arrumm / veragg

0 stars 0 forks source link

Bump spring-security-test from 5.5.2 to 5.7.2 #145

Closed dependabot[bot] closed 2 years ago

dependabot[bot] commented 2 years ago

Bumps spring-security-test from 5.5.2 to 5.7.2.

Release notes

Sourced from spring-security-test's releases.

5.7.2

:star: New Features

  • Consider updating testing examples to use JUnit Jupiter #11293

:beetle: Bug Fixes

  • Some Security Expressions cause NPE when used within @Query #11289
  • CsrfWebFilter null save content-type check #11341
  • Docs example uses access(String) with authorizeHttpRequests() #11296
  • Fix typo in BasicLookupStrategy Javadoc #11339
  • KeyInfo missing in AuthnRequest when using OpenSaml4AuthenticationRequestResolver #11358
  • OidcClientInitiatedLogoutSuccessHandler url-encodes PostLogoutRedirectUri twice #11384
  • SAML request encoding: on redirect binding, base64 encoded message contains CRLF #11284
  • SecurityContextRepository.loadContext(HttpServletRequest) cache result #11390
  • Should SAML metadata EntityDescriptor tag have the md: prefix? #11311
  • Update opaque-token.adoc #11303

:hammer: Dependency Upgrades

  • Update aspectj-plugin to 6.4.3.1 #11402
  • Update hibernate-entitymanager to 5.6.9.Final #11405
  • Update io.projectreactor to 2020.0.20 #11403
  • Update jackson-bom to 2.13.3 #11399
  • Update jackson-databind to 2.13.3 #11400
  • Update jackson-datatype-jsr310 to 2.13.3 #11401
  • Update org.jetbrains.kotlinx to 1.6.3 #11406
  • Update org.opensaml:opensaml-core4 to 4.1.1 #11410
  • Update org.springframework to 5.3.21 #11407
  • Update org.springframework.data to 2021.2.1 #11408
  • Update reactor-netty to 1.0.20 #11404
  • Update spring-ldap-core to 2.4.1 #11409

:heart: Contributors

We'd like to thank all the contributors who worked on this release!

5.7.1

:beetle: Bug Fixes

  • StrictHttpFirewall incorrectly rejects valid CJKV characters #11266

5.7.0

:star: New Features

  • Check Samples should run against the current artifacts #11199
  • Consider replacing an inner loop with Set of authority strings in AuthorityAuthorizationManager#isAuthorized #11188
  • Remember me should detect UserDetailsService bean #11170

... (truncated)

Commits
  • c40f65f Release 5.7.2
  • bca43af Update org.opensaml:opensaml-core4 to 4.1.1
  • d9b8882 Update spring-ldap-core to 2.4.1
  • 7358c65 Update org.springframework.data to 2021.2.1
  • e02d5f2 Update org.springframework to 5.3.21
  • 91a965c Update org.jetbrains.kotlinx to 1.6.3
  • 0e88064 Update hibernate-entitymanager to 5.6.9.Final
  • 641b9ef Update io.projectreactor to 2020.0.20
  • 6f43d23 Update aspectj-plugin to 6.4.3.1
  • d7819ea Update jackson-bom to 2.13.3
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
dependabot[bot] commented 2 years ago

Superseded by #151.