On behalf of the team and everyone who has contributed, I am pleased to announce that the second milestone of Spring Security 6.4 is released.

This second milestone release brings several compelling features including:

• Extended Annotation Expression Placeholders Support to to @AuthenticationPrincipal and @CurrentSecurityContext
• Use inline CSS for default login and logout page
• SAML 2.0 Now Supports OpenSAML 4 and 5
• Saml 2.0 Refreshable, Expiry-Aware Asserting Party Metadata Source
• SAML 2.0 Cacheable RelyingPartyRegistrations
• LDAP Supports UnboundID 7
• Kotlin Supports @PreFilter and @PostFilter
• OIDC Backchannel Logout Accepts logout+jwt Tokens
• Make protected resources requests with RestClient

And much more.

You can read more about each of these in the What's New section of the 6.4 documentation.