Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump spring-security.version from 3.1.7.RELEASE to 5.8.1 in /modules/db #420

Open
wants to merge 1 commit into
base: develop
Choose a base branch
from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Jan 25, 2023

Bumps spring-security.version from 3.1.7.RELEASE to 5.8.1.
Updates spring-security-core from 3.1.7.RELEASE to 5.8.1

Release notes

Sourced from spring-security-core's releases.

5.8.1

⭐ New Features

  • Add EnableWebSecurity migration steps to 5.8 guide #12334
  • Replace deprecated set-state set-output GitHub Action's commands #12298

🪲 Bug Fixes

  • codes in spring security docs fail to work #11396
  • DefaultLdapAuthoritiesPopulator throws NullPointerException #12408
  • Fix AuthorizationFilter diagram in docs #12286
  • Fix password encoder migration guide #12318
  • Fix typo #12316
  • Incorrect Javadoc for class ExpressionAuthorizationDecision #12411
  • Incorrect sample code in securityMatcher migration docs #12296
  • SecurityContextHolderFilter does not apply to async dispatch #11962

🔨 Dependency Upgrades

  • Update httpclient to 4.5.14 #12403
  • Update io.projectreactor to 2020.0.26 #12401
  • Update mockk to 1.13.3 #12400
  • Update org.eclipse.jetty to 9.4.50.v20221201 #12404
  • Update org.jetbrains.kotlin to 1.7.22 #12405
  • Update reactor-netty to 1.0.26 #12402

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

5.8.0

⭐ New Features

  • Add Kotlin example showing integration with WebTestClient #11611
  • Add MethodExpressionAuthorizationManager #11502
  • Add Polish localization to error messages from ExceptionTranslationFi… #12201
  • Add support AuthorizationManager + #11503
  • AnonymousAuthenticationFilter should cache its Supplier #11900
  • CookieServerCsrfTokenRepository doesn't support setting MaxAge #11441
  • DefaultFilterChainValidator should check AuthorizationFilter #11473
  • Deprecate Resource Owner Password Credentials grant #11591
  • Document Configure Default CsrfToken BREACH Protection #12107
  • Document Defer load CsrfToken #12105
  • Document DelegatingSecurityContextRepository #12069
  • Document deprecations in oauth2-client #12193
  • Document how to opt-in for SHA256 in RememberMe #12097
  • Document how to use the new requestMatchers and securityMatchers #12100

... (truncated)

Changelog

Sourced from spring-security-core's changelog.

= Release Process

The release process for Spring Security is partially automated. The following table outlines which steps are automated and which are manual. Follow the links to read about each step.

[cols="1,1"] |=== | Step | Status

| | ❌ manual

| | ✅ automated (scheduled release will abort if any issues are open)

| | ✅ automated

| | ✅ automated

| | ❌ manual (when updating dependencies)

| | ✅ automated

| | ✅ automated

| | ✅ automated

| | ✅ automated

| | ❌ manual

| | ✅ automated

| | ❌ manual (move issues to new milestone before release)

| | ✅ automated (if not already created)

| | ❌ manual |===

... (truncated)

Commits
  • 314ae69 Release 5.8.1
  • 36d83f8 Fix Javadoc since tag for class ExpressionAuthorizationDecision
  • 5818201 Merge branch '5.7.x' into 5.8.x
  • 2461d00 Merge branch '5.6.x' into 5.7.x
  • eec6729 Fix DefaultLdapAuthoritiesPopulator NPE
  • ae22b75 Merge branch '5.7.x' into 5.8.x
  • fc9c251 Merge branch '5.6.x' into 5.7.x
  • f75d35f Update org.jetbrains.kotlin to 1.7.22
  • 195695f Update org.eclipse.jetty to 9.4.50.v20221201
  • 1439446 Update httpclient to 4.5.14
  • Additional commits viewable in compare view

Updates spring-security-config from 3.1.7.RELEASE to 5.8.1

Release notes

Sourced from spring-security-config's releases.

5.8.1

⭐ New Features

  • Add EnableWebSecurity migration steps to 5.8 guide #12334
  • Replace deprecated set-state set-output GitHub Action's commands #12298

🪲 Bug Fixes

  • codes in spring security docs fail to work #11396
  • DefaultLdapAuthoritiesPopulator throws NullPointerException #12408
  • Fix AuthorizationFilter diagram in docs #12286
  • Fix password encoder migration guide #12318
  • Fix typo #12316
  • Incorrect Javadoc for class ExpressionAuthorizationDecision #12411
  • Incorrect sample code in securityMatcher migration docs #12296
  • SecurityContextHolderFilter does not apply to async dispatch #11962

🔨 Dependency Upgrades

  • Update httpclient to 4.5.14 #12403
  • Update io.projectreactor to 2020.0.26 #12401
  • Update mockk to 1.13.3 #12400
  • Update org.eclipse.jetty to 9.4.50.v20221201 #12404
  • Update org.jetbrains.kotlin to 1.7.22 #12405
  • Update reactor-netty to 1.0.26 #12402

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

5.8.0

⭐ New Features

  • Add Kotlin example showing integration with WebTestClient #11611
  • Add MethodExpressionAuthorizationManager #11502
  • Add Polish localization to error messages from ExceptionTranslationFi… #12201
  • Add support AuthorizationManager + #11503
  • AnonymousAuthenticationFilter should cache its Supplier #11900
  • CookieServerCsrfTokenRepository doesn't support setting MaxAge #11441
  • DefaultFilterChainValidator should check AuthorizationFilter #11473
  • Deprecate Resource Owner Password Credentials grant #11591
  • Document Configure Default CsrfToken BREACH Protection #12107
  • Document Defer load CsrfToken #12105
  • Document DelegatingSecurityContextRepository #12069
  • Document deprecations in oauth2-client #12193
  • Document how to opt-in for SHA256 in RememberMe #12097
  • Document how to use the new requestMatchers and securityMatchers #12100

... (truncated)

Changelog

Sourced from spring-security-config's changelog.

= Release Process

The release process for Spring Security is partially automated. The following table outlines which steps are automated and which are manual. Follow the links to read about each step.

[cols="1,1"] |=== | Step | Status

| | ❌ manual

| | ✅ automated (scheduled release will abort if any issues are open)

| | ✅ automated

| | ✅ automated

| | ❌ manual (when updating dependencies)

| | ✅ automated

| | ✅ automated

| | ✅ automated

| | ✅ automated

| | ❌ manual

| | ✅ automated

| | ❌ manual (move issues to new milestone before release)

| | ✅ automated (if not already created)

| | ❌ manual |===

... (truncated)

Commits
  • 314ae69 Release 5.8.1
  • 36d83f8 Fix Javadoc since tag for class ExpressionAuthorizationDecision
  • 5818201 Merge branch '5.7.x' into 5.8.x
  • 2461d00 Merge branch '5.6.x' into 5.7.x
  • eec6729 Fix DefaultLdapAuthoritiesPopulator NPE
  • ae22b75 Merge branch '5.7.x' into 5.8.x
  • fc9c251 Merge branch '5.6.x' into 5.7.x
  • f75d35f Update org.jetbrains.kotlin to 1.7.22
  • 195695f Update org.eclipse.jetty to 9.4.50.v20221201
  • 1439446 Update httpclient to 4.5.14
  • Additional commits viewable in compare view

Updates spring-security-web from 3.1.7.RELEASE to 5.8.1

Release notes

Sourced from spring-security-web's releases.

5.8.1

⭐ New Features

  • Add EnableWebSecurity migration steps to 5.8 guide #12334
  • Replace deprecated set-state set-output GitHub Action's commands #12298

🪲 Bug Fixes

  • codes in spring security docs fail to work #11396
  • DefaultLdapAuthoritiesPopulator throws NullPointerException #12408
  • Fix AuthorizationFilter diagram in docs #12286
  • Fix password encoder migration guide #12318
  • Fix typo #12316
  • Incorrect Javadoc for class ExpressionAuthorizationDecision #12411
  • Incorrect sample code in securityMatcher migration docs #12296
  • SecurityContextHolderFilter does not apply to async dispatch #11962

🔨 Dependency Upgrades

  • Update httpclient to 4.5.14 #12403
  • Update io.projectreactor to 2020.0.26 #12401
  • Update mockk to 1.13.3 #12400
  • Update org.eclipse.jetty to 9.4.50.v20221201 #12404
  • Update org.jetbrains.kotlin to 1.7.22 #12405
  • Update reactor-netty to 1.0.26 #12402

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

5.8.0

⭐ New Features

  • Add Kotlin example showing integration with WebTestClient #11611
  • Add MethodExpressionAuthorizationManager #11502
  • Add Polish localization to error messages from ExceptionTranslationFi… #12201
  • Add support AuthorizationManager + #11503
  • AnonymousAuthenticationFilter should cache its Supplier #11900
  • CookieServerCsrfTokenRepository doesn't support setting MaxAge #11441
  • DefaultFilterChainValidator should check AuthorizationFilter #11473
  • Deprecate Resource Owner Password Credentials grant #11591
  • Document Configure Default CsrfToken BREACH Protection #12107
  • Document Defer load CsrfToken #12105
  • Document DelegatingSecurityContextRepository #12069
  • Document deprecations in oauth2-client #12193
  • Document how to opt-in for SHA256 in RememberMe #12097
  • Document how to use the new requestMatchers and securityMatchers #12100

... (truncated)

Changelog

Sourced from spring-security-web's changelog.

= Release Process

The release process for Spring Security is partially automated. The following table outlines which steps are automated and which are manual. Follow the links to read about each step.

[cols="1,1"] |=== | Step | Status

| | ❌ manual

| | ✅ automated (scheduled release will abort if any issues are open)

| | ✅ automated

| | ✅ automated

| | ❌ manual (when updating dependencies)

| | ✅ automated

| | ✅ automated

| | ✅ automated

| | ✅ automated

| | ❌ manual

| | ✅ automated

| | ❌ manual (move issues to new milestone before release)

| | ✅ automated (if not already created)

| | ❌ manual |===

... (truncated)

Commits
  • 314ae69 Release 5.8.1
  • 36d83f8 Fix Javadoc since tag for class ExpressionAuthorizationDecision
  • 5818201 Merge branch '5.7.x' into 5.8.x
  • 2461d00 Merge branch '5.6.x' into 5.7.x
  • eec6729 Fix DefaultLdapAuthoritiesPopulator NPE
  • ae22b75 Merge branch '5.7.x' into 5.8.x
  • fc9c251 Merge branch '5.6.x' into 5.7.x
  • f75d35f Update org.jetbrains.kotlin to 1.7.22
  • 195695f Update org.eclipse.jetty to 9.4.50.v20221201
  • 1439446 Update httpclient to 4.5.14
  • Additional commits viewable in compare view

Updates spring-security-cas from 3.1.7.RELEASE to 5.8.1

Release notes

Sourced from spring-security-cas's releases.

5.8.1

⭐ New Features

  • Add EnableWebSecurity migration steps to 5.8 guide #12334
  • Replace deprecated set-state set-output GitHub Action's commands #12298

🪲 Bug Fixes

  • codes in spring security docs fail to work #11396
  • DefaultLdapAuthoritiesPopulator throws NullPointerException #12408
  • Fix AuthorizationFilter diagram in docs #12286
  • Fix password encoder migration guide #12318
  • Fix typo #12316
  • Incorrect Javadoc for class ExpressionAuthorizationDecision #12411
  • Incorrect sample code in securityMatcher migration docs #12296
  • SecurityContextHolderFilter does not apply to async dispatch #11962

🔨 Dependency Upgrades

  • Update httpclient to 4.5.14 #12403
  • Update io.projectreactor to 2020.0.26 #12401
  • Update mockk to 1.13.3 #12400
  • Update org.eclipse.jetty to 9.4.50.v20221201 #12404
  • Update org.jetbrains.kotlin to 1.7.22 #12405
  • Update reactor-netty to 1.0.26 #12402

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

5.8.0

⭐ New Features

  • Add Kotlin example showing integration with WebTestClient #11611
  • Add MethodExpressionAuthorizationManager #11502
  • Add Polish localization to error messages from ExceptionTranslationFi… #12201
  • Add support AuthorizationManager + #11503
  • AnonymousAuthenticationFilter should cache its Supplier #11900
  • CookieServerCsrfTokenRepository doesn't support setting MaxAge #11441
  • DefaultFilterChainValidator should check AuthorizationFilter #11473
  • Deprecate Resource Owner Password Credentials grant #11591
  • Document Configure Default CsrfToken BREACH Protection #12107
  • Document Defer load CsrfToken #12105
  • Document DelegatingSecurityContextRepository #12069
  • Document deprecations in oauth2-client #12193
  • Document how to opt-in for SHA256 in RememberMe #12097
  • Document how to use the new requestMatchers and securityMatchers #12100

... (truncated)

Changelog

Sourced from spring-security-cas's changelog.

= Release Process

The release process for Spring Security is partially automated. The following table outlines which steps are automated and which are manual. Follow the links to read about each step.

[cols="1,1"] |=== | Step | Status

| | ❌ manual

| | ✅ automated (scheduled release will abort if any issues are open)

| | ✅ automated

| | ✅ automated

| | ❌ manual (when updating dependencies)

| | ✅ automated

| | ✅ automated

| | ✅ automated

| | ✅ automated

| | ❌ manual

| | ✅ automated

| | ❌ manual (move issues to new milestone before release)

| | ✅ automated (if not already created)

| | ❌ manual |===

... (truncated)

Commits
  • 314ae69 Release 5.8.1
  • 36d83f8 Fix Javadoc since tag for class ExpressionAuthorizationDecision
  • 5818201 Merge branch '5.7.x' into 5.8.x
  • 2461d00 Merge branch '5.6.x' into 5.7.x
  • eec6729 Fix DefaultLdapAuthoritiesPopulator NPE
  • ae22b75 Merge branch '5.7.x' into 5.8.x
  • fc9c251 Merge branch '5.6.x' into 5.7.x
  • f75d35f Update org.jetbrains.kotlin to 1.7.22
  • 195695f Update org.eclipse.jetty to 9.4.50.v20221201
  • 1439446 Update httpclient to 4.5.14
  • Additional commits viewable in compare view

Updates spring-security-ldap from 3.1.7.RELEASE to 5.8.1

Release notes

Sourced from spring-security-ldap's releases.

5.8.1

⭐ New Features

  • Add EnableWebSecurity migration steps to 5.8 guide #12334
  • Replace deprecated set-state set-output GitHub Action's commands #12298

🪲 Bug Fixes

  • codes in spring security docs fail to work #11396
  • DefaultLdapAuthoritiesPopulator throws NullPointerException #12408
  • Fix AuthorizationFilter diagram in docs #12286
  • Fix password encoder migration guide #12318
  • Fix typo #12316
  • Incorrect Javadoc for class ExpressionAuthorizationDecision #12411
  • Incorrect sample code in securityMatcher migration docs #12296
  • SecurityContextHolderFilter does not apply to async dispatch #11962

🔨 Dependency Upgrades

  • Update httpclient to 4.5.14 #12403
  • Update io.projectreactor to 2020.0.26 #12401
  • Update mockk to 1.13.3 #12400
  • Update org.eclipse.jetty to 9.4.50.v20221201 #12404
  • Update org.jetbrains.kotlin to 1.7.22 #12405
  • Update reactor-netty to 1.0.26 #12402

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

5.8.0

⭐ New Features

  • Add Kotlin example showing integration with WebTestClient #11611
  • Add MethodExpressionAuthorizationManager #11502
  • Add Polish localization to error messages from ExceptionTranslationFi… #12201
  • Add support AuthorizationManager + #11503
  • AnonymousAuthenticationFilter should cache its Supplier #11900
  • CookieServerCsrfTokenRepository doesn't support setting MaxAge #11441
  • DefaultFilterChainValidator should check AuthorizationFilter #11473
  • Deprecate Resource Owner Password Credentials grant #11591
  • Document Configure Default CsrfToken BREACH Protection #12107
  • Document Defer load CsrfToken #12105
  • Document DelegatingSecurityContextRepository #12069
  • Document deprecations in oauth2-client #12193
  • Document how to opt-in for SHA256 in RememberMe #12097
  • Document how to use the new requestMatchers and securityMatchers #12100

... (truncated)

Changelog

Sourced from spring-security-ldap's changelog.

= Release Process

The release process for Spring Security is partially automated. The following table outlines which steps are automated and which are manual. Follow the links to read about each step.

[cols="1,1"] |=== | Step | Status

| | ❌ manual

| | ✅ automated (scheduled release will abort if any issues are open)

| | ✅ automated

| | ✅ automated

| | ❌ manual (when updating dependencies)

| | ✅ automated

| | ✅ automated

| | ✅ automated

| | ✅ automated

| | ❌ manual

| | ✅ automated

| | ❌ manual (move issues to new milestone before release)

| | ✅ automated (if not already created)

| | ❌ manual |===

... (truncated)

Commits
  • 314ae69 Release 5.8.1
  • 36d83f8 Fix Javadoc since tag for class ExpressionAuthorizationDecision
  • 5818201 Merge branch '5.7.x' into 5.8.x
  • 2461d00 Merge branch '5.6.x' into 5.7.x
  • eec6729 Fix DefaultLdapAuthoritiesPopulator NPE
  • ae22b75 Merge branch '5.7.x' into 5.8.x
  • fc9c251 Merge branch '5.6.x' into 5.7.x
  • f75d35f Update org.jetbrains.kotlin to 1.7.22
  • 195695f Update org.eclipse.jetty to 9.4.50.v20221201
  • 1439446 Update httpclient to 4.5.14
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps `spring-security.version` from 3.1.7.RELEASE to 5.8.1.

Updates `spring-security-core` from 3.1.7.RELEASE to 5.8.1
- [Release notes](https://github.com/spring-projects/spring-security/releases)
- [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc)
- [Commits](spring-projects/spring-security@3.1.7.RELEASE...5.8.1)

Updates `spring-security-config` from 3.1.7.RELEASE to 5.8.1
- [Release notes](https://github.com/spring-projects/spring-security/releases)
- [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc)
- [Commits](spring-projects/spring-security@3.1.7.RELEASE...5.8.1)

Updates `spring-security-web` from 3.1.7.RELEASE to 5.8.1
- [Release notes](https://github.com/spring-projects/spring-security/releases)
- [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc)
- [Commits](spring-projects/spring-security@3.1.7.RELEASE...5.8.1)

Updates `spring-security-cas` from 3.1.7.RELEASE to 5.8.1
- [Release notes](https://github.com/spring-projects/spring-security/releases)
- [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc)
- [Commits](spring-projects/spring-security@3.1.7.RELEASE...5.8.1)

Updates `spring-security-ldap` from 3.1.7.RELEASE to 5.8.1
- [Release notes](https://github.com/spring-projects/spring-security/releases)
- [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc)
- [Commits](spring-projects/spring-security@3.1.7.RELEASE...5.8.1)

---
updated-dependencies:
- dependency-name: org.springframework.security:spring-security-core
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.springframework.security:spring-security-config
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.springframework.security:spring-security-web
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.springframework.security:spring-security-cas
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.springframework.security:spring-security-ldap
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Jan 25, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file java Pull requests that update Java code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants