Spring Security 7.2

When upgrading to Spring Security 7.2, refer to What’s New in Spring Security 7.2 for newly introduced APIs, deprecated APIs, and breaking changes. Spring Security 7.2 is the release line for Spring Boot 4.2, and the Spring Boot 4.2 upgrade recipe chains this recipe.

The io.arconia.rewrite.spring.security7.UpgradeSpringSecurity_7_2 recipe automates the changes introduced in Spring Security 7.2. You can use it to update your project to the latest Spring Security 7.2.x release.

The recipe will:

  • Upgrade all org.springframework.security dependencies to the 7.2.x release line.

Spring Security 7.2 adds features without removing or renaming public APIs, so no source changes are needed beyond the version upgrade.

See its entry in the Recipe Catalog for the full list of recipes this upgrade applies, each with its options and a before/after example.

Run the Recipe

You can apply this recipe with any OpenRewrite-compatible tool. The tabs below show three of them: the Arconia CLI, the OpenRewrite Gradle plugin, and the OpenRewrite Maven plugin. See Running Recipes for a comparison of when to pick each one.

  • Arconia CLI

  • Gradle

  • Maven

arconia rewrite run --recipe-name io.arconia.rewrite.spring.security7.UpgradeSpringSecurity_7_2

First, create an init.gradle file in your project root with the following content.

initscript {
    repositories {
        gradlePluginPortal()
    }
    dependencies {
        classpath("org.openrewrite:plugin:latest.release")
    }
}

rootProject {
    plugins.apply(org.openrewrite.gradle.RewritePlugin)
    dependencies {
        rewrite("io.arconia.migrations:rewrite-spring:latest.release")
    }

    // Remove when project repositories are disabled
    afterEvaluate {
        if (repositories.isEmpty()) {
            repositories {
                mavenCentral()
            }
        }
    }

    configurations.named("rewrite") {
        canBeConsumed = false
    }
}

Then, run the following command.

./gradlew rewriteRun \
    --init-script init.gradle \
    --no-parallel \
    -DactiveRecipe=io.arconia.rewrite.spring.security7.UpgradeSpringSecurity_7_2

You can remove the init.gradle file afterwards.

./mvnw -U org.openrewrite.maven:rewrite-maven-plugin:run \
  -Drewrite.recipeArtifactCoordinates=io.arconia.migrations:rewrite-spring:LATEST \
  -Drewrite.activeRecipes=io.arconia.rewrite.spring.security7.UpgradeSpringSecurity_7_2