fix(deps): update dependency org.springframework.security:spring-security-web to v6

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
org.springframework.security:spring-security-web (source)	5.8.1 -> 6.0.1

---

Release Notes

spring-projects/spring-security

v6.0.1

Compare Source

⭐ New Features

• Add EnableWebSecurity migration steps to 5.8 guide #​12354
• Replace deprecated set-state set-output GitHub Action's commands #​12299

🪲 Bug Fixes

• codes in spring security docs fail to work #​12342
• codes in spring security docs fail to work #​12341
• DefaultLdapAuthoritiesPopulator throws NullPointerException #​12409
• Error in ACLS document #​12270
• Fix AuthorizationFilter diagram in docs #​12288
• Incorrect Javadoc for class ExpressionAuthorizationDecision #​12435
• Incorrect sample code in securityMatcher migration docs #​12303
• Incorrect sample code in securityMatcher migration docs #​12302
• It's not possible to disable micrometer obversability #​12268
• ProxyFactoryBean on AuthenticationManager does not work in native mode #​12367
• SecurityContextHolderFilter does not apply to async dispatch #​12369
• SecurityContextHolderFilter does not apply to async dispatch #​12368

🔨 Dependency Upgrades

• Update hibernate-core to 6.1.6.Final #​12423
• Update httpclient to 4.5.14 #​12421
• Update io.projectreactor to 2022.0.1 #​12419
• Update jackson-bom to 2.14.1 #​12413
• Update jackson-databind to 2.14.1 #​12414
• Update jackson-datatype-jsr310 to 2.14.1 #​12415
• Update logback-classic to 1.4.5 #​12412
• Update micrometer-observation to 1.10.2 #​12417
• Update mockk to 1.13.3 #​12418
• Update org.eclipse.jetty to 11.0.13 #​12422
• Update org.jetbrains.kotlin to 1.7.22 #​12424
• Update org.springframework to 6.0.3 #​12426
• Update reactor-netty to 1.1.1 #​12420
• Update slf4j-api to 2.0.6 #​12425
• Update unboundid-ldapsdk to 6.0.7 #​12416

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

• @​mojavelinux

v6.0.0

Compare Source

⏪ Breaking Changes

• CsrfAuthenticationStrategy is not consistent with CsrfFilter #​12235
• Register FilterChainProxy for all dispatcher types #​12180

⭐ New Features

• Add test runtime hints for annotations using @WithSecurityContext #​12215
• Add WebTestUtils test runtime hints #​12216
• Align with Servlet API 6 #​12146
• Document Configure Default SessionAuthenticationStrategy #​12192
• Document DelegatingSecurityContextRepository #​12185
• Improve deprecation notice in WebSecurityConfigurerAdapter #​12262
• Log a warning when AuthorizationGrantType does not exactly match a pre-defined constant #​12234
• Migration guide for the removal of CAS #​12163
• Polish Span and Meter Names #​12225
• Register FilterChainProxy for All Dispatcher Types Migration Steps #​12212
• Restructure 6.0 Migration Guide #​12242
• Support Jakarta WebSocket 2.1 #​12148

🪲 Bug Fixes

• CsrfAuthenticationStrategy does not check for existing token #​12241
• Ensure instrumentation names align with semantic conventions #​12156
• Incorrect scope map fix #​12207
• SAML logout: Incorrect log messages #​12210
• Saml2MetadataFilter response should configure writer to UTF-8 #​12223

🔨 Dependency Upgrades

• Update micrometer-observation to 1.10.1 #​12250
• Update org.springframework to 6.0.0 #​12255
• Update org.springframework.data to 2022.0.0 #​12256
• Update r2dbc-h2 to 1.0.0.RELEASE #​12251
• Update slf4j-api to 2.0.4 #​12254
• Update spring-ldap-core to 3.0.0 #​12257

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

• @​jzheaux

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update. You will not get PRs for any future 6.x releases. But if you manually upgrade to 6.x then Renovate will re-enable minor and patch updates automatically.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.