33bd1abb9d
Bump ch.qos.logback:logback-classic from 1.5.32 to 1.5.34
...
Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback ) from 1.5.32 to 1.5.34.
- [Release notes](https://github.com/qos-ch/logback/releases )
- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.32...v_1.5.34 )
---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-classic
dependency-version: 1.5.34
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-09 05:23:13 -04:00
ea62b200f7
Bump actions/checkout from 6.0.2 to 6.0.3
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.2 to 6.0.3.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...df4cb1c069e1874edd31b4311f1884172cec0e10 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 6.0.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-09 05:22:11 -04:00
8f0c077fc7
Bump org.springframework:spring-framework-bom from 7.0.7 to 7.0.8
...
Bumps [org.springframework:spring-framework-bom](https://github.com/spring-projects/spring-framework ) from 7.0.7 to 7.0.8.
- [Release notes](https://github.com/spring-projects/spring-framework/releases )
- [Commits](https://github.com/spring-projects/spring-framework/compare/v7.0.7...v7.0.8 )
---
updated-dependencies:
- dependency-name: org.springframework:spring-framework-bom
dependency-version: 7.0.8
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-09 05:19:47 -04:00
430b9bb8c6
Bump org.springframework.ldap:spring-ldap-core from 4.0.3 to 4.0.4
...
Bumps [org.springframework.ldap:spring-ldap-core](https://github.com/spring-projects/spring-ldap ) from 4.0.3 to 4.0.4.
- [Release notes](https://github.com/spring-projects/spring-ldap/releases )
- [Changelog](https://github.com/spring-projects/spring-ldap/blob/main/changelog.txt )
- [Commits](https://github.com/spring-projects/spring-ldap/compare/4.0.3...4.0.4 )
---
updated-dependencies:
- dependency-name: org.springframework.ldap:spring-ldap-core
dependency-version: 4.0.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-09 05:19:11 -04:00
7fc97c6ee2
Select Most Specific RDN in X500 Principal Extractor
...
SubjectX500PrincipalExtractor now returns the left-most, most-specific
matching RDN value, matching both convention and
SubjectDnX509PrincipalExtractor. Since LdapName#getRdns lists RDNs
most-significant first, the extractor reads them in reverse so that a
subject with more than one matching attribute (e.g. two CNs) resolves to
the most specific value.
Closes gh-19254
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-06-01 14:05:58 -06:00
3f1a794cd9
Revert "Add Test Against Snapshots"
...
This reverts commit c5de4096b4
2026-05-27 16:42:53 -04:00
c5de4096b4
Add Test Against Snapshots
...
This commit uses a GH workflow that uses JDK 17 and tests
against snapshot versions of various upstream OSS projects.
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-27 16:12:29 -04:00
95d375c8d8
Partial revert fe2e52f646
...
Remove test against snapshots
Related gh-17558
Signed-off-by: Joe Grandja <10884212+jgrandja@users.noreply.github.com >
2026-05-27 11:25:11 -04:00
b486d2695a
Update to Micrometer 1.16.5
...
Closes gh-19225
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-26 16:16:16 -06:00
8b34113c2a
Merge branch '6.5.x' into 7.0.x
2026-05-26 15:27:35 -06:00
fe2e52f646
Add Micrometer Version Override
...
Closes gh-19187
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-26 15:18:01 -06:00
0ea87ca3bf
Upgrade Micrometer to 1.15.11
...
Closes gh-19224
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-26 15:17:57 -06:00
71fd23429c
Merge branch '6.5.x' into 7.0.x
2026-05-22 22:27:27 -06:00
85514a9b34
Update NodeJS to 24.15
...
This commit declares a NodeJS value whereas previously,
Antora would use the latest LTS version. When it updated to
Node 24.16, site production stopped, possibly due to
https://github.com/nodejs/node/commit/e95570c054 .
Either way, it is helpful to have a pinned version in order
to stabilize builds, allowing us to update it in an orderly
fashion like other dependencies.
Issue gh-19206
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-22 22:27:00 -06:00
d039e0191f
Move Doc Sample to Correct Package
...
Issue gh-19128
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-22 22:05:29 -06:00
cfdadfea01
Apply Builder Bean Only to Application Endpoints
...
A published PathPatternRequestMatcher.Builder bean is intended to align
application endpoint matchers, which commonly are from the same servlet.
This commit ensures that this bean is used by securityMatcher(s),
authorizeHttpRequests, and WebSecurity#ignoring, which target
application endpoints typically served by servlets.
This commit also adds tests ensuring that the bean is not applied to filter-chain
security endpoints such as those configured by formLogin, logout,
oneTimeTokenLogin, OAuth 2.0 Login, and SAML 2.0 Login, since
these endpoints are, by default, handled by filters independent from
any target servlet and servlet path.
Closes gh-19128
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-22 21:36:19 -06:00
f70aa75445
Merge branch '6.5.x' into 7.0.x
2026-05-21 12:55:40 -06:00
86e0f1341e
Bump com.fasterxml.jackson:jackson-bom from 2.18.6 to 2.18.7
...
Bumps [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom ) from 2.18.6 to 2.18.7.
- [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.18.6...jackson-bom-2.18.7 )
---
updated-dependencies:
- dependency-name: com.fasterxml.jackson:jackson-bom
dependency-version: 2.18.7
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-21 12:38:00 -06:00
cea6618265
Bump org.hibernate.orm:hibernate-core from 6.6.49.Final to 6.6.50.Final
...
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm ) from 6.6.49.Final to 6.6.50.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases )
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/6.6.50/changelog.txt )
- [Commits](https://github.com/hibernate/hibernate-orm/compare/6.6.49...6.6.50 )
---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
dependency-version: 6.6.50.Final
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-21 12:36:57 -06:00
5bf8f641f1
Bump spring-io/spring-gradle-build-action from 2.0.5 to 2.0.6
...
Bumps [spring-io/spring-gradle-build-action](https://github.com/spring-io/spring-gradle-build-action ) from 2.0.5 to 2.0.6.
- [Release notes](https://github.com/spring-io/spring-gradle-build-action/releases )
- [Commits](https://github.com/spring-io/spring-gradle-build-action/compare/efc55f07f4dfa22f2afd97f9ea1be4212eeed737...c8668747d7c264864c8c7f7026d0d277d14a78dc )
---
updated-dependencies:
- dependency-name: spring-io/spring-gradle-build-action
dependency-version: 2.0.6
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-21 12:36:52 -06:00
8b9f556d8f
Bump gradle-wrapper from 8.14.4 to 8.14.5
...
Bumps [gradle-wrapper](https://github.com/gradle/gradle ) from 8.14.4 to 8.14.5.
- [Release notes](https://github.com/gradle/gradle/releases )
- [Commits](https://github.com/gradle/gradle/compare/v8.14.4...v8.14.5 )
---
updated-dependencies:
- dependency-name: gradle-wrapper
dependency-version: 8.14.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-21 12:36:46 -06:00
d9b8a8ec54
Bump spring-io/spring-release-actions from 0.0.4 to 0.0.5
...
Bumps [spring-io/spring-release-actions](https://github.com/spring-io/spring-release-actions ) from 0.0.4 to 0.0.5.
- [Release notes](https://github.com/spring-io/spring-release-actions/releases )
- [Commits](https://github.com/spring-io/spring-release-actions/compare/2420148725bebe44bd59a575a9b1961ca4459b0b...a1f321783a0769dd2aea4fad6c2ae2f95a52b885 )
---
updated-dependencies:
- dependency-name: spring-io/spring-release-actions
dependency-version: 0.0.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-21 12:36:42 -06:00
4e04c266be
Bump antora from 3.2.0-alpha.11 to 3.2.0-alpha.12 in /docs
...
---
updated-dependencies:
- dependency-name: antora
dependency-version: 3.2.0-alpha.12
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-21 12:36:37 -06:00
dc5c65eaf1
Bump com.webauthn4j:webauthn4j-core
...
Bumps [com.webauthn4j:webauthn4j-core](https://github.com/webauthn4j/webauthn4j ) from 0.31.3.RELEASE to 0.31.5.RELEASE.
- [Release notes](https://github.com/webauthn4j/webauthn4j/releases )
- [Commits](https://github.com/webauthn4j/webauthn4j/compare/0.31.3.RELEASE...0.31.5.RELEASE )
---
updated-dependencies:
- dependency-name: com.webauthn4j:webauthn4j-core
dependency-version: 0.31.5.RELEASE
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-21 12:30:34 -06:00
0353616be3
Bump org.slf4j:slf4j-api from 2.0.17 to 2.0.18
...
Bumps org.slf4j:slf4j-api from 2.0.17 to 2.0.18.
---
updated-dependencies:
- dependency-name: org.slf4j:slf4j-api
dependency-version: 2.0.18
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-21 12:29:55 -06:00
47853e1314
Bump gradle-wrapper from 8.14.4 to 8.14.5
...
Bumps [gradle-wrapper](https://github.com/gradle/gradle ) from 8.14.4 to 8.14.5.
- [Release notes](https://github.com/gradle/gradle/releases )
- [Commits](https://github.com/gradle/gradle/compare/v8.14.4...v8.14.5 )
---
updated-dependencies:
- dependency-name: gradle-wrapper
dependency-version: 8.14.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-21 12:18:05 -06:00
90e1658afe
Bump spring-io/spring-release-actions from 0.0.4 to 0.0.5
...
Bumps [spring-io/spring-release-actions](https://github.com/spring-io/spring-release-actions ) from 0.0.4 to 0.0.5.
- [Release notes](https://github.com/spring-io/spring-release-actions/releases )
- [Commits](https://github.com/spring-io/spring-release-actions/compare/2420148725bebe44bd59a575a9b1961ca4459b0b...a1f321783a0769dd2aea4fad6c2ae2f95a52b885 )
---
updated-dependencies:
- dependency-name: spring-io/spring-release-actions
dependency-version: 0.0.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-21 12:18:00 -06:00
e1d94d1e06
Bump antora from 3.2.0-alpha.11 to 3.2.0-alpha.12 in /docs
...
---
updated-dependencies:
- dependency-name: antora
dependency-version: 3.2.0-alpha.12
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-21 12:17:55 -06:00
a07c67a365
Bump org.apache.maven:maven-resolver-provider from 3.9.15 to 3.9.16
...
Bumps org.apache.maven:maven-resolver-provider from 3.9.15 to 3.9.16.
---
updated-dependencies:
- dependency-name: org.apache.maven:maven-resolver-provider
dependency-version: 3.9.16
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-21 12:17:50 -06:00
16cb219e4a
Bump org-bouncycastle from 1.80 to 1.80.2
...
Bumps `org-bouncycastle` from 1.80 to 1.80.2.
Updates `org.bouncycastle:bcpkix-jdk18on` from 1.80 to 1.80.2
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html )
- [Commits](https://github.com/bcgit/bc-java/commits )
Updates `org.bouncycastle:bcprov-jdk18on` from 1.80 to 1.80.2
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html )
- [Commits](https://github.com/bcgit/bc-java/commits )
---
updated-dependencies:
- dependency-name: org.bouncycastle:bcpkix-jdk18on
dependency-version: 1.80.2
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.bouncycastle:bcprov-jdk18on
dependency-version: 1.80.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-21 12:10:16 -06:00
944149ba71
Merge branch '6.5.x' into 7.0.x
2026-05-21 10:37:30 -06:00
9b14465243
Align Assertions in Builder with Deprecated Constructor
...
The deprecated (introspectionUri, clientId, clientSecret) constructors
that the builders replaced explicitly asserted non-null clientId and
clientSecret. Bring the builder's build() in line with that contract by
asserting at the API boundary rather than relying on downstream classes
to enforce it.
Closes gh-19201
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-21 10:36:10 -06:00
fdc0fd23df
Merge branch '6.5.x' into 7.0.x
...
Closes gh-19137
2026-04-29 09:03:43 -06:00
931dfbe8e7
Merge remote-tracking branch 'origin/6.5.x' into 7.0.x
2026-04-29 09:01:34 -06:00
b075f0df02
Decode percent-encoded values
...
Closes gh-19136
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-04-29 08:57:16 -06:00
8720a282ce
Next development version
2026-04-20 20:32:11 +00:00
53bc6a7796
Fix Formatting
...
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-04-20 13:52:41 -06:00
aed95aa2b1
Fix Formatting
...
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-04-20 13:45:45 -06:00
6343002b32
Next development version
2026-04-20 18:55:26 +00:00
7b57a4a3bb
Release 7.0.5
2026-04-20 17:54:57 +00:00
0a9d4dc8fc
Release 6.5.10
2026-04-20 17:54:21 +00:00
11047960ad
Merge branch '6.5.x' into 7.0.x
2026-04-20 11:49:27 -06:00
3d4e20597a
Merge remote-tracking branch 'oss/6.5.x' into 6.5.x
2026-04-20 11:49:17 -06:00
4c40eeb89e
Merge remote-tracking branch 'oss/6.5.x' into 7.0.x
2026-04-20 11:31:32 -06:00
ff1e925c08
Merge remote-tracking branch 'oss/7.0.x' into 7.0.x
2026-04-20 11:31:15 -06:00
7b309cf271
Bump org.springframework.data:spring-data-bom from 2025.1.4 to 2025.1.5
...
Bumps [org.springframework.data:spring-data-bom](https://github.com/spring-projects/spring-data-bom ) from 2025.1.4 to 2025.1.5.
- [Release notes](https://github.com/spring-projects/spring-data-bom/releases )
- [Commits](https://github.com/spring-projects/spring-data-bom/compare/2025.1.4...2025.1.5 )
---
updated-dependencies:
- dependency-name: org.springframework.data:spring-data-bom
dependency-version: 2025.1.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-20 11:29:49 -06:00
51a1f88ddf
Bump com.webauthn4j:webauthn4j-core
...
Bumps [com.webauthn4j:webauthn4j-core](https://github.com/webauthn4j/webauthn4j ) from 0.31.2.RELEASE to 0.31.3.RELEASE.
- [Release notes](https://github.com/webauthn4j/webauthn4j/releases )
- [Commits](https://github.com/webauthn4j/webauthn4j/compare/0.31.2.RELEASE...0.31.3.RELEASE )
---
updated-dependencies:
- dependency-name: com.webauthn4j:webauthn4j-core
dependency-version: 0.31.3.RELEASE
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-20 11:29:39 -06:00
762d8f19e5
Bump org.springframework:spring-framework-bom from 7.0.6 to 7.0.7
...
Bumps [org.springframework:spring-framework-bom](https://github.com/spring-projects/spring-framework ) from 7.0.6 to 7.0.7.
- [Release notes](https://github.com/spring-projects/spring-framework/releases )
- [Commits](https://github.com/spring-projects/spring-framework/compare/v7.0.6...v7.0.7 )
---
updated-dependencies:
- dependency-name: org.springframework:spring-framework-bom
dependency-version: 7.0.7
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-20 11:28:58 -06:00
c9d623966f
Bump org.apache.maven:maven-resolver-provider from 3.9.14 to 3.9.15
...
Bumps org.apache.maven:maven-resolver-provider from 3.9.14 to 3.9.15.
---
updated-dependencies:
- dependency-name: org.apache.maven:maven-resolver-provider
dependency-version: 3.9.15
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-20 11:28:20 -06:00
81bd52ae48
Bump org.hibernate.orm:hibernate-core from 6.6.48.Final to 6.6.49.Final
...
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm ) from 6.6.48.Final to 6.6.49.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases )
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/6.6.49/changelog.txt )
- [Commits](https://github.com/hibernate/hibernate-orm/compare/6.6.48...6.6.49 )
---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
dependency-version: 6.6.49.Final
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-20 11:27:51 -06:00
dependabot[bot]