I am not sure how this dependency works but I am using spring 5.2.2 and spring boot 2.2.2. If I upgrade spring-security from 5.0.6 to 5.4.2, will it be compatible ?