What's Changed

• Release3.0.8 by @prachi-okta in #865
• bumping up tomcat dependencies by @prachi-okta in #867
• Upgrade to Spring Boot 4.x Compatibility by @prachi-okta in #868
• Release/3.0.9 by @prachi-okta in #885
• Bump okta.commons.version from 2.0.1 to 2.0.2 by @dependabot[bot] in #883
• Bump org.assertj:assertj-core from 3.27.2 to 3.27.7 in /oauth2 by @dependabot[bot] in #884
• Fix Spring Boot 4.x ClassNotFoundException for OAuth2ClientProperties by @prachi-okta in #887
• README.md update by @prachi-okta in #888

Full Changelog: okta-spring-boot-parent-3.0.8...okta-spring-boot-parent-3.0.10

What's Changed

• Release3.0.8 by @prachi-okta in #865
• bumping up tomcat dependencies by @prachi-okta in #867
• Upgrade to Spring Boot 4.x Compatibility by @prachi-okta in #868

Full Changelog: okta-spring-boot-parent-3.0.8...okta-spring-boot-parent-3.0.9

What's Changed

• Release pr 3.0.7 by @arvindkrishnakumar-okta in #700
• Update README.md by @arvindkrishnakumar-okta in #701
• Bump okta.commons.version from 1.3.5 to 1.3.6 by @dependabot[bot] in #705
• Bump com.okta:okta-parent from 31 to 32 by @arvindkrishnakumar-okta in #704
• Bump io.rest-assured:rest-assured-all from 5.4.0 to 5.5.0 by @dependabot[bot] in #707
• Bump io.rest-assured:rest-assured-bom from 5.4.0 to 5.5.0 by @dependabot[bot] in #706
• Bump org.assertj:assertj-core from 3.26.0 to 3.26.3 by @dependabot[bot] in #710
• Bump okta.commons.version from 1.3.6 to 2.0.0 by @dependabot[bot] in #709
• Bump com.okta:okta-parent from 32 to 33 by @dependabot[bot] in #708
• OKTA-789927: Move away from orb by @rlepage-okta in #711
• Bump org.slf4j:slf4j-api from 2.0.13 to 2.0.15 by @dependabot[bot] in #713
• Bump org.slf4j:slf4j-api from 2.0.15 to 2.0.16 by @dependabot[bot] in #714
• Bump org.mockito:mockito-core from 5.12.0 to 5.13.0 by @dependabot[bot] in #717
• Bump org.yaml:snakeyaml from 2.2 to 2.3 by @dependabot[bot] in #718
• Bump com.nimbusds:nimbus-jose-jwt from 9.40 to 9.41 by @dependabot[bot] in #721
• Bump org.eclipse.jgit:org.eclipse.jgit.ssh.apache from 6.10.0.202406032230-r to 7.0.0.202409031743-r by @dependabot[bot] in #722
• Bump org.eclipse.jgit:org.eclipse.jgit.http.apache from 6.10.0.202406032230-r to 7.0.0.202409031743-r by @dependabot[bot] in #724
• Bump org.eclipse.jgit:org.eclipse.jgit from 6.10.0.202406032230-r to 7.0.0.202409031743-r by @dependabot[bot] in #723
• Bump Spring Boot Starter from 3.3.1 to 3.3.3 by @arvindkrishnakumar-okta in #725
• Bump com.nimbusds:nimbus-jose-jwt from 9.41 to 9.41.1 by @dependabot[bot] in #726
• Bump Java Parent from 33 to 34 by @arvindkrishnakumar-okta in #727
• Bump Spring Boot from 3.3.3 to 3.3.4 by @arvindkrishnakumar-okta in #728
• Bump okta.commons.version from 2.0.0 to 2.0.1 by @dependabot[bot] in #730
• Bump org.mockito:mockito-core from 5.13.0 to 5.14.0 by @dependabot[bot] in #732
• Bump org.mockito:mockito-core from 5.14.0 to 5.14.1 by @dependabot[bot] in #733
• Bump com.nimbusds:nimbus-jose-jwt from 9.41.1 to 9.41.2 by @dependabot[bot] in #734
• Bump com.okta:okta-parent from 34 to 35 by @arvindkrishnakumar-okta in #735
• Bump org.mockito:mockito-core from 5.14.1 to 5.14.2 by @dependabot[bot] in #736
• Add RL Scanner to CCI by @arvindkrishnakumar-okta in #737
• Bump com.nimbusds:nimbus-jose-jwt from 9.41.2 to 9.42 by @dependabot[bot] in #738
• Bump org.bouncycastle:bcprov-jdk18on from 1.78.1 to 1.79 by @dependabot[bot] in #739
• Bump com.nimbusds:nimbus-jose-jwt from 9.42 to 9.44 by @dependabot[bot] in #740
• Bump com.nimbusds:nimbus-jose-jwt from 9.44 to 9.45 by @dependabot[bot] in #741
• Bump com.nimbusds:nimbus-jose-jwt from 9.45 to 9.47 by @dependabot[bot] in #744
• Bump org.eclipse.jgit:org.eclipse.jgit.http.apache from 7.0.0.202409031743-r to 7.1.0.202411261347-r by @dependabot[bot] in #745
• Bump org.eclipse.jgit:org.eclipse.jgit.ssh.apache from 7.0.0.202409031743-r to 7.1.0.202411261347-r by @dependabot[bot] in #747
• Bump org.eclipse.jgit:org.eclipse.jgit from 7.0.0.202409031743-r to 7.1.0.202411261347-r by @dependabot[bot] in #746
• Bump Spring Boot Starter from 3.3.4 to 3.4.0 by @arvindkrishnakumar-okta in #748
• Bump org.thymeleaf:thymeleaf from 3.1.2.RELEASE to 3.1.3.RELEASE by @dependabot[bot] in #750
• Bump org.thymeleaf:thymeleaf-spring6 from 3.1.2.RELEASE to 3.1.3.RELEASE by @dependabot[bot] in #749
• Bump org.assertj:assertj-core from 3.26.3 to 3.27.0 by @dependabot[bot] in #751
• Bump org.assertj:assertj-core from 3.27.0 to 3.27.1 by @dependabot[bot] in #755
• Bump ognl:ognl from 3.4.3 to 3.4.4 by @dependabot[bot] in #754
• Bump com.nimbusds:nimbus-jose-jwt from 9.47 to 9.48 by @dependabot[bot] in #753
• Bump com.nimbusds:nimbus-jose-jwt from 9.48 to 10.0 by @dependabot[bot] in #757
• Bump org.mockito:mockito-core from 5.14.2 to 5.15.2 by @dependabot[bot] in #756
• Bump org.assertj:assertj-core from 3.27.1 to 3.27.2 by @dependabot[bot] in #759
• Bump com.nimbusds:nimbus-jose-jwt from 10.0 to 10.0.1 by @dependabot[bot] in #758
• Bump ognl:ognl from 3.4.4 to 3.4.5 by @dependabot[bot] in #760
• Bump org.bouncycastle:bcprov-jdk18on from 1.79 to 1.80 by @dependabot[bot] in #763
• Bump Spring Boot from 3.4.0 to 3.4.1 by @arvindkrishnakumar-okta in #765
• Bump jakarta.validation:jakarta.validation-api from 3.1.0 to 3.1.1 by @dependabot[bot] in #766
• Bump org.testng:testng from 7.10.2 to 7.11.0 by @dependabot[bot] in #769
• Bump com.okta:okta-parent from 35 to 36 by @dependabot[bot] in #768
• Fix semgrep job by @arvindkrishnakumar-okta in #770
• Bump io.rest-assured:rest-assured-bom from 5.5.0 to 5.5.1 by @dependabot[bot] in #773
• Bump org.yaml:snakeyaml from 2.3 to 2.4 by @dependabot[bot] in #772
• Bump io.rest-assured:rest-assured-all from 5.5.0 to 5.5.1 by @dependabot[bot] in #771
• Bump ognl:ognl from 3.4.5 to 3.4.6 by @dependabot[bot] in #774
• Fix usage of OktaJwtAuthenticationConverter to use constructor with props by @arvindkrishnakumar-okta in #775
• Bump org.slf4j:slf4j-api from 2.0.16 to 2.0.17 by @dependabot[bot] in #776
• Bump com.nimbusds:nimbus-jose-jwt from 10.0.1 to 10.0.2 by @dependabot[bot] in #777
• Bump com.okta:okta-parent from 36 to 37 by @dependabot[bot] in #779
• Bump org.mockito:mockito-core from 5.15.2 to 5.16.1 by @dependabot[bot] in #783
• OKTA-866716 - Outdated Library - okta/okta-spring-boot@master - net.minidev:[email protected] by @prachi-okta in #788
• OKTA-869328 - Outdated Library - okta/okta-spring-boot@master - io.netty:[email protected] by @prachi-okta in #787
• OKTA-899032 - Outdated Library - okta/okta-spring-boot@master - org.springframework.security:[email protected] by @prachi-okta in #789
• Bump org.eclipse.jgit:org.eclipse.jgit.http.apache from 7.1.0.202411261347-r to 7.2.0.202503040940-r by @dependabot[bot] in #786
• Bump org.eclipse.jgit:org.eclipse.jgit.ssh.apache from 7.1.0.202411261347-r to 7.2.0.202503040940-r by @dependabot[bot] in #784
• Bump org.eclipse.jgit:org.eclipse.jgit from 7.1.0.202411261347-r to 7.2.0.202503040940-r by @dependabot[bot] in #785
• Bump io.netty:netty-handler from 4.1.118.Final to 4.1.119.Final by @dependabot[bot] in #790
• Bump ognl:ognl from 3.4.6 to 3.4.7 by @dependabot[bot] in #791
• Bump org.mockito:mockito-core from 5.16.1 to 5.17.0 by @dependabot[bot] in #794
• Bump io.netty:netty-handler from 4.1.119.Final to 4.2.0.Final by @dependabot[bot] in #793
• Bump com.nimbusds:nimbus-jose-jwt from 10.0.2 to 10.2 by @dependabot[bot] in #7...

What's Changed

• Bump ch.qos.logback:logback-core from 1.4.13 to 1.4.14 by @dependabot in #627
• Bump org.mockito:mockito-core from 5.7.0 to 5.8.0 by @dependabot in #628
• Bump ch.qos.logback:logback-classic from 1.4.13 to 1.4.14 by @dependabot in #629
• Bump org.eclipse.jgit:org.eclipse.jgit.ssh.apache from 6.7.0.202309050840-r to 6.8.0.202311291450-r by @dependabot in #635
• Bump org.eclipse.jgit:org.eclipse.jgit from 6.7.0.202309050840-r to 6.8.0.202311291450-r by @dependabot in #636
• Bump org.eclipse.jgit:org.eclipse.jgit.http.apache from 6.7.0.202309050840-r to 6.8.0.202311291450-r by @dependabot in #634
• Bump io.rest-assured:rest-assured-bom from 5.3.0 to 5.3.2 by @dependabot in #633
• Bump io.rest-assured:rest-assured-all from 5.3.0 to 5.3.2 by @dependabot in #632
• Bump okta.commons.version from 1.3.3 to 1.3.5 by @dependabot in #631
• Bump ognl:ognl from 3.3.4 to 3.4.2 by @dependabot in #630
• Bump io.rest-assured:rest-assured-all from 5.3.2 to 5.4.0 by @dependabot in #639
• Bump io.rest-assured:rest-assured-bom from 5.3.2 to 5.4.0 by @dependabot in #638
• Bump org.testng:testng from 7.8.0 to 7.9.0 by @dependabot in #640
• Bump org.assertj:assertj-core from 3.24.2 to 3.25.0 by @dependabot in #642
• Bump org.slf4j:slf4j-api from 2.0.9 to 2.0.10 by @dependabot in #641
• Bump org.assertj:assertj-core from 3.25.0 to 3.25.1 by @dependabot in #643
• Bump org.mockito:mockito-core from 5.8.0 to 5.9.0 by @dependabot in #645
• Bump org.slf4j:slf4j-api from 2.0.10 to 2.0.11 by @dependabot in #644
• Bump org.assertj:assertj-core from 3.25.1 to 3.25.2 by @dependabot in #646
• Bump org.mockito:mockito-core from 5.9.0 to 5.10.0 by @dependabot in #647
• OKTA-595963: Add ability to set authorities claim name from config by @arvindkrishnakumar-okta in #649
• Bump org.assertj:assertj-core from 3.25.2 to 3.25.3 by @dependabot in #650
• Bump org.slf4j:slf4j-api from 2.0.11 to 2.0.12 by @dependabot in #651
• Enforce json-path version 2.9.0 in base pom.xml by @arvindkrishnakumar-okta in #652
• Bump ch.qos.logback:logback-core from 1.4.14 to 1.5.0 by @dependabot in #653
• Bump ch.qos.logback:logback-core from 1.5.0 to 1.5.1 by @dependabot in #655
• Bump ch.qos.logback:logback-classic from 1.4.14 to 1.5.1 by @dependabot in #656
• Bump org.mockito:mockito-core from 5.10.0 to 5.11.0 by @dependabot in #657
• Bump ch.qos.logback:logback-core from 1.5.1 to 1.5.2 by @dependabot in #659
• Bump ch.qos.logback:logback-classic from 1.5.1 to 1.5.2 by @dependabot in #658
• Bump ch.qos.logback:logback-core from 1.5.2 to 1.5.3 by @dependabot in #660
• Bump ch.qos.logback:logback-classic from 1.5.2 to 1.5.3 by @dependabot in #661
• Bump org.eclipse.jgit:org.eclipse.jgit.http.apache from 6.8.0.202311291450-r to 6.9.0.202403050737-r by @dependabot in #664
• Bump org.eclipse.jgit:org.eclipse.jgit from 6.8.0.202311291450-r to 6.9.0.202403050737-r by @dependabot in #663
• Bump org.eclipse.jgit:org.eclipse.jgit.ssh.apache from 6.8.0.202311291450-r to 6.9.0.202403050737-r by @dependabot in #662
• Enforce nimus-jose-jwt 9.37.3 in pom.xml by @arvindkrishnakumar-okta in #666
• Bump Spring Boot from 3.2.0 to 3.2.4 by @arvindkrishnakumar-okta in #665
• Bump org.bouncycastle:bcprov-jdk18on from 1.77 to 1.78 by @dependabot in #667
• Bump ch.qos.logback:logback-classic from 1.5.3 to 1.5.4 by @dependabot in #669
• Bump org.testng:testng from 7.9.0 to 7.10.1 by @dependabot in #671
• Bump ch.qos.logback:logback-core from 1.5.3 to 1.5.4 by @dependabot in #670
• Bump ch.qos.logback:logback-core from 1.5.4 to 1.5.5 by @dependabot in #676
• Bump ch.qos.logback:logback-classic from 1.5.4 to 1.5.5 by @dependabot in #675
• Bump org.slf4j:slf4j-api from 2.0.12 to 2.0.13 by @dependabot in #674
• Bump org.apache.maven.plugins:maven-jar-plugin from 3.3.0 to 3.4.0 by @dependabot in #673
• Bump org.bouncycastle:bcprov-jdk18on from 1.78 to 1.78.1 by @dependabot in #679
• Bump ch.qos.logback:logback-core from 1.5.5 to 1.5.6 by @dependabot in #678
• Bump ch.qos.logback:logback-classic from 1.5.5 to 1.5.6 by @dependabot in #677
• Bump ognl:ognl from 3.4.2 to 3.4.3 by @dependabot in #680
• Bump org.apache.maven.plugins:maven-jar-plugin from 3.4.0 to 3.4.1 by @dependabot in #681
• Bump org.testng:testng from 7.10.1 to 7.10.2 by @dependabot in #682
• Bump com.nimbusds:nimbus-jose-jwt from 9.37.3 to 9.39.1 by @dependabot in #686
• Bump org.mockito:mockito-core from 5.11.0 to 5.12.0 by @dependabot in #685
• Bump jakarta.validation:jakarta.validation-api from 3.0.2 to 3.1.0 by @dependabot in #687
• Bump org.assertj:assertj-core from 3.25.3 to 3.26.0 by @dependabot in #688
• Bump org.eclipse.jgit:org.eclipse.jgit.ssh.apache from 6.9.0.202403050737-r to 6.10.0.202406032230-r by @dependabot in #696
• Bump com.nimbusds:nimbus-jose-jwt from 9.39.1 to 9.40 by @dependabot in #691
• Bump org.eclipse.jgit:org.eclipse.jgit.http.apache from 6.9.0.202403050737-r to 6.10.0.202406032230-r by @dependabot in #695
• Bump org.eclipse.jgit:org.eclipse.jgit from 6.9.0.202403050737-r to 6.10.0.202406032230-r by @dependabot in #694
• Bump org.apache.maven.plugins:maven-jar-plugin from 3.4.1 to 3.4.2 by @dependabot in #698
• Bump Spring Boot from 3.2.4 to 3.3.1 by @arvindkrishnakumar-okta in #699

Full Changelog: okta-spring-boot-parent-3.0.6...okta-spring-boot-parent-3.0.7

What's Changed

• Bump org.mockito:mockito-core from 5.4.0 to 5.5.0 by @dependabot in #594
• Add Semgrep by @bjr-okta in #597
• Bump org.slf4j:slf4j-api from 2.0.7 to 2.0.9 by @dependabot in #598
• Bump actions/checkout from 3 to 4 by @dependabot in #599
• OKTA-634004: Add Snyk software dependency scan by @arvindkrishnakumar-okta in #604
• Add JDK image to Snyk Job by @arvindkrishnakumar-okta in #605
• Update Snyk Dep Scan Config by @arvindkrishnakumar-okta in #606
• Bump org.mockito:mockito-core from 5.5.0 to 5.6.0 by @dependabot in #608
• Upgrade CCI JDK image to build on JDK21 by @arvindkrishnakumar-okta in #609
• OKTA-654206: Bump snakeyaml from 1.33 to 2.2 by @arvindkrishnakumar-okta in #612
• OKTA-654211: Bump org.eclipse.jgit deps by @arvindkrishnakumar-okta in #610
• Bump org.mockito:mockito-core from 5.6.0 to 5.7.0 by @dependabot in #613
• OKTA-654209: Bump testng from 7.3.0 to 7.8.0 by @arvindkrishnakumar-okta in #611
• Fix Gradle dependency for latest version by @mraible in #595
• Upgrade Spring Boot Starter from 3.1.2 to 3.1.5 by @arvindkrishnakumar-okta in #615
• Bump org.bouncycastle:bcprov-jdk18on from 1.76 to 1.77 by @dependabot in #618
• Bump Spring Boot from 3.1.5 to 3.2.0 by @arvindkrishnakumar-okta in #622
• Bump actions/setup-java from 3 to 4 by @dependabot in #624
• Cleanup CVE suppressions and deps by @arvindkrishnakumar-okta in #625

New Contributors

• @bjr-okta made their first contribution in #597

Full Changelog: okta-spring-boot-parent-3.0.5...okta-spring-boot-parent-3.0.6

What's Changed

• Bump logback-classic from 1.4.7 to 1.4.8 by @dependabot in #580
• Bump mockito-core from 5.3.1 to 5.4.0 by @dependabot in #582
• Bump Java parent from 28 to 29 by @arvindkrishnakumar-okta in #584
• Bump okta-parent from 29 to 30 by @dependabot in #585
• Add Auth0 client data to requests by @jimmyjames in #586
• Add missing license headers by @arvindkrishnakumar-okta in #589
• Bump logback dep by @arvindkrishnakumar-okta in #590
• Bump Spring Boot from 3.1.0 to 3.1.2 by @arvindkrishnakumar-okta in #591
• Fix CVEs by @arvindkrishnakumar-okta in #592

New Contributors

• @jimmyjames made their first contribution in #586

Full Changelog: okta-spring-boot-parent-3.0.4...okta-spring-boot-parent-3.0.5

What's Changed

• Bump wiremock-standalone from 3.0.0-beta-3 to 3.0.0-beta-4 by @dependabot in #560
• Bump mockito-core from 5.1.1 to 5.2.0 by @dependabot in #561
• Bump wiremock-standalone from 3.0.0-beta-4 to 3.0.0-beta-5 by @dependabot in #565
• Bump wiremock-standalone from 3.0.0-beta-5 to 3.0.0-beta-7 by @dependabot in #567
• Bump mockito-core from 5.2.0 to 5.3.0 by @dependabot in #568
• Bump mockito-core from 5.3.0 to 5.3.1 by @dependabot in #572
• Upgrade to Springboot 3.0.6 by @arvindkrishnakumar-okta in #574
• Upgrade from Spring Boot 3.0.6 to 3.1.0 by @arvindkrishnakumar-okta in #576
• Bump Spring Cloud from 4.0.1 to 4.0.3 by @arvindkrishnakumar-okta in #577

Full Changelog: okta-spring-boot-parent-3.0.3...okta-spring-boot-parent-3.0.4

What's Changed

• Bump openjdk cci image from 17.0.5 to 17.0.6 by @arvindkrishnakumar-okta in #545
• Bump okta-parent from 24 to 28 by @arvindkrishnakumar-okta in #548
• Remove version from dependency-check-maven plugin by @arvindkrishnakumar-okta in #549
• Suppress CVE and refactor by @arvindkrishnakumar-okta in #553
• Bump wiremock-standalone from 3.0.0-beta-2 to 3.0.0-beta-3 by @dependabot in #552
• Bump Spring cloud and mockserver-netty version by @arvindkrishnakumar-okta in #555
• Fix issue with RestTemplate which unsets the proxy by @arvindkrishnakumar-okta in #556
• Add Auth0 support by @deepu105 in #547
• Added missing license header by @arvindkrishnakumar-okta in #558

New Contributors

• @deepu105 made their first contribution in #547

Full Changelog: okta-spring-boot-parent-3.0.2...okta-spring-boot-parent-3.0.3

What's Changed

• Bump okta.commons.version from 1.3.2 to 1.3.3 by @dependabot in #538
• Bump mockito-core from 5.1.0 to 5.1.1 by @dependabot in #539
• Bump Mgmt SDK from 8.2.2 to 8.2.3 by @arvindkrishnakumar-okta in #542
• Bump Springboot from 3.0.1 to 3.0.2 by @arvindkrishnakumar-okta in #541
• Fix application startup failure (505) by @arvindkrishnakumar-okta in #540

Full Changelog: okta-spring-boot-parent-3.0.1...okta-spring-boot-parent-3.0.2

What's Changed

• Patch release that fixes #505 by @arvindkrishnakumar-okta

Full Changelog: okta-spring-boot-parent-2.1.6...okta-spring-boot-parent-2.1.7