4.385.v4dea_91565e9d

🚀 New features and improvements

• feat: support random generated relayState parameter (#299) @kuisathaverat

👻 Maintenance

• Remove unnecessary SpotBugs exclusion (#295) @basil

✍ Other changes

• Refresh plugin (#291) @basil
• chore(deps): bump bom-2.361.x from 1654.vcb_69d035fa_20 to 1670.v7f165fc7a_079 (#287) @dependabot

📦 Dependency updates

• chore(deps): bump actions/dependency-review-action from 2 to 3 (#290) @dependabot
• chore(deps): bump bom-2.361.x from 1723.vcb_9fee52c9fc to 1742.vb_70478c1b_25f (#298) @dependabot
• chore(deps): bump plugin from 4.51 to 4.53 (#300) @dependabot
• chore(deps): bump bom-2.361.x from 1706.vc166d5f429f8 to 1723.vcb_9fee52c9fc (#296) @dependabot
• chore(deps): bump plugin from 4.50 to 4.51 (#294) @dependabot
• chore(deps): bump bom-2.361.x from 1678.vc1feb_6a_3c0f1 to 1706.vc166d5f429f8 (#292) @dependabot
• chore(deps-dev): bump testcontainers from 1.17.5 to 1.17.6 (#293) @dependabot
• chore(deps): bump bom-2.361.x from 1670.v7f165fc7a_079 to 1678.vc1feb_6a_3c0f1 (#288) @dependabot
• chore(deps): bump plugin from 4.48 to 4.49 (#286) @dependabot

4.372.v89f13e4c9e97

🐛 Bug fixes

• JENKINS-69958 - Properly overload the loadGroupByGroupname2 to fix er… (#283) @Dohbedoh
• fix: metadata endpoint should be public (#284) @viceice

📦 Dependency updates

• chore(deps): bump bom-2.361.x from 1643.v1cffef51df73 to 1654.vcb_69d035fa_20 (#282) @dependabot

4.369.v13507586ef8c

🐛 Bug fixes

• JENKINS-69930 - NullPointerException from getUseDiskCache in SAML plugin (#280) @kuisathaverat
• JENKINS-69932 - Log in: This URL requires POST (#281) @kuisathaverat

4.367.v4f342c34459a

⚠️ Known issues

• ⚠️ JENKINS-69930 NullPointerException from getUseDiskCache in SAML plugin
• ⚠️ JENKINS-69932 Log in: This URL requires POST

🐛 Bug fixes

• fix: change to use XMLUtils to process IdP Metadata (#279) @kuisathaverat

📦 Dependency updates

• chore(deps): bump xmlsec from 3.0.0 to 3.0.1 (#267) @dependabot

4.365.v56110e68e1b_8

⚠️ Known issues

• ⚠️ JENKINS-69930 NullPointerException from getUseDiskCache in SAML plugin
• ⚠️ JENKINS-69932 Log in: This URL requires POST

🐛 Bug fixes

• fix: Stapler: Missing permission check (#278) @kuisathaverat

4.364.veddefb_8dc0ea

⚠️ Known issues

• ⚠️ JENKINS-69930 NullPointerException from getUseDiskCache in SAML plugin
• ⚠️ JENKINS-69932 Log in: This URL requires POST

🐛 Bug fixes

• fix: Stapler: Missing POST/RequirePOST annotation (#277) @kuisathaverat

4.363.v6cc620b_d37a_2

⚠️ Known issues

• ⚠️ JENKINS-69930 NullPointerException from getUseDiskCache in SAML plugin

🚀 New features and improvements

• JENKINS-61747 - Do not write the SP metadata with every login (#98) @kuisathaverat

🐛 Bug fixes

• fix: disable external entities resolution (#276) @kuisathaverat

4.361.v79b_c2d76d2b_b

🐛 Bug fixes

• JENKINS-69898 - saml plugin affected by CVE -2022-42003;42004 (#275) @kuisathaverat

📦 Dependency updates

• JENKINS-69898 - saml plugin affected by CVE -2022-42003;42004 (#275) @kuisathaverat
• chore(deps): bump bom-2.361.x from 1607.va_c1576527071 to 1643.v1cffef51df73 (#274) @dependabot
• chore(deps-dev): bump testcontainers from 1.17.4 to 1.17.5 (#273) @dependabot
• chore(deps): bump plugin from 4.47 to 4.48 (#272) @dependabot
• chore(deps-dev): bump testcontainers from 1.17.3 to 1.17.4 (#270) @dependabot

4.354.vdc8c005cda_34

🚀 New features and improvements

• feat: Tolerate missing SAML response Destination attribute (#268) @kuisathaverat

📝 Documentation updates

• docs: add Sign Out URL (#265) @kuisathaverat

4.352.vb_722786ea_79d

💥 Breaking changes

• break: remove deprecated fields (#262) @kuisathaverat
  If you cobfigured the following fields in the version 0.14< you have to update to the last version compatible 3.343.vb_63a_6c3df23c and save the Security configuration before update to 4.352.vb_722786ea_79d:
  • SamlAdvancedConfiguration.maximumSessionLifetime
  • SamlEncryptionData.keystorePassword
  • SamlEncryptionData.privateKeyPassword

🚀 New features and improvements

• Update pac4j to 5.2.0 (#257) @Riliane

📝 Documentation updates

• docs: troubleshooting for 'HTTP ERROR 403 No valid crumb was included in the request' errors (#263) @kuisathaverat
• docs: fix typos and grammar (#259) @kuisathaverat

👻 Maintenance

• feat: update the plugin to use Spring framework classes (#261) @kuisathaverat
• fix: code warnings (#260) @kuisathaverat
• docs: fix typos and grammar (#259) @kuisathaverat

✍ Other changes

• Fix LiveTest (#264) @Vlatombe
• Use optionalProperty from core (#212) @Vlatombe

📦 Dependency updates

• Bump bom-2.361.x from 1595.v8c71c13cc3a_9 to 1607.va_c1576527071 (#258) @dependabot