Spring Framework 6.1 removes LocalVariableTableParameterNameDiscoverer. Since this affects how @PreAuthorize and others will process parameter names, it would help folks upgrade to mention this in Spring Security's upgrade notes.