Apache Shiro 2.0.1

What's new Highlights

• Added a supported way to decorate Shiro SecurityManager
• Better compatibility with OSGi for Jakarta EE jakarta namespace
• Fixed exception handling bugs in Jax-Rs integration module
• Fixed a bug in Jakarta Faces integration
• Better compatibility when building with Maven 4.x

Bug fixes

• [#1324] enh: added ManifestResourceTransformer to shade plugin by @lprimak in #1328
• [#1352] bugfix: made commons-configuration2 optional in shiro core by @lprimak in #1353
• [SHIRO-491] fix rendering of principal tag in panelGroup by @lprimak in #1371
• [#1383] bugfix: fix exception mapper type from registered features by @lprimak in #1384
• [SHIRO-875] Fix creating subjects with disabled session-creation by @boris-petrov in #1407
• [#1383] bugfix(jax-rs): unauthenticated vs. authorized HTTP response codes we… by @lprimak in #1487
• bugfix(tests): using JUnit's ResourceLock annotation for tests that touch… by @lprimak in #1467

Enhancements

• [SHIRO-776] refactor: JUnit5 Best Practices by @timtebeek in #1338
• deps: fix warnings found by maven 4-alpha-13 by @lprimak in #1377
• [#1424] [Enhancement] Made Jakarta EE IniEnvironment more flexible by @lprimak in #1425
• [#1424] Add generic way to decorate SecurityManager by @lprimak in #1429

Documentation enhancements

• enh: updated versions and using actual link versions for javadoc

Dependency updates

• build(deps): bump log4j.version from 2.22.1 to 2.23.0 by @dependabot in #1321
• build(deps): bump org.codehaus.mojo:exec-maven-plugin from 3.1.1 to 3.2.0 by @dependabot in #1325
• build(deps): bump io.openliberty.tools:liberty-maven-plugin from 3.10 to 3.10.1 by @dependabot in #1330
• build(deps): bump actions/setup-java from 4.0.0 to 4.1.0 by @dependabot in #1331
• build(deps): bump com.puppycrawl.tools:checkstyle from 10.13.0 to 10.14.0 by @dependabot in #1332
• build(deps): bump mockito.version from 5.10.0 to 5.11.0 by @dependabot in #1334
• build(deps): bump groovy.version from 4.0.18 to 4.0.19 by @dependabot in #1335
• build(deps): bump actions/cache from 4.0.0 to 4.0.1 by @dependabot in #1336
• build(deps): bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.18.5 to 0.19.1 by @dependabot in #1341
• build(deps): bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.19.1 to 0.20.0 by @dependabot in #1342
• build(deps): bump log4j.version from 2.23.0 to 2.23.1 by @dependabot in #1349
• build(deps): bump com.puppycrawl.tools:checkstyle from 10.14.0 to 10.14.1 by @dependabot in #1350
• build(deps): bump actions/checkout from 4.1.1 to 4.1.2 by @dependabot in #1354
• build(deps): bump io.openliberty.tools:liberty-maven-plugin from 3.10.1 to 3.10.2 by @dependabot in #1355
• build(deps): bump actions/setup-java from 4.1.0 to 4.2.0 by @dependabot in #1358
• build(deps-dev): bump org.apache.cxf:cxf-rt-frontend-jaxrs from 3.6.2 to 3.6.3 by @dependabot in #1361
• build(deps): bump org.apache.cxf:cxf-rt-rs-client from 3.6.2 to 3.6.3 by @dependabot in #1359
• build(deps): bump org.apache.commons:commons-configuration2 from 2.9.0 to 2.10.0 by @dependabot in #1360
• build(deps): bump spring.version from 5.3.32 to 5.3.33 by @dependabot in #1363
• build(deps): bump groovy.version from 4.0.19 to 4.0.20 by @dependabot in #1364
• build(deps): bump actions/setup-java from 4.2.0 to 4.2.1 by @dependabot in #1365
• build(deps): bump org.owasp:dependency-check-maven from 9.0.9 to 9.0.10 by @dependabot in #1368
• build(deps): bump com.puppycrawl.tools:checkstyle from 10.14.1 to 10.14.2 by @dependabot in #1370
• build(deps): bump actions/cache from 4.0.1 to 4.0.2 by @dependabot in #1372
• build(deps): bump org.projectlombok:lombok from 1.18.30 to 1.18.32 by @dependabot in #1375
• build(deps): bump org.apache.commons:commons-configuration2 from 2.10.0 to 2.10.1 by @dependabot in #1379
• build(deps-dev): bump commons-logging:commons-logging from 1.3.0 to 1.3.1 by @dependabot in #1386
• build(deps-dev): bump tomcat.version from 10.1.19 to 10.1.20 by @dependabot in #1388
• build(deps): bump bytebuddy.version from 1.14.12 to 1.14.13 by @dependabot in #1390
• build(deps): bump com.puppycrawl.tools:checkstyle from 10.14.2 to 10.15.0 by @dependabot in #1394
• build(deps): bump org.owasp:dependency-check-maven from 9.0.10 to 9.1.0 by @dependabot in #1395
• build(deps): bump org.htmlunit:htmlunit from 3.11.0 to 4.0.0 by @dependabot in #1397
• build(deps): bump org.jacoco:jacoco-maven-plugin from 0.8.11 to 0.8.12 by @dependabot in #1398
• build(deps): bump com.hazelcast:hazelcast from 5.3.6 to 5.3.7 by @dependabot in #1399
• build(deps): bump groovy.version from 4.0.20 to 4.0.21 by @dependabot in #1404
• build(deps): bump spring.version from 5.3.33 to 5.3.34 by @dependabot in #1405
• build(deps): bump org.apache.karaf.features:framework from 4.4.5 to 4.4.6 by @dependabot in #1409
• build(deps): bump slf4j.version from 2.0.12 to 2.0.13 by @dependabot in #1408
• build(deps): bump org.omnifaces:omnifaces from 3.14.4 to 3.14.5 by @dependabot in #1411
• build(deps): bump org.apache:apache from 31 to 32 by @dependabot in #1416
• build(deps): bump actions/upload-artifact from 4.3.1 to 4.3.2 by @dependabot in #1418
• build(deps): bump commons-cli:commons-cli from 1.6.0 to 1.7.0 by @dependabot in #1420
• build(deps): bump actions/checkout from 4.1.2 to 4.1.3 by @dependabot in #1427
• build(deps): bump actions/upload-artifact from 4.3.2 to 4.3.3 by @dependabot in #1430
• build(deps): bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.20.0 to 0.21.0 by @dependabot in #1433
• build(deps): bump actions/checkout from 4.1.3 to 4.1.4 by @dependabot in #1434
• build(deps): bump bytebuddy.version from 1.14.13 to 1.14.14 by @dependabot in #1439
• build(deps-dev): bump tomcat.version from 10.1.20 to 10.1.23 by @dependabot in #1438
• deps: upgrade to Arquillian Graphene 3 by @lprimak in #1440
• build(deps): bump org.apache.maven.plugins:maven-pmd-plugin from 3.21.2 to 3.22.0 by @dependabot in #1441
• build(deps): bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.21.0 to 0.21.1 by @dependabot in #1442
• build(deps): bump com.puppycrawl.tools:checkstyle from 10.15.0 to 10.16.0 by @dependabot in #1447
• build(deps): bump org.htmlunit:htmlunit from 4.0.0 to 4.1.0 by @dependabot in #1448
• build(deps): bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.21.1 to 0.21.2 by @dependabot in #1456
• Dependencies: BouncyCastle 1.78.1 and Payara updates by @lprimak in #1459
• build(deps-dev): bump org.bouncycastle:bcprov-jdk18on from 1.77 to 1.78.1 by @dependabot in #1419
• build(deps): bump actions/checkout from 4.1.4 to 4.1.5 by @dependabot in #1461
• build(deps): bump com.mycila:license-maven-plugin from 4.3 to 4.4 by @dependabot in #1462
• build(deps): bump bytebuddy.version from 1.14.14 to 1.14.15 by @dependabot in #1464
• build(deps): bump io.openliberty.tools:liberty-maven-plugin from 3.10.2 to 3.10.3 by @dependabot in #1465
• build(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3 by @dependabot in #1466
• build(deps): bump mockito.version from 5.11.0 to 5.12.0 by @dependabot in #1468
• build(deps): bump com.mycila:license-maven-plugin from 4.4 to 4.5 by @dependabot in #1469
• build(deps): bump org.owasp:dependency-check-maven from 9.1.0 to 9.2.0 by @dependabot in #1472
• build(deps-dev): bump tomcat.version from 10.1.23 to 10.1.24 by @dependabot in #1473
• build(deps-dev): bump commons-logging:commons-logging from 1.3.1 to 1.3.2 by @dependabot in #1474
• build(deps): bump spring.version from 5.3.34 to 5.3.35 by @dependabot in #1479
• build(deps): bump actions/checkout from 4.1.5 to 4.1.6 by @dependabot in #1481
• build(deps): bump github/codeql-action from 2.13.4 to 3.25.5 by @dependabot in #1480
• build(deps): bump org.codehaus.mojo:build-helper-maven-plugin from 3.5.0 to 3.6.0 by @dependabot in #1483
• build(deps): bump github/codeql-action from 3.25.5 to 3.25.6 by @dependabot in #1485
• build(deps): bump org.codehaus.mojo:exec-maven-plugin from 3.2.0 to 3.3.0 by @dependabot in #1492
• build(deps): bump bytebuddy.version from 1.14.15 to 1.14.16 by @dependabot in #1491
• build(deps): bump spring.version from 5.3.35 to 5.3.36 by @dependabot in #1490
• deps: update Spring 6.x and SpringBoot 3.x by @lprimak in #1494
• chore(deps): bump commons-cli:commons-cli from 1.7.0 to 1.8.0 by @dependabot in #1496

New Contributors

• @timtebeek made their first contribution in #1338

Full Changelog: shiro-root-2.0.0...shiro-root-2.0.1