Update Spring Upgrade - Non Major

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
org.springframework.boot:spring-boot-starter-test (source)	3.5.3 -> 3.5.4
org.springframework.boot:spring-boot-starter-json (source)	3.5.3 -> 3.5.4
org.springframework.boot:spring-boot-starter-aop (source)	3.5.3 -> 3.5.4
org.springframework.boot:spring-boot-starter-actuator (source)	3.5.3 -> 3.5.4
org.springframework.boot:spring-boot-starter-web (source)	3.5.3 -> 3.5.4
org.springframework.boot:spring-boot-gradle-plugin (source)	3.5.3 -> 3.5.4
org.springframework.security:spring-security-web (source)	6.5.1 -> 6.5.2
org.springframework.security:spring-security-test (source)	6.5.1 -> 6.5.2
org.springframework.security:spring-security-taglibs (source)	6.5.1 -> 6.5.2
org.springframework.security:spring-security-saml2-service-provider (source)	6.5.1 -> 6.5.2
org.springframework.security:spring-security-rsocket (source)	6.5.1 -> 6.5.2
org.springframework.security:spring-security-oauth2-resource-server (source)	6.5.1 -> 6.5.2
org.springframework.security:spring-security-oauth2-jose (source)	6.5.1 -> 6.5.2
org.springframework.security:spring-security-oauth2-core (source)	6.5.1 -> 6.5.2
org.springframework.security:spring-security-oauth2-client (source)	6.5.1 -> 6.5.2
org.springframework.security:spring-security-messaging (source)	6.5.1 -> 6.5.2
org.springframework.security:spring-security-ldap (source)	6.5.1 -> 6.5.2
org.springframework.security:spring-security-data (source)	6.5.1 -> 6.5.2
org.springframework.security:spring-security-crypto (source)	6.5.1 -> 6.5.2
org.springframework.security:spring-security-config (source)	6.5.1 -> 6.5.2
org.springframework.security:spring-security-cas (source)	6.5.1 -> 6.5.2
org.springframework.security:spring-security-aspects (source)	6.5.1 -> 6.5.2
org.springframework.security:spring-security-acl (source)	6.5.1 -> 6.5.2
org.springframework.security:spring-security-core (source)	6.5.1 -> 6.5.2
org.springframework.boot	3.5.3 -> 3.5.4

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

spring-projects/spring-boot (org.springframework.boot:spring-boot-starter-test)

v3.5.4

spring-projects/spring-security (org.springframework.security:spring-security-web)

v6.5.2

Compare Source

🪲 Bug Fixes

• <websocket-message-broker> should pick up a bean named csrfChannelInterceptor #​17495
• Add 7.0 Migration Steps for Messaging PathPattern Usage #​17509
• EnableReactiveMethodSecurity should not import Servlet configuration #​17545
• Fix equals and hashCode in PathPatternRequestMatcher to include HTTP method #​17337
• Fix securityContextRepository() initialization in oauth2Login() DSL #​17557
• OAuth2Login DSL should support post-processing AuthenticationProvider implementations #​17176
• Websocket XML config should pick up PathPatternMessageMatcher.Builder #​17508

🔨 Dependency Upgrades

• Bump com.webauthn4j:webauthn4j-core from 0.29.3.RELEASE to 0.29.4.RELEASE #​17444
• Bump io-spring-javaformat from 0.0.46 to 0.0.47 [#​17470][https://github.com/spring-projects/spring-security/pull/17470](https://redirect.github.com/spring-projects/spring-security/pull/17470)0
• Bump io.micrometer:micrometer-observation from 1.14.8 to 1.14.9 [#​17570][https://github.com/spring-projects/spring-security/pull/17570](https://redirect.github.com/spring-projects/spring-security/pull/17570)0
• Bump io.mockk:mockk from 1.14.2 to 1.14.4 #​17467
• Bump io.mockk:mockk from 1.14.4 to 1.14.5 #​17572
• Bump org-apache-maven-resolver from 1.9.23 to 1.9.24 #​17469
• Bump org.apache.maven:maven-resolver-provider from 3.9.10 to 3.9.11 #​17555
• Bump org.hibernate.orm:hibernate-core from 6.6.17.Final to 6.6.20.Final #​17491
• Bump org.hibernate.orm:hibernate-core from 6.6.20.Final to 6.6.22.Final #​17571
• Bump org.springframework.data:spring-data-bom from 2024.1.6 to 2024.1.7 #​17466
• Bump org.springframework.data:spring-data-bom from 2024.1.7 to 2024.1.8 #​17569
• Bump org.springframework.ldap:spring-ldap-core from 3.2.12 to 3.2.13 #​17468
• Bump org.springframework:spring-framework-bom from 6.2.7 to 6.2.8 #​17481
• Bump org.springframework:spring-framework-bom from 6.2.8 to 6.2.9 #​17568

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​fkowal and @​therepanic

---

Configuration

📅 Schedule: Branch creation - "after 7am and before 11am every weekday" in timezone Europe/London, Automerge - "after 8am and before 11am every Tuesday" in timezone Europe/London.

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.