Skip to content
This repository was archived by the owner on Apr 24, 2024. It is now read-only.

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 18, 2022

Bumps spring-security-test from 5.6.1 to 5.7.4.

Release notes

Sourced from spring-security-test's releases.

5.7.3

⭐ New Features

  • Add Kotlin example showing integration with WebTestClient #9998
  • Set permissions for GitHub actions #11642
  • Update javadoc of EnableWebSecurity to reflect deprecation of WebSecurityConfigurerAdapter #11650

🪲 Bug Fixes

  • Add Deprecated annotation to WebSecurity#securityInterceptor #11637
  • Check saganCreateRelease saganDeleteRelease Required Permissions #11425
  • org.springframework.security.saml2.provider.service.authentication.DefaultSaml2AuthenticatedPrincipal fails to return more than one "attribute" #11605
  • RequestAttributeSecurityContextRepository.loadContext(HttpServletRequest) should never return null SecurityContext #11606
  • RequestRejectedHandler does not reliable prevent Internal Server Error #11672
  • Sources and javadocs missing in latest snapshots #11628
  • Spring Security Bcrypt with strength/log rounds = 31 results in 'Bad number of rounds' error although 31 should be ok #11484
  • Update javadoc of HttpSecurity, WebSecurityConfiguration and WebSecurity to reflect deprecation of WebSecurityConfigurerAdapter #11651

🔨 Dependency Upgrades

  • Update hibernate-entitymanager to 5.6.10.Final #11694
  • Update io.projectreactor to 2020.0.22 #11691
  • Update jsonassert to 1.5.1 #11696
  • Update mockk to 1.12.5 #11690
  • Update org.eclipse.jetty to 9.4.48.v20220622 #11693
  • Update org.jetbrains.kotlinx to 1.6.4 #11695
  • Update org.springframework to 5.3.22 #11697
  • Update org.springframework.data to 2021.2.2 #11698

5.7.2

⭐ New Features

  • Consider updating testing examples to use JUnit Jupiter #11293

🪲 Bug Fixes

  • Some Security Expressions cause NPE when used within @Query #11289
  • CsrfWebFilter null save content-type check #11341
  • Docs example uses access(String) with authorizeHttpRequests() #11296
  • Fix typo in BasicLookupStrategy Javadoc #11339
  • KeyInfo missing in AuthnRequest when using OpenSaml4AuthenticationRequestResolver #11358
  • OidcClientInitiatedLogoutSuccessHandler url-encodes PostLogoutRedirectUri twice #11384
  • SAML request encoding: on redirect binding, base64 encoded message contains CRLF #11284
  • SecurityContextRepository.loadContext(HttpServletRequest) cache result #11390
  • Should SAML metadata EntityDescriptor tag have the md: prefix? #11311
  • Update opaque-token.adoc #11303

🔨 Dependency Upgrades

  • Update aspectj-plugin to 6.4.3.1 #11402

... (truncated)

Commits
  • 89c8150 Fix Index Out of Bounds
  • ff055cf Remote antoraUpdateVersion task from CI
  • b08a06a Release 5.6.8
  • 465d80c Remove antoreUpdateVersion task from release automation
  • 4992e8c Update org.springframework.data to 2021.1.8
  • c772daa Update org.springframework to 5.3.23
  • 45a4a89 Update hibernate-entitymanager to 5.6.12.Final
  • b43c7e9 Update org.eclipse.jetty to 9.4.49.v20220914
  • 50d2362 Update io.rsocket to 1.1.3
  • 2c2603b Update io.projectreactor to 2020.0.24
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [spring-security-test](https://github.com/spring-projects/spring-security) from 5.6.1 to 5.7.4.
- [Release notes](https://github.com/spring-projects/spring-security/releases)
- [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc)
- [Commits](spring-projects/spring-security@5.6.1...5.7.4)

---
updated-dependencies:
- dependency-name: org.springframework.security:spring-security-test
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Oct 18, 2022
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 1, 2022

Superseded by #163.

@dependabot dependabot bot closed this Nov 1, 2022
@dependabot dependabot bot deleted the dependabot/gradle/master/org.springframework.security-spring-security-test-5.7.4 branch November 1, 2022 04:10
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant