diff --git a/CHANGELOG.md b/CHANGELOG.md
index a1264a69c2..02107f7dd0 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,6 +1,31 @@
# Change Log
All notable changes to this project will be documented in this file.
+## 3.6.6
+
+- added Token Exchange support to Security Library for ID Token exchange and XSUAA Token exchange
+
+### Dependency upgrades
+
+- Update Spring dependencies (#1907)
+- Bump the prod-deps-ver group with 9 updates (#1902)
+- Bump the dev-deps group with 3 updates (#1901)
+- Bump io.projectreactor:reactor-test from 3.7.11 to 3.8.2 (#1892)
+- Configure Dependabot with dependency groups (#1900)
+- Bump org.sonatype.central:central-publishing-maven-plugin (#1894)
+- Bump org.apache.httpcomponents.client5:httpclient5 from 5.5.1 to 5.6 (#1895)
+- Bump org.json:json from 20250517 to 20251224 (#1898)
+- Bump ch.qos.logback:logback-core from 1.5.19 to 1.5.25 in /token-client (#1899)
+- Bump org.jacoco:jacoco-maven-plugin from 0.8.13 to 0.8.14 (#1873)
+- Bump org.apache.maven.plugins:maven-pmd-plugin from 3.27.0 to 3.28.0 (#1874)
+- Bump reactor.version from 3.7.11 to 3.7.12 (#1875)
+- Bump spring.core.version from 6.2.11 to 6.2.12 (#1878)
+- Bump com.github.spotbugs:spotbugs-maven-plugin from 4.9.6.0 to 4.9.8.1 (#1880)
+- Bump com.github.spotbugs:spotbugs-annotations from 4.9.6 to 4.9.8 (#1881)
+- Bump spring.security.version from 6.5.5 to 6.5.6 (#1882)
+- Bump spring.security.oauth2.version from 6.5.5 to 6.5.6 (#1883)
+- Bump ch.qos.logback:logback-core from 1.5.13 to 1.5.19 in /token-client (#1884)
+
## 3.6.5
### Dependency upgrades
diff --git a/README.md b/README.md
index bd39e3fdda..8db146716f 100644
--- a/README.md
+++ b/README.md
@@ -220,7 +220,7 @@ The SAP Cloud Security Services Integration is published to maven central: https
com.sap.cloud.security
java-bom
- 3.6.5
+ 3.6.6
import
pom
diff --git a/bom/pom.xml b/bom/pom.xml
index a16ecc8a12..f165d988b1 100644
--- a/bom/pom.xml
+++ b/bom/pom.xml
@@ -8,7 +8,7 @@
com.sap.cloud.security
java-bom
- 3.6.5
+ 3.6.6
pom
java-bom
diff --git a/env/pom.xml b/env/pom.xml
index c65f3dd8ab..31dd1d6c0a 100644
--- a/env/pom.xml
+++ b/env/pom.xml
@@ -9,7 +9,7 @@
com.sap.cloud.security.xsuaa
parent
- 3.6.5
+ 3.6.6
com.sap.cloud.security
diff --git a/java-api/README.md b/java-api/README.md
index 8b5acc60f9..4509977629 100644
--- a/java-api/README.md
+++ b/java-api/README.md
@@ -5,6 +5,6 @@
com.sap.cloud.security
java-api
- 3.6.5
+ 3.6.6
```
diff --git a/java-api/pom.xml b/java-api/pom.xml
index f8f674c567..727be06bc6 100644
--- a/java-api/pom.xml
+++ b/java-api/pom.xml
@@ -9,7 +9,7 @@
com.sap.cloud.security.xsuaa
parent
- 3.6.5
+ 3.6.6
com.sap.cloud.security
diff --git a/java-security-it/pom.xml b/java-security-it/pom.xml
index 8972c97f01..7d9bdeef7b 100644
--- a/java-security-it/pom.xml
+++ b/java-security-it/pom.xml
@@ -9,7 +9,7 @@
parent
com.sap.cloud.security.xsuaa
- 3.6.5
+ 3.6.6
java-security-it
diff --git a/java-security-test/README.md b/java-security-test/README.md
index fbaee51e30..28fc59c174 100644
--- a/java-security-test/README.md
+++ b/java-security-test/README.md
@@ -40,7 +40,7 @@ It is pre-configured with a security filter that only accepts valid tokens. Furt
com.sap.cloud.security
java-security-test
- 3.6.5
+ 3.6.6
test
```
diff --git a/java-security-test/pom.xml b/java-security-test/pom.xml
index 1441489a07..55768f4c0b 100644
--- a/java-security-test/pom.xml
+++ b/java-security-test/pom.xml
@@ -9,7 +9,7 @@
com.sap.cloud.security.xsuaa
parent
- 3.6.5
+ 3.6.6
com.sap.cloud.security
diff --git a/java-security/README.md b/java-security/README.md
index a35389bb59..beef4056da 100644
--- a/java-security/README.md
+++ b/java-security/README.md
@@ -69,7 +69,7 @@ Since it requires the Tomcat 10 runtime, it needs to be deployed using the [SAP
com.sap.cloud.security
java-security
- 3.6.5
+ 3.6.6
org.apache.httpcomponents
diff --git a/java-security/pom.xml b/java-security/pom.xml
index 3290429e23..9c1e967263 100644
--- a/java-security/pom.xml
+++ b/java-security/pom.xml
@@ -9,7 +9,7 @@
com.sap.cloud.security.xsuaa
parent
- 3.6.5
+ 3.6.6
com.sap.cloud.security
diff --git a/pom.xml b/pom.xml
index ea34d176f9..49cb69d2b1 100644
--- a/pom.xml
+++ b/pom.xml
@@ -7,7 +7,7 @@
com.sap.cloud.security.xsuaa
parent
- 3.6.5
+ 3.6.6
pom
parent
diff --git a/samples/java-security-usage-ias/pom.xml b/samples/java-security-usage-ias/pom.xml
index af66cb2154..01d58575ad 100755
--- a/samples/java-security-usage-ias/pom.xml
+++ b/samples/java-security-usage-ias/pom.xml
@@ -6,7 +6,7 @@
4.0.0
com.sap.cloud.security.xssec.samples
java-security-usage-ias
- 3.6.5
+ 3.6.6
war
https://github.com/SAP/cloud-security-xsuaa-integration
@@ -42,7 +42,7 @@
UTF-8
17
- 3.6.5
+ 3.6.6
2.0.5
4.5.14
6.1.0
diff --git a/samples/java-security-usage/pom.xml b/samples/java-security-usage/pom.xml
index 1e265df171..6091dcb6b9 100755
--- a/samples/java-security-usage/pom.xml
+++ b/samples/java-security-usage/pom.xml
@@ -6,7 +6,7 @@
4.0.0
com.sap.cloud.security.xssec.samples
java-security-usage
- 3.6.5
+ 3.6.6
war
org.apache.logging.log4j
@@ -53,7 +53,7 @@ These (spring) dependencies need to be provided:
com.sap.cloud.security.xsuaa
xsuaa-spring-boot-starter
- 3.6.5
+ 3.6.6
```
diff --git a/spring-xsuaa/pom.xml b/spring-xsuaa/pom.xml
index f40eb00543..38e09abde7 100644
--- a/spring-xsuaa/pom.xml
+++ b/spring-xsuaa/pom.xml
@@ -9,7 +9,7 @@
com.sap.cloud.security.xsuaa
parent
- 3.6.5
+ 3.6.6
spring-xsuaa
diff --git a/token-client/README.md b/token-client/README.md
index a9bf06c512..772c350cc9 100644
--- a/token-client/README.md
+++ b/token-client/README.md
@@ -52,7 +52,7 @@ In context of a Spring Boot application you can leverage autoconfiguration provi
com.sap.cloud.security
resourceserver-security-spring-boot-starter
- 3.6.5
+ 3.6.6
```
In context of Spring Applications you will need the following dependencies:
@@ -60,7 +60,7 @@ In context of Spring Applications you will need the following dependencies:
com.sap.cloud.security.xsuaa
token-client
- 3.6.5
+ 3.6.6
org.apache.httpcomponents
@@ -127,7 +127,7 @@ See the [OAuth2ServiceConfiguration](#oauth2serviceconfiguration) section and [H
com.sap.cloud.security.xsuaa
token-client
- 3.6.5
+ 3.6.6
org.apache.httpcomponents
diff --git a/token-client/pom.xml b/token-client/pom.xml
index 885c2a861c..8e903ed85b 100644
--- a/token-client/pom.xml
+++ b/token-client/pom.xml
@@ -9,7 +9,7 @@
com.sap.cloud.security.xsuaa
parent
- 3.6.5
+ 3.6.6
token-client