4.457.v8d7c72676cfe

👻 Maintenance

• Slim down JAR (#505) @basil

4.453.v4d7765c854f4

🔒 Security

• Fix SECURITY-3461.

4.438.440.v3f5f201de5dc

🔒 Security

• Fix SECURITY-3461.
  Backport of 4.453.v4d7765c854f4 on top of 4.438.v6e62f6782770

4.452.v2849b_d3945fa_

🚀 New features and improvements

• Upgrade to pac4j 6.x and migrate to EE 9 (#455) @basil

✍ Other changes

• Make jdk-17 required (#496) @fcojfernandez

4.444.vd4c54f157201

🐛 Bug fixes

• pass the correct argument to create the group filed JMESPath (#492) @jtnord

4.438.v6e62f6782770

🚀 New features and improvements

• Redirect to login page if refresh token has expired (#475) @eva-mueller-coremedia

📦 Dependency updates

• Bump codecov/codecov-action from 4 to 5 (#469) @dependabot

4.421.v5422614eb_e0a_

🔒 Security

• Fix SECURITY-3473.

4.418.vccc7061f5b_6d

🚀 New features and improvements

• Use a FIPS compliant version of nimbus-jose-jwt (#440) @fcojfernandez

🐛 Bug fixes

• Resuse the original user principal to avoid crumb issues. (#426) @jtnord

📝 Documentation updates

• fix plugin documentation of plugin configuration for endSessionEndpoint (#439) @sstoffregen

4.411.v990b_9d36e74e

🐛 Bug fixes

• Filter missing non-compliant algorithms in FIPS mode (#435) @fcojfernandez

4.409.ve864b_f48b_0f3

🚀 New features and improvements

• JENKINS-73904 - Enable FIPS restrictions in the JWK signing algorithm for Token verification (#428) @fcojfernandez

🐛 Bug fixes

• JEP-237 - disable escapeHatch when Jenkins is in FIPS mode (#418) @olamy

👻 Maintenance

• JENKINS-73849 - JEP-237 - remove the ability to disable SSL and token validation in FIPS mode (#423) @PereBueno

🚦 Tests

• Switching tests to throw generic Exception (#425) @PereBueno

✍ Other changes

• JENKINS-73892 - un-inline script in config.jelly and fix existing behavior (#427) @shlomomdahan