June 2025 monthly summary for spring-projects/spring-security. Key feature delivered: refactor of the WebSocket CSRF decision logic in the WebSocket message broker security configuration to use Set.contains() instead of multiple string equality checks. This preserves functional behavior while improving readability and maintainability. The change reduces future regression risk and paves the way for easier enhancements in CSRF decision paths.