77.26.0

What's Changed

Fixes

• Fix regression with OIDC discovery url but no tokenUrl by @strehle in #3280
• Fix ArrayIndexOutOfBoundsException in UaaRequestMatcher by @adrianhoelzl-sap in #3276
• Fix the client_auth_method check, do not allow client_credentials with empty secret by @strehle in #3243
• Fix concurrent group membership race conditions by @mikeroda in #3252
• Fix SAML error message, solve issue 3226 by @strehle in #3234
• Fix ITs by @strehle in #3248
• Fix yml filenames in testing doc by @duanemay in #3277
• Fix missing default-profile on CI oidc10 app by @Kehrlann in #3266

Misc

• Migrate DB configuration from XML to Java by @Kehrlann in #3240
• Refactor and extend timeout durations by @duanemay in #3263
• Cleanup from PR #3252 by @strehle in #3275
• Cargo: increase rate limitt for tests by @Kehrlann in #3278
• typo by @strehle in #3274
• Dockerize SimpleSAMLPhp for Local Integration Tests by @fhanik in #3272
• Remove retry for unit tests by @duanemay in #3244
• Deprecate default profile by @fhanik in #3253

Dependency Bumps

• build(deps): bump commons-codec:commons-codec from 1.17.2 to 1.18.0 by @dependabot in #3260
• build(deps): bump versions.seleniumVersion from 4.27.0 to 4.28.1 by @dependabot in #3256
• deps: update dependency go to v1.23.5 by @strehle in #3245
• build(deps): bump org.bouncycastle:bctls-fips from 2.0.19 to 2.1.20 by @dependabot in #3264
• build(deps): bump org.bouncycastle:bc-fips from 2.0.0 to 2.1.0 by @dependabot in #3259
• build(deps): bump org.bouncycastle:bcpkix-fips from 2.0.7 to 2.1.8 by @dependabot in #3258
• Revert BouncyCastle FIPS back to 2.0.0 by @strehle in #3267
• Bump gradle to 8.12.1 by @strehle in #3257
• build(deps): bump joda-time:joda-time from 2.13.0 to 2.13.1 by @dependabot in #3273

Full Changelog: v77.25.0...v77.26.0