Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Bump org.springframework.security:spring-security-bom from 6.3.5 to 6.3.6 #3301

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 17, 2024

Bumps org.springframework.security:spring-security-bom from 6.3.5 to 6.3.6.

Release notes

Sourced from org.springframework.security:spring-security-bom's releases.

6.3.6

🪲 Bug Fixes

  • Always return current ClientRegistration in loadAuthorizedClient #16138
  • CI is not using the correct secret for Develocity #16262
  • Dark mode rendering issue with images on CSRF and Method Security pages #16175
  • Delay initialization AuthenticationProvider in Global Authentication #16050
  • Do not eagerly construct UserDetailsService bean in Global Authentication #16144
  • Documentation images should render clearly in both light and dark mode #16131
  • Mutate breaks functionality of StrictFirewallHttpHeaders with recently modified HttpHeaders#writabeHttpHeaders #16069
  • OidcBackChannelLogoutWebFilter error response is not a correct JSON #16229
  • Restore Servlet 5 Compatiblity for CookieCsrfTokenRepository #16219

🔨 Dependency Upgrades

  • Bump io.projectreactor:reactor-bom from 2023.0.12 to 2023.0.13 #16257
  • Bump org.gretty:gretty from 4.1.5 to 4.1.6 #16246
  • Bump org.jfrog.buildinfo:build-info-extractor-gradle from 4.33.22 to 4.33.23 #16179
  • Bump org.springframework.data:spring-data-bom from 2024.0.6 to 2024.0.7 #16289
  • Bump org.springframework.ldap:spring-ldap-core from 3.2.8 to 3.2.10 #16269
  • Bump org.springframework:spring-framework-bom from 6.1.15 to 6.1.16 #16272

🔩 Build Updates

  • Bump antora from 3.2.0-alpha.6 to 3.2.0-alpha.8 in /docs #16244
  • Update Antora UI Spring to v0.4.18 #16110

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​dependabot[bot], @​github-actions[bot], and @​kse-music

Commits
  • 85ca9e9 Release 6.3.6
  • d9e9e3c Bump org.springframework.data:spring-data-bom from 2024.0.6 to 2024.0.7
  • 3e43eda Bump org.springframework:spring-framework-bom from 6.1.15 to 6.1.16
  • e7d6dc2 Bump org.springframework.ldap:spring-ldap-core from 3.2.8 to 3.2.10
  • da06f6a Replace GRADLE_ENTERPRISE_SECRET_ACCESS_KEY with DEVELOCITY_ACCESS_KEY
  • 6a0b683 StrictFirewallHttpRequest.buid returns StrictFirewallHttpRequest
  • 2b6d586 Bump io.projectreactor:reactor-bom from 2023.0.12 to 2023.0.13
  • 8d1b0d9 Merge branch '6.2.x' into 6.3.x
  • 2fe7fae Merge branch '5.8.x' into 6.2.x
  • eb313ec Link to Messaging SpEL Migration Details
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.springframework.security:spring-security-bom](https://github.com/spring-projects/spring-security) from 6.3.5 to 6.3.6.
- [Release notes](https://github.com/spring-projects/spring-security/releases)
- [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc)
- [Commits](spring-projects/spring-security@6.3.5...6.3.6)

---
updated-dependencies:
- dependency-name: org.springframework.security:spring-security-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the type: dependency-upgrade A dependency upgrade label Dec 17, 2024
@github-actions github-actions bot added this to the 3.3.5 milestone Dec 17, 2024
@spring-builds spring-builds enabled auto-merge (rebase) December 17, 2024 03:47
@spring-builds spring-builds merged commit eb1c7ce into 3.3.x Dec 17, 2024
4 checks passed
@dependabot dependabot bot deleted the dependabot/gradle/3.3.x/org.springframework.security-spring-security-bom-6.3.6 branch December 17, 2024 03:57
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
type: dependency-upgrade A dependency upgrade
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant