From 7b57a4a3bbf0649b5416707f940fd740c94dc377 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]" <github-actions[bot]@users.noreply.github.com>
Date: Mon, 20 Apr 2026 17:54:57 +0000
Subject: [PATCH 1/4] Release 7.0.5

---
 gradle.properties | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/gradle.properties b/gradle.properties
index c3ba8ffc24..d5608cec83 100644
--- a/gradle.properties
+++ b/gradle.properties
@@ -14,7 +14,7 @@
 # limitations under the License.
 #
 springBootVersion=4.0.0-SNAPSHOT
-version=7.0.5-SNAPSHOT
+version=7.0.5
 samplesBranch=main
 org.gradle.jvmargs=-Xmx3g -XX:+HeapDumpOnOutOfMemoryError
 org.gradle.parallel=true

From aed95aa2b1e7d35d2a7d672ee9d2d8333a38f5e8 Mon Sep 17 00:00:00 2001
From: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
Date: Mon, 20 Apr 2026 13:45:45 -0600
Subject: [PATCH 2/4] Fix Formatting

Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
---
 .../OAuth2ClientRegistrationAuthenticationValidator.java      | 4 ++--
 .../OidcClientRegistrationAuthenticationValidator.java        | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/oauth2/oauth2-authorization-server/src/main/java/org/springframework/security/oauth2/server/authorization/authentication/OAuth2ClientRegistrationAuthenticationValidator.java b/oauth2/oauth2-authorization-server/src/main/java/org/springframework/security/oauth2/server/authorization/authentication/OAuth2ClientRegistrationAuthenticationValidator.java
index 2fb62f469a..d053cb196d 100644
--- a/oauth2/oauth2-authorization-server/src/main/java/org/springframework/security/oauth2/server/authorization/authentication/OAuth2ClientRegistrationAuthenticationValidator.java
+++ b/oauth2/oauth2-authorization-server/src/main/java/org/springframework/security/oauth2/server/authorization/authentication/OAuth2ClientRegistrationAuthenticationValidator.java
@@ -50,9 +50,9 @@ import org.springframework.util.CollectionUtils;
  * <p>
  * Each validated field is backed by two public constants:
  * <ul>
- * <li>{@code DEFAULT_*_VALIDATOR} — strict validation that rejects unsafe values. This is
+ * <li>{@code DEFAULT_*_VALIDATOR} -- strict validation that rejects unsafe values. This is
  * the default behavior and may reject input that was previously accepted.</li>
- * <li>{@code SIMPLE_*_VALIDATOR} — lenient validation preserving the behavior from prior
+ * <li>{@code SIMPLE_*_VALIDATOR} -- lenient validation preserving the behavior from prior
  * releases. Use only when strictly required for backward compatibility and with full
  * understanding that it may accept values that enable attacks against the authorization
  * server.</li>
diff --git a/oauth2/oauth2-authorization-server/src/main/java/org/springframework/security/oauth2/server/authorization/oidc/authentication/OidcClientRegistrationAuthenticationValidator.java b/oauth2/oauth2-authorization-server/src/main/java/org/springframework/security/oauth2/server/authorization/oidc/authentication/OidcClientRegistrationAuthenticationValidator.java
index b803481aea..77e9738f2b 100644
--- a/oauth2/oauth2-authorization-server/src/main/java/org/springframework/security/oauth2/server/authorization/oidc/authentication/OidcClientRegistrationAuthenticationValidator.java
+++ b/oauth2/oauth2-authorization-server/src/main/java/org/springframework/security/oauth2/server/authorization/oidc/authentication/OidcClientRegistrationAuthenticationValidator.java
@@ -51,9 +51,9 @@ import org.springframework.util.CollectionUtils;
  * <p>
  * Each validated field is backed by two public constants:
  * <ul>
- * <li>{@code DEFAULT_*_VALIDATOR} — strict validation that rejects unsafe values. This is
+ * <li>{@code DEFAULT_*_VALIDATOR} -- strict validation that rejects unsafe values. This is
  * the default behavior and may reject input that was previously accepted.</li>
- * <li>{@code SIMPLE_*_VALIDATOR} — lenient validation preserving the behavior from prior
+ * <li>{@code SIMPLE_*_VALIDATOR} -- lenient validation preserving the behavior from prior
  * releases. Use only when strictly required for backward compatibility and with full
  * understanding that it may accept values that enable attacks against the authorization
  * server.</li>

From 53bc6a77963209bb2a5f3efdd855b1f4a8051cc3 Mon Sep 17 00:00:00 2001
From: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
Date: Mon, 20 Apr 2026 13:52:41 -0600
Subject: [PATCH 3/4] Fix Formatting

Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
---
 .../OAuth2ClientRegistrationAuthenticationValidator.java      | 4 ++--
 .../OidcClientRegistrationAuthenticationValidator.java        | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/oauth2/oauth2-authorization-server/src/main/java/org/springframework/security/oauth2/server/authorization/authentication/OAuth2ClientRegistrationAuthenticationValidator.java b/oauth2/oauth2-authorization-server/src/main/java/org/springframework/security/oauth2/server/authorization/authentication/OAuth2ClientRegistrationAuthenticationValidator.java
index d053cb196d..d17213d3de 100644
--- a/oauth2/oauth2-authorization-server/src/main/java/org/springframework/security/oauth2/server/authorization/authentication/OAuth2ClientRegistrationAuthenticationValidator.java
+++ b/oauth2/oauth2-authorization-server/src/main/java/org/springframework/security/oauth2/server/authorization/authentication/OAuth2ClientRegistrationAuthenticationValidator.java
@@ -50,8 +50,8 @@ import org.springframework.util.CollectionUtils;
  * <p>
  * Each validated field is backed by two public constants:
  * <ul>
- * <li>{@code DEFAULT_*_VALIDATOR} -- strict validation that rejects unsafe values. This is
- * the default behavior and may reject input that was previously accepted.</li>
+ * <li>{@code DEFAULT_*_VALIDATOR} -- strict validation that rejects unsafe values. This
+ * is the default behavior and may reject input that was previously accepted.</li>
  * <li>{@code SIMPLE_*_VALIDATOR} -- lenient validation preserving the behavior from prior
  * releases. Use only when strictly required for backward compatibility and with full
  * understanding that it may accept values that enable attacks against the authorization
diff --git a/oauth2/oauth2-authorization-server/src/main/java/org/springframework/security/oauth2/server/authorization/oidc/authentication/OidcClientRegistrationAuthenticationValidator.java b/oauth2/oauth2-authorization-server/src/main/java/org/springframework/security/oauth2/server/authorization/oidc/authentication/OidcClientRegistrationAuthenticationValidator.java
index 77e9738f2b..4214446362 100644
--- a/oauth2/oauth2-authorization-server/src/main/java/org/springframework/security/oauth2/server/authorization/oidc/authentication/OidcClientRegistrationAuthenticationValidator.java
+++ b/oauth2/oauth2-authorization-server/src/main/java/org/springframework/security/oauth2/server/authorization/oidc/authentication/OidcClientRegistrationAuthenticationValidator.java
@@ -51,8 +51,8 @@ import org.springframework.util.CollectionUtils;
  * <p>
  * Each validated field is backed by two public constants:
  * <ul>
- * <li>{@code DEFAULT_*_VALIDATOR} -- strict validation that rejects unsafe values. This is
- * the default behavior and may reject input that was previously accepted.</li>
+ * <li>{@code DEFAULT_*_VALIDATOR} -- strict validation that rejects unsafe values. This
+ * is the default behavior and may reject input that was previously accepted.</li>
  * <li>{@code SIMPLE_*_VALIDATOR} -- lenient validation preserving the behavior from prior
  * releases. Use only when strictly required for backward compatibility and with full
  * understanding that it may accept values that enable attacks against the authorization

From 8720a282ce0f98ffed96e9f045ba3fe226209aec Mon Sep 17 00:00:00 2001
From: "github-actions[bot]" <github-actions[bot]@users.noreply.github.com>
Date: Mon, 20 Apr 2026 20:32:11 +0000
Subject: [PATCH 4/4] Next development version

---
 gradle.properties | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/gradle.properties b/gradle.properties
index d5608cec83..7ea47e6712 100644
--- a/gradle.properties
+++ b/gradle.properties
@@ -14,7 +14,7 @@
 # limitations under the License.
 #
 springBootVersion=4.0.0-SNAPSHOT
-version=7.0.5
+version=7.0.6-SNAPSHOT
 samplesBranch=main
 org.gradle.jvmargs=-Xmx3g -XX:+HeapDumpOnOutOfMemoryError
 org.gradle.parallel=true