Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump spring-security-core from 5.5.3 to 5.6.1 #202

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 14, 2022

Bumps spring-security-core from 5.5.3 to 5.6.1.

Release notes

Sourced from spring-security-core's releases.

5.6.1

⭐ New Features

  • Document authentication helper method in WebClient integration #10468
  • Document authentication helper method in WebClient integration for Servlet Environments #10120
  • Document parameters converter in oauth2 client servlet docs #10469
  • Document parameters converter in oauth2 client servlet docs #10467

🪲 Bug Fixes

  • AuthorityAuthorizationManager incorrectly compares GrantedAuthority #10595
  • clockSkew Javadoc is not consistent with implementation #10535
  • Invalid_request failures in JwtTokenValidators are always turned into invalid_token errors #10560
  • Kotlin DSL examples in reactive oauth2 docs call build twice #10591
  • StaticServerHttpHeadersWriter should work with case-insensitive header names #10581

🔨 Dependency Upgrades

  • Update cas-client-core to 3.6.4 #10654
  • Update hibernate-entitymanager to 5.6.3.Final #10653
  • Update io.projectreactor to 2020.0.14 #10651
  • Update jackson-bom to 2.13.1 #10647
  • Update jackson-databind to 2.13.1 #10648
  • Update jackson-datatype-jsr310 to 2.13.1 #10649
  • Update junit-bom to 5.8.2 #10656
  • Update logback-classic to 1.2.9 #10646
  • Update mockk to 1.12.1 #10650
  • Update org.jetbrains.kotlin to 1.5.32 #10655
  • Update org.junit.jupiter to 5.8.2 #10657
  • Update org.springframework to 5.3.14 #10658
  • Update reactor-netty to 1.0.14 #10652
  • Update spring-ldap-core to 2.3.5.RELEASE #10659

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

5.6.0

⭐ New Features

  • DaoAuthenticationProviderTests#avg function doesn't return fraction #10426
  • Docs Should Use Section Summary #10449
  • MissingCsrfTokenException message is misleading when not storing the CSRF tokens in the session #10436
  • Revamp OAuth 2.0 Login/Client reactive documentation #8174
  • Revamp Reactive OAuth 2.0 Login documentation #10479
  • Split up Documentation Further #10367
  • Support Structure 101 License Id in Package Tangle Check #10443

... (truncated)

Commits
  • e38bf6e Release 5.6.1
  • 624e0da Update spring-ldap-core to 2.3.5.RELEASE
  • b28aa6c Update org.springframework to 5.3.14
  • 9e83b4b Update junit-bom to 5.8.2
  • e9854c9 Update org.jetbrains.kotlin to 1.5.32
  • 0345e29 Update cas-client-core to 3.6.4
  • 8bd5795 Update hibernate-entitymanager to 5.6.3.Final
  • 4fbc98d Update io.projectreactor to 2020.0.14
  • 44cdbd6 Update mockk to 1.12.1
  • a9af8c4 Update jackson-bom to 2.13.1
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jan 14, 2022
@dependabot dependabot bot force-pushed the dependabot/gradle/org.springframework.security-spring-security-core-5.6.1 branch from 949d905 to 36a387e Compare January 26, 2022 14:12
@MediaMarco
Copy link
Member

@dependabot rebase

Bumps [spring-security-core](https://github.com/spring-projects/spring-security) from 5.5.3 to 5.6.1.
- [Release notes](https://github.com/spring-projects/spring-security/releases)
- [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc)
- [Commits](spring-projects/spring-security@5.5.3...5.6.1)

---
updated-dependencies:
- dependency-name: org.springframework.security:spring-security-core
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/gradle/org.springframework.security-spring-security-core-5.6.1 branch from 36a387e to 51741a6 Compare January 26, 2022 14:39
@MediaMarco MediaMarco merged commit e63c99c into master Jan 26, 2022
@dependabot dependabot bot deleted the dependabot/gradle/org.springframework.security-spring-security-core-5.6.1 branch January 26, 2022 15:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant