Apache Shiro 2.0.0

What's new Highlights

• Java 11 is the minimum supported JVM version
• Stronger default password hashing algorithms (Argon2 and BCrypt)
• Jakarta EE 10 support (Java/Jakarta EE 8 is also supported)
• New Jakarta EE integration module (see Jakarta EE Integration for more information)
• SpringBoot 3.x support (SpringBoot 2.x is also supported)
• Automatic form resubmission when session expired (Jakarta EE only)

What's Changed

• [SHIRO-762] Mark SecurityUtils.securityManager as volatile by @boris-petrov in #218
• [SHIRO-765] Upgrade to Apache Pom Parent 23 by @fpapon in #222
• [SHIRO-766] ignore exception on invalid cookies. by @bmarwell in #225
• [SHIRO-764] Add IpFilter for restricting access IP ranges by @mookkiah in #219
• SHIRO-708 - Remove deprecated shiro-cas module by @coheigea in #152
• [SHIRO-770] Remove base64 implementation, keep UTF-8 codec by default. by @bmarwell in #224
• [SHIRO-750] update jax-rs dependency to jakarta. Non-Breaking change. by @bmarwell in #207
• [SHIRO-750] update jax-rs dependency to jakarta. by @bmarwell in #226
• Remove CI profile for 2.0.0 by @fpapon in #229
• [SHIRO-770] Fix test regression introduced by SHIRO-770. by @bmarwell in #228
• [SHIRO-772] Remove PowerMock from EnvironmentLoaderServiceTest.java. by @bmarwell in #230
• [SHIRO-773] update groovy for JDK14 builds. by @bmarwell in #231
• [SHIRO-775] Excessive logging in jetty ContainerITs by @fpapon in #233
• [SHIRO-771] Add additional build jobs with various JDKs. by @bmarwell in #227
• (doc) Committer Update by @bmarwell in #221
• [SHIRO-774] remove ignored prerequisites by @bmarwell in #234
• [SHIRO-777] remove powermock. by @bmarwell in #235
• [SHIRO-768] Remove the shiro-all module by @fpapon in #232
• [SHIRO-679] Shiro modules have split packages by @fpapon in #236
• [SHIRO-776] Update JUnit by @bmarwell in #237
• (DOC) - Fix the annotation of setCredentialsMatcher method in AuthenticatingR… by @ramostear in #238
• [SHIRO-761] Bad OSGi import for javax.annotation in shiro-guice by @fpapon in #243
• [SHIRO-551] Implement toString() for DelegatingSubject.java. by @bmarwell in #220
• [SHIRO-784] Fixed issue where no custom filters are defined in spring (non-boot) apps by @bdemers in #244
• [SHIRO-778] onInit method on AuthenticatingRealm is called twice by @fpapon in #240
• [SHIRO-610] Allways create resolver for non-empty IniWebEnvironment by @tbrugz in #242
• [SHIRO-398] - Renamed the variable interval to sessionValidationInterval by @vgaur in #245
• [SHIRO-785] Upgrade to maven-bundle-plugin 5.1.1 by @fpapon in #246
• [SHIRO-786] Upgrade to Spring 5.2.8.RELEASE and Spring boot 2.3.2.REL… by @fpapon in #247
• [SHIRO-780] NOTICE files of shiro components don't match NOTICE in so… by @fpapon in #239
• Add Jenkins file by @fpapon in #249
• [SHIRO-767] Fixed issue where ClassUtil cannot load the array of Primitive DataType... by @ddddyyyy in #248
• [SHIRO-740] SslFilter with HTTP Strict Transport Security (HSTS) by @raupachz in #55
• SHIRO-349 Security: Byte arrays (and other memory) holding sensitive … by @bmarwell in #254
• Add Sonarqube quality check by @fpapon in #256
• Move sonar build step to Java 11 pipeline by @fpapon in #258
• [SHIRO-793] deleteMe cookie should use the defined "sameSite" by @FredTreg in #257
• Update AbstractContainerIT to allow for HTTPS connections Using a pre-generated keystore (master) by @bdemers in #260
• [No JIRA] Fix inefficient iterators by @TomMD in #250
• [SHIRO-789] Add SameSite option to AbstractShiroWebConfiguration.buildCookie by @bmarwell in #251
• [CI] Update maven and jdk labels by @fpapon in #261
• Update Jetty to 9.4.33.v20201020 to fix CVE-2020-27216 by @coheigea in #262
• Update to Jetty 9.4.34.v20201102 by @coheigea in #264
• [SHIRO-797] Shiro 1.7.0 is lower than using springboot version 2.0.7 dependency error by @dngzs in #263
• Fix: flushes ByteArrayOutputStream before using by @lcc in #266
• (build) GitHub workflow by @bmarwell in #271
• Updating maven-war-plugin to 3.3.1 by @coheigea in #274
• (build) delete .travis.yml by @bmarwell in #276
• (no-issue) remove invalid and unused imports leading to a compile error. by @bmarwell in #277
• (build) fix JDK 16/17 builds by @bmarwell in #278
• (build) jenkinsfile matrix build. by @bmarwell in #281
• [SHIRO-807] remove deprecated method signature by @bmarwell in #272
• (build) do not try to deploy on PRs. by @bmarwell in #283
• [SHIRO-811] fix toggling test through Mockito conversion. by @bmarwell in #282
• [SHIRO-811] isolate SecurityManagerTestSupport-based tests. by @bmarwell in #284
• [INFRA-21061] Adotp 'latest' aliases for AdoptOpenJDK.net JVMs. by @bmarwell in #291
• Bugfix, fixed Scanner issue by @pitjazz in #288
• [SHIRO-812] Key value separator in config is broken with escape char by @fpapon in #286
• [SHIRO-812] Remove splitKeyValue test by @fpapon in #292
• Fixed a bug, removed the boxing to long. by @pitjazz in #287
• [INFRA-21748] Rename Shiro master branch to main by @fpapon in #295
• Pr 297 to main by @bdemers in #298
• Fix typo in Guice quickstart by @bdemers in #294
• [SHIRO-804] - Avoid conflicts with spring boot aop by @seaswalker in #268
• [SHIRO-290] Implement BCrypt and Argon2 by @bmarwell in #280
• [SHIRO-819] Migrato to spring-boot-maven-plugin by @bmarwell in #304
• [SHIRO-818] Return other status codes for AuthorizationExceptions. by @bmarwell in #303
• [SHIRO-823] remove broken jaxrs sample project. by @bmarwell in #305
• [SHIRO-822] Update aspectj-maven-plugin. by @bmarwell in #306
• Combine Spring Boot starters (web and non-web) into single module by @bdemers in #293
• [SHIRO-817] Update CommonsInterpolator doc to reflect actual behavior by @weltonrodrigo in #302
• update setup-jdk / maven action. by @bmarwell in #301
• [SHIRO-825] Fixes "IllegalArgumentException: There is no configured chain under the name/key" by @zAlbee in #309
• Add note about reporting a vuln in the PR template by @bdemers in #312
• Upgrade to Apache pom 24 and make build reproductible by @fpapon in #313
• Configure new JIRA "issues" mailing list in asf.yaml by @bdemers in #307
• (build) update latest GA'd JDKs to 16. by @bmarwell in #300
• [SHIRO-806] remove deprecated DefaultLdapContextFactory in Shiro 2.0. by @bmarwell in #270
• [SHIRO-805] Spelling by @jsoref in #269
• [SHIRO-678] only query parameters for sessionID if found by @bmarwell in #317
• [SHIRO-216] Add @documented to Shiro annotations by @bdemers in #318
• [SHIRO-836] - Remove not used jsecurity-sample.jks file by @ThanoshanMV in #320
• [SHIRO-840] Java 17 support. by @bmarwell in #321
• [SHIRO-828] update aspectj-maven-plugin by @bmarwell in #323
• [SHIRO-838] create sha512 and sha3-512 hashes. by @bmarwell in #327
• [SHIRO-840] Use Java17 buildjob on Jenkins by @bmarwell in #328
• Container ITs: OpenLiberty and Meecrowave by @bmarwell in #315
• [SHIRO-843] update maven-project-info-reports-plugin by @bmarwell in #331
• [SHIRO-844] update maven-javadoc-plugin. by @bmarwell in #334
• SHIRO-841 - NullPointerException from SessionsSecurityManager.start() by @zeroflag in #329
• [SHIRO-845] - Dependencies for test-jars missing by @khmarbaise in #336
• [SHIRO-846] Creation of site takes very long time by @khmarbaise in #337
• [SHIRO-848] - Relative Path in pom.xml is not needed by @khmarbaise in #338
• [SHIRO-804] - Avoid conflicts with spring boot aop by @markixy in #344
• [SHIRO-851] - Handling properties for compile/enconding vs. default c… by @khmarbaise in #340
• [SHIRO-852] - Configuration for maven-release-plugin prepationGoal sh… by @khmarbaise in #341
• [SHIRO-853] - Versions of maven-surefire/failsafe/report plugin are n… by @khmarbaise in #342
• [SHIRO-850] - The profile name jdk19-plus is misleading by @khmarbaise in #339
• [SHIRO-854] - Konfiguration includes/excludes maven-failsafe-plugin c… by @khmarbaise in #343
• [SHIRO-842] log4j update by @bmarwell in #335
• [SHIRO-860] upgrade to logback 1.2.10 by @pjfanning in #345
• [SHIRO-862] Remove google analytics from javadoc by @fpapon in #346
• [DOCS] update badge on main branch by @bmarwell in #348
• Update Spring v5.1.18 Spring Boot v2.5.12 by @bdemers in #352
• [BUILD] update build matrix. by @bmarwell in #353
• [SHIRO-882] Upgrade to apache pom parent 26 by @fpapon in #356
• Bump hibernate-core from 5.4.3.Final to 5.4.24.Final by @dependabot in #354
• Fix SHIRO-881 by @hugbgithub in #355
• Reduce the scope of the ThreadLocals used in SecurityManagerTestSupport by @bdemers in #362
• [SHIRO-871] Apply principalSuffix only when username does NOT already contain the suffix by @bdemers in #350
• [SHIRO-884] use plugin version from parent by @hboutemy in #365
• [SHIRO-885] Use OWASP Java Encoder with OSGi manifest by @fpapon in #366
• [SHIRO-886] Upgrade to commons configuration 2.8.0 by @fpapon in #368
• [BUILD] Github Actions Maven CI fox 1.9.x and 1.10.x by @bmarwell in #371
• Add support for case-insensitive matching to RegExPatternMatcher by @bdemers in #370
• [SHIRO-512] catch SessionException in getRunAsPrincipalsStack by @lprimak in #372
• Adding dependabot config by @bdemers in #374
• Bump spring-boot.version from 2.5.12 to 2.7.4 by @dependabot in #407
• Bump actions/setup-java from 2 to 3 by @dependabot in #376
• Bump maven-site-plugin from 3.7.1 to 3.12.1 by @dependabot in #397
• Bump versions-maven-plugin from 2.7 to 2.12.0 by @dependabot in #391
• Bump exec-maven-plugin from 1.6.0 to 3.1.0 by @dependabot in #409
• Bump maven-javadoc-plugin from 3.3.1 to 3.4.1 by @dependabot in #388
• Bump maven-project-info-reports-plugin from 3.1.2 to 3.4.1 by @dependabot in #384
• Bump jacoco-maven-plugin from 0.8.7 to 0.8.8 by @dependabot in #383
• Bump japicmp-maven-plugin from 0.14.1 to 0.16.0 by @dependabot in #381
• Bump actions/checkout from 2 to 3.1.0 by @dependabot in #378
• Bump commons-lang3 from 3.9 to 3.12.0 by @dependabot in #436
• Bump junit.version from 5.8.1 to 5.9.1 by @dependabot in #435
• Bump hamcrest-core from 2.1 to 2.2 by @dependabot in #434
• Bump easymock from 4.0.2 to 4.3 by @dependabot in #432
• Bump maven-pmd-plugin from 3.12.0 to 3.19.0 by @dependabot in #428
• Bump maven-surefire-plugin from 3.0.0-M5 to 3.0.0-M7 by @dependabot in #399
• Bump spring.version from 5.3.18 to 5.3.23 by @dependabot in #387
• Bump maven-surefire-report-plugin from 3.0.0-M5 to 3.0.0-M7 by @dependabot in #439
• Bump nexus-staging-maven-plugin from 1.6.8 to 1.6.13 by @dependabot in #440
• Bump maven-bundle-plugin from 5.1.4 to 5.1.8 by @dependabot in #437
• Bump jsp-api from 2.1 to 2.2 by @dependabot in #429
• Bump groovy from 3.0.9 to 3.0.13 by @dependabot in #408
• Bump log4j.version from 2.17.1 to 2.19.0 by @dependabot in #427
• Bump hibernate.version from 5.4.24.Final to 5.6.12.Final by @dependabot in #444
• Bump maven-jar-plugin from 3.2.2 to 3.3.0 by @dependabot in #445
• Bump build-helper-maven-plugin from 3.0.0 to 3.3.0 by @dependabot in #446
• Bump maven-scm-publish-plugin from 3.0.0 to 3.1.0 by @dependabot in #447
• Bump dependency-check-maven from 5.2.4 to 7.2.1 by @dependabot in #448
• Bump maven-release-plugin from 3.0.0-M5 to 3.0.0-M6 by @dependabot in #438
• Bump cxf-rt-frontend-jaxrs from 3.4.3 to 3.5.3 by @dependabot in #466
• Bump johnzon-jsonb from 1.2.12 to 1.2.19 by @dependabot in #465
• Bump apache-rat-plugin from 0.13 to 0.15 by @dependabot in #467
• Bump bcprov-jdk15on from 1.68 to 1.70 by @dependabot in #468
• Bump hazelcast from 3.12.6 to 5.1.3 by @dependabot in #469
• Bump mockito-core from 3.12.4 to 4.8.0 by @dependabot in #470
• Bump buildnumber-maven-plugin from 1.4 to 3.0.0 by @dependabot in #441
• Bump cxf-rt-rs-client from 3.0.15 to 3.5.3 by @dependabot in #443
• [SHIRO-890] Avoid another proxy creator when @EnableAspectJAutoProxy enabled by @georgecao in #472
• Allow for direct configuration of ShiroFilter through WebEnvironment by @bdemers in #518
• [SHIRO-893] Fix NPE in ShiroFilter.init() by @bmarwell in #515
• [SHIRO-889] Provide Jakarta jar modules by @fpapon in #522
• [SHIRO-899] Added a shim for deprecated javax.servlet.http.HttpSessionContext class as it … by @lprimak in #551
• [SHIRO-679] moved ByteSourceWrapper and ByteUtils into org.apache.shi… by @lprimak in #556
• Performance optimization by @zenglzh in #526
• Bump maven-apache-parent to v28 by @bmarwell in #562
• [SHIRO-899] moved the HttpSessionContext Jakarta shim into Shiro pack… by @lprimak in #557
• [SHIRO-889] Removed Jakarta Crypto relocation - non-existent module by @lprimak in #567
• Bump maven-dependency-plugin from 3.1.1 to 3.4.0 by @dependabot in #559
• Bump framework from 4.2.8 to 4.4.2 by @dependabot in #508
• Bump license-maven-plugin from 3.0 to 4.1 by @dependabot in #484
• Bump maven-resources-plugin from 3.1.0 to 3.3.0 by @dependabot in #478
• Bump taglist-maven-plugin from 2.4 to 3.0.0 by @dependabot in #475
• Bump commons-cli from 1.4 to 1.5.0 by @dependabot in #483
• Bump slf4j.version from 1.7.26 to 1.7.33 by @dependabot in #482
• Bump maven-jxr-plugin from 3.1.1 to 3.3.0 by @dependabot in #481
• Bump actions/checkout from 3.1.0 to 3.2.0 by @dependabot in #570
• Bump actions/checkout from 3.2.0 to 3.3.0 by @dependabot in #630
• Bump easymock from 4.3 to 5.1.0 by @dependabot in #627
• [SHIRO-889] Jakarta JAR for shiro-spring-boot-starter module by @lucasdillmann in #632
• [SHIRO-900] Refactor and update pom.xml by @lprimak in #574
• Name the authorizationCachingEnabled flag correctly by @mnd999 in #629
• Bump hibernate.version from 5.6.12.Final to 5.6.14.Final by @dependabot in #623
• Bump dependency-check-maven from 7.2.1 to 8.0.0 by @dependabot in #644
• [SHIRO-904] Update baseline to JDK 11 minimum by @lprimak in #657
• [SHIRO-898] Jakarta EE integration by @lprimak in #563
• Bump maven-dependency-plugin from 3.4.0 to 3.5.0 by @dependabot in #647
• Bump junit.version from 5.9.1 to 5.9.2 by @dependabot in #659
• Bump groovy.version from 4.0.7 to 4.0.8 by @dependabot in #666
• saving payara logs and making it easier to find out why integration t… by @lprimak in #667
• Bump japicmp-maven-plugin from 0.16.0 to 0.17.1 by @dependabot in #641
• Bump hazelcast from 5.1.3 to 5.2.1 by @dependabot in #640
• Bump hsqldb from 2.5.0 to 2.7.1 by @dependabot in #548
• Bump aspectj.version from 1.9.7.M3 to 1.9.19 by @dependabot in #625
• Bump versions-maven-plugin from 2.14.1 to 2.14.2 by @dependabot in #669
• Bump tomcat.version from 10.0.27 to 10.1.5 by @dependabot in #670
• Bump meecrowave-core from 1.2.14 to 1.2.15 by @dependabot in #673
• Bump mockito.version from 4.8.0 to 5.0.0 by @dependabot in #674
• Bump framework from 4.4.2 to 4.4.3 by @dependabot in #675
• Bump cxf-rt-frontend-jaxrs from 3.5.3 to 3.5.5 by @dependabot in #676
• Bump jakarta.servlet.jsp-api from 3.0.0 to 3.1.0 by @dependabot in #677
• Bump dependency.meecrowave.version from 1.2.11 to 1.2.15 by @dependabot in #678
• Bump checkstyle from 10.5.0 to 10.6.0 by @dependabot in #681
• Bump flowlogix-jee from 5.2 to 5.3.2 by @dependabot in #682
• Bump dependency-check-maven from 8.0.0 to 8.0.1 by @dependabot in #684
• Bump cxf-rt-rs-client from 3.5.3 to 3.5.5 by @dependabot in #685
• Bump maven-pmd-plugin from 3.19.0 to 3.20.0 by @dependabot in #687
• bugfix: when Shiro-EE is disabled, use the "standard" default ini env… by @lprimak in #690
• Bump spring-boot.version from 2.7.4 to 2.7.8 by @dependabot in #691
• [SHIRO-902] test quoted wildcard-permission resolving. by @bmarwell in #664
• Bump spring.version from 5.3.23 to 5.3.25 by @dependabot in #692
• Fix Shiro logo on readme by @fpapon in #697
• Attempting to speedup codeql by caching artifacts by @coheigea in #698
• Bump mockito.version from 5.0.0 to 5.1.0 by @dependabot in #699
• Bump dependency-check-maven from 8.0.1 to 8.0.2 by @dependabot in #700
• Bump actions/cache from 3.2.3 to 3.2.4 by @dependabot in #701
• [StepSecurity] ci: Harden GitHub Actions by @step-security-bot in #706
• Bump mockito.version from 5.1.0 to 5.1.1 by @dependabot in #707
• Bump checkstyle from 10.6.0 to 10.7.0 by @dependabot in #708
• Bump jakarta.servlet.jsp-api from 3.1.0 to 3.1.1 by @dependabot in #712
• Bump lombok from 1.18.24 to 1.18.26 by @dependabot in #713
• Bump hibernate.version from 5.6.14.Final to 5.6.15.Final by @dependabot in #717
• Bump arquillian.version from 1.7.0.Alpha13 to 1.7.0.Alpha14 by @dependabot in #718
• [SHIRO-337] Combine all previous work on CDI by @lprimak in #695
• Adding permission to maven workflow by @coheigea in #720
• Bump actions/setup-java from 3.9.0 to 3.10.0 by @dependabot in #725
• Bump github/codeql-action from 2.2.1 to 2.2.2 by @dependabot in #726
• Bump lombok from 1.18.24 to 1.18.26 by @dependabot in #721
• Bump jaxb-runtime from 2.3.2 to 2.3.8 by @dependabot in #729
• Bump groovy.version from 4.0.8 to 4.0.9 by @dependabot in #731
• Bump github/codeql-action from 2.2.2 to 2.2.3 by @dependabot in #732
• Bump actions/cache from 3.2.4 to 3.2.5 by @dependabot in #733
• [SHIRO-849] Add JCache implementation to main by @bdemers in #705
• [SHIRO-671] Add support for javax.annotation.security.RolesAllowed, PermitAll, and DenyAll by @lprimak in #714
• [SHIRO-206] Added JSF / Facelet tags for Shiro by @lprimak in #715
• [SHIRO-889] Fix BOM for jakarta usage by @fpapon in #734
• Bump dependency-check-maven from 8.0.2 to 8.1.0 by @dependabot in #738
• Bump github/codeql-action from 2.2.3 to 2.2.4 by @dependabot in #736
• Bump cache2k-jcache from 2.4.1.Final to 2.6.1.Final by @dependabot in #737
• Bump hazelcast from 5.2.1 to 5.2.2 by @dependabot in #743
• Bump jsoup from 1.15.3 to 1.15.4 by @dependabot in #747
• Bump actions/cache from 3.2.5 to 3.2.6 by @dependabot in #750
• Bump versions-maven-plugin from 2.14.2 to 2.15.0 by @dependabot in #752
• Properly handle fluent setters by @leleuj in #751
• Bump spring-boot.version from 2.7.8 to 2.7.9 by @dependabot in #754
• Bump tomcat.version from 10.1.5 to 10.1.6 by @dependabot in #755
• Bump dependency-check-maven from 8.1.0 to 8.1.1 by @dependabot in #759
• Bump checkstyle from 10.7.0 to 10.8.0 by @dependabot in #761
• Bump github/codeql-action from 2.2.4 to 2.2.5 by @dependabot in #762
• Bump omnifaces from 3.14.1 to 3.14.2 by @dependabot in #760
• Bump dependency-check-maven from 8.1.1 to 8.1.2 by @dependabot in #766
• Bump japicmp-maven-plugin from 0.17.1 to 0.17.2 by @dependabot in #768
• Bump tomcat.version from 10.1.6 to 10.1.7 by @dependabot in #771
• Bump checkstyle from 10.8.0 to 10.8.1 by @dependabot in #772
• Bump actions/cache from 3.2.6 to 3.3.0 by @dependabot in #773
• Bump mockito.version from 5.1.1 to 5.2.0 by @dependabot in #774
• Bump groovy.version from 4.0.9 to 4.0.10 by @dependabot in #776
• Bump actions/cache from 3.3.0 to 3.3.1 by @dependabot in #777
• Bump github/codeql-action from 2.2.5 to 2.2.6 by @dependabot in #778
• Bump github/codeql-action from 2.2.6 to 2.2.7 by @dependabot in #784
• Bump actions/checkout from 3.3.0 to 3.4.0 by @dependabot in #786
• Bump checkstyle from 10.8.1 to 10.9.1 by @dependabot in #787
• Bump spring.version from 5.3.25 to 5.3.26 by @dependabot in #789
• Bump checkstyle from 10.9.1 to 10.9.2 by @dependabot in #790
• Bump arquillian-drone-bom from 2.5.5 to 2.5.6 by @dependabot in #795
• Bump dependency-check-maven from 8.1.2 to 8.2.0 by @dependabot in #796
• Bump github/codeql-action from 2.2.7 to 2.2.8 by @dependabot in #798
• Bump spring-boot.version from 2.7.9 to 2.7.10 by @dependabot in #799
• Bump hazelcast from 5.2.2 to 5.2.3 by @dependabot in #801
• Bump dependency-check-maven from 8.2.0 to 8.2.1 by @dependabot in #802
• Bump actions/checkout from 3.4.0 to 3.5.0 by @dependabot in #805
• Bump maven-resources-plugin from 3.3.0 to 3.3.1 by @dependabot in #806
• Bump license-maven-plugin from 4.1 to 4.2 by @dependabot in #810
• Bump checkstyle from 10.9.2 to 10.9.3 by @dependabot in #811
• Bump github/codeql-action from 2.2.8 to 2.2.9 by @dependabot in #812
• Bump actions/setup-java from 3.10.0 to 3.11.0 by @dependabot in #813
• Bump maven-scm-publish-plugin from 3.1.0 to 3.2.1 by @dependabot in #814
• Bump commons-configuration2 from 2.8.0 to 2.9.0 by @dependabot in #817
• Reworked CDI principal injection API using Supplier by @lprimak in #815
• Bump ossf/scorecard-action from 2.1.2 to 2.1.3 by @dependabot in #819
• Bump groovy.version from 4.0.10 to 4.0.11 by @dependabot in #821
• Bump jacoco-maven-plugin from 0.8.8 to 0.8.9 by @dependabot in #825
• Bump github/codeql-action from 2.2.9 to 2.2.10 by @dependabot in #827
• Bump github/codeql-action from 2.2.10 to 2.2.11 by @dependabot in #832
• build(deps): bump actions/checkout from 3.5.0 to 3.5.1 by @dependabot in #837
• build(deps): bump actions/checkout from 3.5.1 to 3.5.2 by @dependabot in #842
• build(deps): bump github/codeql-action from 2.2.11 to 2.2.12 by @dependabot in #841
• build(deps): bump spring.version from 5.3.26 to 5.3.27 by @dependabot in #840
• build(deps-dev): bump tomcat.version from 10.1.7 to 10.1.8 by @dependabot in #845
• build(deps): bump spring-boot.version from 2.7.10 to 2.7.11 by @dependabot in #847
• build(deps): bump johnzon-jsonb from 1.2.19 to 1.2.20 by @dependabot in #851
• build(deps): bump maven-checkstyle-plugin from 3.2.1 to 3.2.2 by @dependabot in #853
• build(deps): bump github/codeql-action from 2.2.12 to 2.3.0 by @dependabot in #854
• build(deps): bump jacoco-maven-plugin from 0.8.9 to 0.8.10 by @dependabot in #855
• build(deps): bump junit.version from 5.9.2 to 5.9.3 by @dependabot in #857
• build(deps): bump checkstyle from 10.9.3 to 10.10.0 by @dependabot in #858
• build(deps): bump github/codeql-action from 2.3.0 to 2.3.1 by @dependabot in #859
• build(deps): bump github/codeql-action from 2.3.1 to 2.3.2 by @dependabot in #860
• build(deps): bump jsoup from 1.15.4 to 1.16.1 by @dependabot in #861
• made jakarta deps optional by @lprimak in #862
• build(deps): bump github/codeql-action from 2.3.2 to 2.3.3 by @dependabot in #863
• build(deps): bump groovy.version from 4.0.11 to 4.0.12 by @dependabot in #868
• build(deps): bump cxf-rt-rs-client from 3.5.5 to 3.6.0 by @dependabot in #869
• build(deps-dev): bump cxf-rt-frontend-jaxrs from 3.5.5 to 3.6.0 by @dependabot in #870
• build(deps): bump checkstyle from 10.10.0 to 10.11.0 by @dependabot in #872
• build(deps): bump build-helper-maven-plugin from 3.3.0 to 3.4.0 by @dependabot in #873
• build(deps): bump buildnumber-maven-plugin from 3.0.0 to 3.1.0 by @dependabot in #875
• build(deps-dev): bump arquillian.version from 1.7.0.Alpha14 to 1.7.0.Final by @dependabot in #877
• build(deps): bump spring-boot.version from 2.7.11 to 2.7.12 by @dependabot in #879
• build(deps): bump hazelcast from 5.2.3 to 5.3.0 by @dependabot in #881
• build(deps): bump gmavenplus-plugin from 2.1.0 to 3.0.0 by @dependabot in #882
• build(deps): bump lombok from 1.18.26 to 1.18.28 by @dependabot in #884
• build(deps): bump github/codeql-action from 2.3.3 to 2.3.4 by @dependabot in #885
• build(deps): bump github/codeql-action from 2.3.4 to 2.3.5 by @dependabot in #886
• build(deps-dev): bump flowlogix-jee from 5.4.1 to 5.5 by @dependabot in #888
• build(deps): bump checkstyle from 10.11.0 to 10.12.0 by @dependabot in #890
• [GitHub] enable github issues and projects. by @bmarwell in #887
• build(deps-dev): bump hsqldb from 2.7.1 to 2.7.2 by @dependabot in #892
• build(deps): bump github/codeql-action from 2.3.5 to 2.3.6 by @dependabot in #894
• build(deps): bump versions-maven-plugin from 2.15.0 to 2.16.0 by @dependabot in #899
• build(deps): bump buildnumber-maven-plugin from 3.1.0 to 3.2.0 by @dependabot in #900
• build(deps): bump github/codeql-action from 2.3.6 to 2.13.4 by @dependabot in #905
• build(deps): bump actions/checkout from 3.5.2 to 3.5.3 by @dependabot in #907
• build(deps): bump hazelcast from 5.3.0 to 5.3.1 by @dependabot in #909
• build(deps): bump dependency-check-maven from 8.2.1 to 8.3.1 by @dependabot in #911
• [GH-935] Upgrade to log4j 2.20.0 by @fpapon in #936
• build(deps): bump spring.version from 5.3.27 to 5.3.28 by @dependabot in #938
• build(deps): bump shrinkwrap-resolver-bom from 3.1.4 to 3.1.6 by @dependabot in #940
• build(deps): bump xml-maven-plugin from 1.0.2 to 1.1.0 by @dependabot in #946
• [#942] Fix flaky test; update snakeyaml for test app by @bmarwell in #944
• build(deps): bump liberty-maven-plugin from 3.3.4 to 3.8.2 by @dependabot in #912
• build(deps): bump spring-boot.version from 2.7.12 to 2.7.13 by @dependabot in #949
• [#947] rewrite java tests to Junit-Jupiter by @bmarwell in #948
• [#943] replace logback with log4j by @bmarwell in #945
• [GitHub] add stale action by @bmarwell in #952
• build(deps): bump ossf/scorecard-action from 2.1.3 to 2.2.0 by @dependabot in #956
• build(deps): bump actions/stale from 4 to 8 by @dependabot in #957
• build(deps): bump omnifaces from 3.14.2 to 3.14.3 by @dependabot in #958
• build(deps): bump checkstyle from 10.12.0 to 10.12.1 by @dependabot in #959
• [GH-904] Add Spring 6-related exclusions to Shiro BOM by @fpapon in #955
• build(deps): bump jetty.version from 9.4.34.v20201102 to 9.4.51.v20230217 by @dependabot in #994
• build(deps): bump javax.servlet-api from 3.1.0 to 4.0.1 by @dependabot in #985
• [GH-896] Added JPMS module names to JAR manifests by @lprimak in #961
• build(deps): bump shrinkwrap-resolver-bom from 3.1.6 to 3.2.0 by @dependabot in #999
• deps: Updated Spring configurations as per their Migration Guide by @lprimak in #1000
• build(deps): bump slf4j.version from 1.7.33 to 2.0.7 by @dependabot in #1001
• build(deps): bump junit-servers-jetty from 0.11.0 to 3.0.0 by @dependabot in #997
• build(deps): bump shrinkwrap-resolver-bom from 3.2.0 to 3.2.1 by @dependabot in #1006
• [#897] - Add issue templates by @EdgarRamirezFuentes in #1003
• build(deps): bump spring.version from 5.3.28 to 5.3.29 by @dependabot in #1009
• PR issue template fixes by @lprimak in #1007
• build(deps): bump htmlunit from 2.39.0 to 2.70.0 by @dependabot in #1011
• upgrade m-bundle-p: solves last Reproducible Builds issue by @hboutemy in #1013
• build(deps): bump spring-boot.version from 2.7.13 to 2.7.14 by @dependabot in #1016
• deps: update minor versions of depdencies that dependabot missed by @lprimak in #1018
• build(deps): bump actions/setup-java from 3.11.0 to 3.12.0 by @dependabot in #1020
• build(deps): bump junit.version from 5.9.3 to 5.10.0 by @dependabot in #1021
• build(deps): bump com.puppycrawl.tools:checkstyle from 10.12.1 to 10.12.2 by @dependabot in #1023
• build(deps): bump org.yaml:snakeyaml from 2.0 to 2.1 by @dependabot in #1029
• build(deps-dev): bump arquillian.version from 1.7.0.Final to 1.7.1.Final by @dependabot in #1033
• build(deps): bump aspectj.version from 1.9.19 to 1.9.20 by @dependabot in #1032
• [#1010] deps: updated htmlunit to 3.5.0 by @lprimak in #1035
• build(deps): bump org.owasp:dependency-check-maven from 8.3.1 to 8.4.0 by @dependabot in #1036
• build(deps): bump com.hazelcast:hazelcast from 5.3.1 to 5.3.2 by @dependabot in #1037
• build(deps): bump mockito.version from 5.4.0 to 5.5.0 by @dependabot in #1039
• Fix the Maven Central badge by @marcelstoer in #1042
• build(deps): bump actions/checkout from 3.5.3 to 3.6.0 by @dependabot in #1046
• build(deps): bump spring-boot.version from 2.7.14 to 2.7.15 by @dependabot in #1044
• build(deps): bump jetty.version from 9.4.51.v20230217 to 9.4.52.v20230823 by @dependabot in #1052
• build(deps): bump org.yaml:snakeyaml from 2.1 to 2.2 by @dependabot in #1053
• build(deps): bump com.puppycrawl.tools:checkstyle from 10.12.2 to 10.12.3 by @dependabot in #1054
• build(deps-dev): bump org.easymock:easymock from 5.1.0 to 5.2.0 by @dependabot in #1056
• build(deps-dev): bump com.flowlogix:flowlogix-jee from 5.5 to 5.5.1 by @dependabot in #1058
• #1048: Solved base64 problem with remember me cookie. by @JaapD in #1049
• build(deps): bump aspectj.version from 1.9.20 to 1.9.20.1 by @dependabot in #1060
• build(deps): bump slf4j.version from 2.0.7 to 2.0.9 by @dependabot in #1061
• build(deps): bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.17.2 to 0.17.3 by @dependabot in #1062
• build(deps): bump actions/checkout from 3.6.0 to 4.0.0 by @dependabot in #1065
• build(deps): bump actions/upload-artifact from 3.1.2 to 3.1.3 by @dependabot in #1066
• build(deps-dev): bump org.junit-pioneer:junit-pioneer from 2.0.1 to 2.1.0 by @dependabot in #1067
• build(deps): bump actions/cache from 3.3.1 to 3.3.2 by @dependabot in #1068
• build(deps): bump spring.version from 5.3.29 to 5.3.30 by @dependabot in #1070
• deps: bouncycastle update artifact by @lprimak in #1071
• build(deps): bump org.codehaus.mojo:versions-maven-plugin from 2.16.0 to 2.16.1 by @dependabot in #1073
• build(deps): bump org.projectlombok:lombok from 1.18.28 to 1.18.30 by @dependabot in #1074
• build(deps): bump actions/setup-java from 3.12.0 to 3.13.0 by @dependabot in #1076
• build(deps-dev): bump com.flowlogix:flowlogix-jee from 5.5.1 to 5.5.2 by @dependabot in #1082
• build(deps): bump spring-boot.version from 2.7.15 to 2.7.16 by @dependabot in #1081
• [#1079] - bugfix: make sure form resubmit cookie is secure by @lprimak in #1078
• build(deps): bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.17.3 to 0.18.0 by @dependabot in #1083
• build(deps): bump actions/checkout from 4.0.0 to 4.1.0 by @dependabot in #1085
• build(deps): bump org.omnifaces:omnifaces from 3.14.3 to 3.14.4 by @dependabot in #1088
• build(deps): bump com.mycila:license-maven-plugin from 4.2 to 4.3 by @dependabot in #1089
• build(deps): bump org.codehaus.gmavenplus:gmavenplus-plugin from 3.0.0 to 3.0.2 by @dependabot in #1095
• build(deps): bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.18.0 to 0.18.1 by @dependabot in #1096
• [#1097] enh(build,ci,jdk): run on jdk 11, 17, and 21 by @lprimak in #1098
• build(deps): bump com.puppycrawl.tools:checkstyle from 10.12.3 to 10.12.4 by @dependabot in #1099
• build(deps): bump org.htmlunit:htmlunit from 3.5.0 to 3.6.0 by @dependabot in #1102
• [#1100] - bugfix(build): force AspectJ compilation every time, as it doesn't detect… by @lprimak in #1103
• [#1005] - Expand checkstyle to all modules (root). by @damonxue in #1069
• build(deps): bump mockito.version from 5.5.0 to 5.6.0 by @dependabot in #1104
• build(deps): bump io.openliberty.tools:liberty-maven-plugin from 3.8.2 to 3.9 by @dependabot in #1105
• build(deps): bump ossf/scorecard-action from 2.2.0 to 2.3.0 by @dependabot in #1108
• build(deps): bump bytebuddy.version from 1.14.8 to 1.14.9 by @dependabot in #1109
• build(deps): bump jetty.version from 9.4.52.v20230823 to 9.4.53.v20231009 by @dependabot in #1111
• build(deps): bump org.jacoco:jacoco-maven-plugin from 0.8.10 to 0.8.11 by @dependabot in #1114
• build(deps): bump actions/checkout from 4.1.0 to 4.1.1 by @dependabot in #1115
• build(deps): bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.18.1 to 0.18.2 by @dependabot in #1120
• build(deps): bump spring-boot.version from 2.7.16 to 2.7.17 by @dependabot in #1121
• build(deps): bump org.glassfish.jaxb:jaxb-runtime from 2.3.8 to 2.3.9 by @dependabot in #1127
• build(deps): bump com.hazelcast:hazelcast from 5.3.2 to 5.3.4 by @dependabot in #1128
• build(deps): bump org.jsoup:jsoup from 1.16.1 to 1.16.2 by @dependabot in #1129
• Remove dashboard-maven-plugin from build (Shiro 2.x) by @bdemers in #1132
• Fix naming of WebContainer Tests/IT (Shiro 2.x) by @bdemers in #1131
• build(deps): bump org.owasp:dependency-check-maven from 8.4.0 to 8.4.2 by @dependabot in #1133
• build(deps): bump com.hazelcast:hazelcast from 5.3.4 to 5.3.5 by @dependabot in #1135
• build(deps): bump ossf/scorecard-action from 2.3.0 to 2.3.1 by @dependabot in #1136
• deps: update dependencies that dependabot missed (mostly Apache) by @lprimak in #1142
• build(deps): bump org.htmlunit:htmlunit from 3.6.0 to 3.7.0 by @dependabot in #1145
• [Test] Refactored test to use utility function to get annotation instead of array indexing by @wang3820 in #1149
• build(deps): bump mockito.version from 5.6.0 to 5.7.0 by @dependabot in #1150
• build(deps): bump junit.version from 5.10.0 to 5.10.1 by @dependabot in #1153
• build(deps): bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.18.2 to 0.18.3 by @dependabot in #1154
• build(deps): bump com.hazelcast:hazelcast from 5.3.5 to 5.3.6 by @dependabot in #1157
• build(deps-dev): bump arquillian.version from 1.7.1.Final to 1.7.2.Final by @dependabot in #1156
• [#1117] OSGI Missing Provide-Capability entry for org.apache.shiro.crypto.hash.HashSpi by @fpapon in #1158
• [#1117] fix missing osgi headers by @jherkel in #1118
• build(deps): bump com.puppycrawl.tools:checkstyle from 10.12.4 to 10.12.5 by @dependabot in #1159
• build(deps): bump org.owasp:dependency-check-maven from 8.4.2 to 8.4.3 by @dependabot in #1160
• build(deps-dev): bump org.bouncycastle:bcprov-jdk18on from 1.76 to 1.77 by @dependabot in #1161
• build(deps): bump spring.version from 5.3.30 to 5.3.31 by @dependabot in #1165
• build(deps): bump org.codehaus.mojo:versions-maven-plugin from 2.16.1 to 2.16.2 by @dependabot in #1166
• build(deps-dev): bump org.junit-pioneer:junit-pioneer from 2.1.0 to 2.2.0 by @dependabot in #1167
• build(deps): bump org.codehaus.mojo:exec-maven-plugin from 3.1.0 to 3.1.1 by @dependabot in #1168
• build(deps): bump bytebuddy.version from 1.14.9 to 1.14.10 by @dependabot in #1171
• build(deps-dev): bump arquillian.version from 1.7.2.Final to 1.8.0.Final by @dependabot in #1172
• build(deps): bump org.htmlunit:htmlunit from 3.7.0 to 3.8.0 by @dependabot in #1173
• build(deps): bump org.owasp:dependency-check-maven from 8.4.3 to 9.0.0 by @dependabot in #1174
• build(deps): bump spring-boot.version from 2.7.17 to 2.7.18 by @dependabot in #1177
• build(deps): bump org.jsoup:jsoup from 1.16.2 to 1.17.1 by @dependabot in #1182
• build(deps): bump org.owasp:dependency-check-maven from 9.0.0 to 9.0.1 by @dependabot in #1183
• build(deps): bump org.codehaus.mojo:build-helper-maven-plugin from 3.4.0 to 3.5.0 by @dependabot in #1184
• build(deps): bump actions/setup-java from 3.13.0 to 4.0.0 by @dependabot in #1185
• build(deps): bump io.openliberty.tools:liberty-maven-plugin from 3.9 to 3.10 by @dependabot in #1186
• build(deps): bump org.owasp:dependency-check-maven from 9.0.1 to 9.0.2 by @dependabot in #1192
• build(deps): bump com.github.mjeanroy:junit-servers-jetty-9 from 3.0.0 to 3.1.1 by @dependabot in #1191
• build(deps): bump org.htmlunit:htmlunit from 3.8.0 to 3.9.0 by @dependabot in #1195
• build(deps): bump mockito.version from 5.7.0 to 5.8.0 by @dependabot in #1194
• build(deps): bump org.owasp:dependency-check-maven from 9.0.2 to 9.0.3 by @dependabot in #1198
• build(deps): bump actions/stale from 8 to 9 by @dependabot in #1216
• build(deps): bump com.puppycrawl.tools:checkstyle from 10.12.5 to 10.12.6 by @dependabot in #1217
• build(deps): bump org.owasp:dependency-check-maven from 9.0.3 to 9.0.4 by @dependabot in #1218
• build(deps): bump org.codehaus.mojo:aspectj-maven-plugin from 1.14.0 to 1.15.0 by @dependabot in #1223
• build(deps): bump org.owasp:dependency-check-maven from 9.0.4 to 9.0.5 by @dependabot in #1229
• build(deps): bump actions/upload-artifact from 3.1.3 to 4.0.0 by @dependabot in #1230
• build(deps): bump org.owasp:dependency-check-maven from 9.0.5 to 9.0.6 by @dependabot in #1231
• build(deps): bump org.owasp:dependency-check-maven from 9.0.6 to 9.0.7 by @dependabot in #1235
• [samples] Fix spring-boot-3-web dependencies by @fpapon in #1237
• Include spring bom in samples by @lprimak in #1240
• Jakarta EE: Remove jetty workaround by @lprimak in #1241
• [#1004] - Remove compiler warnings by @lprimak in #1233
• build(deps): bump bytebuddy.version from 1.14.10 to 1.14.11 by @dependabot in #1242
• [SHIRO-820] - Fix Log4j2 logs format by @ksilisk in #1193
• build(deps): bump org.apache.commons:commons-lang3 from 3.13.0 to 3.14.0 by @dependabot in #1248
• build(deps): bump groovy.version from 4.0.15 to 4.0.17 by @dependabot in #1250
• build(deps): bump log4j.version from 2.21.1 to 2.22.0 by @dependabot in #1246
• build(deps): bump org.apache.maven.plugins:maven-pmd-plugin from 3.21.0 to 3.21.2 by @dependabot in #1249
• build(deps-dev): bump tomcat.version from 10.1.15 to 10.1.17 by @dependabot in #1247
• build(deps-dev): bump commons-logging:commons-logging from 1.2 to 1.3.0 by @dependabot in #1254
• build(deps): bump log4j.version from 2.22.0 to 2.22.1 by @dependabot in #1255
• build(deps): bump org.jsoup:jsoup from 1.17.1 to 1.17.2 by @dependabot in #1257
• build(deps): bump slf4j.version from 2.0.9 to 2.0.10 by @dependabot in #1258
• build(deps): bump org.apache.maven.plugins:maven-jxr-plugin from 3.3.1 to 3.3.2 by @dependabot in #1259
• build(deps): bump com.puppycrawl.tools:checkstyle from 10.12.6 to 10.12.7 by @dependabot in #1260
• build(deps-dev): bump org.assertj:assertj-core from 3.24.2 to 3.25.0 by @dependabot in #1261
• build(deps-dev): bump org.assertj:assertj-core from 3.25.0 to 3.25.1 by @dependabot in #1264
• [#1022] DefaultPasswordService takes HashService default hash… by @lprimak in #1263
• [#1022] bugfix(crypto): Shiro 1 hash parser now supports unsalted passwords by @lprimak in #1265
• bugfix(jakarta-ee-integration): removed chrome and gecko driver syste… by @lprimak in #1267
• build(deps): bump org.owasp:dependency-check-maven from 9.0.7 to 9.0.8 by @dependabot in #1269
• build(deps): bump slf4j.version from 2.0.10 to 2.0.11 by @dependabot in #1270
• build(deps-dev): bump tomcat.version from 10.1.17 to 10.1.18 by @dependabot in #1271
• build(deps): bump org.apache.rat:apache-rat-plugin from 0.15 to 0.16 by @dependabot in #1272
• build(deps): bump actions/cache from 3.3.2 to 3.3.3 by @dependabot in #1279
• build(deps): bump org.apache.karaf.features:framework from 4.4.4 to 4.4.5 by @dependabot in #1281
• [#1282] enh(jakarta-ee): added system properties to override resubmit URI by @lprimak in #1278
• build(deps): bump actions/upload-artifact from 4.0.0 to 4.1.0 by @dependabot in #1283
• build(deps): bump mockito.version from 5.8.0 to 5.9.0 by @dependabot in #1285
• build(deps): bump org.htmlunit:htmlunit from 3.9.0 to 3.10.0 by @dependabot in #1286
• build(deps): bump org.jboss.shrinkwrap.resolver:shrinkwrap-resolver-bom from 3.2.1 to 3.3.0 by @dependabot in #1287
• build(deps): bump actions/cache from 3.3.3 to 4.0.0 by @dependabot in #1288
• build(deps): bump org.owasp:dependency-check-maven from 9.0.8 to 9.0.9 by @dependabot in #1289
• build(deps): bump groovy.version from 4.0.17 to 4.0.18 by @dependabot in #1292
• build(deps): bump actions/upload-artifact from 4.1.0 to 4.2.0 by @dependabot in #1291
• build(deps): bump actions/upload-artifact from 4.2.0 to 4.3.0 by @dependabot in #1293
• build(deps-dev): bump org.assertj:assertj-core from 3.25.1 to 3.25.2 by @dependabot in #1294
• build(deps): bump mockito.version from 5.9.0 to 5.10.0 by @dependabot in #1295
• build(deps): bump org.apache.rat:apache-rat-plugin from 0.16 to 0.16.1 by @dependabot in #1298
• build(deps): bump com.puppycrawl.tools:checkstyle from 10.12.7 to 10.13.0 by @dependabot in #1297
• build(deps-dev): bump org.assertj:assertj-core from 3.25.2 to 3.25.3 by @dependabot in #1302
• build(deps): bump junit.version from 5.10.1 to 5.10.2 by @dependabot in #1303
• build(deps): bump actions/upload-artifact from 4.3.0 to 4.3.1 by @dependabot in #1304
• build(deps): bump slf4j.version from 2.0.11 to 2.0.12 by @dependabot in #1305
• build(deps): bump org.htmlunit:htmlunit from 3.10.0 to 3.11.0 by @dependabot in #1307
• build(deps): bump jetty.version from 9.4.53.v20231009 to 9.4.54.v20240208 by @dependabot in #1309
• build(deps): bump spring.version from 5.3.31 to 5.3.32 by @dependabot in #1312
• build(deps): bump bytebuddy.version from 1.14.11 to 1.14.12 by @dependabot in #1313
• build(deps): bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.18.3 to 0.18.4 by @dependabot in #1314
• build(deps): bump com.flowlogix:flowlogix-jee from 5.5.2 to 5.5.3 by @dependabot in #1318
• build(deps-dev): bump tomcat.version from 10.1.18 to 10.1.19 by @dependabot in #1319
• build(deps): bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.18.4 to 0.18.5 by @dependabot in #1320

New Contributors

• @mookkiah made their first contribution in #219
• @ramostear made their first contribution in #238
• @tbrugz made their first contribution in #242
• @vgaur made their first contribution in #245
• @ddddyyyy made their first contribution in #248
• @raupachz made their first contribution in #55
• @FredTreg made their first contribution in #257
• @TomMD made their first contribution in #250
• @dngzs made their first contribution in #263
• @lcc made their first contribution in #266
• @pitjazz made their first contribution in #288
• @seaswalker made their first contribution in #268
• @weltonrodrigo made their first contribution in #302
• @zAlbee made their first contribution in #309
• @jsoref made their first contribution in #269
• @ThanoshanMV made their first contribution in #320
• @zeroflag made their first contribution in #329
• @khmarbaise made their first contribution in #336
• @markixy made their first contribution in #344
• @pjfanning made their first contribution in #345
• @hugbgithub made their first contribution in #355
• @georgecao made their first contribution in #472
• @zenglzh made their first contribution in #526
• @lucasdillmann made their first contribution in #632
• @mnd999 made their first contribution in #629
• @step-security-bot made their first contribution in #706
• @EdgarRamirezFuentes made their first contribution in #1003
• @marcelstoer made their first contribution in #1042
• @JaapD made their first contribution in #1049
• @damonxue made their first contribution in #1069
• @wang3820 made their first contribution in #1149
• @jherkel made their first contribution in #1118
• @ksilisk made their first contribution in #1193

Full Changelog: shiro-root-1.13.0...shiro-root-2.0.0