SpiNNakerManchester / JavaSpiNNaker

Implementation of the SpiNNaker host software in Java
Apache License 2.0
0 stars 2 forks source link

Bump org.springframework.security:spring-security-core from 5.8.11 to 5.8.14 #1176

Closed dependabot[bot] closed 3 days ago

dependabot[bot] commented 1 month ago

Bumps org.springframework.security:spring-security-core from 5.8.11 to 5.8.14.

Release notes

Sourced from org.springframework.security:spring-security-core's releases.

5.8.14

:star: New Features

  • Document the role of CredentialsContainer #15319

:beetle: Bug Fixes

  • Clarify url Parameter Usage in AD Provider Constructor #15409
  • Using sec:authorize in JSPX causes 'java.lang.NullPointerException: Cannot invoke "jakarta.servlet.ServletRegistration.getClassName()" because "registration" is null' #15363

:hammer: Dependency Upgrades

  • Bump com.github.spullara.mustache.java:compiler from 0.9.13 to 0.9.14 #15375
  • Bump io.projectreactor.netty:reactor-netty from 1.0.46 to 1.0.47 #15391
  • Bump io.projectreactor.netty:reactor-netty from 1.0.47 to 1.0.48 #15606
  • Bump io.projectreactor:reactor-bom from 2020.0.45 to 2020.0.46 #15390
  • Bump io.projectreactor:reactor-bom from 2020.0.46 to 2020.0.47 #15604
  • Bump org-eclipse-jetty from 9.4.54.v20240208 to 9.4.55.v20240627 #15360
  • Bump org.skyscreamer:jsonassert from 1.5.1 to 1.5.2 #15291
  • Bump org.skyscreamer:jsonassert from 1.5.1 to 1.5.3 #15335
  • Bump org.springframework:spring-framework-bom from 5.3.37 to 5.3.39 #15615

:nut_and_bolt: Build Updates

  • Automate check of expected branch version #15226
  • Bump @antora/collector-extension from 1.0.0-alpha.4 to 1.0.0-alpha.6 in /docs #15447
  • Bump @antora/collector-extension from 1.0.0-alpha.6 to 1.0.0-alpha.7 in /docs #15484
  • Bump @antora/collector-extension from 1.0.0-alpha.7 to 1.0.0-beta.1 in /docs #15558
  • Bump @antora/collector-extension from 1.0.0-beta.1 to 1.0.0-beta.2 in /docs #15633
  • Bump @springio/antora-extensions from 1.11.1 to 1.12.0 in /docs #15417
  • Bump @springio/antora-extensions from 1.12.0 to 1.13.0 in /docs #15523
  • Bump @springio/antora-extensions from 1.13.0 to 1.13.1 in /docs #15559
  • Bump @springio/antora-extensions from 1.13.1 to 1.14.2 in /docs #15632
  • Bump @springio/asciidoctor-extensions from 1.0.0-alpha.10 to 1.0.0-alpha.11 in /docs #15416
  • Bump @springio/asciidoctor-extensions from 1.0.0-alpha.11 to 1.0.0-alpha.12 in /docs #15524
  • Bump antora from 3.2.0-alpha.4 to 3.2.0-alpha.5 in /docs #15330
  • Bump antora from 3.2.0-alpha.5 to 3.2.0-alpha.6 in /docs #15481
  • Bump com.gradle.develocity from 3.17.5 to 3.17.6 #15463

:heart: Contributors

We'd like to thank all the contributors who worked on this release!

5.8.13

:star: New Features

  • doc: added hint to declare GrantedAuthorityDefaults as infrastructure bean #14779

... (truncated)

Commits
  • 0115e8a Release 5.8.14
  • 6b69edb Bump @​antora/collector-extension in /docs
  • 0ba2617 Bump @​springio/antora-extensions from 1.13.1 to 1.14.2 in /docs
  • 85775fe Bump org.springframework:spring-framework-bom from 5.3.37 to 5.3.39
  • 1ca5316 Bump io.projectreactor.netty:reactor-netty from 1.0.47 to 1.0.48
  • 47a521c Bump io.projectreactor:reactor-bom from 2020.0.46 to 2020.0.47
  • 751c6a7 Bump @​springio/antora-extensions from 1.13.0 to 1.13.1 in /docs
  • 7d7b59b Bump @​antora/collector-extension in /docs
  • 7149622 Revert "Migrate slack notifications to GChat"
  • e9e0ec8 Bump @​springio/antora-extensions from 1.12.0 to 1.13.0 in /docs
  • Additional commits viewable in compare view


Most Recent Ignore Conditions Applied to This Pull Request | Dependency Name | Ignore Conditions | | --- | --- | | org.springframework.security:spring-security-core | [>= 6.a, < 7] |

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
coveralls commented 1 month ago

Coverage Status

coverage: 37.005% (+0.005%) from 37.0% when pulling 49c4b1254905ff1bd94defb07f014da466b49c8b on dependabot/maven/org.springframework.security-spring-security-core-5.8.14 into c1e73f6b3e3e3ba927d31b6dbc3583c44363090b on master.