c094052969
Uses Java Reflections instead BeanUtils to read property
2022-03-04 12:52:33 +01:00
84164c422e
Drops unused dependency
2022-03-03 12:18:11 +01:00
8b11a3873a
WW-5171 Upgrades Log4j to version 2.17.2
2022-03-01 08:10:00 +01:00
115fef2af7
[maven-release-plugin] prepare for next development iteration
2022-02-24 07:11:22 +01:00
0c9f9c3400
[maven-release-plugin] prepare release STRUTS_6_0_0_RC3
2022-02-24 07:11:13 +01:00
f0b24d17da
WW-5167 Upgrades Xstream to version 1.4.19 to address CVE-2021-43859
2022-02-06 11:26:51 +01:00
14c3a14c8f
[maven-release-plugin] prepare for next development iteration
2022-01-29 17:36:34 +01:00
f997d9b1ed
[maven-release-plugin] prepare release STRUTS_6_0_0_RC2
2022-01-29 17:36:26 +01:00
3a7aabdcbc
WW-5166 Upgrades OGNL to version 3.3.2
2022-01-29 17:26:55 +01:00
0b5670f258
Update log4j to 2.17.1
2021-12-30 15:56:21 +04:00
62c85e8d11
upgrade maven-war-plugin to 3.3.1
...
will bring reproducible war
2021-12-24 16:22:08 +01:00
e1154d8b3a
upgrade Felix maven-bundle-plugin to 5.1.3
...
this will fix Reproducible Builds issue
2021-12-24 16:17:14 +01:00
9a8301d51d
WW-5161 Update spring to 4.3.30
2021-12-21 15:21:39 +01:00
80b39e2212
Adds moduleKey to avoid duplication
2021-12-20 08:32:14 +01:00
90001a98dd
Moves Sonar config into pom.xml
2021-12-20 07:58:35 +01:00
867492d485
Upgrades Maven Dependency Check plugin
2021-12-20 07:42:04 +01:00
57f76d94f2
[maven-release-plugin] prepare for next development iteration
2021-12-19 12:50:38 +01:00
96aedf9bd5
[maven-release-plugin] prepare release STRUTS_6_0_0_RC1
2021-12-19 12:50:28 +01:00
96f3df2d82
Merge pull request #514 from sullis/log4j-2.17.0
...
log4j 2.17.0
2021-12-18 18:56:34 +01:00
e29edc84e1
log4j 2.17.0
...
https://logging.apache.org/log4j/2.x/security.html
2021-12-18 06:25:47 -08:00
f0fcbfdaaa
Update slf4j to 1.7.32
2021-12-17 23:26:50 +01:00
9ca84ca02f
WW-5158 Upgrades Log4j to version 2.16.0
2021-12-15 12:46:20 +01:00
4620ea4766
Bump to 2.15.0 to fix log4j issue
2021-12-10 01:40:25 -05:00
844ea7a0c1
[WW-5148] Upgrade ASM to version 9.2
...
with JDK 17 and 18 support according to https://asm.ow2.io/versions.html
2021-11-16 23:25:47 +01:00
fe3b78e7f1
Upgrades maven-bundle-plugin to ver 5.1.1 to support Java 17
2021-10-18 09:23:29 +02:00
d5011aef67
Supports build on Java 17
2021-10-18 08:53:37 +02:00
30e549fe57
[WW-5143] [WW-5142] Upgrades OVal to ver. 3.2.1 and upgrades XStream to ver 1.4.18 ( #499 )
...
* WW-5143 WW-5142 Upgrades OVal to ver. 3.2.1 and upgrades XStream to ver 1.4.18
* WW-5143 Improves test
2021-10-04 12:12:24 +03:30
1567f7699d
WW-5134 Upgrades Xstream to version 1.4.17
2021-06-20 20:53:23 +02:00
eab033c7f0
Upgrades OWASP Maven Dependency Check Plugin to version 6.2.2
2021-06-14 08:04:23 +02:00
64eaff102a
Upgrades OWASP Maven Dependency Check Plugin
2021-05-31 09:04:34 +02:00
afab15b591
WW-5131 Upgrades commons-io to version 2.9.0
2021-05-31 07:40:09 +02:00
09f969a9be
Excludes vulnerable version of mxparser and uses fixed one
2021-04-06 08:00:49 +02:00
04eff63445
WW-5118 Upgrades OGNL to 3.2.20 to fix problem with long conversion
2021-04-06 07:25:26 +02:00
777caaade0
Upgrades Dependency Check plugin to version 6.1.3
2021-03-29 09:14:02 +02:00
2ba1a3eaf5
WW-5122 Upgrades Xstream to version 1.4.16
2021-03-28 10:15:34 +02:00
4f45ecec12
WW-5120 Upgrades Velocity
2021-03-15 08:35:54 +01:00
914b4c3cdd
Upgrades Dependency Check plugin to version 6.1.2
2021-03-15 08:15:57 +01:00
c16939ac3c
Excludes demo apps from Sonar analysis
2021-01-23 18:21:19 +01:00
353b76881a
Upgrades OWASP Dependency Check plugin
2021-01-11 07:51:32 +01:00
4b1262ef0f
Uses proper URLs for Jenkins
2020-12-28 09:13:51 +01:00
7532d2fb0d
Upgrades XStream to version 1.4.15 to address CVE-2020-26258, CVE-2020-26259
2020-12-21 07:39:16 +01:00
8c39a1563b
Upgrades Jackson to version 2.10.5/2.10.5.1
2020-12-17 11:02:17 +01:00
2739ceaab4
WW-5103 Updates XStream to version 1.4.14
2020-12-04 14:50:00 +01:00
a4793d27cf
WW-5097 Upgrades OGNL to version 3.2.16
2020-11-20 08:03:24 +01:00
7c721075b7
WW-5098 Upgrade asm to 9.0
...
with JDK 16 support (sealed classes)
according to https://asm.ow2.io/versions.html
2020-11-19 09:24:44 +01:00
fe5830c26b
WW-5094 Upgrades Spring and suppresses some TestNG dependencies
2020-11-08 08:30:24 +01:00
3933688c5f
Fixes a problem with broken site configuration
2020-11-05 07:27:10 +01:00
cb3ca4b311
Initial attempt to fix OSGi Plugin issues discovered during examination of
...
WW-5075.
- Draws on PR#427 and utilizes similar code, but updated for JDK8.
- Updated OSGi plugin dependencies to OSGi R7.
- Indication is that the OSGi Plugin has been failing since Struts 2.3.4.
- Applied fix to ResourceFinder to restore 2.3.x logic that was broken in
2.5.x.
- Implemented changes to restore OSGi Plugin functionality for 2.6.x.
- Applied changes to the OSGi Admin Bundle to function under 2.6.x.
- Applied changes to the OSGi Demo Bundle to function under 2.6.x.
- Updated the OSGi Admin Bundle JS libraries and related CSS to newer
versions.
- Added new unit tests for the OSGi plugin.
- The OSGi plugin will only function properly with exploded/expanded WAR
files.
- BundlePackageLoader changes suggested by L. Lenart (from PR#427).
- FelixOsgiHost changes to better handle Felix bundle cache location
processing (Windows and Linux).
- FelixOsgIHost test modified to not fail if felix-cache directory
cannot be created (warn only) to avoid failing the whole build.
- FelixOsgIHost test modified to not fail if felix-cache directory
bundle load issues arise (warn only) to avoid failing the whole build.
2020-08-21 16:04:19 -04:00
c2b09d76be
Sets a proper timestamp as maven-jar-plugin doesn't support "now"
2020-07-11 20:41:54 +02:00
82bc60c409
Adds outputTimestamp property to support reproducible build
...
See the link for more details
https://lists.apache.org/thread.html/r27ebcfec6431dc5f4830744e3567f082d8f140dc579f2a35408ea25c%40%3Cusers.maven.apache.org%3E
2020-07-11 19:57:13 +02:00
Lukasz Lenart