dependabot[bot]
|
5a50bd312d
|
Bump slf4j.version from 2.0.13 to 2.0.16
Bumps `slf4j.version` from 2.0.13 to 2.0.16.
Updates `org.slf4j:slf4j-api` from 2.0.13 to 2.0.16
Updates `org.slf4j:slf4j-simple` from 2.0.13 to 2.0.16
---
updated-dependencies:
- dependency-name: org.slf4j:slf4j-api
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.slf4j:slf4j-simple
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2024-08-26 01:17:36 +00:00 |
|
Lukasz Lenart
|
5b68d4bd59
|
Merge pull request #1025 from apache/dependabot/maven/org.apache.maven.plugins-maven-release-plugin-3.1.1
Bump org.apache.maven.plugins:maven-release-plugin from 3.0.1 to 3.1.1
|
2024-08-19 10:28:23 +02:00 |
|
Lukasz Lenart
|
64a3d0c32f
|
Merge pull request #1020 from apache/dependabot/maven/org.easymock-easymock-5.4.0
Bump org.easymock:easymock from 5.2.0 to 5.4.0
|
2024-08-19 10:27:42 +02:00 |
|
Lukasz Lenart
|
6f135ea4d8
|
Merge pull request #1022 from apache/dependabot/maven/maven-surefire-plugin.version-3.4.0
Bump maven-surefire-plugin.version from 3.3.1 to 3.4.0
|
2024-08-19 10:23:23 +02:00 |
|
Lukasz Lenart
|
bdace9bbad
|
Merge pull request #1026 from apache/dependabot/github_actions/github/codeql-action-3.26.2
Bump github/codeql-action from 3.26.0 to 3.26.2
|
2024-08-19 10:23:00 +02:00 |
|
dependabot[bot]
|
9765edf2ea
|
Bump github/codeql-action from 3.26.0 to 3.26.2
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.26.0 to 3.26.2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Commits](https://github.com/github/codeql-action/compare/v3.26.0...v3.26.2)
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2024-08-19 01:52:03 +00:00 |
|
dependabot[bot]
|
e81adc11eb
|
Bump org.apache.maven.plugins:maven-release-plugin from 3.0.1 to 3.1.1
Bumps [org.apache.maven.plugins:maven-release-plugin](https://github.com/apache/maven-release) from 3.0.1 to 3.1.1.
- [Release notes](https://github.com/apache/maven-release/releases)
- [Commits](https://github.com/apache/maven-release/compare/maven-release-3.0.1...maven-release-3.1.1)
---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-release-plugin
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2024-08-19 01:25:44 +00:00 |
|
dependabot[bot]
|
0d84319dbf
|
Bump maven-surefire-plugin.version from 3.3.1 to 3.4.0
Bumps `maven-surefire-plugin.version` from 3.3.1 to 3.4.0.
Updates `org.apache.maven.surefire:surefire-junit47` from 3.3.1 to 3.4.0
Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.3.1 to 3.4.0
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](https://github.com/apache/maven-surefire/compare/surefire-3.3.1...surefire-3.4.0)
---
updated-dependencies:
- dependency-name: org.apache.maven.surefire:surefire-junit47
dependency-type: direct:production
update-type: version-update:semver-minor
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2024-08-19 01:25:04 +00:00 |
|
Kusal Kithul-Godage
|
9b259ae43a
|
Merge pull request #1021 from apache/WW-4062-ognl-exc-cache
WW-4062 Further optimisation of OgnlException caching
|
2024-08-13 19:22:28 +10:00 |
|
Kusal Kithul-Godage
|
0fd85517e9
|
WW-4062 Further optimisation of OgnlException caching
|
2024-08-13 19:15:43 +10:00 |
|
Lukasz Lenart
|
8d07694be6
|
Merge pull request #1019 from apache/dependabot/maven/org.apache.maven.plugins-maven-failsafe-plugin-3.3.1
Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.3.0 to 3.3.1
|
2024-08-12 07:42:45 +02:00 |
|
Lukasz Lenart
|
d42e530c89
|
Merge pull request #1018 from apache/dependabot/maven/org.codehaus.mojo-versions-maven-plugin-2.17.1
Bump org.codehaus.mojo:versions-maven-plugin from 2.16.2 to 2.17.1
|
2024-08-12 07:42:29 +02:00 |
|
Lukasz Lenart
|
ea9d4774dd
|
Merge pull request #1017 from apache/dependabot/maven/org.apache.maven.plugins-maven-wrapper-plugin-3.3.2
Bump org.apache.maven.plugins:maven-wrapper-plugin from 3.2.0 to 3.3.2
|
2024-08-12 07:42:09 +02:00 |
|
Lukasz Lenart
|
9948258fca
|
Merge pull request #1016 from apache/dependabot/maven/commons-logging-commons-logging-1.3.3
Bump commons-logging:commons-logging from 1.3.0 to 1.3.3
|
2024-08-12 07:41:53 +02:00 |
|
Lukasz Lenart
|
8bbe215b6a
|
Merge pull request #1015 from apache/dependabot/github_actions/github/codeql-action-3.26.0
Bump github/codeql-action from 3.25.15 to 3.26.0
|
2024-08-12 07:41:31 +02:00 |
|
Lukasz Lenart
|
90fca13568
|
Merge pull request #1014 from apache/dependabot/github_actions/actions/upload-artifact-4.3.6
Bump actions/upload-artifact from 4.3.5 to 4.3.6
|
2024-08-12 07:41:21 +02:00 |
|
dependabot[bot]
|
d2d222e05d
|
Bump org.easymock:easymock from 5.2.0 to 5.4.0
Bumps [org.easymock:easymock](https://github.com/easymock/easymock) from 5.2.0 to 5.4.0.
- [Release notes](https://github.com/easymock/easymock/releases)
- [Changelog](https://github.com/easymock/easymock/blob/master/ReleaseNotes.md)
- [Commits](https://github.com/easymock/easymock/compare/easymock-5.2.0...easymock-5.4.0)
---
updated-dependencies:
- dependency-name: org.easymock:easymock
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2024-08-12 01:46:09 +00:00 |
|
dependabot[bot]
|
dc03a83f61
|
Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.3.0 to 3.3.1
Bumps [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) from 3.3.0 to 3.3.1.
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](https://github.com/apache/maven-surefire/compare/surefire-3.3.0...surefire-3.3.1)
---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-failsafe-plugin
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2024-08-12 01:45:57 +00:00 |
|
dependabot[bot]
|
c067e25b2c
|
Bump org.codehaus.mojo:versions-maven-plugin from 2.16.2 to 2.17.1
Bumps [org.codehaus.mojo:versions-maven-plugin](https://github.com/mojohaus/versions) from 2.16.2 to 2.17.1.
- [Release notes](https://github.com/mojohaus/versions/releases)
- [Changelog](https://github.com/mojohaus/versions/blob/master/ReleaseNotes.md)
- [Commits](https://github.com/mojohaus/versions/compare/2.16.2...2.17.1)
---
updated-dependencies:
- dependency-name: org.codehaus.mojo:versions-maven-plugin
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2024-08-12 01:45:53 +00:00 |
|
dependabot[bot]
|
acd6ebeb6b
|
Bump org.apache.maven.plugins:maven-wrapper-plugin from 3.2.0 to 3.3.2
Bumps [org.apache.maven.plugins:maven-wrapper-plugin](https://github.com/apache/maven-wrapper) from 3.2.0 to 3.3.2.
- [Release notes](https://github.com/apache/maven-wrapper/releases)
- [Commits](https://github.com/apache/maven-wrapper/compare/maven-wrapper-3.2.0...maven-wrapper-3.3.2)
---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-wrapper-plugin
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2024-08-12 01:45:48 +00:00 |
|
dependabot[bot]
|
89154e0479
|
Bump commons-logging:commons-logging from 1.3.0 to 1.3.3
Bumps commons-logging:commons-logging from 1.3.0 to 1.3.3.
---
updated-dependencies:
- dependency-name: commons-logging:commons-logging
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2024-08-12 01:45:42 +00:00 |
|
dependabot[bot]
|
107810dce2
|
Bump github/codeql-action from 3.25.15 to 3.26.0
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.25.15 to 3.26.0.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Commits](https://github.com/github/codeql-action/compare/v3.25.15...v3.26.0)
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2024-08-12 01:15:10 +00:00 |
|
dependabot[bot]
|
1536a7e04b
|
Bump actions/upload-artifact from 4.3.5 to 4.3.6
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.3.5 to 4.3.6.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/89ef406dd8d7e03cfd12d9e0a4a378f454709029...834a144ee995460fba8ed112a2fc961b36a5ec5a)
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2024-08-12 01:14:58 +00:00 |
|
Kusal Kithul-Godage
|
663dd3a50c
|
Merge pull request #1013 from apache/WW-4062-ognl-exc-cache
WW-4062 Cache OgnlException thrown on compilation
|
2024-08-10 19:00:41 +10:00 |
|
Kusal Kithul-Godage
|
6caa932fff
|
WW-4062 Cache OgnlException thrown on compilation
|
2024-08-09 20:34:52 +10:00 |
|
Lukasz Lenart
|
a4464099d9
|
Merge pull request #1006 from apache/dependabot/github_actions/ossf/scorecard-action-2.4.0
Bump ossf/scorecard-action from 2.3.3 to 2.4.0
|
2024-08-05 07:24:54 +02:00 |
|
Lukasz Lenart
|
932eed204d
|
Merge pull request #998 from apache/dependabot/maven/org.owasp-dependency-check-maven-10.0.3
Bump org.owasp:dependency-check-maven from 9.2.0 to 10.0.3
|
2024-08-05 07:23:24 +02:00 |
|
Lukasz Lenart
|
e7cce1bcd7
|
Merge pull request #997 from apache/dependabot/maven/org.apache.maven.plugins-maven-project-info-reports-plugin-3.6.2
Bump org.apache.maven.plugins:maven-project-info-reports-plugin from 3.5.0 to 3.6.2
|
2024-08-05 07:22:53 +02:00 |
|
Lukasz Lenart
|
9280a478c3
|
Merge pull request #1012 from apache/dependabot/github_actions/actions/upload-artifact-4.3.5
Bump actions/upload-artifact from 4.3.4 to 4.3.5
|
2024-08-05 07:22:30 +02:00 |
|
Lukasz Lenart
|
adbfab8cf1
|
Merge pull request #1011 from apache/dependabot/github_actions/github/codeql-action-3.25.15
Bump github/codeql-action from 2.22.11 to 3.25.15
|
2024-08-05 07:21:57 +02:00 |
|
dependabot[bot]
|
b8da13c235
|
Bump actions/upload-artifact from 4.3.4 to 4.3.5
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.3.4 to 4.3.5.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/0b2256b8c012f0828dc542b3febcab082c67f72b...89ef406dd8d7e03cfd12d9e0a4a378f454709029)
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2024-08-05 01:55:15 +00:00 |
|
dependabot[bot]
|
0d3358b035
|
Bump github/codeql-action from 2.22.11 to 3.25.15
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.22.11 to 3.25.15.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Commits](https://github.com/github/codeql-action/compare/v2.22.11...v3.25.15)
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2024-08-05 01:55:12 +00:00 |
|
Lukasz Lenart
|
935868c756
|
Merge pull request #1008 from apache/feature/WW-5451-null-iterator
WW-5451 Fixes NPE when iterator starts with null
|
2024-08-01 12:01:46 +02:00 |
|
Lukasz Lenart
|
479a9d86ed
|
WW-5451 Fixes NPE when iterator starts with null
|
2024-07-31 16:53:01 +02:00 |
|
dependabot[bot]
|
eeb1d8e0ca
|
Bump ossf/scorecard-action from 2.3.3 to 2.4.0
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.3.3 to 2.4.0.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](https://github.com/ossf/scorecard-action/compare/dc50aa9510b46c811795eb24b2f1ba02a914e534...62b2cac7ed8198b15735ed49ab1e5cf35480ba46)
---
updated-dependencies:
- dependency-name: ossf/scorecard-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2024-07-29 01:44:54 +00:00 |
|
Lukasz Lenart
|
e3e854a67b
|
Merge pull request #1000 from apache/dependabot/maven/org.apache.commons-commons-lang3-3.15.0
Bump org.apache.commons:commons-lang3 from 3.14.0 to 3.15.0
|
2024-07-25 20:05:11 +02:00 |
|
dependabot[bot]
|
7e5e49e811
|
Bump org.apache.commons:commons-lang3 from 3.14.0 to 3.15.0
Bumps org.apache.commons:commons-lang3 from 3.14.0 to 3.15.0.
---
updated-dependencies:
- dependency-name: org.apache.commons:commons-lang3
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2024-07-22 01:30:09 +00:00 |
|
dependabot[bot]
|
8c10a303d0
|
Bump org.owasp:dependency-check-maven from 9.2.0 to 10.0.3
Bumps [org.owasp:dependency-check-maven](https://github.com/jeremylong/DependencyCheck) from 9.2.0 to 10.0.3.
- [Release notes](https://github.com/jeremylong/DependencyCheck/releases)
- [Changelog](https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jeremylong/DependencyCheck/compare/v9.2.0...v10.0.3)
---
updated-dependencies:
- dependency-name: org.owasp:dependency-check-maven
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2024-07-22 01:29:54 +00:00 |
|
dependabot[bot]
|
dbd74ae3a3
|
Bump org.apache.maven.plugins:maven-project-info-reports-plugin
Bumps [org.apache.maven.plugins:maven-project-info-reports-plugin](https://github.com/apache/maven-project-info-reports-plugin) from 3.5.0 to 3.6.2.
- [Commits](https://github.com/apache/maven-project-info-reports-plugin/compare/maven-project-info-reports-plugin-3.5.0...maven-project-info-reports-plugin-3.6.2)
---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-project-info-reports-plugin
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2024-07-22 01:29:50 +00:00 |
|
Lukasz Lenart
|
f977f0c0e5
|
[maven-release-plugin] prepare for next development iteration
|
2024-07-20 08:28:46 +02:00 |
|
Lukasz Lenart
|
d6e30b45da
|
[maven-release-plugin] prepare release STRUTS_6_6_0
STRUTS_6_6_0
|
2024-07-20 08:28:35 +02:00 |
|
Kusal Kithul-Godage
|
9195990b56
|
Merge pull request #986 from apache/WW-5440-convention
WW-5440 Fix OGNL allowlist compat with Convention plugin
|
2024-07-15 16:27:50 +10:00 |
|
Lukasz Lenart
|
0c4d66430e
|
Merge pull request #994 from apache/dependabot/maven/maven-surefire-plugin.version-3.3.1
Bump maven-surefire-plugin.version from 3.2.5 to 3.3.1
|
2024-07-15 07:17:42 +02:00 |
|
Lukasz Lenart
|
de0b3204ec
|
Merge pull request #993 from apache/dependabot/maven/jackson.version-2.17.2
Bump jackson.version from 2.17.1 to 2.17.2
|
2024-07-15 07:17:21 +02:00 |
|
Kusal Kithul-Godage
|
cec46792cf
|
Merge branch 'master' into WW-5440-convention
|
2024-07-15 13:18:00 +10:00 |
|
dependabot[bot]
|
6d0fc2aa28
|
Bump maven-surefire-plugin.version from 3.2.5 to 3.3.1
Bumps `maven-surefire-plugin.version` from 3.2.5 to 3.3.1.
Updates `org.apache.maven.surefire:surefire-junit47` from 3.2.5 to 3.3.1
Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.2.5 to 3.3.1
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](https://github.com/apache/maven-surefire/compare/surefire-3.2.5...surefire-3.3.1)
---
updated-dependencies:
- dependency-name: org.apache.maven.surefire:surefire-junit47
dependency-type: direct:production
update-type: version-update:semver-minor
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2024-07-15 01:14:29 +00:00 |
|
dependabot[bot]
|
1f46802ba2
|
Bump jackson.version from 2.17.1 to 2.17.2
Bumps `jackson.version` from 2.17.1 to 2.17.2.
Updates `com.fasterxml.jackson.core:jackson-core` from 2.17.1 to 2.17.2
- [Commits](https://github.com/FasterXML/jackson-core/compare/jackson-core-2.17.1...jackson-core-2.17.2)
Updates `com.fasterxml.jackson.core:jackson-databind` from 2.17.1 to 2.17.2
- [Commits](https://github.com/FasterXML/jackson/commits)
Updates `com.fasterxml.jackson.dataformat:jackson-dataformat-xml` from 2.17.1 to 2.17.2
- [Commits](https://github.com/FasterXML/jackson-dataformat-xml/compare/jackson-dataformat-xml-2.17.1...jackson-dataformat-xml-2.17.2)
---
updated-dependencies:
- dependency-name: com.fasterxml.jackson.core:jackson-core
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: com.fasterxml.jackson.core:jackson-databind
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: com.fasterxml.jackson.dataformat:jackson-dataformat-xml
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2024-07-15 01:14:23 +00:00 |
|
Kusal Kithul-Godage
|
085471b408
|
Merge pull request #988 from apache/kusal-experimental
WW-5442 Enforce allowlist for OgnlReflectionProvider
|
2024-07-14 21:44:38 +10:00 |
|
Kusal Kithul-Godage
|
9ea9d566df
|
Merge pull request #990 from apache/WW-5443-spring-bump
WW-5443 Bump Spring dependencies to 5.3.37
|
2024-07-14 21:44:28 +10:00 |
|
Kusal Kithul-Godage
|
5372aff1dd
|
WW-5443 Bump Spring dependencies to 5.3.37
|
2024-07-14 14:16:37 +10:00 |
|