Major Changes

• Java 17 is the minimum requirement
• Jakarta EE 11, Spring 7 and SpringBoot 4 without classifiers, dropped support for Jakarta EE 8 and SpringBoot 2
• Removed many deprecations
• Refactored code to use Java 17+ features
• Using Scoped values instead of ThreadLocals on JDK 25+

What's Changed

• [#1548] - redefines PrincipalCollection interface to be intended as immutable by @janitza-mage in #1582
• Fix deprecation warnings by @lprimak in #1630
• Refactor: AssertJ best practices by @timtebeek by @lprimak in #1454
• chore(3.x): Migrate to jakarta EE 10 using OpenRewrite by @rgcv in #2224
• [#1585] Migrate to Jakarta EE 10 (3.x) by @rgcv in #2018
• enh[3.x]: Adds default NoAccess configuration to the default filter chain by @lprimak in #2461
• [#1585] Jakarta namespace and java 17 for 3x by @nsoft in #2017
• [3.x] Karaf needs update by @fpapon in #2517
• [#1862] [3.0] Support for JDK 25 scoped values by @lprimak in #2485

New Contributors

• @janitza-mage made their first contribution in #1582
• @Himakar made their first contribution in #1581
• @rgcv made their first contribution in #2224
• @nsoft made their first contribution in #2017
• @iampratap7997-dot made their first contribution in #2518

Full Changelog: shiro-root-2.1.0...shiro-root-3.0.0-alpha-1