
most-significant first, the extractor reads them in reverse so that a
subject with more than one matching attribute (e.g. two CNs) resolves to
the most specific value.
Closes gh-19254
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-06-01 14:05:58 -06:00
241bf2c148
Merge branch 6.5.x into 7.0.x
2026-05-29 15:06:52 -06:00
cf06871200
Rework Logout Validation Logic
...
This commit simplifies the code, favoring the construction
of a list of error codes over composing a set of consumers.
This will simplify future analysis by making the code more
readable.
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-29 14:45:44 -06:00
e50c2a6a74
Rework Login Validation Logic
...
This commit simplifies the validation code, favoring the
construction of a list of error codes over using an
accumulating Saml2ResponseValidationResult. This will
simplify future analysis by making the code more readable.
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-29 14:45:36 -06:00
b175e4487e
Merge branch 6.5.x into 7.0.x
2026-05-29 14:31:43 -06:00
356131b1ea
Use FormPostRedirectStrategy
...
Closes gh-16673
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-29 11:56:50 -06:00
97a49aa3bf
Add setRowMapper
...
This commit makes so that the strategy for reading an
AssertingPartyMetadata can be configured.
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-29 11:48:20 -06:00
e4a78c26d6
Polish redirect flows
2026-05-28 10:25:03 -04:00
c50e4c02bb
Merge branch '6.5.x' into 7.0.x
2026-05-28 06:55:13 -04:00
a14c9d66b1
Favor Relative URIs in CookieRequestCache
...
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-28 06:54:59 -04:00
dependabot[bot]