Commit Graph

7187 Commits

Author SHA1 Message Date
dependabot[bot] b2b35f066c Bump org.codehaus.mojo:versions-maven-plugin from 2.16.1 to 2.16.2
Bumps [org.codehaus.mojo:versions-maven-plugin](https://github.com/mojohaus/versions) from 2.16.1 to 2.16.2.
- [Release notes](https://github.com/mojohaus/versions/releases)
- [Changelog](https://github.com/mojohaus/versions/blob/master/ReleaseNotes.md)
- [Commits](https://github.com/mojohaus/versions/compare/2.16.1...2.16.2)

---
updated-dependencies:
- dependency-name: org.codehaus.mojo:versions-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-22 01:23:03 +00:00
Lukasz Lenart efdaf7e50f Merge pull request #909 from apache/dependabot/maven/org.assertj-assertj-core-3.25.3
Bump org.assertj:assertj-core from 3.25.2 to 3.25.3
2024-04-20 15:59:26 +02:00
Kusal Kithul-Godage 3c21e82290 Merge pull request #916 from apache/WW-5418-struts-sec
WW-5418 Forbid Enums and Jasper classes
2024-04-20 20:01:06 +10:00
Kusal Kithul-Godage f5cfb88f1f Merge pull request #915 from atlassian-forks/issue/WW-5417-bump-ongl-version-to-fix-security-issue
WW-5417 bump ognl version to fix security issue
2024-04-19 17:47:40 +10:00
Kusal Kithul-Godage 63267a8e06 Merge pull request #914 from atlassian-forks/issue/WW-5409-introduce-final-attribute-to-package-element
WW-5409 introduce final attribute to package element which make them unextendable
2024-04-19 17:47:02 +10:00
Jeffery Xie 62b4b65c4c WW-5417 update ognl.version as 3.3.5 2024-04-19 14:58:25 +10:00
Kusal Kithul-Godage 4310536799 Merge pull request #917 from apache/WW-5406-injection-order 2024-04-19 08:37:14 +10:00
Kusal Kithul-Godage ad49ea866a WW-5406 Fix injection order issue for excluded patterns 2024-04-18 22:28:30 +10:00
Kusal Kithul-Godage 7e9f6e84f2 WW-5418 Exclude Tomcat Jasper classes 2024-04-18 11:14:10 +10:00
Kusal Kithul-Godage 100f5052d4 WW-5418 Forbid enums 2024-04-18 11:13:56 +10:00
Jeffery Xie 0a720971c7 WW-5417 bump ognl version to fix security issue 2024-04-18 11:02:16 +10:00
Kusal Kithul-Godage 1562e66a89 Merge pull request #912 from atlassian-forks/issue/WW-5408-add-option-to-not-fallback-to-empty-namespace-when-unresolved
WW-5408 add option to not fallback to empty namespace when unresolved
2024-04-12 17:58:06 +10:00
Jeffery Xie 85783a0cc7 WW-5409 rename 6.5.0.dtd to 6.5.dtd to follow the naming pattern 2024-04-12 16:04:34 +10:00
Kusal Kithul-Godage 0aa2f269f2 Merge pull request #911 from atlassian-forks/issue/WW-5407-extend-SecurityMemberAccess-proxy-detection-to-proxies
WW-5407 Extend SecurityMemberAccess proxy detection to other proxies
2024-04-11 19:16:36 +10:00
Jeffery Xie 4088f2ee2b WW-5409 update new dtd from 6.4.0 to 6.5.0 2024-04-11 15:07:25 +10:00
Jeffery Xie 1d51d00ecb WW-5408 add struts.actionConfig.fallbackToEmptyNamespace as true in default.properties 2024-04-11 14:57:57 +10:00
Kusal Kithul-Godage 929a60184b Merge pull request #910 from apache/WW-5406-excluded-patterns
WW-5406 Ensure Action excluded patterns are reinjected
2024-04-11 14:27:31 +10:00
Jeffery Xie bf5f29132b WW-5409 introduce final attribute to package element which make them unextendable 2024-04-11 12:44:53 +10:00
Jeffery Xie f9f6327570 /WW-5408 rename struts.disableActionConfigFallbackToEmptyNamespace to struts.actionConfig.fallbackToEmptyNamespace 2024-04-10 17:30:02 +10:00
Kusal Kithul-Godage ed0c7287d9 WW-5406 Revert breaking API change 2024-04-10 16:01:47 +10:00
Kusal Kithul-Godage 1a6e2fef7a WW-5406 Add deprecation JavaDocs 2024-04-10 15:55:02 +10:00
Jeffery Xie 5f717cdb89 WW-5407 tweak ProxyUtil#isHibernateProxyMember to make it neat 2024-04-10 15:00:50 +10:00
Jeffery Xie e2ec114577 WW-5408 add option to not fallback to empty namespace when unresolved 2024-04-09 15:33:10 +10:00
Jeffery Xie 0074b70286 WW-5407 extend SecurityMemberAccess proxy detection to other proxies 2024-04-09 14:46:45 +10:00
Kusal Kithul-Godage efa20426c9 WW-5406 Ensure Action excluded patterns are reinjected 2024-04-09 10:42:12 +10:00
dependabot[bot] 268ed789ee Bump org.assertj:assertj-core from 3.25.2 to 3.25.3
Bumps [org.assertj:assertj-core](https://github.com/assertj/assertj) from 3.25.2 to 3.25.3.
- [Release notes](https://github.com/assertj/assertj/releases)
- [Commits](https://github.com/assertj/assertj/compare/assertj-build-3.25.2...assertj-build-3.25.3)

---
updated-dependencies:
- dependency-name: org.assertj:assertj-core
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-08 01:22:47 +00:00
Lukasz Lenart c6d13f1016 [maven-release-plugin] prepare for next development iteration 2024-04-07 11:22:16 +02:00
Lukasz Lenart 9c5c80d173 [maven-release-plugin] prepare release STRUTS_6_4_0 STRUTS_6_4_0 2024-04-07 11:22:06 +02:00
Lukasz Lenart a6d6d918fa Reverts release and fixes issue with assembly 2024-04-07 11:14:44 +02:00
Lukasz Lenart 5e8b81b382 [maven-release-plugin] prepare for next development iteration 2024-04-07 08:13:17 +02:00
Lukasz Lenart f8381fbdbf [maven-release-plugin] prepare release STRUTS_6_4_0 2024-04-07 08:13:07 +02:00
Lukasz Lenart 0f6d5dbb2f Merge pull request #903 from apache/fix/WW-5390-assembly
WW-5390 Fixes creating assembly and attaching sources when preparing a new release
2024-04-07 07:08:19 +02:00
Lukasz Lenart db725518ee WW-5390 Fixes creating assembly and attaching sources when preparing a new release 2024-04-06 19:36:14 +02:00
Lukasz Lenart ee38cd5b14 Merge pull request #902 from apache/dependabot/maven/log4j2.version-2.23.1
WW-5404 Bump log4j2.version from 2.21.1 to 2.23.1
2024-04-06 18:45:12 +02:00
dependabot[bot] 7a79576bb3 Bump log4j2.version from 2.21.1 to 2.23.1
Bumps `log4j2.version` from 2.21.1 to 2.23.1.

Updates `org.apache.logging.log4j:log4j-api` from 2.21.1 to 2.23.1

Updates `org.apache.logging.log4j:log4j-core` from 2.21.1 to 2.23.1

Updates `org.apache.logging.log4j:log4j-jcl` from 2.21.1 to 2.23.1

Updates `org.apache.logging.log4j:log4j-slf4j-impl` from 2.21.1 to 2.23.1

---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-api
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: org.apache.logging.log4j:log4j-jcl
  dependency-type: direct:development
  update-type: version-update:semver-minor
- dependency-name: org.apache.logging.log4j:log4j-slf4j-impl
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-04 10:01:09 +00:00
Lukasz Lenart 5cf746f538 Merge pull request #901 from apache/fix/branch-protction
Uses proper context name in branch protection rule
2024-04-02 15:01:10 +02:00
Lukasz Lenart 689d17d274 Merge pull request #896 from apache/feature/WW-5402-autoload-classptah
WW-5402 Auto loads Tiles definitions from classpath
2024-04-02 08:53:49 +02:00
Lukasz Lenart c7ae614824 WW-5402 Auto loads Tiles definitions from classpath 2024-03-31 11:52:59 +02:00
Lukasz Lenart 273c3a1a99 Uses proper context name in branch protection rule 2024-03-31 11:36:49 +02:00
Lukasz Lenart c774e23ef9 Merge pull request #900 from apache/WW-5251-retrofit-compat
WW-5251 Fix deprecated interface method signature
2024-03-31 11:35:52 +02:00
Kusal Kithul-Godage 93c11aaf62 WW-5251 Fix deprecated interface method signature 2024-03-31 00:10:39 +11:00
Lukasz Lenart 66c1ac431f Merge pull request #899 from apache/feature/codeowners-review
Enables required review by codeowners
2024-03-30 10:33:53 +01:00
Lukasz Lenart 7281d7e2ee Merge pull request #898 from apache/WW-5251-retrofit-compat
WW-5251 Reinstate deleted interfaces with transparent compat
2024-03-30 08:52:41 +01:00
Lukasz Lenart 6950fcb75f Enables required review by codeowners 2024-03-30 08:36:50 +01:00
Kusal Kithul-Godage dc774c484f WW-5251 Reinstate RequestAware 2024-03-29 21:35:08 +11:00
Kusal Kithul-Godage 19698e1fd2 WW-5251 Fix ParameterAware 2024-03-29 21:01:35 +11:00
Kusal Kithul-Godage cda2a2b231 WW-5251 Reinstate deleted interfaces with transparent compat 2024-03-27 18:41:24 +11:00
Lukasz Lenart cdc931e26f Merge pull request #895 from apache/fix/file-uploads
Converts multiple file uploads example to use Action based upload
2024-03-24 09:06:46 +01:00
Lukasz Lenart db0bd43855 Converts multiple file uploads example to use Action based upload 2024-03-17 17:45:32 +01:00
Kusal Kithul-Godage 86aee4b0ea Merge pull request #894 from apache/WW-5364-npe
WW-5364 Fix potential NPE in XmlDocConfigurationProvider
2024-03-14 15:48:48 +11:00