fbbbd46bee
Update asciidoctor-extensions to 1.0.0-alpha.18
...
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-03-20 21:21:22 +00:00
8abffbd0df
Merge branch '6.5.x' into 7.0.x
2026-03-20 15:00:02 -06:00
376b40a735
Bump io.spring.gradle:spring-security-release-plugin
...
Bumps [io.spring.gradle:spring-security-release-plugin](https://github.com/spring-io/spring-security-release-tools ) from 1.0.14 to 1.0.15.
- [Release notes](https://github.com/spring-io/spring-security-release-tools/releases )
- [Changelog](https://github.com/spring-io/spring-security-release-tools/blob/main/RELEASE.adoc )
- [Commits](https://github.com/spring-io/spring-security-release-tools/compare/v1.0.14...v1.0.15 )
---
updated-dependencies:
- dependency-name: io.spring.gradle:spring-security-release-plugin
dependency-version: 1.0.15
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-20 14:58:20 -06:00
89fa1cbdd2
Bump spring-io/spring-security-release-tools/.github/workflows/build.yml
...
Bumps [spring-io/spring-security-release-tools/.github/workflows/build.yml](https://github.com/spring-io/spring-security-release-tools ) from 1.0.14 to 1.0.15.
- [Release notes](https://github.com/spring-io/spring-security-release-tools/releases )
- [Changelog](https://github.com/spring-io/spring-security-release-tools/blob/main/RELEASE.adoc )
- [Commits](https://github.com/spring-io/spring-security-release-tools/compare/729fed56d42122f88583aff1be35c0800b7d77e9...b92832ecbc7cbe969201e6beafbde0ee400cf095 )
---
updated-dependencies:
- dependency-name: spring-io/spring-security-release-tools/.github/workflows/build.yml
dependency-version: 1.0.15
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-20 14:57:09 -06:00
0d75e6d10c
Bump @springio/asciidoctor-extensions in /docs
...
Bumps [@springio/asciidoctor-extensions](https://github.com/spring-io/asciidoctor-extensions ) from 1.0.0-alpha.17 to 1.0.0-alpha.18.
- [Changelog](https://github.com/spring-io/asciidoctor-extensions/blob/main/CHANGELOG.adoc )
- [Commits](https://github.com/spring-io/asciidoctor-extensions/compare/v1.0.0-alpha.17...v1.0.0-alpha.18 )
---
updated-dependencies:
- dependency-name: "@springio/asciidoctor-extensions"
dependency-version: 1.0.0-alpha.18
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-20 14:56:46 -06:00
01758c4c59
Bump spring-io/spring-security-release-tools/.github/workflows/deploy-artifacts.yml
...
Bumps [spring-io/spring-security-release-tools/.github/workflows/deploy-artifacts.yml](https://github.com/spring-io/spring-security-release-tools ) from 1.0.14 to 1.0.15.
- [Release notes](https://github.com/spring-io/spring-security-release-tools/releases )
- [Changelog](https://github.com/spring-io/spring-security-release-tools/blob/main/RELEASE.adoc )
- [Commits](https://github.com/spring-io/spring-security-release-tools/compare/729fed56d42122f88583aff1be35c0800b7d77e9...b92832ecbc7cbe969201e6beafbde0ee400cf095 )
---
updated-dependencies:
- dependency-name: spring-io/spring-security-release-tools/.github/workflows/deploy-artifacts.yml
dependency-version: 1.0.15
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-20 14:56:10 -06:00
f37833a59c
Bump spring-io/spring-security-release-tools/.github/workflows/test.yml
...
Bumps [spring-io/spring-security-release-tools/.github/workflows/test.yml](https://github.com/spring-io/spring-security-release-tools ) from 1.0.14 to 1.0.15.
- [Release notes](https://github.com/spring-io/spring-security-release-tools/releases )
- [Changelog](https://github.com/spring-io/spring-security-release-tools/blob/main/RELEASE.adoc )
- [Commits](https://github.com/spring-io/spring-security-release-tools/compare/729fed56d42122f88583aff1be35c0800b7d77e9...b92832ecbc7cbe969201e6beafbde0ee400cf095 )
---
updated-dependencies:
- dependency-name: spring-io/spring-security-release-tools/.github/workflows/test.yml
dependency-version: 1.0.15
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-20 14:55:52 -06:00
52e6c4c4be
Bump spring-io/spring-security-release-tools/.github/workflows/deploy-schema.yml
...
Bumps [spring-io/spring-security-release-tools/.github/workflows/deploy-schema.yml](https://github.com/spring-io/spring-security-release-tools ) from 1.0.14 to 1.0.15.
- [Release notes](https://github.com/spring-io/spring-security-release-tools/releases )
- [Changelog](https://github.com/spring-io/spring-security-release-tools/blob/main/RELEASE.adoc )
- [Commits](https://github.com/spring-io/spring-security-release-tools/compare/729fed56d42122f88583aff1be35c0800b7d77e9...b92832ecbc7cbe969201e6beafbde0ee400cf095 )
---
updated-dependencies:
- dependency-name: spring-io/spring-security-release-tools/.github/workflows/deploy-schema.yml
dependency-version: 1.0.15
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-20 14:55:38 -06:00
874dce4407
Bump @springio/antora-extensions from 1.14.7 to 1.14.9 in /docs
...
Bumps [@springio/antora-extensions](https://github.com/spring-io/antora-extensions ) from 1.14.7 to 1.14.9.
- [Changelog](https://github.com/spring-io/antora-extensions/blob/main/CHANGELOG.adoc )
- [Commits](https://github.com/spring-io/antora-extensions/compare/v1.14.7...v1.14.9 )
---
updated-dependencies:
- dependency-name: "@springio/antora-extensions"
dependency-version: 1.14.9
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-20 14:54:26 -06:00
f21e8af830
Bump spring-io/spring-security-release-tools/.github/workflows/update-scheduled-release-version.yml
...
Bumps [spring-io/spring-security-release-tools/.github/workflows/update-scheduled-release-version.yml](https://github.com/spring-io/spring-security-release-tools ) from 1.0.14 to 1.0.15.
- [Release notes](https://github.com/spring-io/spring-security-release-tools/releases )
- [Changelog](https://github.com/spring-io/spring-security-release-tools/blob/main/RELEASE.adoc )
- [Commits](https://github.com/spring-io/spring-security-release-tools/compare/729fed56d42122f88583aff1be35c0800b7d77e9...b92832ecbc7cbe969201e6beafbde0ee400cf095 )
---
updated-dependencies:
- dependency-name: spring-io/spring-security-release-tools/.github/workflows/update-scheduled-release-version.yml
dependency-version: 1.0.15
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-20 14:54:11 -06:00
8aae3490da
Next development version
2026-03-16 19:05:05 +00:00
9bd793ffe6
Release 7.0.4
2026-03-16 18:16:34 +00:00
96ceb535f4
Next development version
2026-03-16 18:13:58 +00:00
a2c0ac112b
Update to spring-security-release-tools 1.0.15
...
Closes gh-18909
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-03-16 11:43:19 -06:00
0c54a55ae8
Release 6.5.9
2026-03-16 17:40:54 +00:00
ea6e7ab78f
Merge branch '6.5.x' into 7.0.x
2026-03-16 10:49:23 -06:00
01ff3b086a
Add Workflow for Deferring Issues
...
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-03-16 10:49:07 -06:00
e8cb0ef541
Merge Fix Jackson Deserializer for AuthenticationExtensionsClientOutputs
2026-03-16 11:57:23 -04:00
33e6f4bd3f
Merge Fix Jackson Deserializer for AuthenticationExtensionsClientOutputs
2026-03-16 11:57:07 -04:00
524ae92f6b
Merge Add Jackson Mixin for WebAuthnAuthentication
...
Add Jackson Mixin for WebAuthnAuthentication
2026-03-16 11:50:23 -04:00
47146f375b
Add Jackson Mixin for WebAuthnAuthentication
...
Closes gh-18034
Signed-off-by: Toshiaki Maki <makingx@gmail.com >
2026-03-16 10:33:00 -05:00
e7080e8c7c
Update Antora UI Spring to v0.4.26
2026-03-16 08:50:29 -05:00
c348a7aa46
Bump io.projectreactor:reactor-bom from 2025.0.3 to 2025.0.4
2026-03-16 08:44:25 -05:00
f227934749
Bump org.apache.maven:maven-resolver-provider from 3.9.13 to 3.9.14
2026-03-16 08:44:19 -05:00
e645aef3be
Bump org.springframework.data:spring-data-bom from 2025.1.3 to 2025.1.4
2026-03-16 08:44:13 -05:00
b238632fdc
Bump org.springframework:spring-framework-bom from 7.0.5 to 7.0.6
2026-03-16 08:44:07 -05:00
3f05f4d30c
Merge branch '6.5.x' into 7.0.x
2026-03-16 08:42:55 -05:00
cdd4b36d37
Update Antora UI Spring to v0.4.26
2026-03-16 08:26:19 -05:00
7672f76fde
Bump io.projectreactor:reactor-bom from 2024.0.15 to 2024.0.16
2026-03-16 08:26:12 -05:00
3db4999da4
Bump org.apache.maven:maven-resolver-provider from 3.9.13 to 3.9.14
2026-03-16 08:26:04 -05:00
3813627a15
Bump org.springframework:spring-framework-bom from 7.0.5 to 7.0.6
...
Bumps [org.springframework:spring-framework-bom](https://github.com/spring-projects/spring-framework ) from 7.0.5 to 7.0.6.
- [Release notes](https://github.com/spring-projects/spring-framework/releases )
- [Commits](https://github.com/spring-projects/spring-framework/compare/v7.0.5...v7.0.6 )
---
updated-dependencies:
- dependency-name: org.springframework:spring-framework-bom
dependency-version: 7.0.6
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-16 03:13:40 +00:00
9616e6b640
Bump org.springframework.data:spring-data-bom from 2025.1.3 to 2025.1.4
...
Bumps [org.springframework.data:spring-data-bom](https://github.com/spring-projects/spring-data-bom ) from 2025.1.3 to 2025.1.4.
- [Release notes](https://github.com/spring-projects/spring-data-bom/releases )
- [Commits](https://github.com/spring-projects/spring-data-bom/compare/2025.1.3...2025.1.4 )
---
updated-dependencies:
- dependency-name: org.springframework.data:spring-data-bom
dependency-version: 2025.1.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-16 03:13:21 +00:00
a708d2f61b
Bump org.springframework:spring-framework-bom from 6.2.16 to 6.2.17
...
Bumps [org.springframework:spring-framework-bom](https://github.com/spring-projects/spring-framework ) from 6.2.16 to 6.2.17.
- [Release notes](https://github.com/spring-projects/spring-framework/releases )
- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.16...v6.2.17 )
---
updated-dependencies:
- dependency-name: org.springframework:spring-framework-bom
dependency-version: 6.2.17
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-16 03:07:46 +00:00
ae827b6e1b
Fix Jackson 3 deserializer for AuthenticationExtensionsClientOutputs
...
The deserializer is updated to properly ignore unknown extensions.
This fix addresses the WebAuthn authentication failure appeared when
using FIDO2 security keys on Safari.
Closes gh-18643
Signed-off-by: Ziqin Wang <ziqin@wangziqin.net >
2026-03-15 15:34:34 +08:00
65bf54d842
Test Jackson 3 deserializer with unknown primitive WebAuthn ext
...
Signed-off-by: Ziqin Wang <ziqin@wangziqin.net >
2026-03-15 15:34:24 +08:00
7f75fd611e
Test Jackson 3 deserializer with unknown obj/arr WebAuthn ext
...
Signed-off-by: Ziqin Wang <ziqin@wangziqin.net >
2026-03-15 15:34:13 +08:00
a013bfaaec
Merge branch 'gh-18643-6.5.x' into gh-18643-7.0.x
2026-03-15 15:25:04 +08:00
e726c05e76
Fix Jackson 2 deserializer for AuthenticationExtensionsClientOutputs
...
The deserializer is updated to properly ignore unknown extensions.
Closes gh-18643
Signed-off-by: Ziqin Wang <ziqin@wangziqin.net >
2026-03-15 15:04:14 +08:00
a7039fb3e6
Test Jackson 2 deserializer with unknown primitive WebAuthn ext
...
Signed-off-by: Ziqin Wang <ziqin@wangziqin.net >
2026-03-15 15:03:28 +08:00
88ea668f47
Test Jackson 2 deserializer with unknown obj/arr WebAuthn ext
...
Signed-off-by: Ziqin Wang <ziqin@wangziqin.net >
2026-03-15 15:03:17 +08:00
2c1c50ddca
Update Antora Spring UI to v0.4.26
2026-03-13 17:45:06 +00:00
03a5de1955
Update Antora Spring UI to v0.4.26
2026-03-13 17:45:05 +00:00
91167adaa8
Bump org.apache.maven:maven-resolver-provider from 3.9.13 to 3.9.14
...
Bumps org.apache.maven:maven-resolver-provider from 3.9.13 to 3.9.14.
---
updated-dependencies:
- dependency-name: org.apache.maven:maven-resolver-provider
dependency-version: 3.9.14
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-13 03:09:24 +00:00
06cbea383e
Bump org.apache.maven:maven-resolver-provider from 3.9.13 to 3.9.14
...
Bumps org.apache.maven:maven-resolver-provider from 3.9.13 to 3.9.14.
---
updated-dependencies:
- dependency-name: org.apache.maven:maven-resolver-provider
dependency-version: 3.9.14
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-13 03:07:50 +00:00
e250236279
Read relayState from authenticationRequest
...
Closes gh-18243
Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com >
2026-03-12 10:30:11 -06:00
5b4fc73878
Merge branch '6.5.x' into 7.0.x
2026-03-11 16:46:51 -06:00
ef76ba040d
Require non-null authenticationRequest
...
Closes gh-18880
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-03-11 16:45:23 -06:00
763a8d4691
Bump io.projectreactor:reactor-bom from 2025.0.3 to 2025.0.4
...
Bumps [io.projectreactor:reactor-bom](https://github.com/reactor/reactor ) from 2025.0.3 to 2025.0.4.
- [Release notes](https://github.com/reactor/reactor/releases )
- [Commits](https://github.com/reactor/reactor/compare/2025.0.3...2025.0.4 )
---
updated-dependencies:
- dependency-name: io.projectreactor:reactor-bom
dependency-version: 2025.0.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-11 03:08:26 +00:00
d69af716c8
Bump io.projectreactor:reactor-bom from 2024.0.15 to 2024.0.16
...
Bumps [io.projectreactor:reactor-bom](https://github.com/reactor/reactor ) from 2024.0.15 to 2024.0.16.
- [Release notes](https://github.com/reactor/reactor/releases )
- [Commits](https://github.com/reactor/reactor/compare/2024.0.15...2024.0.16 )
---
updated-dependencies:
- dependency-name: io.projectreactor:reactor-bom
dependency-version: 2024.0.16
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-11 03:06:57 +00:00
1906075b0c
OAuth2DeviceVerificationEndpointFilter is applied after AuthorizationFilter
...
Closes gh-18873
2026-03-10 15:32:24 -04:00
Josh Cummings