Update Spring Upgrade - Non Major

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
org.springframework.security:spring-security-web (source)	6.5.1 -> 6.5.3
org.springframework.security:spring-security-test (source)	6.5.1 -> 6.5.3
org.springframework.security:spring-security-taglibs (source)	6.5.1 -> 6.5.3
org.springframework.security:spring-security-saml2-service-provider (source)	6.5.1 -> 6.5.3
org.springframework.security:spring-security-rsocket (source)	6.5.1 -> 6.5.3
org.springframework.security:spring-security-oauth2-resource-server (source)	6.5.1 -> 6.5.3
org.springframework.security:spring-security-oauth2-jose (source)	6.5.1 -> 6.5.3
org.springframework.security:spring-security-oauth2-core (source)	6.5.1 -> 6.5.3
org.springframework.security:spring-security-oauth2-client (source)	6.5.1 -> 6.5.3
org.springframework.security:spring-security-messaging (source)	6.5.1 -> 6.5.3
org.springframework.security:spring-security-ldap (source)	6.5.1 -> 6.5.3
org.springframework.security:spring-security-data (source)	6.5.1 -> 6.5.3
org.springframework.security:spring-security-crypto (source)	6.5.1 -> 6.5.3
org.springframework.security:spring-security-config (source)	6.5.1 -> 6.5.3
org.springframework.security:spring-security-cas (source)	6.5.1 -> 6.5.3
org.springframework.security:spring-security-aspects (source)	6.5.1 -> 6.5.3
org.springframework.security:spring-security-acl (source)	6.5.1 -> 6.5.3
org.springframework.security:spring-security-core (source)	6.5.1 -> 6.5.3
org.springframework.boot	3.5.3 -> 3.5.5

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

spring-projects/spring-security (org.springframework.security:spring-security-web)

v6.5.3

Compare Source

⭐ New Features

• Add META-INF/LICENSE.txt to published jars #​17639
• Update Angular documentation links in csrf.adoc #​17653
• Update Shibboleth Repository URL #​17637
• Use 2004-present Copyright #​17634

🪲 Bug Fixes

• Add Missing Navigation in Preparing for 7.0 Guide #​17731
• DPoP authentication throws JwtDecoderFactory ClassNotFoundException #​17249
• OpenSamlAssertingPartyDetails Should Be Serializable #​17727
• Use final values in equals and hashCode #​17621

🔨 Dependency Upgrades

• Bump com.webauthn4j:webauthn4j-core from 0.29.4.RELEASE to 0.29.5.RELEASE #​17739
• Bump com.webauthn4j:webauthn4j-core from 0.29.4.RELEASE to 0.29.5.RELEASE #​17690
• Bump com.webauthn4j:webauthn4j-core from 0.29.4.RELEASE to 0.29.5.RELEASE #​17684
• Bump com.webauthn4j:webauthn4j-core from 0.29.4.RELEASE to 0.29.5.RELEASE #​17661
• Bump io.micrometer:micrometer-observation from 1.14.8 to 1.14.9 #​17615
• Bump io.micrometer:micrometer-observation from 1.14.8 to 1.14.9 #​17599
• Bump io.micrometer:micrometer-observation from 1.14.9 to 1.14.10 #​17737
• Bump io.micrometer:micrometer-observation from 1.14.9 to 1.14.10 #​17701
• Bump io.mockk:mockk from 1.14.4 to 1.14.5 #​17614
• Bump io.spring.develocity.conventions from 0.0.23 to 0.0.24 #​17647
• Bump io.spring.gradle:spring-security-release-plugin from 1.0.10 to 1.0.11 #​17733
• Bump io.spring.gradle:spring-security-release-plugin from 1.0.10 to 1.0.11 #​17711
• Bump io.spring.gradle:spring-security-release-plugin from 1.0.6 to 1.0.10 #​17612
• Bump io.spring.gradle:spring-security-release-plugin from 1.0.6 to 1.0.10 #​17598
• Bump org-eclipse-jetty from 11.0.25 to 11.0.26 #​17742
• Bump org.apache.maven:maven-resolver-provider from 3.9.10 to 3.9.11 #​17613
• Bump org.apache.maven:maven-resolver-provider from 3.9.10 to 3.9.11 #​17595
• Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 #​17760
• Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 #​17692
• Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 #​17683
• Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 #​17671
• Bump org.gretty:gretty from 4.1.6 to 4.1.7 #​17616
• Bump org.gretty:gretty from 4.1.6 to 4.1.7 #​17597
• Bump org.hibernate.orm:hibernate-core from 6.6.20.Final to 6.6.23.Final #​17646
• Bump org.hibernate.orm:hibernate-core from 6.6.23.Final to 6.6.24.Final #​17660
• Bump org.hibernate.orm:hibernate-core from 6.6.23.Final to 6.6.25.Final #​17694
• Bump org.hibernate.orm:hibernate-core from 6.6.23.Final to 6.6.25.Final #​17685
• Bump org.jfrog.buildinfo:build-info-extractor-gradle from 4.34.1 to 4.34.2 #​17650
• Bump org.springframework.data:spring-data-bom from 2024.1.7 to 2024.1.8 #​17645
• Bump org.springframework.ldap:spring-ldap-core from 3.2.13 to 3.2.14 #​17757
• Bump org.springframework:spring-framework-bom from 6.2.8 to 6.2.9 #​17651
• Bump org.springframework:spring-framework-bom from 6.2.8 to 6.2.9 #​17596
• Bump org.springframework:spring-framework-bom from 6.2.9 to 6.2.10 #​17735

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​codingtim

v6.5.2

Compare Source

🪲 Bug Fixes

• <websocket-message-broker> should pick up a bean named csrfChannelInterceptor #​17495
• Add 7.0 Migration Steps for Messaging PathPattern Usage #​17509
• EnableReactiveMethodSecurity should not import Servlet configuration #​17545
• Fix equals and hashCode in PathPatternRequestMatcher to include HTTP method #​17337
• Fix securityContextRepository() initialization in oauth2Login() DSL #​17557
• OAuth2Login DSL should support post-processing AuthenticationProvider implementations #​17176
• Websocket XML config should pick up PathPatternMessageMatcher.Builder #​17508

🔨 Dependency Upgrades

• Bump com.webauthn4j:webauthn4j-core from 0.29.3.RELEASE to 0.29.4.RELEASE #​17444
• Bump io-spring-javaformat from 0.0.46 to 0.0.47 [#​17470][https://github.com/spring-projects/spring-security/pull/17470](https://redirect.github.com/spring-projects/spring-security/pull/17470)0
• Bump io.micrometer:micrometer-observation from 1.14.8 to 1.14.9 [#​17570][https://github.com/spring-projects/spring-security/pull/17570](https://redirect.github.com/spring-projects/spring-security/pull/17570)0
• Bump io.mockk:mockk from 1.14.2 to 1.14.4 #​17467
• Bump io.mockk:mockk from 1.14.4 to 1.14.5 #​17572
• Bump org-apache-maven-resolver from 1.9.23 to 1.9.24 #​17469
• Bump org.apache.maven:maven-resolver-provider from 3.9.10 to 3.9.11 #​17555
• Bump org.hibernate.orm:hibernate-core from 6.6.17.Final to 6.6.20.Final #​17491
• Bump org.hibernate.orm:hibernate-core from 6.6.20.Final to 6.6.22.Final #​17571
• Bump org.springframework.data:spring-data-bom from 2024.1.6 to 2024.1.7 #​17466
• Bump org.springframework.data:spring-data-bom from 2024.1.7 to 2024.1.8 #​17569
• Bump org.springframework.ldap:spring-ldap-core from 3.2.12 to 3.2.13 #​17468
• Bump org.springframework:spring-framework-bom from 6.2.7 to 6.2.8 #​17481
• Bump org.springframework:spring-framework-bom from 6.2.8 to 6.2.9 #​17568

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​fkowal and @​therepanic

---

Configuration

📅 Schedule: Branch creation - "after 7am and before 11am every weekday" in timezone Europe/London, Automerge - "after 8am and before 11am every Tuesday" in timezone Europe/London.

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.