Full Changelog: https://github.com/Activiti/Activiti/compare/7.21.0-rc.177...7.21.0-rc.178

• Fix docs for Spring Boot 4 #3726

Thank you to all the contributors who worked on this release:

@rwinch

• Fix docs for Spring Boot 4 #3724

Thank you to all the contributors who worked on this release:

@rwinch

Full Changelog: https://github.com/Activiti/Activiti/compare/7.21.0-rc.176...7.21.0-rc.177

Full Changelog: https://github.com/Activiti/Activiti/compare/7.21.0-rc.175...7.21.0-rc.176

Full Changelog: https://github.com/Activiti/Activiti/compare/7.21.0-rc.174...7.21.0-rc.175

Full Changelog: https://github.com/Activiti/Activiti/compare/7.21.0-rc.173...7.21.0-rc.174

• Add XML Based shouldWriteHeadersEagerly tests #19018
• Merge Add CredentialRecordOwnerAuthorizationManager #19005

• Add equals and hashcode to HttpMethodRequestMatcher #18963
• auth_time claim doesn't show the time of the original authentication #18282
• auth_time validation fails when SSO session is renewed #18978
• Fallback defaultTargetUrl if refererHeader is empty #18981
• Fix HttpSessionRequestCache#getMatchingRequest query string parsing #18972
• Merge Handle null value in OnCommittedResponseWrapper header methods #18990
• OAuth2 client sessionManagement ineffective with DefaultOidcUser #19022

• Bump @springio/antora-extensions from 1.14.10 to 1.14.11 in /docs #19054
• Bump @springio/antora-extensions from 1.14.7 to 1.14.9 in /docs #18953
• Bump @springio/antora-extensions from 1.14.9 to 1.14.10 in /docs #19029
• Bump @springio/asciidoctor-extensions from 1.0.0-alpha.17 to 1.0.0-alpha.18 in /docs #18957
• Bump actions/upload-artifact from 7.0.0 to 7.0.1 #19096
• Bump com.webauthn4j:webauthn4j-core from 0.31.1.RELEASE to 0.31.2.RELEASE #19021
• Bump com.webauthn4j:webauthn4j-core from 0.31.2.RELEASE to 0.31.3.RELEASE #19114
• Bump io.projectreactor:reactor-bom from 2025.0.4 to 2025.0.5 #19080
• Bump org.apache.maven:maven-resolver-provider from 3.9.14 to 3.9.15 #19111
• Bump org.springframework.data:spring-data-bom from 2025.1.4 to 2025.1.5 #19113
• Bump org.springframework.ldap:spring-ldap-core from 4.0.2 to 4.0.3 #19098
• Bump org.springframework:spring-framework-bom from 7.0.6 to 7.0.7 #19112
• Bump spring-io/spring-gradle-build-action from 2.0.5 to 2.0.6 #18996
• Bump spring-io/spring-release-actions from 0.0.3 to 0.0.4 #19095
• Bump spring-io/spring-security-release-tools/.github/workflows/update-scheduled-release-version.yml from 1.0.14 to 1.0.15 #18948

Thank you to all the contributors who worked on this release:

@rwinch

• Add AllRequiredFactorsAuthorizationManager.anyOf #18960
• Add PreFlightRequestFilter Support #18926
• Add ConditionalAuthorizationManager #18919
• Add MultiFactorCondition.WEBAUTHN_REGISTERED #18923
• Add PreFlightRequestFilter Support #18980
• Add PrincipalResolver to ExchangeFilterFunctions #18888
• Add Support DPoP Customization #17202
• Add XML Based shouldWriteHeadersEagerly tests #19019
• AuthorizationManagerFactories.when #18920
• Clarify @WithSecurityContext thread scope #18812
• Construct SecureRandom in BCryptPasswordEncoder #18560
• Enable Null checking in spring-security-oauth2-authorization-server via JSpecify #18937
• Enable Null checking in spring-security-oauth2-client via JSpecify #17819
• Enable Null checking in spring-security-oauth2-resource-server via JSpecify #17822
• Exclude build output directories from nohttp source set #18928
• Implement equals and hashCode in ImmutablePublicKeyCredentialUserEntity #18883
• Improve And/Or-RequestMatcher/ServerWebExchangeMatcher API #18479
• Merge Add CredentialRecordOwnerAuthorizationManager #19006
• Move InetAddressMatcher to spring-security-core #18979
• Polish oauth2-client tests with missing Content-Type header #19008
• Prefer dispatcher context for authorize tag beans #18822
• Publish authentication events in WebAuthn #18938
• Relax client_id validation in AtJwtBuilder #18890
• Remove compiler warnings for spring-security-access #18738
• Remove compiler warnings in spring-security-web #18820
• Remove Unnecessary ObjectProvider roleHierarchy parameter #18921
• Revert snapshots to Spring Framework 7.0.+ #19024
• Support Customizer<AdditionalRequiredFactorsBuilder>> #18922
• Use idiomatic Kotlin in custom filter documentation #18976

• Fix equals nullability annotations for jspecify compliance #18930
• Merge Handle null value in OnCommittedResponseWrapper header methods #18991

• Bump @springio/antora-extensions from 1.14.7 to 1.14.9 in /docs #18946
• Bump @springio/antora-extensions from 1.14.9 to 1.14.10 in /docs #19030
• Bump @springio/antora-extensions from 1.14.9 to 1.14.11 in /docs #19053
• Bump @springio/asciidoctor-extensions from 1.0.0-alpha.17 to 1.0.0-alpha.18 in /docs #18913
• Bump actions/upload-artifact from 7.0.0 to 7.0.1 #19091
• Bump com.fasterxml.jackson:jackson-bom from 2.21.1 to 2.21.2 #18965
• Bump com.nimbusds:oauth2-oidc-sdk from 11.34 to 11.35 #18977
• Bump com.nimbusds:oauth2-oidc-sdk from 11.35 to 11.37 #19002
• Bump com.webauthn4j:webauthn4j-core from 0.31.1.RELEASE to 0.31.2.RELEASE #19020
• Bump com.webauthn4j:webauthn4j-core from 0.31.2.RELEASE to 0.31.3.RELEASE #19107
• Bump gradle-wrapper from 9.4.0 to 9.4.1 #18959
• Bump io.micrometer:micrometer-observation from 1.16.4 to 1.16.5 #19065
• Bump io.projectreactor:reactor-bom from 2025.0.4 to 2025.0.5 #19079
• Bump io.spring.nullability:io.spring.nullability.gradle.plugin from 0.0.12 to 0.0.13 #19067
• Bump org-bouncycastle from 1.83 to 1.84 #19066
• Bump org-jetbrains-kotlin from 2.3.10 to 2.3.20 #18915
• Bump org.apache.httpcomponents.client5:httpclient5 from 5.6 to 5.6.1 #19106
• Bump org.apache.maven:maven-resolver-provider from 3.9.14 to 3.9.15 #19105
• Bump org.apereo.cas.client:cas-client-core from 4.0.4 to 4.1.0 #18974
• Bump org.hibernate.orm:hibernate-core from 7.2.7.Final to 7.3.0.Final #18917
• Bump org.hibernate.orm:hibernate-core from 7.3.0.Final to 7.3.1.Final #19063
• Bump org.jetbrains.dokka from 2.1.0 to 2.2.0 #18998
• Bump org.jetbrains.dokka:dokka-gradle-plugin from 2.1.0 to 2.2.0 #18999
• Bump org.seleniumhq.selenium:htmlunit3-driver from 4.41.0 to 4.43.0 #19060
• Bump org.seleniumhq.selenium:selenium-java from 4.41.0 to 4.42.0 #19056
• Bump org.seleniumhq.selenium:selenium-java from 4.41.0 to 4.43.0 #19062
• Bump org.springframework.data:spring-data-bom from 2025.1.4 to 2025.1.5 #19104
• Bump org.springframework.ldap:spring-ldap-core from 4.0.2 to 4.0.3 #19097
• Bump spring-io/spring-gradle-build-action from 2.0.5 to 2.0.6 #18993
• Bump spring-io/spring-release-actions from 0.0.3 to 0.0.4 #19092
• Bump spring-io/spring-security-release-tools from 1.0.14 to 1.0.15 #18942
• Bump spring-io/spring-security-release-tools/.github/workflows/perform-release.yml from 1.0.14 to 1.0.15 #18944
• Bump spring-io/spring-security-release-tools/.github/workflows/test.yml from 1.0.14 to 1.0.15 #18943
• Bump spring-io/spring-security-release-tools/.github/workflows/update-scheduled-release-version.yml from 1.0.14 to 1.0.15 #18945
• Bump tools.jackson:jackson-bom from 3.1.0 to 3.1.1 #19003
• Bump tools.jackson:jackson-bom from 3.1.1 to 3.1.2 #19061

Thank you to all the contributors who worked on this release:

@aspan, @dasog94, @evgeniycheban, @franticticktick, @gbaso, @jkuhel, @ribafish, @rwinch, @suuuuuuminnnnnn, @therepanic, @wonderfulrosemari, @yxinot, and @ziqin

• Add CredentialRecordOwnerAuthorizationManager #19004
• Add XML Based shouldWriteHeadersEagerly tests #19017
• Clarify Session Management Persistence Documentation #18345
• Update FilterChainProxy#getFilters(String) javadoc #18258

• Add equals and hashcode to HttpMethodRequestMatcher #18914
• auth_time validation fails when SSO session is renewed #18839
• Fallback defaultTargetUrl if refererHeader is empty #18806
• Fix HttpSessionRequestCache#getMatchingRequest query string parsing #16914
• Fix documentation for Custom Authorization Manager #18362
• Improve serialVersionUID check in tests #18474
• Merge Handle null value in OnCommittedResponseWrapper header methods #18989
• OAuth2 client sessionManagement ineffective with DefaultOidcUser #18622

• Bump @springio/antora-extensions from 1.14.10 to 1.14.11 in /docs #19055
• Bump @springio/antora-extensions from 1.14.7 to 1.14.9 in /docs #18956
• Bump @springio/antora-extensions from 1.14.9 to 1.14.10 in /docs #19031
• Bump @springio/asciidoctor-extensions from 1.0.0-alpha.17 to 1.0.0-alpha.18 in /docs #18952
• Bump actions/upload-artifact from 7.0.0 to 7.0.1 #19094
• Bump io.projectreactor:reactor-bom from 2024.0.16 to 2024.0.17 #19078
• Bump io.spring.gradle:spring-security-release-plugin from 1.0.14 to 1.0.15 #18916
• Bump org.apache.maven:maven-resolver-provider from 3.9.14 to 3.9.15 #19108
• Bump org.hibernate.orm:hibernate-core from 6.6.44.Final to 6.6.45.Final #18966
• Bump org.hibernate.orm:hibernate-core from 6.6.45.Final to 6.6.47.Final #19046
• Bump org.hibernate.orm:hibernate-core from 6.6.47.Final to 6.6.48.Final #19064
• Bump org.hibernate.orm:hibernate-core from 6.6.48.Final to 6.6.49.Final #19110
• Bump org.springframework:spring-framework-bom from 6.2.17 to 6.2.18 #19109
• Bump spring-io/spring-release-actions from 0.0.3 to 0.0.4 #19093
• Bump spring-io/spring-security-release-tools from 1.0.14 to 1.0.15 #18954
• Bump spring-io/spring-security-release-tools/.github/workflows/build.yml from 1.0.14 to 1.0.15 #18955
• Bump spring-io/spring-security-release-tools/.github/workflows/deploy-artifacts.yml from 1.0.14 to 1.0.15 #18949
• Bump spring-io/spring-security-release-tools/.github/workflows/deploy-schema.yml from 1.0.14 to 1.0.15 #18950
• Bump spring-io/spring-security-release-tools/.github/workflows/perform-release.yml from 1.0.14 to 1.0.15 #18995
• Bump spring-io/spring-security-release-tools/.github/workflows/test.yml from 1.0.14 to 1.0.15 #18951
• Bump spring-io/spring-security-release-tools/.github/workflows/update-scheduled-release-version.yml from 1.0.14 to 1.0.15 #18994
• Update to spring-security-release-tools 1.0.15 #18910

Thank you to all the contributors who worked on this release:

@Kehrlann, @as1605, @johnycho, @ngocnhan-tran1996, @rwinch, and @sankranty