Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump org.springframework.security:spring-security-config from 6.2.0-RC1 to 6.2.0-RC2 #2519

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 19, 2023

Bumps org.springframework.security:spring-security-config from 6.2.0-RC1 to 6.2.0-RC2.

Release notes

Sourced from org.springframework.security:spring-security-config's releases.

6.2.0-RC2

⭐ New Features

  • Propagate security context via channel interceptor #12532
  • RequestedUrlRedirectInvalidSessionStrategy can cause the HTTP method to change depending on the user agent #12797
  • RequestedUrlRedirectInvalidSessionStrategy doesn't take servlet context path into account #12795

🪲 Bug Fixes

  • Added a note about the fact that if the CSRF protection is disabled in configuration, no logout confirmation page is shown to the user and the logout is performed directly. #13442
  • Use same case for all fields in toString #13917

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

Commits
  • 3fb1a5e Release 6.2.0-RC2
  • ab478a1 Clarify Effects Disabling CSRF Has On Logout
  • cc86afe Use same case for all fields in toString
  • d9399df Allow redirect status code to be customized
  • 2638555 Allow redirect strategy to be customized
  • df5b729 Propagate SecurityContext in ChannelInterceptor
  • 817e9d6 Merge branch '6.1.x'
  • e80dc51 Merge branch '6.0.x' into 6.1.x
  • aa04ee1 Merge branch '5.8.x' into 6.0.x
  • ec58bf0 Next development version
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.springframework.security:spring-security-config](https://github.com/spring-projects/spring-security) from 6.2.0-RC1 to 6.2.0-RC2.
- [Release notes](https://github.com/spring-projects/spring-security/releases)
- [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc)
- [Commits](spring-projects/spring-security@6.2.0-RC1...6.2.0-RC2)

---
updated-dependencies:
- dependency-name: org.springframework.security:spring-security-config
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the type: dependency-upgrade A dependency upgrade label Oct 19, 2023
@dependabot dependabot bot added this to the 3.2.x milestone Oct 19, 2023
@marcusdacoregio marcusdacoregio self-assigned this Oct 19, 2023
@marcusdacoregio marcusdacoregio modified the milestones: 3.2.x, 3.2.0 Oct 19, 2023
@marcusdacoregio marcusdacoregio merged commit 1e9b98d into main Oct 19, 2023
3 checks passed
@dependabot dependabot bot deleted the dependabot/gradle/main/org.springframework.security-spring-security-config-6.2.0-RC2 branch October 19, 2023 13:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
type: dependency-upgrade A dependency upgrade
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant