From 8af13a60617a8163135cda4bf1356956feb7e4ed Mon Sep 17 00:00:00 2001
From: Devon Hillard <devon@digitalsanctuary.com>
Date: Fri, 24 Jul 2026 11:03:42 -0600
Subject: [PATCH] chore: adopt ds-spring-user-framework 5.1.1

Picks up the RequestCache hardening + auto-unprotect of browser icon probes
(fixes the post-login redirect hijack to /apple-touch-icon.png?continue).

Once 5.1.1 is adopted, the framework auto-unprotects /apple-touch-icon*.png,
so the demo's manual /apple-touch-icon* whitelist entry (#77) becomes
redundant-but-harmless.

BLOCKED: do not merge until 5.1.1 is published to Maven Central.
---
 build.gradle | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/build.gradle b/build.gradle
index 2719391..69f8867 100644
--- a/build.gradle
+++ b/build.gradle
@@ -39,7 +39,7 @@ repositories {
 
 dependencies {
     // DigitalSanctuary Spring User Framework
-    implementation 'com.digitalsanctuary:ds-spring-user-framework:5.1.0'
+    implementation 'com.digitalsanctuary:ds-spring-user-framework:5.1.1'
 
     // WebAuthn support (Passkey authentication)
     implementation 'org.springframework.security:spring-security-webauthn'