Apache Shiro 3.0.2

New Features

• [#2232] Form data save without requiring to log in by @lprimak in #2907

Improvements

• enh: rework form resubmit via self-dispatch rather than a network-call by @lprimak in #2900
• [#2929] Use Spring Path matcher for Spring Boot 4.2+ where Ant matching is removed by @lprimak in #2928
• [#2909] Change session validation log messages from INFO to DEBUG by @lprimak in #2910
• chore(build): add Semeru runtimes by @lprimak in #2879
• chore: add scarf.sh pixel to README by @lprimak in #2880
• docs(README): added OpenSSF best practices badge by @lprimak in #2892
• chore: Generate SBOM files with CycloneDX and SPDX maven plugins by @lprimak in #2893
• chore: updated shiro.doap.rdf file for Shiro 3.0.1 by @lprimak in #2873
• Build CI artifacts on only once, and reuse the builds in the matrix by @lprimak in #2937
• Refactor Jakarta EE integration tests with Graphene page objects by @lprimak in #2944

Bug fixes

• [#2926] - Spring configuration appends a stray " }" to the rememberMe cookie path by @Nexory in #2927

• [#2924] - WildcardPermission and DomainPermission lower-case with the JVM default locale by @sharanggupta in #2925

• [#2931] - Rebuild expired Faces views during form replay without a preliminary GET by @BalusC and @lprimak in #2930

• [#2923] Various bug fixes by @lprimak in #2922

• bugfix(test): flaky test core/.../DefaultSecurityManagerTest fixed by @lprimak in #2951

• chore: remove site override from apache release profile, is obsolete … by @lprimak in #2887

• chore(build): removed windows profile, no longer necessary by @lprimak in #2891

• Improve build stability: RAT, Selenium and JavaAPI Comparison enforcer plugin by @lprimak in #2901

• enh: fix labeler workflow by @lprimak in #2916

• [#2905] chore: replace labeler with the one that works like magpie and pull_r… by @lprimak in #2908

• misc: fix typos in Java code by @jbampton in #2914

• chore: add missing @Override annotations by @lprimak in #2913

• chore: fix CodeQL issues by @lprimak in #2915

• bugfix(Guice): align Guice behavior regarding superclass annotation p… by @lprimak in #2881

• bugfix(jakarta-ee): form resubmit logic uses more data from the subse… by @lprimak in #2885

• Align default settings of ShiroFilterFactoryBean and NoAccessFilter with other components by @lprimak in #2921

• enh: harmonized superclass / interface annotation processing by @lprimak in #2917

Dependency Updates

• chore(deps): bump the maven-dependencies group with 22 updates by @dependabot[bot] in #2872
• chore(deps): bump the github-actions-dependencies group with 4 updates by @dependabot[bot] in #2871
• chore(deps): bump the github-actions-dependencies group with 5 updates by @dependabot[bot] in #2875
• chore(deps): bump the maven-dependencies group with 7 updates by @dependabot[bot] in #2876
• chore(deps): bump the maven-dependencies group with 27 updates by @dependabot[bot] in #2884
• chore(deps): bump the pre-commit-hooks group with 2 updates by @dependabot[bot] in #2883
• chore(deps): bump the github-actions-dependencies group with 4 updates by @dependabot[bot] in #2890
• chore(deps): bump the maven-dependencies group with 18 updates by @dependabot[bot] in #2889
• chore(deps): bump https://github.com/zizmorcore/zizmor-pre-commit from v1.30.0 to 1.30.1 in the pre-commit-hooks group by @dependabot[bot] in #2888
• chore(deps): bump the github-actions-dependencies group with 4 updates by @dependabot[bot] in #2894
• chore(deps): bump the maven-dependencies group with 8 updates by @dependabot[bot] in #2895
• chore(deps): bump https://github.com/python-jsonschema/check-jsonschema from 0.38.0 to 0.38.2 in the pre-commit-hooks group by @dependabot[bot] in #2897
• chore(deps): bump the maven-dependencies group with 13 updates by @dependabot[bot] in #2898
• chore(deps): bump the github-actions-dependencies group with 3 updates by @dependabot[bot] in #2899
• chore(deps): bump the maven-dependencies group with 9 updates by @dependabot[bot] in #2906
• chore(deps): bump the github-actions-dependencies group with 7 updates by @dependabot[bot] in #2912
• chore(deps): bump the maven-dependencies group with 27 updates by @dependabot[bot] in #2911
• chore(deps): bump https://github.com/zizmorcore/zizmor-pre-commit from v1.30.1 to 1.31.1 in the pre-commit-hooks group by @dependabot[bot] in #2918
• chore(deps): bump the github-actions-dependencies group with 4 updates by @dependabot[bot] in #2920
• chore(deps): bump the maven-dependencies group with 9 updates by @dependabot[bot] in #2919
• chore(deps): bump the github-actions-dependencies group with 5 updates by @dependabot[bot] in #2932
• chore(deps): bump the maven-dependencies group with 18 updates by @dependabot[bot] in #2933
• chore(deps): bump the github-actions-dependencies group across 1 directory with 5 updates by @dependabot[bot] in #2948
• chore(deps): bump the pre-commit-hooks group across 1 directory with 3 updates by @dependabot[bot] in #2946
• chore(deps): bump the maven-dependencies group across 1 directory with 15 updates by @dependabot[bot] in #2949

New Contributors

• @sharanggupta made their first contribution in #2925

Full Changelog: shiro-root-3.0.1...shiro-root-3.0.2