48ee44bbc2
Bump org.apache.commons:commons-lang3 from 3.15.0 to 3.17.0
...
Bumps org.apache.commons:commons-lang3 from 3.15.0 to 3.17.0.
---
updated-dependencies:
- dependency-name: org.apache.commons:commons-lang3
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-10-21 01:48:04 +00:00
b359da5517
Merge pull request #1068 from JCgH4164838Gh792C124B5/localS2_66_JakartaMulipartRequestFix1
...
Potential mitigation for WW-5466
2024-10-20 11:09:53 +02:00
9f2770b2c3
Merge pull request #1075 from apache/feature/WW-5471-deprecate-sitemesh
...
WW-5471 Marks Sitemesh plugin as deprecated
2024-10-15 16:16:44 +02:00
78451db87e
Merge pull request #1062 from apache/dependabot/maven/jackson.version-2.18.0
...
WW-5469 Bump jackson.version from 2.17.2 to 2.18.0
2024-10-14 08:08:01 +02:00
49ddf6130a
WW-5471 Marks Sitemesh plugin as deprecated
2024-10-14 07:55:05 +02:00
1bcadd4682
Bump jackson.version from 2.17.2 to 2.18.0
...
Bumps `jackson.version` from 2.17.2 to 2.18.0.
Updates `com.fasterxml.jackson.core:jackson-core` from 2.17.2 to 2.18.0
- [Commits](https://github.com/FasterXML/jackson-core/compare/jackson-core-2.17.2...jackson-core-2.18.0 )
Updates `com.fasterxml.jackson.core:jackson-databind` from 2.17.2 to 2.18.0
- [Commits](https://github.com/FasterXML/jackson/commits )
Updates `com.fasterxml.jackson.dataformat:jackson-dataformat-xml` from 2.17.2 to 2.18.0
- [Commits](https://github.com/FasterXML/jackson-dataformat-xml/compare/jackson-dataformat-xml-2.17.2...jackson-dataformat-xml-2.18.0 )
---
updated-dependencies:
- dependency-name: com.fasterxml.jackson.core:jackson-core
dependency-type: direct:production
update-type: version-update:semver-minor
- dependency-name: com.fasterxml.jackson.core:jackson-databind
dependency-type: direct:production
update-type: version-update:semver-minor
- dependency-name: com.fasterxml.jackson.dataformat:jackson-dataformat-xml
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-10-14 05:40:12 +00:00
b115a510a6
Merge pull request #1064 from apache/dependabot/maven/log4j2.version-2.24.1
...
WW-5470 Bump log4j2.version from 2.23.1 to 2.24.1
2024-10-14 07:39:16 +02:00
fbab5d4df9
Merge pull request #1065 from apache/dependabot/maven/org.apache.maven.plugins-maven-project-info-reports-plugin-3.7.0
...
Bump org.apache.maven.plugins:maven-project-info-reports-plugin from 3.6.2 to 3.7.0
2024-10-14 07:28:01 +02:00
cd7f1097e2
Merge pull request #1061 from apache/dependabot/maven/commons-logging-commons-logging-1.3.4
...
Bump commons-logging:commons-logging from 1.3.3 to 1.3.4
2024-10-14 07:27:47 +02:00
2eff2da4fd
Merge pull request #1074 from apache/dependabot/github_actions/actions/upload-artifact-4.4.3
...
Bump actions/upload-artifact from 4.4.0 to 4.4.3
2024-10-14 07:24:46 +02:00
b3629460e6
Merge pull request #1073 from apache/dependabot/github_actions/github/codeql-action-3.26.12
...
Bump github/codeql-action from 3.26.8 to 3.26.12
2024-10-14 07:24:29 +02:00
3528b88327
Bump actions/upload-artifact from 4.4.0 to 4.4.3
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4.4.0 to 4.4.3.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/50769540e7f4bd5e21e526ee35c689e35e0d6874...b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-10-14 01:45:55 +00:00
3e04197ba7
Bump github/codeql-action from 3.26.8 to 3.26.12
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.26.8 to 3.26.12.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v3.26.8...v3.26.12 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-10-14 01:45:53 +00:00
09eb286020
Initial Commit:
...
- Fix for boundary condition bug in JakartaMultipartRequest that results
in a NPE when struts.multipart.maxStringLength is not explicitly set, and
normal fields are processed along with a file upload.
- Additional unit tests for file upload interceptors to confirm
functionality with-or-without max parameters being set when a file upload
is processed alone as well as with normal fields.
2024-10-06 15:37:16 -04:00
d33be1d43c
[maven-release-plugin] prepare for next development iteration
2024-10-05 16:08:38 +02:00
c812450292
[maven-release-plugin] prepare release STRUTS_6_6_1
2024-10-05 16:08:26 +02:00
75cc664fda
Merge pull request #1060 from apache/fix/WW-5297-invalid-session
...
WW-5297 Fixes checking nonce of invalidated session
2024-10-01 06:44:58 +02:00
9d903ddf96
Bump org.apache.maven.plugins:maven-project-info-reports-plugin
...
Bumps [org.apache.maven.plugins:maven-project-info-reports-plugin](https://github.com/apache/maven-project-info-reports-plugin ) from 3.6.2 to 3.7.0.
- [Commits](https://github.com/apache/maven-project-info-reports-plugin/compare/maven-project-info-reports-plugin-3.6.2...maven-project-info-reports-plugin-3.7.0 )
---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-project-info-reports-plugin
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-09-30 01:12:53 +00:00
4ccde0087e
Bump log4j2.version from 2.23.1 to 2.24.1
...
Bumps `log4j2.version` from 2.23.1 to 2.24.1.
Updates `org.apache.logging.log4j:log4j-api` from 2.23.1 to 2.24.1
Updates `org.apache.logging.log4j:log4j-core` from 2.23.1 to 2.24.1
Updates `org.apache.logging.log4j:log4j-jcl` from 2.23.1 to 2.24.1
Updates `org.apache.logging.log4j:log4j-slf4j-impl` from 2.23.1 to 2.24.1
---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-api
dependency-type: direct:production
update-type: version-update:semver-minor
- dependency-name: org.apache.logging.log4j:log4j-core
dependency-type: direct:production
update-type: version-update:semver-minor
- dependency-name: org.apache.logging.log4j:log4j-jcl
dependency-type: direct:development
update-type: version-update:semver-minor
- dependency-name: org.apache.logging.log4j:log4j-slf4j-impl
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-09-30 01:12:30 +00:00
7473b4cef9
Bump commons-logging:commons-logging from 1.3.3 to 1.3.4
...
Bumps commons-logging:commons-logging from 1.3.3 to 1.3.4.
---
updated-dependencies:
- dependency-name: commons-logging:commons-logging
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-09-30 01:11:56 +00:00
0bd4266d2f
WW-5297 Fixes checking nonce of invalidated session
2024-09-24 07:31:12 +02:00
48c4e3b6a0
Merge pull request #1058 from apache/dependabot/github_actions/github/codeql-action-3.26.8
...
Bump github/codeql-action from 3.26.6 to 3.26.8
2024-09-23 19:25:25 +02:00
40b4395801
Merge pull request #1057 from apache/dependabot/maven/org.codehaus.mojo-exec-maven-plugin-3.4.1
...
Bump org.codehaus.mojo:exec-maven-plugin from 3.3.0 to 3.4.1
2024-09-23 19:24:59 +02:00
0ce2c7b5dd
Merge pull request #1054 from apache/dependabot/maven/org.owasp-dependency-check-maven-10.0.4
...
Bump org.owasp:dependency-check-maven from 10.0.3 to 10.0.4
2024-09-23 19:24:13 +02:00
2924208228
Merge pull request #1053 from apache/dependabot/maven/org.apache.maven.plugins-maven-site-plugin-3.20.0
...
Bump org.apache.maven.plugins:maven-site-plugin from 3.12.1 to 3.20.0
2024-09-23 19:23:29 +02:00
3c71b2ed8c
Bump github/codeql-action from 3.26.6 to 3.26.8
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.26.6 to 3.26.8.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v3.26.6...v3.26.8 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-09-23 01:08:01 +00:00
d7626ed7d6
Bump org.codehaus.mojo:exec-maven-plugin from 3.3.0 to 3.4.1
...
Bumps [org.codehaus.mojo:exec-maven-plugin](https://github.com/mojohaus/exec-maven-plugin ) from 3.3.0 to 3.4.1.
- [Release notes](https://github.com/mojohaus/exec-maven-plugin/releases )
- [Commits](https://github.com/mojohaus/exec-maven-plugin/compare/3.3.0...3.4.1 )
---
updated-dependencies:
- dependency-name: org.codehaus.mojo:exec-maven-plugin
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-09-16 01:55:27 +00:00
fda2c546b3
Bump org.owasp:dependency-check-maven from 10.0.3 to 10.0.4
...
Bumps [org.owasp:dependency-check-maven](https://github.com/jeremylong/DependencyCheck ) from 10.0.3 to 10.0.4.
- [Release notes](https://github.com/jeremylong/DependencyCheck/releases )
- [Changelog](https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md )
- [Commits](https://github.com/jeremylong/DependencyCheck/compare/v10.0.3...v10.0.4 )
---
updated-dependencies:
- dependency-name: org.owasp:dependency-check-maven
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-09-16 01:55:12 +00:00
f03d36c46b
Bump org.apache.maven.plugins:maven-site-plugin from 3.12.1 to 3.20.0
...
Bumps [org.apache.maven.plugins:maven-site-plugin](https://github.com/apache/maven-site-plugin ) from 3.12.1 to 3.20.0.
- [Release notes](https://github.com/apache/maven-site-plugin/releases )
- [Commits](https://github.com/apache/maven-site-plugin/compare/maven-site-plugin-3.12.1...maven-site-plugin-3.20.0 )
---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-site-plugin
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-09-16 01:55:09 +00:00
90f984ca85
Merge pull request #1050 from apache/dependabot/maven/org.awaitility-awaitility-4.2.2
...
Bump org.awaitility:awaitility from 4.2.1 to 4.2.2
2024-09-10 18:42:27 +02:00
0f83b83972
Merge pull request #1048 from apache/dependabot/maven/org.apache.maven.plugins-maven-dependency-plugin-3.8.0
...
Bump org.apache.maven.plugins:maven-dependency-plugin from 3.6.1 to 3.8.0
2024-09-10 18:42:10 +02:00
c352fb59c1
Merge pull request #1047 from apache/dependabot/maven/org.assertj-assertj-core-3.26.3
...
Bump org.assertj:assertj-core from 3.25.3 to 3.26.3
2024-09-10 18:41:51 +02:00
3d155048da
Merge pull request #1046 from apache/dependabot/maven/maven-surefire-plugin.version-3.5.0
...
Bump maven-surefire-plugin.version from 3.4.0 to 3.5.0
2024-09-10 18:41:29 +02:00
9a06e7c983
Merge pull request #1049 from apache/dependabot/maven/org.jfree-jfreechart-1.5.5
...
Bump org.jfree:jfreechart from 1.5.4 to 1.5.5
2024-09-10 18:40:41 +02:00
280c3e4f5f
Bump org.awaitility:awaitility from 4.2.1 to 4.2.2
...
Bumps [org.awaitility:awaitility](https://github.com/awaitility/awaitility ) from 4.2.1 to 4.2.2.
- [Changelog](https://github.com/awaitility/awaitility/blob/master/changelog.txt )
- [Commits](https://github.com/awaitility/awaitility/compare/awaitility-4.2.1...awaitility-4.2.2 )
---
updated-dependencies:
- dependency-name: org.awaitility:awaitility
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-09-09 01:41:29 +00:00
4c95983abb
Bump org.jfree:jfreechart from 1.5.4 to 1.5.5
...
Bumps [org.jfree:jfreechart](https://github.com/jfree/jfreechart ) from 1.5.4 to 1.5.5.
- [Release notes](https://github.com/jfree/jfreechart/releases )
- [Commits](https://github.com/jfree/jfreechart/compare/v1.5.4...v1.5.5 )
---
updated-dependencies:
- dependency-name: org.jfree:jfreechart
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-09-09 01:41:23 +00:00
3111c4b86f
Bump org.apache.maven.plugins:maven-dependency-plugin
...
Bumps [org.apache.maven.plugins:maven-dependency-plugin](https://github.com/apache/maven-dependency-plugin ) from 3.6.1 to 3.8.0.
- [Release notes](https://github.com/apache/maven-dependency-plugin/releases )
- [Commits](https://github.com/apache/maven-dependency-plugin/compare/maven-dependency-plugin-3.6.1...maven-dependency-plugin-3.8.0 )
---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-dependency-plugin
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-09-09 01:41:19 +00:00
efab3fc6fa
Bump org.assertj:assertj-core from 3.25.3 to 3.26.3
...
Bumps [org.assertj:assertj-core](https://github.com/assertj/assertj ) from 3.25.3 to 3.26.3.
- [Release notes](https://github.com/assertj/assertj/releases )
- [Commits](https://github.com/assertj/assertj/compare/assertj-build-3.25.3...assertj-build-3.26.3 )
---
updated-dependencies:
- dependency-name: org.assertj:assertj-core
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-09-09 01:41:13 +00:00
0c69993cd7
Bump maven-surefire-plugin.version from 3.4.0 to 3.5.0
...
Bumps `maven-surefire-plugin.version` from 3.4.0 to 3.5.0.
Updates `org.apache.maven.surefire:surefire-junit47` from 3.4.0 to 3.5.0
Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.4.0 to 3.5.0
- [Release notes](https://github.com/apache/maven-surefire/releases )
- [Commits](https://github.com/apache/maven-surefire/compare/surefire-3.4.0...surefire-3.5.0 )
---
updated-dependencies:
- dependency-name: org.apache.maven.surefire:surefire-junit47
dependency-type: direct:production
update-type: version-update:semver-minor
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-09-09 01:41:09 +00:00
b04ad6b412
Merge pull request #1040 from apache/fix/WW-5461-input-name
...
WW-5461 Extends UploadedFile with inputName field
2024-09-06 20:16:13 +02:00
735d1bc88d
WW-5461 Extends UploadedFile with inputName field
2024-09-03 07:40:17 +02:00
f388f6a679
Merge pull request #1030 from apache/dependabot/maven/spring.platformVersion-5.3.39
...
Bump spring.platformVersion from 5.3.37 to 5.3.39
2024-09-02 08:26:44 +02:00
e74d21befb
Merge pull request #1038 from apache/dependabot/github_actions/github/codeql-action-3.26.6
...
Bump github/codeql-action from 3.26.2 to 3.26.6
2024-09-02 08:18:20 +02:00
93c9856527
Merge pull request #1037 from apache/dependabot/github_actions/actions/upload-artifact-4.4.0
...
Bump actions/upload-artifact from 4.3.6 to 4.4.0
2024-09-02 08:18:04 +02:00
f05a4d1c83
Merge pull request #1031 from apache/dependabot/maven/org.apache.commons-commons-compress-1.27.1
...
Bump org.apache.commons:commons-compress from 1.26.2 to 1.27.1
2024-09-02 08:16:53 +02:00
e4872ecf8e
Bump spring.platformVersion from 5.3.37 to 5.3.39
...
Bumps `spring.platformVersion` from 5.3.37 to 5.3.39.
Updates `org.springframework:spring-core` from 5.3.37 to 5.3.39
- [Release notes](https://github.com/spring-projects/spring-framework/releases )
- [Commits](https://github.com/spring-projects/spring-framework/compare/v5.3.37...v5.3.39 )
Updates `org.springframework:spring-context` from 5.3.37 to 5.3.39
- [Release notes](https://github.com/spring-projects/spring-framework/releases )
- [Commits](https://github.com/spring-projects/spring-framework/compare/v5.3.37...v5.3.39 )
Updates `org.springframework:spring-aop` from 5.3.37 to 5.3.39
- [Release notes](https://github.com/spring-projects/spring-framework/releases )
- [Commits](https://github.com/spring-projects/spring-framework/compare/v5.3.37...v5.3.39 )
Updates `org.springframework:spring-aspects` from 5.3.37 to 5.3.39
- [Release notes](https://github.com/spring-projects/spring-framework/releases )
- [Commits](https://github.com/spring-projects/spring-framework/compare/v5.3.37...v5.3.39 )
Updates `org.springframework:spring-beans` from 5.3.37 to 5.3.39
- [Release notes](https://github.com/spring-projects/spring-framework/releases )
- [Commits](https://github.com/spring-projects/spring-framework/compare/v5.3.37...v5.3.39 )
Updates `org.springframework:spring-test` from 5.3.37 to 5.3.39
- [Release notes](https://github.com/spring-projects/spring-framework/releases )
- [Commits](https://github.com/spring-projects/spring-framework/compare/v5.3.37...v5.3.39 )
Updates `org.springframework:spring-context-support` from 5.3.37 to 5.3.39
- [Release notes](https://github.com/spring-projects/spring-framework/releases )
- [Commits](https://github.com/spring-projects/spring-framework/compare/v5.3.37...v5.3.39 )
Updates `org.springframework:spring-web` from 5.3.37 to 5.3.39
- [Release notes](https://github.com/spring-projects/spring-framework/releases )
- [Commits](https://github.com/spring-projects/spring-framework/compare/v5.3.37...v5.3.39 )
---
updated-dependencies:
- dependency-name: org.springframework:spring-core
dependency-type: direct:development
update-type: version-update:semver-patch
- dependency-name: org.springframework:spring-context
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.springframework:spring-aop
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.springframework:spring-aspects
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.springframework:spring-beans
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.springframework:spring-test
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.springframework:spring-context-support
dependency-type: direct:development
update-type: version-update:semver-patch
- dependency-name: org.springframework:spring-web
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-09-02 06:14:58 +00:00
f6a60fc66f
Merge pull request #1028 from apache/dependabot/maven/slf4j.version-2.0.16
...
Bump slf4j.version from 2.0.13 to 2.0.16
2024-09-02 08:13:56 +02:00
00f0942449
Bump github/codeql-action from 3.26.2 to 3.26.6
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.26.2 to 3.26.6.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v3.26.2...v3.26.6 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-09-02 01:21:36 +00:00
8c7c39424f
Bump actions/upload-artifact from 4.3.6 to 4.4.0
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4.3.6 to 4.4.0.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/834a144ee995460fba8ed112a2fc961b36a5ec5a...50769540e7f4bd5e21e526ee35c689e35e0d6874 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-09-02 01:21:24 +00:00
ad7f3e3523
Bump org.apache.commons:commons-compress from 1.26.2 to 1.27.1
...
Bumps org.apache.commons:commons-compress from 1.26.2 to 1.27.1.
---
updated-dependencies:
- dependency-name: org.apache.commons:commons-compress
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-08-26 01:18:06 +00:00
dependabot[bot]