All pull requests

Pull requests

• Bump github/codeql-action/analyze from 4.38.3 to 4.39.1

  in: buildtype: dependency-upgradetype: task
  #20008·dependabot[bot] opened Oct 30, 2026Bot·

  ·

• Bump spring-io/spring-security-release-tools/.github/workflows/test.yml from 1.0.20 to 1.1.1

  in: buildtype: dependency-upgradetype: task
  #20007·dependabot[bot] opened Oct 30, 2026Bot·

  ·

• Bump spring-io/spring-security-release-tools/.github/actions/send-notification from 1.0.20 to 1.1.1

  in: buildtype: dependency-upgradetype: task
  #20005·dependabot[bot] opened Oct 30, 2026Bot·

  ·

• Bump spring-io/spring-security-release-tools/.github/workflows/ci-test.yml from 1.1.0 to 1.1.1

  in: buildtype: dependency-upgradetype: task
  #20004·dependabot[bot] opened Oct 30, 2026Bot·

  ·

• Bump actions/setup-java from 6.0.1 to 6.1.0

  in: buildtype: dependency-upgradetype: task
  #20003·dependabot[bot] opened Oct 30, 2026Bot·

  ·

• Support for Delegating Security Context Executors and for Task Decorator

  status: waiting-for-triage
  #20002·eager-zh opened Oct 29, 2026·

  ·

• Add XML guidance to authorizeRequests warning

  status: waiting-for-triage
  #20001·ArnojRajiv opened Oct 29, 2026·

  ·

• withRoles leaks its role filter into withAuthorities

  status: waiting-for-triage
  #20000·lim950808 opened Oct 29, 2026·

  ·

• Tolerate duplicate authorities in AuthorityAuthorizationManager

  status: waiting-for-triage
  #19999·lim950808 opened Oct 29, 2026·

  ·

• Pass servlet request to authorization failure handler

  status: waiting-for-triage
  #19998·beyondwin opened Oct 28, 2026·

  ·

• Update Antora UI Spring to v0.4.26

  status: waiting-for-triage
  #19997·github-actions[bot] opened Oct 27, 2026Bot·

  ·

• Expose OAuth 2.0 endpoint request parameters

  status: waiting-for-triage
  #19993·yeomin4242 opened Oct 26, 2026·

  ·
  1

• Bump org.springframework:spring-framework-bom from 7.0.9 to 7.0.10

  in: buildtype: dependency-upgrade
  #19992·dependabot[bot] opened Oct 26, 2026Bot·

  ·

• Bump org.springframework.data:spring-data-bom from 2025.1.7 to 2025.1.8

  in: buildtype: dependency-upgrade
  #19991·dependabot[bot] opened Oct 26, 2026Bot·

  ·

• Bump io.spring.security.settings from 1.0.21 to 1.0.22

  in: buildtype: dependency-upgrade
  #19990·dependabot[bot] opened Oct 26, 2026Bot·

  ·

• Bump io-spring-security from 1.1.0 to 1.1.1

  in: buildtype: dependency-upgrade
  #19989·dependabot[bot] opened Oct 26, 2026Bot·

  ·

• Bump io.projectreactor:reactor-bom from 2025.0.7 to 2025.0.8

  in: buildtype: dependency-upgrade
  #19988·dependabot[bot] opened Oct 26, 2026Bot·

  ·

• Bump serialize-javascript from 7.1.2 to 7.1.4 in /javascript

  dependenciesjavascript
  #19987·dependabot[bot] opened Oct 25, 2026Bot·

  ·

• Do not re-cache users already in the cache

  status: waiting-for-triage
  #19986·matheuslealpa opened Oct 25, 2026·

  ·
  1

• Render Passkey Pages Without a CsrfToken

  status: waiting-for-triage
  #19985·codeconsole opened Oct 23, 2026Contributor·

  ·

• feat(oauth2): add background initialization for NimbusJwtDecoder

  status: waiting-for-triage
  #19983·somiljain2006 opened Oct 23, 2026·

  ·
  1

• Align request-matcher enum in 7.1 and 7.2 schemas with PathPatternRequestMatcher

  status: waiting-for-triage
  #19982·suryakant-source opened Oct 23, 2026·

  ·
  1

• Bump spring-io/spring-release-actions/compute-next-version from 0.0.7 to 0.0.8

  in: buildtype: dependency-upgradetype: task
  #19978·dependabot[bot] opened Oct 23, 2026Bot·

  ·

• Bump spring-io/spring-security-release-tools/.github/actions/send-notification from 1.0.20 to 1.0.21

  in: buildtype: dependency-upgradetype: task
  #19977·dependabot[bot] opened Oct 23, 2026Bot·

  ·

• Bump spring-io/spring-release-actions/schedule-milestone from 0.0.7 to 0.0.8

  in: buildtype: dependency-upgradetype: task
  #19976·dependabot[bot] opened Oct 23, 2026Bot·

  ·