Commit Graph

7301 Commits

Author SHA1 Message Date
Lukasz Lenart d6e30b45da [maven-release-plugin] prepare release STRUTS_6_6_0 STRUTS_6_6_0 2024-07-20 08:28:35 +02:00
Kusal Kithul-Godage 9195990b56 Merge pull request #986 from apache/WW-5440-convention
WW-5440 Fix OGNL allowlist compat with Convention plugin
2024-07-15 16:27:50 +10:00
Lukasz Lenart 0c4d66430e Merge pull request #994 from apache/dependabot/maven/maven-surefire-plugin.version-3.3.1
Bump maven-surefire-plugin.version from 3.2.5 to 3.3.1
2024-07-15 07:17:42 +02:00
Lukasz Lenart de0b3204ec Merge pull request #993 from apache/dependabot/maven/jackson.version-2.17.2
Bump jackson.version from 2.17.1 to 2.17.2
2024-07-15 07:17:21 +02:00
Kusal Kithul-Godage cec46792cf Merge branch 'master' into WW-5440-convention 2024-07-15 13:18:00 +10:00
dependabot[bot] 6d0fc2aa28 Bump maven-surefire-plugin.version from 3.2.5 to 3.3.1
Bumps `maven-surefire-plugin.version` from 3.2.5 to 3.3.1.

Updates `org.apache.maven.surefire:surefire-junit47` from 3.2.5 to 3.3.1

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.2.5 to 3.3.1
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](https://github.com/apache/maven-surefire/compare/surefire-3.2.5...surefire-3.3.1)

---
updated-dependencies:
- dependency-name: org.apache.maven.surefire:surefire-junit47
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-07-15 01:14:29 +00:00
dependabot[bot] 1f46802ba2 Bump jackson.version from 2.17.1 to 2.17.2
Bumps `jackson.version` from 2.17.1 to 2.17.2.

Updates `com.fasterxml.jackson.core:jackson-core` from 2.17.1 to 2.17.2
- [Commits](https://github.com/FasterXML/jackson-core/compare/jackson-core-2.17.1...jackson-core-2.17.2)

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.17.1 to 2.17.2
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `com.fasterxml.jackson.dataformat:jackson-dataformat-xml` from 2.17.1 to 2.17.2
- [Commits](https://github.com/FasterXML/jackson-dataformat-xml/compare/jackson-dataformat-xml-2.17.1...jackson-dataformat-xml-2.17.2)

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson.core:jackson-core
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: com.fasterxml.jackson.dataformat:jackson-dataformat-xml
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-07-15 01:14:23 +00:00
Kusal Kithul-Godage 085471b408 Merge pull request #988 from apache/kusal-experimental
WW-5442 Enforce allowlist for OgnlReflectionProvider
2024-07-14 21:44:38 +10:00
Kusal Kithul-Godage 9ea9d566df Merge pull request #990 from apache/WW-5443-spring-bump
WW-5443 Bump Spring dependencies to 5.3.37
2024-07-14 21:44:28 +10:00
Kusal Kithul-Godage 5372aff1dd WW-5443 Bump Spring dependencies to 5.3.37 2024-07-14 14:16:37 +10:00
Kusal Kithul-Godage 92fc324f27 Merge pull request #987 from apache/WW-5428-more-logging
WW-5428 Stop further excessive logging in DevMode
2024-07-14 00:53:06 +10:00
Kusal Kithul-Godage b7b5bff13a WW-5442 Enforce allowlist for OgnlReflectionProvider 2024-07-14 00:47:38 +10:00
Kusal Kithul-Godage 27e4d0d47a WW-5440 Fix inconsistent indenting 2024-07-14 00:34:06 +10:00
Kusal Kithul-Godage cb62cb4e9a WW-5440 Fix OGNL allowlist compat with Convention plugin 2024-07-14 00:34:06 +10:00
Kusal Kithul-Godage abfb2f4568 WW-5428 Stop further excessive logging in DevMode 2024-07-13 23:41:33 +10:00
Kusal Kithul-Godage e9a1668199 Merge pull request #985 from apache/WW-5441-jasper
WW-5441 Bump net.sf.jasperreports:jasperreports to 6.21.3
2024-07-13 23:09:26 +10:00
Kusal Kithul-Godage 8b4c188d0f WW-5440 Fix Showcase App allowlist configuration 2024-07-13 21:57:26 +10:00
Kusal Kithul-Godage f9953938f7 WW-5440 Add missing annotations 2024-07-13 21:57:26 +10:00
Kusal Kithul-Godage 10edbce8d9 WW-5440 Fix MultipleFileUploadUsingArrayAction 2024-07-13 21:22:21 +10:00
Kusal Kithul-Godage 56c1291d2f WW-5440 Deprecate AnnotationParameterFilterInterceptor 2024-07-13 21:22:21 +10:00
Kusal Kithul-Godage fcc2c9d3ab WW-5441 Bump net.sf.jasperreports:jasperreports to 6.21.3 2024-07-13 18:52:57 +10:00
Lukasz Lenart 54e387dc6f [maven-release-plugin] prepare for next development iteration 2024-07-12 07:27:19 +02:00
Lukasz Lenart dbfb59cb7c [maven-release-plugin] prepare release STRUTS_6_5_0 STRUTS_6_5_0 2024-07-12 07:27:08 +02:00
Kusal Kithul-Godage d4a0f4fdde Merge pull request #982 from apache/WW-5428-stop-excessive-logging
WW-5428 Stop excessive logging in DevMode
2024-07-09 05:44:33 +10:00
Kusal Kithul-Godage 9fe1a4a031 WW-5428 Stop excessive logging in DevMode 2024-07-09 05:01:02 +10:00
Lukasz Lenart 3693ea2eec Merge pull request #978 from apache/dependabot/github_actions/actions/upload-artifact-4.3.4
Bump actions/upload-artifact from 4.3.3 to 4.3.4
2024-07-08 13:19:12 +02:00
Lukasz Lenart 7cb57087d3 Merge pull request #976 from apache/dependabot/maven/org.apache.maven.plugins-maven-failsafe-plugin-3.3.0
Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.2.5 to 3.3.0
2024-07-08 13:18:59 +02:00
Kusal Kithul-Godage 398e104fe0 Merge pull request #979 from apache/WW-5439-fix-dev-mode
WW-5439 Move DevMode security configuration to SecurityMemberAccess
2024-07-08 20:18:40 +10:00
Kusal Kithul-Godage 7f57e895a1 Merge pull request #967 from apache/WW-5428-allowlist-hibernate
WW-5428 Allowlist capability should resolve Hibernate proxies when disableProxyObjects is not set
2024-07-08 20:15:38 +10:00
Kusal Kithul-Godage 81b4943176 WW-5439 Move Dev Mode security configuration 2024-07-08 20:01:53 +10:00
Kusal Kithul-Godage 05680d7827 WW-5428 Amend log warning for missing allowlist entry 2024-07-08 19:57:36 +10:00
Kusal Kithul-Godage 8555dc266e WW-5428 Add log warning for allowlist disabled 2024-07-08 19:52:22 +10:00
Kusal Kithul-Godage c6f394a0e8 WW-5428 Add log warning for Hibernate entities 2024-07-08 19:44:05 +10:00
Kusal Kithul-Godage c965812ffe WW-5428 Add unit test coverage for Hibernate proxy resolution 2024-07-08 16:58:07 +10:00
Kusal Kithul-Godage abf03fdccc WW-5428 Clean up SecurityMemberAccessProxyTest 2024-07-08 16:58:07 +10:00
Kusal Kithul-Godage 2f814186c8 WW-5428 Allowlist capability should resolve Hibernate proxies when disableProxyObjects is not set 2024-07-08 16:58:07 +10:00
dependabot[bot] 7762d7fba2 Bump actions/upload-artifact from 4.3.3 to 4.3.4
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.3.3 to 4.3.4.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/65462800fd760344b1a7b4382951275a0abb4808...0b2256b8c012f0828dc542b3febcab082c67f72b)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-07-08 01:40:34 +00:00
Lukasz Lenart 82b364d521 Merge pull request #977 from stefansielaff/fix-behavior-of-envsvaluesubstitutor
WW-5437 Swap order of sysStrSubstitutor and envStrSubstitutor in substitute method
2024-07-05 06:52:12 +02:00
stefansielaff 98f2e68e0b "Swap order of sysStrSubstitutor and envStrSubstitutor in substitute method" 2024-07-02 13:24:57 +02:00
dependabot[bot] 40ab7a776a Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.2.5 to 3.3.0
Bumps [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) from 3.2.5 to 3.3.0.
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](https://github.com/apache/maven-surefire/compare/surefire-3.2.5...surefire-3.3.0)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-failsafe-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-07-01 01:20:28 +00:00
Lukasz Lenart 8b22f7170f Merge pull request #966 from apache/dependabot/maven/org.codehaus.mojo-exec-maven-plugin-3.3.0
Bump org.codehaus.mojo:exec-maven-plugin from 3.2.0 to 3.3.0
2024-06-24 07:46:26 +02:00
Lukasz Lenart 688413a359 Merge pull request #965 from apache/dependabot/maven/org.apache.maven.plugins-maven-enforcer-plugin-3.5.0
Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.4.1 to 3.5.0
2024-06-24 07:46:02 +02:00
Lukasz Lenart 53ed5f6dfa Merge pull request #960 from apache/dependabot/maven/org.apache.felix-org.apache.felix.main-7.0.5
Bump org.apache.felix:org.apache.felix.main from 6.0.3 to 7.0.5
2024-06-24 07:45:09 +02:00
Lukasz Lenart 100ef07a44 Merge pull request #958 from apache/dependabot/maven/commons-validator-commons-validator-1.9.0
Bump commons-validator:commons-validator from 1.8.0 to 1.9.0
2024-06-24 07:42:04 +02:00
Lukasz Lenart 4267bf0647 Merge pull request #971 from apache/feature/WW-5431-deprecated
WW-5431 Marks unused constants as deprecated
2024-06-24 07:40:13 +02:00
Kusal Kithul-Godage 898a8d9ef9 Merge pull request #969 from apache/WW-5429-param-anno-log
WW-5429 Log parameter annotation issues at ERROR level when in DevMode
2024-06-21 19:47:23 +10:00
Lukasz Lenart 75ebbf4367 WW-5431 Marks unused constants as deprecated
To be removed in Struts 7
2024-06-21 08:24:54 +02:00
Lukasz Lenart a8954508c6 Merge pull request #968 from apache/fix/WW-5310-fragment
WW-5310 Fixes broken support for Fragments in <s:url/> tag
2024-06-21 07:28:17 +02:00
Kusal Kithul-Godage ba46c18f07 WW-5429 Make DebugUtils final and remove @author JavaDoc tag 2024-06-21 11:04:10 +10:00
Kusal Kithul-Godage b96cf2c072 WW-5429 Log parameter annotation issues at ERROR level when in DevMode 2024-06-18 19:36:51 +10:00