Apache Shiro Files

What's new Highlights

• Added a supported way to decorate Shiro SecurityManager
• Better compatibility with OSGi for Jakarta EE jakarta namespace
• Fixed exception handling bugs in Jax-Rs integration module
• Fixed a bug in Jakarta Faces integration
• Better compatibility when building with Maven 4.x

Bug fixes

• [#1324] enh: added ManifestResourceTransformer to shade plugin by @lprimak in https://github.com/apache/shiro/pull/1328
• [#1352] bugfix: made commons-configuration2 optional in shiro core by @lprimak in https://github.com/apache/shiro/pull/1353
• [SHIRO-491] fix rendering of principal tag in panelGroup by @lprimak in https://github.com/apache/shiro/pull/1371
• [#1383] bugfix: fix exception mapper type from registered features by @lprimak in https://github.com/apache/shiro/pull/1384
• [SHIRO-875] Fix creating subjects with disabled session-creation by @boris-petrov in https://github.com/apache/shiro/pull/1407
• [#1383] bugfix(jax-rs): unauthenticated vs. authorized HTTP response codes we… by @lprimak in https://github.com/apache/shiro/pull/1487
• bugfix(tests): using JUnit's ResourceLock annotation for tests that touch… by @lprimak in https://github.com/apache/shiro/pull/1467

Enhancements

• [SHIRO-776] refactor: JUnit5 Best Practices by @timtebeek in https://github.com/apache/shiro/pull/1338
• deps: fix warnings found by maven 4-alpha-13 by @lprimak in https://github.com/apache/shiro/pull/1377
• [#1424] [Enhancement] Made Jakarta EE IniEnvironment more flexible by @lprimak in https://github.com/apache/shiro/pull/1425
• [#1424] Add generic way to decorate SecurityManager by @lprimak in https://github.com/apache/shiro/pull/1429

Documentation enhancements

• enh: updated versions and using actual link versions for javadoc

Dependency updates

• build(deps): bump log4j.version from 2.22.1 to 2.23.0 by @dependabot in https://github.com/apache/shiro/pull/1321
• build(deps): bump org.codehaus.mojo:exec-maven-plugin from 3.1.1 to 3.2.0 by @dependabot in https://github.com/apache/shiro/pull/1325
• build(deps): bump io.openliberty.tools:liberty-maven-plugin from 3.10 to 3.10.1 by @dependabot in https://github.com/apache/shiro/pull/1330
• build(deps): bump actions/setup-java from 4.0.0 to 4.1.0 by @dependabot in https://github.com/apache/shiro/pull/1331
• build(deps): bump com.puppycrawl.tools:checkstyle from 10.13.0 to 10.14.0 by @dependabot in https://github.com/apache/shiro/pull/1332
• build(deps): bump mockito.version from 5.10.0 to 5.11.0 by @dependabot in https://github.com/apache/shiro/pull/1334
• build(deps): bump groovy.version from 4.0.18 to 4.0.19 by @dependabot in https://github.com/apache/shiro/pull/1335
• build(deps): bump actions/cache from 4.0.0 to 4.0.1 by @dependabot in https://github.com/apache/shiro/pull/1336
• build(deps): bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.18.5 to 0.19.1 by @dependabot in https://github.com/apache/shiro/pull/1341
• build(deps): bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.19.1 to 0.20.0 by @dependabot in https://github.com/apache/shiro/pull/1342
• build(deps): bump log4j.version from 2.23.0 to 2.23.1 by @dependabot in https://github.com/apache/shiro/pull/1349
• build(deps): bump com.puppycrawl.tools:checkstyle from 10.14.0 to 10.14.1 by @dependabot in https://github.com/apache/shiro/pull/1350
• build(deps): bump actions/checkout from 4.1.1 to 4.1.2 by @dependabot in https://github.com/apache/shiro/pull/1354
• build(deps): bump io.openliberty.tools:liberty-maven-plugin from 3.10.1 to 3.10.2 by @dependabot in https://github.com/apache/shiro/pull/1355
• build(deps): bump actions/setup-java from 4.1.0 to 4.2.0 by @dependabot in https://github.com/apache/shiro/pull/1358
• build(deps-dev): bump org.apache.cxf:cxf-rt-frontend-jaxrs from 3.6.2 to 3.6.3 by @dependabot in https://github.com/apache/shiro/pull/1361
• build(deps): bump org.apache.cxf:cxf-rt-rs-client from 3.6.2 to 3.6.3 by @dependabot in https://github.com/apache/shiro/pull/1359
• build(deps): bump org.apache.commons:commons-configuration2 from 2.9.0 to 2.10.0 by @dependabot in https://github.com/apache/shiro/pull/1360
• build(deps): bump spring.version from 5.3.32 to 5.3.33 by @dependabot in https://github.com/apache/shiro/pull/1363
• build(deps): bump groovy.version from 4.0.19 to 4.0.20 by @dependabot in https://github.com/apache/shiro/pull/1364
• build(deps): bump actions/setup-java from 4.2.0 to 4.2.1 by @dependabot in https://github.com/apache/shiro/pull/1365
• build(deps): bump org.owasp:dependency-check-maven from 9.0.9 to 9.0.10 by @dependabot in https://github.com/apache/shiro/pull/1368
• build(deps): bump com.puppycrawl.tools:checkstyle from 10.14.1 to 10.14.2 by @dependabot in https://github.com/apache/shiro/pull/1370
• build(deps): bump actions/cache from 4.0.1 to 4.0.2 by @dependabot in https://github.com/apache/shiro/pull/1372
• build(deps): bump org.projectlombok:lombok from 1.18.30 to 1.18.32 by @dependabot in https://github.com/apache/shiro/pull/1375
• build(deps): bump org.apache.commons:commons-configuration2 from 2.10.0 to 2.10.1 by @dependabot in https://github.com/apache/shiro/pull/1379
• build(deps-dev): bump commons-logging:commons-logging from 1.3.0 to 1.3.1 by @dependabot in https://github.com/apache/shiro/pull/1386
• build(deps-dev): bump tomcat.version from 10.1.19 to 10.1.20 by @dependabot in https://github.com/apache/shiro/pull/1388
• build(deps): bump bytebuddy.version from 1.14.12 to 1.14.13 by @dependabot in https://github.com/apache/shiro/pull/1390
• build(deps): bump com.puppycrawl.tools:checkstyle from 10.14.2 to 10.15.0 by @dependabot in https://github.com/apache/shiro/pull/1394
• build(deps): bump org.owasp:dependency-check-maven from 9.0.10 to 9.1.0 by @dependabot in https://github.com/apache/shiro/pull/1395
• build(deps): bump org.htmlunit:htmlunit from 3.11.0 to 4.0.0 by @dependabot in https://github.com/apache/shiro/pull/1397
• build(deps): bump org.jacoco:jacoco-maven-plugin from 0.8.11 to 0.8.12 by @dependabot in https://github.com/apache/shiro/pull/1398
• build(deps): bump com.hazelcast:hazelcast from 5.3.6 to 5.3.7 by @dependabot in https://github.com/apache/shiro/pull/1399
• build(deps): bump groovy.version from 4.0.20 to 4.0.21 by @dependabot in https://github.com/apache/shiro/pull/1404
• build(deps): bump spring.version from 5.3.33 to 5.3.34 by @dependabot in https://github.com/apache/shiro/pull/1405
• build(deps): bump org.apache.karaf.features:framework from 4.4.5 to 4.4.6 by @dependabot in https://github.com/apache/shiro/pull/1409
• build(deps): bump slf4j.version from 2.0.12 to 2.0.13 by @dependabot in https://github.com/apache/shiro/pull/1408
• build(deps): bump org.omnifaces:omnifaces from 3.14.4 to 3.14.5 by @dependabot in https://github.com/apache/shiro/pull/1411
• build(deps): bump org.apache:apache from 31 to 32 by @dependabot in https://github.com/apache/shiro/pull/1416
• build(deps): bump actions/upload-artifact from 4.3.1 to 4.3.2 by @dependabot in https://github.com/apache/shiro/pull/1418
• build(deps): bump commons-cli:commons-cli from 1.6.0 to 1.7.0 by @dependabot in https://github.com/apache/shiro/pull/1420
• build(deps): bump actions/checkout from 4.1.2 to 4.1.3 by @dependabot in https://github.com/apache/shiro/pull/1427
• build(deps): bump actions/upload-artifact from 4.3.2 to 4.3.3 by @dependabot in https://github.com/apache/shiro/pull/1430
• build(deps): bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.20.0 to 0.21.0 by @dependabot in https://github.com/apache/shiro/pull/1433
• build(deps): bump actions/checkout from 4.1.3 to 4.1.4 by @dependabot in https://github.com/apache/shiro/pull/1434
• build(deps): bump bytebuddy.version from 1.14.13 to 1.14.14 by @dependabot in https://github.com/apache/shiro/pull/1439
• build(deps-dev): bump tomcat.version from 10.1.20 to 10.1.23 by @dependabot in https://github.com/apache/shiro/pull/1438
• deps: upgrade to Arquillian Graphene 3 by @lprimak in https://github.com/apache/shiro/pull/1440
• build(deps): bump org.apache.maven.plugins:maven-pmd-plugin from 3.21.2 to 3.22.0 by @dependabot in https://github.com/apache/shiro/pull/1441
• build(deps): bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.21.0 to 0.21.1 by @dependabot in https://github.com/apache/shiro/pull/1442
• build(deps): bump com.puppycrawl.tools:checkstyle from 10.15.0 to 10.16.0 by @dependabot in https://github.com/apache/shiro/pull/1447
• build(deps): bump org.htmlunit:htmlunit from 4.0.0 to 4.1.0 by @dependabot in https://github.com/apache/shiro/pull/1448
• build(deps): bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.21.1 to 0.21.2 by @dependabot in https://github.com/apache/shiro/pull/1456
• Dependencies: BouncyCastle 1.78.1 and Payara updates by @lprimak in https://github.com/apache/shiro/pull/1459
• build(deps-dev): bump org.bouncycastle:bcprov-jdk18on from 1.77 to 1.78.1 by @dependabot in https://github.com/apache/shiro/pull/1419
• build(deps): bump actions/checkout from 4.1.4 to 4.1.5 by @dependabot in https://github.com/apache/shiro/pull/1461
• build(deps): bump com.mycila:license-maven-plugin from 4.3 to 4.4 by @dependabot in https://github.com/apache/shiro/pull/1462
• build(deps): bump bytebuddy.version from 1.14.14 to 1.14.15 by @dependabot in https://github.com/apache/shiro/pull/1464
• build(deps): bump io.openliberty.tools:liberty-maven-plugin from 3.10.2 to 3.10.3 by @dependabot in https://github.com/apache/shiro/pull/1465
• build(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3 by @dependabot in https://github.com/apache/shiro/pull/1466
• build(deps): bump mockito.version from 5.11.0 to 5.12.0 by @dependabot in https://github.com/apache/shiro/pull/1468
• build(deps): bump com.mycila:license-maven-plugin from 4.4 to 4.5 by @dependabot in https://github.com/apache/shiro/pull/1469
• build(deps): bump org.owasp:dependency-check-maven from 9.1.0 to 9.2.0 by @dependabot in https://github.com/apache/shiro/pull/1472
• build(deps-dev): bump tomcat.version from 10.1.23 to 10.1.24 by @dependabot in https://github.com/apache/shiro/pull/1473
• build(deps-dev): bump commons-logging:commons-logging from 1.3.1 to 1.3.2 by @dependabot in https://github.com/apache/shiro/pull/1474
• build(deps): bump spring.version from 5.3.34 to 5.3.35 by @dependabot in https://github.com/apache/shiro/pull/1479
• build(deps): bump actions/checkout from 4.1.5 to 4.1.6 by @dependabot in https://github.com/apache/shiro/pull/1481
• build(deps): bump github/codeql-action from 2.13.4 to 3.25.5 by @dependabot in https://github.com/apache/shiro/pull/1480
• build(deps): bump org.codehaus.mojo:build-helper-maven-plugin from 3.5.0 to 3.6.0 by @dependabot in https://github.com/apache/shiro/pull/1483
• build(deps): bump github/codeql-action from 3.25.5 to 3.25.6 by @dependabot in https://github.com/apache/shiro/pull/1485
• build(deps): bump org.codehaus.mojo:exec-maven-plugin from 3.2.0 to 3.3.0 by @dependabot in https://github.com/apache/shiro/pull/1492
• build(deps): bump bytebuddy.version from 1.14.15 to 1.14.16 by @dependabot in https://github.com/apache/shiro/pull/1491
• build(deps): bump spring.version from 5.3.35 to 5.3.36 by @dependabot in https://github.com/apache/shiro/pull/1490
• deps: update Spring 6.x and SpringBoot 3.x by @lprimak in https://github.com/apache/shiro/pull/1494
• chore(deps): bump commons-cli:commons-cli from 1.7.0 to 1.8.0 by @dependabot in https://github.com/apache/shiro/pull/1496

New Contributors

• @timtebeek made their first contribution in https://github.com/apache/shiro/pull/1338

Full Changelog: https://github.com/apache/shiro/compare/shiro-root-2.0.0...shiro-root-2.0.1