Bump spring-security-core from 5.4.6 to 5.4.7

[dependabot[bot]]

Bumps spring-security-core from 5.4.6 to 5.4.7.

Release notes

Sourced from spring-security-core's releases.

5.4.7

:star: New Features

• Store one request by default in WebSessionOAuth2ServerAuthorizationRequestRepository #9920

:beetle: Bug Fixes

• Disabling logout keeps LogoutPageGeneratingWebFilter registered at /logout #9942
• Missing log of "caused by" exception when OP document metadata cannot be reached #9940
• Using the SecurityMockServerConfigurers.java requires the com.nimbusds oauth2-oidc-sdk on the classpath #9930
• Adding filters relative to custom ones is broken #9908
• SEC-3139: Anonymous authentication token not passed to Controller #9891
• Clarify quick start section in README #9886
• RSocket and WebClient with Security refCount: 0 #9871
• Client credentials not correctly encoded in Basic Auth #9861
• Docs should state default value for Resource Server validation clock skew is 60 seconds #9848
• OidcClientInitiatedLogoutSuccessHandler url-encodes PostLogoutRedirectUri twice #9820
• DefaultSpringSecurityContextSource can't handle spaces in baseDn #9807
• OAuth2ErrorResponseErrorHandler throws IllegalArgumentException for a nonstandard HTTP status code response #9802
• NPE in HttpSessionSecurityContextRepository.isTransientAuthentication #9800
• docs.af.pivotal.io->docs-ip.spring.io #9686
• Buffer LEAK detected by ResourceLeakDetector in AuthenticationPayloadExchangeConverter #9681
• NullPointerException in StrictHttpFirewall spring-security-web version 5.4.5 #9674
• WebFlux httpBasic() should match on XHR requests #9662
• HttpSecurity.addFilter* with same Filter in Different Position Places in Incorrect Location #9643
• oauth2Login() generates authorization links for "client_credentials" grant type #9637

Commits

• 73e6ef2 Release 5.4.7
• d71be4c Lock Dependencies for Release
• 0c1bce5 Disable default logout page when logout disabled
• 1cd4ffe fix typo preventing full exception to be displayed in log
• 1d48f31 Replace StringUtils from oauth2-oidc-sdk
• a108868 Store one request by default in WebSessionOAuth2ServerAuthorizationRequestRep...
• ac371d5 Fix Adding Filter Relative to Custom Filter
• e601d96 Anonymous Authentication Argument Resolution Docs
• 18d04f2 Fix Getting Started Link
• b9e1901 Format PayloadInterceptorRSocket
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/jeequan/jeepay/network/alerts).

[dependabot[bot]]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.