Apache/struts
1
0
Fork 0
mirror of https://github.com/apache/struts.git synced 2026-08-31 19:35:40 +00:00
Code Issues Packages Projects Releases Wiki Activity
8,415 Commits 15 Branches 184 Tags
main
Commit Graph

8415 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Lukasz Lenart e0be8270ca Merge pull request #1185 from apache/feature/WW-5510-tooltip 
WW-5510 Marks support for tooltips as deprecated
 2025-01-18 09:46:36 +01:00
Lukasz Lenart 32cd5d0dcc Adds 6.7.x branch to nigthlies step 2025-01-18 09:45:51 +01:00
Lukasz Lenart c2a5bfe3c9 WW-5510 Marks support for tooltips as deprecated 
This will be removed in the minor release, migrate to use native html tooltip support
 2025-01-16 10:31:43 +01:00
Lukasz Lenart fa60e1ceb2 Merge pull request #1184 from apache/fix/WW-5501-exclude-s7 
WW-5501 Only exclude malicious file names
 2025-01-16 10:19:15 +01:00
Lukasz Lenart 4279511c5b WW-5501 Only exclude malicious file names 2025-01-16 08:34:57 +01:00
Lukasz Lenart 71bca19c13 Merge pull request #1176 from apache/dependabot/maven/byte-buddy.version-1.15.11 
Bump byte-buddy.version from 1.14.11 to 1.15.11
 2025-01-16 07:58:38 +01:00
Lukasz Lenart 30aefaa5d3 Merge pull request #1183 from apache/dependabot/github_actions/actions/upload-artifact-4.6.0 
Bump actions/upload-artifact from 4.5.0 to 4.6.0
 2025-01-16 07:57:28 +01:00
Lukasz Lenart 2c023a245d Merge pull request #1182 from apache/dependabot/github_actions/github/codeql-action-3.28.1 
Bump github/codeql-action from 3.28.0 to 3.28.1
 2025-01-16 07:57:10 +01:00
Lukasz Lenart cebdf6df82 Merge pull request #1178 from apache/dependabot/maven/log4j2.version-2.24.3 
Bump log4j2.version from 2.24.2 to 2.24.3
 2025-01-16 07:56:53 +01:00
dependabot[bot] 6d01916f12 Bump actions/upload-artifact from 4.5.0 to 4.6.0 
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.5.0 to 4.6.0.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/6f51ac03b9356f520e9adb1b1b7802705f340c2b...65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-01-13 01:55:37 +00:00
dependabot[bot] 6cc4a105e6 Bump github/codeql-action from 3.28.0 to 3.28.1 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.0 to 3.28.1.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Commits](https://github.com/github/codeql-action/compare/v3.28.0...v3.28.1)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-01-13 01:55:35 +00:00
Kusal Kithul-Godage b5d94a1f07 Merge pull request #1179 from apache/excl-list 
Add jakarta package to exclusion list
 2025-01-06 21:23:41 +11:00
Kusal Kithul-Godage 9e93bb51db Add jakarta package to exclusion list 2025-01-06 13:46:21 +11:00
dependabot[bot] 0931b88b11 Bump log4j2.version from 2.24.2 to 2.24.3 
Bumps `log4j2.version` from 2.24.2 to 2.24.3.

Updates `org.apache.logging.log4j:log4j-api` from 2.24.2 to 2.24.3

Updates `org.apache.logging.log4j:log4j-core` from 2.24.2 to 2.24.3

Updates `org.apache.logging.log4j:log4j-jcl` from 2.24.2 to 2.24.3

Updates `org.apache.logging.log4j:log4j-slf4j-impl` from 2.24.2 to 2.24.3

---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-api
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.logging.log4j:log4j-jcl
  dependency-type: direct:development
  update-type: version-update:semver-patch
- dependency-name: org.apache.logging.log4j:log4j-slf4j-impl
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-01-06 01:11:00 +00:00
dependabot[bot] 8dfc157be0 Bump byte-buddy.version from 1.14.11 to 1.15.11 
Bumps `byte-buddy.version` from 1.14.11 to 1.15.11.

Updates `net.bytebuddy:byte-buddy` from 1.14.11 to 1.15.11
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](https://github.com/raphw/byte-buddy/compare/byte-buddy-1.14.11...byte-buddy-1.15.11)

Updates `net.bytebuddy:byte-buddy-agent` from 1.14.11 to 1.15.11
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](https://github.com/raphw/byte-buddy/compare/byte-buddy-1.14.11...byte-buddy-1.15.11)

---
updated-dependencies:
- dependency-name: net.bytebuddy:byte-buddy
  dependency-type: direct:development
  update-type: version-update:semver-minor
- dependency-name: net.bytebuddy:byte-buddy-agent
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-01-06 01:10:50 +00:00
Lukasz Lenart 98df24a2a0 Merge pull request #1171 from apache/fix/WW-5500-s7 
WW-5500 Extends pattern to validate multipart uploads
 2025-01-05 17:47:51 +01:00
Lukasz Lenart fd24a4a9c8 Merge pull request #1170 from apache/fix/WW-5498-s7 
WW-5498 Adds devMode errors as action messages to avoid breaking validation logic
 2025-01-05 17:47:14 +01:00
Lukasz Lenart 026300b456 Merge pull request #1133 from apache/dependabot/maven/commons-io-commons-io-2.18.0 
Bump commons-io:commons-io from 2.15.1 to 2.18.0
 2025-01-05 10:18:51 +01:00
Lukasz Lenart b36f7bd9cc Merge pull request #1173 from apache/fix/dependabot 
Updates dependabot.yml
 2025-01-05 10:07:14 +01:00
dependabot[bot] 93943dbb33 Bump commons-io:commons-io from 2.15.1 to 2.18.0 
Bumps commons-io:commons-io from 2.15.1 to 2.18.0.

---
updated-dependencies:
- dependency-name: commons-io:commons-io
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-01-05 09:01:48 +00:00
Lukasz Lenart 18f3a49028 Updatex dependabot.yml 
Stop ignoring any dependency
 2025-01-05 09:54:29 +01:00
Lukasz Lenart 9e2f92f7af Merge pull request #1172 from apache/fix/supported-versions 
Updates SECURITY.md
 2025-01-05 09:46:22 +01:00
Lukasz Lenart f97e2c29bc Updates SECURITY.md 2025-01-05 09:34:58 +01:00
Lukasz Lenart bd46f587a4 Merge pull request #1164 from apache/dependabot/maven/org.apache.velocity-velocity-engine-core-2.4.1 
Bump org.apache.velocity:velocity-engine-core from 2.3 to 2.4.1
 2025-01-05 09:29:57 +01:00
Lukasz Lenart e5825de28e Merge pull request #1163 from apache/dependabot/maven/org.freemarker-freemarker-2.3.34 
Bump org.freemarker:freemarker from 2.3.33 to 2.3.34
 2025-01-05 09:26:32 +01:00
Lukasz Lenart 6d71674cc1 WW-5500 Extends pattern to validate multipart uploads 2025-01-05 09:21:08 +01:00
Lukasz Lenart db9684e1c1 WW-5498 Adds devMode errors as action messages to avoid breaking validation logic 2025-01-05 09:18:40 +01:00
Lukasz Lenart ac9a02c685 Merge pull request #1166 from apache/fix/sonar-scan 
Removes checking branch ref and removes branch name as not needed
 2025-01-04 14:50:48 +01:00
Lukasz Lenart 9ac86ed61b Merge pull request #1165 from apache/feature/yourkit 
Add YourKit thank you section
 2025-01-04 14:38:11 +01:00
Lukasz Lenart c0a720475b Removes checking branch ref and removes branch name as not needed 2025-01-03 16:29:55 +01:00
Lukasz Lenart cadb7a1fb2 Add YourKit thank you section 2025-01-03 08:53:00 +01:00
dependabot[bot] 4f1556c2d7 Bump org.apache.velocity:velocity-engine-core from 2.3 to 2.4.1 
Bumps org.apache.velocity:velocity-engine-core from 2.3 to 2.4.1.

---
updated-dependencies:
- dependency-name: org.apache.velocity:velocity-engine-core
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-12-30 01:52:04 +00:00
dependabot[bot] 80b3108c86 Bump org.freemarker:freemarker from 2.3.33 to 2.3.34 
Bumps org.freemarker:freemarker from 2.3.33 to 2.3.34.

---
updated-dependencies:
- dependency-name: org.freemarker:freemarker
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-12-30 01:52:00 +00:00
Lukasz Lenart 375d00aa8e Merge pull request #1162 from apache/fix/strict-branch 
Uses exact branch name instead of wildcard
 2024-12-24 10:23:11 +01:00
Lukasz Lenart 44ff04683a Uses exact branch name instead of wildcard 2024-12-24 08:32:08 +01:00
Lukasz Lenart 2850315cf3 Merge pull request #1159 from apache/feature/WW-5503-removes-deps 
WW-5503 Removes unused dependencies
 2024-12-24 07:52:41 +01:00
Lukasz Lenart e695ac8a4e Merge pull request #1161 from apache/feature/wildcard-packages 
Adds additional test cases to match Struts packages
 2024-12-24 07:15:44 +01:00
Lukasz Lenart 0114dff50d WW-5503 Removes unused dependencies 2024-12-24 07:14:49 +01:00
Lukasz Lenart 7c62bfc5a4 Merge pull request #1160 from ljharb/patch-1 
[readme] add link to struts site commercial support page
 2024-12-23 20:43:15 +01:00
Lukasz Lenart 3be56a4840 Adds additional test cases to match Struts packages 2024-12-23 19:16:57 +01:00
Jordan Harband a9662ee583 [readme] add link to struts site commercial support page 
Link directly to https://struts.apache.org/commercial-support.html on the readme in the relevant section.
 2024-12-23 10:04:16 -08:00
Lukasz Lenart 43295b1f42 Merge pull request #1152 from apache/dependabot/maven/org.codehaus.mojo-versions-maven-plugin-2.18.0 
Bump org.codehaus.mojo:versions-maven-plugin from 2.17.1 to 2.18.0
 2024-12-23 16:12:33 +01:00
Lukasz Lenart faa3e723aa Merge pull request #1154 from apache/dependabot/github_actions/github/codeql-action-3.28.0 
Bump github/codeql-action from 3.27.9 to 3.28.0
 2024-12-23 16:12:22 +01:00
Lukasz Lenart 92b2cb9ee1 Merge pull request #1155 from apache/dependabot/github_actions/actions/upload-artifact-4.5.0 
Bump actions/upload-artifact from 4.4.3 to 4.5.0
 2024-12-23 16:12:11 +01:00
Lukasz Lenart 36ca20d3dc Merge pull request #1157 from apache/feature/WW-5501-exclude-s7 
WW-5501 Excludes malicious names
 2024-12-23 15:09:05 +01:00
Lukasz Lenart bbdb38dedc WW-5501 Uses StringUtils.normalizeSpace instead of sanitizeNewlines 2024-12-23 14:26:30 +01:00
Lukasz Lenart 552f7eba77 WW-5501 Excludes malicious names 2024-12-23 12:39:57 +01:00
dependabot[bot] 196aa3f366 Bump actions/upload-artifact from 4.4.3 to 4.5.0 
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.4.3 to 4.5.0.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882...6f51ac03b9356f520e9adb1b1b7802705f340c2b)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-12-23 02:01:04 +00:00
dependabot[bot] 0792d0586f Bump github/codeql-action from 3.27.9 to 3.28.0 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.27.9 to 3.28.0.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Commits](https://github.com/github/codeql-action/compare/v3.27.9...v3.28.0)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-12-23 02:01:01 +00:00
dependabot[bot] 6b07ee83ee Bump org.codehaus.mojo:versions-maven-plugin from 2.17.1 to 2.18.0 
Bumps [org.codehaus.mojo:versions-maven-plugin](https://github.com/mojohaus/versions) from 2.17.1 to 2.18.0.
- [Release notes](https://github.com/mojohaus/versions/releases)
- [Changelog](https://github.com/mojohaus/versions/blob/master/ReleaseNotes.md)
- [Commits](https://github.com/mojohaus/versions/compare/2.17.1...2.18.0)

---
updated-dependencies:
- dependency-name: org.codehaus.mojo:versions-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-12-23 01:10:38 +00:00