4.668.v653c6b_c6cb_f5

🐛 Bug fixes

• Update tests and make authorization header check for Basic case-insensitive (RFC 7235) (#679) @eva-mueller

✍ Other changes

• [SECURITY] Upgrade pac4j to 6.3.3 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-29000) (#723) @abhu85

📦 Dependency updates

• Bump actions/checkout from 5 to 6 (#687) @dependabot[bot]

4.626.ve5a_d9f26c051

🚀 New features and improvements

• Allow showing user avatars when CSP is enforced (#681) @daniel-beck

📝 Documentation updates

• Remove overrideScopes from GOOGLE.md (#661) @jglick

4.609.v9de140f63d01

🐛 Bug fixes

• OidcProperty follow-ups; Fix application of clock skew to generated credentials (#654) @Vlatombe

4.600.vd5a_61e076596

🔥 Breaking changes

• Various options have moved to properties in the CasC format. Please check and update your CasC files against the documentation before upgrading. Non CasC users are unaffected.

👷 Changes for plugin developers

• Bump pac4jVersion from 6.1.3 to 6.2.1 (#638) @dependabot[bot]
• Introduce OidcProperty extension point (#644) @Vlatombe

✍ Other changes

• Ban JUnit 4 imports (#642) @strangelookingnerd
• Fix JUnit5 migration (#643) @strangelookingnerd
• Remove usages of Commons Lang 2 (#631) @jonesbusy
• Housekeeping (split from #509) (#653) @eva-mueller-coremedia

📦 Dependency updates

• Bump actions/checkout from 4 to 5 (#648) @dependabot[bot]
• Bump actions/setup-java from 4 to 5 (#651) @dependabot[bot]

4.524.v38858a_b_1c6a_4

🐛 Bug fixes

• There is no need to encode login parameters (#622) @jtnord

4.520.v7208b_4ff730b_

👻 Maintenance

• Prevent NullPointerException when using API token w/o OIC session (#483) @eva-mueller-coremedia

4.519.vfd806a_59b_47d

👻 Maintenance

• Update pac4j libraries from 6.1.1 to 6.1.3 (#595) @dependabot[bot]

4.517.v4a_538700c7d4

🚀 New features and improvements

• Add custom parameters to authorize and logout endpoints (#480) @eva-mueller-coremedia

✍ Other changes

• Revert "Bump org.jenkins-ci.plugins:plugin from 5.9 to 5.17" (#605) @jtnord
• update GHA maven to 3.9.10 (#602) @jtnord
• Fix typo in GitLab documentation (#589) @tachyons

4.494.v6b_f419104767

✍ Other changes

• Fix test on Jenkins 2.502+ (#556) @daniel-beck

4.487.v5eb_cdf31cf09

👻 Maintenance

• Use JSON Path library plugin (#541) @basil