5c932b222e
Merge branch '7.0.x'
2026-05-27 16:44:01 -04:00
b844b12dc4
Revert "Add Test Against Snapshot"
...
This reverts commit 6241327862
2026-05-27 16:43:10 -04:00
3f1a794cd9
Revert "Add Test Against Snapshots"
...
This reverts commit c5de4096b4
2026-05-27 16:42:53 -04:00
6241327862
Add Test Against Snapshots
...
This commit uses a GH workflow to use
JDK 25 to test against snapshot versions
of various dependencies
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-27 16:18:01 -04:00
6833fc4152
Merge branch '7.0.x'
2026-05-27 16:12:42 -04:00
c5de4096b4
Add Test Against Snapshots
...
This commit uses a GH workflow that uses JDK 17 and tests
against snapshot versions of various upstream OSS projects.
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-27 16:12:29 -04:00
2ddb365607
Merge branch '7.0.x'
2026-05-27 11:29:24 -04:00
95d375c8d8
Partial revert fe2e52f646
...
Remove test against snapshots
Related gh-17558
Signed-off-by: Joe Grandja <10884212+jgrandja@users.noreply.github.com >
2026-05-27 11:25:11 -04:00
98f5b363ed
Add micrometerVersion to check-snapshots.yml
...
Signed-off-by: Joe Grandja <10884212+jgrandja@users.noreply.github.com >
2026-05-27 10:06:43 -04:00
4300a7fccb
Bump org.hibernate.orm:hibernate-core from 7.3.6.Final to 7.4.0.Final
...
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm ) from 7.3.6.Final to 7.4.0.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases )
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.4.0/changelog.txt )
- [Commits](https://github.com/hibernate/hibernate-orm/compare/7.3.6...7.4.0 )
---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
dependency-version: 7.4.0.Final
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-27 05:06:16 +00:00
0a321da396
Merge branch '7.0.x'
2026-05-26 16:16:36 -06:00
b486d2695a
Update to Micrometer 1.16.5
...
Closes gh-19225
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-26 16:16:16 -06:00
c90acad0c2
Merge branch '7.0.x'
2026-05-26 15:31:13 -06:00
8b34113c2a
Merge branch '6.5.x' into 7.0.x
2026-05-26 15:27:35 -06:00
fe2e52f646
Add Micrometer Version Override
...
Closes gh-19187
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-26 15:18:01 -06:00
0ea87ca3bf
Upgrade Micrometer to 1.15.11
...
Closes gh-19224
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-26 15:17:57 -06:00
6555199ff7
Bump org.hibernate.orm:hibernate-core from 7.3.5.Final to 7.3.6.Final
...
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm ) from 7.3.5.Final to 7.3.6.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases )
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.3.6/changelog.txt )
- [Commits](https://github.com/hibernate/hibernate-orm/compare/7.3.5...7.3.6 )
---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
dependency-version: 7.3.6.Final
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-25 03:38:40 +00:00
02725ed7fd
Merge branch '7.0.x'
2026-05-22 22:28:06 -06:00
71fd23429c
Merge branch '6.5.x' into 7.0.x
2026-05-22 22:27:27 -06:00
85514a9b34
Update NodeJS to 24.15
...
This commit declares a NodeJS value whereas previously,
Antora would use the latest LTS version. When it updated to
Node 24.16, site production stopped, possibly due to
https://github.com/nodejs/node/commit/e95570c054 .
Either way, it is helpful to have a pinned version in order
to stabilize builds, allowing us to update it in an orderly
fashion like other dependencies.
Issue gh-19206
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-22 22:27:00 -06:00
6a029fd853
Merge branch '7.0.x'
2026-05-22 22:05:47 -06:00
d039e0191f
Move Doc Sample to Correct Package
...
Issue gh-19128
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-22 22:05:29 -06:00
78685cdd77
Merge branch '7.0.x'
2026-05-22 21:37:30 -06:00
cfdadfea01
Apply Builder Bean Only to Application Endpoints
...
A published PathPatternRequestMatcher.Builder bean is intended to align
application endpoint matchers, which commonly are from the same servlet.
This commit ensures that this bean is used by securityMatcher(s),
authorizeHttpRequests, and WebSecurity#ignoring, which target
application endpoints typically served by servlets.
This commit also adds tests ensuring that the bean is not applied to filter-chain
security endpoints such as those configured by formLogin, logout,
oneTimeTokenLogin, OAuth 2.0 Login, and SAML 2.0 Login, since
these endpoints are, by default, handled by filters independent from
any target servlet and servlet path.
Closes gh-19128
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-22 21:36:19 -06:00
4942459250
Update to nimbus-jose-jwt 10.9
...
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-21 19:23:26 +00:00
22d99d20ae
Bump com.nimbusds:oauth2-oidc-sdk from 11.37 to 11.37.2
...
Bumps [com.nimbusds:oauth2-oidc-sdk](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions ) from 11.37 to 11.37.2.
- [Changelog](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/src/master/CHANGELOG.txt )
- [Commits](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/branches/compare/11.37.2..11.37 )
---
updated-dependencies:
- dependency-name: com.nimbusds:oauth2-oidc-sdk
dependency-version: 11.37.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-21 19:23:26 +00:00
0c6e069454
Merge branch '7.0.x'
2026-05-21 12:55:43 -06:00
f70aa75445
Merge branch '6.5.x' into 7.0.x
2026-05-21 12:55:40 -06:00
86e0f1341e
Bump com.fasterxml.jackson:jackson-bom from 2.18.6 to 2.18.7
...
Bumps [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom ) from 2.18.6 to 2.18.7.
- [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.18.6...jackson-bom-2.18.7 )
---
updated-dependencies:
- dependency-name: com.fasterxml.jackson:jackson-bom
dependency-version: 2.18.7
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-21 12:38:00 -06:00
cea6618265
Bump org.hibernate.orm:hibernate-core from 6.6.49.Final to 6.6.50.Final
...
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm ) from 6.6.49.Final to 6.6.50.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases )
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/6.6.50/changelog.txt )
- [Commits](https://github.com/hibernate/hibernate-orm/compare/6.6.49...6.6.50 )
---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
dependency-version: 6.6.50.Final
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-21 12:36:57 -06:00
5bf8f641f1
Bump spring-io/spring-gradle-build-action from 2.0.5 to 2.0.6
...
Bumps [spring-io/spring-gradle-build-action](https://github.com/spring-io/spring-gradle-build-action ) from 2.0.5 to 2.0.6.
- [Release notes](https://github.com/spring-io/spring-gradle-build-action/releases )
- [Commits](https://github.com/spring-io/spring-gradle-build-action/compare/efc55f07f4dfa22f2afd97f9ea1be4212eeed737...c8668747d7c264864c8c7f7026d0d277d14a78dc )
---
updated-dependencies:
- dependency-name: spring-io/spring-gradle-build-action
dependency-version: 2.0.6
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-21 12:36:52 -06:00
8b9f556d8f
Bump gradle-wrapper from 8.14.4 to 8.14.5
...
Bumps [gradle-wrapper](https://github.com/gradle/gradle ) from 8.14.4 to 8.14.5.
- [Release notes](https://github.com/gradle/gradle/releases )
- [Commits](https://github.com/gradle/gradle/compare/v8.14.4...v8.14.5 )
---
updated-dependencies:
- dependency-name: gradle-wrapper
dependency-version: 8.14.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-21 12:36:46 -06:00
d9b8a8ec54
Bump spring-io/spring-release-actions from 0.0.4 to 0.0.5
...
Bumps [spring-io/spring-release-actions](https://github.com/spring-io/spring-release-actions ) from 0.0.4 to 0.0.5.
- [Release notes](https://github.com/spring-io/spring-release-actions/releases )
- [Commits](https://github.com/spring-io/spring-release-actions/compare/2420148725bebe44bd59a575a9b1961ca4459b0b...a1f321783a0769dd2aea4fad6c2ae2f95a52b885 )
---
updated-dependencies:
- dependency-name: spring-io/spring-release-actions
dependency-version: 0.0.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-21 12:36:42 -06:00
4e04c266be
Bump antora from 3.2.0-alpha.11 to 3.2.0-alpha.12 in /docs
...
---
updated-dependencies:
- dependency-name: antora
dependency-version: 3.2.0-alpha.12
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-21 12:36:37 -06:00
a9eae04444
Merge branch '7.0.x'
2026-05-21 12:32:28 -06:00
dc5c65eaf1
Bump com.webauthn4j:webauthn4j-core
...
Bumps [com.webauthn4j:webauthn4j-core](https://github.com/webauthn4j/webauthn4j ) from 0.31.3.RELEASE to 0.31.5.RELEASE.
- [Release notes](https://github.com/webauthn4j/webauthn4j/releases )
- [Commits](https://github.com/webauthn4j/webauthn4j/compare/0.31.3.RELEASE...0.31.5.RELEASE )
---
updated-dependencies:
- dependency-name: com.webauthn4j:webauthn4j-core
dependency-version: 0.31.5.RELEASE
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-21 12:30:34 -06:00
0353616be3
Bump org.slf4j:slf4j-api from 2.0.17 to 2.0.18
...
Bumps org.slf4j:slf4j-api from 2.0.17 to 2.0.18.
---
updated-dependencies:
- dependency-name: org.slf4j:slf4j-api
dependency-version: 2.0.18
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-21 12:29:55 -06:00
4d66130d32
Add in:build Label to Dependabot PRs
...
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-21 12:21:39 -06:00
47853e1314
Bump gradle-wrapper from 8.14.4 to 8.14.5
...
Bumps [gradle-wrapper](https://github.com/gradle/gradle ) from 8.14.4 to 8.14.5.
- [Release notes](https://github.com/gradle/gradle/releases )
- [Commits](https://github.com/gradle/gradle/compare/v8.14.4...v8.14.5 )
---
updated-dependencies:
- dependency-name: gradle-wrapper
dependency-version: 8.14.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-21 12:18:05 -06:00
90e1658afe
Bump spring-io/spring-release-actions from 0.0.4 to 0.0.5
...
Bumps [spring-io/spring-release-actions](https://github.com/spring-io/spring-release-actions ) from 0.0.4 to 0.0.5.
- [Release notes](https://github.com/spring-io/spring-release-actions/releases )
- [Commits](https://github.com/spring-io/spring-release-actions/compare/2420148725bebe44bd59a575a9b1961ca4459b0b...a1f321783a0769dd2aea4fad6c2ae2f95a52b885 )
---
updated-dependencies:
- dependency-name: spring-io/spring-release-actions
dependency-version: 0.0.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-21 12:18:00 -06:00
e1d94d1e06
Bump antora from 3.2.0-alpha.11 to 3.2.0-alpha.12 in /docs
...
---
updated-dependencies:
- dependency-name: antora
dependency-version: 3.2.0-alpha.12
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-21 12:17:55 -06:00
a07c67a365
Bump org.apache.maven:maven-resolver-provider from 3.9.15 to 3.9.16
...
Bumps org.apache.maven:maven-resolver-provider from 3.9.15 to 3.9.16.
---
updated-dependencies:
- dependency-name: org.apache.maven:maven-resolver-provider
dependency-version: 3.9.16
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-21 12:17:50 -06:00
16cb219e4a
Bump org-bouncycastle from 1.80 to 1.80.2
...
Bumps `org-bouncycastle` from 1.80 to 1.80.2.
Updates `org.bouncycastle:bcpkix-jdk18on` from 1.80 to 1.80.2
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html )
- [Commits](https://github.com/bcgit/bc-java/commits )
Updates `org.bouncycastle:bcprov-jdk18on` from 1.80 to 1.80.2
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html )
- [Commits](https://github.com/bcgit/bc-java/commits )
---
updated-dependencies:
- dependency-name: org.bouncycastle:bcpkix-jdk18on
dependency-version: 1.80.2
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.bouncycastle:bcprov-jdk18on
dependency-version: 1.80.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-21 12:10:16 -06:00
7c11ada795
Merge branch '7.0.x'
2026-05-21 10:48:51 -06:00
944149ba71
Merge branch '6.5.x' into 7.0.x
2026-05-21 10:37:30 -06:00
9b14465243
Align Assertions in Builder with Deprecated Constructor
...
The deprecated (introspectionUri, clientId, clientSecret) constructors
that the builders replaced explicitly asserted non-null clientId and
clientSecret. Bring the builder's build() in line with that contract by
asserting at the API boundary rather than relying on downstream classes
to enforce it.
Closes gh-19201
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-21 10:36:10 -06:00
aaaa9b98ec
Bump org.apereo.cas.client:cas-client-core from 4.1.0 to 4.1.1
...
Bumps [org.apereo.cas.client:cas-client-core](https://github.com/apereo/java-cas-client ) from 4.1.0 to 4.1.1.
- [Release notes](https://github.com/apereo/java-cas-client/releases )
- [Commits](https://github.com/apereo/java-cas-client/compare/cas-client-4.1.0...cas-client-4.1.1 )
---
updated-dependencies:
- dependency-name: org.apereo.cas.client:cas-client-core
dependency-version: 4.1.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-21 03:18:55 +00:00
43fe92911e
Bump org.junit:junit-bom from 6.0.3 to 6.1.0
...
Bumps [org.junit:junit-bom](https://github.com/junit-team/junit-framework ) from 6.0.3 to 6.1.0.
- [Release notes](https://github.com/junit-team/junit-framework/releases )
- [Commits](https://github.com/junit-team/junit-framework/compare/r6.0.3...r6.1.0 )
---
updated-dependencies:
- dependency-name: org.junit:junit-bom
dependency-version: 6.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-20 07:42:34 +00:00
5cc2f2e216
Bump org.hibernate.orm:hibernate-core from 7.3.4.Final to 7.3.5.Final
...
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm ) from 7.3.4.Final to 7.3.5.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases )
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.3.5/changelog.txt )
- [Commits](https://github.com/hibernate/hibernate-orm/compare/7.3.4...7.3.5 )
---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
dependency-version: 7.3.5.Final
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-18 03:44:35 +00:00
4b5607dbce
Bump org.apache.maven:maven-resolver-provider from 3.9.15 to 3.9.16
...
Bumps org.apache.maven:maven-resolver-provider from 3.9.15 to 3.9.16.
---
updated-dependencies:
- dependency-name: org.apache.maven:maven-resolver-provider
dependency-version: 3.9.16
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-18 03:43:40 +00:00
Josh Cummings