Spring Security 4.2.7 is due today. It restores compatibility with Java 7 (which was accidentally broken in 4.2.6).