d27d3fba3a
WW-5548 Defines proper request attributes when forwarding or including final path ( #1265 )
...
* WW-5548 Defines proper request attributes when forwarding or including final path
* Fies typo
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
* WW-5548 Drops RequestDispatcher parameters as they should be defined by Servlet container
---------
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-05-12 14:26:42 +02:00
f66e078f10
Bump org.apache.maven.plugins:maven-project-info-reports-plugin ( #1269 )
...
Bumps [org.apache.maven.plugins:maven-project-info-reports-plugin](https://github.com/apache/maven-project-info-reports-plugin ) from 3.8.0 to 3.9.0.
- [Release notes](https://github.com/apache/maven-project-info-reports-plugin/releases )
- [Commits](https://github.com/apache/maven-project-info-reports-plugin/compare/maven-project-info-reports-plugin-3.8.0...maven-project-info-reports-plugin-3.9.0 )
---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-project-info-reports-plugin
dependency-version: 3.9.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-05-12 14:25:40 +02:00
1331e99742
Bump org.apache.felix:maven-bundle-plugin from 5.1.9 to 6.0.0 ( #1271 )
...
Bumps org.apache.felix:maven-bundle-plugin from 5.1.9 to 6.0.0.
---
updated-dependencies:
- dependency-name: org.apache.felix:maven-bundle-plugin
dependency-version: 6.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-05-12 14:25:27 +02:00
9c40e2d0df
Uses proper name of check to pass ( #1266 )
2025-05-12 14:24:02 +02:00
a7d915d627
Adjusts required checks to the new structure ( #1264 )
...
more details can be found here https://github.com/apache/infrastructure-asfyaml/blob/main/README.md#branch-protection
2025-05-08 06:52:33 +02:00
d9c9d2b030
WW-5546 Fixes NPE when uploaded file is empty ( #1263 )
2025-05-07 07:18:15 +02:00
d4f1adbb05
Bump com.github.ben-manes.caffeine:caffeine from 3.1.8 to 3.2.0 ( #1257 )
...
Bumps [com.github.ben-manes.caffeine:caffeine](https://github.com/ben-manes/caffeine ) from 3.1.8 to 3.2.0.
- [Release notes](https://github.com/ben-manes/caffeine/releases )
- [Commits](https://github.com/ben-manes/caffeine/compare/v3.1.8...v3.2.0 )
---
updated-dependencies:
- dependency-name: com.github.ben-manes.caffeine:caffeine
dependency-version: 3.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-05-06 20:47:20 +02:00
1ab2fcc620
Bump org.htmlunit:htmlunit from 4.9.0 to 4.11.1 ( #1258 )
...
Bumps [org.htmlunit:htmlunit](https://github.com/HtmlUnit/htmlunit ) from 4.9.0 to 4.11.1.
- [Release notes](https://github.com/HtmlUnit/htmlunit/releases )
- [Commits](https://github.com/HtmlUnit/htmlunit/compare/4.9.0...4.11.1 )
---
updated-dependencies:
- dependency-name: org.htmlunit:htmlunit
dependency-version: 4.11.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-05-06 20:44:55 +02:00
b22022c25f
Bump github/codeql-action from 3.28.15 to 3.28.17 ( #1261 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.28.15 to 3.28.17.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v3.28.15...v3.28.17 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 3.28.17
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-05-06 20:40:16 +02:00
101dc02f77
Bump org.owasp:dependency-check-maven from 10.0.4 to 12.1.1 ( #1259 )
...
Bumps [org.owasp:dependency-check-maven](https://github.com/dependency-check/DependencyCheck ) from 10.0.4 to 12.1.1.
- [Release notes](https://github.com/dependency-check/DependencyCheck/releases )
- [Changelog](https://github.com/dependency-check/DependencyCheck/blob/main/CHANGELOG.md )
- [Commits](https://github.com/dependency-check/DependencyCheck/compare/v10.0.4...v12.1.1 )
---
updated-dependencies:
- dependency-name: org.owasp:dependency-check-maven
dependency-version: 12.1.1
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-05-06 20:39:52 +02:00
84a97741ed
Bump org.apache.maven.plugins:maven-site-plugin from 3.20.0 to 3.21.0 ( #1256 )
...
Bumps [org.apache.maven.plugins:maven-site-plugin](https://github.com/apache/maven-site-plugin ) from 3.20.0 to 3.21.0.
- [Release notes](https://github.com/apache/maven-site-plugin/releases )
- [Commits](https://github.com/apache/maven-site-plugin/compare/maven-site-plugin-3.20.0...maven-site-plugin-3.21.0 )
---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-site-plugin
dependency-version: 3.21.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-05-06 20:39:19 +02:00
e326799532
WW-5544 Marks ReflectionContextFactory as deprecated and uses ActionContext instead ( #1254 ) ( #1255 )
2025-04-27 18:43:36 +02:00
285d2d3681
Merge pull request #1244 from apache/dependabot/maven/byte-buddy.version-1.17.2
...
Bump byte-buddy.version from 1.17.1 to 1.17.2
2025-04-27 16:10:30 +02:00
b650adb539
Merge pull request #1245 from apache/dependabot/maven/org.apache.maven.doxia-doxia-module-markdown-2.0.0
...
Bump org.apache.maven.doxia:doxia-module-markdown from 1.12.0 to 2.0.0
2025-04-27 16:10:09 +02:00
993620eb67
Merge pull request #1247 from apache/dependabot/github_actions/actions/upload-artifact-4.6.2
...
Bump actions/upload-artifact from 4.6.1 to 4.6.2
2025-04-27 16:09:47 +02:00
d564829a82
Merge pull request #1253 from apache/dependabot/github_actions/github/codeql-action-3.28.15
...
Bump github/codeql-action from 3.28.10 to 3.28.15
2025-04-27 16:09:14 +02:00
eb4a5a0086
Bump github/codeql-action from 3.28.10 to 3.28.15
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.28.10 to 3.28.15.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v3.28.10...v3.28.15 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 3.28.15
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-04-14 01:09:45 +00:00
bcb3d91293
Uses new url for Maven Badges app ( #1252 )
2025-04-06 10:36:41 +02:00
6f753fb8d9
Bump actions/upload-artifact from 4.6.1 to 4.6.2
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4.6.1 to 4.6.2.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1...ea165f8d65b6e75b540449e92b4886f43607fa02 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-03-24 01:16:29 +00:00
ab55fda4ae
Bump org.apache.maven.doxia:doxia-module-markdown from 1.12.0 to 2.0.0
...
Bumps org.apache.maven.doxia:doxia-module-markdown from 1.12.0 to 2.0.0.
---
updated-dependencies:
- dependency-name: org.apache.maven.doxia:doxia-module-markdown
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-03-10 01:19:56 +00:00
33bef8e665
Bump byte-buddy.version from 1.17.1 to 1.17.2
...
Bumps `byte-buddy.version` from 1.17.1 to 1.17.2.
Updates `net.bytebuddy:byte-buddy` from 1.17.1 to 1.17.2
- [Release notes](https://github.com/raphw/byte-buddy/releases )
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md )
- [Commits](https://github.com/raphw/byte-buddy/compare/byte-buddy-1.17.1...byte-buddy-1.17.2 )
Updates `net.bytebuddy:byte-buddy-agent` from 1.17.1 to 1.17.2
- [Release notes](https://github.com/raphw/byte-buddy/releases )
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md )
- [Commits](https://github.com/raphw/byte-buddy/compare/byte-buddy-1.17.1...byte-buddy-1.17.2 )
---
updated-dependencies:
- dependency-name: net.bytebuddy:byte-buddy
dependency-type: direct:development
update-type: version-update:semver-patch
- dependency-name: net.bytebuddy:byte-buddy-agent
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-03-10 01:19:55 +00:00
d47143c689
Merge pull request #1243 from apache/WW-5534-model-driven-struts-param
2025-03-07 01:14:15 +11:00
96f838df1e
WW-5534 Proper fix ModelDriven parameter injection and allowlisting
2025-03-07 00:07:53 +11:00
7ae52ccfcc
Bump org.eclipse.transformer:transformer-maven-plugin ( #1216 )
...
Bumps [org.eclipse.transformer:transformer-maven-plugin](https://github.com/eclipse/transformer ) from 0.5.0 to 1.0.0.
- [Release notes](https://github.com/eclipse/transformer/releases )
- [Commits](https://github.com/eclipse/transformer/compare/0.5.0...1.0.0 )
---
updated-dependencies:
- dependency-name: org.eclipse.transformer:transformer-maven-plugin
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-06 06:51:40 +01:00
1c3219e7f9
WW-5455 Defines a new plugin to support Jasper Reports 7 ( #1124 )
...
* WW-5455 Defines a new plugin to support Jasper Reports 7
* WW-5455 Allows action to modify result behaviour
* WW-5455 Defines exporter as an extension point
* WW-5455 Extracts logic to create connection or dataSource
* WW-5455 Uses defaultDelimiter as more meaningful name
* WW-5455 Fixes parent version after re-basing
* WW-5455 Updates pom to match the latest SNAPSHOT version
* WW-5455 Cleans up code
* WW-5455 Adds the new plugin to BOM
* WW-5455 Fixes broken test
2025-03-06 06:50:38 +01:00
9861b834ab
add conversion handling for OffsetDateTime ( #1241 )
2025-03-06 06:48:52 +01:00
747859b72a
Merge pull request #1237 from apache/WW-5534-annotation-allowlist-proxy
...
WW-5534 Allow @StrutsParameter recognition and OGNL allowlist for Spring proxies
2025-03-06 12:24:07 +11:00
433c4837fd
WW-5534 Add coverage for proxy resolution
2025-03-06 12:14:47 +11:00
4cc874d426
Merge pull request #1236 from apache/WW-5534-proxyutil
...
WW-5534 Simplify ProxyUtil, add OgnlCache#computeIfAbsent
2025-03-05 21:48:25 +11:00
f35c808efc
Sync tag with main ftl template. ( #1212 )
...
Co-authored-by: Greg Huber <ghuber@apache.org >
2025-03-04 16:45:45 +01:00
6bb71caa90
Uses proper config to avoid failing a build when generating JavaDocs ( #1240 )
...
* Uses proper config to avoid failing a build when generating JavaDocs
* Removes unneeded source option
2025-03-03 13:22:50 +01:00
aeaa4f26cf
WW-5534 Allow @StrutsParameter recognition and OGNL allowlist for Spring proxies
2025-03-03 21:09:36 +11:00
117b9c741b
WW-5534 Add coverage for OgnlUtil#getBeanInfo exception propagation
2025-03-03 21:05:18 +11:00
e09572f3b0
Bump com.fasterxml.jackson:jackson-bom from 2.18.2 to 2.18.3 ( #1238 )
...
Bumps [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom ) from 2.18.2 to 2.18.3.
- [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.18.2...jackson-bom-2.18.3 )
---
updated-dependencies:
- dependency-name: com.fasterxml.jackson:jackson-bom
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-03 10:50:19 +01:00
8579a10f59
WW-5534 Simplify ProxyUtil, add OgnlCache#computeIfAbsent
2025-02-28 04:38:15 +11:00
0d2d11071b
WW-5530 make DateConverter work for LocalDate and LocalTime ( #1223 )
...
* make DateConverter work for LocalDate and LocalTime
* add date tests
2025-02-26 08:29:36 +01:00
1100a34e9d
Merge pull request #1233 from apache/WW-5533-jee11-supp
...
WW-5533 Add compilation support for Jakarta EE 11
2025-02-25 23:46:20 +11:00
fa951718dc
WW-5533 Add compilation support for Jakarta EE 11
2025-02-25 23:34:33 +11:00
2ab0a3c843
Merge pull request #1234 from apache/WW-5376-bom-fix
...
WW-5376 Fix BOM leaking unrelated dependencies
2025-02-25 22:16:05 +11:00
15ee2ac4a0
Merge pull request #1232 from apache/WW-5532-upg-deps
...
WW-5532 Upgrade and align various dependencies
2025-02-25 19:34:39 +11:00
d2cb444bcf
WW-5376 Fix BOM leaking unrelated dependencies
2025-02-25 19:32:44 +11:00
84cf666041
Bump ossf/scorecard-action from 2.4.0 to 2.4.1 ( #1229 )
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 2.4.0 to 2.4.1.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](https://github.com/ossf/scorecard-action/compare/62b2cac7ed8198b15735ed49ab1e5cf35480ba46...f49aabe0b5af0936a0987cfb85d86b75731b0186 )
---
updated-dependencies:
- dependency-name: ossf/scorecard-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-25 07:00:25 +01:00
31cb558fc6
Bump github/codeql-action from 3.28.9 to 3.28.10 ( #1228 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.28.9 to 3.28.10.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v3.28.9...v3.28.10 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-25 07:00:00 +01:00
8b66b575a1
Bump actions/upload-artifact from 4.6.0 to 4.6.1 ( #1227 )
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4.6.0 to 4.6.1.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08...4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-25 06:59:24 +01:00
077e985899
WW-5532 Upgrade and align various dependencies
2025-02-25 12:25:47 +11:00
5c22c0da74
Merge pull request #1224 from apache/fix/WW-5529-maxlength-s7
...
WW-5529 Adds autogenerated files with updated desc
2025-02-19 14:06:11 +01:00
e9116ae3da
WW-5529 Adds autogenerated files with updated desc
2025-02-18 16:28:22 +01:00
d727fbf6be
[maven-release-plugin] prepare for next development iteration
2025-02-17 10:41:25 +01:00
4603706b40
[maven-release-plugin] prepare release STRUTS_7_0_3
2025-02-17 10:41:17 +01:00
556522e9b2
WW-5529 Drops unused misleading setter setMaxLength in favour of setMaxlength ( #1221 )
2025-02-17 10:09:14 +01:00
Lukasz Lenart