spring-security

Commit Graph

Author	SHA1	Message	Date
github-actions[bot]	f91b5f33fc	Merge pull request #18701 from spring-projects/dependabot/gradle/main/com.nimbusds-oauth2-oidc-sdk-11.33 Bump com.nimbusds:oauth2-oidc-sdk from 11.26.1 to 11.33	1 month ago
Josh Cummings	095cc3bf74	Merge remote-tracking branch 'origin/7.0.x'	1 month ago
dependabot[bot]	06caf327c1	Bump jakarta.xml.bind:jakarta.xml.bind-api from 4.0.4 to 4.0.5 Bumps [jakarta.xml.bind:jakarta.xml.bind-api](https://github.com/jakartaee/jaxb-api) from 4.0.4 to 4.0.5. - [Release notes](https://github.com/jakartaee/jaxb-api/releases) - [Commits](https://github.com/jakartaee/jaxb-api/compare/4.0.4...4.0.5) --- updated-dependencies: - dependency-name: jakarta.xml.bind:jakarta.xml.bind-api dependency-version: 4.0.5 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	1 month ago
dependabot[bot]	4cc6687916	Bump io.micrometer:context-propagation from 1.1.3 to 1.1.4 Bumps [io.micrometer:context-propagation](https://github.com/micrometer-metrics/context-propagation) from 1.1.3 to 1.1.4. - [Release notes](https://github.com/micrometer-metrics/context-propagation/releases) - [Commits](https://github.com/micrometer-metrics/context-propagation/compare/v1.1.3...v1.1.4) --- updated-dependencies: - dependency-name: io.micrometer:context-propagation dependency-version: 1.1.4 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	1 month ago
dependabot[bot]	108dc5996b	Bump gradle-wrapper from 8.14 to 8.14.4 Bumps gradle-wrapper from 8.14 to 8.14.4. --- updated-dependencies: - dependency-name: gradle-wrapper dependency-version: 8.14.4 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	1 month ago
dependabot[bot]	8c3453dfd2	Bump ch.qos.logback:logback-classic from 1.5.28 to 1.5.29 Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) from 1.5.28 to 1.5.29. - [Release notes](https://github.com/qos-ch/logback/releases) - [Commits](https://github.com/qos-ch/logback/compare/v_1.5.28...v_1.5.29) --- updated-dependencies: - dependency-name: ch.qos.logback:logback-classic dependency-version: 1.5.29 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	1 month ago
Josh Cummings	5418ab2081	Update nimbus-jose-jwt from 10.4 to 10.6 Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>	1 month ago
Josh Cummings	e8e4110334	Wrap RuntimeException in fromOidcConfiguration This commit makes so that fromOidcConfiguration throws the same exception caused by chain as other configuration methods. Specifically, if parsing throws a RuntimeException, this method will now wrap it in an IllegalArgumentException as other configuration methods do. This makes specific sense here since the RuntimeException is almost certainly caused by a malformed configuration set handed in as a method parameter. Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>	1 month ago
dependabot[bot]	92fd945b02	Bump org.hibernate.orm:hibernate-core from 7.2.3.Final to 7.2.4.Final Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm) from 7.2.3.Final to 7.2.4.Final. - [Release notes](https://github.com/hibernate/hibernate-orm/releases) - [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.2.4/changelog.txt) - [Commits](https://github.com/hibernate/hibernate-orm/compare/7.2.3...7.2.4) --- updated-dependencies: - dependency-name: org.hibernate.orm:hibernate-core dependency-version: 7.2.4.Final dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	1 month ago
dependabot[bot]	d0b0b5a252	Bump gradle-wrapper from 9.2.1 to 9.3.1 Bumps gradle-wrapper from 9.2.1 to 9.3.1. --- updated-dependencies: - dependency-name: gradle-wrapper dependency-version: 9.3.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	1 month ago
dependabot[bot]	601dfb2764	Bump io.micrometer:context-propagation from 1.2.0 to 1.2.1 Bumps [io.micrometer:context-propagation](https://github.com/micrometer-metrics/context-propagation) from 1.2.0 to 1.2.1. - [Release notes](https://github.com/micrometer-metrics/context-propagation/releases) - [Commits](https://github.com/micrometer-metrics/context-propagation/compare/v1.2.0...v1.2.1) --- updated-dependencies: - dependency-name: io.micrometer:context-propagation dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	1 month ago
Josh Cummings	b88ddc8d0d	Enable Dependabot Auto-Merge on Main Closes gh-18712 Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>	1 month ago
Josh Cummings	688b6ca733	Add Documentation for ExpressionJwtGrantedAuthoritiesConverter Closes gh-18300	1 month ago
dependabot[bot]	17e368435d	Bump com.nimbusds:oauth2-oidc-sdk from 11.26.1 to 11.33 Bumps [com.nimbusds:oauth2-oidc-sdk](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions) from 11.26.1 to 11.33. - [Changelog](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/src/master/CHANGELOG.txt) - [Commits](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/branches/compare/11.33..11.26.1) --- updated-dependencies: - dependency-name: com.nimbusds:oauth2-oidc-sdk dependency-version: '11.33' dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	1 month ago
dependabot[bot]	6b028cfe8e	Bump ch.qos.logback:logback-classic from 1.5.27 to 1.5.28 Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) from 1.5.27 to 1.5.28. - [Release notes](https://github.com/qos-ch/logback/releases) - [Commits](https://github.com/qos-ch/logback/compare/v_1.5.27...v_1.5.28) --- updated-dependencies: - dependency-name: ch.qos.logback:logback-classic dependency-version: 1.5.28 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2 months ago
dependabot[bot]	d912393280	Bump com.fasterxml.jackson:jackson-bom from 2.20.2 to 2.21.0 Bumps [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) from 2.20.2 to 2.21.0. - [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.20.2...jackson-bom-2.21.0) --- updated-dependencies: - dependency-name: com.fasterxml.jackson:jackson-bom dependency-version: 2.21.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2 months ago
dependabot[bot]	ba8360671c	Bump org.hibernate.orm:hibernate-core from 7.0.10.Final to 7.2.3.Final Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm) from 7.0.10.Final to 7.2.3.Final. - [Release notes](https://github.com/hibernate/hibernate-orm/releases) - [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.2.3/changelog.txt) - [Commits](https://github.com/hibernate/hibernate-orm/compare/7.0.10...7.2.3) --- updated-dependencies: - dependency-name: org.hibernate.orm:hibernate-core dependency-version: 7.2.3.Final dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2 months ago
Robert Winch	bf7d86722f	Merge Remove unnecessary Gradle wrapper from buildSrc	2 months ago
Robert Winch	e37f83884b	Merge Remove unnecessary Gradle wrapper from buildSrc Closes gh-18694	2 months ago
Robert Winch	ce963c744c	Merge Remove unnecessary Gradle wrapper from buildSrc Closes gh-18693	2 months ago
Robert Winch	1efacf1ad8	Remove unnecessary Gradle wrapper from buildSrc buildSrc does not need its own Gradle wrapper and should use the parent project's wrapper. Having a separate wrapper causes Dependabot to detect and attempt to update it independently, creating confusion and unnecessary PRs. Closes gh-18692	2 months ago
dependabot[bot]	3071459fe4	Bump io.micrometer:micrometer-observation from 1.14.14 to 1.16.2 Bumps [io.micrometer:micrometer-observation](https://github.com/micrometer-metrics/micrometer) from 1.14.14 to 1.16.2. - [Release notes](https://github.com/micrometer-metrics/micrometer/releases) - [Commits](https://github.com/micrometer-metrics/micrometer/compare/v1.14.14...v1.16.2) --- updated-dependencies: - dependency-name: io.micrometer:micrometer-observation dependency-version: 1.16.2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2 months ago
dependabot[bot]	03c081bb46	Bump com.jayway.jsonpath:json-path from 2.9.0 to 2.10.0 Bumps [com.jayway.jsonpath:json-path](https://github.com/jayway/JsonPath) from 2.9.0 to 2.10.0. - [Release notes](https://github.com/jayway/JsonPath/releases) - [Changelog](https://github.com/json-path/JsonPath/blob/master/changelog.md) - [Commits](https://github.com/jayway/JsonPath/compare/json-path-2.9.0...json-path-2.10.0) --- updated-dependencies: - dependency-name: com.jayway.jsonpath:json-path dependency-version: 2.10.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2 months ago
dependabot[bot]	540fbdb189	Bump jakarta.xml.bind:jakarta.xml.bind-api from 4.0.4 to 4.0.5 Bumps [jakarta.xml.bind:jakarta.xml.bind-api](https://github.com/jakartaee/jaxb-api) from 4.0.4 to 4.0.5. - [Release notes](https://github.com/jakartaee/jaxb-api/releases) - [Commits](https://github.com/jakartaee/jaxb-api/compare/4.0.4...4.0.5) --- updated-dependencies: - dependency-name: jakarta.xml.bind:jakarta.xml.bind-api dependency-version: 4.0.5 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2 months ago
dependabot[bot]	cea004b555	Bump io.micrometer:context-propagation from 1.1.3 to 1.2.0 Bumps [io.micrometer:context-propagation](https://github.com/micrometer-metrics/context-propagation) from 1.1.3 to 1.2.0. - [Release notes](https://github.com/micrometer-metrics/context-propagation/releases) - [Commits](https://github.com/micrometer-metrics/context-propagation/compare/v1.1.3...v1.2.0) --- updated-dependencies: - dependency-name: io.micrometer:context-propagation dependency-version: 1.2.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2 months ago
dependabot[bot]	4c011887bd	Bump org.htmlunit:htmlunit from 4.11.1 to 4.21.0 Bumps [org.htmlunit:htmlunit](https://github.com/HtmlUnit/htmlunit) from 4.11.1 to 4.21.0. - [Release notes](https://github.com/HtmlUnit/htmlunit/releases) - [Commits](https://github.com/HtmlUnit/htmlunit/compare/4.11.1...4.21.0) --- updated-dependencies: - dependency-name: org.htmlunit:htmlunit dependency-version: 4.21.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2 months ago
dependabot[bot]	938d1f38b9	Bump org-jetbrains-kotlin from 2.3.0 to 2.3.10 Bumps `org-jetbrains-kotlin` from 2.3.0 to 2.3.10. Updates `org.jetbrains.kotlin:kotlin-bom` from 2.3.0 to 2.3.10 - [Release notes](https://github.com/JetBrains/kotlin/releases) - [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md) - [Commits](https://github.com/JetBrains/kotlin/compare/v2.3.0...v2.3.10) Updates `org.jetbrains.kotlin:kotlin-gradle-plugin` from 2.3.0 to 2.3.10 - [Release notes](https://github.com/JetBrains/kotlin/releases) - [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md) - [Commits](https://github.com/JetBrains/kotlin/compare/v2.3.0...v2.3.10) --- updated-dependencies: - dependency-name: org.jetbrains.kotlin:kotlin-bom dependency-version: 2.3.10 dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: org.jetbrains.kotlin:kotlin-gradle-plugin dependency-version: 2.3.10 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2 months ago
Robert Winch	54f294fe6e	Merge branch '7.0.x'	2 months ago
Robert Winch	71a10cef0b	Bump spring-io/spring-doc-actions from 0.0.20 to 0.0.22	2 months ago
Robert Winch	784e6efcf5	Bump io.mockk:mockk from 1.14.7 to 1.14.9	2 months ago
Robert Winch	1caefd748b	Bump org.assertj:assertj-core from 3.27.6 to 3.27.7	2 months ago
Robert Winch	b427587d27	Bump io.spring.develocity.conventions from 0.0.24 to 0.0.25	2 months ago
Robert Winch	832635c9e8	Bump ch.qos.logback:logback-classic from 1.5.24 to 1.5.28	2 months ago
Robert Winch	e45258a8bc	Merge branch '6.5.x' into 7.0.x	2 months ago
dependabot[bot]	fa7c6ea583	Bump spring-io/spring-doc-actions from 0.0.20 to 0.0.22 Bumps [spring-io/spring-doc-actions](https://github.com/spring-io/spring-doc-actions) from 0.0.20 to 0.0.22. - [Commits](`e28269199d...415e2b11a7`) --- updated-dependencies: - dependency-name: spring-io/spring-doc-actions dependency-version: 0.0.22 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2 months ago
dependabot[bot]	3841e0f6b3	Bump jakarta.xml.bind:jakarta.xml.bind-api from 4.0.4 to 4.0.5 Bumps [jakarta.xml.bind:jakarta.xml.bind-api](https://github.com/jakartaee/jaxb-api) from 4.0.4 to 4.0.5. - [Release notes](https://github.com/jakartaee/jaxb-api/releases) - [Commits](https://github.com/jakartaee/jaxb-api/compare/4.0.4...4.0.5) --- updated-dependencies: - dependency-name: jakarta.xml.bind:jakarta.xml.bind-api dependency-version: 4.0.5 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2 months ago
Robert Winch	50fad46df6	Bump @antora/atlas-extension in /docs --- updated-dependencies: - dependency-name: "@antora/atlas-extension" dependency-version: 1.0.0-alpha.5 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2 months ago
dependabot[bot]	e28eea208b	Bump @springio/antora-extensions from 1.14.4 to 1.14.7 in /docs Bumps [@springio/antora-extensions](https://github.com/spring-io/antora-extensions) from 1.14.4 to 1.14.7. - [Changelog](https://github.com/spring-io/antora-extensions/blob/main/CHANGELOG.adoc) - [Commits](https://github.com/spring-io/antora-extensions/compare/v1.14.4...v1.14.7) --- updated-dependencies: - dependency-name: "@springio/antora-extensions" dependency-version: 1.14.7 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2 months ago
dependabot[bot]	f646392542	Bump @antora/collector-extension from 1.0.1 to 1.0.2 in /docs --- updated-dependencies: - dependency-name: "@antora/collector-extension" dependency-version: 1.0.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2 months ago
dependabot[bot]	ffeda7a1b3	Bump ch.qos.logback:logback-classic from 1.5.27 to 1.5.28 Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) from 1.5.27 to 1.5.28. - [Release notes](https://github.com/qos-ch/logback/releases) - [Commits](https://github.com/qos-ch/logback/compare/v_1.5.27...v_1.5.28) --- updated-dependencies: - dependency-name: ch.qos.logback:logback-classic dependency-version: 1.5.28 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2 months ago
dependabot[bot]	c85e7a0828	Bump ch.qos.logback:logback-classic from 1.5.24 to 1.5.28 Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) from 1.5.24 to 1.5.28. - [Release notes](https://github.com/qos-ch/logback/releases) - [Commits](https://github.com/qos-ch/logback/compare/v_1.5.24...v_1.5.28) --- updated-dependencies: - dependency-name: ch.qos.logback:logback-classic dependency-version: 1.5.28 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2 months ago
dependabot[bot]	14cf90a7b9	Bump io.spring.develocity.conventions from 0.0.24 to 0.0.25 Bumps [io.spring.develocity.conventions](https://github.com/spring-io/develocity-conventions) from 0.0.24 to 0.0.25. - [Release notes](https://github.com/spring-io/develocity-conventions/releases) - [Commits](https://github.com/spring-io/develocity-conventions/compare/v0.0.24...v0.0.25) --- updated-dependencies: - dependency-name: io.spring.develocity.conventions dependency-version: 0.0.25 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2 months ago
dependabot[bot]	729e58b9de	Bump org.assertj:assertj-core from 3.27.6 to 3.27.7 Bumps [org.assertj:assertj-core](https://github.com/assertj/assertj) from 3.27.6 to 3.27.7. - [Release notes](https://github.com/assertj/assertj/releases) - [Commits](https://github.com/assertj/assertj/compare/assertj-build-3.27.6...assertj-build-3.27.7) --- updated-dependencies: - dependency-name: org.assertj:assertj-core dependency-version: 3.27.7 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2 months ago
dependabot[bot]	5c678bd78a	Bump io.mockk:mockk from 1.14.7 to 1.14.9 Bumps [io.mockk:mockk](https://github.com/mockk/mockk) from 1.14.7 to 1.14.9. - [Release notes](https://github.com/mockk/mockk/releases) - [Commits](https://github.com/mockk/mockk/compare/1.14.7...1.14.9) --- updated-dependencies: - dependency-name: io.mockk:mockk dependency-version: 1.14.9 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2 months ago
dependabot[bot]	52ca16fa4b	Bump antora from 3.2.0-alpha.8 to 3.2.0-alpha.11 in /docs Bumps [antora](https://gitlab.com/antora/antora) from 3.2.0-alpha.8 to 3.2.0-alpha.11. - [Changelog](https://gitlab.com/antora/antora/blob/main/CHANGELOG.adoc) - [Commits](https://gitlab.com/antora/antora/compare/v3.2.0-alpha.8...v3.2.0-alpha.11) --- updated-dependencies: - dependency-name: antora dependency-version: 3.2.0-alpha.11 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2 months ago
Robert Winch	fa10e74d76	Consistent Dependabot Configuration Across Supported Branches - Ensure 'type: dependency-upgrade' - Ensure that every ecosystem is ran on all supported branches - Consistent ordering per branch (allows adding/removing branches easier)	2 months ago
Robert Winch	0a8cdc32d5	Merge branch '7.0.x'	2 months ago
Robert Winch	31993e72ea	Update to Spring Framework 7.0.3	2 months ago
Robert Winch	5a51d63419	Update to Spring Framework 7.0.3	2 months ago
Robert Winch	ee7c579644	Merge branch '7.0.x'	2 months ago

1 2 3 4 5 ...

20269 Commits (f91b5f33fc0d5e03e93ef81f3c409ea4f22a02dc) All Branches Search

20269 Commits (f91b5f33fc0d5e03e93ef81f3c409ea4f22a02dc)

All Branches