thymeleaf-extras-springsecurity
thymeleaf-extras-springsecurity copied to clipboard
Bump springsecurity.version from 4.0.0.RELEASE to 5.4.1 in /thymeleaf-extras-springsecurity4
Bumps springsecurity.version from 4.0.0.RELEASE to 5.4.1.
Updates spring-security-core from 4.0.0.RELEASE to 5.4.1
Release notes
Sourced from spring-security-core's releases.
5.4.1
:star: New Features
- Replace expired msdn link with latest web archive copy #9050
- Add documentation for StrictHttpFirewall enhancements #9038
- Replace Tomcat6 URL for SSL Guide to Tomcat 10 #9034
- Use AssertJ for exception testing #9013
:beetle: Bug Fixes
- Add try-with-resources to close stream #9053
- RelyingPartyRegistrations Fails to Read Keycloak Metadata #9051
- fix miswritten comment of FormLoginDsl.kt #9042
- Adapt to WebClient's new exception wrapping #9031
- StandardInterceptUrlRegistry should not refer to ExpressionUrlAuthorizationConfigurer #9026
- Fix broken Mono chain #9022
- Use Schedulers.boundedElastic for UUID.randomUUID #9021
- CookieServerCsrfTokenRepository#createNewToken should use Schedulers.boundedElastic #9018
- WebSessionServerCsrfTokenRepository#generateToken() don't use Schedulers.boundedElastic() #9017
- NullPointerException SessionRegistryImpl.onApplicationEvent(SessionRegistryImpl.java:111) #9011
- Quick javadoc fix for DelegatingPasswordEncoder #8890
:heart: Contributors
We'd like to thank all the contributors who worked on this release!
5.4.0
:star: New Features
- Add What's New in 5.4 #9002
- Add What's New in 5.4 Section to Docs #9001
- Add Resource Server Servlet Logging #9000
- Simplify saml2Login Samples #8990
- Remove Framework Tests from saml2Login Sample #8989
- Add authenticationManagerResolver to resource server Kotlin DSL #8981
- Generalize SAML 2.0 Assertion Validation Support #8970
- Update abstract-authentication-processing-filter.adoc #8965
- Add spring-javaformat checkstyle and formatting #8946
- Add hasAnyRole and hasAnyAuthority to authorizeRequests in Kotlin DSL #8926
- Add hasAnyAuthority(String...) and hasAnyRole(String...) to authorizeRequests in Kotlin DSL #8892
- Resolve oauth2 client-id, client-secret placeholders #8880
- Restructure SAML 2.0 documentation #8763
... (truncated)
Commits
dbce9b5Release 5.4.148ac474Lock Dependencies for 5.4.166ceb4dConstrain Dependencies for Maintenance Branchf87101aUpdate RSocket Sample to RSocket 1.1.0-M26cb41fbUpdate to Kotlin 1.4.108382f45Update to AspectJ 1.9.65706c0fUpdate to Google App Engine 1.9.829677bd8Update to Spring JavaFormat 0.0.250f51257Update to Spring Boot 2.4.0-M3a2aeb95Update What's New Link- Additional commits viewable in compare view
Updates spring-security-web from 4.0.0.RELEASE to 5.4.1
Release notes
Sourced from spring-security-web's releases.
5.4.1
:star: New Features
- Replace expired msdn link with latest web archive copy #9050
- Add documentation for StrictHttpFirewall enhancements #9038
- Replace Tomcat6 URL for SSL Guide to Tomcat 10 #9034
- Use AssertJ for exception testing #9013
:beetle: Bug Fixes
- Add try-with-resources to close stream #9053
- RelyingPartyRegistrations Fails to Read Keycloak Metadata #9051
- fix miswritten comment of FormLoginDsl.kt #9042
- Adapt to WebClient's new exception wrapping #9031
- StandardInterceptUrlRegistry should not refer to ExpressionUrlAuthorizationConfigurer #9026
- Fix broken Mono chain #9022
- Use Schedulers.boundedElastic for UUID.randomUUID #9021
- CookieServerCsrfTokenRepository#createNewToken should use Schedulers.boundedElastic #9018
- WebSessionServerCsrfTokenRepository#generateToken() don't use Schedulers.boundedElastic() #9017
- NullPointerException SessionRegistryImpl.onApplicationEvent(SessionRegistryImpl.java:111) #9011
- Quick javadoc fix for DelegatingPasswordEncoder #8890
:heart: Contributors
We'd like to thank all the contributors who worked on this release!
5.4.0
:star: New Features
- Add What's New in 5.4 #9002
- Add What's New in 5.4 Section to Docs #9001
- Add Resource Server Servlet Logging #9000
- Simplify saml2Login Samples #8990
- Remove Framework Tests from saml2Login Sample #8989
- Add authenticationManagerResolver to resource server Kotlin DSL #8981
- Generalize SAML 2.0 Assertion Validation Support #8970
- Update abstract-authentication-processing-filter.adoc #8965
- Add spring-javaformat checkstyle and formatting #8946
- Add hasAnyRole and hasAnyAuthority to authorizeRequests in Kotlin DSL #8926
- Add hasAnyAuthority(String...) and hasAnyRole(String...) to authorizeRequests in Kotlin DSL #8892
- Resolve oauth2 client-id, client-secret placeholders #8880
- Restructure SAML 2.0 documentation #8763
... (truncated)
Commits
dbce9b5Release 5.4.148ac474Lock Dependencies for 5.4.166ceb4dConstrain Dependencies for Maintenance Branchf87101aUpdate RSocket Sample to RSocket 1.1.0-M26cb41fbUpdate to Kotlin 1.4.108382f45Update to AspectJ 1.9.65706c0fUpdate to Google App Engine 1.9.829677bd8Update to Spring JavaFormat 0.0.250f51257Update to Spring Boot 2.4.0-M3a2aeb95Update What's New Link- Additional commits viewable in compare view
Updates spring-security-config from 4.0.0.RELEASE to 5.4.1
Release notes
Sourced from spring-security-config's releases.
5.4.1
:star: New Features
- Replace expired msdn link with latest web archive copy #9050
- Add documentation for StrictHttpFirewall enhancements #9038
- Replace Tomcat6 URL for SSL Guide to Tomcat 10 #9034
- Use AssertJ for exception testing #9013
:beetle: Bug Fixes
- Add try-with-resources to close stream #9053
- RelyingPartyRegistrations Fails to Read Keycloak Metadata #9051
- fix miswritten comment of FormLoginDsl.kt #9042
- Adapt to WebClient's new exception wrapping #9031
- StandardInterceptUrlRegistry should not refer to ExpressionUrlAuthorizationConfigurer #9026
- Fix broken Mono chain #9022
- Use Schedulers.boundedElastic for UUID.randomUUID #9021
- CookieServerCsrfTokenRepository#createNewToken should use Schedulers.boundedElastic #9018
- WebSessionServerCsrfTokenRepository#generateToken() don't use Schedulers.boundedElastic() #9017
- NullPointerException SessionRegistryImpl.onApplicationEvent(SessionRegistryImpl.java:111) #9011
- Quick javadoc fix for DelegatingPasswordEncoder #8890
:heart: Contributors
We'd like to thank all the contributors who worked on this release!
5.4.0
:star: New Features
- Add What's New in 5.4 #9002
- Add What's New in 5.4 Section to Docs #9001
- Add Resource Server Servlet Logging #9000
- Simplify saml2Login Samples #8990
- Remove Framework Tests from saml2Login Sample #8989
- Add authenticationManagerResolver to resource server Kotlin DSL #8981
- Generalize SAML 2.0 Assertion Validation Support #8970
- Update abstract-authentication-processing-filter.adoc #8965
- Add spring-javaformat checkstyle and formatting #8946
- Add hasAnyRole and hasAnyAuthority to authorizeRequests in Kotlin DSL #8926
- Add hasAnyAuthority(String...) and hasAnyRole(String...) to authorizeRequests in Kotlin DSL #8892
- Resolve oauth2 client-id, client-secret placeholders #8880
- Restructure SAML 2.0 documentation #8763
... (truncated)
Commits
dbce9b5Release 5.4.148ac474Lock Dependencies for 5.4.166ceb4dConstrain Dependencies for Maintenance Branchf87101aUpdate RSocket Sample to RSocket 1.1.0-M26cb41fbUpdate to Kotlin 1.4.108382f45Update to AspectJ 1.9.65706c0fUpdate to Google App Engine 1.9.829677bd8Update to Spring JavaFormat 0.0.250f51257Update to Spring Boot 2.4.0-M3a2aeb95Update What's New Link- Additional commits viewable in compare view
Updates spring-security-acl from 4.0.0.RELEASE to 5.4.1
Release notes
Sourced from spring-security-acl's releases.
5.4.1
:star: New Features
- Replace expired msdn link with latest web archive copy #9050
- Add documentation for StrictHttpFirewall enhancements #9038
- Replace Tomcat6 URL for SSL Guide to Tomcat 10 #9034
- Use AssertJ for exception testing #9013
:beetle: Bug Fixes
- Add try-with-resources to close stream #9053
- RelyingPartyRegistrations Fails to Read Keycloak Metadata #9051
- fix miswritten comment of FormLoginDsl.kt #9042
- Adapt to WebClient's new exception wrapping #9031
- StandardInterceptUrlRegistry should not refer to ExpressionUrlAuthorizationConfigurer #9026
- Fix broken Mono chain #9022
- Use Schedulers.boundedElastic for UUID.randomUUID #9021
- CookieServerCsrfTokenRepository#createNewToken should use Schedulers.boundedElastic #9018
- WebSessionServerCsrfTokenRepository#generateToken() don't use Schedulers.boundedElastic() #9017
- NullPointerException SessionRegistryImpl.onApplicationEvent(SessionRegistryImpl.java:111) #9011
- Quick javadoc fix for DelegatingPasswordEncoder #8890
:heart: Contributors
We'd like to thank all the contributors who worked on this release!
5.4.0
:star: New Features
- Add What's New in 5.4 #9002
- Add What's New in 5.4 Section to Docs #9001
- Add Resource Server Servlet Logging #9000
- Simplify saml2Login Samples #8990
- Remove Framework Tests from saml2Login Sample #8989
- Add authenticationManagerResolver to resource server Kotlin DSL #8981
- Generalize SAML 2.0 Assertion Validation Support #8970
- Update abstract-authentication-processing-filter.adoc #8965
- Add spring-javaformat checkstyle and formatting #8946
- Add hasAnyRole and hasAnyAuthority to authorizeRequests in Kotlin DSL #8926
- Add hasAnyAuthority(String...) and hasAnyRole(String...) to authorizeRequests in Kotlin DSL #8892
- Resolve oauth2 client-id, client-secret placeholders #8880
- Restructure SAML 2.0 documentation #8763
... (truncated)
Commits
dbce9b5Release 5.4.148ac474Lock Dependencies for 5.4.166ceb4dConstrain Dependencies for Maintenance Branchf87101aUpdate RSocket Sample to RSocket 1.1.0-M26cb41fbUpdate to Kotlin 1.4.108382f45Update to AspectJ 1.9.65706c0fUpdate to Google App Engine 1.9.829677bd8Update to Spring JavaFormat 0.0.250f51257Update to Spring Boot 2.4.0-M3a2aeb95Update What's New Link- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)@dependabot use these labelswill set the current labels as the default for future PRs for this repo and language@dependabot use these reviewerswill set the current reviewers as the default for future PRs for this repo and language@dependabot use these assigneeswill set the current assignees as the default for future PRs for this repo and language@dependabot use this milestonewill set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the Security Alerts page.
Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.
Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.
Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.
Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.