1. dcb7b04 jakarta-ee(form-data-save): updated docs with new in-process mechanism and resubmit-without-login functionality (#326) by Lenny Primak · 7 days ago main
  2. 8033c88 enh: improve documentation for automatic form data saving and replay after session expiry by lprimak · 7 days ago
  3. e74c7d8 build(deps): bump com.github.jnr:jnr-posix from 3.2.4 to 3.2.5 (#329) by dependabot[bot] · 8 days ago
  4. 29458c7 enh: update documentation for Spring Boot 4.2 path matching changes by lprimak · 8 days ago
  5. 9d97b88 build(deps): bump asm.version from 9.11 to 9.11.1 (#328) by dependabot[bot] · 12 days ago
  6. c42798e build(deps): bump asm.version from 9.10.1 to 9.11 (#327) by dependabot[bot] · 3 weeks ago
  7. 178a03c fix: Notaion -> Annotation by lprimak · 3 weeks ago
  8. be7091b docs: improve documentation content structure (#292) by Ganesh Patil · 3 weeks ago
  9. 033e38b build: improve shiro-site build performance (#291) by Ganesh Patil · 3 weeks ago
  10. c922e73 docs: complete authenticator and authorizer documentation (#290) by Ganesh Patil · 3 weeks ago
  11. 1ae17bd enh: add sponsorship section to support documentation (#325) by Lenny Primak · 5 weeks ago
  12. 5d36d46 enh: update end-of-life notice for Shiro v1 and v2 in documentation by lprimak · 6 weeks ago
  13. b942dd7 build(deps): bump org.apache:apache from 39 to 40 (#324) by dependabot[bot] · 6 weeks ago
  14. c66fb37 build(deps): bump com.github.jnr:jnr-posix from 3.2.2 to 3.2.4 (#323) by dependabot[bot] · 6 weeks ago
  15. 0a6d285 build(deps-dev): bump org.codehaus.mojo:exec-maven-plugin (#322) by dependabot[bot] · 7 weeks ago
  16. 0b5c27a enh(analytics): add scarf.sh pixel (#321) by Lenny Primak · 8 weeks ago
  17. 9ed5786 build(deps): bump org.yaml:snakeyaml from 2.6 to 2.7 (#320) by dependabot[bot] · 9 weeks ago
  18. f45b66b enh: updates for Shiro 3.0.1 by lprimak · 10 weeks ago
  19. ba27ef4 enh(security-reports): acknowledge Andrea Cosentino for reporting a weakness in remediation by lprimak · 10 weeks ago
  20. 4d12352 build(deps): bump org.freemarker:freemarker from 2.3.34 to 2.3.35 (#317) by dependabot[bot] · 10 weeks ago
  21. 3e44de6 build(deps): bump actions/setup-java in the github-dependencies group (#318) by dependabot[bot] · 10 weeks ago
  22. 7e88e0e build(deps): bump org.javassist:javassist from 3.32.0-GA to 3.33.0-GA (#319) by dependabot[bot] · 10 weeks ago
  23. 06c31a5 build(deps): bump com.github.jnr:jnr-posix from 3.2.1 to 3.2.2 (#316) by dependabot[bot] · 2 months ago
  24. e382009 docs: update integration documentation link (#315) by Savio · 3 months ago
  25. 4eef745 enh: update docs, downloads to 3.x by lprimak · 4 months ago
  26. 5db3370 enh: added shiro 3.0.0 logo on the home page by lprimak · 4 months ago
  27. a50cfef added announcement blog for 3.0.0 by lprimak · 4 months ago
  28. e700011 enh(security-model): add guidelines for handling host, port, and absolute URL in Shiro deployments by lprimak · 4 months ago
  29. 438c12b enh: updated security model for latest path traversal issue by lprimak · 4 months ago
  30. 42cf18d build(deps): bump org.apache:apache from 38 to 39 (#312) by dependabot[bot] · 4 months ago
  31. 031678d build(deps): bump com.github.jnr:jnr-posix from 3.1.22 to 3.2.1 (#313) by dependabot[bot] · 4 months ago
  32. 4838a26 fix: corrected CVE number for remember-me vulnerability by lprimak · 4 months ago
  33. cd9c9b7 enh(security-reports): add CVE-2026-56091 and CVE-2026-49268 vulnerability details and mitigations by lprimak · 5 months ago
  34. 49a7e73 build(deps): bump org.javassist:javassist from 3.31.0-GA to 3.32.0-GA (#311) by dependabot[bot] · 4 months ago
  35. 95b1628 build(deps): bump actions/checkout in the github-dependencies group (#310) by dependabot[bot] · 5 months ago
  36. e7947e5 enh(blog): added security fixes to 2.2.1 release by lprimak · 5 months ago
  37. ca28586 [release] Announce 2.2.1 (#309) by François Papon · 5 months ago
  38. 0c5c78b enh: added warnIfAuthenticatorFailed flag and AuthenticationExceptionEvent documentation for AtLeastOneSuccessfulStrategy in 3.0 by lprimak · 5 months ago
  39. 4a616ff chore(asf.yaml): enable rebase-and-merge by lprimak · 5 months ago
  40. 72dde72 enh: add CVE-2026-49268 report and mitigation details to security reports by lprimak · 5 months ago
  41. 085e8ed misc: fix typos (#308) by John Bampton · 5 months ago
  42. e1572ce enh: made alpha release optional by lprimak · 5 months ago
  43. 4660e95 [release] Announce 2.2.0 (#306) by François Papon · 5 months ago
  44. 8623aef security-model.adoc: draft additions for adversary model, known non-findings, triage dispositions (#302) by Jarek Potiuk · 5 months ago
  45. fad044d build(deps): bump asm.version from 9.10 to 9.10.1 (#305) by dependabot[bot] · 5 months ago
  46. b8547cd bugfix: update spring matching strategy from markdown to asciidoc format by lprimak · 5 months ago
  47. 61f5225 enh: update Apache Shiro vulnerability reports for CVE-2026-48589, CVE-2026-44598, CVE-2026-43827, and CVE-2026-43828 by lprimak · 5 months ago
  48. 6e7668d security: added shiroSavedRequest cookie CVE by lprimak · 6 months ago
  49. 4970153 added unsecure cookies CVE by lprimak · 6 months ago
  50. 133de50 added note to for servlet-managed sessions by lprimak · 6 months ago
  51. 259640c enh: reverted secureInDev flag and sync'd with current system proeprties by lprimak · 6 months ago
  52. 3887978 enh: added CVE-2026-43827 by lprimak · 6 months ago
  53. 99e5b8d Set up default protection ruleset for default and release branches (#304) by The Apache Software Foundation · 6 months ago
  54. c837609 build(deps): bump asm.version from 9.9.1 to 9.10 (#303) by dependabot[bot] · 6 months ago
  55. ae401fe build(deps): bump org.apache:apache from 37 to 38 (#301) by dependabot[bot] · 6 months ago
  56. 53f6ca1 fix: download button color visibility by lprimak · 6 months ago
  57. 40718e2 enh: document secure session cookie configuration for Jakarta EE by lprimak · 6 months ago
  58. 669b9c3 enh: document cookie options by lprimak · 6 months ago
  59. f99b753 enh: fixed up blog formatting by lprimak · 6 months ago
  60. a5b44cf docs: sponsorship blog (#299) by Lenny Primak · 6 months ago
  61. 19701ca build(deps): bump org.javassist:javassist from 3.30.2-GA to 3.31.0-GA (#300) by dependabot[bot] · 7 months ago
  62. ad6f302 build(deps): bump com.github.jnr:jnr-posix from 3.1.21 to 3.1.22 (#298) by dependabot[bot] · 7 months ago
  63. db4dc5a shiro 3.0.0-alpha-1 release by lprimak · 8 months ago
  64. d4d7784 build(deps): bump org.yaml:snakeyaml from 2.5 to 2.6 (#297) by dependabot[bot] · 8 months ago
  65. daf3447 docs: fix typo (#296) by John Bampton · 9 months ago
  66. 4974619 build: clarify Java version requirement for shiro-site (#293) by Ganesh Patil · 9 months ago
  67. e6a6317 Fix typos in artifacts.yaml (#295) by John Bampton · 9 months ago
  68. 2d2fc30 added CVEs and security reports related to 2.1.0 by lprimak · 9 months ago
  69. c4e6a26 [release] Fix download page by francois papon · 9 months ago
  70. 87b3e5f [release] Apache Shiro 2.1.0 (#294) by François Papon · 9 months ago
  71. 7793fde docs: fix hyphenation in about page (#289) by Sumit Kate · 9 months ago
  72. 410eb25 Add dark mode support to documentation website (#277) by Ganesh Patil · 9 months ago
  73. 6bb3a39 enh: scoped values by lprimak · 9 months ago
  74. d9b9349 This PR updates the documentation to reflect the use of GitHub Issues and GitHub Discussions, and marks JIRA as legacy for archival purposes only. Resolves #281. (#282) by Ganesh Patil · 9 months ago
  75. 63b0860 Update and link commercial support page (#278) by Ganesh Patil · 9 months ago
  76. 8a124d0 added more Spring config options from the Spring-boot page by lprimak · 9 months ago
  77. c34d6fe Update frontend dependencies (Bootstrap Icons, Highlight.js) (#275) by Ganesh Patil · 9 months ago
  78. cc58f85 Add troubleshooting and FAQ documentation page (#276) by Ganesh Patil · 10 months ago
  79. ef8f49b Add migration guide for Shiro 1.x, 2.x, and 3.x (#279) by Ganesh Patil · 10 months ago
  80. 8fae255 Update documentation for new configuration parameters (#280) by Ganesh Patil · 10 months ago
  81. f3034af Fix broken and outdated external links in documentation (#274) by Ganesh Patil · 10 months ago
  82. ec79811 Add consistent JBake metadata to documentation pages (#273) by Ganesh Patil · 10 months ago
  83. 9d26638 added shiro 3.0 config note by lprimak · 10 months ago
  84. 41944ca docs: update Jakarta EE documentation to clarify dependency chain applicability and versioning by lprimak · 10 months ago
  85. dac7d84 Add FlowLogix depchain as easier-than-BOM Shiro-Jakarta-EE dependencies (#219) (#260) by Ganesh Patil · 10 months ago
  86. 5d8fc21 docs: add note about Shiro version requirement for pre-flight requests feature by lprimak · 10 months ago
  87. 2242ac1 add Cors Support documentation (#261) by Fatih · 10 months ago
  88. ea135cb docs(security): update Security Model documentation and add rate limiting section by lprimak · 10 months ago
  89. 634d15f docs(security): add Security Model documentation (#259) by Ganesh Patil · 10 months ago
  90. c9dcf32 build(deps): bump org.apache:apache from 36 to 37 (#264) by dependabot[bot] · 10 months ago
  91. 98a18bf build(deps): bump org.apache:apache from 35 to 36 (#262) by dependabot[bot] · 10 months ago
  92. a7bd56a build(deps): bump org.jbake:jbake-maven-plugin from 2.7.0-rc.7 to 2.7.0 (#258) by dependabot[bot] · 10 months ago
  93. 6473142 build(deps): bump org.codehaus.mojo:exec-maven-plugin (#257) by dependabot[bot] · 11 months ago
  94. ee2cc71 build(deps): bump asm.version from 9.9 to 9.9.1 (#256) by dependabot[bot] · 11 months ago
  95. 59075f4 build(deps): bump actions/checkout in the github-dependencies group (#254) by dependabot[bot] · 11 months ago
  96. 9264fa8 [release] Fix download page for 2.0.6 (#253) by François Papon · 12 months ago
  97. 8c0c348 [release] Announce 2.0.6 (#252) by François Papon · 12 months ago
  98. 66db979 removed older algorithms and updated to reflect what's in Shiro 2 currently (#249) by Lenny Primak · 12 months ago
  99. 12d66df build(deps): bump com.github.jnr:jnr-posix from 3.1.20 to 3.1.21 (#250) by dependabot[bot] · 12 months ago
  100. 004ab22 build(deps): bump org.codehaus.mojo:exec-maven-plugin (#245) by dependabot[bot] · 12 months ago