20079 Commits

Author SHA1 Message Date
Robert Winch
91aee30906
Null safety via JSpecify spring-security-kerberos-client
Closes gh-18552
2026-01-21 17:46:40 -06:00
Robert Winch
8247d18122
Null safety via JSpecify spring-security-kerberos-web
Closes gh-18550
2026-01-21 17:39:38 -06:00
Robert Winch
f942ead2eb
Null safety via JSpecify spring-security-kerberos-core
Closes gh-18549
2026-01-21 17:29:59 -06:00
Michael Lück
b970746a03 Apply plugin javadoc-warnings-error - no javadoc issues found
Relates to gh-18457

Signed-off-by: Michael Lück <git@lueckonline.net>
2026-01-21 16:56:36 -06:00
Michael Lück
131d3741b2 Apply plugin javadoc-warnings-error - no javadoc issues found
Relates to gh-18458

Signed-off-by: Michael Lück <git@lueckonline.net>
2026-01-21 16:54:53 -06:00
Junmo
e7aa15cb81 Remove javadoc warnings for spring-security-data
- Add javadoc-warnings-error plugin to spring-security-data.gradle
- Add missing @param tag in setSecurityContextHolderStrategy method

Closes gh-18451

Signed-off-by: Junmo <hongjm1022@gmail.com>
2026-01-21 16:45:45 -06:00
dev.paramjot
af73f85f66 Fix formatting in HttpSecurity.java documentation
Signed-off-by: dev.paramjot <50148441+ParamjotSingh5@users.noreply.github.com>
2026-01-21 16:43:03 -06:00
Jeongwon Been
39544e1b9e Fail build on Javadoc warnings in crypto module
Apply the javadoc-warnings-error plugin to spring-security-crypto to
ensure that new Javadoc warnings fail the build and prevent regressions.

Closes gh-18450
Signed-off-by: Jeongwon Been <congcoding@gmail.com>
2026-01-21 16:41:34 -06:00
Jeongwon Been
d07d3a13d1 Fix Javadoc warnings in Argon2PasswordEncoder
Wrap bit-shift expressions in {@code ...} so that Javadoc does not parse
'<' as HTML and emit invalid input warnings.

Signed-off-by: Jeongwon Been <congcoding@gmail.com>
2026-01-21 16:41:34 -06:00
Michael Lück
bf6bed01af fail build on javadoc warnings.
Found no existing warnings by running ./gradlew --no-build-cache clean :spring-security-cas:javadoc

Closes gh-18447

Signed-off-by: Michael Lück <git@lueckonline.net>
2026-01-21 16:39:08 -06:00
Jay Choi
74c454a5c7 Remove javadoc warnings for spring-security-kerberos-web
Closes gh-18456

Signed-off-by: Jay Choi <jayyoungchoi22@gmail.com>
2026-01-21 16:38:49 -06:00
Joe Kuhel
2206815ad9 Fix javadoc warning in spring-security-access
Signed-off-by: Joe Kuhel <4983938+jkuhel@users.noreply.github.com>
2026-01-21 16:34:58 -06:00
Jay Choi
6695505676 Remove javadoc warnings for spring-security-kerberos-test
Closes gh-18455

Signed-off-by: Jay Choi <jayyoungchoi22@gmail.com>
2026-01-21 16:19:41 -06:00
Jay Choi
6b4649ad3e Remove javadoc warnings for spring-security-kerberos-core
Closes gh-18454

Signed-off-by: Jay Choi <jayyoungchoi22@gmail.com>
2026-01-21 16:18:48 -06:00
Jay Choi
7ace59c411 Remove javadoc warnings for spring-security-kerberos-client
Closes gh-18453

Signed-off-by: Jay Choi <jayyoungchoi22@gmail.com>
2026-01-21 16:17:08 -06:00
Robert Winch
1cfb3033e9 Run ./gradlew foramt
Fixes formatting for gh-18516
2026-01-21 16:08:04 -06:00
chanjin-lee
021f84b2df Core: Fix Javadoc invalid references and improve clarity
- Update package-info to reference AuthorizationManager instead of AccessDecisionManager
- Improve RoleHierarchyUtils documentation with fromHierarchy() and builder-based alternatives
- Refine AuthenticationTrustResolver return description by removing redundant comma and symbol

Signed-off-by: chanjin-lee <chanjin23@naver.com>
2026-01-21 16:08:04 -06:00
chanjin-lee
e5b934d1a5 Core: Remove javadoc warnings
Closes gh-18449

Signed-off-by: chanjin-lee <chanjin23@naver.com>
2026-01-21 16:08:04 -06:00
alpin87
e3f1690396 feat: Javadoc warnings as errors in spring-security-acl
Signed-off-by: alpin87 <qortmdals94@naver.com>
2026-01-21 16:00:01 -06:00
alpin87
1fb335c3b1 Fix: Javadoc warning in AclPermissionEvaluator
Signed-off-by: alpin87 <qortmdals94@naver.com>
2026-01-21 16:00:01 -06:00
zoo-code
cd2be2fc1c Enable javadoc-warnings-error for oauth2-resource-server
Closes gh-18463

Signed-off-by: zoo-code <kyj20908@naver.com>
2026-01-21 15:49:55 -06:00
Robert Winch
feb3e9c3cc
Bump com.fasterxml.jackson:jackson-bom from 2.20.1 to 2.20.2 2026-01-21 15:34:02 -06:00
Robert Winch
95d31a3754
Bump io.spring.develocity.conventions from 0.0.24 to 0.0.25 2026-01-21 15:33:58 -06:00
Robert Winch
ef7bb7d334
Merge branch '7.0.x' 2026-01-21 15:33:42 -06:00
Robert Winch
f7f5165321
Merge branch '6.5.x' into 7.0.x 2026-01-21 15:33:03 -06:00
Robert Winch
27f91e03f9
Bump org.hibernate.orm:hibernate-core from 6.6.40.Final to 6.6.41.Final 2026-01-21 15:32:25 -06:00
Robert Winch
b7230c367e
Bump ch.qos.logback:logback-classic from 1.5.24 to 1.5.25 2026-01-21 15:32:20 -06:00
Robert Winch
cd72cb1f2e
Bump io.spring.develocity.conventions from 0.0.24 to 0.0.25 2026-01-21 15:32:16 -06:00
Robert Winch
a865671526
Merge branch '6.4.x' into 6.5.x 2026-01-21 15:31:53 -06:00
Robert Winch
4f52b71be8
Bump org.hibernate.orm:hibernate-core from 6.6.40.Final to 6.6.41.Final 2026-01-21 15:31:04 -06:00
Robert Winch
398430f672
Bump ch.qos.logback:logback-classic from 1.5.24 to 1.5.25 2026-01-21 15:30:50 -06:00
Robert Winch
9f8ac34c3b Remove @NullUnmarked
Closes gh-18491
2026-01-21 14:11:25 -06:00
Soumik Sarker
3f66d8b770 Fix format
Signed-off-by: Soumik Sarker <ronodhirsoumik@gmail.com>
2026-01-21 14:11:25 -06:00
Soumik Sarker
ea26031a4d Fix format
Signed-off-by: Soumik Sarker <ronodhirsoumik@gmail.com>
2026-01-21 14:11:25 -06:00
Soumik Sarker
b1d98491cf Removed nullUnmarked annotation from observability web classes
Fixes #17815

Signed-off-by: Soumik Sarker <ronodhirsoumik@gmail.com>
2026-01-21 14:11:25 -06:00
dependabot[bot]
03b3b852f5
Bump io.spring.develocity.conventions from 0.0.24 to 0.0.25
Bumps [io.spring.develocity.conventions](https://github.com/spring-io/develocity-conventions) from 0.0.24 to 0.0.25.
- [Release notes](https://github.com/spring-io/develocity-conventions/releases)
- [Commits](https://github.com/spring-io/develocity-conventions/compare/v0.0.24...v0.0.25)

---
updated-dependencies:
- dependency-name: io.spring.develocity.conventions
  dependency-version: 0.0.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-01-21 03:08:52 +00:00
dependabot[bot]
e54bb9f3f5
Bump io.spring.develocity.conventions from 0.0.24 to 0.0.25
Bumps [io.spring.develocity.conventions](https://github.com/spring-io/develocity-conventions) from 0.0.24 to 0.0.25.
- [Release notes](https://github.com/spring-io/develocity-conventions/releases)
- [Commits](https://github.com/spring-io/develocity-conventions/compare/v0.0.24...v0.0.25)

---
updated-dependencies:
- dependency-name: io.spring.develocity.conventions
  dependency-version: 0.0.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-01-21 03:06:52 +00:00
dependabot[bot]
c64747ce5f
Bump io.spring.develocity.conventions from 0.0.24 to 0.0.25
Bumps [io.spring.develocity.conventions](https://github.com/spring-io/develocity-conventions) from 0.0.24 to 0.0.25.
- [Release notes](https://github.com/spring-io/develocity-conventions/releases)
- [Commits](https://github.com/spring-io/develocity-conventions/compare/v0.0.24...v0.0.25)

---
updated-dependencies:
- dependency-name: io.spring.develocity.conventions
  dependency-version: 0.0.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-01-21 03:05:22 +00:00
dependabot[bot]
cd4ad01742
Bump com.fasterxml.jackson:jackson-bom from 2.20.1 to 2.20.2
Bumps [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) from 2.20.1 to 2.20.2.
- [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.20.1...jackson-bom-2.20.2)

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson:jackson-bom
  dependency-version: 2.20.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-01-20 03:05:21 +00:00
github-actions[bot]
0a035caa57 Next development version 2026-01-19 15:49:35 +00:00
github-actions[bot]
ab8b139278 Release 7.1.0-M1 7.1.0-M1 2026-01-19 15:23:49 +00:00
dependabot[bot]
e19c34771b Bump ch.qos.logback:logback-classic from 1.5.24 to 1.5.25
Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) from 1.5.24 to 1.5.25.
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.24...v_1.5.25)

---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.5.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-01-19 10:06:16 -05:00
dependabot[bot]
318b4a785c Bump org.springframework.data:spring-data-bom from 2025.1.1 to 2025.1.2
Bumps [org.springframework.data:spring-data-bom](https://github.com/spring-projects/spring-data-bom) from 2025.1.1 to 2025.1.2.
- [Release notes](https://github.com/spring-projects/spring-data-bom/releases)
- [Commits](https://github.com/spring-projects/spring-data-bom/compare/2025.1.1...2025.1.2)

---
updated-dependencies:
- dependency-name: org.springframework.data:spring-data-bom
  dependency-version: 2025.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-01-19 10:03:41 -05:00
dependabot[bot]
30be114a5e
Bump ch.qos.logback:logback-classic from 1.5.24 to 1.5.25
Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) from 1.5.24 to 1.5.25.
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.24...v_1.5.25)

---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.5.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-01-19 03:22:36 +00:00
dependabot[bot]
75121bf455
Bump org.hibernate.orm:hibernate-core from 6.6.40.Final to 6.6.41.Final
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm) from 6.6.40.Final to 6.6.41.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases)
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/6.6.41/changelog.txt)
- [Commits](https://github.com/hibernate/hibernate-orm/compare/6.6.40...6.6.41)

---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
  dependency-version: 6.6.41.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-01-19 03:22:23 +00:00
dependabot[bot]
aa21e62fb8
Bump ch.qos.logback:logback-classic from 1.5.24 to 1.5.25
Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) from 1.5.24 to 1.5.25.
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.24...v_1.5.25)

---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.5.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-01-19 03:21:35 +00:00
dependabot[bot]
b58187082a
Bump org.hibernate.orm:hibernate-core from 6.6.40.Final to 6.6.41.Final
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm) from 6.6.40.Final to 6.6.41.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases)
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/6.6.41/changelog.txt)
- [Commits](https://github.com/hibernate/hibernate-orm/compare/6.6.40...6.6.41)

---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
  dependency-version: 6.6.41.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-01-19 03:21:26 +00:00
Robert Winch
c73696f129
doclint -missing
Temporarily using -missing to allow build to pass
2026-01-16 21:55:49 -06:00
Robert Winch
35d103843b
Externalize java-toolchain configuration
We should not use subprojects to perform configuration becaause it
does not allow for lazy loading and it can cause ordering problems.
In this case, the toolchain was not being used but instead it was
using the JAVA_HOME.

By splitting the configuration into a plugin and applying it to each
project it fixes the toolchain configuration
2026-01-16 16:54:00 -06:00
Robert Winch
8746ef746c
Bump io.projectreactor:reactor-bom from 2025.0.1 to 2025.0.2 2026-01-16 15:19:56 -06:00