Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 25, 2024

Bumps org.springframework.security:spring-security-web from 6.3.4 to 6.4.1.

Release notes

Sourced from org.springframework.security:spring-security-web's releases.

6.4.1

🪲 Bug Fixes

  • Documentation images should render clearly in both light and dark mode #16132
  • Fix conflicting bean names between @EnableWebSecurity and @EnableWebSocketSecurity #16113

🔩 Build Updates

  • Update Antora UI Spring to v0.4.18 #16112

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​github-actions[bot] and @​ngocnhan-tran1996

6.4.0

⭐ New Features

  • Add @FunctionalInterface to AuthorizationEventPublisher #15934
  • Add DefaultResourcesFilter.webauthn() #15970
  • Add deprecation notice for missing leading slashes #16020
  • Code Cleanup #15996
  • Document passkeys dependencies #16107
  • Factor out some common object mocking in tests #15396
  • Fix saml2 authentication guide docs #16017
  • Improve documentation about CredentialsContainer #15554
  • Improve Documentation on Adding a Custom Security Filter #15893
  • Improve Error Message for Conflicting Filter Chains #15992
  • Make it easier to determine where a filter chain has been defined #15874
  • OIDC logout not working for JPA/JDBC OAuth2AuthorizationService because DefaultSaml2AuthenticatedPrincipal does not implement equality #15346
  • Polish JdbcOneTimeTokenService #15997
  • relying-party-registration doesn't allow placeholders in xml #14645
  • Remove unnecessary parentheses and add static final field MockPortResolver#getServerPort #15875
  • Support ServerExchangeRejectedHandler @Bean #16063

🪲 Bug Fixes

  • An empty-string bearer token should result in an appropriate HTTP status code #16037
  • AuthorizeReturnObject AOT support should register proxied class as well #16106
  • Correct class name reference in WebFilterChainProxy JavaDoc #16004
  • Fix typo javadoc some classes #16022
  • Initialize OpenSAML in OpenSamlAssertingPartyMetadataRepository #16055
  • IpAddressMatcher null pointer exception #16104
  • OpenSamlAssertingPartyMetadataRepository should initialize OpenSAML #16042
  • Support ServerWebExchangeFirewall @Bean #15999
  • UniqueSecurityAnnotationScanner throws ConcurrentModificationException #15906

🔨 Dependency Upgrades

... (truncated)

Commits
  • 59b7b55 Release 6.4.1
  • b896a74 Resolve Observation Bean Name Collisions
  • 91832bf Add EnableWebSecurity + EnableWebSocketSecurity Test
  • 30c9860 Add What's New Link to Landing Pages
  • 4787efb Update What's New
  • b712c24 Merge branch '6.3.x'
  • 70a9501 Merge branch '6.2.x' into 6.3.x
  • b8e9f47 Merge branch '5.8.x' into 6.2.x
  • 04baead Update Antora Spring UI to v0.4.18
  • a0a9b48 Update Antora Spring UI to v0.4.18
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Nov 25, 2024
@deki
Copy link
Contributor

deki commented Nov 27, 2024

@dependabot rebase

Bumps [org.springframework.security:spring-security-web](https://github.com/spring-projects/spring-security) from 6.3.4 to 6.4.1.
- [Release notes](https://github.com/spring-projects/spring-security/releases)
- [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc)
- [Commits](spring-projects/spring-security@6.3.4...6.4.1)

---
updated-dependencies:
- dependency-name: org.springframework.security:spring-security-web
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/maven/aws-serverless-java-container-core/org.springframework.security-spring-security-web-6.4.1 branch from 7122006 to b23cb93 Compare November 27, 2024 07:41
@deki
Copy link
Contributor

deki commented Nov 27, 2024

@dependabot rebase

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 27, 2024

Looks like org.springframework.security:spring-security-web is up-to-date now, so this is no longer needed.

@dependabot dependabot bot closed this Nov 27, 2024
@dependabot dependabot bot deleted the dependabot/maven/aws-serverless-java-container-core/org.springframework.security-spring-security-web-6.4.1 branch November 27, 2024 10:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant