7526dfa694
Merge branch '7.1.x'
2026-09-03 15:42:38 -06:00
02f5f5a459
Merge branch '7.0.x' into 7.1.x
2026-09-03 15:42:29 -06:00
3dff446d18
Bump spring-io/spring-release-actions/get-todays-release-version
...
Bumps [spring-io/spring-release-actions/get-todays-release-version](https://github.com/spring-io/spring-release-actions ) from 0.0.5 to 0.0.6.
- [Release notes](https://github.com/spring-io/spring-release-actions/releases )
- [Commits](https://github.com/spring-io/spring-release-actions/compare/a1f321783a0769dd2aea4fad6c2ae2f95a52b885...1b8671612c3eb3d9b9763e2d7b66f1a80d00ee95 )
---
updated-dependencies:
- dependency-name: spring-io/spring-release-actions/get-todays-release-version
dependency-version: 0.0.6
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-03 14:39:30 -07:00
cc89707b03
Bump antora from 3.2.0-rc.2 to 3.2.0-rc.3 in /docs
...
Bumps [antora](https://gitlab.com/antora/antora ) from 3.2.0-rc.2 to 3.2.0-rc.3.
- [Changelog](https://gitlab.com/antora/antora/blob/main/CHANGELOG.adoc )
- [Commits](https://gitlab.com/antora/antora/compare/v3.2.0-rc.2...v3.2.0-rc.3 )
---
updated-dependencies:
- dependency-name: antora
dependency-version: 3.2.0-rc.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-03 14:38:41 -07:00
812ad9c547
Bump spring-io/spring-security-release-tools/.github/workflows/build.yml
...
Bumps [spring-io/spring-security-release-tools/.github/workflows/build.yml](https://github.com/spring-io/spring-security-release-tools ) from 1.0.15 to 1.0.17.
- [Release notes](https://github.com/spring-io/spring-security-release-tools/releases )
- [Changelog](https://github.com/spring-io/spring-security-release-tools/blob/main/RELEASE.adoc )
- [Commits](https://github.com/spring-io/spring-security-release-tools/compare/b92832ecbc7cbe969201e6beafbde0ee400cf095...3f6cc7ffc137ca160061749d5f34dc30d5f36986 )
---
updated-dependencies:
- dependency-name: spring-io/spring-security-release-tools/.github/workflows/build.yml
dependency-version: 1.0.17
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-03 14:38:08 -07:00
364c153e17
Bump spring-io/spring-release-actions/compute-next-version
...
Bumps [spring-io/spring-release-actions/compute-next-version](https://github.com/spring-io/spring-release-actions ) from 0.0.5 to 0.0.6.
- [Release notes](https://github.com/spring-io/spring-release-actions/releases )
- [Commits](https://github.com/spring-io/spring-release-actions/compare/a1f321783a0769dd2aea4fad6c2ae2f95a52b885...1b8671612c3eb3d9b9763e2d7b66f1a80d00ee95 )
---
updated-dependencies:
- dependency-name: spring-io/spring-release-actions/compute-next-version
dependency-version: 0.0.6
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-03 14:37:16 -07:00
39383ab970
Bump spring-io/spring-security-release-tools/.github/workflows/test.yml
...
Bumps [spring-io/spring-security-release-tools/.github/workflows/test.yml](https://github.com/spring-io/spring-security-release-tools ) from ed473b4dafba053c63a453d2d88a89df3b3e18b3 to 9ca0acea761aa79d71c78cc462048c49ed5c4230.
- [Release notes](https://github.com/spring-io/spring-security-release-tools/releases )
- [Changelog](https://github.com/spring-io/spring-security-release-tools/blob/main/RELEASE.adoc )
- [Commits](https://github.com/spring-io/spring-security-release-tools/compare/ed473b4dafba053c63a453d2d88a89df3b3e18b3...9ca0acea761aa79d71c78cc462048c49ed5c4230 )
---
updated-dependencies:
- dependency-name: spring-io/spring-security-release-tools/.github/workflows/test.yml
dependency-version: 9ca0acea761aa79d71c78cc462048c49ed5c4230
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-03 14:35:20 -07:00
8ef5bcd003
Fix typos in Javadocs
...
- Remove duplicate words
- Remove unnecessary parentheses
- Fix grammar
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com >
2026-09-03 14:34:29 -07:00
4193b73d47
Bump actions/setup-java from 5.7.0 to 6.0.0
...
Bumps [actions/setup-java](https://github.com/actions/setup-java ) from 5.7.0 to 6.0.0.
- [Release notes](https://github.com/actions/setup-java/releases )
- [Commits](https://github.com/actions/setup-java/compare/b6effb05e454b25005698d916606bdc6ffcbf961...dd06d9cba3e5552c54d9f8ea23572deb30010f7c )
---
updated-dependencies:
- dependency-name: actions/setup-java
dependency-version: 6.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-03 14:33:13 -07:00
4ce48297f6
Bump io.spring.gradle:spring-security-release-plugin
...
Bumps [io.spring.gradle:spring-security-release-plugin](https://github.com/spring-io/spring-security-release-tools ) from 1.0.15 to 1.0.17.
- [Release notes](https://github.com/spring-io/spring-security-release-tools/releases )
- [Changelog](https://github.com/spring-io/spring-security-release-tools/blob/main/RELEASE.adoc )
- [Commits](https://github.com/spring-io/spring-security-release-tools/compare/v1.0.15...v1.0.17 )
---
updated-dependencies:
- dependency-name: io.spring.gradle:spring-security-release-plugin
dependency-version: 1.0.17
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-03 14:32:07 -07:00
d09463b865
Merge branch '7.1.x'
...
Closes gh-19649
2026-09-03 15:28:33 -06:00
9989735a49
Merge branch '7.0.x' into 7.1.x
...
Closes gh-19648
2026-09-03 15:22:26 -06:00
c7be397a16
Merge branch '7.1.x'
...
# Conflicts:
# docs/modules/ROOT/pages/reactive/authentication/onetimetoken.adoc
# docs/modules/ROOT/pages/servlet/authentication/onetimetoken.adoc
2026-09-03 15:14:01 -06:00
02cc2e9d14
Fix TokenType Comparison Logic
...
Compare OAuth2AccessToken.TokenType using equals() instead of == in
BearerTokenAuthentication, since TokenType instances are not
guaranteed to be singletons and reference comparison can incorrectly
reject an otherwise-equal bearer token.
Closes gh-19377
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-09-03 14:06:08 -07:00
118e51d45e
Merge branch '7.0.x' into 7.1.x
2026-09-03 15:01:11 -06:00
27a76a67ae
Include code example for reactive onetimetoken
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com >
2026-09-03 14:00:44 -07:00
ff6cef0cd2
Include code example for servlet onetimetoken
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com >
2026-09-03 14:00:44 -07:00
2e52e1063a
Merge branch '7.1.x'
...
Closes gh-19646
2026-09-03 12:27:03 -06:00
801f890ed0
Merge branch '7.0.x' into 7.1.x
...
Closes gh-9175 on 7.1.x
2026-09-03 12:26:14 -06:00
1a7769be28
Fix Checkstyle
...
Issue gh-9175
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-09-03 11:18:58 -07:00
bdf501fe87
Fix HeaderWriterFilter Race Condition
...
Closes gh-9175
Signed-off-by: Dmitrii Bocharov <bdshadow@gmail.com >
2026-09-03 11:18:58 -07:00
b26d968c1c
Simplify ProviderManager null provider check
...
Use Assert.noNullElements to validate configured AuthenticationProviders
without relying on CollectionUtils.contains.
Preserve the existing null-provider validation behavior.
Closes gh-19510
Signed-off-by: avsan <abhishekrajabca@gmail.com >
2026-09-03 11:10:09 -07:00
3070c96594
Add authenticationSuccessHandler to Reactive Resource Server Kotlin DSL
...
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-09-01 18:14:07 -07:00
6eb7ef6e6d
Update What's New
...
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-09-01 18:14:07 -07:00
988ba6b33c
Align Formatting
...
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-09-01 18:14:07 -07:00
d1fb6141c1
Add authenticationSuccessHandler to Reactive Resource Server DSL
...
Signed-off-by: Iain Henderson <Iain.henderson@mac.com >
2026-09-01 18:14:07 -07:00
43f5ae5b21
Remove Auto-merge for .x Branches
...
Closes gh-19632
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-08-31 10:43:16 -06:00
b2a6bbf314
Merge branch '7.1.x'
2026-08-31 10:42:04 -06:00
a161421409
Turn Off Auto-merge for Maintenance Branch
...
This commit removes the auto-merge workflow on 7.1.x since it
is a maintenance branch.
Closes gh-19631
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-08-31 10:41:54 -06:00
36aa2ad744
Merge branch '7.1.x'
2026-08-31 12:02:21 -04:00
ed4e0e2ea8
Merge branch '7.1.x'
2026-08-31 09:55:00 -06:00
978eb4396a
Polish gh-19585
2026-08-31 11:09:18 -04:00
770c860d9d
Ensure WebSession ID is not changed after token refresh (Reactive)
...
Closes gh-19424
Signed-off-by: Evgeniy Cheban <mister.cheban@gmail.com >
2026-08-31 10:11:13 -04:00
11890f2f49
Bump io.spring.gradle:spring-security-release-plugin
...
Bumps [io.spring.gradle:spring-security-release-plugin](https://github.com/spring-io/spring-security-release-tools ) from 1.0.16 to 1.0.17.
- [Release notes](https://github.com/spring-io/spring-security-release-tools/releases )
- [Changelog](https://github.com/spring-io/spring-security-release-tools/blob/main/RELEASE.adoc )
- [Commits](https://github.com/spring-io/spring-security-release-tools/compare/v1.0.16...v1.0.17 )
---
updated-dependencies:
- dependency-name: io.spring.gradle:spring-security-release-plugin
dependency-version: 1.0.17
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-28 03:17:31 +00:00
5809451de7
Bump spring-io/spring-release-actions/compute-next-version
...
Bumps [spring-io/spring-release-actions/compute-next-version](https://github.com/spring-io/spring-release-actions ) from 0.0.5 to 0.0.6.
- [Release notes](https://github.com/spring-io/spring-release-actions/releases )
- [Commits](https://github.com/spring-io/spring-release-actions/compare/a1f321783a0769dd2aea4fad6c2ae2f95a52b885...1b8671612c3eb3d9b9763e2d7b66f1a80d00ee95 )
---
updated-dependencies:
- dependency-name: spring-io/spring-release-actions/compute-next-version
dependency-version: 0.0.6
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-28 00:50:20 +00:00
31d379a7bf
Bump spring-io/spring-security-release-tools/.github/workflows/release-announcements-stage.yml
...
Bumps [spring-io/spring-security-release-tools/.github/workflows/release-announcements-stage.yml](https://github.com/spring-io/spring-security-release-tools ) from 1.0.16 to 1.0.17.
- [Release notes](https://github.com/spring-io/spring-security-release-tools/releases )
- [Changelog](https://github.com/spring-io/spring-security-release-tools/blob/main/RELEASE.adoc )
- [Commits](https://github.com/spring-io/spring-security-release-tools/compare/d6c65d3013c0888e2c9cbae9f4beda610994776c...3f6cc7ffc137ca160061749d5f34dc30d5f36986 )
---
updated-dependencies:
- dependency-name: spring-io/spring-security-release-tools/.github/workflows/release-announcements-stage.yml
dependency-version: 1.0.17
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-28 00:47:19 +00:00
825370f8e3
Bump spring-io/spring-security-release-tools/.github/workflows/deploy-schema.yml
...
Bumps [spring-io/spring-security-release-tools/.github/workflows/deploy-schema.yml](https://github.com/spring-io/spring-security-release-tools ) from 1.0.15 to 1.0.17.
- [Release notes](https://github.com/spring-io/spring-security-release-tools/releases )
- [Changelog](https://github.com/spring-io/spring-security-release-tools/blob/main/RELEASE.adoc )
- [Commits](https://github.com/spring-io/spring-security-release-tools/compare/v1.0.15...3f6cc7ffc137ca160061749d5f34dc30d5f36986 )
---
updated-dependencies:
- dependency-name: spring-io/spring-security-release-tools/.github/workflows/deploy-schema.yml
dependency-version: 1.0.17
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-28 00:47:16 +00:00
61feae94a0
Merge branch '7.1.x'
2026-08-26 10:17:45 -06:00
edaae1d17d
Merge branch '7.0.x' into 7.1.x
2026-08-26 10:17:34 -06:00
e8084090ff
Bump org.hibernate.orm:hibernate-core from 7.4.5.Final to 7.4.6.Final
...
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm ) from 7.4.5.Final to 7.4.6.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases )
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.4.6/changelog.txt )
- [Commits](https://github.com/hibernate/hibernate-orm/compare/7.4.5...7.4.6 )
---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
dependency-version: 7.4.6.Final
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-26 03:24:42 +00:00
4773b40f02
Bump gradle-wrapper from 9.7.0 to 9.7.1
...
Bumps [gradle-wrapper](https://github.com/gradle/gradle ) from 9.7.0 to 9.7.1.
- [Release notes](https://github.com/gradle/gradle/releases )
- [Commits](https://github.com/gradle/gradle/compare/v9.7.0...v9.7.1 )
---
updated-dependencies:
- dependency-name: gradle-wrapper
dependency-version: 9.7.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-24 03:28:40 +00:00
9a4a965b0d
Bump io.spring.gradle:spring-security-release-plugin
...
Bumps [io.spring.gradle:spring-security-release-plugin](https://github.com/spring-io/spring-security-release-tools ) from 1.0.15 to 1.0.16.
- [Release notes](https://github.com/spring-io/spring-security-release-tools/releases )
- [Changelog](https://github.com/spring-io/spring-security-release-tools/blob/main/RELEASE.adoc )
- [Commits](https://github.com/spring-io/spring-security-release-tools/compare/v1.0.15...v1.0.16 )
---
updated-dependencies:
- dependency-name: io.spring.gradle:spring-security-release-plugin
dependency-version: 1.0.16
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-24 03:27:38 +00:00
0bae8a73d1
Next Development Version
...
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-08-21 09:14:37 -06:00
461ccd817d
Next Development Version
...
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-08-21 09:14:09 -06:00
d449950b36
Merge branch '7.1.x'
...
Closes gh-19573
2026-08-20 16:58:15 -06:00
8dc341af8c
Merge branch '7.0.x' into 7.1.x
...
Closes gh-19572
2026-08-20 16:58:02 -06:00
381c556f78
Add Release Announcement Workflows
...
Closes gh-19571
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-08-20 16:57:48 -06:00
19afc9121e
Merge branch '7.1.x'
...
Closes gh-19568
# Conflicts:
# gradle/libs.versions.toml
2026-08-20 12:29:12 -06:00
6b2f892e66
Merge branch '7.0.x' into 7.1.x
...
Closes gh-19567
# Conflicts:
# config/src/main/java/org/springframework/security/config/annotation/web/configurers/oauth2/server/resource/DPoPAuthenticationConfigurer.java
# config/src/main/java/org/springframework/security/config/annotation/web/configurers/oauth2/server/resource/OAuth2ResourceServerConfigurer.java
# config/src/test/java/org/springframework/security/config/annotation/web/configurers/oauth2/server/resource/DPoPAuthenticationTests.java
# gradle/libs.versions.toml
# oauth2/oauth2-authorization-server/src/main/java/org/springframework/security/oauth2/server/authorization/InMemoryOAuth2AuthorizationService.java
# oauth2/oauth2-jose/src/main/java/org/springframework/security/oauth2/jwt/DPoPProofJwtDecoderFactory.java
# oauth2/oauth2-jose/src/main/java/org/springframework/security/oauth2/jwt/DPoPProofReplayValidator.java
# oauth2/oauth2-resource-server/src/main/java/org/springframework/security/oauth2/server/resource/authentication/DPoPAuthenticationProvider.java
2026-08-20 12:23:20 -06:00
3b276e6c0d
Update to Spring Data 2025.1.7
...
Closes gh-19485
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-08-20 11:24:08 -06:00
Josh Cummings