Repository navigation

All pull requests

Labels (57)Milestones (9)New pull request

Bump spring-io/spring-security-release-tools/.github/actions/send-notification from 1.0.18 to 1.0.20
#19920dependabot[bot] opened Oct 16, 2026Bot
Bump spring-io/spring-release-actions/schedule-milestone from 0.0.6 to 0.0.7
#19919dependabot[bot] opened Oct 16, 2026Bot
Bump spring-io/spring-security-release-tools/.github/workflows/deploy-artifacts.yml from 1.0.17 to 1.0.20
#19918dependabot[bot] opened Oct 16, 2026Bot
Bump spring-io/spring-security-release-tools/.github/workflows/release-announcements-publish.yml from 1.0.18 to 1.0.20
#19917dependabot[bot] opened Oct 16, 2026Bot
Bump spring-io/spring-security-release-tools/.github/workflows/test.yml from 1.0.17 to 1.0.20
#19916dependabot[bot] opened Oct 16, 2026Bot
Bump actions/upload-artifact from 7.0.1 to 7.0.2
#19915dependabot[bot] opened Oct 16, 2026Bot
Bump spring-io/spring-release-actions/get-todays-release-version from 0.0.6 to 0.0.7
#19914dependabot[bot] opened Oct 16, 2026Bot
Bump spring-io/spring-security-release-tools/.github/workflows/test.yml from 1.0.18 to 1.0.20
#19913dependabot[bot] opened Oct 16, 2026Bot
Bump actions/setup-java from 6.0.0 to 6.0.1
#19912dependabot[bot] opened Oct 16, 2026Bot
Bump spring-io/spring-security-release-tools/.github/workflows/release-announcements-publish.yml from 1.0.18 to 1.0.20
#19911dependabot[bot] opened Oct 16, 2026Bot
Bump spring-io/spring-github-workflows/.github/workflows/spring-merge-dependabot-pr.yml from bf2c65c148fb74b6bd54417222662ef587463765 to 0c67c5e7c6641a18e76c520114ed0251303e77ed
#19909dependabot[bot] opened Oct 16, 2026Bot 7.2.0-RC1
Bump spring-io/spring-security-release-tools/.github/actions/send-notification from 1.0.19 to 1.0.20
#19908dependabot[bot] opened Oct 16, 2026Bot 7.2.0-RC1
Reject malformed PKCE code_challenge values
#19890L00PLeGeNd opened Oct 15, 20261 of 2 tasks
Bump io.spring.develocity.conventions from 0.0.26 to 0.0.27
#19889dependabot[bot] opened Oct 15, 2026Bot
Bump org.hibernate.orm:hibernate-core from 7.4.10.Final to 7.4.13.Final
#19888dependabot[bot] opened Oct 15, 2026Bot
Bump org.slf4j:slf4j-api from 2.0.19 to 2.0.20
#19887dependabot[bot] opened Oct 15, 2026Bot
Bump org-jetbrains-kotlin from 2.4.20 to 2.4.21
#19886dependabot[bot] opened Oct 15, 2026Bot
Bump ch.qos.logback:logback-classic from 1.6.3 to 1.6.5
#19885dependabot[bot] opened Oct 15, 2026Bot
Allow configurable DPoP Proof verifier for Authorization Server
#19882timpeeters opened Oct 14, 2026
Enable DPoP for Authorization Server protected endpoints
#19877timpeeters opened Oct 13, 2026
Support omitting the resource_metadata parameter
#19875ngocnhan-tran1996 opened Oct 13, 2026Contributor
Support CSP nonce on default login and passkey registration pages
#19869ziqin opened Oct 10, 2026Contributor1 task done
2
Add support for signed and encrypted UserInfo responses
#19866sharanggupta opened Oct 9, 2026
Set details on one-time token authentication
#19865jsunsoftware opened Oct 9, 2026
Allow repeated headers.contentSecurityPolicy(...) calls to compose
#19864ziqin opened Oct 9, 2026Contributor1 task done