root
/
spring-security
mirror of https://github.com/spring-projects/spring-security.git
1
0
Fork 0
Code Issues Actions 6 Packages Projects Releases Wiki Activity
19,841 Commits 47 Branches 367 Tags 125 MiB
Commit Graph

19841 Commits

Author SHA1 Message Date
github-actions[bot] 84d54b94c9 Next development version
CodeQL Advanced / codeql-analysis-call (push) Waiting to run Details
CI / Build (17, ubuntu-latest) (push) Waiting to run Details
CI / Build (17, windows-latest) (push) Waiting to run Details
CI / Deploy Artifacts (push) Blocked by required conditions Details
CI / Deploy Docs (push) Blocked by required conditions Details
CI / Deploy Schema (push) Blocked by required conditions Details
CI / Perform Release (push) Blocked by required conditions Details
CI / Send Notification (push) Blocked by required conditions Details
Deploy Docs / build (push) Waiting to run Details
2025-07-21 15:50:52 +00:00
github-actions[bot] 02b922ce5a Release 7.0.0-M1 2025-07-21 15:25:10 +00:00
Rob Winch ef77d3f0cf
Merge branch '6.5.x' 2025-07-21 09:43:08 -05:00
Rob Winch 90584ef8ce
Merge branch '6.4.x' into 6.5.x 2025-07-21 09:42:59 -05:00
Rob Winch 7b606362f8
Fix samples branch 2025-07-21 09:42:51 -05:00
Rob Winch e38c059e7c
Fix samples branch 2025-07-21 09:42:08 -05:00
Rob Winch 85dc06bbdf
Merge branch '6.5.x' 
Closes gh-17581
 2025-07-21 09:30:11 -05:00
Rob Winch 80ccb9b3cf
Merge branch '6.4.x' into 6.5.x 
Closes gh-17580
 2025-07-21 09:29:20 -05:00
Rob Winch 829af961f0
Use Meaningful Configurer Names in Test 
This just renames the Configurer names used in
AbstractConfiguredSecurityBuilderTests to be more meaningful.

Issue gh-17020 gh-17011

Signed-off-by: Rob Winch <362503+rwinch@users.noreply.github.com>
 2025-07-21 09:27:36 -05:00
Rob Winch fca704e61f
Fix getConfigurersInInitializing Semantics 
A getter should not mutate state. This removes getConfigurersInInitializing
in favor of inline code since this is just used once.

Issue gh-17020 gh-17011

Signed-off-by: Rob Winch <362503+rwinch@users.noreply.github.com>
 2025-07-21 09:27:36 -05:00
Rob Winch ea9dd2728e
Support add nested security configurers during builder initialization 
Closes gh-17011

Signed-off-by: DingHao <dh.hiekn@gmail.com>
 2025-07-21 09:27:27 -05:00
Rob Winch 4fa2d323fd
Merge branch '6.5.x' 2025-07-21 08:20:45 -05:00
Rob Winch 409f845db2
Merge branch '6.4.x' into 6.5.x 2025-07-21 08:20:35 -05:00
Rob Winch 258aa66f0d
Merge branch '6.3.x' into 6.4.x 2025-07-21 08:20:16 -05:00
Rob Winch f2886f0ffc
Bump com.fasterxml.jackson:jackson-bom from 2.19.1 to 2.19.2 2025-07-21 08:19:48 -05:00
Rob Winch fbaa15bae1
Bump org.springframework:spring-framework-bom from 6.2.8 to 6.2.9 2025-07-21 08:18:52 -05:00
Rob Winch e21a80a96d
Bump org.springframework.data:spring-data-bom from 2024.1.7 to 2024.1.8 2025-07-21 08:18:49 -05:00
Rob Winch 236ef46cf8
Bump io.micrometer:micrometer-observation from 1.14.8 to 1.14.9 2025-07-21 08:18:47 -05:00
Rob Winch a0b0d02965
Bump org.hibernate.orm:hibernate-core from 6.6.20.Final to 6.6.22.Final 2025-07-21 08:18:45 -05:00
Rob Winch 97e5b103e8
Bump io.mockk:mockk from 1.14.4 to 1.14.5 2025-07-21 08:18:42 -05:00
Rob Winch d5d31a0892
Bump org.apache.maven:maven-resolver-provider from 3.9.10 to 3.9.11 2025-07-21 08:11:46 -05:00
Rob Winch 1b3f8435ce
Bump org.hibernate.orm:hibernate-core from 6.6.20.Final to 6.6.22.Final 2025-07-21 08:11:44 -05:00
Rob Winch 22fbbb9365
Bump io.micrometer:micrometer-observation from 1.14.8 to 1.14.9 2025-07-21 08:11:41 -05:00
Rob Winch f1622351e5
Bump org.springframework.data:spring-data-bom from 2024.1.7 to 2024.1.8 2025-07-21 08:11:39 -05:00
Rob Winch e5c45c9dda
Bump org.springframework:spring-framework-bom from 6.2.8 to 6.2.9 2025-07-21 08:11:37 -05:00
Rob Winch 82fa658c9b
Bump org.apache.maven:maven-resolver-provider from 3.9.10 to 3.9.11
CodeQL Advanced / codeql-analysis-call (push) Has been cancelled Details
CI / Build (17, ubuntu-latest) (push) Has been cancelled Details
CI / Build (17, windows-latest) (push) Has been cancelled Details
CI / Test Against Snapshots (17, 17) (push) Has been cancelled Details
CI / Test Against Snapshots (21-ea, 21) (push) Has been cancelled Details
CI / Check Samples (push) Has been cancelled Details
Deploy Docs / build (push) Has been cancelled Details
CI / Deploy Artifacts (push) Has been cancelled Details
CI / Deploy Docs (push) Has been cancelled Details
CI / Deploy Schema (push) Has been cancelled Details
CI / Perform Release (push) Has been cancelled Details
CI / Send Notification (push) Has been cancelled Details
2025-07-21 07:52:56 -05:00
Rob Winch 23cf29ba17
UnboundIdContainer Disables Pauses for Ephemeral Port 
Closes gh-17543
 2025-07-21 07:30:59 -05:00
Josh Cummings 63e0a56bee
Add setBasePath
CodeQL Advanced / codeql-analysis-call (push) Waiting to run Details
CI / Build (17, ubuntu-latest) (push) Waiting to run Details
CI / Build (17, windows-latest) (push) Waiting to run Details
CI / Deploy Artifacts (push) Blocked by required conditions Details
CI / Deploy Docs (push) Blocked by required conditions Details
CI / Deploy Schema (push) Blocked by required conditions Details
CI / Perform Release (push) Blocked by required conditions Details
CI / Send Notification (push) Blocked by required conditions Details
Deploy Docs / build (push) Waiting to run Details 
Originally, it was thought that this feature would be rather uncommon;
however, given some feedback from the Boot team, it makes sense to make
this easier to configure.

Of specific note is migrating from an earlier version were the
servlet path did not need to be specified in authorizeHttpRequests.
Since it does in 7, this will be a significant migration for those
who have a servlet path configured. This setter simplifies that a great
deal, including simplifying Boot's support of it.

Closes gh-17579
 2025-07-20 22:57:06 -06:00
dependabot[bot] 51a703a291
Bump org.springframework:spring-framework-bom from 6.2.8 to 6.2.9 
Bumps [org.springframework:spring-framework-bom](https://github.com/spring-projects/spring-framework) from 6.2.8 to 6.2.9.
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.8...v6.2.9)

---
updated-dependencies:
- dependency-name: org.springframework:spring-framework-bom
  dependency-version: 6.2.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-07-21 04:43:53 +00:00
dependabot[bot] ae689cd220
Bump org.springframework.data:spring-data-bom from 2024.1.7 to 2024.1.8 
Bumps [org.springframework.data:spring-data-bom](https://github.com/spring-projects/spring-data-bom) from 2024.1.7 to 2024.1.8.
- [Release notes](https://github.com/spring-projects/spring-data-bom/releases)
- [Commits](https://github.com/spring-projects/spring-data-bom/compare/2024.1.7...2024.1.8)

---
updated-dependencies:
- dependency-name: org.springframework.data:spring-data-bom
  dependency-version: 2024.1.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-07-21 04:41:51 +00:00
dependabot[bot] 2a3d1340d1
Bump io.micrometer:micrometer-observation from 1.14.8 to 1.14.9 
Bumps [io.micrometer:micrometer-observation](https://github.com/micrometer-metrics/micrometer) from 1.14.8 to 1.14.9.
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases)
- [Commits](https://github.com/micrometer-metrics/micrometer/compare/v1.14.8...v1.14.9)

---
updated-dependencies:
- dependency-name: io.micrometer:micrometer-observation
  dependency-version: 1.14.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-07-21 04:40:58 +00:00
dependabot[bot] 9f40a72f19
Bump org.hibernate.orm:hibernate-core from 6.6.20.Final to 6.6.22.Final 
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm) from 6.6.20.Final to 6.6.22.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases)
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/6.6.22/changelog.txt)
- [Commits](https://github.com/hibernate/hibernate-orm/compare/6.6.20...6.6.22)

---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
  dependency-version: 6.6.22.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-07-21 04:36:16 +00:00
dependabot[bot] 470384597c
Bump org.apache.maven:maven-resolver-provider from 3.9.10 to 3.9.11 
Bumps org.apache.maven:maven-resolver-provider from 3.9.10 to 3.9.11.

---
updated-dependencies:
- dependency-name: org.apache.maven:maven-resolver-provider
  dependency-version: 3.9.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-07-21 04:36:08 +00:00
dependabot[bot] c27f7206d9
Bump org.apache.maven:maven-resolver-provider from 3.9.10 to 3.9.11 
Bumps org.apache.maven:maven-resolver-provider from 3.9.10 to 3.9.11.

---
updated-dependencies:
- dependency-name: org.apache.maven:maven-resolver-provider
  dependency-version: 3.9.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-07-21 04:23:35 +00:00
dependabot[bot] a5129a136d
Bump io.mockk:mockk from 1.14.4 to 1.14.5 
---
updated-dependencies:
- dependency-name: io.mockk:mockk
  dependency-version: 1.14.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-07-21 04:20:57 +00:00
dependabot[bot] 150615eba5
Bump org.hibernate.orm:hibernate-core from 6.6.20.Final to 6.6.22.Final 
---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
  dependency-version: 6.6.22.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-07-21 04:18:57 +00:00
dependabot[bot] fb07dc9d3a
Bump io.micrometer:micrometer-observation from 1.14.8 to 1.14.9 
---
updated-dependencies:
- dependency-name: io.micrometer:micrometer-observation
  dependency-version: 1.14.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-07-21 04:18:31 +00:00
dependabot[bot] 32f909ff64
Bump org.springframework.data:spring-data-bom from 2024.1.7 to 2024.1.8 
---
updated-dependencies:
- dependency-name: org.springframework.data:spring-data-bom
  dependency-version: 2024.1.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-07-21 04:15:46 +00:00
dependabot[bot] 2aebb9ce9e
Bump org.springframework:spring-framework-bom from 6.2.8 to 6.2.9 
---
updated-dependencies:
- dependency-name: org.springframework:spring-framework-bom
  dependency-version: 6.2.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-07-21 04:13:19 +00:00
dependabot[bot] 6fa82bc0e3
Bump com.fasterxml.jackson:jackson-bom from 2.19.1 to 2.19.2 
---
updated-dependencies:
- dependency-name: com.fasterxml.jackson:jackson-bom
  dependency-version: 2.19.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-07-21 03:58:43 +00:00
Josh Cummings 15fc898804
Make DataTargetVisitor package-private
CodeQL Advanced / codeql-analysis-call (push) Waiting to run Details
CI / Build (17, ubuntu-latest) (push) Waiting to run Details
CI / Build (17, windows-latest) (push) Waiting to run Details
CI / Deploy Artifacts (push) Blocked by required conditions Details
CI / Deploy Docs (push) Blocked by required conditions Details
CI / Deploy Schema (push) Blocked by required conditions Details
CI / Perform Release (push) Blocked by required conditions Details
CI / Send Notification (push) Blocked by required conditions Details
Deploy Docs / build (push) Has been cancelled Details 
Closes gh-17561
 2025-07-18 11:03:21 -06:00
Rob Winch 55a2100d1a
Update to Spring Data 2025.1.0-M4 
Closes gh-17560
 2025-07-18 09:31:37 -05:00
Rob Winch 2e75929856
Update to Spring Framework 7.0.0-M7 
Closes gh-17559
 2025-07-18 09:31:37 -05:00
Rob Winch ce6e8f9109
Force Snapshot Build is separate workflow 
Previously builds against the forced snapshots would prevent releases.
This didn't work out in practice because breaking changes could be
introduced that were not intended to be picked up until after releases.

This change splits the snapshot builds into a separate workflow so that
we are still informed when there is a breaking change coming, but it
does not block the release.

Closes gh-17558
 2025-07-18 09:31:37 -05:00
dependabot[bot] 66ddfb43a0 Bump @springio/antora-extensions from 1.14.4 to 1.14.6 in /docs 
---
updated-dependencies:
- dependency-name: "@springio/antora-extensions"
  dependency-version: 1.14.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-07-18 09:15:29 -05:00
Rob Winch b8741759ce
Merge branch '6.5.x' 2025-07-18 09:14:57 -05:00
Rob Winch 3db0b0ed95
Merge branch '6.4.x' into 6.5.x
CodeQL Advanced / codeql-analysis-call (push) Has been cancelled Details
CI / Build (17, ubuntu-latest) (push) Has been cancelled Details
CI / Build (17, windows-latest) (push) Has been cancelled Details
CI / Test Against Snapshots (17, 17) (push) Has been cancelled Details
CI / Test Against Snapshots (21-ea, 21) (push) Has been cancelled Details
CI / Check Samples (push) Has been cancelled Details
Deploy Docs / build (push) Has been cancelled Details
CI / Deploy Artifacts (push) Has been cancelled Details
CI / Deploy Docs (push) Has been cancelled Details
CI / Deploy Schema (push) Has been cancelled Details
CI / Perform Release (push) Has been cancelled Details
CI / Send Notification (push) Has been cancelled Details
2025-07-18 09:14:48 -05:00
Rob Winch 2cb200079c
Merge branch '6.3.x' into 6.4.x
CodeQL Advanced / codeql-analysis-call (push) Has been cancelled Details
CI / Build (17, ubuntu-latest) (push) Has been cancelled Details
CI / Build (17, windows-latest) (push) Has been cancelled Details
CI / Test Against Snapshots (17, 17) (push) Has been cancelled Details
CI / Test Against Snapshots (21-ea, 21) (push) Has been cancelled Details
CI / Check Samples (push) Has been cancelled Details
Deploy Docs / build (push) Has been cancelled Details
CI / Deploy Artifacts (push) Has been cancelled Details
CI / Deploy Docs (push) Has been cancelled Details
CI / Deploy Schema (push) Has been cancelled Details
CI / Perform Release (push) Has been cancelled Details
CI / Send Notification (push) Has been cancelled Details
2025-07-18 09:14:35 -05:00
Rob Winch cb515e5c57
Merge branch 'npm_and_yarn/docs/6.3.x/springio/antora-extensions-1.14.6' into 6.3.x
CodeQL Advanced / codeql-analysis-call (push) Has been cancelled Details
CI / Build (17, ubuntu-latest) (push) Has been cancelled Details
CI / Build (17, windows-latest) (push) Has been cancelled Details
CI / Test Against Snapshots (17, 17) (push) Has been cancelled Details
CI / Test Against Snapshots (21-ea, 21) (push) Has been cancelled Details
CI / Check Samples (push) Has been cancelled Details
Deploy Docs / build (push) Has been cancelled Details
CI / Deploy Artifacts (push) Has been cancelled Details
CI / Deploy Docs (push) Has been cancelled Details
CI / Deploy Schema (push) Has been cancelled Details
CI / Perform Release (push) Has been cancelled Details
CI / Send Notification (push) Has been cancelled Details
2025-07-18 09:14:23 -05:00
Rob Winch eaaadefa18
Merge branch '6.5.x' 2025-07-18 09:12:17 -05:00