All pull requests

Pull requests

• Bump gradle-wrapper from 8.14.5 to 8.14.6

  in: buildtype: dependency-upgrade
  #19873·dependabot[bot] opened Oct 12, 2026Bot·

  ·

• Support CSP nonce on default login and passkey registration pages

  status: waiting-for-triage
  #19869·ziqin opened Oct 10, 2026Contributor·1 task·

  ·

• Add support for signed and encrypted UserInfo responses

  status: waiting-for-triage
  #19866·sharanggupta opened Oct 9, 2026·

  ·
  1

• Set details on one-time token authentication

  status: waiting-for-triage
  #19865·jsunsoftware opened Oct 9, 2026·

  ·
  1

• Allow repeated headers.contentSecurityPolicy(...) calls to compose

  status: waiting-for-triage
  #19864·ziqin opened Oct 9, 2026Contributor·1 task·

  ·

• Bump @antora/atlas-extension from 1.0.0-alpha.5 to 1.0.0-alpha.6 in /docs

  in: buildtype: dependency-upgradetype: task
  #19862·dependabot[bot] opened Oct 9, 2026Bot·

  ·

• Bump antora from 3.2.0 to 3.2.1 in /docs

  in: buildtype: dependency-upgradetype: task
  #19861·dependabot[bot] opened Oct 9, 2026Bot·

  ·

• Bump antora from 3.2.0 to 3.2.1 in /docs

  in: buildtype: dependency-upgradetype: task
  #19860·dependabot[bot] opened Oct 9, 2026Bot·

  ·

• Bump @antora/atlas-extension from 1.0.0-alpha.5 to 1.0.0-alpha.6 in /docs

  in: buildtype: dependency-upgradetype: task
  #19859·dependabot[bot] opened Oct 9, 2026Bot·

  ·

• Bump spring-io/spring-github-workflows/.github/workflows/spring-merge-dependabot-pr.yml from fa7e8a8f981064983e9468225e052f14af7c67d4 to bf2c65c148fb74b6bd54417222662ef587463765

  in: buildtype: dependency-upgradetype: task
  #19856·dependabot[bot] opened Oct 9, 2026Bot·

  ·

  · 7.2.0-RC1

• Bump spring-io/spring-security-release-tools/.github/workflows/deploy-schema.yml from 1.0.18 to 1.0.20

  in: buildtype: dependency-upgradetype: task
  #19854·dependabot[bot] opened Oct 9, 2026Bot·

  ·

  · 7.2.0-RC1

• Fix stale owner index in MapUserCredentialRepository

  status: waiting-for-triage
  #19848·adityaanikam opened Oct 8, 2026·

  ·
  1

  1

• Fix CSP method chaining in ServerHttpSecurity

  status: waiting-for-triage
  #19846·mathstylish opened Oct 8, 2026·

  ·
  1

  1

• Bump io.spring.develocity.conventions from 0.0.25 to 0.0.27

  in: buildtype: dependency-upgrade
  #19840·dependabot[bot] opened Oct 6, 2026Bot·

  ·

• Bump io.spring.nullability:io.spring.nullability.gradle.plugin from 0.0.16 to 0.0.17

  in: buildtype: dependency-upgrade
  #19838·dependabot[bot] opened Oct 6, 2026Bot·

  ·

  · 7.2.0-RC1

• Fix AssertJ assertions that never assert

  status: waiting-for-triage
  #19836·timtebeek opened Oct 5, 2026Contributor·

  ·

• Users sql

  status: waiting-for-triage
  #19835·joshlong opened Oct 5, 2026Member·

  ·
  5

• Bump io.spring.gradle:spring-security-release-plugin from 1.0.17 to 1.0.20

  in: buildtype: dependency-upgrade
  #19833·dependabot[bot] opened Oct 5, 2026Bot·

  ·

• Bump io.spring.gradle:spring-security-project-plugin from 1.0.19 to 1.0.20

  in: buildtype: dependency-upgrade
  #19832·dependabot[bot] opened Oct 5, 2026Bot·

  ·

• Bump org.seleniumhq.selenium:selenium-java from 4.48.0 to 4.50.0

  in: buildtype: dependency-upgrade
  #19830·dependabot[bot] opened Oct 5, 2026Bot·

  ·

  · 7.2.0-RC1

• fix issue #19730 to clarify filter ordering

  status: waiting-for-triage
  #19827·lamat-un-noor opened Oct 4, 2026·

  ·

• Fix bean name collision between Global and Reactive Method Security

  status: waiting-for-triage
  #19826·anupamojha-eng opened Oct 4, 2026·

  ·
  1

• Add servlet debugging guide to reference

  status: waiting-for-triage
  #19825·hippi345 opened Oct 3, 2026·

  ·
  1

• Configure external Javadoc links for aggregated API docs

  status: waiting-for-triage
  #19824·hippi345 opened Oct 3, 2026·

  ·
  1

• Preserve SAML POST destination query parameters

  status: waiting-for-triage
  #19823·goutamadwant opened Oct 3, 2026·

  ·
  1