Skip to content

Bump org.springframework.security:spring-security-bom from 6.4.0-M4 to 6.4.0-RC1 #1783

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 21, 2024

Bumps org.springframework.security:spring-security-bom from 6.4.0-M4 to 6.4.0-RC1.

Release notes

Sourced from org.springframework.security:spring-security-bom's releases.

6.4.0-RC1

⭐ New Features

  • Add API for Looking Up Security Annotations #15700
  • Add public InMemoryOneTimeTokenService.setClock(Clock) #15864
  • Add Reactive One-Time Token Login Kotlin DSL Support #15888
  • Add Support for Passkeys #13305
  • Allow OAuth2ClientSpec to get ReactiveOAuth2AccessTokenResponseClient from Spring IoC #11097
  • Allow access token request parameters to override defaults #15339
  • Allow building a ClientRegistration from provided configuration #15716
  • Allow logout+jwt JWT type for reactive #15847
  • AuthorizationEventPublisher should accept an AuthorizationResult #15915
  • AuthorizationManager should return AuthorizationResult #14846
  • Clarify Username/Password Authentication Docs #15806
  • Customize the strategy for resolving the principal #15833
  • GH-15201 Introduce ExpressionJwtGrantedAuthoritiesConverter to extract nested authorities via SpEL expression #15202
  • Improve encapsulation for jwtValidators #15879
  • Improve readibility of empty collection checks #15898
  • Improved error message for PasswordEncoder #14968
  • Make Security Observations Selectable #15678
  • ObjectProvider over custom getBeanOrNull method #15816
  • Parameters customizer called before all parameters are set #15939
  • Polish diamond operator usage #15900
  • Polish OAuth2ClientConfiguration #15857
  • Reactive oauth2Login should pick up OAuth2ReactiveUserService bean #15848
  • Replace Date().getTime() method with System.currentTimeMillis() #15890
  • Simplify Casting with ReactiveJwtDecoders #15797
  • Support refresh token for Token Exchange #15534
  • Update document #15862
  • Update javaDoc for DefaultOneTimeTokenSubmitPageGeneratingFilter #15870
  • Update websocket integration docs #15438
  • Use SessionAuthenticationStrategy for Remember-Me authentication #15748

🪲 Bug Fixes

  • Fix HttpSecurity Deprecation notices #15827
  • Minor fix in Kotlin docs for noSpringSecurityObservations #15831
  • OidcBackChannelLogoutTokenValidator should not construct when missing OIDC Provider Issuer #15824
  • Restore Framework version on Snapshot build #15916
  • The additionalParameters array parameter of OAuth2AuthorizationRequest causes the authorizationRequestUri to be incorrect #15830

🔨 Dependency Upgrades

  • Bump ch.qos.logback:logback-classic from 1.5.10 to 1.5.11 #15924
  • Bump com.fasterxml.jackson:jackson-bom from 2.17.2 to 2.18.0 #15859
  • Bump io.freefair.gradle:aspectj-plugin from 8.10 to 8.10.2 #15881
  • Bump io.micrometer:micrometer-observation from 1.13.5 to 1.13.6 #15918
  • Bump io.mockk:mockk from 1.13.12 to 1.13.13 #15895
  • Bump io.projectreactor:reactor-bom from 2023.0.10 to 2023.0.11 #15922
  • Bump io.spring.develocity.conventions from 0.0.21 to 0.0.22 #15871

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.springframework.security:spring-security-bom](https://github.com/spring-projects/spring-security) from 6.4.0-M4 to 6.4.0-RC1.
- [Release notes](https://github.com/spring-projects/spring-security/releases)
- [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc)
- [Commits](spring-projects/spring-security@6.4.0-M4...6.4.0-RC1)

---
updated-dependencies:
- dependency-name: org.springframework.security:spring-security-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the type: dependency-upgrade A dependency upgrade label Oct 21, 2024
@jgrandja jgrandja added this to the 1.4.0-RC1 milestone Oct 21, 2024
@jgrandja jgrandja self-assigned this Oct 21, 2024
@jgrandja jgrandja merged commit 3212cd7 into main Oct 21, 2024
8 checks passed
@dependabot dependabot bot deleted the dependabot/gradle/main/org.springframework.security-spring-security-bom-6.4.0-RC1 branch October 21, 2024 20:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
type: dependency-upgrade A dependency upgrade
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant