881ddf796a
Merge branch '7.0.x'
2026-02-23 08:13:58 -06:00
f2aef5168c
Merge branch '6.5.x' into 7.0.x
2026-02-23 08:13:38 -06:00
ac556a45f9
Bump org.hibernate.orm:hibernate-core from 6.6.42.Final to 6.6.43.Final
...
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm ) from 6.6.42.Final to 6.6.43.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases )
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/6.6.43/changelog.txt )
- [Commits](https://github.com/hibernate/hibernate-orm/compare/6.6.42...6.6.43 )
---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
dependency-version: 6.6.43.Final
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-23 08:12:23 -06:00
c8731a8dc0
Bump com.fasterxml.jackson:jackson-bom from 2.18.5 to 2.18.6
...
Bumps [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom ) from 2.18.5 to 2.18.6.
- [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.18.5...jackson-bom-2.18.6 )
---
updated-dependencies:
- dependency-name: com.fasterxml.jackson:jackson-bom
dependency-version: 2.18.6
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-23 08:12:09 -06:00
d62cce5bfb
Bump com.fasterxml.jackson:jackson-bom from 2.21.0 to 2.21.1
...
Bumps [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom ) from 2.21.0 to 2.21.1.
- [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.21.0...jackson-bom-2.21.1 )
---
updated-dependencies:
- dependency-name: com.fasterxml.jackson:jackson-bom
dependency-version: 2.21.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-23 03:19:50 +00:00
eca68b6cb3
Bump org.seleniumhq.selenium:selenium-java from 4.40.0 to 4.41.0
...
Bumps [org.seleniumhq.selenium:selenium-java](https://github.com/SeleniumHQ/selenium ) from 4.40.0 to 4.41.0.
- [Release notes](https://github.com/SeleniumHQ/selenium/releases )
- [Commits](https://github.com/SeleniumHQ/selenium/compare/selenium-4.40.0...selenium-4.41.0 )
---
updated-dependencies:
- dependency-name: org.seleniumhq.selenium:selenium-java
dependency-version: 4.41.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-23 03:18:09 +00:00
3e60eeb74c
Bump org.hibernate.orm:hibernate-core from 7.2.4.Final to 7.2.5.Final
...
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm ) from 7.2.4.Final to 7.2.5.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases )
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.2.5/changelog.txt )
- [Commits](https://github.com/hibernate/hibernate-orm/compare/7.2.4...7.2.5 )
---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
dependency-version: 7.2.5.Final
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-23 03:17:25 +00:00
21978cab22
Fix Build Errors for Improve AOT RuntimeHits
...
- Saml2RuntimeHints consistently uses String in separate method for
to ensure no classpath issues
- Fix Whitespace/Checkstyle
- Add Missing Nullability Annotations
2026-02-20 17:28:35 -06:00
2dd2863550
aot improvements
...
Signed-off-by: Josh Long <54473+joshlong@users.noreply.github.com >
2026-02-20 17:28:35 -06:00
1fdfd45782
Bump spring-io/spring-security-release-tools/.github/workflows/test.yml
...
Bumps [spring-io/spring-security-release-tools/.github/workflows/test.yml](https://github.com/spring-io/spring-security-release-tools ) from 1.0.13 to 1.0.14.
- [Release notes](https://github.com/spring-io/spring-security-release-tools/releases )
- [Changelog](https://github.com/spring-io/spring-security-release-tools/blob/main/RELEASE.adoc )
- [Commits](https://github.com/spring-io/spring-security-release-tools/compare/7d42d82298553f123a9dad622e0eac725aaf52ef...729fed56d42122f88583aff1be35c0800b7d77e9 )
---
updated-dependencies:
- dependency-name: spring-io/spring-security-release-tools/.github/workflows/test.yml
dependency-version: 1.0.14
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-20 09:42:07 -06:00
0dc1aa1126
Ensure tests clear AuthorizationServerContextHolder
2026-02-19 15:20:44 -06:00
3cc707621f
Prevent execution of scheduled GitHub Actions on forks
...
Signed-off-by: Stefano Cordio <stefano.cordio@gmail.com >
2026-02-19 14:41:12 -06:00
f8ac095d48
Add nullability contract to PasswordEncoder#encode implementations
...
Signed-off-by: Stefano Cordio <stefano.cordio@gmail.com >AbstractValidatingPasswordEncoder.java
2026-02-19 14:36:48 -06:00
d65625e399
Update BCryptPasswordEncoder example in password-storage.adoc
...
Replaces the usage of BCryptPasswordEncoder with
BcryptPassword4jPasswordEncoder in documentation samples.
Signed-off-by: Chen He <nidhogg55555@gmail.com >
2026-02-19 14:29:53 -06:00
18068c9099
fix compile warning in spring-security-test
...
Signed-off-by: Minu Kim <kmw106933@naver.com >
2026-02-19 14:26:20 -06:00
a539f056f7
Add javadoc-warnings-error
...
Closes gh-18452
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com >
2026-02-19 13:48:28 -06:00
2b04177151
Merge branch '7.0.x'
2026-02-19 13:30:21 -06:00
a4a6e9124c
Merge branch '6.5.x' into 7.0.x
2026-02-19 13:30:13 -06:00
b21159f453
Bump org.junit:junit-bom from 6.0.2 to 6.0.3
2026-02-19 13:29:42 -06:00
6f7c8cb352
Bump org-apache-maven-resolver from 1.9.25 to 1.9.26
2026-02-19 13:29:36 -06:00
5973a66bb1
Bump ch.qos.logback:logback-classic from 1.5.29 to 1.5.32
2026-02-19 13:29:30 -06:00
3e3eeda560
Bump ch.qos.logback:logback-classic from 1.5.29 to 1.5.32
2026-02-19 13:28:49 -06:00
cc6a005aa5
Add InetAddressMatcher
...
Co-authored-by: Gábor Vaspöri <gabor.vaspori@gmail.com >
Co-authored-by: Kian Jamali <kianjamali123@gmail.com >
Co-authored-by: Rossen Stoyanchev <rstoyanchev@users.noreply.github.com >
2026-02-19 11:44:19 -06:00
d4589c0fcb
Merge branch '7.0.x'
2026-02-19 11:00:16 -06:00
e2486a2590
Bump org.springframework:spring-framework-bom from 7.0.4 to 7.0.5
...
Bumps [org.springframework:spring-framework-bom](https://github.com/spring-projects/spring-framework ) from 7.0.4 to 7.0.5.
- [Release notes](https://github.com/spring-projects/spring-framework/releases )
- [Commits](https://github.com/spring-projects/spring-framework/compare/v7.0.4...v7.0.5 )
---
updated-dependencies:
- dependency-name: org.springframework:spring-framework-bom
dependency-version: 7.0.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-19 10:58:10 -06:00
dbf7f4cfe5
Remove unused @Nullable
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com >
2026-02-19 10:56:54 -06:00
f27738c1f8
Bump org.springframework:spring-framework-bom from 7.0.4 to 7.0.5
...
Bumps [org.springframework:spring-framework-bom](https://github.com/spring-projects/spring-framework ) from 7.0.4 to 7.0.5.
- [Release notes](https://github.com/spring-projects/spring-framework/releases )
- [Commits](https://github.com/spring-projects/spring-framework/compare/v7.0.4...v7.0.5 )
---
updated-dependencies:
- dependency-name: org.springframework:spring-framework-bom
dependency-version: 7.0.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-19 03:18:04 +00:00
8d76ae0844
Document multipart CSRF header option
...
Closes gh-4265
Signed-off-by: wonderfulrosemari <whwlsgur1419@naver.com >
2026-02-19 02:07:25 +09:00
73b055baa9
Bump org-opensaml5 from 5.2.0 to 5.2.1
...
Bumps `org-opensaml5` from 5.2.0 to 5.2.1.
Updates `org.opensaml:opensaml-saml-api` from 5.2.0 to 5.2.1
Updates `org.opensaml:opensaml-saml-impl` from 5.2.0 to 5.2.1
---
updated-dependencies:
- dependency-name: org.opensaml:opensaml-saml-api
dependency-version: 5.2.1
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.opensaml:opensaml-saml-impl
dependency-version: 5.2.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-18 03:15:22 +00:00
5194826606
implement single-line RSA key support
...
Signed-off-by: earlgrey02 <san06036@naver.com >
2026-02-17 17:29:04 -07:00
fc48088759
Polish
...
- Add @since version
- Change variable name to match method name
Issue gh-18623
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-02-17 17:19:42 -07:00
d528be38bb
Add postProcessor to Introspector Builder
...
Closes gh-18623
Signed-off-by: itsmevichu <vishnutheep@gmail.com >
2026-02-17 17:19:42 -07:00
da0cd0bc68
Remove unused import
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com >
2026-02-17 16:59:55 -07:00
410812c5bc
Reduce Diff Size
...
This commit reorders the originally changed boolean logic so that it returns
false early, as it did before. This allows the change to remain small and also
keeps the most complex logical statements outside of the if statement.
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-02-17 16:59:55 -07:00
329d9e2dfd
Revert code
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com >
2026-02-17 16:59:55 -07:00
dc8ed8b168
Fix checkstyle
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com >
2026-02-17 16:59:55 -07:00
17933ddab3
Resolve feedback
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com >
2026-02-17 16:59:55 -07:00
deb6416c93
Fix checkstyle
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com >
2026-02-17 16:59:55 -07:00
9323775c5f
Update javadoc and apply StringUtils#hasLength
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com >
2026-02-17 16:59:55 -07:00
4cc5f543ab
Add author
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com >
2026-02-17 16:59:55 -07:00
67bc1d8d4a
Polish some methods
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com >
2026-02-17 16:59:55 -07:00
17b5cdde55
Remove redundant check and exception
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com >
2026-02-17 16:59:55 -07:00
e91b098c7c
Update javadoc
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com >
2026-02-17 16:59:55 -07:00
21bef947b0
Use String#isEmpty
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com >
2026-02-17 16:59:55 -07:00
6fcca39500
Mark CsrfTokenRequestAttributeHandler#setCsrfRequestAttributeName as Nullable
...
Closes: gh-18617
Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com >
2026-02-17 16:57:15 -07:00
544f635e9b
Polish gh-17246
2026-02-17 16:35:57 -05:00
e4dcffae8a
Ensure ID Token is updated after refresh token (Reactive)
...
Closes gh-17188
Signed-off-by: Evgeniy Cheban <mister.cheban@gmail.com >
2026-02-17 14:38:15 -05:00
f52f097a4d
Bump ch.qos.logback:logback-classic from 1.5.31 to 1.5.32
...
Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback ) from 1.5.31 to 1.5.32.
- [Release notes](https://github.com/qos-ch/logback/releases )
- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.31...v_1.5.32 )
---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-classic
dependency-version: 1.5.32
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-17 03:16:46 +00:00
1cd145d026
Bump org-apache-maven-resolver from 1.9.25 to 1.9.26
...
Bumps `org-apache-maven-resolver` from 1.9.25 to 1.9.26.
Updates `org.apache.maven.resolver:maven-resolver-connector-basic` from 1.9.25 to 1.9.26
- [Release notes](https://github.com/apache/maven-resolver/releases )
- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-1.9.25...maven-resolver-1.9.26 )
Updates `org.apache.maven.resolver:maven-resolver-impl` from 1.9.25 to 1.9.26
- [Release notes](https://github.com/apache/maven-resolver/releases )
- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-1.9.25...maven-resolver-1.9.26 )
Updates `org.apache.maven.resolver:maven-resolver-transport-http` from 1.9.25 to 1.9.26
---
updated-dependencies:
- dependency-name: org.apache.maven.resolver:maven-resolver-connector-basic
dependency-version: 1.9.26
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.apache.maven.resolver:maven-resolver-impl
dependency-version: 1.9.26
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.apache.maven.resolver:maven-resolver-transport-http
dependency-version: 1.9.26
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-17 03:16:31 +00:00
3c55f057b1
Bump ch.qos.logback:logback-classic from 1.5.29 to 1.5.32
...
Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback ) from 1.5.29 to 1.5.32.
- [Release notes](https://github.com/qos-ch/logback/releases )
- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.29...v_1.5.32 )
---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-classic
dependency-version: 1.5.32
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-17 03:10:25 +00:00
Robert Winch