6.2.5
⭐ New Features
- doc: added hint to declare GrantedAuthorityDefaults as infrastructure bean #15063
- Enhance Logging in RequestMatcherDelegatingAuthorizationManage #14922
- InMemoryUserDetailsManager: consider improving the error message when no PasswordEncoding has been specified #14974
- Mention all required dependencies in LDAP documentation #15244
🪲 Bug Fixes
- Assert WebSession is not null #15178
- AbstractRequestMatcherRegistry#requestMatchers should pick MvcRequestMatcher when using MockMvc #15210
- DispatcherServletDelegatingRequestMatcher causes errors when running tests with MockMvc #15196
- Fix Java example in multitenanci.adoc #15150
- Incorrect documentation for OIDC Back-Channel Logout #15198
- InMemoryUserDetailsManager Setting User Roles in Official Documentation Example Causes Error #14972
- LDIF file on official documentation breaks the startup process #15166
- Link to article with remember-me-persistent-token strategy is broken #15148
- OIDC Logout section is not shown in the navbar #15112
- OpenSaml4AssertionValidator is not respecting clock skew settings #15022
- ProxyRestrictionConditionValidator is missing in the OpenSaml4AuthenticationProvider.SAML20AssertionValidators class #14958
- Resolving invalid CSRF token values is not consistent #15185
- spring-security/docs/modules/ROOT/pages/servlet/authorization /method-security #15045
- Wrong information for RequestCacheAwareFilter in the Spring Security documentation. #14995
🔨 Dependency Upgrades
- Bump com.fasterxml.jackson:jackson-bom from 2.17.0 to 2.17.1 #15011
- Bump io.micrometer:micrometer-observation from 1.12.5 to 1.12.6 #15069
- Bump io.micrometer:micrometer-observation from 1.12.6 to 1.12.7 #15224
- Bump io.mockk:mockk from 1.13.10 to 1.13.11 #15079
- Bump io.projectreactor:reactor-bom from 2023.0.5 to 2023.0.6 #15075
- Bump io.projectreactor:reactor-bom from 2023.0.6 to 2023.0.7 #15232
- Bump org-apache-maven-resolver from 1.9.18 to 1.9.19 #14939
- Bump org-apache-maven-resolver from 1.9.19 to 1.9.20 #15031
- Bump org-aspectj from 1.9.22 to 1.9.22.1 #15049
- Bump org-eclipse-jetty from 11.0.20 to 11.0.21 #15080
- Bump org.apache.maven:maven-resolver-provider from 3.9.6 to 3.9.7 #15170
- Bump org.hibernate.orm:hibernate-core from 6.4.4.Final to 6.4.5.Final #14949
- Bump org.hibernate.orm:hibernate-core from 6.4.5.Final to 6.4.6.Final #14953
- Bump org.hibernate.orm:hibernate-core from 6.4.6.Final to 6.4.7.Final #14960
- Bump org.hibernate.orm:hibernate-core from 6.4.7.Final to 6.4.8.Final #14981
- Bump org.hsqldb:hsqldb from 2.7.2 to 2.7.3 #15192
- Bump org.jetbrains.kotlin:kotlin-bom from 1.9.23 to 1.9.24 #15024
- Bump org.jetbrains.kotlin:kotlin-gradle-plugin from 1.9.23 to 1.9.24 #15023
- Bump org.opensaml:opensaml-core4 from 4.3.1 to 4.3.2 #14947
- Bump org.springframework.data:spring-data-bom from 2023.1.5 to 2023.1.6 #15101
- Bump org.springframework.data:spring-data-bom from 2023.1.6 to 2023.1.7 #15262
- Bump org.springframework.ldap:spring-ldap-core from 3.2.3 to 3.2.4 #15248
- Bump org.springframework:spring-framework-bom from 6.1.6 to 6.1.7 #15081
- Bump org.springframework:spring-framework-bom from 6.1.7 to 6.1.8 #15132
- Bump org.springframework:spring-framework-bom from 6.1.8 to 6.1.9 #15247
- Update to OAuth2 OIDC SDK 9.43.4 #14920
- Upgrade nimbus-jose-jwt to version 9.37.3 #14836
🔩 Build Updates
- Attach Antora Docs to Pull Requests #15060
- Bump
@antora
/collector-extension from 1.0.0-alpha.3 to 1.0.0-alpha.4 in /docs #15163 - Bump
@springio
/antora-extensions from 1.10.0 to 1.11.1 in /docs #15142 - Bump com.github.spullara.mustache.java:compiler from 0.9.11 to 0.9.13 #15032
- Bump com.gradle.develocity from 3.17.2 to 3.17.3 #15050
- Bump com.gradle.develocity from 3.17.3 to 3.17.4 #15102
- Bump com.gradle.develocity from 3.17.4 to 3.17.5 #15241
- Bump io-spring-javaformat from 0.0.41 to 0.0.42 #15216
- Bump io.spring.ge.conventions from 0.0.16 to 0.0.17 #14961
- Bump io.spring.gradle:spring-security-release-plugin from 1.0.2 to 1.0.3 #14924
- Bump org.jfrog.buildinfo:build-info-extractor-gradle from 4.33.13 to 4.33.15 #14950
- Consider Adding a Build Updates section to the release changelog #15038
❤️ Contributors
Thank you to all the contributors who worked on this release:
@dependabot[bot]