Migration Recipe for Spring Security 6.4 (#798)

* Migration Recipe for Spring Security 6.4

Refs: #793

* Add `UpgradeSpringSecurity_6_4` to `UpgradeSpringBoot_3_4`

* Only include Spring Security recipes with Spring Boot upgrades

To avoid running those twice

---------

Co-authored-by: Tim te Beek <[email protected]>

Author: ghusta

src/main/resources/META-INF/rewrite/spring-boot-33.yml

@@ -28,6 +28,7 @@ tags:
   - boot
 recipeList:
   - org.openrewrite.java.spring.boot3.UpgradeSpringBoot_3_2
+  - org.openrewrite.java.spring.security6.UpgradeSpringSecurity_6_3
   - org.openrewrite.java.spring.boot3.SpringBootProperties_3_3
   - org.openrewrite.java.dependencies.UpgradeDependencyVersion:
       groupId: org.springframework.boot

src/main/resources/META-INF/rewrite/spring-boot-34.yml

@@ -29,6 +29,7 @@ recipeList:
   - org.openrewrite.java.spring.framework.UpgradeSpringFramework_6_2
   - org.openrewrite.java.spring.cloud2024.UpgradeSpringCloud_2024
   - org.openrewrite.java.spring.data.UpgradeSpringData_3_4
+  - org.openrewrite.java.spring.security6.UpgradeSpringSecurity_6_4
   - org.openrewrite.java.spring.boot3.SpringBootProperties_3_4
   - org.openrewrite.java.dependencies.UpgradeDependencyVersion:
       groupId: org.springframework.boot

src/main/resources/META-INF/rewrite/spring-security-61.yml

@@ -26,7 +26,6 @@ tags:
   - spring
   - security
 recipeList:
-  - org.openrewrite.java.spring.security6.UpgradeSpringSecurity_6_0
   - org.openrewrite.java.dependencies.UpgradeDependencyVersion:
       groupId: org.springframework.security
       artifactId: "*"

src/main/resources/META-INF/rewrite/spring-security-62.yml

@@ -26,7 +26,6 @@ tags:
   - spring
   - security
 recipeList:
-  - org.openrewrite.java.spring.security6.UpgradeSpringSecurity_6_1
   - org.openrewrite.java.dependencies.UpgradeDependencyVersion:
       groupId: org.springframework.security
       artifactId: "*"

src/main/resources/META-INF/rewrite/spring-security-63.yml

@@ -26,7 +26,6 @@ tags:
   - spring
   - security
 recipeList:
-  - org.openrewrite.java.spring.security6.UpgradeSpringSecurity_6_2
   - org.openrewrite.java.dependencies.UpgradeDependencyVersion:
       groupId: org.springframework.security
       artifactId: "*"

src/main/resources/META-INF/rewrite/spring-security-64.yml

@@ -0,0 +1,38 @@
+#
+# Copyright 2025 the original author or authors.
+# <p>
+# Licensed under the Moderne Source Available License (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+# <p>
+# https://docs.moderne.io/licensing/moderne-source-available-license
+# <p>
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+---
+type: specs.openrewrite.org/v1beta/recipe
+name: org.openrewrite.java.spring.security6.UpgradeSpringSecurity_6_4
+displayName: Migrate to Spring Security 6.4
+description: >-
+  Migrate applications to the latest Spring Security 6.4 release. This recipe will modify an
+  application's build files, make changes to deprecated/preferred APIs, and migrate configuration settings that have
+  changes between versions.
+tags:
+  - spring
+  - security
+recipeList:
+  - org.openrewrite.java.dependencies.UpgradeDependencyVersion:
+      groupId: org.springframework.security
+      artifactId: "*"
+      newVersion: 6.4.x
+      overrideManagedVersion: false
+  - org.openrewrite.java.dependencies.UpgradeDependencyVersion:
+      groupId: org.springframework.security
+      artifactId: spring-security-oauth2-authorization-server
+      newVersion: 1.4.x
+      overrideManagedVersion: false