commits

(cxf) branch coheigea/oidc-state updated (08d5bcf35e6 -> 66ea2e61fa0)

Tue, 25 Aug 2026 13:13:13 GMT

2026/08/25 -- coheigea

(cxf) branch dependabot/maven/com.puppycrawl.tools-checkstyle-14.0.0 deleted (was 7e6a1de337c)

Tue, 25 Aug 2026 12:48:53 GMT

2026/08/25 -- github-bot

(cxf) branch 3.6.x-fixes updated: Fix deflate bomb in compression utils (#3394)

Tue, 25 Aug 2026 11:28:29 GMT

2026/08/25 -- coheigea

(cxf) branch 4.1.x-fixes updated: Fix deflate bomb in compression utils (#3394)

Tue, 25 Aug 2026 11:22:34 GMT

2026/08/25 -- coheigea

(cxf) branch main updated: Bump com.puppycrawl.tools:checkstyle from 13.8.0 to 14.0.0 (#3396)

Tue, 25 Aug 2026 11:13:16 GMT

2026/08/25 -- reta

(cxf) branch main updated: Bump org.codehaus.plexus:plexus-utils from 4.0.3 to 4.1.0 (#3397)

Tue, 25 Aug 2026 11:12:31 GMT

2026/08/25 -- reta

(cxf) branch dependabot/maven/org.codehaus.plexus-plexus-utils-4.1.0 deleted (was 68ba92eec25)

Tue, 25 Aug 2026 11:12:31 GMT

2026/08/25 -- github-bot

(cxf) 01/01: For OIDC, allow only relative URLs or absolute URLs with the same scheme and authority as the current RP

Tue, 25 Aug 2026 10:36:10 GMT

2026/08/25 -- coheigea

(cxf) branch coheigea/oidc-state created (now 08d5bcf35e6)

Tue, 25 Aug 2026 10:36:02 GMT

2026/08/25 -- coheigea

(cxf) branch coheigea/deflate-bomb deleted (was fbe7b9b79d5)

Tue, 25 Aug 2026 07:49:05 GMT

2026/08/25 -- coheigea

(cxf) branch main updated: Fix deflate bomb in compression utils (#3394)

Tue, 25 Aug 2026 07:44:20 GMT

2026/08/25 -- coheigea

(cxf) branch dependabot/maven/org.codehaus.plexus-plexus-utils-4.1.0 created (now 68ba92eec25)

Tue, 25 Aug 2026 02:43:40 GMT

2026/08/25 -- github-bot

(cxf) branch dependabot/maven/com.puppycrawl.tools-checkstyle-14.0.0 created (now 7e6a1de337c)

Tue, 25 Aug 2026 02:43:23 GMT

2026/08/25 -- github-bot

(cxf) branch 3.6.x-fixes updated: Fix checkstyle violations

Tue, 25 Aug 2026 02:01:52 GMT

2026/08/25 -- reta

(cxf-xjc-utils) branch dependabot/maven/org.codehaus.plexus-plexus-archiver-4.13.0 deleted (was c2a0a90)

Tue, 25 Aug 2026 01:56:15 GMT

2026/08/25 -- github-bot

(cxf-xjc-utils) branch main updated: Bump org.codehaus.plexus:plexus-archiver from 4.12.0 to 4.13.0 (#364)

Tue, 25 Aug 2026 01:56:05 GMT

2026/08/25 -- reta

(cxf-xjc-utils) branch dependabot/maven/org.codehaus.plexus-plexus-utils-4.1.0 deleted (was 6a178cc)

Tue, 25 Aug 2026 01:55:14 GMT

2026/08/25 -- github-bot

(cxf-xjc-utils) branch main updated: Bump org.codehaus.plexus:plexus-utils from 4.0.3 to 4.1.0 (#365)

Tue, 25 Aug 2026 01:55:05 GMT

2026/08/25 -- reta

(cxf-xjc-utils) branch dependabot/maven/org.codehaus.plexus-plexus-utils-4.1.0 created (now 6a178cc)

Tue, 25 Aug 2026 01:13:14 GMT

2026/08/25 -- github-bot

(cxf-xjc-utils) branch dependabot/maven/org.codehaus.plexus-plexus-archiver-4.13.0 created (now c2a0a90)

Tue, 25 Aug 2026 01:12:49 GMT

2026/08/25 -- github-bot

(cxf) 04/04: Update Jackson to 2.22.2

Mon, 24 Aug 2026 22:57:51 GMT

2026/08/24 -- reta

(cxf) 03/04: CXF-9233: AbstractLoggingInterceptor.LIVE_LOGGING_PROP already set in the message properties, so RESP_OUT is not logged (#3372)

Mon, 24 Aug 2026 22:57:51 GMT

2026/08/24 -- reta

(cxf) 02/04: Bump cxf.openfeign.version from 13.13 to 13.14 (#3395)

Mon, 24 Aug 2026 22:57:51 GMT

2026/08/24 -- reta

(cxf) 01/04: Bump github/codeql-action/init from 4.37.6 to 4.37.7 (#3392)

Mon, 24 Aug 2026 22:57:51 GMT

2026/08/24 -- reta

(cxf) branch 3.6.x-fixes updated (36ad60be6ad -> 9dfa8d47709)

Mon, 24 Aug 2026 22:57:50 GMT

2026/08/24 -- reta

(cxf-build-utils) branch dependabot/github_actions/github/codeql-action/autobuild-4.37.7 deleted (was 2ae6925)

Mon, 24 Aug 2026 22:50:09 GMT

2026/08/24 -- github-bot

(cxf-build-utils) branch dependabot/github_actions/github/codeql-action/analyze-4.37.7 deleted (was e85936b)

Mon, 24 Aug 2026 22:50:08 GMT

2026/08/24 -- github-bot

(cxf-build-utils) branch dependabot/github_actions/github/codeql-action/init-4.37.7 deleted (was 8871cca)

Mon, 24 Aug 2026 22:46:10 GMT

2026/08/24 -- github-bot

(cxf) 01/08: Bump cxf.opentelemetry.version from 1.64.0 to 1.65.0 (#3379)

Mon, 24 Aug 2026 22:46:07 GMT

2026/08/24 -- reta

(cxf) 07/08: Update Jackson to 2.22.2

Mon, 24 Aug 2026 22:46:07 GMT

2026/08/24 -- reta

(cxf-build-utils) branch main updated: Bump github/codeql-action/init from 4.37.6 to 4.37.7 (#253)

Mon, 24 Aug 2026 22:45:57 GMT

2026/08/24 -- reta

(cxf) 02/08: Bump github/codeql-action/init from 4.37.6 to 4.37.7 (#3392)

Mon, 24 Aug 2026 22:45:40 GMT

2026/08/24 -- reta

(cxf) 03/08: Bump net.sourceforge.pmd:pmd-java from 7.25.0 to 7.26.0 (#3303)

Mon, 24 Aug 2026 22:45:38 GMT

2026/08/24 -- reta

(cxf) 08/08: Recording .gitmergeinfo Changes

Mon, 24 Aug 2026 22:45:38 GMT

2026/08/24 -- reta

(cxf) 05/08: CXF-9233: AbstractLoggingInterceptor.LIVE_LOGGING_PROP already set in the message properties, so RESP_OUT is not logged (#3372)

Mon, 24 Aug 2026 22:45:38 GMT

2026/08/24 -- reta

(cxf) 04/08: Bump cxf.openfeign.version from 13.13 to 13.14 (#3395)

Mon, 24 Aug 2026 22:45:38 GMT

2026/08/24 -- reta

(cxf) 06/08: Recording .gitmergeinfo Changes

Mon, 24 Aug 2026 22:45:37 GMT

2026/08/24 -- reta

(cxf) branch 4.1.x-fixes updated (dbb54decb1a -> a8c648ed941)

Mon, 24 Aug 2026 22:45:37 GMT

2026/08/24 -- reta

(cxf-build-utils) branch dependabot/github_actions/github/codeql-action/init-4.37.7 updated (b0a7fce -> 8871cca)

Mon, 24 Aug 2026 22:41:39 GMT

2026/08/24 -- reta

(cxf-build-utils) branch dependabot/maven/org.codehaus.plexus-plexus-utils-4.1.0 deleted (was 7ab8387)

Mon, 24 Aug 2026 22:41:09 GMT

2026/08/24 -- github-bot

(cxf-build-utils) branch main updated: Bump org.codehaus.plexus:plexus-utils from 4.0.3 to 4.1.0 (#252)

Mon, 24 Aug 2026 22:41:02 GMT

2026/08/24 -- reta

(cxf) branch main updated: CXF-9233: AbstractLoggingInterceptor.LIVE_LOGGING_PROP already set in the message properties, so RESP_OUT is not logged (#3372)

Mon, 24 Aug 2026 22:34:29 GMT

2026/08/24 -- reta

(cxf-build-utils) branch dependabot/github_actions/github/codeql-action/autobuild-4.37.7 created (now 2ae6925)

Mon, 24 Aug 2026 22:17:46 GMT

2026/08/24 -- github-bot

(cxf-build-utils) branch dependabot/github_actions/github/codeql-action/analyze-4.37.7 created (now e85936b)

Mon, 24 Aug 2026 22:15:16 GMT

2026/08/24 -- github-bot

(cxf-build-utils) branch dependabot/github_actions/github/codeql-action/init-4.37.7 created (now b0a7fce)

Mon, 24 Aug 2026 22:14:02 GMT

2026/08/24 -- github-bot

(cxf-build-utils) branch dependabot/maven/org.codehaus.plexus-plexus-utils-4.1.0 created (now 7ab8387)

Mon, 24 Aug 2026 22:13:23 GMT

2026/08/24 -- github-bot

(cxf) branch main updated: Bump cxf.openfeign.version from 13.13 to 13.14 (#3395)

Mon, 24 Aug 2026 18:00:46 GMT

2026/08/24 -- reta

(cxf) branch dependabot/maven/net.sourceforge.pmd-pmd-java-7.26.0 deleted (was 864945e4682)

Mon, 24 Aug 2026 18:00:05 GMT

2026/08/24 -- github-bot

(cxf) branch main updated: Bump net.sourceforge.pmd:pmd-java from 7.25.0 to 7.26.0 (#3303)

Mon, 24 Aug 2026 17:59:39 GMT

2026/08/24 -- reta

(cxf) branch dependabot/maven/cxf.openfeign.version-13.14 deleted (was be938d2cb8d)

Mon, 24 Aug 2026 17:59:35 GMT

2026/08/24 -- github-bot

(cxf) branch dependabot/maven/net.sourceforge.pmd-pmd-java-7.26.0 updated (1d371ee5be6 -> 864945e4682)

Mon, 24 Aug 2026 16:35:05 GMT

2026/08/24 -- github-bot

(cxf) 01/01: Fix deflate bomb in compression utils

Mon, 24 Aug 2026 16:17:16 GMT

2026/08/24 -- coheigea

(cxf) branch main updated: Bump github/codeql-action/init from 4.37.6 to 4.37.7 (#3392)

Mon, 24 Aug 2026 16:15:37 GMT

2026/08/24 -- reta

(cxf-build-utils) branch main updated: Add more eclusions to category/java/errorprone.xml

Mon, 24 Aug 2026 15:48:00 GMT

2026/08/24 -- reta

(cxf) branch dependabot/maven/cxf.openfeign.version-13.14 created (now be938d2cb8d)

Mon, 24 Aug 2026 15:09:11 GMT

2026/08/24 -- github-bot

(cxf) branch main updated: Bump github/codeql-action/upload-sarif from 4.37.6 to 4.37.7 (#3388)

Mon, 24 Aug 2026 14:48:21 GMT

2026/08/24 -- reta

(cxf) branch coheigea/deflate-bomb created (now 8af7486fd0f)

Mon, 24 Aug 2026 13:51:35 GMT

2026/08/24 -- coheigea

(cxf) branch dependabot/github_actions/github/codeql-action/analyze-4.37.7 deleted (was e24fd6b7b0f)

Mon, 24 Aug 2026 12:42:36 GMT

2026/08/24 -- github-bot

(cxf) branch dependabot/github_actions/github/codeql-action/init-4.37.7 deleted (was 0460836b00c)

Mon, 24 Aug 2026 12:39:28 GMT

2026/08/24 -- github-bot

(cxf) branch dependabot/github_actions/github/codeql-action/init-4.37.7 updated (899bce372c4 -> 0460836b00c)

Mon, 24 Aug 2026 11:50:36 GMT

2026/08/24 -- reta

(cxf) branch main updated: Bump cxf.lucene.version from 10.5.0 to 10.5.1 (#3389)

Mon, 24 Aug 2026 11:31:36 GMT

2026/08/24 -- reta

(cxf) branch dependabot/maven/cxf.lucene.version-10.5.1 deleted (was 3583c1957e8)

Mon, 24 Aug 2026 11:31:14 GMT

2026/08/24 -- github-bot

(cxf) branch 3.6.x-fixes updated: Validate token hashes if they are available (#3385)

Mon, 24 Aug 2026 09:44:35 GMT

2026/08/24 -- coheigea

(cxf) 02/02: [CXF-9241] - Remove ImplicitConfidentialGrantService (#3386)

Mon, 24 Aug 2026 08:07:21 GMT

2026/08/24 -- coheigea

(cxf) 01/02: Validate token hashes if they are available (#3385)

Mon, 24 Aug 2026 08:07:12 GMT

2026/08/24 -- coheigea

(cxf) branch 4.1.x-fixes updated (f121277c5d9 -> dbb54decb1a)

Mon, 24 Aug 2026 08:07:11 GMT

2026/08/24 -- coheigea

(cxf) branch coheigea/CXF-9241 deleted (was 72641921511)

Mon, 24 Aug 2026 07:59:34 GMT

2026/08/24 -- coheigea

(cxf) branch main updated: Validate token hashes if they are available (#3385)

Mon, 24 Aug 2026 07:58:11 GMT

2026/08/24 -- coheigea

(cxf) branch main updated: [CXF-9241] - Remove ImplicitConfidentialGrantService (#3386)

Mon, 24 Aug 2026 07:57:52 GMT

2026/08/24 -- coheigea

(cxf) branch coheigea/idtokenreader deleted (was 96415873bf6)

Mon, 24 Aug 2026 07:57:51 GMT

2026/08/24 -- coheigea

(cxf) branch dependabot/maven/com.squareup.okhttp3-okhttp-5.5.0 created (now 82b40b4a82a)

Mon, 24 Aug 2026 02:55:09 GMT

2026/08/24 -- github-bot

(cxf) branch dependabot/maven/org.atmosphere-atmosphere-runtime-4.0.66 deleted (was a9c4c45b1af)

Mon, 24 Aug 2026 02:47:03 GMT

2026/08/24 -- github-bot

(cxf) branch dependabot/maven/org.atmosphere-atmosphere-runtime-4.0.67 created (now b6915648290)

Mon, 24 Aug 2026 02:46:52 GMT

2026/08/24 -- github-bot

(cxf) branch dependabot/github_actions/github/codeql-action/init-4.37.7 created (now 899bce372c4)

Mon, 24 Aug 2026 02:46:41 GMT

2026/08/24 -- github-bot

(cxf) branch dependabot/maven/com.squareup.okhttp3-okhttp-5.4.0 deleted (was a961cb99754)

Mon, 24 Aug 2026 02:46:03 GMT

2026/08/24 -- github-bot

(cxf) branch dependabot/github_actions/github/codeql-action/analyze-4.37.7 created (now e24fd6b7b0f)

Mon, 24 Aug 2026 02:45:48 GMT

2026/08/24 -- github-bot

(cxf) branch dependabot/github_actions/github/codeql-action/upload-sarif-4.37.7 created (now 209db08490e)

Mon, 24 Aug 2026 02:45:17 GMT

2026/08/24 -- github-bot

(cxf) branch dependabot/maven/cxf.lucene.version-10.5.1 created (now 3583c1957e8)

Mon, 24 Aug 2026 02:44:08 GMT

2026/08/24 -- github-bot

(cxf) branch dependabot/maven/cxf.tika.version-4.0.0 created (now 22f474c14ba)

Mon, 24 Aug 2026 02:43:35 GMT

2026/08/24 -- github-bot

(cxf-xjc-utils) branch dependabot/github_actions/github/codeql-action/autobuild-4.37.7 deleted (was da8cea9)

Mon, 24 Aug 2026 01:55:39 GMT

2026/08/24 -- github-bot

(cxf-xjc-utils) branch dependabot/github_actions/github/codeql-action/analyze-4.37.7 deleted (was bd68c7d)

Mon, 24 Aug 2026 01:55:30 GMT

2026/08/24 -- github-bot

(cxf-xjc-utils) branch dependabot/github_actions/github/codeql-action/init-4.37.7 deleted (was 2f58392)

Mon, 24 Aug 2026 01:53:04 GMT

2026/08/24 -- github-bot

(cxf-xjc-utils) branch main updated: Bump github/codeql-action/init from 4.37.6 to 4.37.7 (#361)

Mon, 24 Aug 2026 01:52:53 GMT

2026/08/24 -- reta

(cxf-xjc-utils) branch dependabot/github_actions/github/codeql-action/init-4.37.7 updated (6f1e44b -> 2f58392)

Mon, 24 Aug 2026 01:48:53 GMT

2026/08/24 -- reta

(cxf-xjc-utils) branch dependabot/maven/com.puppycrawl.tools-checkstyle-14.0.0 deleted (was ffc14b8)

Mon, 24 Aug 2026 01:47:26 GMT

2026/08/24 -- github-bot

(cxf-xjc-utils) branch dependabot/github_actions/github/codeql-action/autobuild-4.37.7 created (now da8cea9)

Mon, 24 Aug 2026 01:17:26 GMT

2026/08/24 -- github-bot

(cxf-xjc-utils) branch dependabot/github_actions/github/codeql-action/analyze-4.37.7 created (now bd68c7d)

Mon, 24 Aug 2026 01:16:12 GMT

2026/08/24 -- github-bot

(cxf-xjc-utils) branch dependabot/github_actions/github/codeql-action/init-4.37.7 created (now 6f1e44b)

Mon, 24 Aug 2026 01:15:05 GMT

2026/08/24 -- github-bot

(cxf-xjc-utils) branch dependabot/maven/com.puppycrawl.tools-checkstyle-14.0.0 created (now ffc14b8)

Mon, 24 Aug 2026 01:12:41 GMT

2026/08/24 -- github-bot

(cxf) branch dependabot/maven/cxf.opentelemetry.version-1.65.0 deleted (was 5ec67aa692e)

Sat, 22 Aug 2026 20:57:20 GMT

2026/08/22 -- github-bot

(cxf) branch main updated: Bump cxf.opentelemetry.version from 1.64.0 to 1.65.0 (#3379)

Sat, 22 Aug 2026 20:56:23 GMT

2026/08/22 -- reta

(cxf) branch main updated: Bump cxf.jackson.version from 3.2.1 to 3.2.2 (#3384)

Sat, 22 Aug 2026 12:46:07 GMT

2026/08/22 -- reta

(cxf) branch dependabot/maven/cxf.jackson.version-3.2.2 deleted (was b8b98e69650)

Sat, 22 Aug 2026 12:45:28 GMT

2026/08/22 -- github-bot

(cxf) branch dependabot/maven/cxf.opentelemetry.version-1.65.0 updated (83e81368740 -> 5ec67aa692e)

Sat, 22 Aug 2026 12:36:16 GMT

2026/08/22 -- reta

(cxf) branch main updated (8097db11093 -> 2a130bce713)

Fri, 21 Aug 2026 20:52:39 GMT

2026/08/21 -- reta

(cxf) branch coheigea/CXF-9241 created (now 72641921511)

Fri, 21 Aug 2026 16:07:23 GMT

2026/08/21 -- coheigea

(cxf) 01/01: [CXF-9241] - Remove ImplicitConfidentialGrantService

Fri, 21 Aug 2026 16:07:23 GMT

2026/08/21 -- coheigea

(cxf) 02/02: Update Spring Security to 7.1.1

Fri, 21 Aug 2026 15:46:03 GMT

2026/08/21 -- reta

(cxf) 01/02: Update Spring LDAP to 4.1.1

Fri, 21 Aug 2026 15:37:21 GMT

2026/08/21 -- reta

(cxf) branch coheigea/idtokenreader created (now 96415873bf6)

Fri, 21 Aug 2026 15:32:08 GMT

2026/08/21 -- coheigea