Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Bump org.springframework.security:spring-security-bom from 6.4.1 to 6.4.2 #3300

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 17, 2024

Bumps org.springframework.security:spring-security-bom from 6.4.1 to 6.4.2.

Release notes

Sourced from org.springframework.security:spring-security-bom's releases.

6.4.2

⭐ New Features

  • Add 6.4 Sample Serializations for Serializable classes #16274
  • Add @inheritDoc to sessionIdChanged method #16216
  • Fix typo in oauth2 resource server documentation #16053
  • Fixed confusing phrasing in the docs for a better clarity. #16169
  • Improve AuthorizationManager configuration error messages #16194
  • Polish #16148
  • Use Documentation Tags for Maven and Gradle in Getting Started #16234
  • Add WebDriver WebAuthn test #15969

🪲 Bug Fixes

  • Add Deprecated ObjectPostProcessor constructor #16212
  • Add RuntimeHints for webauthn Javascript resource #16159
  • Always return current ClientRegistration in loadAuthorizedClient #16139
  • Avoid requesting an unnecessary attestation statement when creating a webauthn credential #16252
  • CI is not using the correct secret for Develocity #16263
  • Dark mode rendering issue with images on CSRF and Method Security pages #16176
  • DefaultSaml2AuthenticatedPrincipal should define a serialVersionUID #16163
  • Delay initialization of AuthenticationProvider in Global Authentication #16147
  • Fix Documentation Typos #16054
  • Correct OAuth2ClientHttpRequestInterceptor Usage Documentation #16172
  • Fix Typo in 'What's New' Documentation #16183
  • Fix WebAuthnWebdriverTests #16279
  • Correct OpenSAML 5.x Documentation #16195
  • Issue when using @AuthenticationPrincipal on interfaces #16177
  • Mutate breaks functionality of StrictFirewallHttpHeaders with recently modified HttpHeaders#writabeHttpHeaders #16261
  • Remove duplicate cache in AuthenticationPrincipalArgumentResolverand CurrentSecurityContextArgumentResolver #16202
  • Resolve ObjectPostProcessor collisions between RSocket and WebFlux security configuration #16161
  • Restore @AuthenticationPrincipal/@CurrentSecurityContext Interface Support #16245
  • Restore Servlet 5 Compatiblity for CookieCsrfTokenRepository #16220
  • Spelling error in opensaml.adoc #16146
  • Update document regarding PublicKeyCredentialCreationOptions.attestation value #16264
  • Verification Options Should Return Saved Transports for Credentials #16084

🔨 Dependency Upgrades

  • Bump com.fasterxml.jackson:jackson-bom from 2.18.1 to 2.18.2 #16184
  • Bump com.webauthn4j:webauthn4j-core from 0.28.2.RELEASE to 0.28.3.RELEASE #16203
  • Bump io.micrometer:micrometer-observation from 1.14.1 to 1.14.2 #16255
  • Bump io.projectreactor:reactor-bom from 2023.0.12 to 2023.0.13 #16256
  • Bump org.gradle.wrapper-upgrade from 0.11.4 to 0.12 #16209
  • Bump org.gretty:gretty from 4.1.5 to 4.1.6 #16247
  • Bump org.hibernate.orm:hibernate-core from 6.6.2.Final to 6.6.3.Final #16145
  • Bump org.htmlunit:htmlunit from 4.6.0 to 4.7.0 #16205
  • Bump org.jfrog.buildinfo:build-info-extractor-gradle from 4.33.22 to 4.33.23 #16180
  • Bump org.seleniumhq.selenium:htmlunit3-driver from 4.26.0 to 4.27.0 #16204
  • Bump org.seleniumhq.selenium:selenium-java from 4.26.0 to 4.27.0 #16167

... (truncated)

Commits
  • 5fe6d92 Release 6.4.2
  • 57a06ea Bump org.springframework.data:spring-data-bom from 2024.1.0 to 2024.1.1
  • e4dde52 Merge branch '6.3.x' into 6.4.x
  • d9e9e3c Bump org.springframework.data:spring-data-bom from 2024.0.6 to 2024.0.7
  • 5ee1586 Remove Unexposed Inner Classes from Serialization Test
  • 018e1ae Added Serialization Values
  • b9911fd Add serialVersionUID to Authentication classes
  • e3cd433 Add Serial Version
  • fb95406 Fix WebAuthnWebdriverTests
  • 2a76a09 Disable Flaky WebAuthnWebDriverTests
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.springframework.security:spring-security-bom](https://github.com/spring-projects/spring-security) from 6.4.1 to 6.4.2.
- [Release notes](https://github.com/spring-projects/spring-security/releases)
- [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc)
- [Commits](spring-projects/spring-security@6.4.1...6.4.2)

---
updated-dependencies:
- dependency-name: org.springframework.security:spring-security-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the type: dependency-upgrade A dependency upgrade label Dec 17, 2024
@github-actions github-actions bot added this to the 3.4.1 milestone Dec 17, 2024
@spring-builds spring-builds enabled auto-merge (rebase) December 17, 2024 03:11
@spring-builds spring-builds merged commit c16488e into main Dec 17, 2024
4 checks passed
@dependabot dependabot bot deleted the dependabot/gradle/main/org.springframework.security-spring-security-bom-6.4.2 branch December 17, 2024 03:22
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
type: dependency-upgrade A dependency upgrade
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant