Commit Graph

7882 Commits

Author SHA1 Message Date
Lukasz Lenart f6bf43ae0b [maven-release-plugin] prepare release STRUTS_7_0_1 STRUTS_7_0_1 2025-02-02 08:25:53 +01:00
Lukasz Lenart 25d0338e63 Merge pull request #1199 from apache/dependabot/maven/org.apache.commons-commons-text-1.13.0
Bump org.apache.commons:commons-text from 1.12.0 to 1.13.0
2025-01-27 07:00:15 +01:00
Lukasz Lenart 01af64615f Merge pull request #1198 from apache/dependabot/maven/byte-buddy.version-1.16.1
Bump byte-buddy.version from 1.15.11 to 1.16.1
2025-01-27 06:58:56 +01:00
Lukasz Lenart ebc4e3516d Merge pull request #1196 from apache/dependabot/github_actions/github/codeql-action-3.28.5
Bump github/codeql-action from 3.28.1 to 3.28.5
2025-01-27 06:56:56 +01:00
dependabot[bot] d5b94369d1 Bump org.apache.commons:commons-text from 1.12.0 to 1.13.0
Bumps org.apache.commons:commons-text from 1.12.0 to 1.13.0.

---
updated-dependencies:
- dependency-name: org.apache.commons:commons-text
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-27 01:54:25 +00:00
dependabot[bot] c5cf2f8f99 Bump byte-buddy.version from 1.15.11 to 1.16.1
Bumps `byte-buddy.version` from 1.15.11 to 1.16.1.

Updates `net.bytebuddy:byte-buddy` from 1.15.11 to 1.16.1
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](https://github.com/raphw/byte-buddy/compare/byte-buddy-1.15.11...byte-buddy-1.16.1)

Updates `net.bytebuddy:byte-buddy-agent` from 1.15.11 to 1.16.1
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](https://github.com/raphw/byte-buddy/compare/byte-buddy-1.15.11...byte-buddy-1.16.1)

---
updated-dependencies:
- dependency-name: net.bytebuddy:byte-buddy
  dependency-type: direct:development
  update-type: version-update:semver-minor
- dependency-name: net.bytebuddy:byte-buddy-agent
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-27 01:54:18 +00:00
dependabot[bot] 10d3545ac2 Bump github/codeql-action from 3.28.1 to 3.28.5
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.1 to 3.28.5.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Commits](https://github.com/github/codeql-action/compare/v3.28.1...v3.28.5)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-27 01:45:24 +00:00
Lukasz Lenart 05deb7b5e7 Merge pull request #1191 from apache/feature/WW-5512-optional-inject-s7
WW-5512 Extends the container to support injecting optional parameters into constructor
2025-01-26 08:19:06 +01:00
Lukasz Lenart 358f808567 WW-5512 Extends the container to support injecting optional parameters into constructor 2025-01-23 08:58:46 +01:00
Kusal Kithul-Godage f98b67562b Merge pull request #1193 from apache/WW-5516-fix-temp-theme-fallback-70 2025-01-22 17:42:17 +11:00
Kusal Kithul-Godage 2def24c7db WW-5516 Fix TemplateDir and Theme fallback to Request/Session/Application attributes 2025-01-22 13:25:01 +11:00
Lukasz Lenart 4e80f2661e Merge pull request #1187 from apache/fix/WW-5517-debug
WW-5517 Fixes <s:debug/> to be compatible with allowlist capability
2025-01-21 18:01:26 +01:00
Lukasz Lenart 9ba5c095fb Merge pull request #1189 from apache/dependabot/maven/org.sitemesh-sitemesh-3.2.2
Bump org.sitemesh:sitemesh from 3.2.1 to 3.2.2
2025-01-21 18:01:05 +01:00
Lukasz Lenart 8f4fa06855 WW-5517 Adds a dedicate test case to cover allowlist 2025-01-20 09:10:02 +01:00
dependabot[bot] 181f0073ff Bump org.sitemesh:sitemesh from 3.2.1 to 3.2.2
Bumps [org.sitemesh:sitemesh](https://github.com/sitemesh/sitemesh3) from 3.2.1 to 3.2.2.
- [Release notes](https://github.com/sitemesh/sitemesh3/releases)
- [Commits](https://github.com/sitemesh/sitemesh3/compare/3.2.1...3.2.2)

---
updated-dependencies:
- dependency-name: org.sitemesh:sitemesh
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-20 01:07:47 +00:00
Lukasz Lenart f3997f705e WW-5517 Fixes <s:debug/> to be compatible with allowlist capability 2025-01-18 21:57:55 +01:00
Lukasz Lenart b054b51929 Merge pull request #1186 from apache/fix/nightlies-67
Adds 6.7.x branch to nigthlies step
2025-01-18 10:03:31 +01:00
Lukasz Lenart e0be8270ca Merge pull request #1185 from apache/feature/WW-5510-tooltip
WW-5510 Marks support for tooltips as deprecated
2025-01-18 09:46:36 +01:00
Lukasz Lenart 32cd5d0dcc Adds 6.7.x branch to nigthlies step 2025-01-18 09:45:51 +01:00
Lukasz Lenart c2a5bfe3c9 WW-5510 Marks support for tooltips as deprecated
This will be removed in the minor release, migrate to use native html tooltip support
2025-01-16 10:31:43 +01:00
Lukasz Lenart fa60e1ceb2 Merge pull request #1184 from apache/fix/WW-5501-exclude-s7
WW-5501 Only exclude malicious file names
2025-01-16 10:19:15 +01:00
Lukasz Lenart 4279511c5b WW-5501 Only exclude malicious file names 2025-01-16 08:34:57 +01:00
Lukasz Lenart 71bca19c13 Merge pull request #1176 from apache/dependabot/maven/byte-buddy.version-1.15.11
Bump byte-buddy.version from 1.14.11 to 1.15.11
2025-01-16 07:58:38 +01:00
Lukasz Lenart 30aefaa5d3 Merge pull request #1183 from apache/dependabot/github_actions/actions/upload-artifact-4.6.0
Bump actions/upload-artifact from 4.5.0 to 4.6.0
2025-01-16 07:57:28 +01:00
Lukasz Lenart 2c023a245d Merge pull request #1182 from apache/dependabot/github_actions/github/codeql-action-3.28.1
Bump github/codeql-action from 3.28.0 to 3.28.1
2025-01-16 07:57:10 +01:00
Lukasz Lenart cebdf6df82 Merge pull request #1178 from apache/dependabot/maven/log4j2.version-2.24.3
Bump log4j2.version from 2.24.2 to 2.24.3
2025-01-16 07:56:53 +01:00
dependabot[bot] 6d01916f12 Bump actions/upload-artifact from 4.5.0 to 4.6.0
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.5.0 to 4.6.0.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/6f51ac03b9356f520e9adb1b1b7802705f340c2b...65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-13 01:55:37 +00:00
dependabot[bot] 6cc4a105e6 Bump github/codeql-action from 3.28.0 to 3.28.1
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.0 to 3.28.1.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Commits](https://github.com/github/codeql-action/compare/v3.28.0...v3.28.1)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-13 01:55:35 +00:00
Kusal Kithul-Godage b5d94a1f07 Merge pull request #1179 from apache/excl-list
Add jakarta package to exclusion list
2025-01-06 21:23:41 +11:00
Kusal Kithul-Godage 9e93bb51db Add jakarta package to exclusion list 2025-01-06 13:46:21 +11:00
dependabot[bot] 0931b88b11 Bump log4j2.version from 2.24.2 to 2.24.3
Bumps `log4j2.version` from 2.24.2 to 2.24.3.

Updates `org.apache.logging.log4j:log4j-api` from 2.24.2 to 2.24.3

Updates `org.apache.logging.log4j:log4j-core` from 2.24.2 to 2.24.3

Updates `org.apache.logging.log4j:log4j-jcl` from 2.24.2 to 2.24.3

Updates `org.apache.logging.log4j:log4j-slf4j-impl` from 2.24.2 to 2.24.3

---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-api
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.logging.log4j:log4j-jcl
  dependency-type: direct:development
  update-type: version-update:semver-patch
- dependency-name: org.apache.logging.log4j:log4j-slf4j-impl
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-06 01:11:00 +00:00
dependabot[bot] 8dfc157be0 Bump byte-buddy.version from 1.14.11 to 1.15.11
Bumps `byte-buddy.version` from 1.14.11 to 1.15.11.

Updates `net.bytebuddy:byte-buddy` from 1.14.11 to 1.15.11
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](https://github.com/raphw/byte-buddy/compare/byte-buddy-1.14.11...byte-buddy-1.15.11)

Updates `net.bytebuddy:byte-buddy-agent` from 1.14.11 to 1.15.11
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](https://github.com/raphw/byte-buddy/compare/byte-buddy-1.14.11...byte-buddy-1.15.11)

---
updated-dependencies:
- dependency-name: net.bytebuddy:byte-buddy
  dependency-type: direct:development
  update-type: version-update:semver-minor
- dependency-name: net.bytebuddy:byte-buddy-agent
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-06 01:10:50 +00:00
Lukasz Lenart 98df24a2a0 Merge pull request #1171 from apache/fix/WW-5500-s7
WW-5500 Extends pattern to validate multipart uploads
2025-01-05 17:47:51 +01:00
Lukasz Lenart fd24a4a9c8 Merge pull request #1170 from apache/fix/WW-5498-s7
WW-5498 Adds devMode errors as action messages to avoid breaking validation logic
2025-01-05 17:47:14 +01:00
Lukasz Lenart 026300b456 Merge pull request #1133 from apache/dependabot/maven/commons-io-commons-io-2.18.0
Bump commons-io:commons-io from 2.15.1 to 2.18.0
2025-01-05 10:18:51 +01:00
Lukasz Lenart b36f7bd9cc Merge pull request #1173 from apache/fix/dependabot
Updates dependabot.yml
2025-01-05 10:07:14 +01:00
dependabot[bot] 93943dbb33 Bump commons-io:commons-io from 2.15.1 to 2.18.0
Bumps commons-io:commons-io from 2.15.1 to 2.18.0.

---
updated-dependencies:
- dependency-name: commons-io:commons-io
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-05 09:01:48 +00:00
Lukasz Lenart 18f3a49028 Updatex dependabot.yml
Stop ignoring any dependency
2025-01-05 09:54:29 +01:00
Lukasz Lenart 9e2f92f7af Merge pull request #1172 from apache/fix/supported-versions
Updates SECURITY.md
2025-01-05 09:46:22 +01:00
Lukasz Lenart f97e2c29bc Updates SECURITY.md 2025-01-05 09:34:58 +01:00
Lukasz Lenart bd46f587a4 Merge pull request #1164 from apache/dependabot/maven/org.apache.velocity-velocity-engine-core-2.4.1
Bump org.apache.velocity:velocity-engine-core from 2.3 to 2.4.1
2025-01-05 09:29:57 +01:00
Lukasz Lenart e5825de28e Merge pull request #1163 from apache/dependabot/maven/org.freemarker-freemarker-2.3.34
Bump org.freemarker:freemarker from 2.3.33 to 2.3.34
2025-01-05 09:26:32 +01:00
Lukasz Lenart 6d71674cc1 WW-5500 Extends pattern to validate multipart uploads 2025-01-05 09:21:08 +01:00
Lukasz Lenart db9684e1c1 WW-5498 Adds devMode errors as action messages to avoid breaking validation logic 2025-01-05 09:18:40 +01:00
Lukasz Lenart ac9a02c685 Merge pull request #1166 from apache/fix/sonar-scan
Removes checking branch ref and removes branch name as not needed
2025-01-04 14:50:48 +01:00
Lukasz Lenart 9ac86ed61b Merge pull request #1165 from apache/feature/yourkit
Add YourKit thank you section
2025-01-04 14:38:11 +01:00
Lukasz Lenart c0a720475b Removes checking branch ref and removes branch name as not needed 2025-01-03 16:29:55 +01:00
Lukasz Lenart cadb7a1fb2 Add YourKit thank you section 2025-01-03 08:53:00 +01:00
dependabot[bot] 4f1556c2d7 Bump org.apache.velocity:velocity-engine-core from 2.3 to 2.4.1
Bumps org.apache.velocity:velocity-engine-core from 2.3 to 2.4.1.

---
updated-dependencies:
- dependency-name: org.apache.velocity:velocity-engine-core
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-12-30 01:52:04 +00:00
dependabot[bot] 80b3108c86 Bump org.freemarker:freemarker from 2.3.33 to 2.3.34
Bumps org.freemarker:freemarker from 2.3.33 to 2.3.34.

---
updated-dependencies:
- dependency-name: org.freemarker:freemarker
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-12-30 01:52:00 +00:00