Apache Shiro 3.0.0 Released with Major Security Hardening and JDK 17 Support

Apache Shiro security framework releases 3.0.0

I am thrilled to announce Apache Shiro 3.0.0, a major release reflecting over two years of dedicated work. This version sets JDK 17 as the new baseline and embraces Jakarta EE 9/10/11 alongside Spring 6/7. We have significantly hardened security by default, enabling case-insensitive path matching and adding the NoAccessFilter. Please note that Shiro 1.x and 2.x are now end-of-life.

"Apache Shiro 1.x and 2.x are now considered end-of-life."