eclipse
Bump spring-security-core from 5.5.1 to 5.5.7
Bumps spring-security-core from 5.5.1 to 5.5.7.
Release notes
Sourced from spring-security-core's releases.
5.5.7
:hammer: Dependency Upgrades
- Update com.fasterxml.jackson.core to 2.13.2.2 #11211
- Update com.fasterxml.jackson.datatype to 2.13.2 #11212
- Update io.projectreactor to 2020.0.19 #11213
- Update org.springframework to 5.3.20 #11215
- Update org.springframework.data to 2021.0.11 #11216
- Update reactor-netty to 1.0.19 #11214
5.5.6
:beetle: Bug Fixes
- AuthorizationManagerWebInvocationPrivilegeEvaluator should grant access when AuthorizationManager abstains #10952
- Change HashSet to LinkedHashSet for RelyingPartyRegistration credentials #10917
:hammer: Dependency Upgrades
- Update com.fasterxml.jackson.core to 2.13.2.2 #11130
- Update com.fasterxml.jackson.datatype to 2.13.2 #11131
- Update io.projectreactor to 2020.0.18 #11132
- Update io.rsocket to 1.1.2 #11134
- Update jackson-bom to 2.12.6.20220326 #11129
- Update logback-classic to 1.2.11 #11128
- Update org.aspectj to 1.9.9.1 #11135
- Update org.eclipse.jetty to 9.4.46.v20220331 #11136
- Update org.springframework to 5.3.19 #11137
- Update org.springframework.data to 2021.0.10 #11138
- Update reactor-netty to 1.0.18 #11133
- Update spring-ldap-core to 2.3.7.RELEASE #11139
5.5.5
:star: New Features
- Introduce
AuthorizationManagerWebInvocationPrivilegeEvaluator#10683:beetle: Bug Fixes
- Add Kotlin examples for Spring Data Integration of servlet application #10847
- Replace StringUtils class of oauth2-oidc-sdk completely #10825
- Getting Spring Security Reference Docs have a error #10797
- RequestMatcherDelegatingWebInvocationPrivilegeEvaluator doesn't provided access to the ServletContext #10791
- Make source code compatible with JDK 8 #10700
WebInvocationPrivilegeEvaluatorBean should support multipleSecurityFilterChains #10681:hammer: Dependency Upgrades
... (truncated)
Commits
ada3337Release 5.5.70bd7dafImprove Upgradingc6461d6AntRegexRequestMatcher Optimization4405cf1Extract rejectNonPrintableAsciiCharactersInFieldName7eb8a58Update org.springframework.data to 2021.0.11415ee4dUpdate org.springframework to 5.3.204d47d51Update io.projectreactor to 2020.0.197983c69Fix mvcMatchers overriding previous paths15b3744Fix setServletContext not being called for AuthorizationManagerWebInvocationP...20b94c4Next development version- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
-
@dependabot rebasewill rebase this PR -
@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it -
@dependabot mergewill merge this PR after your CI passes on it -
@dependabot squash and mergewill squash and merge this PR after your CI passes on it -
@dependabot cancel mergewill cancel a previously requested merge and block automerging -
@dependabot reopenwill reopen this PR if it is closed -
@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually -
@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) -
@dependabot use these labelswill set the current labels as the default for future PRs for this repo and language -
@dependabot use these reviewerswill set the current reviewers as the default for future PRs for this repo and language -
@dependabot use these assigneeswill set the current assignees as the default for future PRs for this repo and language -
@dependabot use this milestonewill set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the Security Alerts page.
![dependabot[bot] avatar](https://avatars.githubusercontent.com/in/29110?v=4 "Published by a pub.dev verified publisher"){kind=small}
Codecov Report
Merging #3556 (f8a270b) into develop (2b796b8) will increase coverage by
36.13%. The diff coverage isn/a.
:exclamation: Current head f8a270b differs from pull request most recent head b756901. Consider uploading reports for the commit b756901 to get more accurate results
@@ Coverage Diff @@
## develop #3556 +/- ##
==============================================
+ Coverage 14.10% 50.23% +36.13%
- Complexity 72 259 +187
==============================================
Files 1668 1651 -17
Lines 31987 31776 -211
Branches 2634 2636 +2
==============================================
+ Hits 4512 15963 +11451
+ Misses 27087 14882 -12205
- Partials 388 931 +543
![codecov[bot] avatar](https://avatars.githubusercontent.com/in/254?v=4 "Published by a pub.dev verified publisher"){kind=small}
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.
If you change your mind, just re-open this PR and I'll resolve any conflicts on it.