Skip to content

6.2.5

Compare
Choose a tag to compare
@spring-builds spring-builds released this 17 Jun 18:13
· 171 commits to 6.2.x since this release

⭐ New Features

  • doc: added hint to declare GrantedAuthorityDefaults as infrastructure bean #15063
  • Enhance Logging in RequestMatcherDelegatingAuthorizationManage #14922
  • InMemoryUserDetailsManager: consider improving the error message when no PasswordEncoding has been specified #14974
  • Mention all required dependencies in LDAP documentation #15244

🪲 Bug Fixes

  • Assert WebSession is not null #15178
  • AbstractRequestMatcherRegistry#requestMatchers should pick MvcRequestMatcher when using MockMvc #15210
  • DispatcherServletDelegatingRequestMatcher causes errors when running tests with MockMvc #15196
  • Fix Java example in multitenanci.adoc #15150
  • Incorrect documentation for OIDC Back-Channel Logout #15198
  • InMemoryUserDetailsManager Setting User Roles in Official Documentation Example Causes Error #14972
  • LDIF file on official documentation breaks the startup process #15166
  • Link to article with remember-me-persistent-token strategy is broken #15148
  • OIDC Logout section is not shown in the navbar #15112
  • OpenSaml4AssertionValidator is not respecting clock skew settings #15022
  • ProxyRestrictionConditionValidator is missing in the OpenSaml4AuthenticationProvider.SAML20AssertionValidators class #14958
  • Resolving invalid CSRF token values is not consistent #15185
  • spring-security/docs/modules/ROOT/pages/servlet/authorization /method-security #15045
  • Wrong information for RequestCacheAwareFilter in the Spring Security documentation. #14995

🔨 Dependency Upgrades

  • Bump com.fasterxml.jackson:jackson-bom from 2.17.0 to 2.17.1 #15011
  • Bump io.micrometer:micrometer-observation from 1.12.5 to 1.12.6 #15069
  • Bump io.micrometer:micrometer-observation from 1.12.6 to 1.12.7 #15224
  • Bump io.mockk:mockk from 1.13.10 to 1.13.11 #15079
  • Bump io.projectreactor:reactor-bom from 2023.0.5 to 2023.0.6 #15075
  • Bump io.projectreactor:reactor-bom from 2023.0.6 to 2023.0.7 #15232
  • Bump org-apache-maven-resolver from 1.9.18 to 1.9.19 #14939
  • Bump org-apache-maven-resolver from 1.9.19 to 1.9.20 #15031
  • Bump org-aspectj from 1.9.22 to 1.9.22.1 #15049
  • Bump org-eclipse-jetty from 11.0.20 to 11.0.21 #15080
  • Bump org.apache.maven:maven-resolver-provider from 3.9.6 to 3.9.7 #15170
  • Bump org.hibernate.orm:hibernate-core from 6.4.4.Final to 6.4.5.Final #14949
  • Bump org.hibernate.orm:hibernate-core from 6.4.5.Final to 6.4.6.Final #14953
  • Bump org.hibernate.orm:hibernate-core from 6.4.6.Final to 6.4.7.Final #14960
  • Bump org.hibernate.orm:hibernate-core from 6.4.7.Final to 6.4.8.Final #14981
  • Bump org.hsqldb:hsqldb from 2.7.2 to 2.7.3 #15192
  • Bump org.jetbrains.kotlin:kotlin-bom from 1.9.23 to 1.9.24 #15024
  • Bump org.jetbrains.kotlin:kotlin-gradle-plugin from 1.9.23 to 1.9.24 #15023
  • Bump org.opensaml:opensaml-core4 from 4.3.1 to 4.3.2 #14947
  • Bump org.springframework.data:spring-data-bom from 2023.1.5 to 2023.1.6 #15101
  • Bump org.springframework.data:spring-data-bom from 2023.1.6 to 2023.1.7 #15262
  • Bump org.springframework.ldap:spring-ldap-core from 3.2.3 to 3.2.4 #15248
  • Bump org.springframework:spring-framework-bom from 6.1.6 to 6.1.7 #15081
  • Bump org.springframework:spring-framework-bom from 6.1.7 to 6.1.8 #15132
  • Bump org.springframework:spring-framework-bom from 6.1.8 to 6.1.9 #15247
  • Update to OAuth2 OIDC SDK 9.43.4 #14920
  • Upgrade nimbus-jose-jwt to version 9.37.3 #14836

🔩 Build Updates

  • Attach Antora Docs to Pull Requests #15060
  • Bump @antora/collector-extension from 1.0.0-alpha.3 to 1.0.0-alpha.4 in /docs #15163
  • Bump @springio/antora-extensions from 1.10.0 to 1.11.1 in /docs #15142
  • Bump com.github.spullara.mustache.java:compiler from 0.9.11 to 0.9.13 #15032
  • Bump com.gradle.develocity from 3.17.2 to 3.17.3 #15050
  • Bump com.gradle.develocity from 3.17.3 to 3.17.4 #15102
  • Bump com.gradle.develocity from 3.17.4 to 3.17.5 #15241
  • Bump io-spring-javaformat from 0.0.41 to 0.0.42 #15216
  • Bump io.spring.ge.conventions from 0.0.16 to 0.0.17 #14961
  • Bump io.spring.gradle:spring-security-release-plugin from 1.0.2 to 1.0.3 #14924
  • Bump org.jfrog.buildinfo:build-info-extractor-gradle from 4.33.13 to 4.33.15 #14950
  • Consider Adding a Build Updates section to the release changelog #15038

❤️ Contributors

Thank you to all the contributors who worked on this release:

@dependabot[bot]