This is an automated email from the ASF dual-hosted git repository.
dependabot[bot] pushed a change to branch
dependabot/maven/org.atmosphere-atmosphere-runtime-4.0.70
in repository https://gitbox.apache.org/repos/asf/cxf.git
omit 65b2d62a68c Bump org.atmosphere:atmosphere-runtime from 3.1.0 to 4.0.70
add 744d59daf9e Bump com.fasterxml.woodstox:woodstox-core from 7.2.1 to
7.2.2 (#3446)
add ec3389a6db2 Bump io.swagger.core.v3:swagger-jaxrs2-jakarta from 2.2.54
to 2.2.55 (#3445)
add 913f72c74cf Put a max length on the Fiql search term and fix
performance parsing issue (#3443)
add 6d2b4231868 Harden Content-Disposition filename parsing against ReDoS
(#3448)
add a958b4b96d5 Fixup #3423 Use a properly random source to generate
digest client (#3451)
add b5f9095340f Bump jakarta.json.bind:jakarta.json.bind-api from 3.0.2 to
3.0.3 (#3450)
add bb0766db255 Bump cxf.dropwizard5.version from 5.0.7 to 5.0.8 (#3449)
add 3fd6143353b Add formParamsMaxSize to FormEncodingProvider and estimate
form params count before decoding / parsing (#3444)
add d34ae62a4dc Fix STS secret-key sizing (#3453)
add bc5154d6d6b Update Dropwizard Metrics to 4.2.40
add b7d1fb98ea2 Update Jetty to 12.1.13
add 223fd2ffe65 Fix secret key sizing for Spnego as well (#3454)
add 4e7756046f3 Bump org.apache.maven.plugins:maven-compiler-plugin (#3456)
add f776b0d3c67 Bump cxf.hibernate.em.version from 7.4.6.Final to
7.4.7.Final (#3455)
add 83d55afb81c Bump org.yaml:snakeyaml from 2.6 to 2.7 (#3460)
add 4d7efc66c07 Bump io.github.littleproxy:littleproxy from 2.8.0 to 2.9.1
(#3459)
add fb95f76fbee Fix encrypted properties tests to work with WSS4J 4.0.2
(#3458)
add a8b0e28ccf3 Update Netty to 4.2.18.Final
add c9f8dc49787 Add maxFormParameterSize contextual message parameter and
bound form params processing to it (#3457)
add 886c8469ce8 Bump org.codehaus.plexus:plexus-archiver from 4.12.0 to
4.14.0 (#3462)
add 39d7399b63f Bump cxf.slf4j.version from 2.0.18 to 2.0.19 (#3461)
add 046e027c946 Bump net.sourceforge.pmd:pmd-java from 7.26.0 to 7.27.0
(#3438)
add 398e3004ade Fix PMD violations (some JDKs / OSes)
add 34917285126 Revert "Fix PMD violations (some JDKs / OSes)"
add 202bec687a2 Bump org.apache.groovy:groovy from 5.1.1 to 5.1.2 (#3464)
add bd930979859 Bump actions/setup-java from 6.0.0 to 6.0.1 (#3468)
add 3095e0ed097 Bump github/codeql-action/upload-sarif from 4.37.9 to
4.38.0 (#3467)
add 8b2bc5c1cfc Bump org.graalvm.buildtools:native-maven-plugin from
1.1.11 to 1.1.12 (#3466)
add 4da4958f531 Bump org.apache.maven.plugins:maven-plugin-plugin from
3.15.2 to 3.16.0 (#3465)
add bb6d4fd1732 Bump github/codeql-action/init from 4.37.9 to 4.38.0
(#3469)
add 39a6ed6d957 Add sensible defaults to StaxUtils's MAX_ELEMENT_COUNT and
MAX_XML_CHARACTERS (#3463)
add f2bbf339f05 Update OpenTelemetry Semconv to 1.44.0
add 0b6e4c22c3d Update OpenTelemetry to 1.66.0
add 7b1a8a0db5f Group codeql updates together (#3474)
add 632ee349cd6 Bump org.apache.maven.plugins:maven-surefire-plugin from
3.5.6 to 3.6.0 (#3473)
add fad555e935d Bump com.puppycrawl.tools:checkstyle from 14.0.0 to 14.1.0
(#3472)
add 1529dd69ab2 Bump cxf.openfeign.version from 13.14 to 13.15 (#3471)
add f5ba25a6188 Bump cxf.tomcat.version from 11.0.25 to 11.0.26 (#3476)
add f34c3a8f94d Bump org.owasp:dependency-check-maven from 12.2.2 to
13.0.0 (#3479)
add 3cea570a1ab Bump org.apache.maven.plugins:maven-surefire-report-plugin
(#3478)
add f331e196692 Bump cxf.activemq.artemis.version from 2.56.0 to 2.57.0
(#3477)
add 3265a9bb6ff CXF-9245: Race Condition in
ServerLifeCycleManagerImpl#stopServer() (#3475)
add ac86902dad7 Bump
org.apache.maven.plugin-tools:maven-plugin-annotations (#3480)
add 68183400d9c Bump cxf.hibernate.em.version from 7.4.7.Final to
7.4.8.Final (#3481)
add f87989d6f52 Bump org.codehaus.mojo:exec-maven-plugin from 3.6.3 to
3.6.4 (#3482)
add 7aa10772441 Updating Neethi to 3.2.4 (#3483)
add c4ed00a9405 Update Apache Camel to 4.22.1
add 86a40d89b51 Bump org.codehaus.mojo:buildnumber-maven-plugin from 3.3.0
to 3.3.1 (#3486)
add a8446f455f7 Bump org.sonarsource.scanner.maven:sonar-maven-plugin
(#3485)
add 506686eed4b Bump org.graalvm.buildtools:native-maven-plugin from
1.1.12 to 1.1.13 (#3488)
add dab1d8de029 Bump cxf.bcprov.version from 1.85 to 1.86 (#3484)
add 535c1df34b8 Bump org.atmosphere:atmosphere-runtime from 3.1.0 to 4.0.70
This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version. This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:
* -- * -- B -- O -- O -- O (65b2d62a68c)
\
N -- N -- N
refs/heads/dependabot/maven/org.atmosphere-atmosphere-runtime-4.0.70
(535c1df34b8)
You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.
Any revisions marked "omit" are not gone; other references still
refer to them. Any revisions marked "discard" are gone forever.
No new revisions were added by this update.
Summary of changes:
.github/dependabot.yml | 4 +
.github/workflows/codeql-analysis.yml | 6 +-
.github/workflows/pull-request-build.yml | 2 +-
.github/workflows/scorecards.yml | 2 +-
core/pom.xml | 2 +-
.../apache/cxf/attachment/ContentDisposition.java | 3 +-
.../cxf/bus/managers/AbstractLifeCycleManager.java | 32 +++---
.../cxf/bus/managers/CXFBusLifeCycleManager.java | 13 +--
.../bus/managers/ClientLifeCycleManagerImpl.java | 12 +-
.../bus/managers/ServerLifeCycleManagerImpl.java | 13 +--
.../java/org/apache/cxf/common/jaxb/JAXBUtils.java | 2 +-
.../org/apache/cxf/common/logging/JDKBugHacks.java | 2 +-
.../org/apache/cxf/common/logging/LogUtils.java | 4 +-
.../apache/cxf/configuration/jsse/SSLUtils.java | 2 +-
.../java/org/apache/cxf/staxutils/StaxUtils.java | 9 +-
.../cxf/staxutils/transform/TransformUtils.java | 4 +-
.../cxf/ws/addressing/VersionTransformer.java | 1 +
.../cxf/attachment/AttachmentDeserializerTest.java | 1 +
.../cxf/attachment/ContentDispositionTest.java | 37 +++---
.../managers/ServerLifeCycleManagerImplTest.java | 124 +++++++++++++++++++++
.../org/apache/cxf/resource/URIResolverTest.java | 1 +
.../release/samples/groovy_spring_support/pom.xml | 2 +-
.../release/samples/jax_rs/graalvm_basic/pom.xml | 4 +-
.../src/main/release/samples/jaxws_graalvm/pom.xml | 4 +-
.../samples/jaxws_graalvm_dynamic/client/pom.xml | 2 +-
.../samples/jaxws_graalvm_dynamic/server/pom.xml | 2 +-
distribution/src/main/release/samples/pom.xml | 16 +--
.../core/classloader/PlugInClassLoaderTest.java | 2 +-
.../jaxws/CxfJaxwsAutoConfiguration.java | 1 +
.../SpringBasedTimedAnnotationProviderTest.java | 2 +-
.../maven_plugin/wsdl2java/WsdlOptionLoader.java | 2 +-
.../cxf/maven_plugin/wadlto/OptionLoader.java | 2 +-
parent/pom.xml | 46 ++++----
pom.xml | 14 +--
.../types/CorbaObjectReferenceEventProducer.java | 2 +-
.../apache/cxf/jaxb/JAXBContextInitializer.java | 2 +-
.../org/apache/cxf/jaxb/JAXBDataBindingTest.java | 2 +-
.../cxf/ext/logging/event/LogMessageFormatter.java | 4 +-
.../DefaultExceptionClassProviderTest.java | 2 +-
.../DefaultTimedAnnotationProviderTest.java | 2 +-
.../micrometer/provider/StandardTagsTest.java | 2 +-
.../provider/jaxws/JaxwsFaultCodeProviderTest.java | 2 +-
.../cxf/jaxrs/impl/HttpServletRequestFilter.java | 3 +-
.../org/apache/cxf/jaxrs/impl/ResponseImpl.java | 4 +-
.../cxf/jaxrs/provider/FormEncodingProvider.java | 9 +-
.../cxf/jaxrs/provider/ServerProviderFactory.java | 4 +-
.../java/org/apache/cxf/jaxrs/utils/FormUtils.java | 33 +++++-
.../org/apache/cxf/jaxrs/utils/JAXRSUtils.java | 2 +-
.../apache/cxf/jaxws/EndpointReferenceTest.java | 2 +-
.../cxf/jaxws/spi/WrapperClassLoaderTest.java | 2 +-
.../org/apache/cxf/jaxrs/client/WebClient.java | 2 +-
.../jaxrs/client/JAXRSClientFactoryBeanTest.java | 2 +-
.../common/openapi/DefaultApplicationFactory.java | 2 +-
.../cxf/jaxrs/ext/search/SearchContextImpl.java | 4 +-
.../cxf/jaxrs/ext/search/fiql/FiqlParser.java | 31 ++++++
.../jaxrs/ext/search/SearchContextImplTest.java | 8 ++
.../jaxrs/ext/search/fiql/FiqlParserReDoSTest.java | 102 +++++++++++++++++
.../oauth2/client/ClientCodeRequestFilter.java | 7 +-
.../security/oidc/rp/OidcIdTokenRequestFilter.java | 7 +-
.../oidc/rp/OidcRpAuthenticationFilter.java | 7 +-
.../apache/cxf/rt/security/SecurityConstants.java | 1 +
.../cxf/rt/security/rs/RSSecurityConstants.java | 1 +
.../transport/http/auth/DigestAuthSupplier.java | 18 ++-
.../http/spring/HttpConduitConfigurationTest.java | 2 +
.../jms/util/PollingMessageListenerContainer.java | 2 +-
.../cxf/transport/jms/AbstractJMSTester.java | 1 +
.../apache/cxf/transport/local/LocalConduit.java | 3 +-
.../cxf/transport/local/LocalDestination.java | 2 +-
.../apache/cxf/ws/rm/EncoderDecoder10AImpl.java | 1 +
.../org/apache/cxf/ws/rm/EncoderDecoder10Impl.java | 1 +
.../org/apache/cxf/ws/rm/EncoderDecoder11Impl.java | 1 +
.../java/org/apache/cxf/ws/rm/RMContextUtils.java | 2 +-
.../cxf/ws/rm/AbstractRMInterceptorTest.java | 2 +-
.../java/org/apache/cxf/ws/rm/RMManagerTest.java | 1 +
.../ws/rm/persistence/PersistenceUtilsTest.java | 1 +
...SecureConversationTokenInterceptorProvider.java | 7 +-
.../SpnegoTokenInterceptorProvider.java | 7 +-
.../cxf/sts/operation/AbstractOperation.java | 3 +-
.../sts/token/provider/DefaultSubjectProvider.java | 8 +-
.../cxf/sts/token/provider/TokenProviderUtils.java | 36 ++++++
.../cxf/systest/jaxrs/BookContinuationStore.java | 2 +-
.../jaxrs/ClientHttpConnectionOutInterceptor.java | 3 +-
.../systest/jaxrs/JAXRSClientServerBookTest.java | 50 +++++++++
.../jaxrs/reactive/RxJava2MaybeService.java | 1 +
.../jaxrs/reactive/RxJava2SingleService.java | 1 +
.../jaxrs/reactive/RxJava3MaybeService.java | 1 +
.../jaxrs/reactive/RxJava3SingleService.java | 1 +
.../cxf/systest/swa/ClientServerSwaTest.java | 1 +
.../cxf/systest/swa/SwANoMimeServiceImpl.java | 1 +
.../org/apache/cxf/systest/swa/SwAServiceImpl.java | 1 +
.../cxf/systest/jms/swa/ClientServerSwaTest.java | 1 +
.../apache/cxf/systest/jms/swa/SwAServiceImpl.java | 1 +
.../multipart/SwANoMimeServiceImpl.java | 1 +
.../http_undertow/multipart/SwAServiceImpl.java | 1 +
.../systest/http_jetty/EngineLifecycleTest.java | 1 +
.../cxf/systest/https/conduit/HTTPSClientTest.java | 2 +
.../apache/cxf/systest/mtom/ClientMtomXopTest.java | 1 +
.../cxf/systest/mtom/ClientMtomXopWithJMSTest.java | 1 +
.../apache/cxf/systest/ws/action/ActionTest.java | 45 ++++----
.../cxf/systest/ws/fault/ModifiedRequestTest.java | 4 +
.../apache/cxf/systest/ws/x509/X509TokenTest.java | 54 +++++----
.../apache/cxf/systest/ws/transfer/TestUtils.java | 12 +-
.../apache/cxf/mtom_xop/TestMtomProviderImpl.java | 1 +
.../apache/cxf/tools/common/model/JAnnotation.java | 2 +-
.../java/org/apache/cxf/tools/util/NameUtil.java | 10 +-
.../tools/corba/common/idltypes/CorbaUtils.java | 2 +-
.../java2wsdl/generator/WSDLGeneratorFactory.java | 2 +-
.../generator/wsdl11/DateTypeCustomGenerator.java | 6 +-
.../generator/wsdl11/FaultBeanGenerator.java | 3 +-
.../generator/wsdl11/WrapperBeanGenerator.java | 1 +
.../internal/SpringServiceBuilderFactory.java | 2 +-
.../processor/internal/jaxws/ResponseWrapper.java | 2 +-
.../apache/cxf/tools/wsdlto/core/PluginLoader.java | 6 +-
.../jaxws/customization/CustomizationParser.java | 8 +-
114 files changed, 717 insertions(+), 238 deletions(-)
copy
systests/tracing/src/test/java/org/apache/cxf/systest/brave/TestSpanHandler.java
=>
core/src/main/java/org/apache/cxf/bus/managers/AbstractLifeCycleManager.java
(60%)
copy
rt/bindings/corba/src/test/java/org/apache/cxf/binding/corba/runtime/CorbaStreamWriterTest.java
=> core/src/test/java/org/apache/cxf/attachment/ContentDispositionTest.java
(56%)
create mode 100644
core/src/test/java/org/apache/cxf/bus/managers/ServerLifeCycleManagerImplTest.java
create mode 100644
rt/rs/extensions/search/src/test/java/org/apache/cxf/jaxrs/ext/search/fiql/FiqlParserReDoSTest.java
