dependabot[bot] opened a new pull request, #16237: URL: https://github.com/apache/dubbo/pull/16237
Bumps `spring-security-6.version` from 6.5.9 to 6.5.10. Updates `org.springframework.security:spring-security-core` from 6.5.9 to 6.5.10 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/spring-projects/spring-security/releases";>org.springframework.security:spring-security-core's releases</a>.</em></p> <blockquote> <h2>6.5.10</h2> <h2>:star: New Features</h2> <ul> <li>Add CredentialRecordOwnerAuthorizationManager <a href="https://redirect.github.com/spring-projects/spring-security/pull/19004";>#19004</a></li> <li>Add XML Based shouldWriteHeadersEagerly tests <a href="https://redirect.github.com/spring-projects/spring-security/pull/19017";>#19017</a></li> <li>Clarify Session Management Persistence Documentation <a href="https://redirect.github.com/spring-projects/spring-security/pull/18345";>#18345</a></li> <li>Update <code>FilterChainProxy#getFilters(String)</code> javadoc <a href="https://redirect.github.com/spring-projects/spring-security/pull/18258";>#18258</a></li> </ul> <h2>:beetle: Bug Fixes</h2> <ul> <li>Add equals and hashcode to <code>HttpMethodRequestMatcher</code> <a href="https://redirect.github.com/spring-projects/spring-security/pull/18914";>#18914</a></li> <li>auth_time validation fails when SSO session is renewed <a href="https://redirect.github.com/spring-projects/spring-security/issues/18839";>#18839</a></li> <li>Fallback defaultTargetUrl if refererHeader is empty <a href="https://redirect.github.com/spring-projects/spring-security/pull/18806";>#18806</a></li> <li>Fix <code>HttpSessionRequestCache#getMatchingRequest</code> query string parsing <a href="https://redirect.github.com/spring-projects/spring-security/pull/16914";>#16914</a></li> <li>Fix documentation for Custom Authorization Manager <a href="https://redirect.github.com/spring-projects/spring-security/pull/18362";>#18362</a></li> <li>Improve serialVersionUID check in tests <a href="https://redirect.github.com/spring-projects/spring-security/pull/18474";>#18474</a></li> <li>Merge Handle null value in OnCommittedResponseWrapper header methods <a href="https://redirect.github.com/spring-projects/spring-security/pull/18989";>#18989</a></li> <li>OAuth2 client sessionManagement ineffective with DefaultOidcUser <a href="https://redirect.github.com/spring-projects/spring-security/issues/18622";>#18622</a></li> </ul> <h2>:hammer: Dependency Upgrades</h2> <ul> <li>Bump <code>@springio</code>/antora-extensions from 1.14.10 to 1.14.11 in /docs <a href="https://redirect.github.com/spring-projects/spring-security/pull/19055";>#19055</a></li> <li>Bump <code>@springio</code>/antora-extensions from 1.14.7 to 1.14.9 in /docs <a href="https://redirect.github.com/spring-projects/spring-security/pull/18956";>#18956</a></li> <li>Bump <code>@springio</code>/antora-extensions from 1.14.9 to 1.14.10 in /docs <a href="https://redirect.github.com/spring-projects/spring-security/pull/19031";>#19031</a></li> <li>Bump <code>@springio</code>/asciidoctor-extensions from 1.0.0-alpha.17 to 1.0.0-alpha.18 in /docs <a href="https://redirect.github.com/spring-projects/spring-security/pull/18952";>#18952</a></li> <li>Bump actions/upload-artifact from 7.0.0 to 7.0.1 <a href="https://redirect.github.com/spring-projects/spring-security/pull/19094";>#19094</a></li> <li>Bump io.projectreactor:reactor-bom from 2024.0.16 to 2024.0.17 <a href="https://redirect.github.com/spring-projects/spring-security/pull/19078";>#19078</a></li> <li>Bump io.spring.gradle:spring-security-release-plugin from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18916";>#18916</a></li> <li>Bump org.apache.maven:maven-resolver-provider from 3.9.14 to 3.9.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/19108";>#19108</a></li> <li>Bump org.hibernate.orm:hibernate-core from 6.6.44.Final to 6.6.45.Final <a href="https://redirect.github.com/spring-projects/spring-security/pull/18966";>#18966</a></li> <li>Bump org.hibernate.orm:hibernate-core from 6.6.45.Final to 6.6.47.Final <a href="https://redirect.github.com/spring-projects/spring-security/pull/19046";>#19046</a></li> <li>Bump org.hibernate.orm:hibernate-core from 6.6.47.Final to 6.6.48.Final <a href="https://redirect.github.com/spring-projects/spring-security/pull/19064";>#19064</a></li> <li>Bump org.hibernate.orm:hibernate-core from 6.6.48.Final to 6.6.49.Final <a href="https://redirect.github.com/spring-projects/spring-security/pull/19110";>#19110</a></li> <li>Bump org.springframework:spring-framework-bom from 6.2.17 to 6.2.18 <a href="https://redirect.github.com/spring-projects/spring-security/pull/19109";>#19109</a></li> <li>Bump spring-io/spring-release-actions from 0.0.3 to 0.0.4 <a href="https://redirect.github.com/spring-projects/spring-security/pull/19093";>#19093</a></li> <li>Bump spring-io/spring-security-release-tools from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18954";>#18954</a></li> <li>Bump spring-io/spring-security-release-tools/.github/workflows/build.yml from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18955";>#18955</a></li> <li>Bump spring-io/spring-security-release-tools/.github/workflows/deploy-artifacts.yml from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18949";>#18949</a></li> <li>Bump spring-io/spring-security-release-tools/.github/workflows/deploy-schema.yml from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18950";>#18950</a></li> <li>Bump spring-io/spring-security-release-tools/.github/workflows/perform-release.yml from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18995";>#18995</a></li> <li>Bump spring-io/spring-security-release-tools/.github/workflows/test.yml from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18951";>#18951</a></li> <li>Bump spring-io/spring-security-release-tools/.github/workflows/update-scheduled-release-version.yml from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18994";>#18994</a></li> <li>Update to spring-security-release-tools 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/issues/18910";>#18910</a></li> </ul> <h2>:heart: Contributors</h2> <p>Thank you to all the contributors who worked on this release:</p> <p><a href="https://github.com/Kehrlann";><code>@Kehrlann</code></a>, <a href="https://github.com/as1605";><code>@as1605</code></a>, <a href="https://github.com/johnycho";><code>@johnycho</code></a>, <a href="https://github.com/ngocnhan-tran1996";><code>@ngocnhan-tran1996</code></a>, <a href="https://github.com/rwinch";><code>@rwinch</code></a>, and <a href="https://github.com/sankranty";><code>@sankranty</code></a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/spring-projects/spring-security/commit/0a9d4dc8fc9d303dad7fc1ee25cc7381a9888899";><code>0a9d4dc</code></a> Release 6.5.10</li> <li><a href="https://github.com/spring-projects/spring-security/commit/3d4e20597a8cb00eab70fcca67575a789a6786a2";><code>3d4e205</code></a> Merge remote-tracking branch 'oss/6.5.x' into 6.5.x</li> <li><a href="https://github.com/spring-projects/spring-security/commit/81bd52ae48787fe5ca923977315d4c78a24d92d1";><code>81bd52a</code></a> Bump org.hibernate.orm:hibernate-core from 6.6.48.Final to 6.6.49.Final</li> <li><a href="https://github.com/spring-projects/spring-security/commit/25b6af273889c629d229646632b8a11bfc38cfeb";><code>25b6af2</code></a> Bump org.springframework:spring-framework-bom from 6.2.17 to 6.2.18</li> <li><a href="https://github.com/spring-projects/spring-security/commit/95987bffc1efe239bd152078d38a7c62af77e92e";><code>95987bf</code></a> Bump org.apache.maven:maven-resolver-provider from 3.9.14 to 3.9.15</li> <li><a href="https://github.com/spring-projects/spring-security/commit/6e5f8f2a1d60b9dd5ab53398eb4e078f46de8723";><code>6e5f8f2</code></a> Merge remote-tracking branch 'origin/6.5.x' into 6.5.x</li> <li><a href="https://github.com/spring-projects/spring-security/commit/4187af38b251fc97fdf9949f7869618111e6e261";><code>4187af3</code></a> Verify token deletion in JdbcOneTimeTokenService</li> <li><a href="https://github.com/spring-projects/spring-security/commit/5b638a54a4c0f74747c9d9ae7d2edc5c754a9322";><code>5b638a5</code></a> Use SHA Hashes</li> <li><a href="https://github.com/spring-projects/spring-security/commit/51eef2b98056f70c4df0ecd31742e5d68fa8112c";><code>51eef2b</code></a> Bump io.projectreactor:reactor-bom from 2024.0.16 to 2024.0.17</li> <li><a href="https://github.com/spring-projects/spring-security/commit/302cfb116ea0a52f7cb141ad1f7f7aeefb1d475c";><code>302cfb1</code></a> Bump <code>@springio/antora-extensions</code> from 1.14.10 to 1.14.11 in /docs</li> <li>Additional commits viewable in <a href="https://github.com/spring-projects/spring-security/compare/6.5.9...6.5.10";>compare view</a></li> </ul> </details> <br /> Updates `org.springframework.security:spring-security-oauth2-client` from 6.5.9 to 6.5.10 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/spring-projects/spring-security/releases";>org.springframework.security:spring-security-oauth2-client's releases</a>.</em></p> <blockquote> <h2>6.5.10</h2> <h2>:star: New Features</h2> <ul> <li>Add CredentialRecordOwnerAuthorizationManager <a href="https://redirect.github.com/spring-projects/spring-security/pull/19004";>#19004</a></li> <li>Add XML Based shouldWriteHeadersEagerly tests <a href="https://redirect.github.com/spring-projects/spring-security/pull/19017";>#19017</a></li> <li>Clarify Session Management Persistence Documentation <a href="https://redirect.github.com/spring-projects/spring-security/pull/18345";>#18345</a></li> <li>Update <code>FilterChainProxy#getFilters(String)</code> javadoc <a href="https://redirect.github.com/spring-projects/spring-security/pull/18258";>#18258</a></li> </ul> <h2>:beetle: Bug Fixes</h2> <ul> <li>Add equals and hashcode to <code>HttpMethodRequestMatcher</code> <a href="https://redirect.github.com/spring-projects/spring-security/pull/18914";>#18914</a></li> <li>auth_time validation fails when SSO session is renewed <a href="https://redirect.github.com/spring-projects/spring-security/issues/18839";>#18839</a></li> <li>Fallback defaultTargetUrl if refererHeader is empty <a href="https://redirect.github.com/spring-projects/spring-security/pull/18806";>#18806</a></li> <li>Fix <code>HttpSessionRequestCache#getMatchingRequest</code> query string parsing <a href="https://redirect.github.com/spring-projects/spring-security/pull/16914";>#16914</a></li> <li>Fix documentation for Custom Authorization Manager <a href="https://redirect.github.com/spring-projects/spring-security/pull/18362";>#18362</a></li> <li>Improve serialVersionUID check in tests <a href="https://redirect.github.com/spring-projects/spring-security/pull/18474";>#18474</a></li> <li>Merge Handle null value in OnCommittedResponseWrapper header methods <a href="https://redirect.github.com/spring-projects/spring-security/pull/18989";>#18989</a></li> <li>OAuth2 client sessionManagement ineffective with DefaultOidcUser <a href="https://redirect.github.com/spring-projects/spring-security/issues/18622";>#18622</a></li> </ul> <h2>:hammer: Dependency Upgrades</h2> <ul> <li>Bump <code>@springio</code>/antora-extensions from 1.14.10 to 1.14.11 in /docs <a href="https://redirect.github.com/spring-projects/spring-security/pull/19055";>#19055</a></li> <li>Bump <code>@springio</code>/antora-extensions from 1.14.7 to 1.14.9 in /docs <a href="https://redirect.github.com/spring-projects/spring-security/pull/18956";>#18956</a></li> <li>Bump <code>@springio</code>/antora-extensions from 1.14.9 to 1.14.10 in /docs <a href="https://redirect.github.com/spring-projects/spring-security/pull/19031";>#19031</a></li> <li>Bump <code>@springio</code>/asciidoctor-extensions from 1.0.0-alpha.17 to 1.0.0-alpha.18 in /docs <a href="https://redirect.github.com/spring-projects/spring-security/pull/18952";>#18952</a></li> <li>Bump actions/upload-artifact from 7.0.0 to 7.0.1 <a href="https://redirect.github.com/spring-projects/spring-security/pull/19094";>#19094</a></li> <li>Bump io.projectreactor:reactor-bom from 2024.0.16 to 2024.0.17 <a href="https://redirect.github.com/spring-projects/spring-security/pull/19078";>#19078</a></li> <li>Bump io.spring.gradle:spring-security-release-plugin from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18916";>#18916</a></li> <li>Bump org.apache.maven:maven-resolver-provider from 3.9.14 to 3.9.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/19108";>#19108</a></li> <li>Bump org.hibernate.orm:hibernate-core from 6.6.44.Final to 6.6.45.Final <a href="https://redirect.github.com/spring-projects/spring-security/pull/18966";>#18966</a></li> <li>Bump org.hibernate.orm:hibernate-core from 6.6.45.Final to 6.6.47.Final <a href="https://redirect.github.com/spring-projects/spring-security/pull/19046";>#19046</a></li> <li>Bump org.hibernate.orm:hibernate-core from 6.6.47.Final to 6.6.48.Final <a href="https://redirect.github.com/spring-projects/spring-security/pull/19064";>#19064</a></li> <li>Bump org.hibernate.orm:hibernate-core from 6.6.48.Final to 6.6.49.Final <a href="https://redirect.github.com/spring-projects/spring-security/pull/19110";>#19110</a></li> <li>Bump org.springframework:spring-framework-bom from 6.2.17 to 6.2.18 <a href="https://redirect.github.com/spring-projects/spring-security/pull/19109";>#19109</a></li> <li>Bump spring-io/spring-release-actions from 0.0.3 to 0.0.4 <a href="https://redirect.github.com/spring-projects/spring-security/pull/19093";>#19093</a></li> <li>Bump spring-io/spring-security-release-tools from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18954";>#18954</a></li> <li>Bump spring-io/spring-security-release-tools/.github/workflows/build.yml from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18955";>#18955</a></li> <li>Bump spring-io/spring-security-release-tools/.github/workflows/deploy-artifacts.yml from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18949";>#18949</a></li> <li>Bump spring-io/spring-security-release-tools/.github/workflows/deploy-schema.yml from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18950";>#18950</a></li> <li>Bump spring-io/spring-security-release-tools/.github/workflows/perform-release.yml from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18995";>#18995</a></li> <li>Bump spring-io/spring-security-release-tools/.github/workflows/test.yml from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18951";>#18951</a></li> <li>Bump spring-io/spring-security-release-tools/.github/workflows/update-scheduled-release-version.yml from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18994";>#18994</a></li> <li>Update to spring-security-release-tools 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/issues/18910";>#18910</a></li> </ul> <h2>:heart: Contributors</h2> <p>Thank you to all the contributors who worked on this release:</p> <p><a href="https://github.com/Kehrlann";><code>@Kehrlann</code></a>, <a href="https://github.com/as1605";><code>@as1605</code></a>, <a href="https://github.com/johnycho";><code>@johnycho</code></a>, <a href="https://github.com/ngocnhan-tran1996";><code>@ngocnhan-tran1996</code></a>, <a href="https://github.com/rwinch";><code>@rwinch</code></a>, and <a href="https://github.com/sankranty";><code>@sankranty</code></a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/spring-projects/spring-security/commit/0a9d4dc8fc9d303dad7fc1ee25cc7381a9888899";><code>0a9d4dc</code></a> Release 6.5.10</li> <li><a href="https://github.com/spring-projects/spring-security/commit/3d4e20597a8cb00eab70fcca67575a789a6786a2";><code>3d4e205</code></a> Merge remote-tracking branch 'oss/6.5.x' into 6.5.x</li> <li><a href="https://github.com/spring-projects/spring-security/commit/81bd52ae48787fe5ca923977315d4c78a24d92d1";><code>81bd52a</code></a> Bump org.hibernate.orm:hibernate-core from 6.6.48.Final to 6.6.49.Final</li> <li><a href="https://github.com/spring-projects/spring-security/commit/25b6af273889c629d229646632b8a11bfc38cfeb";><code>25b6af2</code></a> Bump org.springframework:spring-framework-bom from 6.2.17 to 6.2.18</li> <li><a href="https://github.com/spring-projects/spring-security/commit/95987bffc1efe239bd152078d38a7c62af77e92e";><code>95987bf</code></a> Bump org.apache.maven:maven-resolver-provider from 3.9.14 to 3.9.15</li> <li><a href="https://github.com/spring-projects/spring-security/commit/6e5f8f2a1d60b9dd5ab53398eb4e078f46de8723";><code>6e5f8f2</code></a> Merge remote-tracking branch 'origin/6.5.x' into 6.5.x</li> <li><a href="https://github.com/spring-projects/spring-security/commit/4187af38b251fc97fdf9949f7869618111e6e261";><code>4187af3</code></a> Verify token deletion in JdbcOneTimeTokenService</li> <li><a href="https://github.com/spring-projects/spring-security/commit/5b638a54a4c0f74747c9d9ae7d2edc5c754a9322";><code>5b638a5</code></a> Use SHA Hashes</li> <li><a href="https://github.com/spring-projects/spring-security/commit/51eef2b98056f70c4df0ecd31742e5d68fa8112c";><code>51eef2b</code></a> Bump io.projectreactor:reactor-bom from 2024.0.16 to 2024.0.17</li> <li><a href="https://github.com/spring-projects/spring-security/commit/302cfb116ea0a52f7cb141ad1f7f7aeefb1d475c";><code>302cfb1</code></a> Bump <code>@springio/antora-extensions</code> from 1.14.10 to 1.14.11 in /docs</li> <li>Additional commits viewable in <a href="https://github.com/spring-projects/spring-security/compare/6.5.9...6.5.10";>compare view</a></li> </ul> </details> <br /> Updates `org.springframework.security:spring-security-config` from 6.5.9 to 6.5.10 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/spring-projects/spring-security/releases";>org.springframework.security:spring-security-config's releases</a>.</em></p> <blockquote> <h2>6.5.10</h2> <h2>:star: New Features</h2> <ul> <li>Add CredentialRecordOwnerAuthorizationManager <a href="https://redirect.github.com/spring-projects/spring-security/pull/19004";>#19004</a></li> <li>Add XML Based shouldWriteHeadersEagerly tests <a href="https://redirect.github.com/spring-projects/spring-security/pull/19017";>#19017</a></li> <li>Clarify Session Management Persistence Documentation <a href="https://redirect.github.com/spring-projects/spring-security/pull/18345";>#18345</a></li> <li>Update <code>FilterChainProxy#getFilters(String)</code> javadoc <a href="https://redirect.github.com/spring-projects/spring-security/pull/18258";>#18258</a></li> </ul> <h2>:beetle: Bug Fixes</h2> <ul> <li>Add equals and hashcode to <code>HttpMethodRequestMatcher</code> <a href="https://redirect.github.com/spring-projects/spring-security/pull/18914";>#18914</a></li> <li>auth_time validation fails when SSO session is renewed <a href="https://redirect.github.com/spring-projects/spring-security/issues/18839";>#18839</a></li> <li>Fallback defaultTargetUrl if refererHeader is empty <a href="https://redirect.github.com/spring-projects/spring-security/pull/18806";>#18806</a></li> <li>Fix <code>HttpSessionRequestCache#getMatchingRequest</code> query string parsing <a href="https://redirect.github.com/spring-projects/spring-security/pull/16914";>#16914</a></li> <li>Fix documentation for Custom Authorization Manager <a href="https://redirect.github.com/spring-projects/spring-security/pull/18362";>#18362</a></li> <li>Improve serialVersionUID check in tests <a href="https://redirect.github.com/spring-projects/spring-security/pull/18474";>#18474</a></li> <li>Merge Handle null value in OnCommittedResponseWrapper header methods <a href="https://redirect.github.com/spring-projects/spring-security/pull/18989";>#18989</a></li> <li>OAuth2 client sessionManagement ineffective with DefaultOidcUser <a href="https://redirect.github.com/spring-projects/spring-security/issues/18622";>#18622</a></li> </ul> <h2>:hammer: Dependency Upgrades</h2> <ul> <li>Bump <code>@springio</code>/antora-extensions from 1.14.10 to 1.14.11 in /docs <a href="https://redirect.github.com/spring-projects/spring-security/pull/19055";>#19055</a></li> <li>Bump <code>@springio</code>/antora-extensions from 1.14.7 to 1.14.9 in /docs <a href="https://redirect.github.com/spring-projects/spring-security/pull/18956";>#18956</a></li> <li>Bump <code>@springio</code>/antora-extensions from 1.14.9 to 1.14.10 in /docs <a href="https://redirect.github.com/spring-projects/spring-security/pull/19031";>#19031</a></li> <li>Bump <code>@springio</code>/asciidoctor-extensions from 1.0.0-alpha.17 to 1.0.0-alpha.18 in /docs <a href="https://redirect.github.com/spring-projects/spring-security/pull/18952";>#18952</a></li> <li>Bump actions/upload-artifact from 7.0.0 to 7.0.1 <a href="https://redirect.github.com/spring-projects/spring-security/pull/19094";>#19094</a></li> <li>Bump io.projectreactor:reactor-bom from 2024.0.16 to 2024.0.17 <a href="https://redirect.github.com/spring-projects/spring-security/pull/19078";>#19078</a></li> <li>Bump io.spring.gradle:spring-security-release-plugin from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18916";>#18916</a></li> <li>Bump org.apache.maven:maven-resolver-provider from 3.9.14 to 3.9.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/19108";>#19108</a></li> <li>Bump org.hibernate.orm:hibernate-core from 6.6.44.Final to 6.6.45.Final <a href="https://redirect.github.com/spring-projects/spring-security/pull/18966";>#18966</a></li> <li>Bump org.hibernate.orm:hibernate-core from 6.6.45.Final to 6.6.47.Final <a href="https://redirect.github.com/spring-projects/spring-security/pull/19046";>#19046</a></li> <li>Bump org.hibernate.orm:hibernate-core from 6.6.47.Final to 6.6.48.Final <a href="https://redirect.github.com/spring-projects/spring-security/pull/19064";>#19064</a></li> <li>Bump org.hibernate.orm:hibernate-core from 6.6.48.Final to 6.6.49.Final <a href="https://redirect.github.com/spring-projects/spring-security/pull/19110";>#19110</a></li> <li>Bump org.springframework:spring-framework-bom from 6.2.17 to 6.2.18 <a href="https://redirect.github.com/spring-projects/spring-security/pull/19109";>#19109</a></li> <li>Bump spring-io/spring-release-actions from 0.0.3 to 0.0.4 <a href="https://redirect.github.com/spring-projects/spring-security/pull/19093";>#19093</a></li> <li>Bump spring-io/spring-security-release-tools from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18954";>#18954</a></li> <li>Bump spring-io/spring-security-release-tools/.github/workflows/build.yml from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18955";>#18955</a></li> <li>Bump spring-io/spring-security-release-tools/.github/workflows/deploy-artifacts.yml from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18949";>#18949</a></li> <li>Bump spring-io/spring-security-release-tools/.github/workflows/deploy-schema.yml from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18950";>#18950</a></li> <li>Bump spring-io/spring-security-release-tools/.github/workflows/perform-release.yml from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18995";>#18995</a></li> <li>Bump spring-io/spring-security-release-tools/.github/workflows/test.yml from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18951";>#18951</a></li> <li>Bump spring-io/spring-security-release-tools/.github/workflows/update-scheduled-release-version.yml from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18994";>#18994</a></li> <li>Update to spring-security-release-tools 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/issues/18910";>#18910</a></li> </ul> <h2>:heart: Contributors</h2> <p>Thank you to all the contributors who worked on this release:</p> <p><a href="https://github.com/Kehrlann";><code>@Kehrlann</code></a>, <a href="https://github.com/as1605";><code>@as1605</code></a>, <a href="https://github.com/johnycho";><code>@johnycho</code></a>, <a href="https://github.com/ngocnhan-tran1996";><code>@ngocnhan-tran1996</code></a>, <a href="https://github.com/rwinch";><code>@rwinch</code></a>, and <a href="https://github.com/sankranty";><code>@sankranty</code></a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/spring-projects/spring-security/commit/0a9d4dc8fc9d303dad7fc1ee25cc7381a9888899";><code>0a9d4dc</code></a> Release 6.5.10</li> <li><a href="https://github.com/spring-projects/spring-security/commit/3d4e20597a8cb00eab70fcca67575a789a6786a2";><code>3d4e205</code></a> Merge remote-tracking branch 'oss/6.5.x' into 6.5.x</li> <li><a href="https://github.com/spring-projects/spring-security/commit/81bd52ae48787fe5ca923977315d4c78a24d92d1";><code>81bd52a</code></a> Bump org.hibernate.orm:hibernate-core from 6.6.48.Final to 6.6.49.Final</li> <li><a href="https://github.com/spring-projects/spring-security/commit/25b6af273889c629d229646632b8a11bfc38cfeb";><code>25b6af2</code></a> Bump org.springframework:spring-framework-bom from 6.2.17 to 6.2.18</li> <li><a href="https://github.com/spring-projects/spring-security/commit/95987bffc1efe239bd152078d38a7c62af77e92e";><code>95987bf</code></a> Bump org.apache.maven:maven-resolver-provider from 3.9.14 to 3.9.15</li> <li><a href="https://github.com/spring-projects/spring-security/commit/6e5f8f2a1d60b9dd5ab53398eb4e078f46de8723";><code>6e5f8f2</code></a> Merge remote-tracking branch 'origin/6.5.x' into 6.5.x</li> <li><a href="https://github.com/spring-projects/spring-security/commit/4187af38b251fc97fdf9949f7869618111e6e261";><code>4187af3</code></a> Verify token deletion in JdbcOneTimeTokenService</li> <li><a href="https://github.com/spring-projects/spring-security/commit/5b638a54a4c0f74747c9d9ae7d2edc5c754a9322";><code>5b638a5</code></a> Use SHA Hashes</li> <li><a href="https://github.com/spring-projects/spring-security/commit/51eef2b98056f70c4df0ecd31742e5d68fa8112c";><code>51eef2b</code></a> Bump io.projectreactor:reactor-bom from 2024.0.16 to 2024.0.17</li> <li><a href="https://github.com/spring-projects/spring-security/commit/302cfb116ea0a52f7cb141ad1f7f7aeefb1d475c";><code>302cfb1</code></a> Bump <code>@springio/antora-extensions</code> from 1.14.10 to 1.14.11 in /docs</li> <li>Additional commits viewable in <a href="https://github.com/spring-projects/spring-security/compare/6.5.9...6.5.10";>compare view</a></li> </ul> </details> <br /> Updates `org.springframework.security:spring-security-web` from 6.5.9 to 6.5.10 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/spring-projects/spring-security/releases";>org.springframework.security:spring-security-web's releases</a>.</em></p> <blockquote> <h2>6.5.10</h2> <h2>:star: New Features</h2> <ul> <li>Add CredentialRecordOwnerAuthorizationManager <a href="https://redirect.github.com/spring-projects/spring-security/pull/19004";>#19004</a></li> <li>Add XML Based shouldWriteHeadersEagerly tests <a href="https://redirect.github.com/spring-projects/spring-security/pull/19017";>#19017</a></li> <li>Clarify Session Management Persistence Documentation <a href="https://redirect.github.com/spring-projects/spring-security/pull/18345";>#18345</a></li> <li>Update <code>FilterChainProxy#getFilters(String)</code> javadoc <a href="https://redirect.github.com/spring-projects/spring-security/pull/18258";>#18258</a></li> </ul> <h2>:beetle: Bug Fixes</h2> <ul> <li>Add equals and hashcode to <code>HttpMethodRequestMatcher</code> <a href="https://redirect.github.com/spring-projects/spring-security/pull/18914";>#18914</a></li> <li>auth_time validation fails when SSO session is renewed <a href="https://redirect.github.com/spring-projects/spring-security/issues/18839";>#18839</a></li> <li>Fallback defaultTargetUrl if refererHeader is empty <a href="https://redirect.github.com/spring-projects/spring-security/pull/18806";>#18806</a></li> <li>Fix <code>HttpSessionRequestCache#getMatchingRequest</code> query string parsing <a href="https://redirect.github.com/spring-projects/spring-security/pull/16914";>#16914</a></li> <li>Fix documentation for Custom Authorization Manager <a href="https://redirect.github.com/spring-projects/spring-security/pull/18362";>#18362</a></li> <li>Improve serialVersionUID check in tests <a href="https://redirect.github.com/spring-projects/spring-security/pull/18474";>#18474</a></li> <li>Merge Handle null value in OnCommittedResponseWrapper header methods <a href="https://redirect.github.com/spring-projects/spring-security/pull/18989";>#18989</a></li> <li>OAuth2 client sessionManagement ineffective with DefaultOidcUser <a href="https://redirect.github.com/spring-projects/spring-security/issues/18622";>#18622</a></li> </ul> <h2>:hammer: Dependency Upgrades</h2> <ul> <li>Bump <code>@springio</code>/antora-extensions from 1.14.10 to 1.14.11 in /docs <a href="https://redirect.github.com/spring-projects/spring-security/pull/19055";>#19055</a></li> <li>Bump <code>@springio</code>/antora-extensions from 1.14.7 to 1.14.9 in /docs <a href="https://redirect.github.com/spring-projects/spring-security/pull/18956";>#18956</a></li> <li>Bump <code>@springio</code>/antora-extensions from 1.14.9 to 1.14.10 in /docs <a href="https://redirect.github.com/spring-projects/spring-security/pull/19031";>#19031</a></li> <li>Bump <code>@springio</code>/asciidoctor-extensions from 1.0.0-alpha.17 to 1.0.0-alpha.18 in /docs <a href="https://redirect.github.com/spring-projects/spring-security/pull/18952";>#18952</a></li> <li>Bump actions/upload-artifact from 7.0.0 to 7.0.1 <a href="https://redirect.github.com/spring-projects/spring-security/pull/19094";>#19094</a></li> <li>Bump io.projectreactor:reactor-bom from 2024.0.16 to 2024.0.17 <a href="https://redirect.github.com/spring-projects/spring-security/pull/19078";>#19078</a></li> <li>Bump io.spring.gradle:spring-security-release-plugin from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18916";>#18916</a></li> <li>Bump org.apache.maven:maven-resolver-provider from 3.9.14 to 3.9.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/19108";>#19108</a></li> <li>Bump org.hibernate.orm:hibernate-core from 6.6.44.Final to 6.6.45.Final <a href="https://redirect.github.com/spring-projects/spring-security/pull/18966";>#18966</a></li> <li>Bump org.hibernate.orm:hibernate-core from 6.6.45.Final to 6.6.47.Final <a href="https://redirect.github.com/spring-projects/spring-security/pull/19046";>#19046</a></li> <li>Bump org.hibernate.orm:hibernate-core from 6.6.47.Final to 6.6.48.Final <a href="https://redirect.github.com/spring-projects/spring-security/pull/19064";>#19064</a></li> <li>Bump org.hibernate.orm:hibernate-core from 6.6.48.Final to 6.6.49.Final <a href="https://redirect.github.com/spring-projects/spring-security/pull/19110";>#19110</a></li> <li>Bump org.springframework:spring-framework-bom from 6.2.17 to 6.2.18 <a href="https://redirect.github.com/spring-projects/spring-security/pull/19109";>#19109</a></li> <li>Bump spring-io/spring-release-actions from 0.0.3 to 0.0.4 <a href="https://redirect.github.com/spring-projects/spring-security/pull/19093";>#19093</a></li> <li>Bump spring-io/spring-security-release-tools from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18954";>#18954</a></li> <li>Bump spring-io/spring-security-release-tools/.github/workflows/build.yml from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18955";>#18955</a></li> <li>Bump spring-io/spring-security-release-tools/.github/workflows/deploy-artifacts.yml from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18949";>#18949</a></li> <li>Bump spring-io/spring-security-release-tools/.github/workflows/deploy-schema.yml from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18950";>#18950</a></li> <li>Bump spring-io/spring-security-release-tools/.github/workflows/perform-release.yml from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18995";>#18995</a></li> <li>Bump spring-io/spring-security-release-tools/.github/workflows/test.yml from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18951";>#18951</a></li> <li>Bump spring-io/spring-security-release-tools/.github/workflows/update-scheduled-release-version.yml from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18994";>#18994</a></li> <li>Update to spring-security-release-tools 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/issues/18910";>#18910</a></li> </ul> <h2>:heart: Contributors</h2> <p>Thank you to all the contributors who worked on this release:</p> <p><a href="https://github.com/Kehrlann";><code>@Kehrlann</code></a>, <a href="https://github.com/as1605";><code>@as1605</code></a>, <a href="https://github.com/johnycho";><code>@johnycho</code></a>, <a href="https://github.com/ngocnhan-tran1996";><code>@ngocnhan-tran1996</code></a>, <a href="https://github.com/rwinch";><code>@rwinch</code></a>, and <a href="https://github.com/sankranty";><code>@sankranty</code></a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/spring-projects/spring-security/commit/0a9d4dc8fc9d303dad7fc1ee25cc7381a9888899";><code>0a9d4dc</code></a> Release 6.5.10</li> <li><a href="https://github.com/spring-projects/spring-security/commit/3d4e20597a8cb00eab70fcca67575a789a6786a2";><code>3d4e205</code></a> Merge remote-tracking branch 'oss/6.5.x' into 6.5.x</li> <li><a href="https://github.com/spring-projects/spring-security/commit/81bd52ae48787fe5ca923977315d4c78a24d92d1";><code>81bd52a</code></a> Bump org.hibernate.orm:hibernate-core from 6.6.48.Final to 6.6.49.Final</li> <li><a href="https://github.com/spring-projects/spring-security/commit/25b6af273889c629d229646632b8a11bfc38cfeb";><code>25b6af2</code></a> Bump org.springframework:spring-framework-bom from 6.2.17 to 6.2.18</li> <li><a href="https://github.com/spring-projects/spring-security/commit/95987bffc1efe239bd152078d38a7c62af77e92e";><code>95987bf</code></a> Bump org.apache.maven:maven-resolver-provider from 3.9.14 to 3.9.15</li> <li><a href="https://github.com/spring-projects/spring-security/commit/6e5f8f2a1d60b9dd5ab53398eb4e078f46de8723";><code>6e5f8f2</code></a> Merge remote-tracking branch 'origin/6.5.x' into 6.5.x</li> <li><a href="https://github.com/spring-projects/spring-security/commit/4187af38b251fc97fdf9949f7869618111e6e261";><code>4187af3</code></a> Verify token deletion in JdbcOneTimeTokenService</li> <li><a href="https://github.com/spring-projects/spring-security/commit/5b638a54a4c0f74747c9d9ae7d2edc5c754a9322";><code>5b638a5</code></a> Use SHA Hashes</li> <li><a href="https://github.com/spring-projects/spring-security/commit/51eef2b98056f70c4df0ecd31742e5d68fa8112c";><code>51eef2b</code></a> Bump io.projectreactor:reactor-bom from 2024.0.16 to 2024.0.17</li> <li><a href="https://github.com/spring-projects/spring-security/commit/302cfb116ea0a52f7cb141ad1f7f7aeefb1d475c";><code>302cfb1</code></a> Bump <code>@springio/antora-extensions</code> from 1.14.10 to 1.14.11 in /docs</li> <li>Additional commits viewable in <a href="https://github.com/spring-projects/spring-security/compare/6.5.9...6.5.10";>compare view</a></li> </ul> </details> <br /> Updates `org.springframework.security:spring-security-crypto` from 6.5.9 to 6.5.10 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/spring-projects/spring-security/releases";>org.springframework.security:spring-security-crypto's releases</a>.</em></p> <blockquote> <h2>6.5.10</h2> <h2>:star: New Features</h2> <ul> <li>Add CredentialRecordOwnerAuthorizationManager <a href="https://redirect.github.com/spring-projects/spring-security/pull/19004";>#19004</a></li> <li>Add XML Based shouldWriteHeadersEagerly tests <a href="https://redirect.github.com/spring-projects/spring-security/pull/19017";>#19017</a></li> <li>Clarify Session Management Persistence Documentation <a href="https://redirect.github.com/spring-projects/spring-security/pull/18345";>#18345</a></li> <li>Update <code>FilterChainProxy#getFilters(String)</code> javadoc <a href="https://redirect.github.com/spring-projects/spring-security/pull/18258";>#18258</a></li> </ul> <h2>:beetle: Bug Fixes</h2> <ul> <li>Add equals and hashcode to <code>HttpMethodRequestMatcher</code> <a href="https://redirect.github.com/spring-projects/spring-security/pull/18914";>#18914</a></li> <li>auth_time validation fails when SSO session is renewed <a href="https://redirect.github.com/spring-projects/spring-security/issues/18839";>#18839</a></li> <li>Fallback defaultTargetUrl if refererHeader is empty <a href="https://redirect.github.com/spring-projects/spring-security/pull/18806";>#18806</a></li> <li>Fix <code>HttpSessionRequestCache#getMatchingRequest</code> query string parsing <a href="https://redirect.github.com/spring-projects/spring-security/pull/16914";>#16914</a></li> <li>Fix documentation for Custom Authorization Manager <a href="https://redirect.github.com/spring-projects/spring-security/pull/18362";>#18362</a></li> <li>Improve serialVersionUID check in tests <a href="https://redirect.github.com/spring-projects/spring-security/pull/18474";>#18474</a></li> <li>Merge Handle null value in OnCommittedResponseWrapper header methods <a href="https://redirect.github.com/spring-projects/spring-security/pull/18989";>#18989</a></li> <li>OAuth2 client sessionManagement ineffective with DefaultOidcUser <a href="https://redirect.github.com/spring-projects/spring-security/issues/18622";>#18622</a></li> </ul> <h2>:hammer: Dependency Upgrades</h2> <ul> <li>Bump <code>@springio</code>/antora-extensions from 1.14.10 to 1.14.11 in /docs <a href="https://redirect.github.com/spring-projects/spring-security/pull/19055";>#19055</a></li> <li>Bump <code>@springio</code>/antora-extensions from 1.14.7 to 1.14.9 in /docs <a href="https://redirect.github.com/spring-projects/spring-security/pull/18956";>#18956</a></li> <li>Bump <code>@springio</code>/antora-extensions from 1.14.9 to 1.14.10 in /docs <a href="https://redirect.github.com/spring-projects/spring-security/pull/19031";>#19031</a></li> <li>Bump <code>@springio</code>/asciidoctor-extensions from 1.0.0-alpha.17 to 1.0.0-alpha.18 in /docs <a href="https://redirect.github.com/spring-projects/spring-security/pull/18952";>#18952</a></li> <li>Bump actions/upload-artifact from 7.0.0 to 7.0.1 <a href="https://redirect.github.com/spring-projects/spring-security/pull/19094";>#19094</a></li> <li>Bump io.projectreactor:reactor-bom from 2024.0.16 to 2024.0.17 <a href="https://redirect.github.com/spring-projects/spring-security/pull/19078";>#19078</a></li> <li>Bump io.spring.gradle:spring-security-release-plugin from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18916";>#18916</a></li> <li>Bump org.apache.maven:maven-resolver-provider from 3.9.14 to 3.9.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/19108";>#19108</a></li> <li>Bump org.hibernate.orm:hibernate-core from 6.6.44.Final to 6.6.45.Final <a href="https://redirect.github.com/spring-projects/spring-security/pull/18966";>#18966</a></li> <li>Bump org.hibernate.orm:hibernate-core from 6.6.45.Final to 6.6.47.Final <a href="https://redirect.github.com/spring-projects/spring-security/pull/19046";>#19046</a></li> <li>Bump org.hibernate.orm:hibernate-core from 6.6.47.Final to 6.6.48.Final <a href="https://redirect.github.com/spring-projects/spring-security/pull/19064";>#19064</a></li> <li>Bump org.hibernate.orm:hibernate-core from 6.6.48.Final to 6.6.49.Final <a href="https://redirect.github.com/spring-projects/spring-security/pull/19110";>#19110</a></li> <li>Bump org.springframework:spring-framework-bom from 6.2.17 to 6.2.18 <a href="https://redirect.github.com/spring-projects/spring-security/pull/19109";>#19109</a></li> <li>Bump spring-io/spring-release-actions from 0.0.3 to 0.0.4 <a href="https://redirect.github.com/spring-projects/spring-security/pull/19093";>#19093</a></li> <li>Bump spring-io/spring-security-release-tools from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18954";>#18954</a></li> <li>Bump spring-io/spring-security-release-tools/.github/workflows/build.yml from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18955";>#18955</a></li> <li>Bump spring-io/spring-security-release-tools/.github/workflows/deploy-artifacts.yml from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18949";>#18949</a></li> <li>Bump spring-io/spring-security-release-tools/.github/workflows/deploy-schema.yml from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18950";>#18950</a></li> <li>Bump spring-io/spring-security-release-tools/.github/workflows/perform-release.yml from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18995";>#18995</a></li> <li>Bump spring-io/spring-security-release-tools/.github/workflows/test.yml from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18951";>#18951</a></li> <li>Bump spring-io/spring-security-release-tools/.github/workflows/update-scheduled-release-version.yml from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18994";>#18994</a></li> <li>Update to spring-security-release-tools 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/issues/18910";>#18910</a></li> </ul> <h2>:heart: Contributors</h2> <p>Thank you to all the contributors who worked on this release:</p> <p><a href="https://github.com/Kehrlann";><code>@Kehrlann</code></a>, <a href="https://github.com/as1605";><code>@as1605</code></a>, <a href="https://github.com/johnycho";><code>@johnycho</code></a>, <a href="https://github.com/ngocnhan-tran1996";><code>@ngocnhan-tran1996</code></a>, <a href="https://github.com/rwinch";><code>@rwinch</code></a>, and <a href="https://github.com/sankranty";><code>@sankranty</code></a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/spring-projects/spring-security/commit/0a9d4dc8fc9d303dad7fc1ee25cc7381a9888899";><code>0a9d4dc</code></a> Release 6.5.10</li> <li><a href="https://github.com/spring-projects/spring-security/commit/3d4e20597a8cb00eab70fcca67575a789a6786a2";><code>3d4e205</code></a> Merge remote-tracking branch 'oss/6.5.x' into 6.5.x</li> <li><a href="https://github.com/spring-projects/spring-security/commit/81bd52ae48787fe5ca923977315d4c78a24d92d1";><code>81bd52a</code></a> Bump org.hibernate.orm:hibernate-core from 6.6.48.Final to 6.6.49.Final</li> <li><a href="https://github.com/spring-projects/spring-security/commit/25b6af273889c629d229646632b8a11bfc38cfeb";><code>25b6af2</code></a> Bump org.springframework:spring-framework-bom from 6.2.17 to 6.2.18</li> <li><a href="https://github.com/spring-projects/spring-security/commit/95987bffc1efe239bd152078d38a7c62af77e92e";><code>95987bf</code></a> Bump org.apache.maven:maven-resolver-provider from 3.9.14 to 3.9.15</li> <li><a href="https://github.com/spring-projects/spring-security/commit/6e5f8f2a1d60b9dd5ab53398eb4e078f46de8723";><code>6e5f8f2</code></a> Merge remote-tracking branch 'origin/6.5.x' into 6.5.x</li> <li><a href="https://github.com/spring-projects/spring-security/commit/4187af38b251fc97fdf9949f7869618111e6e261";><code>4187af3</code></a> Verify token deletion in JdbcOneTimeTokenService</li> <li><a href="https://github.com/spring-projects/spring-security/commit/5b638a54a4c0f74747c9d9ae7d2edc5c754a9322";><code>5b638a5</code></a> Use SHA Hashes</li> <li><a href="https://github.com/spring-projects/spring-security/commit/51eef2b98056f70c4df0ecd31742e5d68fa8112c";><code>51eef2b</code></a> Bump io.projectreactor:reactor-bom from 2024.0.16 to 2024.0.17</li> <li><a href="https://github.com/spring-projects/spring-security/commit/302cfb116ea0a52f7cb141ad1f7f7aeefb1d475c";><code>302cfb1</code></a> Bump <code>@springio/antora-extensions</code> from 1.14.10 to 1.14.11 in /docs</li> <li>Additional commits viewable in <a href="https://github.com/spring-projects/spring-security/compare/6.5.9...6.5.10";>compare view</a></li> </ul> </details> <br /> Updates `org.springframework.security:spring-security-oauth2-core` from 6.5.9 to 6.5.10 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/spring-projects/spring-security/releases";>org.springframework.security:spring-security-oauth2-core's releases</a>.</em></p> <blockquote> <h2>6.5.10</h2> <h2>:star: New Features</h2> <ul> <li>Add CredentialRecordOwnerAuthorizationManager <a href="https://redirect.github.com/spring-projects/spring-security/pull/19004";>#19004</a></li> <li>Add XML Based shouldWriteHeadersEagerly tests <a href="https://redirect.github.com/spring-projects/spring-security/pull/19017";>#19017</a></li> <li>Clarify Session Management Persistence Documentation <a href="https://redirect.github.com/spring-projects/spring-security/pull/18345";>#18345</a></li> <li>Update <code>FilterChainProxy#getFilters(String)</code> javadoc <a href="https://redirect.github.com/spring-projects/spring-security/pull/18258";>#18258</a></li> </ul> <h2>:beetle: Bug Fixes</h2> <ul> <li>Add equals and hashcode to <code>HttpMethodRequestMatcher</code> <a href="https://redirect.github.com/spring-projects/spring-security/pull/18914";>#18914</a></li> <li>auth_time validation fails when SSO session is renewed <a href="https://redirect.github.com/spring-projects/spring-security/issues/18839";>#18839</a></li> <li>Fallback defaultTargetUrl if refererHeader is empty <a href="https://redirect.github.com/spring-projects/spring-security/pull/18806";>#18806</a></li> <li>Fix <code>HttpSessionRequestCache#getMatchingRequest</code> query string parsing <a href="https://redirect.github.com/spring-projects/spring-security/pull/16914";>#16914</a></li> <li>Fix documentation for Custom Authorization Manager <a href="https://redirect.github.com/spring-projects/spring-security/pull/18362";>#18362</a></li> <li>Improve serialVersionUID check in tests <a href="https://redirect.github.com/spring-projects/spring-security/pull/18474";>#18474</a></li> <li>Merge Handle null value in OnCommittedResponseWrapper header methods <a href="https://redirect.github.com/spring-projects/spring-security/pull/18989";>#18989</a></li> <li>OAuth2 client sessionManagement ineffective with DefaultOidcUser <a href="https://redirect.github.com/spring-projects/spring-security/issues/18622";>#18622</a></li> </ul> <h2>:hammer: Dependency Upgrades</h2> <ul> <li>Bump <code>@springio</code>/antora-extensions from 1.14.10 to 1.14.11 in /docs <a href="https://redirect.github.com/spring-projects/spring-security/pull/19055";>#19055</a></li> <li>Bump <code>@springio</code>/antora-extensions from 1.14.7 to 1.14.9 in /docs <a href="https://redirect.github.com/spring-projects/spring-security/pull/18956";>#18956</a></li> <li>Bump <code>@springio</code>/antora-extensions from 1.14.9 to 1.14.10 in /docs <a href="https://redirect.github.com/spring-projects/spring-security/pull/19031";>#19031</a></li> <li>Bump <code>@springio</code>/asciidoctor-extensions from 1.0.0-alpha.17 to 1.0.0-alpha.18 in /docs <a href="https://redirect.github.com/spring-projects/spring-security/pull/18952";>#18952</a></li> <li>Bump actions/upload-artifact from 7.0.0 to 7.0.1 <a href="https://redirect.github.com/spring-projects/spring-security/pull/19094";>#19094</a></li> <li>Bump io.projectreactor:reactor-bom from 2024.0.16 to 2024.0.17 <a href="https://redirect.github.com/spring-projects/spring-security/pull/19078";>#19078</a></li> <li>Bump io.spring.gradle:spring-security-release-plugin from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18916";>#18916</a></li> <li>Bump org.apache.maven:maven-resolver-provider from 3.9.14 to 3.9.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/19108";>#19108</a></li> <li>Bump org.hibernate.orm:hibernate-core from 6.6.44.Final to 6.6.45.Final <a href="https://redirect.github.com/spring-projects/spring-security/pull/18966";>#18966</a></li> <li>Bump org.hibernate.orm:hibernate-core from 6.6.45.Final to 6.6.47.Final <a href="https://redirect.github.com/spring-projects/spring-security/pull/19046";>#19046</a></li> <li>Bump org.hibernate.orm:hibernate-core from 6.6.47.Final to 6.6.48.Final <a href="https://redirect.github.com/spring-projects/spring-security/pull/19064";>#19064</a></li> <li>Bump org.hibernate.orm:hibernate-core from 6.6.48.Final to 6.6.49.Final <a href="https://redirect.github.com/spring-projects/spring-security/pull/19110";>#19110</a></li> <li>Bump org.springframework:spring-framework-bom from 6.2.17 to 6.2.18 <a href="https://redirect.github.com/spring-projects/spring-security/pull/19109";>#19109</a></li> <li>Bump spring-io/spring-release-actions from 0.0.3 to 0.0.4 <a href="https://redirect.github.com/spring-projects/spring-security/pull/19093";>#19093</a></li> <li>Bump spring-io/spring-security-release-tools from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18954";>#18954</a></li> <li>Bump spring-io/spring-security-release-tools/.github/workflows/build.yml from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18955";>#18955</a></li> <li>Bump spring-io/spring-security-release-tools/.github/workflows/deploy-artifacts.yml from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18949";>#18949</a></li> <li>Bump spring-io/spring-security-release-tools/.github/workflows/deploy-schema.yml from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18950";>#18950</a></li> <li>Bump spring-io/spring-security-release-tools/.github/workflows/perform-release.yml from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18995";>#18995</a></li> <li>Bump spring-io/spring-security-release-tools/.github/workflows/test.yml from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18951";>#18951</a></li> <li>Bump spring-io/spring-security-release-tools/.github/workflows/update-scheduled-release-version.yml from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18994";>#18994</a></li> <li>Update to spring-security-release-tools 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/issues/18910";>#18910</a></li> </ul> <h2>:heart: Contributors</h2> <p>Thank you to all the contributors who worked on this release:</p> <p><a href="https://github.com/Kehrlann";><code>@Kehrlann</code></a>, <a href="https://github.com/as1605";><code>@as1605</code></a>, <a href="https://github.com/johnycho";><code>@johnycho</code></a>, <a href="https://github.com/ngocnhan-tran1996";><code>@ngocnhan-tran1996</code></a>, <a href="https://github.com/rwinch";><code>@rwinch</code></a>, and <a href="https://github.com/sankranty";><code>@sankranty</code></a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/spring-projects/spring-security/commit/0a9d4dc8fc9d303dad7fc1ee25cc7381a9888899";><code>0a9d4dc</code></a> Release 6.5.10</li> <li><a href="https://github.com/spring-projects/spring-security/commit/3d4e20597a8cb00eab70fcca67575a789a6786a2";><code>3d4e205</code></a> Merge remote-tracking branch 'oss/6.5.x' into 6.5.x</li> <li><a href="https://github.com/spring-projects/spring-security/commit/81bd52ae48787fe5ca923977315d4c78a24d92d1";><code>81bd52a</code></a> Bump org.hibernate.orm:hibernate-core from 6.6.48.Final to 6.6.49.Final</li> <li><a href="https://github.com/spring-projects/spring-security/commit/25b6af273889c629d229646632b8a11bfc38cfeb";><code>25b6af2</code></a> Bump org.springframework:spring-framework-bom from 6.2.17 to 6.2.18</li> <li><a href="https://github.com/spring-projects/spring-security/commit/95987bffc1efe239bd152078d38a7c62af77e92e";><code>95987bf</code></a> Bump org.apache.maven:maven-resolver-provider from 3.9.14 to 3.9.15</li> <li><a href="https://github.com/spring-projects/spring-security/commit/6e5f8f2a1d60b9dd5ab53398eb4e078f46de8723";><code>6e5f8f2</code></a> Merge remote-tracking branch 'origin/6.5.x' into 6.5.x</li> <li><a href="https://github.com/spring-projects/spring-security/commit/4187af38b251fc97fdf9949f7869618111e6e261";><code>4187af3</code></a> Verify token deletion in JdbcOneTimeTokenService</li> <li><a href="https://github.com/spring-projects/spring-security/commit/5b638a54a4c0f74747c9d9ae7d2edc5c754a9322";><code>5b638a5</code></a> Use SHA Hashes</li> <li><a href="https://github.com/spring-projects/spring-security/commit/51eef2b98056f70c4df0ecd31742e5d68fa8112c";><code>51eef2b</code></a> Bump io.projectreactor:reactor-bom from 2024.0.16 to 2024.0.17</li> <li><a href="https://github.com/spring-projects/spring-security/commit/302cfb116ea0a52f7cb141ad1f7f7aeefb1d475c";><code>302cfb1</code></a> Bump <code>@springio/antora-extensions</code> from 1.14.10 to 1.14.11 in /docs</li> <li>Additional commits viewable in <a href="https://github.com/spring-projects/spring-security/compare/6.5.9...6.5.10";>compare view</a></li> </ul> </details> <br /> Updates `org.springframework.security:spring-security-oauth2-jose` from 6.5.9 to 6.5.10 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/spring-projects/spring-security/releases";>org.springframework.security:spring-security-oauth2-jose's releases</a>.</em></p> <blockquote> <h2>6.5.10</h2> <h2>:star: New Features</h2> <ul> <li>Add CredentialRecordOwnerAuthorizationManager <a href="https://redirect.github.com/spring-projects/spring-security/pull/19004";>#19004</a></li> <li>Add XML Based shouldWriteHeadersEagerly tests <a href="https://redirect.github.com/spring-projects/spring-security/pull/19017";>#19017</a></li> <li>Clarify Session Management Persistence Documentation <a href="https://redirect.github.com/spring-projects/spring-security/pull/18345";>#18345</a></li> <li>Update <code>FilterChainProxy#getFilters(String)</code> javadoc <a href="https://redirect.github.com/spring-projects/spring-security/pull/18258";>#18258</a></li> </ul> <h2>:beetle: Bug Fixes</h2> <ul> <li>Add equals and hashcode to <code>HttpMethodRequestMatcher</code> <a href="https://redirect.github.com/spring-projects/spring-security/pull/18914";>#18914</a></li> <li>auth_time validation fails when SSO session is renewed <a href="https://redirect.github.com/spring-projects/spring-security/issues/18839";>#18839</a></li> <li>Fallback defaultTargetUrl if refererHeader is empty <a href="https://redirect.github.com/spring-projects/spring-security/pull/18806";>#18806</a></li> <li>Fix <code>HttpSessionRequestCache#getMatchingRequest</code> query string parsing <a href="https://redirect.github.com/spring-projects/spring-security/pull/16914";>#16914</a></li> <li>Fix documentation for Custom Authorization Manager <a href="https://redirect.github.com/spring-projects/spring-security/pull/18362";>#18362</a></li> <li>Improve serialVersionUID check in tests <a href="https://redirect.github.com/spring-projects/spring-security/pull/18474";>#18474</a></li> <li>Merge Handle null value in OnCommittedResponseWrapper header methods <a href="https://redirect.github.com/spring-projects/spring-security/pull/18989";>#18989</a></li> <li>OAuth2 client sessionManagement ineffective with DefaultOidcUser <a href="https://redirect.github.com/spring-projects/spring-security/issues/18622";>#18622</a></li> </ul> <h2>:hammer: Dependency Upgrades</h2> <ul> <li>Bump <code>@springio</code>/antora-extensions from 1.14.10 to 1.14.11 in /docs <a href="https://redirect.github.com/spring-projects/spring-security/pull/19055";>#19055</a></li> <li>Bump <code>@springio</code>/antora-extensions from 1.14.7 to 1.14.9 in /docs <a href="https://redirect.github.com/spring-projects/spring-security/pull/18956";>#18956</a></li> <li>Bump <code>@springio</code>/antora-extensions from 1.14.9 to 1.14.10 in /docs <a href="https://redirect.github.com/spring-projects/spring-security/pull/19031";>#19031</a></li> <li>Bump <code>@springio</code>/asciidoctor-extensions from 1.0.0-alpha.17 to 1.0.0-alpha.18 in /docs <a href="https://redirect.github.com/spring-projects/spring-security/pull/18952";>#18952</a></li> <li>Bump actions/upload-artifact from 7.0.0 to 7.0.1 <a href="https://redirect.github.com/spring-projects/spring-security/pull/19094";>#19094</a></li> <li>Bump io.projectreactor:reactor-bom from 2024.0.16 to 2024.0.17 <a href="https://redirect.github.com/spring-projects/spring-security/pull/19078";>#19078</a></li> <li>Bump io.spring.gradle:spring-security-release-plugin from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18916";>#18916</a></li> <li>Bump org.apache.maven:maven-resolver-provider from 3.9.14 to 3.9.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/19108";>#19108</a></li> <li>Bump org.hibernate.orm:hibernate-core from 6.6.44.Final to 6.6.45.Final <a href="https://redirect.github.com/spring-projects/spring-security/pull/18966";>#18966</a></li> <li>Bump org.hibernate.orm:hibernate-core from 6.6.45.Final to 6.6.47.Final <a href="https://redirect.github.com/spring-projects/spring-security/pull/19046";>#19046</a></li> <li>Bump org.hibernate.orm:hibernate-core from 6.6.47.Final to 6.6.48.Final <a href="https://redirect.github.com/spring-projects/spring-security/pull/19064";>#19064</a></li> <li>Bump org.hibernate.orm:hibernate-core from 6.6.48.Final to 6.6.49.Final <a href="https://redirect.github.com/spring-projects/spring-security/pull/19110";>#19110</a></li> <li>Bump org.springframework:spring-framework-bom from 6.2.17 to 6.2.18 <a href="https://redirect.github.com/spring-projects/spring-security/pull/19109";>#19109</a></li> <li>Bump spring-io/spring-release-actions from 0.0.3 to 0.0.4 <a href="https://redirect.github.com/spring-projects/spring-security/pull/19093";>#19093</a></li> <li>Bump spring-io/spring-security-release-tools from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18954";>#18954</a></li> <li>Bump spring-io/spring-security-release-tools/.github/workflows/build.yml from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18955";>#18955</a></li> <li>Bump spring-io/spring-security-release-tools/.github/workflows/deploy-artifacts.yml from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18949";>#18949</a></li> <li>Bump spring-io/spring-security-release-tools/.github/workflows/deploy-schema.yml from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18950";>#18950</a></li> <li>Bump spring-io/spring-security-release-tools/.github/workflows/perform-release.yml from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18995";>#18995</a></li> <li>Bump spring-io/spring-security-release-tools/.github/workflows/test.yml from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18951";>#18951</a></li> <li>Bump spring-io/spring-security-release-tools/.github/workflows/update-scheduled-release-version.yml from 1.0.14 to 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/pull/18994";>#18994</a></li> <li>Update to spring-security-release-tools 1.0.15 <a href="https://redirect.github.com/spring-projects/spring-security/issues/18910";>#18910</a></li> </ul> <h2>:heart: Contributors</h2> <p>Thank you to all the contributors who worked on this release:</p> <p><a href="https://github.com/Kehrlann";><code>@Kehrlann</code></a>, <a href="https://github.com/as1605";><code>@as1605</code></a>, <a href="https://github.com/johnycho";><code>@johnycho</code></a>, <a href="https://github.com/ngocnhan-tran1996";><code>@ngocnhan-tran1996</code></a>, <a href="https://github.com/rwinch";><code>@rwinch</code></a>, and <a href="https://github.com/sankranty";><code>@sankranty</code></a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/spring-projects/spring-security/commit/0a9d4dc8fc9d303dad7fc1ee25cc7381a9888899";><code>0a9d4dc</code></a> Release 6.5.10</li> <li><a href="https://github.com/spring-projects/spring-security/commit/3d4e20597a8cb00eab70fcca67575a789a6786a2";><code>3d4e205</code></a> Merge remote-tracking branch 'oss/6.5.x' into 6.5.x</li> <li><a href="https://github.com/spring-projects/spring-security/commit/81bd52ae48787fe5ca923977315d4c78a24d92d1";><code>81bd52a</code></a> Bump org.hibernate.orm:hibernate-core from 6.6.48.Final to 6.6.49.Final</li> <li><a href="https://github.com/spring-projects/spring-security/commit/25b6af273889c629d229646632b8a11bfc38cfeb";><code>25b6af2</code></a> Bump org.springframework:spring-framework-bom from 6.2.17 to 6.2.18</li> <li><a href="https://github.com/spring-projects/spring-security/commit/95987bffc1efe239bd152078d38a7c62af77e92e";><code>95987bf</code></a> Bump org.apache.maven:maven-resolver-provider from 3.9.14 to 3.9.15</li> <li><a href="https://github.com/spring-projects/spring-security/commit/6e5f8f2a1d60b9dd5ab53398eb4e078f46de8723";><code>6e5f8f2</code></a> Merge remote-tracking branch 'origin/6.5.x' into 6.5.x</li> <li><a href="https://github.com/spring-projects/spring-security/commit/4187af38b251fc97fdf9949f7869618111e6e261";><code>4187af3</code></a> Verify token deletion in JdbcOneTimeTokenService</li> <li><a href="https://github.com/spring-projects/spring-security/commit/5b638a54a4c0f74747c9d9ae7d2edc5c754a9322";><code>5b638a5</code></a> Use SHA Hashes</li> <li><a href="https://github.com/spring-projects/spring-security/commit/51eef2b98056f70c4df0ecd31742e5d68fa8112c";><code>51eef2b</code></a> Bump io.projectreactor:reactor-bom from 2024.0.16 to 2024.0.17</li> <li><a href="https://github.com/spring-projects/spring-security/commit/302cfb116ea0a52f7cb141ad1f7f7aeefb1d475c";><code>302cfb1</code></a> Bump <code>@springio/antora-extensions</code> from 1.14.10 to 1.14.11 in /docs</li> <li>Additional commits viewable in <a href="https://github.com/spring-projects/spring-security/compare/6.5.9...6.5.10";>compare view</a></li> </ul> </details> <br /> Updates `org.springframework.security:spring-security-oauth2-resource-server` from 6.5.9 to 6.5.10 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/spring-projects/spring-security/releases";>org.springframework.security:spring-security-oauth2-resource-server's releases</a>.</em></p> <blockquote> <h2>6.5.10</h2> <h2>:star: New Features</h2> <ul> <li>Add CredentialRecordOwnerAuthorizationManager <a href="https://redirect.github.com/spring-projects/spring-security/pull/19004";>#19004</a></li> <li>Add XML Based shouldWriteHeadersEagerly tests <a href="https://redirect.github.com/spring-projects/spring-security/pull/19017";>#19017</a></li> <li>Clarify Session Management Persistence Documentation <a href="https://redirect.github.com/spring-projects/spring-security/pull/18345";>#18345</a></li> <li>Update <code>FilterChainProxy#getFilters(String)</code> javadoc <a href="https://redirect.github.com/spring-projects/spring-security/pull/18258";>#18258</a></li> </ul> <h2>:beetle: Bug Fixes</h2> <ul> <li>Add equals and hashcode to <code>HttpMethodRequestMatcher</code> <a href="https://redirect.github.com/spring-projects/spring-security/pull/18914";>#18914</a></li> <li>auth_time validation fails when SSO session is renewed <a href="https://redirect.github.com/spring-projects/spring-security/issues/18839";>#18839</a></li> <li>Fallback defaultTargetUrl if refererHeader is empty <a href="https://redirect.github.com/spring-projects/spring-security/pull/18806";>#18806</a></li> <li>Fix <code>HttpSessionRequestCache#getMatchingRequest</code> query string parsing <a href="https://redirect.github.com/spring-projects/spring-security/pull/16914";>#16914</a></li> <li>Fix documentation for Custom Authorization Manager <a href="https://redirect.github.com/spring-projects/spring-security/pull/18362";>#18362</a></li> <li>Improve serialVersionUID check in tests <a href="https://redirect.github.com/spring-projects/spring-security/pull/18474";>#18474</a></li> <li>Merge Handle null value in OnCommittedResponseWrapper header methods <a href="https://redirect.github.com/spring-projects/spring-security/pull... _Description has been truncated_ -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
