6ad567f0fa
Polish gh-11367
2022-07-28 15:11:05 -05:00
8c634f8a9d
Set permissions for GitHub actions
...
Restrict the GitHub token permissions only to the required ones; this
way, even if the attackers will succeed in compromising your workflow,
they won’t be able to do much.
- Included permissions for the action.
https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs
Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests
https://securitylab.github.com/research/github-actions-preventing-pwn-requests/
Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
Closes gh-11367
2022-07-28 15:11:04 -05:00
a996dfc55b
Add Deprecated annotation to WebSecurity#securityInterceptor
...
Closes gh-11634
2022-07-27 14:38:50 -03:00
d66ad22652
Add Deprecated annotation to WebSecurity#securityInterceptor
...
Closes gh-11634
2022-07-27 14:32:44 -03:00
7a860e1568
Fix Snapshot Sources/Javadoc
...
This commit merges a workaround to an issue in JFrog's Gradle plugin
which causes SNAPSHOT javadoc and sources to become out of sync and thus
prevents users from being able to download either.
Closes gh-10602
2022-07-26 16:26:31 -05:00
ad9e737bf2
Fix Snapshot Sources/Javadoc
...
This commit merges a workaround to an issue in JFrog's Gradle plugin
which causes SNAPSHOT javadoc and sources to become out of sync and thus
prevents users from being able to download either.
Closes gh-10602
2022-07-26 16:25:52 -05:00
0d3c3c676d
"Well-Know" should be "Well-Known"
2022-07-26 15:45:27 -05:00
06aa3362dd
"Well-Know" should be "Well-Known"
2022-07-26 15:44:41 -05:00
0f64d4c091
Add Kotlin example for WebTestClient setup docs
...
Closes gh-9998
2022-07-22 14:04:16 -03:00
7c7751635d
Add Kotlin example for WebTestClient setup docs
...
Closes gh-9998
2022-07-22 13:56:41 -03:00
56a6133b20
Merge Same-named Attribute Elements
...
Closes gh-11042
2022-07-20 18:43:25 -06:00
bced37f6a7
Merge Same-named Attribute Elements
...
Closes gh-11042
2022-07-20 18:41:55 -06:00
aaf20e7b61
Build only on branches
...
Issue gh-11480
2022-07-18 11:47:25 -05:00
fbc5839890
Build only on branches
...
Issue gh-11480
2022-07-18 11:46:47 -05:00
148756076c
Backport release automation and github actions
...
Closes gh-11501
2022-07-13 15:51:25 -05:00
6f321a27c4
Fix inconsistency in hasProperty check
2022-07-13 15:51:25 -05:00
539443b4be
Add GitHubReleasePlugin with createGitHubRelease task
...
Issue gh-10456
Issue gh-10457
2022-07-13 15:51:24 -05:00
d76c321f8c
Backport release automation and github actions
...
Closes gh-11500
2022-07-13 15:17:03 -05:00
b0b4612609
Correct input validation for 31 rounds
...
Closes gh-11470
2022-07-11 14:52:20 -06:00
28424f8ae5
Correct input validation for 31 rounds
...
Closes gh-11470
2022-07-11 14:51:51 -06:00
37d856dca4
Correct input validation for 31 rounds
...
Closes gh-11470
2022-07-11 14:38:04 -06:00
a7d21f1b34
Document sagan Release tasks require read:org scope
...
Closes gh-11423
2022-06-21 14:49:38 -05:00
c57853e5fa
Document sagan Release tasks require read:org scope
...
Closes gh-11423
2022-06-21 14:49:06 -05:00
d3a024786b
Next Development Version
2022-06-20 15:05:30 -04:00
fa4c5449e7
Release 5.6.6
2022-06-20 14:50:24 -04:00
2a3845a7ed
Update org.opensaml:opensaml-core4 to 4.1.1
...
Closes gh-11420
2022-06-20 14:50:24 -04:00
ff96a7b5ad
Update spring-ldap-core to 2.3.8.RELEASE
...
Closes gh-11419
2022-06-20 14:41:13 -04:00
c37ff42234
Update org.springframework.data to 2021.1.5
...
Closes gh-11418
2022-06-20 14:41:10 -04:00
0a00d84838
Update org.springframework to 5.3.21
...
Closes gh-11417
2022-06-20 14:41:08 -04:00
96c6751a1d
Update hibernate-entitymanager to 5.6.9.Final
...
Closes gh-11416
2022-06-20 14:41:05 -04:00
8ee9c32788
Update io.projectreactor to 2020.0.20
...
Closes gh-11414
2022-06-20 14:41:00 -04:00
7a5fb9eaf7
Update jackson-bom to 2.13.3
...
Closes gh-11411
2022-06-20 14:40:53 -04:00
8cbb972cef
Add dependency update exclusion for spring-javaformat-checkstyle
2022-06-20 14:27:40 -04:00
6f275deb55
Next Development Version
2022-06-20 12:37:13 -04:00
c40f65f5a2
Release 5.7.2
2022-06-20 12:17:25 -04:00
bca43af9bb
Update org.opensaml:opensaml-core4 to 4.1.1
...
Closes gh-11410
2022-06-20 12:08:07 -04:00
d9b8882fa8
Update spring-ldap-core to 2.4.1
...
Closes gh-11409
2022-06-20 11:52:48 -04:00
7358c65a8c
Update org.springframework.data to 2021.2.1
...
Closes gh-11408
2022-06-20 11:52:44 -04:00
e02d5f2dd7
Update org.springframework to 5.3.21
...
Closes gh-11407
2022-06-20 11:52:41 -04:00
91a965c6db
Update org.jetbrains.kotlinx to 1.6.3
...
Closes gh-11406
2022-06-20 11:52:37 -04:00
0e88064942
Update hibernate-entitymanager to 5.6.9.Final
...
Closes gh-11405
2022-06-20 11:52:35 -04:00
641b9ef83b
Update io.projectreactor to 2020.0.20
...
Closes gh-11403
2022-06-20 11:52:30 -04:00
6f43d234dc
Update aspectj-plugin to 6.4.3.1
...
Closes gh-11402
2022-06-20 11:52:27 -04:00
d7819ea4da
Update jackson-bom to 2.13.3
...
Closes gh-11399
2022-06-20 11:52:17 -04:00
37ee70ae86
Add dependency update exclusion for spring-javaformat-checkstyle
2022-06-20 11:16:37 -04:00
8ea37360ac
Add dependency exclusion rules
2022-06-20 10:03:29 -04:00
29db051f7a
Cache SecurityContextRepository.loadContext(HttpServletRequest) Result
...
Closes gh-11390
2022-06-17 14:52:35 -05:00
539a11d0a4
Encode postLogoutRedirectUri query params
...
Closes gh-11379
2022-06-16 16:13:42 -06:00
f035c30edb
Encode postLogoutRedirectUri query params
...
Closes gh-11379
2022-06-16 16:12:13 -06:00
d22277ce36
Add missing KeyInfo
...
Closes gh-11354
2022-06-09 13:16:50 -06:00
Steve Riesenberg
naveen
Marcus Da Coregio
Rob Winch
Desmond Silveira
Yuriy Savchenko
Josh Cummings
Joe Grandja