NewYour coding agent can read the release notes before it upgrades.Set up the MCP server →
Maven Central · #1070 by repository stars
Apache Shiro - Jakarta EE Integration
Last release 1 months ago
23 Aug 2026
Ships fairly regularly
a new release about every 3 months
Most releases are documented
notes for 10 of 12 stable releases
Nothing withdrawn
no release was ever pulled
4 years old
17 releases · first in 2023
One column per quarter.
enh: added replay whitelist and blacklist check before resubmitting a… by @lprimak in #2826
Full Changelog: shiro-root-3.0.0...shiro-root-3.0.1
Added NoAccessFilter and add it to the default filter chain (breaking change, hardened-by-default)
Breaking Changes:
PrincipalCollection immutable (ImmutablePrincipalCollection)setHost() and setStartTimestamp() from public API of SimpleSession to keep immutabilitySecurity improvements:
shiro.ini-based configurations only (hardened by default)Other Changes:
MergableAuthenticationInfo classShiroFilterFactoryBeanPostProcessor to fix post processing warnings in SpringRemovals of deprecated artifacts
SimplePrincipalCollection classRandomSessionIdGenerator classHttpSessionContext classJavaEnvironment classXmlSerializer.java classJakartaTransformer class and it's jakartify() methodShiroUrlPathHelper classShiroRequestMappingConfig classFull Changelog: shiro-root-2.2.1...shiro-root-3.0.0
Fix deprecation warnings by @lprimak in #1630
Full Changelog: shiro-root-2.1.0...shiro-root-3.0.0-alpha-1
[ #2758 ] Deprecate RandomSessionIdGenerator due to insufficient entropy by @lprimak in #2770
message by @jbampton in #2717Full Changelog: shiro-root-2.2.0...shiro-root-2.2.1
chore: fixed deprecated methods in Hasher
codespell.txt by @jbampton in #2521persist-credentials: false by @jbampton in #2532manual stage pre-commit hook chmod for markdown permissions by @jbampton in #2586document-start rule checking by @jbampton in #2585Note truncated.
chore: fix vulnerabilities in tests reported by OpenSSF tool by @lprimak in #2411
.rdf by @jbampton in #2386type attributes from HTML script tags by @jbampton in #2382--color=always by @jbampton in #2407pre-commit autoupdate to update the hooks by @jbampton in #2486--show-diff-on-failure by @jbampton in #2487Full Changelog: shiro-root-2.0.6...shiro-root-2.1.0
[ #2186 ] change authorized user to return 403 by @OyvindLGjesdal in #2187
CONTRIBUTING.md by @jbampton in #2315codespell with pre-commit and fix typos by @jbampton in #2313groups for github-actions ecosystem by @jbampton in #2340gitleaks to check for secrets by @jbampton in #2336pom.xml by @jbampton in #2331yamllint and standardize YAML files by @jbampton in #2343actions by @jbampton in #2333markdownlint and clean Markdown files by @jbampton in #2338actionlint for GitHub Actions workflow files by @jbampton in #2342shellcheck and clean shell files by @jbampton in #2339Full Changelog: shiro-root-2.0.5...shiro-root-2.0.6
[ #1691 ] added the @Qualifier annotation to the RequestMappi… by @Suvrat1629 in #2147
@Qualifier annotation to the RequestMappi… by @Suvrat1629 in #2147pom.xml files by @jbampton in #2173pom.xml by @jbampton in #2168Full Changelog: shiro-root-2.0.4...shiro-root-2.0.5
[ #2081 ] bugfix: remove InheriableThreadLocal from ThreadContext as it was cau… by @lprimak in #2082
Full Changelog: shiro-root-2.0.3...shiro-root-2.0.4
bugfix(test): locking flaky failing Guice test by @lprimak in #1890
Note truncated.
Nothing published for this version
Nothing published for this version
[SHIRO-290] Implement bcrypt and argon2 KDF algorithms
###########################################################
Improvement
[SHIRO-290] Implement bcrypt and argon2 KDF algorithms
###########################################################
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Your coding agent can read these notes before it upgrades. Set up the MCP server →