Commit Graph

  • 5c2be7cc7d Bump org.freemarker:freemarker from 2.3.32 to 2.3.33 dependabot[bot] 2024-06-03 01:37:13 +00:00
  • e5fcc8f175 Bump org.apache.maven.plugins:maven-assembly-plugin from 3.6.0 to 3.7.1 dependabot[bot] 2024-06-03 01:34:52 +00:00
  • 855b95e557 WW-5412 Upgrades struts-master to ver 15 Lukasz Lenart 2024-06-02 19:13:01 +02:00
  • 00752e33c4 Disables required reviewers option This option doesn't play with Silence Consensus Lukasz Lenart 2024-06-02 13:59:41 +02:00
  • 4a8ff99b1c WW-5424 Fixes ClassCastException when using short var name in s:set tag Lukasz Lenart 2024-06-02 13:53:37 +02:00
  • 9682b3b429 Merge pull request #944 from apache/dependabot/maven/jackson.version-2.17.1 Lukasz Lenart 2024-06-01 07:05:42 +02:00
  • 8268d0b063 Merge pull request #940 from apache/dependabot/maven/org.jacoco-jacoco-maven-plugin-0.8.12 Lukasz Lenart 2024-06-01 07:02:24 +02:00
  • 36230dc5be Merge pull request #945 from apache/fix/disable-review Lukasz Lenart 2024-05-20 08:02:51 +02:00
  • 9ee39d0a2c INFRA-25666 Disables review by code owners * this functionality requires to have public teams * currently all ASF teams are private Lukasz Lenart 2024-05-20 07:02:45 +02:00
  • ab89b8287a Bump jackson.version from 2.16.1 to 2.17.1 dependabot[bot] 2024-05-20 01:22:13 +00:00
  • 19252adea0 Bump org.jacoco:jacoco-maven-plugin from 0.8.11 to 0.8.12 dependabot[bot] 2024-05-20 01:19:53 +00:00
  • 40ccc74b8a Merge pull request #933 from apache/fix/WW-5415-constructor Lukasz Lenart 2024-05-14 19:56:27 +02:00
  • d147543dcd Merge pull request #932 from apache/feature/WW-5414-after Lukasz Lenart 2024-05-14 19:55:30 +02:00
  • 49eda37f2d Merge pull request #931 from apache/fix/WW-5422-trimable Lukasz Lenart 2024-05-13 08:23:26 +02:00
  • 0a57cac6d6 WW-5422 Adds dedicate unit test to cover DefaultLocaleProvider Lukasz Lenart 2024-05-11 07:23:22 +02:00
  • 195b0e59d0 Merge pull request #939 from apache/dependabot/github_actions/ossf/scorecard-action-2.3.3 Lukasz Lenart 2024-05-13 06:50:39 +02:00
  • 03126c01bf Merge pull request #938 from apache/dependabot/maven/org.apache.maven.plugins-maven-project-info-reports-plugin-3.5.0 Lukasz Lenart 2024-05-13 06:50:20 +02:00
  • 73be382a96 Merge pull request #936 from apache/dependabot/maven/slf4j.version-2.0.13 Lukasz Lenart 2024-05-13 06:49:43 +02:00
  • f338fda6d8 Merge pull request #934 from apache/dependabot/maven/org.apache.maven.plugins-maven-source-plugin-3.3.1 Lukasz Lenart 2024-05-13 06:48:23 +02:00
  • 7c523ac33e WW-5415 Constructor members should be exempted as static members Kusal Kithul-Godage 2024-05-13 12:37:04 +10:00
  • 039c5f8d42 Bump ossf/scorecard-action from 2.3.1 to 2.3.3 dependabot[bot] 2024-05-13 01:38:25 +00:00
  • 6e12c25ac0 Bump org.apache.maven.plugins:maven-project-info-reports-plugin dependabot[bot] 2024-05-13 01:16:29 +00:00
  • c6b53d4887 Bump slf4j.version from 2.0.12 to 2.0.13 dependabot[bot] 2024-05-13 01:16:15 +00:00
  • 942fbd67e7 Bump org.apache.maven.plugins:maven-source-plugin from 3.3.0 to 3.3.1 dependabot[bot] 2024-05-13 01:15:24 +00:00
  • b36e88ff4b WW-5415 Fixes accessing public constructors via expression Lukasz Lenart 2024-05-12 09:47:38 +02:00
  • 4dfbe09343 WW-5414 Always call afterInvocation even in case of exception Lukasz Lenart 2024-05-11 08:23:56 +02:00
  • 649760d8b0 Merge pull request #913 from eschulma/master Lukasz Lenart 2024-05-11 06:36:33 +02:00
  • 49b8eedf1f Merge pull request #920 from apache/fix/WW-5419-tiles Lukasz Lenart 2024-05-06 18:20:54 +02:00
  • c0d1217d7c Merge pull request #924 from apache/feature/WW-5420-text Lukasz Lenart 2024-04-29 06:24:29 +02:00
  • f2e93d017b Merge pull request #905 from apache/dependabot/maven/org.apache.maven.plugins-maven-failsafe-plugin-3.2.5 Lukasz Lenart 2024-04-29 06:23:48 +02:00
  • 3ed212a1f2 Merge pull request #907 from apache/dependabot/maven/asm.version-9.7 Lukasz Lenart 2024-04-29 06:23:09 +02:00
  • ed3786c6b0 Merge pull request #926 from apache/dependabot/github_actions/actions/upload-artifact-4.3.3 Lukasz Lenart 2024-04-29 06:21:16 +02:00
  • 5cd9356049 Merge pull request #925 from apache/dependabot/maven/org.codehaus.mojo-exec-maven-plugin-3.2.0 Lukasz Lenart 2024-04-29 06:20:52 +02:00
  • 2d9af47a90 Bump actions/upload-artifact from 4.3.2 to 4.3.3 dependabot[bot] 2024-04-29 01:46:50 +00:00
  • c1c6a463a8 Bump org.codehaus.mojo:exec-maven-plugin from 3.1.0 to 3.2.0 dependabot[bot] 2024-04-29 01:15:19 +00:00
  • 36275b9e04 WW-5420 Upgrades commons-text to ver. 1.12.0 Lukasz Lenart 2024-04-25 08:25:09 +02:00
  • baab7dd36c Merge pull request #919 from apache/WW-5353-stronger-security-defaults Kusal Kithul-Godage 2024-04-24 22:33:03 +10:00
  • a88cb741d0 WW-5419 Fixes support for loading Tiles definitions Lukasz Lenart 2024-04-21 10:21:55 +02:00
  • 3cde668598 Merge pull request #922 from apache/dependabot/maven/org.codehaus.mojo-versions-maven-plugin-2.16.2 Lukasz Lenart 2024-04-22 06:39:33 +02:00
  • eca5b21088 Merge pull request #923 from apache/dependabot/github_actions/actions/upload-artifact-4.3.2 Lukasz Lenart 2024-04-22 06:36:59 +02:00
  • 856d98010a Bump actions/upload-artifact from 4.3.1 to 4.3.2 dependabot[bot] 2024-04-22 01:35:16 +00:00
  • b2b35f066c Bump org.codehaus.mojo:versions-maven-plugin from 2.16.1 to 2.16.2 dependabot[bot] 2024-04-22 01:23:03 +00:00
  • 831689b26f Merge pull request #918 from apache/merge-master-to-70-2024-04-20 Kusal Kithul-Godage 2024-04-21 00:54:12 +10:00
  • efdaf7e50f Merge pull request #909 from apache/dependabot/maven/org.assertj-assertj-core-3.25.3 Lukasz Lenart 2024-04-20 15:59:26 +02:00
  • 5d4ad83ccd WW-5353 Test fixes Kusal Kithul-Godage 2024-04-20 21:55:02 +10:00
  • 85cf09b7d3 WW-5353 Stronger security defaults for 7.0 Kusal Kithul-Godage 2024-04-20 21:08:43 +10:00
  • d0204f3152 Merge remote-tracking branch 'origin/master' into merge-master-to-70-2024-04-20 Kusal Kithul-Godage 2024-04-20 20:48:47 +10:00
  • 3c21e82290 Merge pull request #916 from apache/WW-5418-struts-sec Kusal Kithul-Godage 2024-04-20 20:01:06 +10:00
  • 2352c68631 [maven-release-plugin] prepare for next development iteration Lukasz Lenart 2024-04-20 09:24:32 +02:00
  • af53f0d93b [maven-release-plugin] prepare release STRUTS_7_0_0_M6 STRUTS_7_0_0_M6 Lukasz Lenart 2024-04-20 09:24:22 +02:00
  • 0a3b596648 Fixes creating assembly during release process Lukasz Lenart 2024-04-20 09:17:11 +02:00
  • 549c3bc989 [maven-release-plugin] prepare for next development iteration Lukasz Lenart 2024-04-19 21:00:01 +02:00
  • 4acb0d16da [maven-release-plugin] prepare release STRUTS_7_0_0_M5 STRUTS_7_0_0_M5 Lukasz Lenart 2024-04-19 20:59:51 +02:00
  • ce7671568b Fixes after merge assembly issue Lukasz Lenart 2024-04-19 09:14:10 +02:00
  • f5cfb88f1f Merge pull request #915 from atlassian-forks/issue/WW-5417-bump-ongl-version-to-fix-security-issue Kusal Kithul-Godage 2024-04-19 17:47:40 +10:00
  • 63267a8e06 Merge pull request #914 from atlassian-forks/issue/WW-5409-introduce-final-attribute-to-package-element Kusal Kithul-Godage 2024-04-19 17:47:02 +10:00
  • 8b9173469c [maven-release-plugin] prepare for next development iteration Lukasz Lenart 2024-04-19 08:38:28 +02:00
  • aca2eb07ef [maven-release-plugin] prepare release STRUTS_7_0_0_M4 STRUTS_7_0_0_M4 Lukasz Lenart 2024-04-19 08:38:19 +02:00
  • 964590c9a9 Merge pull request #904 from apache/merge/master-to-7xx-2024-04-07 Lukasz Lenart 2024-04-08 13:44:42 +02:00
  • 62b4b65c4c WW-5417 update ognl.version as 3.3.5 Jeffery Xie 2024-04-19 14:58:25 +10:00
  • 4310536799 Merge pull request #917 from apache/WW-5406-injection-order Kusal Kithul-Godage 2024-04-19 08:37:14 +10:00
  • ad49ea866a WW-5406 Fix injection order issue for excluded patterns Kusal Kithul-Godage 2024-04-18 22:28:30 +10:00
  • 7e9f6e84f2 WW-5418 Exclude Tomcat Jasper classes Kusal Kithul-Godage 2024-04-18 11:14:10 +10:00
  • 100f5052d4 WW-5418 Forbid enums Kusal Kithul-Godage 2024-04-18 11:13:56 +10:00
  • 0a720971c7 WW-5417 bump ognl version to fix security issue Jeffery Xie 2024-04-18 11:02:16 +10:00
  • 6ac8b04ad2 WW-5400 Added @since Struts 6.5.0 to new properties as requested Erica S. Kane 2024-04-12 13:40:53 -04:00
  • 1562e66a89 Merge pull request #912 from atlassian-forks/issue/WW-5408-add-option-to-not-fallback-to-empty-namespace-when-unresolved Kusal Kithul-Godage 2024-04-12 17:58:06 +10:00
  • 85783a0cc7 WW-5409 rename 6.5.0.dtd to 6.5.dtd to follow the naming pattern Jeffery Xie 2024-04-12 16:04:34 +10:00
  • 0151bdeb9c WW-5400 Better toString formatting Erica S. Kane 2024-04-11 16:52:44 -04:00
  • 0aa2f269f2 Merge pull request #911 from atlassian-forks/issue/WW-5407-extend-SecurityMemberAccess-proxy-detection-to-proxies Kusal Kithul-Godage 2024-04-11 19:16:36 +10:00
  • 4088f2ee2b WW-5409 update new dtd from 6.4.0 to 6.5.0 Jeffery Xie 2024-04-11 15:07:25 +10:00
  • 1d51d00ecb WW-5408 add struts.actionConfig.fallbackToEmptyNamespace as true in default.properties Jeffery Xie 2024-04-11 14:57:57 +10:00
  • 929a60184b Merge pull request #910 from apache/WW-5406-excluded-patterns Kusal Kithul-Godage 2024-04-11 14:27:31 +10:00
  • bf5f29132b WW-5409 introduce final attribute to package element which make them unextendable Jeffery Xie 2024-04-11 12:44:53 +10:00
  • 758174c52e WW-5400 Extend default configuration options for the CSP interceptor. Previously, it was impossible to set global options for the CSP interceptor. The only options was to have every action individually implement CspSettingsAware. Erica S. Kane 2024-04-10 18:42:09 -04:00
  • f9f6327570 /WW-5408 rename struts.disableActionConfigFallbackToEmptyNamespace to struts.actionConfig.fallbackToEmptyNamespace Jeffery Xie 2024-04-10 17:30:02 +10:00
  • ed0c7287d9 WW-5406 Revert breaking API change Kusal Kithul-Godage 2024-04-10 16:01:47 +10:00
  • 1a6e2fef7a WW-5406 Add deprecation JavaDocs Kusal Kithul-Godage 2024-04-10 15:55:02 +10:00
  • 5f717cdb89 WW-5407 tweak ProxyUtil#isHibernateProxyMember to make it neat Jeffery Xie 2024-04-10 15:00:50 +10:00
  • e2ec114577 WW-5408 add option to not fallback to empty namespace when unresolved Jeffery Xie 2024-04-09 15:33:10 +10:00
  • 0074b70286 WW-5407 extend SecurityMemberAccess proxy detection to other proxies Jeffery Xie 2024-04-09 14:36:41 +10:00
  • efa20426c9 WW-5406 Ensure Action excluded patterns are reinjected Kusal Kithul-Godage 2024-04-08 23:03:42 +10:00
  • 268ed789ee Bump org.assertj:assertj-core from 3.25.2 to 3.25.3 dependabot[bot] 2024-04-08 01:22:47 +00:00
  • ccd5f5d534 Bump asm.version from 9.6 to 9.7 dependabot[bot] 2024-04-08 01:22:36 +00:00
  • ac409d6cba Bump org.apache.maven.plugins:maven-failsafe-plugin dependabot[bot] 2024-04-08 01:20:48 +00:00
  • c6d13f1016 [maven-release-plugin] prepare for next development iteration Lukasz Lenart 2024-04-07 11:22:16 +02:00
  • 9c5c80d173 [maven-release-plugin] prepare release STRUTS_6_4_0 STRUTS_6_4_0 Lukasz Lenart 2024-04-07 11:22:06 +02:00
  • a6d6d918fa Reverts release and fixes issue with assembly Lukasz Lenart 2024-04-07 11:11:32 +02:00
  • 5e8b81b382 [maven-release-plugin] prepare for next development iteration Lukasz Lenart 2024-04-07 08:13:17 +02:00
  • f8381fbdbf [maven-release-plugin] prepare release STRUTS_6_4_0 Lukasz Lenart 2024-04-07 08:13:07 +02:00
  • e5e6145c36 Merge remote-tracking branch 'origin/master' into merge/master-to-7xx-2024-04-07 Lukasz Lenart 2024-04-07 07:58:50 +02:00
  • 0f6d5dbb2f Merge pull request #903 from apache/fix/WW-5390-assembly Lukasz Lenart 2024-04-07 07:08:19 +02:00
  • db725518ee WW-5390 Fixes creating assembly and attaching sources when preparing a new release Lukasz Lenart 2024-04-06 19:36:14 +02:00
  • ee38cd5b14 Merge pull request #902 from apache/dependabot/maven/log4j2.version-2.23.1 Lukasz Lenart 2024-04-06 18:45:12 +02:00
  • 7a79576bb3 Bump log4j2.version from 2.21.1 to 2.23.1 dependabot[bot] 2024-04-04 10:01:09 +00:00
  • 5cf746f538 Merge pull request #901 from apache/fix/branch-protction Lukasz Lenart 2024-04-02 15:01:10 +02:00
  • 689d17d274 Merge pull request #896 from apache/feature/WW-5402-autoload-classptah Lukasz Lenart 2024-04-02 08:53:49 +02:00
  • c7ae614824 WW-5402 Auto loads Tiles definitions from classpath Lukasz Lenart 2024-03-24 11:29:12 +01:00
  • 273c3a1a99 Uses proper context name in branch protection rule Lukasz Lenart 2024-03-31 11:36:49 +02:00
  • c774e23ef9 Merge pull request #900 from apache/WW-5251-retrofit-compat Lukasz Lenart 2024-03-31 11:35:52 +02:00