0e16915b4f
build(deps): bump maven-surefire-plugin.version from 3.5.4 to 3.5.5 ( #1600 )
...
Bumps `maven-surefire-plugin.version` from 3.5.4 to 3.5.5.
Updates `org.apache.maven.surefire:surefire-junit47` from 3.5.4 to 3.5.5
Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.4 to 3.5.5
- [Release notes](https://github.com/apache/maven-surefire/releases )
- [Commits](https://github.com/apache/maven-surefire/compare/surefire-3.5.4...surefire-3.5.5 )
---
updated-dependencies:
- dependency-name: org.apache.maven.surefire:surefire-junit47
dependency-version: 3.5.5
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
dependency-version: 3.5.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-25 09:00:10 +01:00
7b99d9eacb
build(deps): bump jackson.version from 2.21.0 to 2.21.1 ( #1599 )
...
Bumps `jackson.version` from 2.21.0 to 2.21.1.
Updates `com.fasterxml.jackson.core:jackson-core` from 2.21.0 to 2.21.1
- [Commits](https://github.com/FasterXML/jackson-core/compare/jackson-core-2.21.0...jackson-core-2.21.1 )
Updates `com.fasterxml.jackson.core:jackson-databind` from 2.21.0 to 2.21.1
- [Commits](https://github.com/FasterXML/jackson/commits )
Updates `com.fasterxml.jackson.dataformat:jackson-dataformat-xml` from 2.21.0 to 2.21.1
- [Commits](https://github.com/FasterXML/jackson-dataformat-xml/compare/jackson-dataformat-xml-2.21.0...jackson-dataformat-xml-2.21.1 )
---
updated-dependencies:
- dependency-name: com.fasterxml.jackson.core:jackson-core
dependency-version: 2.21.1
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: com.fasterxml.jackson.core:jackson-databind
dependency-version: 2.21.1
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: com.fasterxml.jackson.dataformat:jackson-dataformat-xml
dependency-version: 2.21.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-25 09:00:00 +01:00
d4a549672f
WW-5616 - JakartaStreamMultiPartRequest warns on file delete if the file doesnt exist ( #1591 )
...
* Pull aspects into alignment with main/7.x+ AbstractMultiPartRequest.java
* Update JakartaMultiPartRequest and JakartaStreamMultiPartRequest to use isFile()
* Update cleanup text to mirror main/7.x+
2026-02-22 08:40:15 +01:00
4b2915682d
fix(convention): WW-4421 detect duplicate @Action names when execute() is annotated ( #1590 )
...
The duplicate @Action name detection in PackageBasedActionConfigBuilder
was embedded inside a conditional block that only ran when execute() was
NOT annotated with @Action. This meant two methods could map to the same
action name silently when execute() had an @Action annotation, with one
overwriting the other non-deterministically.
Extract the duplicate check to run unconditionally before the conditional
block, so it applies to all annotated methods regardless of whether
execute() is annotated.
Backport of apache/struts#1579 from Struts 7.x to 6.x.
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-authored-by: Claude <noreply@anthropic.com >
2026-02-21 18:18:27 +01:00
18d6e77bf2
WW-5514: Make ProxyUtil cache configurable via struts constants ( #1573 )
...
* fix(ognl): make ProxyUtil cache configurable via struts constants
Makes the ProxyUtil cache type configurable through Struts constants,
allowing applications to use BASIC cache type (default) without
requiring Caffeine as a mandatory dependency.
New configuration properties:
- struts.proxy.cacheType: basic (default), lru, or wtlfu
- struts.proxy.cacheMaxSize: 10000 (default)
Fixes WW-5514
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
* refactor(ognl): use LazyRef for proxy caches and reset on factory change
Extract lazy initialization into reusable LazyRef<T> utility with
double-checked locking and reset support. ProxyUtil.setProxyCacheFactory()
now resets both caches so they are recreated with the new factory,
fixing the bug where caches were never refreshed after factory changes.
Default proxy cache type changed from 'basic' to 'wtlfu' for consistency
with expression and beanInfo caches. Fix @since version to 6.9.0.
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
---------
Co-authored-by: Claude <noreply@anthropic.com >
2026-02-21 18:17:39 +01:00
2bd1b60802
build(deps): bump org.apache.maven.plugins:maven-dependency-plugin ( #1576 )
...
Bumps [org.apache.maven.plugins:maven-dependency-plugin](https://github.com/apache/maven-dependency-plugin ) from 3.9.0 to 3.10.0.
- [Release notes](https://github.com/apache/maven-dependency-plugin/releases )
- [Commits](https://github.com/apache/maven-dependency-plugin/compare/maven-dependency-plugin-3.9.0...maven-dependency-plugin-3.10.0 )
---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-dependency-plugin
dependency-version: 3.10.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-12 18:52:58 +02:00
43b83731b7
Merge pull request #1565 from apache/WW-5610-extend-forwards-compat
...
WW-5610 Extend Struts 7 forwards compat to more interceptors
2026-02-12 21:59:28 +11:00
122dec4d73
feat(conversion): WW-4291 allow Spring bean names for type converters ( #1564 )
...
Implement two-phase processing for conversion properties to enable
Spring bean name resolution in struts-conversion.properties files.
The issue was a timing problem: type converters were processed during
bootstrap phase before SpringObjectFactory was available. Now:
- Early phase: process struts-default-conversion.properties (class names)
- Late phase: process user properties when SpringObjectFactory is ready
Changes:
- Add UserConversionPropertiesProvider interface for late initialization
- Add UserConversionPropertiesProcessor to trigger late phase processing
- Split StrutsConversionPropertiesProcessor.init() into early/late phases
- Register new beans in DefaultConfiguration and struts-beans.xml
- Add alias in StrutsBeanSelectionProvider for dependency injection
- Improve JavaDocs for BeanSelectionProvider classes
Closes WW-4291
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-authored-by: Claude <noreply@anthropic.com >
2026-02-06 07:44:06 +01:00
2907291ef7
build(deps): bump org.owasp:dependency-check-maven from 12.1.9 to 12.2.0 ( #1527 )
...
Bumps [org.owasp:dependency-check-maven](https://github.com/dependency-check/DependencyCheck ) from 12.1.9 to 12.2.0.
- [Release notes](https://github.com/dependency-check/DependencyCheck/releases )
- [Changelog](https://github.com/dependency-check/DependencyCheck/blob/main/CHANGELOG.md )
- [Commits](https://github.com/dependency-check/DependencyCheck/compare/v12.1.9...v12.2.0 )
---
updated-dependencies:
- dependency-name: org.owasp:dependency-check-maven
dependency-version: 12.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-02 19:56:44 +01:00
7065af8304
build(deps): bump jackson.version from 2.20.1 to 2.21.0 ( #1550 )
...
Bumps `jackson.version` from 2.20.1 to 2.21.0.
Updates `com.fasterxml.jackson.core:jackson-core` from 2.20.1 to 2.21.0
- [Commits](https://github.com/FasterXML/jackson-core/compare/jackson-core-2.20.1...jackson-core-2.21.0 )
Updates `com.fasterxml.jackson.core:jackson-databind` from 2.20.1 to 2.21.0
- [Commits](https://github.com/FasterXML/jackson/commits )
Updates `com.fasterxml.jackson.dataformat:jackson-dataformat-xml` from 2.20.1 to 2.21.0
- [Commits](https://github.com/FasterXML/jackson-dataformat-xml/compare/jackson-dataformat-xml-2.20.1...jackson-dataformat-xml-2.21.0 )
---
updated-dependencies:
- dependency-name: com.fasterxml.jackson.core:jackson-core
dependency-version: 2.21.0
dependency-type: direct:production
update-type: version-update:semver-minor
- dependency-name: com.fasterxml.jackson.core:jackson-databind
dependency-version: 2.21.0
dependency-type: direct:production
update-type: version-update:semver-minor
- dependency-name: com.fasterxml.jackson.dataformat:jackson-dataformat-xml
dependency-version: 2.21.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-02 19:50:51 +01:00
08fe3a2267
build(deps): bump org.apache.commons:commons-text from 1.12.0 to 1.15.0 ( #1549 )
...
Bumps [org.apache.commons:commons-text](https://github.com/apache/commons-text ) from 1.12.0 to 1.15.0.
- [Changelog](https://github.com/apache/commons-text/blob/master/RELEASE-NOTES.txt )
- [Commits](https://github.com/apache/commons-text/compare/rel/commons-text-1.12.0...rel/commons-text-1.15.0 )
---
updated-dependencies:
- dependency-name: org.apache.commons:commons-text
dependency-version: 1.15.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-02 19:43:30 +01:00
ff496c8850
build(deps): bump org.assertj:assertj-core from 3.27.6 to 3.27.7 ( #1560 )
...
Bumps [org.assertj:assertj-core](https://github.com/assertj/assertj ) from 3.27.6 to 3.27.7.
- [Release notes](https://github.com/assertj/assertj/releases )
- [Commits](https://github.com/assertj/assertj/compare/assertj-build-3.27.6...assertj-build-3.27.7 )
---
updated-dependencies:
- dependency-name: org.assertj:assertj-core
dependency-version: 3.27.7
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-02 18:51:32 +01:00
87d8feaa8f
WW-5610 Extend Struts 7 forwards compat to more interceptors
2026-02-02 18:27:01 +11:00
a5b736b488
chore(conf): skips scans if PR created by Dependabot ( #1554 )
2026-01-26 16:21:39 +01:00
55ed8629fe
build(deps): bump org.apache.velocity:velocity-engine-core ( #1546 )
...
Bumps org.apache.velocity:velocity-engine-core from 2.3 to 2.4.1.
---
updated-dependencies:
- dependency-name: org.apache.velocity:velocity-engine-core
dependency-version: 2.4.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-26 12:00:20 +01:00
a3820104d1
build(deps): bump commons-beanutils:commons-beanutils ( #1544 )
...
Bumps commons-beanutils:commons-beanutils from 1.9.4 to 1.11.0.
---
updated-dependencies:
- dependency-name: commons-beanutils:commons-beanutils
dependency-version: 1.11.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-26 11:57:28 +01:00
984383023b
build(deps-dev): bump org.apache.maven.plugins:maven-wrapper-plugin ( #1542 )
...
Bumps [org.apache.maven.plugins:maven-wrapper-plugin](https://github.com/apache/maven-wrapper ) from 3.3.3 to 3.3.4.
- [Release notes](https://github.com/apache/maven-wrapper/releases )
- [Commits](https://github.com/apache/maven-wrapper/compare/maven-wrapper-3.3.3...maven-wrapper-3.3.4 )
---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-wrapper-plugin
dependency-version: 3.3.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-26 10:24:25 +01:00
ba6572eab1
build(deps-dev): bump org.codehaus.mojo:versions-maven-plugin ( #1535 )
...
Bumps [org.codehaus.mojo:versions-maven-plugin](https://github.com/mojohaus/versions ) from 2.20.1 to 2.21.0.
- [Release notes](https://github.com/mojohaus/versions/releases )
- [Changelog](https://github.com/mojohaus/versions/blob/master/ReleaseNotes.md )
- [Commits](https://github.com/mojohaus/versions/compare/2.20.1...2.21.0 )
---
updated-dependencies:
- dependency-name: org.codehaus.mojo:versions-maven-plugin
dependency-version: 2.21.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-20 13:11:55 +01:00
921f07f091
build(deps): bump org.apache.maven.plugins:maven-source-plugin ( #1532 )
...
Bumps [org.apache.maven.plugins:maven-source-plugin](https://github.com/apache/maven-source-plugin ) from 3.3.1 to 3.4.0.
- [Release notes](https://github.com/apache/maven-source-plugin/releases )
- [Commits](https://github.com/apache/maven-source-plugin/compare/maven-source-plugin-3.3.1...maven-source-plugin-3.4.0 )
---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-source-plugin
dependency-version: 3.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-20 10:39:13 +01:00
6e15fbde32
build(deps-dev): bump commons-validator:commons-validator ( #1523 )
...
Bumps [commons-validator:commons-validator](https://github.com/apache/commons-validator ) from 1.10.0 to 1.10.1.
- [Changelog](https://github.com/apache/commons-validator/blob/master/RELEASE-NOTES.txt )
- [Commits](https://github.com/apache/commons-validator/compare/rel/commons-validator-1.10.0...rel/commons-validator-1.10.1 )
---
updated-dependencies:
- dependency-name: commons-validator:commons-validator
dependency-version: 1.10.1
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-14 19:19:51 +01:00
c60670b22b
WW-5602 fix StreamResult contentCharSet handling ( #1511 )
...
Evaluates contentCharSet expression before emptiness check to prevent
malformed content-type headers when expression evaluates to null.
- Parse contentCharSet expression first, then check if result is empty
- Use StringUtils.isNotEmpty() for proper null/empty validation
- Use setCharacterEncoding() instead of appending to content-type string
- Add test for null-evaluating charset expressions
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-authored-by: Claude <noreply@anthropic.com >
2026-01-14 19:18:27 +01:00
6d20e33a37
build(deps): bump io.github.x-stream:mxparser from 1.2.1 to 1.2.3 ( #1517 )
...
Bumps [io.github.x-stream:mxparser](https://github.com/x-stream/mxparser ) from 1.2.1 to 1.2.3.
- [Changelog](https://github.com/x-stream/mxparser/blob/master/changes.xml )
- [Commits](https://github.com/x-stream/mxparser/compare/v-1.2.1...v-1.2.3 )
---
updated-dependencies:
- dependency-name: io.github.x-stream:mxparser
dependency-version: 1.2.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-12 19:26:49 +01:00
43330ec5c5
build(deps): bump org.easymock:easymock from 5.4.0 to 5.6.0 ( #1520 )
...
Bumps [org.easymock:easymock](https://github.com/easymock/easymock ) from 5.4.0 to 5.6.0.
- [Release notes](https://github.com/easymock/easymock/releases )
- [Changelog](https://github.com/easymock/easymock/blob/master/ReleaseNotes.md )
- [Commits](https://github.com/easymock/easymock/compare/easymock-5.4.0...easymock-5.6.0 )
---
updated-dependencies:
- dependency-name: org.easymock:easymock
dependency-version: 5.6.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-12 19:26:23 +01:00
752c00f1ae
build(deps): bump org.apache.maven.plugins:maven-war-plugin ( #1519 )
...
Bumps [org.apache.maven.plugins:maven-war-plugin](https://github.com/apache/maven-war-plugin ) from 3.4.0 to 3.5.1.
- [Release notes](https://github.com/apache/maven-war-plugin/releases )
- [Commits](https://github.com/apache/maven-war-plugin/compare/maven-war-plugin-3.4.0...maven-war-plugin-3.5.1 )
---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-war-plugin
dependency-version: 3.5.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-12 19:25:59 +01:00
f3408b756d
Merge pull request #1516 from apache/dependabot/maven/release/struts-6-8-x/commons-logging-commons-logging-1.3.5
...
build(deps-dev): bump commons-logging:commons-logging from 1.3.4 to 1.3.5
2026-01-12 19:25:42 +01:00
1a17211d05
build(deps-dev): bump commons-logging:commons-logging
...
Bumps commons-logging:commons-logging from 1.3.4 to 1.3.5.
---
updated-dependencies:
- dependency-name: commons-logging:commons-logging
dependency-version: 1.3.5
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-01-12 17:52:27 +00:00
d955721e17
build(deps): bump org.codehaus.mojo:exec-maven-plugin ( #1509 )
...
Bumps [org.codehaus.mojo:exec-maven-plugin](https://github.com/mojohaus/exec-maven-plugin ) from 3.6.2 to 3.6.3.
- [Release notes](https://github.com/mojohaus/exec-maven-plugin/releases )
- [Commits](https://github.com/mojohaus/exec-maven-plugin/compare/3.6.2...3.6.3 )
---
updated-dependencies:
- dependency-name: org.codehaus.mojo:exec-maven-plugin
dependency-version: 3.6.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-12 18:41:04 +01:00
7f96a4f16e
build(deps): bump org.codehaus.mojo:versions-maven-plugin ( #1501 )
...
Bumps [org.codehaus.mojo:versions-maven-plugin](https://github.com/mojohaus/versions ) from 2.17.1 to 2.20.1.
- [Release notes](https://github.com/mojohaus/versions/releases )
- [Changelog](https://github.com/mojohaus/versions/blob/master/ReleaseNotes.md )
- [Commits](https://github.com/mojohaus/versions/compare/2.17.1...2.20.1 )
---
updated-dependencies:
- dependency-name: org.codehaus.mojo:versions-maven-plugin
dependency-version: 2.20.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-29 13:36:20 +01:00
4982e61f09
build(deps): bump org.owasp:dependency-check-maven from 10.0.4 to 12.1.9 ( #1500 )
...
Bumps [org.owasp:dependency-check-maven](https://github.com/dependency-check/DependencyCheck ) from 10.0.4 to 12.1.9.
- [Release notes](https://github.com/dependency-check/DependencyCheck/releases )
- [Changelog](https://github.com/dependency-check/DependencyCheck/blob/main/CHANGELOG.md )
- [Commits](https://github.com/dependency-check/DependencyCheck/compare/v10.0.4...v12.1.9 )
---
updated-dependencies:
- dependency-name: org.owasp:dependency-check-maven
dependency-version: 12.1.9
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-29 13:36:08 +01:00
71048d41a5
build(deps): bump org.apache.maven.plugins:maven-release-plugin ( #1499 )
...
Bumps [org.apache.maven.plugins:maven-release-plugin](https://github.com/apache/maven-release ) from 3.3.0 to 3.3.1.
- [Release notes](https://github.com/apache/maven-release/releases )
- [Commits](https://github.com/apache/maven-release/compare/maven-release-3.3.0...maven-release-3.3.1 )
---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-release-plugin
dependency-version: 3.3.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-29 13:35:54 +01:00
e8640b21f1
build(deps): bump asm.version from 9.9 to 9.9.1 ( #1495 )
...
Bumps `asm.version` from 9.9 to 9.9.1.
Updates `org.ow2.asm:asm` from 9.9 to 9.9.1
Updates `org.ow2.asm:asm-commons` from 9.9 to 9.9.1
---
updated-dependencies:
- dependency-name: org.ow2.asm:asm
dependency-version: 9.9.1
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.ow2.asm:asm-commons
dependency-version: 9.9.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-29 11:23:43 +01:00
daa9e9c9e1
build(deps): bump org.apache.maven.plugins:maven-site-plugin ( #1494 )
...
Bumps [org.apache.maven.plugins:maven-site-plugin](https://github.com/apache/maven-site-plugin ) from 3.20.0 to 3.21.0.
- [Release notes](https://github.com/apache/maven-site-plugin/releases )
- [Commits](https://github.com/apache/maven-site-plugin/compare/maven-site-plugin-3.20.0...maven-site-plugin-3.21.0 )
---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-site-plugin
dependency-version: 3.21.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-29 11:23:08 +01:00
07d5533cd6
build(deps): bump log4j2.version from 2.25.2 to 2.25.3 ( #1486 )
...
Bumps `log4j2.version` from 2.25.2 to 2.25.3.
Updates `org.apache.logging.log4j:log4j-api` from 2.25.2 to 2.25.3
Updates `org.apache.logging.log4j:log4j-core` from 2.25.2 to 2.25.3
Updates `org.apache.logging.log4j:log4j-jcl` from 2.25.2 to 2.25.3
Updates `org.apache.logging.log4j:log4j-slf4j-impl` from 2.25.2 to 2.25.3
---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-api
dependency-version: 2.25.3
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.apache.logging.log4j:log4j-core
dependency-version: 2.25.3
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.apache.logging.log4j:log4j-jcl
dependency-version: 2.25.3
dependency-type: direct:development
update-type: version-update:semver-patch
- dependency-name: org.apache.logging.log4j:log4j-slf4j-impl
dependency-version: 2.25.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-23 09:36:21 +01:00
b490e2c2fc
Merge pull request #1445 from ryanmurf/multipartCleanup
...
WW-5573 Multipart stream file cleanup
2025-12-11 12:48:13 +01:00
d5bff6aef8
Merge pull request #1466 from apache/dependabot/maven/release/struts-6-8-x/org.apache.maven.plugins-maven-failsafe-plugin-3.5.4
...
Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.5.1 to 3.5.4
2025-12-11 12:47:41 +01:00
69ccd406fe
Merge pull request #1462 from apache/dependabot/maven/release/struts-6-8-x/org.awaitility-awaitility-4.3.0
...
Bump org.awaitility:awaitility from 4.2.2 to 4.3.0
2025-12-11 12:47:21 +01:00
9afee9994d
Bump org.awaitility:awaitility from 4.2.2 to 4.3.0
...
Bumps [org.awaitility:awaitility](https://github.com/awaitility/awaitility ) from 4.2.2 to 4.3.0.
- [Changelog](https://github.com/awaitility/awaitility/blob/master/changelog.txt )
- [Commits](https://github.com/awaitility/awaitility/compare/awaitility-4.2.2...awaitility-4.3.0 )
---
updated-dependencies:
- dependency-name: org.awaitility:awaitility
dependency-version: 4.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-12-11 10:44:01 +00:00
7d7060896b
Merge pull request #1458 from apache/release/struts-6-7-x
...
Merges changes from older release branch
2025-12-11 11:33:22 +01:00
e37b68570f
Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.5.1 to 3.5.4
...
Bumps [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire ) from 3.5.1 to 3.5.4.
- [Release notes](https://github.com/apache/maven-surefire/releases )
- [Commits](https://github.com/apache/maven-surefire/compare/surefire-3.5.1...surefire-3.5.4 )
---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-failsafe-plugin
dependency-version: 3.5.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-12-11 10:22:39 +00:00
80739da117
Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.20.0 ( #1455 )
...
Bumps org.apache.commons:commons-lang3 from 3.17.0 to 3.20.0.
---
updated-dependencies:
- dependency-name: org.apache.commons:commons-lang3
dependency-version: 3.20.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-11 10:26:46 +01:00
c8b1d0e2f2
Bump org.apache.maven.plugins:maven-release-plugin from 3.1.1 to 3.3.0 ( #1454 )
...
Bumps [org.apache.maven.plugins:maven-release-plugin](https://github.com/apache/maven-release ) from 3.1.1 to 3.3.0.
- [Release notes](https://github.com/apache/maven-release/releases )
- [Commits](https://github.com/apache/maven-release/compare/maven-release-3.1.1...maven-release-3.3.0 )
---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-release-plugin
dependency-version: 3.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-10 12:25:39 +01:00
e5d835bc19
Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.5.0 to 3.6.2 ( #1453 )
...
Bumps [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer ) from 3.5.0 to 3.6.2.
- [Release notes](https://github.com/apache/maven-enforcer/releases )
- [Commits](https://github.com/apache/maven-enforcer/compare/enforcer-3.5.0...enforcer-3.6.2 )
---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-enforcer-plugin
dependency-version: 3.6.2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-10 12:25:21 +01:00
4997040be4
Bump maven-surefire-plugin.version from 3.5.1 to 3.5.4 ( #1452 )
...
Bumps `maven-surefire-plugin.version` from 3.5.1 to 3.5.4.
Updates `org.apache.maven.surefire:surefire-junit47` from 3.5.1 to 3.5.4
Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.1 to 3.5.4
- [Release notes](https://github.com/apache/maven-surefire/releases )
- [Commits](https://github.com/apache/maven-surefire/compare/surefire-3.5.1...surefire-3.5.4 )
---
updated-dependencies:
- dependency-name: org.apache.maven.surefire:surefire-junit47
dependency-version: 3.5.4
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
dependency-version: 3.5.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-10 12:25:02 +01:00
5d648a62bf
Bump org.apache.rat:apache-rat-plugin from 0.15 to 0.17 ( #1436 )
...
* Bump org.apache.rat:apache-rat-plugin from 0.15 to 0.17
Bumps org.apache.rat:apache-rat-plugin from 0.15 to 0.17.
---
updated-dependencies:
- dependency-name: org.apache.rat:apache-rat-plugin
dependency-version: '0.17'
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
* Updates exclusions
* Cleans up files with missing header
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Lukasz Lenart <lukaszlenart@apache.org >
2025-12-07 09:33:05 +01:00
52dba77dc0
Bump org.jfree:jfreechart from 1.5.5 to 1.5.6 ( #1440 )
...
Bumps [org.jfree:jfreechart](https://github.com/jfree/jfreechart ) from 1.5.5 to 1.5.6.
- [Release notes](https://github.com/jfree/jfreechart/releases )
- [Commits](https://github.com/jfree/jfreechart/compare/v1.5.5...v1.5.6 )
---
updated-dependencies:
- dependency-name: org.jfree:jfreechart
dependency-version: 1.5.6
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-01 06:55:32 +01:00
1fcfc42ab2
Bump log4j2.version from 2.25.1 to 2.25.2 ( #1437 )
...
Bumps `log4j2.version` from 2.25.1 to 2.25.2.
Updates `org.apache.logging.log4j:log4j-api` from 2.25.1 to 2.25.2
Updates `org.apache.logging.log4j:log4j-core` from 2.25.1 to 2.25.2
Updates `org.apache.logging.log4j:log4j-jcl` from 2.25.1 to 2.25.2
Updates `org.apache.logging.log4j:log4j-slf4j-impl` from 2.25.1 to 2.25.2
---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-api
dependency-version: 2.25.2
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.apache.logging.log4j:log4j-core
dependency-version: 2.25.2
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.apache.logging.log4j:log4j-jcl
dependency-version: 2.25.2
dependency-type: direct:development
update-type: version-update:semver-patch
- dependency-name: org.apache.logging.log4j:log4j-slf4j-impl
dependency-version: 2.25.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-01 06:54:13 +01:00
cae08102d5
Removes unused jaxb-core dependency ( #1434 )
2025-11-28 08:44:15 +01:00
a810da1397
Bump com.sun.xml.bind:jaxb-core from 2.3.0.1 to 4.0.6 ( #1429 )
...
Bumps com.sun.xml.bind:jaxb-core from 2.3.0.1 to 4.0.6.
---
updated-dependencies:
- dependency-name: com.sun.xml.bind:jaxb-core
dependency-version: 4.0.6
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-26 19:07:26 +01:00
0489abde40
Bump org.jacoco:jacoco-maven-plugin from 0.8.12 to 0.8.14 ( #1428 )
...
Bumps [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco ) from 0.8.12 to 0.8.14.
- [Release notes](https://github.com/jacoco/jacoco/releases )
- [Commits](https://github.com/jacoco/jacoco/compare/v0.8.12...v0.8.14 )
---
updated-dependencies:
- dependency-name: org.jacoco:jacoco-maven-plugin
dependency-version: 0.8.14
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-24 07:18:34 +01:00
96006ab4ff
Bump org.apache.maven.plugins:maven-dependency-plugin ( #1426 )
...
Bumps [org.apache.maven.plugins:maven-dependency-plugin](https://github.com/apache/maven-dependency-plugin ) from 3.8.0 to 3.9.0.
- [Release notes](https://github.com/apache/maven-dependency-plugin/releases )
- [Commits](https://github.com/apache/maven-dependency-plugin/compare/maven-dependency-plugin-3.8.0...maven-dependency-plugin-3.9.0 )
---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-dependency-plugin
dependency-version: 3.9.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-24 07:18:05 +01:00
dependabot[bot]