[pull] main from spring-projects:main#68
Open
pull[bot] wants to merge 756 commits intoClarence404:mainfrom
Open
[pull] main from spring-projects:main#68pull[bot] wants to merge 756 commits intoClarence404:mainfrom
pull[bot] wants to merge 756 commits intoClarence404:mainfrom
Conversation
RFC 9068 requires that access token JWTs include the `client_id` claim, but it does not require resource servers to validate it against a specific value. Relates to gh-18381 Signed-off-by: Giacomo Baso <gbaso@users.noreply.github.com>
Closes gh-18381 Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
Signed-off-by: wonderfulrosemari <whwlsgur1419@naver.com>
Signed-off-by: wonderfulrosemari <whwlsgur1419@naver.com>
Closes gh-8843 Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
- add on tests for deprecated class - add on tests for specific deprecated function Closes gh-18412 Signed-off-by: Bae Jihong <dasog@naver.com>
… class Closes gh-18412 Signed-off-by: Bae Jihong <dasog@naver.com>
- add @SupressWarnings(deprecation) because of deprecated part in logic Closes gh-18412 Signed-off-by: Bae Jihong <dasog@naver.com>
- replace setTrustResolver with setAuthorizationManagerFactory in MethodSecurityExpressionRootTests - resolve raw type warning in ExpressionBasedMessageSecurityMetadataSourceFactoryTests Closes gh-18412 Signed-off-by: Bae Jihong <dasog@naver.com>
- add test for setAuthorizationManagerFactory that is a alternative to setTrustResolver and setDefaultRolePrefix Closes gh-18412 Signed-off-by: Bae Jihong <dasog@naver.com>
Closes gh-18911 Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
Bumps [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) from 2.21.1 to 2.21.2. - [Commits](FasterXML/jackson-bom@jackson-bom-2.21.1...jackson-bom-2.21.2) --- updated-dependencies: - dependency-name: com.fasterxml.jackson:jackson-bom dependency-version: 2.21.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Andreas Asplund <andreas@asplund.biz>
Previously, the `CheckExpectedBranchVersionPlugin` would crash the Gradle configuration phase if the project was in a detached HEAD state or not in a Git repository, e.g., downloaded as a ZIP. This commit refactors the plugin to be lazy and adopts several Gradle best practices: - Prevents build crashes on Git failures by gracefully catching non-zero exit codes, e.g., when checked out in a detached HEAD state. - Moves the branch validation out of the task's main execution action and into an `onlyIf` predicate, allowing Gradle to skip the task entirely instead of executing an early return. This makes the skip outcome and reason visible in a Build Scan, rather than making it appear as if it executed. - Defers the Git `exec` call to the execution phase using a lazy provider. - Makes the task configuration cache compatible by avoiding illegal `Project` access inside the execution-time `onlyIf` closure. - Improves user-facing logs and adds actionable bypass instructions when the project version doesn't match the branch version. Signed-off-by: Eric Haag <ehaag@gradle.com>
- URL parsing changed in framework 6.2, and fails when path contains a % sign. - The HttpSessionRequestCache only needs to inspect the query string, not the full URL. Fixes gh-16656 Signed-off-by: Daniel Garnier-Moiroux <git@garnier.wf>
Closes gh-18973 Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
This reverts commit c43c3ec.
Closes gh-19117 Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm) from 7.3.1.Final to 7.3.2.Final. - [Release notes](https://github.com/hibernate/hibernate-orm/releases) - [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.3.2/changelog.txt) - [Commits](hibernate/hibernate-orm@7.3.1...7.3.2) --- updated-dependencies: - dependency-name: org.hibernate.orm:hibernate-core dependency-version: 7.3.2.Final dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [com.google.code.gson:gson](https://github.com/google/gson) from 2.13.2 to 2.14.0. - [Release notes](https://github.com/google/gson/releases) - [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md) - [Commits](google/gson@gson-parent-2.13.2...gson-parent-2.14.0) --- updated-dependencies: - dependency-name: com.google.code.gson:gson dependency-version: 2.14.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps `org-jetbrains-kotlin` from 2.3.20 to 2.3.21. Updates `org.jetbrains.kotlin:kotlin-bom` from 2.3.20 to 2.3.21 - [Release notes](https://github.com/JetBrains/kotlin/releases) - [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md) - [Commits](JetBrains/kotlin@v2.3.20...v2.3.21) Updates `org.jetbrains.kotlin:kotlin-gradle-plugin` from 2.3.20 to 2.3.21 - [Release notes](https://github.com/JetBrains/kotlin/releases) - [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md) - [Commits](JetBrains/kotlin@v2.3.20...v2.3.21) --- updated-dependencies: - dependency-name: org.jetbrains.kotlin:kotlin-bom dependency-version: 2.3.21 dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: org.jetbrains.kotlin:kotlin-gradle-plugin dependency-version: 2.3.21 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) from 2.21.2 to 2.21.3. - [Commits](FasterXML/jackson-bom@jackson-bom-2.21.2...jackson-bom-2.21.3) --- updated-dependencies: - dependency-name: com.fasterxml.jackson:jackson-bom dependency-version: 2.21.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [gradle-wrapper](https://github.com/gradle/gradle) from 9.4.1 to 9.5.0. - [Release notes](https://github.com/gradle/gradle/releases) - [Commits](gradle/gradle@v9.4.1...v9.5.0) --- updated-dependencies: - dependency-name: gradle-wrapper dependency-version: 9.5.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
Closes gh-19136 Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
Bumps [com.webauthn4j:webauthn4j-core](https://github.com/webauthn4j/webauthn4j) from 0.31.3.RELEASE to 0.31.5.RELEASE. - [Release notes](https://github.com/webauthn4j/webauthn4j/releases) - [Commits](webauthn4j/webauthn4j@0.31.3.RELEASE...0.31.5.RELEASE) --- updated-dependencies: - dependency-name: com.webauthn4j:webauthn4j-core dependency-version: 0.31.5.RELEASE dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [tools.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) from 3.1.2 to 3.1.3. - [Commits](FasterXML/jackson-bom@jackson-bom-3.1.2...jackson-bom-3.1.3) --- updated-dependencies: - dependency-name: tools.jackson:jackson-bom dependency-version: 3.1.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm) from 7.3.2.Final to 7.3.3.Final. - [Release notes](https://github.com/hibernate/hibernate-orm/releases) - [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.3.3/changelog.txt) - [Commits](hibernate/hibernate-orm@7.3.2...7.3.3) --- updated-dependencies: - dependency-name: org.hibernate.orm:hibernate-core dependency-version: 7.3.3.Final dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
20 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
See Commits and Changes for more details.
Created by
pull[bot] (v2.0.0-alpha.4)
Can you help keep this open source service alive? 💖 Please sponsor : )