6 hours ago
byte-buddy

Byte Buddy 1.18.16

  • Correct detection of a dropped implicit this frame in constructors with long or double parameters when using Advice.
  • Detect a dropped uninitialized this frame in constructors after full frames when using Advice with copied arguments.
  • Update ASM to version 9.11.1 and the ASM to Class File API bridge to version 0.0.14.
  • Use a valid tag for the Gradle plugin portal.
8 hours ago
Activiti

7.21.0-rc.732

What's Changed

🔨 Other Changes

Full Changelog: https://github.com/Activiti/Activiti/compare/7.21.0-rc.731...7.21.0-rc.732

15 hours ago
mybatis-3

Mybatis 3.6.0

What's Changed

New Contributors

Full Changelog: https://github.com/mybatis/mybatis-3/compare/mybatis-3.5.18...mybatis-3.6.0

23 hours ago
spring-session

4.2.0-RC1

⭐ New Features

  • Apply Spring Security Maven Plugin #4063
  • Apply Spring Security Settings Plugin #4061
  • Simplify Running on Internal CI #4031
  • Update to spring-security-release-tools 1.0.20 #4062

🪲 Bug Fixes

  • Fix buildSrc Tests #4060

🔨 Dependency Upgrades

  • Bump ch.qos.logback:logback-core from 1.6.3 to 1.6.5 #4079
  • Bump com.h2database:h2 from 2.5.250 to 2.5.252 #4072
  • Bump io.spring.nullability:io.spring.nullability.gradle.plugin from 0.0.16 to 0.0.17 #4080
  • Bump org.postgresql:postgresql from 42.7.13 to 42.7.14 #4095
23 hours ago
spring-security

7.2.0-RC1

⭐ New Features

  • Improve WebAuthn Registration Page no-script Handling
  • Support nonce-based Content Security Policy

🪲 Bug Fixes

  • Set Content-Type to application/x-www-form-urlencoded in OpaqueTokenIntrospector

🔨 Dependency Upgrades

  • Bump @antora/atlas-extension from 1.0.0-alpha.5 to 1.0.0-alpha.6 in /docs
  • Bump actions/upload-artifact from 7.0.1 to 7.0.2
  • Bump antora from 3.2.0 to 3.2.1 in /docs
  • Bump ch.qos.logback:logback-classic from 1.6.3 to 1.6.4
  • Bump ch.qos.logback:logback-classic from 1.6.4 to 1.6.5
  • Bump com.fasterxml.jackson:jackson-bom from 2.22.2 to 2.22.3
  • Bump com.webauthn4j:webauthn4j-core from 0.31.10.RELEASE to 0.31.11.RELEASE
  • Bump gradle-wrapper from 9.7.1 to 9.8.0
  • Bump gradle-wrapper from 9.8.0 to 9.8.1
  • Bump io.spring.develocity.conventions from 0.0.26 to 0.0.27
  • Bump io.spring.gradle:spring-security-project-plugin from 1.0.19 to 1.0.20
  • Bump io.spring.gradle:spring-security-release-plugin from 1.0.19 to 1.0.20
  • Bump org-jetbrains-kotlin from 2.4.20 to 2.4.21
  • Bump org.apache.httpcomponents.client5:httpclient5 from 5.6.4 to 5.6.5
  • Bump org.hibernate.orm:hibernate-core from 7.4.10.Final to 7.4.11.Final
  • Bump org.hibernate.orm:hibernate-core from 7.4.11.Final to 7.4.12.Final
  • Bump org.hibernate.orm:hibernate-core from 7.4.12.Final to 7.4.13.Final
  • Bump org.htmlunit:htmlunit from 5.5.0 to 5.6.0
  • Bump org.mockito:mockito-bom from 5.23.0 to 5.24.0
  • Bump org.seleniumhq.selenium:selenium-java from 4.48.0 to 4.50.0
  • Bump org.seleniumhq.selenium:selenium-java from 4.48.0 to 4.51.0
  • Bump org.slf4j:slf4j-api from 2.0.19 to 2.0.20
  • Bump spring-io/spring-github-workflows/.github/workflows/spring-merge-dependabot-pr.yml from bf2c65c148fb74b6bd54417222662ef587463765 to 0c67c5e7c6641a18e76c520114ed0251303e77ed
  • Bump spring-io/spring-github-workflows/.github/workflows/spring-merge-dependabot-pr.yml from fa7e8a8f981064983e9468225e052f14af7c67d4 to 0c09eb4023e17dd6ca395a0f4e406a4f7506a58d
  • Bump spring-io/spring-github-workflows/.github/workflows/spring-merge-dependabot-pr.yml from fa7e8a8f981064983e9468225e052f14af7c67d4 to 798bca4d6aecf03e5166d85789c33c20a65499e1
  • Bump spring-io/spring-github-workflows/.github/workflows/spring-merge-dependabot-pr.yml from fa7e8a8f981064983e9468225e052f14af7c67d4 to bf2c65c148fb74b6bd54417222662ef587463765
  • Bump spring-io/spring-release-actions/compute-next-version from 0.0.6 to 0.0.7
  • Bump spring-io/spring-release-actions/schedule-milestone from 0.0.6 to 0.0.7
  • Bump spring-io/spring-security-release-tools/.github/actions/send-notification from 1.0.18 to 1.0.19
  • Bump spring-io/spring-security-release-tools/.github/workflows/build.yml from 1.0.18 to 1.0.19
  • Bump spring-io/spring-security-release-tools/.github/workflows/build.yml from 1.0.18 to 1.0.20
  • Bump spring-io/spring-security-release-tools/.github/workflows/deploy-artifacts.yml from 1.0.18 to 1.0.19
  • Bump spring-io/spring-security-release-tools/.github/workflows/deploy-artifacts.yml from 1.0.19 to 1.0.20
  • Bump spring-io/spring-security-release-tools/.github/workflows/deploy-schema.yml from 1.0.18 to 1.0.19
  • Bump spring-io/spring-security-release-tools/.github/workflows/deploy-schema.yml from 1.0.18 to 1.0.20
  • Bump spring-io/spring-security-release-tools/.github/workflows/release-announcements-publish.yml from 1.0.18 to 1.0.20
  • Bump spring-io/spring-security-release-tools/.github/workflows/test.yml from 1.0.18 to 1.0.20
  • Bump tools.jackson:jackson-bom from 3.2.2 to 3.2.3

❤️ Contributors

Thank you to all the contributors who worked on this release:

@ziqin

23 hours ago
spring-security

7.1.2

🪲 Bug Fixes

  • Avoid spring-core in password encoder validation
  • Downgrade to Jackson 3.1
  • Empty or null scope claim in dynamic client registration request should be lenient
  • Ensure WebSession ID is not changed after token refresh (Reactive)
  • Fix to allow null servlet request/response in ServletOAuth2AuthorizedClientExchangeFilterFunction
  • Header Writers should not corrupt Jetty HttpFields state in reactive ResponseBodyEmitter handlers
  • NPE with authenticationValidator in OAuth2AuthorizationCodeRequestValidatingFilter
  • TokenType reference comparison is used in BearerTokenAuthentication

🔨 Dependency Upgrades

  • Bump @antora/atlas-extension from 1.0.0-alpha.5 to 1.0.0-alpha.6 in /docs
  • Bump actions/setup-java from 6.0.0 to 6.0.1
  • Bump antora from 3.2.0 to 3.2.1 in /docs
  • Bump antora from 3.2.0-rc.3 to 3.2.0 in /docs
  • Bump com.webauthn4j:webauthn4j-core from 0.31.9.RELEASE to 0.31.10.RELEASE
  • Bump gradle-wrapper from 9.7.0 to 9.7.1
  • Bump io-spring-javaformat from 0.0.47 to 0.0.48
  • Bump io.spring.develocity.conventions from 0.0.25 to 0.0.26
  • Bump io.spring.gradle:spring-security-release-plugin from 1.0.15 to 1.0.16
  • Bump io.spring.gradle:spring-security-release-plugin from 1.0.16 to 1.0.17
  • Bump io.spring.gradle:spring-security-release-plugin from 1.0.17 to 1.0.19
  • Bump io.spring.nullability:io.spring.nullability.gradle.plugin from 0.0.14 to 0.0.15
  • Bump io.spring.nullability:io.spring.nullability.gradle.plugin from 0.0.15 to 0.0.16
  • Bump org-jetbrains-kotlin from 2.4.10 to 2.4.20
  • Bump org.hibernate.orm:hibernate-core from 7.4.5.Final to 7.4.6.Final
  • Bump org.hibernate.orm:hibernate-core from 7.4.6.Final to 7.4.7.Final
  • Bump org.hibernate.orm:hibernate-core from 7.4.7.Final to 7.4.10.Final
  • Bump org.slf4j:slf4j-api from 2.0.18 to 2.0.19
  • Bump spring-io/spring-release-actions/compute-next-version from 0.0.5 to 0.0.6
  • Bump spring-io/spring-release-actions/compute-next-version from 0.0.6 to 0.0.7
  • Bump spring-io/spring-release-actions/get-todays-release-version from 0.0.5 to 0.0.6
  • Bump spring-io/spring-security-release-tools/.github/actions/send-notification from 1.0.17 to 1.0.18
  • Bump spring-io/spring-security-release-tools/.github/workflows/build.yml from 1.0.17 to 1.0.18
  • Bump spring-io/spring-security-release-tools/.github/workflows/deploy-artifacts.yml from 1.0.15 to 1.0.17
  • Bump spring-io/spring-security-release-tools/.github/workflows/deploy-schema.yml from 1.0.15 to 1.0.17
  • Bump spring-io/spring-security-release-tools/.github/workflows/release-announcements-publish.yml from 1.0.17 to 1.0.18
  • Bump spring-io/spring-security-release-tools/.github/workflows/release-announcements-stage.yml from 1.0.16 to 1.0.17
  • Bump tools.jackson:jackson-bom from 3.1.6 to 3.1.7

🔩 Build Updates

  • Configure for Reproducible Builds
  • Manually Set RequestedSessionId in Tests

❤️ Contributors

Thank you to all the contributors who worked on this release:

@evgeniycheban, @petergphillips, and @seonwooj0810