dependabot[bot]
355f6ccc64
Bump org.springframework.data:spring-data-bom from 2025.1.1 to 2025.1.2
...
Bumps [org.springframework.data:spring-data-bom](https://github.com/spring-projects/spring-data-bom ) from 2025.1.1 to 2025.1.2.
- [Release notes](https://github.com/spring-projects/spring-data-bom/releases )
- [Commits](https://github.com/spring-projects/spring-data-bom/compare/2025.1.1...2025.1.2 )
---
updated-dependencies:
- dependency-name: org.springframework.data:spring-data-bom
dependency-version: 2025.1.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
Josh Cummings
41e7af70b5
Merge branch '6.5.x' into 7.0.x
2 months ago
Josh Cummings
46a9514420
Update to setup-gradle 5.0.1
...
note that gradle/gradle-build-action is superceded by
setup-gradle.
Issue gh-18648
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
2 months ago
Josh Cummings
8432df498e
Update upload-artifact to 6.0.0
...
Issue gh-18648
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
2 months ago
Josh Cummings
63162eb5f1
Update to setup-java 5.2.0
...
Issue gh-18648
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
2 months ago
Josh Cummings
5c3b8c513b
Update spring-gradle-build-action to 2.0.5
...
Issue gh-18648
2 months ago
Josh Cummings
d276c943fc
Update actions/checkout to 6.0.2
...
Issue gh-18648
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
2 months ago
Josh Cummings
18d9dd77ec
Use SHA Hashes for spring-security-release-tools Workflows
...
Issue gh-18648
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
2 months ago
Joe Grandja
d3c42a7a4f
Polish OAuth2ConfigurerUtils
2 months ago
Joe Grandja
e61c03f7c3
Fix to allow multiple PasswordEncoder beans
...
Closes gh-18645
2 months ago
Elayne Bloom
2c97b3376b
Document Client PKCE settings
...
Updated the documentation to reflect recent changes to enable PKCE by default for `authorization_code` flows in the documentation for the client.
Closes gh-18304
Signed-off-by: Elayne Bloom <5840349+bloomsei@users.noreply.github.com>
2 months ago
Robert Winch
9273f411c1
Merge branch '6.5.x' into 7.0.x
2 months ago
Robert Winch
d6e3ec78cd
Bump ch.qos.logback:logback-classic from 1.5.26 to 1.5.27
2 months ago
dependabot[bot]
48c1023fd6
Bump org.hibernate.orm:hibernate-core from 6.6.41.Final to 6.6.42.Final
...
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm ) from 6.6.41.Final to 6.6.42.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases )
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/6.6.42/changelog.txt )
- [Commits](https://github.com/hibernate/hibernate-orm/compare/6.6.41...6.6.42 )
---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
dependency-version: 6.6.42.Final
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
dependabot[bot]
04dbdc8588
Bump ch.qos.logback:logback-classic from 1.5.26 to 1.5.27
...
Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback ) from 1.5.26 to 1.5.27.
- [Release notes](https://github.com/qos-ch/logback/releases )
- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.26...v_1.5.27 )
---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-classic
dependency-version: 1.5.27
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
Robert Winch
6ca04d9b77
Merge branch '6.5.x' into 7.0.x
2 months ago
Robert Winch
3960bf950d
Bump org.assertj:assertj-core from 3.27.6 to 3.27.7
2 months ago
Robert Winch
bc6ac7c8c6
Bump ch.qos.logback:logback-classic from 1.5.25 to 1.5.26
2 months ago
Robert Winch
74b93a19f6
Externalize java-toolchain configuration
...
We should not use subprojects to perform configuration becaause it
does not allow for lazy loading and it can cause ordering problems.
In this case, the toolchain was not being used but instead it was
using the JAVA_HOME.
By splitting the configuration into a plugin and applying it to each
project it fixes the toolchain configuration
2 months ago
Robert Winch
6dd6e8ebb1
Merge branch '6.5.x' into 7.0.x
...
Closes gh-18235
2 months ago
Garvit Joshi
edd82ba82c
gh-18234: Create SHA-1 MessageDigest for every new check request
...
Signed-off-by: Garvit Joshi <garvitjoshi9@gmail.com>
2 months ago
dependabot[bot]
cf656ce6e1
Bump ch.qos.logback:logback-classic from 1.5.25 to 1.5.26
...
Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback ) from 1.5.25 to 1.5.26.
- [Release notes](https://github.com/qos-ch/logback/releases )
- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.25...v_1.5.26 )
---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-classic
dependency-version: 1.5.26
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
dependabot[bot]
f75e9c7138
Bump org.assertj:assertj-core from 3.27.6 to 3.27.7
...
Bumps [org.assertj:assertj-core](https://github.com/assertj/assertj ) from 3.27.6 to 3.27.7.
- [Release notes](https://github.com/assertj/assertj/releases )
- [Commits](https://github.com/assertj/assertj/compare/assertj-build-3.27.6...assertj-build-3.27.7 )
---
updated-dependencies:
- dependency-name: org.assertj:assertj-core
dependency-version: 3.27.7
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
Daniel Garnier-Moiroux
7cfcfaefae
BearerTokenAuthenticationEntryPoint uses context path
...
Closes gh-18528
Signed-off-by: Daniel Garnier-Moiroux <git@garnier.wf>
2 months ago
Robert Winch
f7f5165321
Merge branch '6.5.x' into 7.0.x
2 months ago
Robert Winch
27f91e03f9
Bump org.hibernate.orm:hibernate-core from 6.6.40.Final to 6.6.41.Final
2 months ago
Robert Winch
b7230c367e
Bump ch.qos.logback:logback-classic from 1.5.24 to 1.5.25
2 months ago
Robert Winch
cd72cb1f2e
Bump io.spring.develocity.conventions from 0.0.24 to 0.0.25
2 months ago
Robert Winch
a865671526
Merge branch '6.4.x' into 6.5.x
2 months ago
Robert Winch
4f52b71be8
Bump org.hibernate.orm:hibernate-core from 6.6.40.Final to 6.6.41.Final
2 months ago
Robert Winch
398430f672
Bump ch.qos.logback:logback-classic from 1.5.24 to 1.5.25
2 months ago
dependabot[bot]
03b3b852f5
Bump io.spring.develocity.conventions from 0.0.24 to 0.0.25
...
Bumps [io.spring.develocity.conventions](https://github.com/spring-io/develocity-conventions ) from 0.0.24 to 0.0.25.
- [Release notes](https://github.com/spring-io/develocity-conventions/releases )
- [Commits](https://github.com/spring-io/develocity-conventions/compare/v0.0.24...v0.0.25 )
---
updated-dependencies:
- dependency-name: io.spring.develocity.conventions
dependency-version: 0.0.25
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
dependabot[bot]
e54bb9f3f5
Bump io.spring.develocity.conventions from 0.0.24 to 0.0.25
...
Bumps [io.spring.develocity.conventions](https://github.com/spring-io/develocity-conventions ) from 0.0.24 to 0.0.25.
- [Release notes](https://github.com/spring-io/develocity-conventions/releases )
- [Commits](https://github.com/spring-io/develocity-conventions/compare/v0.0.24...v0.0.25 )
---
updated-dependencies:
- dependency-name: io.spring.develocity.conventions
dependency-version: 0.0.25
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
dependabot[bot]
30be114a5e
Bump ch.qos.logback:logback-classic from 1.5.24 to 1.5.25
...
Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback ) from 1.5.24 to 1.5.25.
- [Release notes](https://github.com/qos-ch/logback/releases )
- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.24...v_1.5.25 )
---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-classic
dependency-version: 1.5.25
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
dependabot[bot]
75121bf455
Bump org.hibernate.orm:hibernate-core from 6.6.40.Final to 6.6.41.Final
...
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm ) from 6.6.40.Final to 6.6.41.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases )
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/6.6.41/changelog.txt )
- [Commits](https://github.com/hibernate/hibernate-orm/compare/6.6.40...6.6.41 )
---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
dependency-version: 6.6.41.Final
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
dependabot[bot]
aa21e62fb8
Bump ch.qos.logback:logback-classic from 1.5.24 to 1.5.25
...
Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback ) from 1.5.24 to 1.5.25.
- [Release notes](https://github.com/qos-ch/logback/releases )
- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.24...v_1.5.25 )
---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-classic
dependency-version: 1.5.25
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
dependabot[bot]
b58187082a
Bump org.hibernate.orm:hibernate-core from 6.6.40.Final to 6.6.41.Final
...
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm ) from 6.6.40.Final to 6.6.41.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases )
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/6.6.41/changelog.txt )
- [Commits](https://github.com/hibernate/hibernate-orm/compare/6.6.40...6.6.41 )
---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
dependency-version: 6.6.41.Final
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
Robert Winch
bd3441caac
Merge branch '6.5.x' into 7.0.x
2 months ago
Robert Winch
8879aa83a3
Bump io.projectreactor:reactor-bom from 2024.0.13 to 2024.0.14
2 months ago
Josh Cummings
1f39a3dd3e
Merge branch '6.5.x' into 7.0.x
2 months ago
Josh Cummings
84b124d29d
Merge branch '6.4.x' into 6.5.x
2 months ago
songhee
fee6a9bb0e
docs: add CurrentSecurityContext section and link references
...
Signed-off-by: songhee <songhee9327@gmail.com>
2 months ago
Josh Cummings
d2ed8321b4
Merge branch '6.5.x' into 7.0.x
2 months ago
Guillaume Husta
dd1f097131
Add @FunctionalInterface to RequestMatcher
...
Add `@FunctionalInterface` to `RequestMatcher`.
According to the documentation, it is a FunctionalInterface.
See: https://docs.spring.io/spring-security/reference/6.5/servlet/authorization/authorize-http-requests.html#match-by-custom
Signed-off-by: Guillaume Husta <guillaume.husta@gmail.com>
2 months ago
Josh Cummings
7690c284c0
Merge branch '6.5.x' into 7.0.x
2 months ago
Guillaume Husta
508b3f26e3
docs: Typo in page Preparing for 7.0 / Web (version 6.5)
...
In section 'Include the Servlet Path Prefix in Authorization Rules', `PathPatternRequestParser` should be replaced by `PathPatternRequestMatcher`.
Signed-off-by: Guillaume Husta <guillaume.husta@gmail.com>
2 months ago
dependabot[bot]
f2e674ff77
Bump io.projectreactor:reactor-bom from 2024.0.13 to 2024.0.14
...
Bumps [io.projectreactor:reactor-bom](https://github.com/reactor/reactor ) from 2024.0.13 to 2024.0.14.
- [Release notes](https://github.com/reactor/reactor/releases )
- [Commits](https://github.com/reactor/reactor/compare/2024.0.13...2024.0.14 )
---
updated-dependencies:
- dependency-name: io.projectreactor:reactor-bom
dependency-version: 2024.0.14
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
Robert Winch
7fcbf642b8
Use project.artifactory(Username|Password)
2 months ago
Robert Winch
a32d9f04e3
Revert "Use project.artifactory(Username|Password)"
...
This reverts commit 9c449000dc .
2 months ago
Robert Winch
9c449000dc
Use project.artifactory(Username|Password)
2 months ago