Upgrade to Spring Security 7.0.0-M2

Closes gh-1281

Author: bclozel

platform/build.gradle

@@ -14,7 +14,7 @@ dependencies {
 	api(platform("io.micrometer:micrometer-bom:1.16.0-M2"))
 	api(platform("io.micrometer:micrometer-tracing-bom:1.6.0-M2"))
 	api(platform("org.springframework.data:spring-data-bom:2025.1.0-M5"))
-	api(platform("org.springframework.security:spring-security-bom:7.0.0-M1"))
+	api(platform("org.springframework.security:spring-security-bom:7.0.0-M2"))
 	api(platform("com.querydsl:querydsl-bom:5.1.0"))
 	api(platform("io.rsocket:rsocket-bom:1.1.5"))
 	api(platform("org.jetbrains.kotlin:kotlin-bom:${kotlinVersion}"))

spring-graphql/src/main/java/org/springframework/graphql/data/method/annotation/support/AuthenticationPrincipalArgumentResolver.java

@@ -112,7 +112,7 @@ private Mono<Authentication> getCurrentAuthentication(MethodParameter parameter)
 		return (value instanceof Authentication auth) ? Mono.just(auth) : (Mono<Authentication>) value;
 	}
 
-	private @Nullable Object resolvePrincipal(MethodParameter parameter, Object principal) {
+	private @Nullable Object resolvePrincipal(MethodParameter parameter, @Nullable Object principal) {
 		AuthenticationPrincipal annotation = findMethodAnnotation(parameter);
 		if (annotation != null && StringUtils.hasLength(annotation.expression())) {
 			StandardEvaluationContext context = new StandardEvaluationContext();

spring-graphql/src/main/java/org/springframework/graphql/execution/SecurityExceptionResolverUtils.java

@@ -41,6 +41,7 @@ static GraphQLError resolveUnauthorized(DataFetchingEnvironment environment) {
 				.build();
 	}
 
+	@SuppressWarnings("NullAway") // until https://github.com/spring-projects/spring-security/issues/17764
 	static GraphQLError resolveAccessDenied(
 			DataFetchingEnvironment env, AuthenticationTrustResolver resolver, SecurityContext securityContext) {