Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Apr 18, 2023

Bumps spring-security-bom from 5.8.2 to 5.8.3.

Release notes

Sourced from spring-security-bom's releases.

5.8.3

⭐ New Features

  • Clarify documentation code snippet(s) (unclear where static imported methods come from) #12991
  • Document 5.8 Migration for DefaultMethodSecurityExpressionHandler #12356
  • Documentation should mention that an empty SecurityContext should also be saved #12906
  • Expression-Based Access Control do not working as explain in spring security document for 6.0.2 also tried 6.0.5 the issue persist #12928
  • Fixed test in DefaultLoginPageGeneratingFilterTests #12694

🪲 Bug Fixes

  • Bug in documentation of Storing the Authentication manually #12850
  • DaoAuthenticationProvider is not usable on RHEL 8.7 with enforced FIPS mode #12873
  • EntityId ignored in xml relying-party-registration #12776
  • Fix .access(...) parameter #12676
  • Fix a javadoc typo in ReactiveAuthorizationManager #12999
  • Fix a javadoc typo in ReactiveAuthorizationManager #12982
  • Fix ID of WebSocket Authorization section #12872
  • HttpSessionSecurityContextRepository fails to create a session because of the deferred security context support #12314
  • JdkSerializationRedisSerializer is not able to serialize Saml2LogoutRequest because of a lambda encoder #12472
  • Missing spring-security-oauth2 xsds after release #12805
  • NimbusReactiveJwtDecoder.JwkSetUriReactiveJwtDecoderBuilder holds a reference to JWSVerificationKeySelector before ConfigurableJWTProcessor.setJWSKeySelector is executed #13004
  • RelyingPartyRegistrations should not fail when SPSSODescriptor elements are present #13054
  • Saml2 RelyingPartyRegistration.nameIdFormat is ignored and not set in AuthnRequest from OpenSamlAuthenticationRequestResolver #12935
  • SecurityWebApplicationInitializer.getSecurityDispatcherTypes example is wrong in migration guide #12939
  • SwitchUserFilter should use HttpSessionSecurityContextRepository by default #12835

🔨 Dependency Upgrades

  • Update blockhound to 1.0.8.RELEASE #13024
  • Update io.projectreactor to 2020.0.31 #13022
  • Update io.spring.javaformat to 0.0.38 #13025
  • Update logback-classic to 1.2.12 #13021
  • Update org.eclipse.jetty to 9.4.51.v20230217 #13026
  • Update org.springframework to 5.3.27 #13027
  • Update org.springframework.data to 2021.2.10 #13028
  • Update org.springframework.data to 2021.2.11 #13029
  • Update reactor-netty to 1.0.31 #13023

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

Commits
  • e75b210 Release 5.8.3
  • 6cf8c53 Merge branch '5.7.x' into 5.8.x
  • 2d52fb8 Clear Repository on Logout
  • e9ee2ce Update org.springframework.data to 2021.2.11
  • 15dc917 Update org.springframework.data to 2021.2.10
  • 46368f0 Update org.springframework to 5.3.27
  • 0448e28 Update org.eclipse.jetty to 9.4.51.v20230217
  • 7571ab9 Update io.spring.javaformat to 0.0.38
  • 8566bbc Update blockhound to 1.0.8.RELEASE
  • 609d5a7 Update io.projectreactor to 2020.0.31
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [spring-security-bom](https://github.com/spring-projects/spring-security) from 5.8.2 to 5.8.3.
- [Release notes](https://github.com/spring-projects/spring-security/releases)
- [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc)
- [Commits](spring-projects/spring-security@5.8.2...5.8.3)

---
updated-dependencies:
- dependency-name: org.springframework.security:spring-security-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the type/dependencies Pull requests that update a dependency file label Apr 18, 2023
@sonarqubecloud
Copy link

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
No Duplication information No Duplication information

@codecov-commenter
Copy link

Codecov Report

Merging #12116 (1a4a1f4) into 3.2 (6e787b0) will decrease coverage by 2.83%.
The diff coverage is n/a.

@@             Coverage Diff              @@
##                3.2   #12116      +/-   ##
============================================
- Coverage     70.11%   67.29%   -2.83%     
+ Complexity      339        2     -337     
============================================
  Files          1808     1721      -87     
  Lines         93854    68372   -25482     
  Branches      17017     9765    -7252     
============================================
- Hits          65806    46009   -19797     
+ Misses        22772    17949    -4823     
+ Partials       5276     4414     -862     

see 3529 files with indirect coverage changes

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more

@AlbumenJ AlbumenJ merged commit 2d46677 into 3.2 Apr 20, 2023
@dependabot dependabot bot deleted the dependabot/maven/org.springframework.security-spring-security-bom-5.8.3 branch April 20, 2023 08:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

type/dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants