root
/
spring-security
mirror of https://github.com/spring-projects/spring-security.git
1
0
Fork 0
Code Issues Actions 4 Packages Projects Releases Wiki Activity
19,253 Commits 48 Branches 362 Tags 121 MiB
Commit Graph

19253 Commits

Author SHA1 Message Date
Rob Winch 5c5efc9092
SpringTestContext registers WebTestClient Bean 
Closes gh-17780
 2025-08-20 12:15:58 -05:00
Jaehwan Lee 806297da23 Fix misleading variable name in authentication filter 
Rename DEFAULT_ANT_PATH_REQUEST_MATCHER to DEFAULT_PATH_REQUEST_MATCHER
to reflect PathPatternRequestMatcher usage instead of legacy Ant
pattern terminology.

Signed-off-by: Jaehwan Lee <jhrick0129@gmail.com>
 2025-08-19 22:21:35 -05:00
Rob Winch 7f103b2d0a
Merge branch '6.5.x' 2025-08-19 22:19:46 -05:00
dependabot[bot] c06ff59747
Bump org.hibernate.orm:hibernate-core from 6.6.23.Final to 6.6.26.Final 
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm) from 6.6.23.Final to 6.6.26.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases)
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/6.6.26/changelog.txt)
- [Commits](https://github.com/hibernate/hibernate-orm/compare/6.6.23...6.6.26)

---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
  dependency-version: 6.6.26.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-08-19 22:19:01 -05:00
dependabot[bot] f1194de45e
Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 
Bumps [org.assertj:assertj-core](https://github.com/assertj/assertj) from 3.27.3 to 3.27.4.
- [Release notes](https://github.com/assertj/assertj/releases)
- [Commits](https://github.com/assertj/assertj/compare/assertj-build-3.27.3...assertj-build-3.27.4)

---
updated-dependencies:
- dependency-name: org.assertj:assertj-core
  dependency-version: 3.27.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-08-19 22:19:01 -05:00
dependabot[bot] 1f16009c8d
Bump org.springframework.ldap:spring-ldap-core from 3.2.13 to 3.2.14 
Bumps [org.springframework.ldap:spring-ldap-core](https://github.com/spring-projects/spring-ldap) from 3.2.13 to 3.2.14.
- [Release notes](https://github.com/spring-projects/spring-ldap/releases)
- [Changelog](https://github.com/spring-projects/spring-ldap/blob/main/changelog.txt)
- [Commits](https://github.com/spring-projects/spring-ldap/compare/3.2.13...3.2.14)

---
updated-dependencies:
- dependency-name: org.springframework.ldap:spring-ldap-core
  dependency-version: 3.2.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-08-19 22:19:01 -05:00
Rob Winch 3e13437b1a
Merge branch '6.4.x' into 6.5.x 2025-08-19 22:16:16 -05:00
Rob Winch 20a6863e07
Bump org.hibernate.orm:hibernate-core from 6.6.23.Final to 6.6.26.Final 2025-08-19 22:15:40 -05:00
Rob Winch e145c07d5b
Bump io.micrometer:micrometer-observation from 1.14.9 to 1.14.10 2025-08-19 22:15:38 -05:00
Rob Winch 68a7f1702f
Merge branch '6.5.x' 2025-08-19 22:15:14 -05:00
Rob Winch 3e8b606aac
Merge branch '6.4.x' into 6.5.x 2025-08-19 22:14:37 -05:00
Tran Ngoc Nhan ef5c703010 Remove unused import 
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
 2025-08-19 22:05:25 -05:00
Andrey Litvitski 47be93e694 Annotate AuthenticationTrustResolver methods with `@Nullable` 
Since AuthenticationTrustResolver can handle null arguments (this is
also stated in the implementation of this interface), we should mark
these arguments as `@Nullable`.

Closes: gh-17764

Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com>
 2025-08-19 22:02:59 -05:00
dependabot[bot] 9310153d16 Bump io.spring.nullability:io.spring.nullability.gradle.plugin 
Bumps [io.spring.nullability:io.spring.nullability.gradle.plugin](https://github.com/spring-gradle-plugins/nullability-plugin) from 0.0.2 to 0.0.3.
- [Release notes](https://github.com/spring-gradle-plugins/nullability-plugin/releases)
- [Commits](https://github.com/spring-gradle-plugins/nullability-plugin/compare/v0.0.2...v0.0.3)

---
updated-dependencies:
- dependency-name: io.spring.nullability:io.spring.nullability.gradle.plugin
  dependency-version: 0.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-08-19 21:41:13 -05:00
dependabot[bot] a933089ec2
Bump io.micrometer:micrometer-observation from 1.14.9 to 1.14.10 
Bumps [io.micrometer:micrometer-observation](https://github.com/micrometer-metrics/micrometer) from 1.14.9 to 1.14.10.
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases)
- [Commits](https://github.com/micrometer-metrics/micrometer/compare/v1.14.9...v1.14.10)

---
updated-dependencies:
- dependency-name: io.micrometer:micrometer-observation
  dependency-version: 1.14.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-08-19 14:41:53 +00:00
dependabot[bot] a8da9ec7f7
Bump org.hibernate.orm:hibernate-core from 6.6.23.Final to 6.6.26.Final 
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm) from 6.6.23.Final to 6.6.26.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases)
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/6.6.26/changelog.txt)
- [Commits](https://github.com/hibernate/hibernate-orm/compare/6.6.23...6.6.26)

---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
  dependency-version: 6.6.26.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-08-19 14:40:42 +00:00
Josh Cummings 3396890d8b
Propagate AccessDeniedException Only to ExceptionTranslationFilter 
Closes gh-17761
 2025-08-18 17:04:19 -06:00
Josh Cummings c45bc384da
Interpret Expression Templates by Default 
Closes gh-17763
 2025-08-18 15:45:57 -06:00
Josh Cummings 4da98dde2b
Update What's New 
Issue gh-17707
 2025-08-18 15:31:03 -06:00
Rob Winch 7575e4ef1c
Next development version 2025-08-18 15:17:59 -05:00
github-actions[bot] 70626fe3d9 Release 7.0.0-M2 2025-08-18 18:39:45 +00:00
github-actions[bot] acaed1ad96 Next development version 2025-08-18 18:15:02 +00:00
github-actions[bot] 0549bf566b Next development version 2025-08-18 18:06:07 +00:00
github-actions[bot] 44037c0ea4 Release 6.5.3 2025-08-18 17:37:38 +00:00
github-actions[bot] 01c8cea00f Release 6.4.9 2025-08-18 17:37:33 +00:00
Rob Winch d2b70230f5
Merge branch '6.5.x' 2025-08-18 12:35:42 -05:00
Rob Winch 9909dc615a
Merge branch '6.4.x' into 6.5.x 2025-08-18 12:35:35 -05:00
Rob Winch 525601ea67
Fix version 6.4.9-SNAPSHOT 2025-08-18 12:35:10 -05:00
Rob Winch 15a4d0d627
Fix version=6.5.3-SNAPSHOT 2025-08-18 12:32:55 -05:00
Rob Winch 34aac5d45f
Merge branch '6.5.x' 2025-08-18 09:09:09 -05:00
Rob Winch 80b1a308ab
Merge branch '6.4.x' into 6.5.x 2025-08-18 09:08:59 -05:00
Rob Winch 644f7802d8
Bump org.springframework.ldap:spring-ldap-core from 3.2.13 to 3.2.14 2025-08-18 09:07:58 -05:00
Rob Winch a26d6fccb0
Bump org.springframework.data:spring-data-bom from 2024.1.8 to 2024.1.9 2025-08-18 09:07:57 -05:00
Rob Winch 74735a1a80
Bump org.hibernate.orm:hibernate-core from 6.6.23.Final to 6.6.26.Final 2025-08-18 09:07:55 -05:00
Rob Winch 82a16d7917
Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 2025-08-18 09:07:53 -05:00
Rob Winch c1869c1db9
Bump org.hibernate.orm:hibernate-core from 6.6.23.Final to 6.6.26.Final 2025-08-18 09:07:14 -05:00
Rob Winch d429780a1d
Bump io.micrometer:micrometer-observation from 1.14.9 to 1.14.10 2025-08-18 09:07:13 -05:00
dependabot[bot] 319c7a4937 Bump org.springframework:spring-framework-bom from 7.0.0-M7 to 7.0.0-M8 
Bumps [org.springframework:spring-framework-bom](https://github.com/spring-projects/spring-framework) from 7.0.0-M7 to 7.0.0-M8.
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](https://github.com/spring-projects/spring-framework/compare/v7.0.0-M7...v7.0.0-M8)

---
updated-dependencies:
- dependency-name: org.springframework:spring-framework-bom
  dependency-version: 7.0.0-M8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-08-18 09:05:03 -05:00
Josh Cummings 714781df78 Isolate AOT Test to Security Components 
PR gh-17724
 2025-08-18 09:05:03 -05:00
Josh Cummings a04b026000 Disable Test 
Issue gh-17747
PR gh-17724
 2025-08-18 09:05:03 -05:00
Josh Cummings aeb2dbc2b6
Move PathPatternRequestMatcher.Builder to Shared Object 
This commit changes the DSL to look for a shared object
instead of publishing a bean for PathPatternRequestMatcher.Builder.

Closes gh-17746
 2025-08-18 06:31:31 -06:00
dependabot[bot] 018830aa8e
Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 
Bumps [org.assertj:assertj-core](https://github.com/assertj/assertj) from 3.27.3 to 3.27.4.
- [Release notes](https://github.com/assertj/assertj/releases)
- [Commits](https://github.com/assertj/assertj/compare/assertj-build-3.27.3...assertj-build-3.27.4)

---
updated-dependencies:
- dependency-name: org.assertj:assertj-core
  dependency-version: 3.27.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-08-18 06:08:37 +00:00
dependabot[bot] b131fc6d9c
Bump org.hibernate.orm:hibernate-core from 6.6.23.Final to 6.6.26.Final 
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm) from 6.6.23.Final to 6.6.26.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases)
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/6.6.26/changelog.txt)
- [Commits](https://github.com/hibernate/hibernate-orm/compare/6.6.23...6.6.26)

---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
  dependency-version: 6.6.26.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-08-18 06:07:30 +00:00
dependabot[bot] 6da7f147ec
Bump org.springframework.data:spring-data-bom from 2024.1.8 to 2024.1.9 
Bumps [org.springframework.data:spring-data-bom](https://github.com/spring-projects/spring-data-bom) from 2024.1.8 to 2024.1.9.
- [Release notes](https://github.com/spring-projects/spring-data-bom/releases)
- [Commits](https://github.com/spring-projects/spring-data-bom/compare/2024.1.8...2024.1.9)

---
updated-dependencies:
- dependency-name: org.springframework.data:spring-data-bom
  dependency-version: 2024.1.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-08-18 06:07:02 +00:00
dependabot[bot] e4f59a6b00
Bump org.springframework.ldap:spring-ldap-core from 3.2.13 to 3.2.14 
Bumps [org.springframework.ldap:spring-ldap-core](https://github.com/spring-projects/spring-ldap) from 3.2.13 to 3.2.14.
- [Release notes](https://github.com/spring-projects/spring-ldap/releases)
- [Changelog](https://github.com/spring-projects/spring-ldap/blob/main/changelog.txt)
- [Commits](https://github.com/spring-projects/spring-ldap/compare/3.2.13...3.2.14)

---
updated-dependencies:
- dependency-name: org.springframework.ldap:spring-ldap-core
  dependency-version: 3.2.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-08-18 06:04:02 +00:00
dependabot[bot] febf077fd2
Bump io.micrometer:micrometer-observation from 1.14.9 to 1.14.10 
Bumps [io.micrometer:micrometer-observation](https://github.com/micrometer-metrics/micrometer) from 1.14.9 to 1.14.10.
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases)
- [Commits](https://github.com/micrometer-metrics/micrometer/compare/v1.14.9...v1.14.10)

---
updated-dependencies:
- dependency-name: io.micrometer:micrometer-observation
  dependency-version: 1.14.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-08-18 05:24:15 +00:00
dependabot[bot] a20ca88ea8
Bump org.hibernate.orm:hibernate-core from 6.6.23.Final to 6.6.26.Final 
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm) from 6.6.23.Final to 6.6.26.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases)
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/6.6.26/changelog.txt)
- [Commits](https://github.com/hibernate/hibernate-orm/compare/6.6.23...6.6.26)

---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
  dependency-version: 6.6.26.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-08-18 05:21:13 +00:00
Josh Cummings 006f638c0a
Merge branch '6.5.x' 2025-08-15 17:28:30 -06:00
Josh Cummings 41f313192c
Merge branch '6.4.x' into 6.5.x 2025-08-15 17:28:21 -06:00
Josh Cummings 890c11d428
Polish SecurityNamespaceHandler Version Checking 
PR gh-17689
 2025-08-15 17:26:57 -06:00