Skip to content

Bump org.springframework.security:spring-security-bom from 7.1.0 to 7.1.1 - #419

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/gradle/main/org.springframework.security-spring-security-bom-7.1.1
Aug 28, 2026
Merged

Bump org.springframework.security:spring-security-bom from 7.1.0 to 7.1.1#419
github-actions[bot] merged 1 commit into
mainfrom
dependabot/gradle/main/org.springframework.security-spring-security-bom-7.1.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 28, 2026

Copy link
Copy Markdown
Contributor

Bumps org.springframework.security:spring-security-bom from 7.1.0 to 7.1.1.

Release notes

Sourced from org.springframework.security:spring-security-bom's releases.

7.1.1

⭐ New Features

  • Fix Broken DefaultLoginPageGeneratingFilter Javadoc Link #19252
  • Remove BeanResolver Null Checks #19209
  • Remove Unnecessary AuthorizationDecision Cast #19283
  • Update One-Time Token Docs for Renamed APIs #19274

🪲 Bug Fixes

  • Correct validation logic in CasAuthenticationToken #19372
  • Differentiate Forwarded and X-Forwarded headers in proxy docs #19477
  • Find mixed-case names in InMemoryUserDetailsManager#changePassword #19539
  • Fix OAuth2PushedAuthorizationRequestUri parsing #19445
  • Update JavaDoc Links in Reference #19199
  • Validate Parameter in setPostAuthenticationChecks #19277

🔨 Dependency Upgrades

  • Bump @springio/antora-extensions from 1.14.12 to 1.14.13 in /docs #19503
  • Bump actions/checkout from 6.0.3 to 7.0.0 #19351
  • Bump actions/checkout from 7.0.0 to 7.0.1 #19464
  • Bump actions/setup-java from 5.2.0 to 5.3.0 #19352
  • Bump actions/setup-java from 5.3.0 to 5.4.0 #19380
  • Bump actions/setup-java from 5.4.0 to 5.5.0 #19430
  • Bump actions/setup-java from 5.5.0 to 5.6.0 #19453
  • Bump actions/setup-java from 5.6.0 to 5.7.0 #19501
  • Bump antora from 3.2.0-alpha.12 to 3.2.0-rc.2 in /docs #19385
  • Bump ch.qos.logback:logback-classic from 1.5.34 to 1.5.35 #19374
  • Bump ch.qos.logback:logback-classic from 1.5.35 to 1.5.36 #19389
  • Bump ch.qos.logback:logback-classic from 1.5.36 to 1.5.37 #19396
  • Bump ch.qos.logback:logback-classic from 1.5.37 to 1.5.38 #19431
  • Bump ch.qos.logback:logback-classic from 1.5.38 to 1.6.0 #19467
  • Bump ch.qos.logback:logback-classic from 1.6.0 to 1.6.1 #19476
  • Bump ch.qos.logback:logback-classic from 1.6.1 to 1.6.2 #19556
  • Bump ch.qos.logback:logback-classic from 1.6.2 to 1.6.3 #19564
  • Bump com.fasterxml.jackson:jackson-bom from 2.22.0 to 2.22.1 #19419
  • Bump com.fasterxml.jackson:jackson-bom from 2.22.1 to 2.22.2 #19566
  • Bump com.nimbusds:oauth2-oidc-sdk from 11.37.2 to 11.38.1 #19439
  • Bump com.nimbusds:oauth2-oidc-sdk from 11.38.1 to 11.38.2 #19525
  • Bump com.unboundid:unboundid-ldapsdk from 7.0.4 to 7.0.5 #19322
  • Bump com.webauthn4j:webauthn4j-core from 0.31.6.RELEASE to 0.31.7.RELEASE #19313
  • Bump com.webauthn4j:webauthn4j-core from 0.31.7.RELEASE to 0.31.8.RELEASE #19409
  • Bump com.webauthn4j:webauthn4j-core from 0.31.8.RELEASE to 0.31.9.RELEASE #19496
  • Bump gradle-wrapper from 9.5.1 to 9.6.0 #19360
  • Bump gradle-wrapper from 9.6.0 to 9.6.1 #19393
  • Bump gradle-wrapper from 9.6.1 to 9.7.0 #19516
  • Bump io.spring.nullability:io.spring.nullability.gradle.plugin from 0.0.13 to 0.0.14 #19378
  • Bump org-bouncycastle from 1.84 to 1.85 #19437
  • Bump org-jetbrains-kotlin from 2.4.0 to 2.4.10 #19447

... (truncated)

Commits
  • a825937 Release 7.1.1
  • 74c91f8 Update to Spring Data 2026.0.1
  • b822214 Update to Spring LDAP 4.1.1
  • 39da00f Update to Micrometer 1.17.1
  • 4be80b7 Update to Reactor 2025.0.7
  • 564a677 Update to Spring Framework 7.0.9
  • 2930198 Configure Build for Commercial Repositories
  • 25f9a91 Configure with Commercial Workflows
  • bf8569f Remove OSS CI configuration
  • dcee218 Use jspecify Nullable in DPoPProofReplayValidator
  • Additional commits viewable in compare view

@dependabot dependabot Bot added in: build An issue related to the build type: dependency-upgrade Pull requests that update a dependency file labels Aug 28, 2026
Bumps [org.springframework.security:spring-security-bom](https://github.com/spring-projects/spring-security) from 7.1.0 to 7.1.1.
- [Release notes](https://github.com/spring-projects/spring-security/releases)
- [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc)
- [Commits](spring-projects/spring-security@7.1.0...7.1.1)

---
updated-dependencies:
- dependency-name: org.springframework.security:spring-security-bom
  dependency-version: 7.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/gradle/main/org.springframework.security-spring-security-bom-7.1.1 branch from da3b0bc to ab3b129 Compare August 28, 2026 03:08
@github-actions
github-actions Bot merged commit e31d86c into main Aug 28, 2026
2 of 4 checks passed
@dependabot
dependabot Bot deleted the dependabot/gradle/main/org.springframework.security-spring-security-bom-7.1.1 branch August 28, 2026 03:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

in: build An issue related to the build type: dependency-upgrade Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants