• [#2232] Form data save without requiring to log in by @lprimak in https://github.com/apache/shiro/pull/2907

• enh: rework form resubmit via self-dispatch rather than a network-call by @lprimak in https://github.com/apache/shiro/pull/2900
• [#2929] Use Spring Path matcher for Spring Boot 4.2+ where Ant matching is removed by @lprimak in https://github.com/apache/shiro/pull/2928
• [#2909] Change session validation log messages from INFO to DEBUG by @lprimak in https://github.com/apache/shiro/pull/2910
• chore(build): add Semeru runtimes by @lprimak in https://github.com/apache/shiro/pull/2879
• chore: add scarf.sh pixel to README by @lprimak in https://github.com/apache/shiro/pull/2880
• docs(README): added OpenSSF best practices badge by @lprimak in https://github.com/apache/shiro/pull/2892
• chore: Generate SBOM files with CycloneDX and SPDX maven plugins by @lprimak in https://github.com/apache/shiro/pull/2893
• chore: updated shiro.doap.rdf file for Shiro 3.0.1 by @lprimak in https://github.com/apache/shiro/pull/2873
• Build CI artifacts on only once, and reuse the builds in the matrix by @lprimak in https://github.com/apache/shiro/pull/2937
• Refactor Jakarta EE integration tests with Graphene page objects by @lprimak in https://github.com/apache/shiro/pull/2944

• [#2926] - Spring configuration appends a stray " }" to the rememberMe cookie path by @Nexory in https://github.com/apache/shiro/pull/2927

• [#2924] - WildcardPermission and DomainPermission lower-case with the JVM default locale by @sharanggupta in https://github.com/apache/shiro/pull/2925

• [#2931] - Rebuild expired Faces views during form replay without a preliminary GET by @balusc and @lprimak in https://github.com/apache/shiro/pull/2930

• [#2923] Various bug fixes by @lprimak in https://github.com/apache/shiro/pull/2922

• bugfix(test): flaky test core/.../DefaultSecurityManagerTest fixed by @lprimak in https://github.com/apache/shiro/pull/2951

• chore: remove site override from apache release profile, is obsolete … by @lprimak in https://github.com/apache/shiro/pull/2887

• chore(build): removed windows profile, no longer necessary by @lprimak in https://github.com/apache/shiro/pull/2891

• Improve build stability: RAT, Selenium and JavaAPI Comparison enforcer plugin by @lprimak in https://github.com/apache/shiro/pull/2901

• enh: fix labeler workflow by @lprimak in https://github.com/apache/shiro/pull/2916

• [#2905] chore: replace labeler with the one that works like magpie and pull_r… by @lprimak in https://github.com/apache/shiro/pull/2908

• misc: fix typos in Java code by @jbampton in https://github.com/apache/shiro/pull/2914

• chore: add missing @Override annotations by @lprimak in https://github.com/apache/shiro/pull/2913

• chore: fix CodeQL issues by @lprimak in https://github.com/apache/shiro/pull/2915

• bugfix(Guice): align Guice behavior regarding superclass annotation p… by @lprimak in https://github.com/apache/shiro/pull/2881

• bugfix(jakarta-ee): form resubmit logic uses more data from the subse… by @lprimak in https://github.com/apache/shiro/pull/2885

• Align default settings of ShiroFilterFactoryBean and NoAccessFilter with other components by @lprimak in https://github.com/apache/shiro/pull/2921

• enh: harmonized superclass / interface annotation processing by @lprimak in https://github.com/apache/shiro/pull/2917

• chore(deps): bump the maven-dependencies group with 22 updates by @dependabot[bot] in https://github.com/apache/shiro/pull/2872
• chore(deps): bump the github-actions-dependencies group with 4 updates by @dependabot[bot] in https://github.com/apache/shiro/pull/2871
• chore(deps): bump the github-actions-dependencies group with 5 updates by @dependabot[bot] in https://github.com/apache/shiro/pull/2875
• chore(deps): bump the maven-dependencies group with 7 updates by @dependabot[bot] in https://github.com/apache/shiro/pull/2876
• chore(deps): bump the maven-dependencies group with 27 updates by @dependabot[bot] in https://github.com/apache/shiro/pull/2884
• chore(deps): bump the pre-commit-hooks group with 2 updates by @dependabot[bot] in https://github.com/apache/shiro/pull/2883
• chore(deps): bump the github-actions-dependencies group with 4 updates by @dependabot[bot] in https://github.com/apache/shiro/pull/2890
• chore(deps): bump the maven-dependencies group with 18 updates by @dependabot[bot] in https://github.com/apache/shiro/pull/2889
• chore(deps): bump https://github.com/zizmorcore/zizmor-pre-commit from v1.30.0 to 1.30.1 in the pre-commit-hooks group by @dependabot[bot] in https://github.com/apache/shiro/pull/2888
• chore(deps): bump the github-actions-dependencies group with 4 updates by @dependabot[bot] in https://github.com/apache/shiro/pull/2894
• chore(deps): bump the maven-dependencies group with 8 updates by @dependabot[bot] in https://github.com/apache/shiro/pull/2895
• chore(deps): bump https://github.com/python-jsonschema/check-jsonschema from 0.38.0 to 0.38.2 in the pre-commit-hooks group by @dependabot[bot] in https://github.com/apache/shiro/pull/2897
• chore(deps): bump the maven-dependencies group with 13 updates by @dependabot[bot] in https://github.com/apache/shiro/pull/2898
• chore(deps): bump the github-actions-dependencies group with 3 updates by @dependabot[bot] in https://github.com/apache/shiro/pull/2899
• chore(deps): bump the maven-dependencies group with 9 updates by @dependabot[bot] in https://github.com/apache/shiro/pull/2906
• chore(deps): bump the github-actions-dependencies group with 7 updates by @dependabot[bot] in https://github.com/apache/shiro/pull/2912
• chore(deps): bump the maven-dependencies group with 27 updates by @dependabot[bot] in https://github.com/apache/shiro/pull/2911
• chore(deps): bump https://github.com/zizmorcore/zizmor-pre-commit from v1.30.1 to 1.31.1 in the pre-commit-hooks group by @dependabot[bot] in https://github.com/apache/shiro/pull/2918
• chore(deps): bump the github-actions-dependencies group with 4 updates by @dependabot[bot] in https://github.com/apache/shiro/pull/2920
• chore(deps): bump the maven-dependencies group with 9 updates by @dependabot[bot] in https://github.com/apache/shiro/pull/2919
• chore(deps): bump the github-actions-dependencies group with 5 updates by @dependabot[bot] in https://github.com/apache/shiro/pull/2932
• chore(deps): bump the maven-dependencies group with 18 updates by @dependabot[bot] in https://github.com/apache/shiro/pull/2933
• chore(deps): bump the github-actions-dependencies group across 1 directory with 5 updates by @dependabot[bot] in https://github.com/apache/shiro/pull/2948
• chore(deps): bump the pre-commit-hooks group across 1 directory with 3 updates by @dependabot[bot] in https://github.com/apache/shiro/pull/2946
• chore(deps): bump the maven-dependencies group across 1 directory with 15 updates by @dependabot[bot] in https://github.com/apache/shiro/pull/2949

• @sharanggupta made their first contribution in https://github.com/apache/shiro/pull/2925

Full Changelog: https://github.com/apache/shiro/compare/shiro-root-3.0.1...shiro-root-3.0.2

Full Changelog: https://github.com/Activiti/Activiti/compare/7.21.0-rc.794...7.21.0-rc.795

• [rb] download the Server jar with Selenium Manager instead of the GitHub API by @titusfortner in https://github.com/SeleniumHQ/selenium/pull/18245
• [java] Escape quotes and backslashes in name locators sent to the driver by @Mochxd in https://github.com/SeleniumHQ/selenium/pull/18151
• [dotnet] [test] Unify assembly names for testing by @nvborisenko in https://github.com/SeleniumHQ/selenium/pull/18261
• [rb] Allocate websocket command ids atomically by @AutomatedTester in https://github.com/SeleniumHQ/selenium/pull/18262
• [py] Add WebDriver cookie type annotations by @adamtheturtle in https://github.com/SeleniumHQ/selenium/pull/17537
• [py] Deprecate driver.webextension by @AutomatedTester in https://github.com/SeleniumHQ/selenium/pull/18265
• [py] Return a protocol-neutral driver.script by @AutomatedTester in https://github.com/SeleniumHQ/selenium/pull/18264
• [build] run the Redis-backed Grid suites from the Java smoke matrix instead of a separate workflow by @titusfortner in https://github.com/SeleniumHQ/selenium/pull/18267
• fix(#18263): keep Selenium Manager stderr empty in --output json by @macoladik in https://github.com/SeleniumHQ/selenium/pull/18268
• [js] hold BiDi numbers to their declared ranges by @saiyam-jain-dev in https://github.com/SeleniumHQ/selenium/pull/18272
• [build] Add weekly CI check for Plausible pageview usage by @titusfortner in https://github.com/SeleniumHQ/selenium/pull/17900
• [java] hold generated BiDi numbers to their declared ranges by @yashp676 in https://github.com/SeleniumHQ/selenium/pull/18266
• [build] use the EngFlow cache for the Java GHA smoke test job by @titusfortner in https://github.com/SeleniumHQ/selenium/pull/18276
• [py] Support relative locators from WebElement and ShadowRoot by @gjreddy in https://github.com/SeleniumHQ/selenium/pull/18241
• [js][py][rb][java][dotnet] add the accessibility snapshot atom and the binding methods by @AutomatedTester in https://github.com/SeleniumHQ/selenium/pull/18232
• [grid] Spread new sessions across Nodes again by @diemol in https://github.com/SeleniumHQ/selenium/pull/18281
• [js] Add @selenium/mcp, an MCP server for coding agents (v0) by @AutomatedTester in https://github.com/SeleniumHQ/selenium/pull/18280
• [js] MCP v1: drag, file upload, resize, network requests, evaluate by @AutomatedTester in https://github.com/SeleniumHQ/selenium/pull/18284
• [rust] Fix Firefox and Electron download URLs on Windows arm64 by @dennisameling in https://github.com/SeleniumHQ/selenium/pull/18285
• [java] Escape frame ids that are not valid CSS identifiers by @Mochxd in https://github.com/SeleniumHQ/selenium/pull/18274

• @macoladik made their first contribution in https://github.com/SeleniumHQ/selenium/pull/18268

Full Changelog: https://github.com/SeleniumHQ/selenium/compare/selenium-4.52.0...nightly

• [rb] download the Server jar with Selenium Manager instead of the GitHub API by @titusfortner in https://github.com/SeleniumHQ/selenium/pull/18245
• [java] Escape quotes and backslashes in name locators sent to the driver by @Mochxd in https://github.com/SeleniumHQ/selenium/pull/18151
• [dotnet] [test] Unify assembly names for testing by @nvborisenko in https://github.com/SeleniumHQ/selenium/pull/18261
• [rb] Allocate websocket command ids atomically by @AutomatedTester in https://github.com/SeleniumHQ/selenium/pull/18262
• [py] Add WebDriver cookie type annotations by @adamtheturtle in https://github.com/SeleniumHQ/selenium/pull/17537
• [py] Deprecate driver.webextension by @AutomatedTester in https://github.com/SeleniumHQ/selenium/pull/18265
• [py] Return a protocol-neutral driver.script by @AutomatedTester in https://github.com/SeleniumHQ/selenium/pull/18264
• [build] run the Redis-backed Grid suites from the Java smoke matrix instead of a separate workflow by @titusfortner in https://github.com/SeleniumHQ/selenium/pull/18267
• fix(#18263): keep Selenium Manager stderr empty in --output json by @macoladik in https://github.com/SeleniumHQ/selenium/pull/18268
• [js] hold BiDi numbers to their declared ranges by @saiyam-jain-dev in https://github.com/SeleniumHQ/selenium/pull/18272
• [build] Add weekly CI check for Plausible pageview usage by @titusfortner in https://github.com/SeleniumHQ/selenium/pull/17900
• [java] hold generated BiDi numbers to their declared ranges by @yashp676 in https://github.com/SeleniumHQ/selenium/pull/18266
• [build] use the EngFlow cache for the Java GHA smoke test job by @titusfortner in https://github.com/SeleniumHQ/selenium/pull/18276
• [py] Support relative locators from WebElement and ShadowRoot by @gjreddy in https://github.com/SeleniumHQ/selenium/pull/18241
• [js][py][rb][java][dotnet] add the accessibility snapshot atom and the binding methods by @AutomatedTester in https://github.com/SeleniumHQ/selenium/pull/18232
• [grid] Spread new sessions across Nodes again by @diemol in https://github.com/SeleniumHQ/selenium/pull/18281
• [js] Add @selenium/mcp, an MCP server for coding agents (v0) by @AutomatedTester in https://github.com/SeleniumHQ/selenium/pull/18280
• [js] MCP v1: drag, file upload, resize, network requests, evaluate by @AutomatedTester in https://github.com/SeleniumHQ/selenium/pull/18284
• [rust] Fix Firefox and Electron download URLs on Windows arm64 by @dennisameling in https://github.com/SeleniumHQ/selenium/pull/18285
• [java] Escape frame ids that are not valid CSS identifiers by @Mochxd in https://github.com/SeleniumHQ/selenium/pull/18274

• @macoladik made their first contribution in https://github.com/SeleniumHQ/selenium/pull/18268

Full Changelog: https://github.com/SeleniumHQ/selenium/compare/selenium-4.52.0...nightly

Full Changelog: https://github.com/Activiti/Activiti/compare/7.21.0-rc.793...7.21.0-rc.794

Full Changelog: https://github.com/Activiti/Activiti/compare/7.21.0-rc.792...7.21.0-rc.793

Full Changelog: https://github.com/Activiti/Activiti/compare/7.21.0-rc.791...7.21.0-rc.792

Release v4.11.4

• AAE-55511 Consume Activiti Maven artifacts from Cloudsmith by @souvikpanda99 in https://github.com/Activiti/Activiti/pull/5647

Full Changelog: https://github.com/Activiti/Activiti/compare/7.21.0-rc.790...7.21.0-rc.791

Full Changelog: https://github.com/Activiti/Activiti/compare/7.21.0-rc.789...7.21.0-rc.790