Update vendir https://github.com/cloudfoundry/uaa to v77

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
https://github.com/cloudfoundry/uaa	GitSource	major	v76.31.0 -> v77.33.0

---

Release Notes

cloudfoundry/uaa (https://github.com/cloudfoundry/uaa)

v77.33.0: 77.33.0

Compare Source

What's Changed

Misc

• Replace org.springframework.util.StringUtils.isEmpty by @​strehle in https://github.com/cloudfoundry/uaa/pull/3443
• XML Removal by @​fhanik in https://github.com/cloudfoundry/uaa/pull/3436
• Sonar improvement by @​strehle in https://github.com/cloudfoundry/uaa/pull/3448
• Refactor deprecate String.Format by @​strehle in https://github.com/cloudfoundry/uaa/pull/3444
• Replace deprecate from Spring Framework by @​strehle in https://github.com/cloudfoundry/uaa/pull/3446
• Refactor [tests only] deprecated query for object by @​strehle in https://github.com/cloudfoundry/uaa/pull/3449
• Refactor (prepare) before Spring Update by @​strehle in https://github.com/cloudfoundry/uaa/pull/3445
• Add constructor to InvalidRequestException by @​alexnik99 in https://github.com/cloudfoundry/uaa/pull/3455

Fixes

• Fix SAML authentication by @​strehle in https://github.com/cloudfoundry/uaa/pull/3439
• Fix setup integration test by @​strehle in https://github.com/cloudfoundry/uaa/pull/3456
• Fix client authentication before spring security 6x by @​strehle in https://github.com/cloudfoundry/uaa/pull/3458
• disable state in pool by @​strehle in https://github.com/cloudfoundry/uaa/pull/3442

Dependency Bumps

• build(deps): bump versions.seleniumVersion from 4.31.0 to 4.32.0 by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3441
• build(deps): bump versions.tomcatCargoVersion from 9.0.104 to 9.0.105 by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3462
• build(deps): bump rack from 2.2.13 to 2.2.14 in /uaa/slate by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3452

New Contributors

• @​alexnik99 made their first contribution in https://github.com/cloudfoundry/uaa/pull/3455

Full Changelog: cloudfoundry/uaa@v77.32.0...v77.33.0

v77.33.0: 77.33.0

Compare Source

What's Changed

Misc

• Replace org.springframework.util.StringUtils.isEmpty by @​strehle in https://github.com/cloudfoundry/uaa/pull/3443
• XML Removal by @​fhanik in https://github.com/cloudfoundry/uaa/pull/3436
• Sonar improvement by @​strehle in https://github.com/cloudfoundry/uaa/pull/3448
• Refactor deprecate String.Format by @​strehle in https://github.com/cloudfoundry/uaa/pull/3444
• Replace deprecate from Spring Framework by @​strehle in https://github.com/cloudfoundry/uaa/pull/3446
• Refactor [tests only] deprecated query for object by @​strehle in https://github.com/cloudfoundry/uaa/pull/3449
• Refactor (prepare) before Spring Update by @​strehle in https://github.com/cloudfoundry/uaa/pull/3445
• Add constructor to InvalidRequestException by @​alexnik99 in https://github.com/cloudfoundry/uaa/pull/3455

Fixes

• Fix SAML authentication by @​strehle in https://github.com/cloudfoundry/uaa/pull/3439
• Fix setup integration test by @​strehle in https://github.com/cloudfoundry/uaa/pull/3456
• Fix client authentication before spring security 6x by @​strehle in https://github.com/cloudfoundry/uaa/pull/3458
• disable state in pool by @​strehle in https://github.com/cloudfoundry/uaa/pull/3442

Dependency Bumps

• build(deps): bump versions.seleniumVersion from 4.31.0 to 4.32.0 by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3441
• build(deps): bump versions.tomcatCargoVersion from 9.0.104 to 9.0.105 by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3462
• build(deps): bump rack from 2.2.13 to 2.2.14 in /uaa/slate by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3452

New Contributors

• @​alexnik99 made their first contribution in https://github.com/cloudfoundry/uaa/pull/3455

Full Changelog: cloudfoundry/uaa@v77.32.0...v77.33.0

v77.32.0: 77.32.0

Compare Source

What's Changed

Misc

• Remove spring-ldap-core-tiger by @​gdgenchev in https://github.com/cloudfoundry/uaa/pull/3406
• spring-servlet.xml - removal of XML by @​fhanik in https://github.com/cloudfoundry/uaa/pull/3412
• Revert "spring-servlet.xml - removal of XML" by @​fhanik in https://github.com/cloudfoundry/uaa/pull/3431
• XML removal - final stage by @​fhanik in https://github.com/cloudfoundry/uaa/pull/3433
• Revert "XML removal - final stage" by @​fhanik in https://github.com/cloudfoundry/uaa/pull/3435

Fixes

• Exclude SAML Key from toString by @​duanemay in https://github.com/cloudfoundry/uaa/pull/3419
• fix SAML IdP initiated SSO by @​strehle in https://github.com/cloudfoundry/uaa/pull/3428
• Fix duplicate bean definition of rest templates -Alternative to PR https://github.com/cloudfoundry/uaa/pull/3430 by @​strehle in https://github.com/cloudfoundry/uaa/pull/3434
• Fix for CVE-2025-22246

Dependency Bumps

• build(deps): bump com.nimbusds:nimbus-jose-jwt from 10.1 to 10.2 by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3390
• build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 in /k8s by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3407
• build(deps): bump k8s.io/client-go from 0.32.3 to 0.32.4 in /k8s by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3415
• build(deps): bump nokogiri from 1.18.4 to 1.18.8 in /uaa/slate by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3409
• Bump gradle to 8.14 by @​duanemay in https://github.com/cloudfoundry/uaa/pull/3421
• build(deps): bump k8s.io/client-go from 0.32.4 to 0.33.0 in /k8s by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3418
• build(deps): bump versions.jacksonVersion from 2.18.3 to 2.19.0 by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3420
• build(deps): bump versions.braveVersion from 6.1.0 to 6.2.0 by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3424
• build(deps): bump jasmine from 5.6.0 to 5.7.0 in /uaa by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3425
• build(deps): bump jasmine-core from 5.6.0 to 5.7.0 in /uaa by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3426
• build(deps): bump jasmine-core from 5.7.0 to 5.7.1 in /uaa by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3437
• build(deps): bump jasmine from 5.7.0 to 5.7.1 in /uaa by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3438

New Contributors

• @​gdgenchev made their first contribution in https://github.com/cloudfoundry/uaa/pull/3406

Full Changelog: cloudfoundry/uaa@v77.31.0...v77.32.0

v77.32.0: 77.32.0

Compare Source

What's Changed

Misc

• Remove spring-ldap-core-tiger by @​gdgenchev in https://github.com/cloudfoundry/uaa/pull/3406
• spring-servlet.xml - removal of XML by @​fhanik in https://github.com/cloudfoundry/uaa/pull/3412
• Revert "spring-servlet.xml - removal of XML" by @​fhanik in https://github.com/cloudfoundry/uaa/pull/3431
• XML removal - final stage by @​fhanik in https://github.com/cloudfoundry/uaa/pull/3433
• Revert "XML removal - final stage" by @​fhanik in https://github.com/cloudfoundry/uaa/pull/3435

Fixes

• Exclude SAML Key from toString by @​duanemay in https://github.com/cloudfoundry/uaa/pull/3419
• fix SAML IdP initiated SSO by @​strehle in https://github.com/cloudfoundry/uaa/pull/3428
• Fix duplicate bean definition of rest templates -Alternative to PR https://github.com/cloudfoundry/uaa/pull/3430 by @​strehle in https://github.com/cloudfoundry/uaa/pull/3434
• Fix for CVE-2025-22246

Dependency Bumps

• build(deps): bump com.nimbusds:nimbus-jose-jwt from 10.1 to 10.2 by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3390
• build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 in /k8s by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3407
• build(deps): bump k8s.io/client-go from 0.32.3 to 0.32.4 in /k8s by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3415
• build(deps): bump nokogiri from 1.18.4 to 1.18.8 in /uaa/slate by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3409
• Bump gradle to 8.14 by @​duanemay in https://github.com/cloudfoundry/uaa/pull/3421
• build(deps): bump k8s.io/client-go from 0.32.4 to 0.33.0 in /k8s by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3418
• build(deps): bump versions.jacksonVersion from 2.18.3 to 2.19.0 by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3420
• build(deps): bump versions.braveVersion from 6.1.0 to 6.2.0 by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3424
• build(deps): bump jasmine from 5.6.0 to 5.7.0 in /uaa by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3425
• build(deps): bump jasmine-core from 5.6.0 to 5.7.0 in /uaa by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3426
• build(deps): bump jasmine-core from 5.7.0 to 5.7.1 in /uaa by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3437
• build(deps): bump jasmine from 5.7.0 to 5.7.1 in /uaa by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3438

New Contributors

• @​gdgenchev made their first contribution in https://github.com/cloudfoundry/uaa/pull/3406

Full Changelog: cloudfoundry/uaa@v77.31.0...v77.32.0

v77.31.0: 77.31.0

Compare Source

What's Changed

Misc

• Move login-server.xml to java-config by @​Kehrlann in https://github.com/cloudfoundry/uaa/pull/3388

Fixes

• Fix #​3349 by @​fhanik in https://github.com/cloudfoundry/uaa/pull/3389
• fix: allow external group names with quotes by @​mikeroda in https://github.com/cloudfoundry/uaa/pull/3372
• fix class cast issue by @​strehle in https://github.com/cloudfoundry/uaa/pull/3380
• import cleanup by @​strehle in https://github.com/cloudfoundry/uaa/pull/3402

Fixes (tests)

• selenium tests: logout fix by @​strehle in https://github.com/cloudfoundry/uaa/pull/3394
• add wait in OIDC and SAML by @​strehle in https://github.com/cloudfoundry/uaa/pull/3397
• more waits before next UI step by @​strehle in https://github.com/cloudfoundry/uaa/pull/3398
• refactor home login by @​strehle in https://github.com/cloudfoundry/uaa/pull/3399
• Add more checks and indirect waits to get known state by @​strehle in https://github.com/cloudfoundry/uaa/pull/3400
• fix correct usage [TESTS ONLY] by @​strehle in https://github.com/cloudfoundry/uaa/pull/3404

Dependency Bumps

• Bump snakeyaml from 2.3 to v2.4 by @​strehle in https://github.com/cloudfoundry/uaa/pull/3379
• build(deps): bump org.jacoco:org.jacoco.agent from 0.8.12 to 0.8.13 by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3382
• build(deps): bump github.com/onsi/gomega from 1.36.3 to 1.37.0 in /k8s by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3383
• build(deps): bump com.nimbusds:nimbus-jose-jwt from 10.0.2 to 10.1 by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3381
• build(deps): bump versions.seleniumVersion from 4.30.0 to 4.31.0 by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3385
• build(deps): bump versions.tomcatCargoVersion from 9.0.102 to 9.0.104 by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3392
• build(deps): bump versions.guavaVersion from 33.4.6-jre to 33.4.7-jre by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3391
• build(deps): bump org.apache.commons:commons-text from 1.13.0 to 1.13.1 by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3396
• build(deps): bump org.apache.santuario:xmlsec from 4.0.3 to 4.0.4 by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3395
• build(deps): bump commons-io:commons-io from 2.18.0 to 2.19.0 by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3403
• build(deps): bump versions.guavaVersion from 33.4.7-jre to 33.4.8-jre by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3405

Full Changelog: cloudfoundry/uaa@v77.30.0...v77.31.0

v77.31.0: 77.31.0

Compare Source

What's Changed

Misc

• Move login-server.xml to java-config by @​Kehrlann in https://github.com/cloudfoundry/uaa/pull/3388

Fixes

• Fix #​3349 by @​fhanik in https://github.com/cloudfoundry/uaa/pull/3389
• fix: allow external group names with quotes by @​mikeroda in https://github.com/cloudfoundry/uaa/pull/3372
• fix class cast issue by @​strehle in https://github.com/cloudfoundry/uaa/pull/3380
• import cleanup by @​strehle in https://github.com/cloudfoundry/uaa/pull/3402

Fixes (tests)

• selenium tests: logout fix by @​strehle in https://github.com/cloudfoundry/uaa/pull/3394
• add wait in OIDC and SAML by @​strehle in https://github.com/cloudfoundry/uaa/pull/3397
• more waits before next UI step by @​strehle in https://github.com/cloudfoundry/uaa/pull/3398
• refactor home login by @​strehle in https://github.com/cloudfoundry/uaa/pull/3399
• Add more checks and indirect waits to get known state by @​strehle in https://github.com/cloudfoundry/uaa/pull/3400
• fix correct usage [TESTS ONLY] by @​strehle in https://github.com/cloudfoundry/uaa/pull/3404

Dependency Bumps

• Bump snakeyaml from 2.3 to v2.4 by @​strehle in https://github.com/cloudfoundry/uaa/pull/3379
• build(deps): bump org.jacoco:org.jacoco.agent from 0.8.12 to 0.8.13 by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3382
• build(deps): bump github.com/onsi/gomega from 1.36.3 to 1.37.0 in /k8s by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3383
• build(deps): bump com.nimbusds:nimbus-jose-jwt from 10.0.2 to 10.1 by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3381
• build(deps): bump versions.seleniumVersion from 4.30.0 to 4.31.0 by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3385
• build(deps): bump versions.tomcatCargoVersion from 9.0.102 to 9.0.104 by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3392
• build(deps): bump versions.guavaVersion from 33.4.6-jre to 33.4.7-jre by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3391
• build(deps): bump org.apache.commons:commons-text from 1.13.0 to 1.13.1 by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3396
• build(deps): bump org.apache.santuario:xmlsec from 4.0.3 to 4.0.4 by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3395
• build(deps): bump commons-io:commons-io from 2.18.0 to 2.19.0 by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3403
• build(deps): bump versions.guavaVersion from 33.4.7-jre to 33.4.8-jre by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3405

Full Changelog: cloudfoundry/uaa@v77.30.0...v77.31.0

v77.30.0: 77.30.0

Compare Source

What's Changed

Fixes

• fix: accept application/jwk-set+json when fetching JWKs by @​mikeroda in https://github.com/cloudfoundry/uaa/pull/3365
• fix cast exception with login_hint to /login by @​strehle in https://github.com/cloudfoundry/uaa/pull/3368
• fix saml validation and allow again only encrypted assertions by @​strehle in https://github.com/cloudfoundry/uaa/pull/3361
• fix federated credential administration by @​strehle in https://github.com/cloudfoundry/uaa/pull/3377
• Remove response X-XSS-Protection header by @​strehle in https://github.com/cloudfoundry/uaa/pull/3362

Misc

• Move multitenant-endpoints.xml to javaconfig by @​Kehrlann in https://github.com/cloudfoundry/uaa/pull/3355
• remove oauth-endpoints.xml by @​fhanik in https://github.com/cloudfoundry/uaa/pull/3364

Dependency Bumps

• build(deps): bump nokogiri from 1.18.3 to 1.18.4 in /uaa/slate by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3367
• build(deps): bump versions.seleniumVersion from 4.29.0 to 4.30.0 by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3369
• build(deps): bump github.com/onsi/gomega from 1.36.2 to 1.36.3 in /k8s by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3371
• build(deps): bump org.sonarsource.scanner.gradle:sonarqube-gradle-plugin from 6.0.1.5171 to 6.1.0.5360 by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3373
• build(deps): bump org.eclipse.jgit:org.eclipse.jgit from 7.1.0.202411261347-r to 7.2.0.202503040940-r by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3359
• build(deps): bump versions.guavaVersion from 33.4.0-jre to 33.4.5-jre by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3358
• build(deps): bump versions.guavaVersion from 33.4.5-jre to 33.4.6-jre by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3375
• build(deps): bump joda-time:joda-time from 2.13.1 to 2.14.0 by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3378

Full Changelog: cloudfoundry/uaa@v77.29.0...v77.30.0

v77.30.0: 77.30.0

Compare Source

What's Changed

Fixes

• fix: accept application/jwk-set+json when fetching JWKs by @​mikeroda in https://github.com/cloudfoundry/uaa/pull/3365
• fix cast exception with login_hint to /login by @​strehle in https://github.com/cloudfoundry/uaa/pull/3368
• fix saml validation and allow again only encrypted assertions by @​strehle in https://github.com/cloudfoundry/uaa/pull/3361
• fix federated credential administration by @​strehle in https://github.com/cloudfoundry/uaa/pull/3377
• Remove response X-XSS-Protection header by @​strehle in https://github.com/cloudfoundry/uaa/pull/3362

Misc

• Move multitenant-endpoints.xml to javaconfig by @​Kehrlann in https://github.com/cloudfoundry/uaa/pull/3355
• remove oauth-endpoints.xml by @​fhanik in https://github.com/cloudfoundry/uaa/pull/3364

Dependency Bumps

• build(deps): bump nokogiri from 1.18.3 to 1.18.4 in /uaa/slate by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3367
• build(deps): bump versions.seleniumVersion from 4.29.0 to 4.30.0 by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3369
• build(deps): bump github.com/onsi/gomega from 1.36.2 to 1.36.3 in /k8s by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3371
• build(deps): bump org.sonarsource.scanner.gradle:sonarqube-gradle-plugin from 6.0.1.5171 to 6.1.0.5360 by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3373
• build(deps): bump org.eclipse.jgit:org.eclipse.jgit from 7.1.0.202411261347-r to 7.2.0.202503040940-r by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3359
• build(deps): bump versions.guavaVersion from 33.4.0-jre to 33.4.5-jre by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3358
• build(deps): bump versions.guavaVersion from 33.4.5-jre to 33.4.6-jre by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3375
• build(deps): bump joda-time:joda-time from 2.13.1 to 2.14.0 by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3378

Full Changelog: cloudfoundry/uaa@v77.29.0...v77.30.0

v77.29.0: 77.29.0

Compare Source

What's Changed

Fixes

• fix: Jwt Bearer should be able to return id_token by @​strehle in https://github.com/cloudfoundry/uaa/pull/3344
• Integration tests: add an option for the web driver to click and wait for a page reload by @​Kehrlann in https://github.com/cloudfoundry/uaa/pull/3330
• Improve UaaWebDriver#clickAndWait by @​Kehrlann in https://github.com/cloudfoundry/uaa/pull/3336

Feature

• Proxy jwt bearer to support corporate trust by @​strehle in https://github.com/cloudfoundry/uaa/pull/3309
• feature test: JWT bearer across zones by @​strehle in https://github.com/cloudfoundry/uaa/pull/3348

Misc

• scim beans to java config by @​fhanik in https://github.com/cloudfoundry/uaa/pull/3310
• Revert "Fix cargo local with Tomcat 9.0.100" by @​strehle in https://github.com/cloudfoundry/uaa/pull/3325
• Move login-ui.xml to java config, second part by @​Kehrlann in https://github.com/cloudfoundry/uaa/pull/3316
• remove identity-zones.xml by @​Kehrlann in https://github.com/cloudfoundry/uaa/pull/3326
• Move codestore-endpints endpoints javaconfig by @​Kehrlann in https://github.com/cloudfoundry/uaa/pull/3337
• Move /userinfo endpoint to java config by @​Kehrlann in https://github.com/cloudfoundry/uaa/pull/3339
• Move /oauth/clients/** filter chains to java configuration by @​Kehrlann in https://github.com/cloudfoundry/uaa/pull/3350
• resource-endpoints.xml to java config by @​fhanik in https://github.com/cloudfoundry/uaa/pull/3343
• move approvalsSecurity filterchain to java by @​fhanik in https://github.com/cloudfoundry/uaa/pull/3345
• remove authentication.xml by @​Kehrlann in https://github.com/cloudfoundry/uaa/pull/3334
• replace Spring Security filters in scim-endpoints.xml by @​fhanik in https://github.com/cloudfoundry/uaa/pull/3329
• Remove the rate limiter filter from the resource-endpoints.xml by @​fhanik in https://github.com/cloudfoundry/uaa
• Create client with jwt bearer with empty secret by @​strehle in https://github.com/cloudfoundry/uaa/pull/3301

Dependency Bumps

• build(deps): bump versions.tomcatCargoVersion from 9.0.100 to 9.0.102 by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3324
• build(deps): bump rack from 2.2.12 to 2.2.13 in /uaa/slate by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3332
• build(deps): bump k8s.io/client-go from 0.32.2 to 0.32.3 in /k8s by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3342
  /pull/3338
• build(deps): bump golang.org/x/net from 0.33.0 to 0.36.0 in /k8s by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3346

Full Changelog: cloudfoundry/uaa@v77.28.0...v77.29.0

v77.29.0: 77.29.0

Compare Source

What's Changed

Fixes

• fix: Jwt Bearer should be able to return id_token by @​strehle in https://github.com/cloudfoundry/uaa/pull/3344
• Integration tests: add an option for the web driver to click and wait for a page reload by @​Kehrlann in https://github.com/cloudfoundry/uaa/pull/3330
• Improve UaaWebDriver#clickAndWait by @​Kehrlann in https://github.com/cloudfoundry/uaa/pull/3336

Feature

• Proxy jwt bearer to support corporate trust by @​strehle in https://github.com/cloudfoundry/uaa/pull/3309
• feature test: JWT bearer across zones by @​strehle in https://github.com/cloudfoundry/uaa/pull/3348

Misc

• scim beans to java config by @​fhanik in https://github.com/cloudfoundry/uaa/pull/3310
• Revert "Fix cargo local with Tomcat 9.0.100" by @​strehle in https://github.com/cloudfoundry/uaa/pull/3325
• Move login-ui.xml to java config, second part by @​Kehrlann in https://github.com/cloudfoundry/uaa/pull/3316
• remove identity-zones.xml by @​Kehrlann in https://github.com/cloudfoundry/uaa/pull/3326
• Move codestore-endpints endpoints javaconfig by @​Kehrlann in https://github.com/cloudfoundry/uaa/pull/3337
• Move /userinfo endpoint to java config by @​Kehrlann in https://github.com/cloudfoundry/uaa/pull/3339
• Move /oauth/clients/** filter chains to java configuration by @​Kehrlann in https://github.com/cloudfoundry/uaa/pull/3350
• resource-endpoints.xml to java config by @​fhanik in https://github.com/cloudfoundry/uaa/pull/3343
• move approvalsSecurity filterchain to java by @​fhanik in https://github.com/cloudfoundry/uaa/pull/3345
• remove authentication.xml by @​Kehrlann in https://github.com/cloudfoundry/uaa/pull/3334
• replace Spring Security filters in scim-endpoints.xml by @​fhanik in https://github.com/cloudfoundry/uaa/pull/3329
• Remove the rate limiter filter from the resource-endpoints.xml by @​fhanik in https://github.com/cloudfoundry/uaa
• Create client with jwt bearer with empty secret by @​strehle in https://github.com/cloudfoundry/uaa/pull/3301

Dependency Bumps

• build(deps): bump versions.tomcatCargoVersion from 9.0.100 to 9.0.102 by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3324
• build(deps): bump rack from 2.2.12 to 2.2.13 in /uaa/slate by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3332
• build(deps): bump k8s.io/client-go from 0.32.2 to 0.32.3 in /k8s by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3342
  /pull/3338
• build(deps): bump golang.org/x/net from 0.33.0 to 0.36.0 in /k8s by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3346

Full Changelog: cloudfoundry/uaa@v77.28.0...v77.29.0

v77.28.0: 77.28.0

Compare Source

What's Changed

Fixes

• fix regression from release before with passcode prompt for json responses by @​strehle in https://github.com/cloudfoundry/uaa/pull/3323

Dependency Bumps

• build(deps): bump versions.jacksonVersion from 2.18.2 to 2.18.3 by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3320
• build(deps): bump rack from 2.2.11 to 2.2.12 in /uaa/slate by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3322

Full Changelog: cloudfoundry/uaa@v77.27.0...v77.28.0

v77.28.0: 77.28.0

Compare Source

What's Changed

Fixes

• fix regression from release before with passcode prompt for json responses by @​strehle in https://github.com/cloudfoundry/uaa/pull/3323

Dependency Bumps

• build(deps): bump versions.jacksonVersion from 2.18.2 to 2.18.3 by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3320
• build(deps): bump rack from 2.2.11 to 2.2.12 in /uaa/slate by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3322

Full Changelog: cloudfoundry/uaa@v77.27.0...v77.28.0

v77.27.0: 77.27.0

Compare Source

What's Changed

Fixes

• Login Info Endpoint: optimize OAuth IdPs for JSON Response by @​adrianhoelzl-sap in https://github.com/cloudfoundry/uaa/pull/3254
• Fix tail_uaa_log by @​duanemay in https://github.com/cloudfoundry/uaa/pull/3294
• Fix cargo local with Tomcat 9.0.100 by @​Kehrlann in https://github.com/cloudfoundry/uaa/pull/3313
• refactor: show client jwt configuration by @​strehle in https://github.com/cloudfoundry/uaa/pull/3302

Misc

• Move login-ui.xml to java configuration by @​Kehrlann in https://github.com/cloudfoundry/uaa/pull/3262
• Remove experimental status by @​strehle in https://github.com/cloudfoundry/uaa/pull/3287
• Add jwt bearer to cf client by @​strehle in https://github.com/cloudfoundry/uaa/pull/3307

Dependency Bumps

• build(deps): bump jasmine-core from 5.5.0 to 5.6.0 in /uaa by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3283
• build(deps): bump jasmine from 5.5.0 to 5.6.0 in /uaa by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3282
• build(deps): bump rack from 2.2.10 to 2.2.11 in /uaa/slate by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3291
• build(deps): bump k8s.io/client-go from 0.32.1 to 0.32.2 in /k8s by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3296
• build(deps): bump versions.tomcatCargoVersion from 9.0.98 to 9.0.100 by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3298
• build(deps): bump versions.braveVersion from 6.0.3 to 6.1.0 by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3299
• build(deps): bump nokogiri from 1.16.7 to 1.18.3 in /uaa/slate by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3304
• build(deps): bump versions.seleniumVersion from 4.28.1 to 4.29.0 by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3306
• build(deps): bump org.awaitility:awaitility from 4.2.2 to 4.3.0 by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3308
• Bump gradle to 8.13 by @​duanemay in https://github.com/cloudfoundry/uaa/pull/3311
• build(deps): bump com.nimbusds:nimbus-jose-jwt from 10.0.1 to 10.0.2 by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3312
• build(deps): bump org.bouncycastle:bcpkix-fips from 2.0.7 to 2.1.9 by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3315
• Revert "build(deps): bump org.bouncycastle:bcpkix-fips from 2.0.7 to 2.1.9" by @​strehle in https://github.com/cloudfoundry/uaa/pull/3318

Full Changelog: cloudfoundry/uaa@v77.26.0...v77.27.0

v77.27.0: 77.27.0

Compare Source

What's Changed

Fixes

• Login Info Endpoint: optimize OAuth IdPs for JSON Response by @​adrianhoelzl-sap in https://github.com/cloudfoundry/uaa/pull/3254
• Fix tail_uaa_log by @​duanemay in https://github.com/cloudfoundry/uaa/pull/3294
• Fix cargo local with Tomcat 9.0.100 by @​Kehrlann in https://github.com/cloudfoundry/uaa/pull/3313
• refactor: show client jwt configuration by @​strehle in https://github.com/cloudfoundry/uaa/pull/3302

Misc

• Move login-ui.xml to java configuration by @​Kehrlann in https://github.com/cloudfoundry/uaa/pull/3262
• Remove experimental status by @​strehle in https://github.com/cloudfoundry/uaa/pull/3287
• Add jwt bearer to cf client by @​strehle in https://github.com/cloudfoundry/uaa/pull/3307

Dependency Bumps

• build(deps): bump jasmine-core from 5.5.0 to 5.6.0 in /uaa by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3283
• build(deps): bump jasmine from 5.5.0 to 5.6.0 in /uaa by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3282
• build(deps): bump rack from 2.2.10 to 2.2.11 in /uaa/slate by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3291
• build(deps): bump k8s.io/client-go from 0.32.1 to 0.32.2 in /k8s by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3296
• build(deps): bump versions.tomcatCargoVersion from 9.0.98 to 9.0.100 by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3298
• build(deps): bump versions.braveVersion from 6.0.3 to 6.1.0 by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3299
• build(deps): bump nokogiri from 1.16.7 to 1.18.3 in /uaa/slate by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3304
• build(deps): bump versions.seleniumVersion from 4.28.1 to 4.29.0 by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3306
• build(deps): bump org.awaitility:awaitility from 4.2.2 to 4.3.0 by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3308
• Bump gradle to 8.13 by @​duanemay in https://github.com/cloudfoundry/uaa/pull/3311
• build(deps): bump com.nimbusds:nimbus-jose-jwt from 10.0.1 to 10.0.2 by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3312
• build(deps): bump org.bouncycastle:bcpkix-fips from 2.0.7 to 2.1.9 by @​dependabot in https://github.com/cloudfoundry/uaa/pull/3315
• Revert "build(deps): bump org.bouncycastle:bcpkix-fips from 2.0.7 to 2.1.9" by @​strehle in https://github.com/cloudfoundry/uaa/pull/3318

Full Changelog: cloudfoundry/uaa@v77.26.0...v77.27.0

v77.26.0: 77.26.0

Compare Source

What's Changed

Fixes

• Fix regression with OIDC discovery url but no tokenUrl by @​strehle in https://github.com/cloudfoundry/uaa/pull/3280
• Fix ArrayIndexOutOfBoundsException in UaaRequestMatcher by @​adrianhoelzl-sap in https://github.com/cloudfoundry/uaa/pull/3276
• Fix the client_auth_method check, do not allow client_credentials with empty secret by @​strehle

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.