All pull requests

Pull requests

• Handle non-token matches in introspect and revoke

  status: waiting-for-triage
  #20111·shlee1223 opened Nov 13, 2026·

  ·

• Use requested scope when refresh response omits it

  status: waiting-for-triage
  #20110·amalsaidov opened Nov 13, 2026·

  ·
  1

  1

• Preserve decrypted assertion DOM when decrypting responses

  status: waiting-for-triage
  #20109·rajeshvasa opened Nov 13, 2026·

  ·

• Allow JDK immutable collections in CoreJacksonModule

  status: waiting-for-triage
  #20108·rajeshvasa opened Nov 13, 2026·

  ·
  1

• Bump github/codeql-action/init from 4.39.1 to 4.39.3

  in: buildtype: dependency-upgradetype: task
  #20092·dependabot[bot] opened Nov 13, 2026Bot·

  ·

• Bump github/codeql-action/analyze from 4.39.2 to 4.39.3

  in: buildtype: dependency-upgradetype: task
  #20091·dependabot[bot] opened Nov 13, 2026Bot·

  ·

• Add none to supported client authentication methods

  status: waiting-for-triage
  #20086·therepanic opened Nov 12, 2026Contributor·

  ·
  1

  2

• Resolve client ID from JWT assertion when omitted

  status: waiting-for-triage
  #20082·wozhenbang2004 opened Nov 12, 2026·

  ·
  1

• Bump org.hibernate.orm:hibernate-core from 7.4.13.Final to 7.4.15.Final

  in: buildtype: dependency-upgrade
  #20081·dependabot[bot] opened Nov 11, 2026Bot·

  ·

• Bump io-spring-security from 1.1.3 to 1.1.4

  in: buildtype: dependency-upgrade
  #20080·dependabot[bot] opened Nov 11, 2026Bot·

  ·

• Bump com.webauthn4j:webauthn4j-core from 0.31.10.RELEASE to 0.31.11.RELEASE

  in: buildtype: dependency-upgrade
  #20079·dependabot[bot] opened Nov 11, 2026Bot·

  ·

• Bump io.spring.security.settings from 1.1.3 to 1.1.4

  in: buildtype: dependency-upgrade
  #20078·dependabot[bot] opened Nov 11, 2026Bot·

  ·

• Bump io.micrometer:micrometer-bom from 1.17.1 to 1.17.2

  in: buildtype: dependency-upgrade
  #20077·dependabot[bot] opened Nov 11, 2026Bot·

  ·

• Bump io.mockk:mockk from 1.14.11 to 1.14.12

  in: buildtype: dependency-upgrade
  #20076·dependabot[bot] opened Nov 11, 2026Bot·

  ·

• Bump io.spring.security.settings from 1.1.3 to 1.1.4

  in: buildtype: dependency-upgrade
  #20075·dependabot[bot] opened Nov 11, 2026Bot·

  ·

• Bump io-spring-security from 1.1.3 to 1.1.4

  in: buildtype: dependency-upgrade
  #20074·dependabot[bot] opened Nov 11, 2026Bot·

  ·

• Bump io.micrometer:micrometer-bom from 1.16.7 to 1.16.8

  in: buildtype: dependency-upgrade
  #20073·dependabot[bot] opened Nov 11, 2026Bot·

  ·

• Bump com.unboundid:unboundid-ldapsdk from 7.0.5 to 7.0.6

  in: buildtype: dependency-upgrade
  #20072·dependabot[bot] opened Nov 11, 2026Bot·

  ·

• Bump io.spring.nullability:io.spring.nullability.gradle.plugin from 0.0.16 to 0.0.18

  in: buildtype: dependency-upgrade
  #20071·dependabot[bot] opened Nov 11, 2026Bot·

  ·

• Bump org.jetbrains.dokka from 2.2.0 to 2.3.0

  in: buildtype: dependency-upgrade
  #20070·dependabot[bot] opened Nov 11, 2026Bot·

  ·

• Bump com.fasterxml.jackson:jackson-bom from 2.22.4 to 2.23.0

  in: buildtype: dependency-upgrade
  #20069·dependabot[bot] opened Nov 11, 2026Bot·

  ·

• Bump io-spring-security from 1.1.3 to 1.1.4

  in: buildtype: dependency-upgrade
  #20068·dependabot[bot] opened Nov 11, 2026Bot·

  ·

• Fix doubled words in configuration docs

  status: waiting-for-triage
  #20066·yunji1014 opened Nov 10, 2026·

  ·

• @EnableReactiveMethodSecurity should pick up PermissionEvaluator bean

  status: waiting-for-triage
  #20064·beyondwin opened Nov 10, 2026·

  ·

• Add ASCII fast path to firewall header validation

  status: waiting-for-triage
  #20062·seongjun-rpls opened Nov 9, 2026·

  ·
  1