Release 3.6.2 (#1827)

Author: NiklasHerrmann21

CHANGELOG.md

@@ -1,6 +1,31 @@
 # Change Log
 All notable changes to this project will be documented in this file.
 
+## 3.6.2
+
+- Improve logging before token key retrieval fallback
+- remove repository config for old sonatype plugin
+- added version references to POMs and other minor informations
+- Update README.md for using correct path to SpringTokenClientConfigura…
+- Maven central preparation
+
+### Dependency upgrades
+
+- Bump com.github.spotbugs:spotbugs-maven-plugin from 4.9.3.1 to 4.9.3.2
+- Bump io.github.hakky54:logcaptor from 2.11.0 to 2.12.0
+- Bump org.eclipse.jetty.version from 12.0.22 to 12.0.24
+- Bump org.apache.maven.plugins:maven-gpg-plugin from 3.2.7 to 3.2.8
+- Bump log4j2.version from 2.25.0 to 2.25.1
+- Bump commons-io:commons-io from 2.19.0 to 2.20.0
+- Bump reactor.version from 3.7.7 to 3.7.8
+- Bump spring.core.version from 6.2.8 to 6.2.9
+- Bump spring.security.version from 6.5.1 to 6.5.2
+- Bump spring.boot.version from 3.5.3 to 3.5.4
+- Bump com.github.spotbugs:spotbugs-maven-plugin from 4.9.3.0 to 4.9.3.1
+- Bump org.apache.maven.plugins:maven-pmd-plugin from 3.26.0 to 3.27.0
+- Bump spring.security.version from 6.5.0 to 6.5.1
+- Bump spring.boot.version from 3.5.0 to 3.5.3
+
 ## 3.6.1
 
 - Fix spring retry configuration for token service
@@ -9,22 +34,22 @@ All notable changes to this project will be documented in this file.
 
 ### Dependency upgrades
 
-Bump org.eclipse.jetty.version from 12.0.21 to 12.0.22
-bump caffeine version to 3.2.0
-Bump org.mockito:mockito-core from 5.17.0 to 5.18.0
-Bump org.apache.httpcomponents.client5:httpclient5 from 5.4.4 to 5.5
-Bump com.sap.cloud.environment.servicebinding:java-bom
-Bump org.json:json from 20250107 to 20250517
-Bump commons-io:commons-io from 2.18.0 to 2.19.0
-Bump spring.core.version from 6.2.5 to 6.2.7
-Bump io.github.hakky54:logcaptor from 2.10.2 to 2.11.0
-Bump spring.security.version from 6.4.4 to 6.4.5
-Bump org.apache.httpcomponents.client5:httpclient5 from 5.4.3 to 5.4.4
-Bump spring.boot.version from 3.4.4 to 3.4.5
-Bump org.wiremock:wiremock-standalone from 3.12.1 to 3.13.0
-Bump org.eclipse.jetty.version from 12.0.19 to 12.0.21
-Bump io.projectreactor:reactor-test from 3.7.4 to 3.7.6
-Bump io.projectreactor:reactor-core from 3.7.4 to 3.7.6
+- Bump org.eclipse.jetty.version from 12.0.21 to 12.0.22
+- bump caffeine version to 3.2.0
+- Bump org.mockito:mockito-core from 5.17.0 to 5.18.0
+- Bump org.apache.httpcomponents.client5:httpclient5 from 5.4.4 to 5.5
+- Bump com.sap.cloud.environment.servicebinding:java-bom
+- Bump org.json:json from 20250107 to 20250517
+- Bump commons-io:commons-io from 2.18.0 to 2.19.0
+- Bump spring.core.version from 6.2.5 to 6.2.7
+- Bump io.github.hakky54:logcaptor from 2.10.2 to 2.11.0
+- Bump spring.security.version from 6.4.4 to 6.4.5
+- Bump org.apache.httpcomponents.client5:httpclient5 from 5.4.3 to 5.4.4
+- Bump spring.boot.version from 3.4.4 to 3.4.5
+- Bump org.wiremock:wiremock-standalone from 3.12.1 to 3.13.0
+- Bump org.eclipse.jetty.version from 12.0.19 to 12.0.21
+- Bump io.projectreactor:reactor-test from 3.7.4 to 3.7.6
+- Bump io.projectreactor:reactor-core from 3.7.4 to 3.7.6
 
 ## 3.6.0
 

README.md

@@ -126,7 +126,7 @@ The SAP Cloud Security Services Integration is published to maven central: https
         <dependency>
             <groupId>com.sap.cloud.security</groupId>
             <artifactId>java-bom</artifactId>
-            <version>3.6.1</version>
+            <version>3.6.2</version>
             <scope>import</scope>
             <type>pom</type>
         </dependency>

bom/pom.xml

@@ -8,7 +8,7 @@
 
     <groupId>com.sap.cloud.security</groupId>
     <artifactId>java-bom</artifactId>
-    <version>3.6.1</version>
+    <version>3.6.2</version>
     <packaging>pom</packaging>
     <name>java-bom</name>
 

env/pom.xml

@@ -9,7 +9,7 @@
     <parent>
         <groupId>com.sap.cloud.security.xsuaa</groupId>
         <artifactId>parent</artifactId>
-        <version>3.6.1</version>
+        <version>3.6.2</version>
     </parent>
 
     <groupId>com.sap.cloud.security</groupId>

java-api/README.md

@@ -5,6 +5,6 @@
 <dependency>
     <groupId>com.sap.cloud.security</groupId>
     <artifactId>java-api</artifactId>
-    <version>3.6.1</version>
+    <version>3.6.2</version>
 </dependency>
 ```

java-api/pom.xml

@@ -9,7 +9,7 @@
 	<parent>
 		<groupId>com.sap.cloud.security.xsuaa</groupId>
 		<artifactId>parent</artifactId>
-		<version>3.6.1</version>
+		<version>3.6.2</version>
 	</parent>
 
 	<groupId>com.sap.cloud.security</groupId>

java-security-it/pom.xml

@@ -9,7 +9,7 @@
     <parent>
         <artifactId>parent</artifactId>
         <groupId>com.sap.cloud.security.xsuaa</groupId>
-        <version>3.6.1</version>
+        <version>3.6.2</version>
     </parent>
 
     <artifactId>java-security-it</artifactId>

java-security-test/README.md

@@ -40,7 +40,7 @@ It is pre-configured with a security filter that only accepts valid tokens. Furt
 <dependency>
     <groupId>com.sap.cloud.security</groupId>
    <artifactId>java-security-test</artifactId>
-      <version>3.6.1</version>
+      <version>3.6.2</version>
    <scope>test</scope>
 </dependency>
 ```

java-security-test/pom.xml

@@ -9,7 +9,7 @@
 	<parent>
 		<groupId>com.sap.cloud.security.xsuaa</groupId>
 		<artifactId>parent</artifactId>
-		<version>3.6.1</version>
+		<version>3.6.2</version>
 	</parent>
 
 	<groupId>com.sap.cloud.security</groupId>

java-security/README.md

@@ -68,7 +68,7 @@ Since it requires the Tomcat 10 runtime, it needs to be deployed using the [SAP
 <dependency>
     <groupId>com.sap.cloud.security</groupId>
     <artifactId>java-security</artifactId>
-    <version>3.6.1</version>
+    <version>3.6.2</version>
 </dependency>
 <dependency>
     <groupId>org.apache.httpcomponents</groupId>