v5.0.2

🐞 Bug Fixes

• Fix cache expiry enforcement in WS-Security replay detection #1844
• Add missing DestinationPolicy for WS-Addressing out-of-band destinations #1843
• Ensure consistent parser usage in Jaxp13XPathTemplate for Stream and SAX sources #1842
• Standardize exception messages for account status failures #1841
• RSA PKCS#1 v1.5 key transport should be aligned with WSS4J #1840
• Harmonize account status checks in X509AuthenticationProvider #1839
• BSP compliance default should be aligned with WSS4J #1838
• Unable to migrate from XwsSecurityInterceptor due to strict action checking #1813
• AddressingEndpointInterceptor silently returns in-band response when out-of-band delivery fails #1807

🔨 Dependency Upgrades

• Upgrade to JAXB 4.0.9 #1825
• Upgrade to SAAJ 3.0.5 #1827
• Upgrade to Spring Framework 7.0.8 #1821
• Upgrade to Spring Security 7.0.6 #1822