search

Asqatasun / Contrast-Finder

Contrast-Finder finds correct color contrasts (background / foreground) for web accessibility (a11y, WCAG, RGAA). https://app.contrast-finder.org
GNU Affero General Public License v3.0
56 stars 18 forks source link

Build(deps): Bump spring-security-web from 5.3.2.RELEASE to 5.3.9.RELEASE in /webapp #270

Open dependabot[bot] opened 3 years ago

dependabot[bot] commented 3 years ago

Bumps spring-security-web from 5.3.2.RELEASE to 5.3.9.RELEASE.

Release notes

Sourced from spring-security-web's releases.

5.3.9.RELEASE

:beetle: Bug Fixes

  • Add null check in CsrfFilter and CsrfWebFilter #9593

:hammer: Dependency Upgrades

  • Update to Spring Boot 2.2.13 #9614

5.3.8.RELEASE

This release fixes a problem with the release of 5.3.7.

:star: New Features

  • Improve HttpSessionSecurityContextSessionRepository Performance #9391
  • Improve HttpSessionSecurityContextSessionRepository Performance #9389
  • Migrate SAML 2.0 Samples to Use PCFOne #9370
  • Resolve artifacts from Maven Central first #9368
  • Use constant time comparisons for CSRF tokens #9358

:beetle: Bug Fixes

  • Fix the 5.3.7.RELEASE
  • OAuth2ResourceServerSpecTests and OAuth2WebClientControllerTests fail #9427
  • CurrentSecurityContextArgumentResolver should configure BeanResolver #9405
  • Fix beanResolver missing in CurrentSecurityContextArgumentResolver. #9404
  • Remove notEmpty check for authorities in DefaultOAuth2User #9397
  • Wrong example name in Spring Security documentation #9384
  • CsrfWebFilter creates CsrfException with incorrect message when no token is found #9339
  • webflux-x509 sample cert needs renewal #9323
  • OidcIdToken cannot be serialized to JSON if token contains claim of type JSONArray #9259

5.3.7.RELEASE

:star: New Features

  • Improve HttpSessionSecurityContextSessionRepository Performance #9391
  • Improve HttpSessionSecurityContextSessionRepository Performance #9389
  • Migrate SAML 2.0 Samples to Use PCFOne #9370
  • Resolve artifacts from Maven Central first #9368
  • Use constant time comparisons for CSRF tokens #9358

:beetle: Bug Fixes

  • OAuth2ResourceServerSpecTests and OAuth2WebClientControllerTests fail #9427
  • CurrentSecurityContextArgumentResolver should configure BeanResolver #9405
  • Fix beanResolver missing in CurrentSecurityContextArgumentResolver. #9404
  • Remove notEmpty check for authorities in DefaultOAuth2User #9397
  • Wrong example name in Spring Security documentation #9384
  • CsrfWebFilter creates CsrfException with incorrect message when no token is found #9339
  • webflux-x509 sample cert needs renewal #9323

... (truncated)

Commits
  • dd4e8eb Release 5.3.9.RELEASE
  • b3250c0 Lock Dependencies
  • aa0edfa Update to Spring Boot 2.2.13
  • 22d7043 Add null check in CsrfFilter and CsrfWebFilter
  • 2009b5f Next Development Version
  • 71f9876 Revert "Lock dependencies"
  • 461f1f6 Release 5.3.8.RELEASE
  • dca4858 Lock dependencies
  • 419839d Optimize HttpSessionSecurityContextRepository
  • 38e9e8c Optimize HttpSessionSecurityContextRepository
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Asqatasun/Contrast-Finder/network/alerts).