commits  

Messages by Thread

• (cxf) branch main updated: Harden JNDI for integration/jca (#3169) coheigea
• (cxf) branch more.schema.factory updated (3d46364055d -> 651e23cf78c) reta
• (cxf) branch coheigea/integration-jndi created (now 0b51b29da72) coheigea
  • (cxf) 01/01: Harden JNDI for integration/jca coheigea
• (cxf) branch coheigea/json-arrays created (now 5bb5f6f9ebd) coheigea
  • (cxf) 01/01: Properly handle nested arrays in json parsing coheigea
• (cxf-build-utils) branch main updated (888e71c -> 6347042) coheigea
  • (cxf-build-utils) 01/01: Merge pull request #230 from potiuk/asf-security/discoverability-2026-05-31 coheigea
• (cxf-xjc-utils) branch main updated (0dd32ad -> 38e47b9) coheigea
  • (cxf-xjc-utils) 01/01: Merge pull request #334 from potiuk/asf-security/discoverability-2026-05-31 coheigea
• (cxf) branch 4.1.x-fixes updated: compare oauth2 secret tokens with constant-time MessageDigest.isEqual (#3165) coheigea
• (cxf) branch main updated: compare oauth2 secret tokens with constant-time MessageDigest.isEqual (#3165) coheigea
• (cxf) branch more.schema.factory updated (0ff9c353a25 -> 3d46364055d) reta
• (cxf) branch 4.1.x-fixes updated: [CXF-9111]ensure we have correct Content-Disposition set per spec ffang
• (cxf) branch dependabot/maven/org.apache.maven.plugins-maven-surefire-report-plugin-3.5.6 deleted (was a515cd87bc7) github-bot
• (cxf) branch main updated: Bump org.apache.maven.plugins:maven-surefire-report-plugin (#3163) reta
• (cxf) branch dependabot/github_actions/github/codeql-action-4.36.0 deleted (was 217a7b49aa3) github-bot
• (cxf) branch main updated: Bump cxf.dropwizard5.version from 5.0.6 to 5.0.7 (#3162) reta
• (cxf) branch dependabot/maven/cxf.dropwizard5.version-5.0.7 deleted (was c46857af426) github-bot
• (cxf) branch main updated: Bump github/codeql-action from 4.35.5 to 4.36.0 (#3161) reta
• (cxf) branch main updated: Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.5 to 3.5.6 (#3160) reta
• (cxf) branch dependabot/maven/org.apache.maven.plugins-maven-surefire-plugin-3.5.6 deleted (was e77eb65920e) github-bot
• (cxf) branch dependabot/maven/org.atmosphere-atmosphere-runtime-4.0.47 deleted (was 67dd10a8017) github-bot
• (cxf) branch dependabot/maven/org.atmosphere-atmosphere-runtime-4.0.48 created (now 468916825a3) github-bot
• (cxf) branch dependabot/maven/cxf.dropwizard5.version-5.0.7 created (now c46857af426) github-bot
• (cxf) branch dependabot/maven/org.apache.maven.plugins-maven-surefire-report-plugin-3.5.6 created (now a515cd87bc7) github-bot
• (cxf) branch dependabot/github_actions/github/codeql-action-4.36.0 created (now 217a7b49aa3) github-bot
• (cxf) branch dependabot/maven/org.apache.maven.plugins-maven-surefire-plugin-3.5.6 created (now e77eb65920e) github-bot
• (cxf-xjc-utils) branch dependabot/maven/org.apache.maven.plugins-maven-surefire-report-plugin-3.5.6 deleted (was 6732b8d) github-bot
• (cxf-xjc-utils) branch main updated: Bump org.apache.maven.plugins:maven-surefire-report-plugin (#335) reta
• (cxf-xjc-utils) branch dependabot/maven/org.apache.maven.plugins-maven-dependency-plugin-3.11.0 deleted (was 7a5da94) github-bot
• (cxf-xjc-utils) branch main updated: Bump org.apache.maven.plugins:maven-dependency-plugin (#336) reta
• (cxf-xjc-utils) branch dependabot/maven/org.apache.maven.plugins-maven-surefire-plugin-3.5.6 deleted (was 39b6e1e) github-bot
• (cxf-xjc-utils) branch main updated: Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.5 to 3.5.6 (#337) reta
• (cxf-xjc-utils) branch dependabot/github_actions/github/codeql-action-4.36.0 deleted (was 74be3d5) github-bot
• (cxf-xjc-utils) branch main updated: Bump github/codeql-action from 4.35.5 to 4.36.0 (#338) reta
• (cxf-xjc-utils) branch dependabot/github_actions/github/codeql-action-4.36.0 created (now 74be3d5) github-bot
• (cxf-xjc-utils) branch dependabot/maven/org.apache.maven.plugins-maven-surefire-plugin-3.5.6 created (now 39b6e1e) github-bot
• (cxf-xjc-utils) branch dependabot/maven/org.apache.maven.plugins-maven-dependency-plugin-3.11.0 created (now 7a5da94) github-bot
• (cxf-xjc-utils) branch dependabot/maven/org.apache.maven.plugins-maven-surefire-report-plugin-3.5.6 created (now 6732b8d) github-bot
• (cxf) branch more.schema.factory updated (40f61b47bee -> 0ff9c353a25) reta
• (cxf) branch more.schema.factory updated (2701e4664c4 -> 40f61b47bee) reta
• (cxf) branch more.schema.factory updated (fc0f5fc7444 -> 2701e4664c4) reta
• (cxf) branch more.schema.factory updated (9e09d7ccede -> fc0f5fc7444) reta
• (cxf) branch more.schema.factory updated (4dc8e02df1a -> 9e09d7ccede) reta
• (cxf) branch more.schema.factory updated (37a44296f99 -> 4dc8e02df1a) reta
• (cxf) branch more.schema.factory updated (9e09d7ccede -> 37a44296f99) reta
• (cxf) branch more.schema.factory created (now 9e09d7ccede) reta
  • (cxf) 01/01: More SchemaFactory hardenings reta
• (cxf-build-utils) branch main updated: Bump org.apache.maven.plugins:maven-dependency-plugin (#229) reta
• (cxf-build-utils) branch dependabot/maven/org.apache.maven.plugins-maven-dependency-plugin-3.11.0 deleted (was 8307367) github-bot
• (cxf-build-utils) branch dependabot/maven/org.apache.maven.plugins-maven-dependency-plugin-3.11.0 created (now 8307367) github-bot
• (cxf) branch 4.1.x-fixes updated: [CXF-9218]Respect configured ProxySelector instead of hard-wiring system proxy properties (#3154) ffang
• (cxf) branch main updated: [CXF-9218]Respect configured ProxySelector instead of hard-wiring system proxy properties (#3154) ffang
• (cxf) branch 4.1.x-fixes updated: [CXF-9129]Chunked attachment streaming not working when using ws-security (#3153) ffang
• (cxf) branch main updated: [CXF-9129]Chunked attachment streaming not working when using ws-security (#3153) ffang
• (cxf) branch dependabot/maven/org.ow2.asm-asm-9.10.1 deleted (was 9d6e7e5f570) github-bot
• (cxf) branch main updated: Bump org.ow2.asm:asm from 9.10 to 9.10.1 (#3156) reta
• (cxf) branch dependabot/maven/cxf.hibernate.em.version-7.3.6.Final deleted (was 47adb1e15af) github-bot
• (cxf) branch main updated: Bump cxf.hibernate.em.version from 7.3.5.Final to 7.3.6.Final (#3155) reta
• (cxf) branch dependabot/maven/cxf.hibernate.em.version-7.3.6.Final created (now 47adb1e15af) github-bot
• (cxf) branch dependabot/maven/org.ow2.asm-asm-9.10.1 created (now 9d6e7e5f570) github-bot
• (cxf) branch 4.1.x-fixes updated: Apply the JSON depth limit to writes as well (#3152) coheigea
• (cxf) branch coheigea/json-write-depth deleted (was 9c8f30e5dc8) coheigea
• (cxf) branch main updated: Apply the JSON depth limit to writes as well (#3152) coheigea
• (cxf) branch main updated: [CXF-8966] : fix validation of nil int in xsd (#3151) reta
• (cxf) branch coheigea/json-write-depth updated (73df38f2db9 -> 9c8f30e5dc8) coheigea
• (cxf) branch coheigea/json-write-depth created (now 73df38f2db9) coheigea
  • (cxf) 01/01: Apply the JSON depth limit to writes as well coheigea
• (cxf) branch 4.1.x-fixes updated: Add a depth limit for JSON parsing mirroring what Jettison does (#3149) coheigea
• (cxf) branch main updated: Add a depth limit for JSON parsing mirroring what Jettison does (#3149) coheigea
• (cxf) branch coheigea/json-depth-limit deleted (was be2fd1f03b7) coheigea
• (cxf) branch 4.1.x-fixes updated: More JNDI validation (#3150) coheigea
• (cxf) branch coheigea/jms deleted (was cd53611ce0a) coheigea
• (cxf) branch main updated: More JNDI validation (#3150) coheigea
• (cxf) branch coheigea/json-depth-limit updated (410c0c93a05 -> be2fd1f03b7) coheigea
• (cxf) branch main updated: UriInfoImpl import proper StringUtils (#3148) reta
• (cxf) branch dependabot/maven/cxf.tika.version-3.3.1 deleted (was e741cfe84eb) github-bot
• (cxf) branch main updated: Bump cxf.tika.version from 3.3.0 to 3.3.1 (#3146) reta
• (cxf) branch coheigea/json-depth-limit updated (19b9a6c86e4 -> 410c0c93a05) coheigea
• (cxf) branch coheigea/json-depth-limit created (now 19b9a6c86e4) coheigea
  • (cxf) 01/01: Add a depth limit for JSON parsing mirroring what Jettison does coheigea
• (cxf) branch main updated: Escape JSON control characters (#3145) coheigea
• (cxf) branch 4.1.x-fixes updated: Escape JSON control characters (#3145) coheigea
• (cxf) branch coheigea/json-special-chars deleted (was 43b49e8baa1) coheigea
• (cxf) branch dependabot/maven/org.atmosphere-atmosphere-runtime-4.0.46 deleted (was 398d0dbc635) github-bot
• (cxf) branch dependabot/maven/org.atmosphere-atmosphere-runtime-4.0.47 created (now 67dd10a8017) github-bot
• (cxf) branch dependabot/maven/cxf.tika.version-3.3.1 created (now e741cfe84eb) github-bot
• (cxf-build-utils) branch dependabot/maven/org.apache.maven.plugins-maven-site-plugin-3.22.0 deleted (was 7f44d64) github-bot
• (cxf-build-utils) branch dependabot/github_actions/github/codeql-action-4.35.5 deleted (was 373237f) github-bot
• (cxf-build-utils) branch main updated: Bump org.apache.maven.plugins:maven-site-plugin from 3.21.0 to 3.22.0 (#227) reta
• (cxf-build-utils) branch main updated: Bump github/codeql-action from 4.35.4 to 4.35.5 (#228) reta
• (cxf-xjc-utils) branch dependabot/maven/org.apache.maven.plugins-maven-site-plugin-3.22.0 deleted (was 5cf6824) github-bot
• (cxf-xjc-utils) branch main updated: Bump org.apache.maven.plugins:maven-site-plugin from 3.21.0 to 3.22.0 (#333) reta
• (cxf) branch dependabot/maven/org.apache.maven.plugins-maven-site-plugin-3.22.0 deleted (was f45ab4961bb) github-bot
• (cxf) branch main updated: Bump org.apache.maven.plugins:maven-site-plugin from 3.21.0 to 3.22.0 (#3144) reta
• (cxf) branch coheigea/json-special-chars created (now 43b49e8baa1) coheigea
  • (cxf) 01/01: Escape JSON control characters coheigea
• (cxf) branch dependabot/maven/org.apache.maven.plugins-maven-site-plugin-3.22.0 created (now f45ab4961bb) github-bot
• (cxf) branch coheigea/json-unicode deleted (was c36fabd84d7) coheigea
• (cxf) branch 4.1.x-fixes updated: Support unicode characters in the json parser (#3142) coheigea
• (cxf) branch main updated: Support unicode characters in the json parser (#3142) coheigea
• (cxf-xjc-utils) branch dependabot/maven/org.apache.maven.plugins-maven-site-plugin-3.22.0 created (now 5cf6824) github-bot
• (cxf-build-utils) branch dependabot/github_actions/github/codeql-action-4.35.5 created (now 373237f) github-bot
• (cxf-build-utils) branch dependabot/maven/org.apache.maven.plugins-maven-site-plugin-3.22.0 created (now 7f44d64) github-bot
• (cxf-fediz) branch dependabot/github_actions/github/codeql-action-4.35.5 created (now ad97579b) github-bot
• (cxf) branch coheigea/json-unicode created (now c36fabd84d7) coheigea
  • (cxf) 01/01: Support unicode characters in the json parser coheigea
• (cxf) branch 4.1.x-fixes updated: Improve JSON key parsing (#3141) coheigea
• (cxf) branch coheigea/json-key deleted (was c95f0e77507) coheigea
• (cxf) branch main updated: Improve JSON key parsing (#3141) coheigea
• (cxf) branch coheigea/json-key created (now c95f0e77507) coheigea
  • (cxf) 01/01: Improve JSON key parsing coheigea
• (cxf) branch 4.1.x-fixes updated: Fix bug in JSON parsing relating to escaped backslashes (#3140) coheigea
• (cxf) branch coheigea/json-count-backslashes deleted (was e5b44f3e640) coheigea
• (cxf) branch main updated: Fix bug in JSON parsing relating to escaped backslashes (#3140) coheigea
• (cxf) branch dependabot/github_actions/github/codeql-action-4.35.5 deleted (was 3dd854468a9) github-bot
• (cxf) branch main updated: Bump github/codeql-action from 4.35.4 to 4.35.5 (#3139) reta
• (cxf) branch coheigea/json-count-backslashes created (now e5b44f3e640) coheigea
  • (cxf) 01/01: Fix bug in JSON parsing relating to escaped backslashes coheigea
• (cxf) branch coheigea/json-nan deleted (was cdeb11db97b) coheigea
• (cxf) branch 4.1.x-fixes updated: Handle NaN or infinite times in JSON/JWT (#3137) coheigea
• (cxf) branch main updated: Handle NaN or infinite times in JSON/JWT (#3137) coheigea
• (cxf) branch dependabot/github_actions/github/codeql-action-4.35.5 created (now 3dd854468a9) github-bot
• (cxf-xjc-utils) branch dependabot/github_actions/github/codeql-action-4.35.5 deleted (was 2bba2ac) github-bot
• (cxf-xjc-utils) branch main updated: Bump github/codeql-action from 4.35.4 to 4.35.5 (#332) reta
• (cxf-xjc-utils) branch dependabot/github_actions/github/codeql-action-4.35.5 created (now 2bba2ac) github-bot
• (cxf) branch main updated: Update Woodstox to 7.2.0 (#3138) reta
• (cxf) branch coheigea/json-nan updated (d4ee0a41964 -> cdeb11db97b) coheigea
• (cxf) branch main updated: Update JUnit Jupiter to 6.1.0 reta
• (cxf) branch 4.1.x-fixes updated: Removing control characters from OAuth2 realm and logs (#3136) coheigea
• (cxf) branch coheigea/json-nan created (now d4ee0a41964) coheigea
  • (cxf) 01/01: Handle NaN or infinite times in JSON/JWT coheigea
• (cxf) branch coheigea/control-characters deleted (was dcfeeeb3542) coheigea
• (cxf) branch main updated: Removing control characters from OAuth2 realm and logs (#3136) coheigea
• (cxf) branch coheigea/control-characters updated (2f79f968493 -> dcfeeeb3542) coheigea
• (cxf) branch dependabot/maven/cxf.hibernate.em.version-7.3.5.Final deleted (was 8d0cdee7fee) github-bot
• (cxf) branch main updated: Bump cxf.hibernate.em.version from 7.3.4.Final to 7.3.5.Final (#3135) reta
• svn commit: r1093054 - in websites/production/cxf/content: . cache security-advisories.data buildbot
• (cxf) branch coheigea/control-characters created (now 2f79f968493) coheigea
  • (cxf) 01/01: Removing control characters from OAuth2 realm and logs coheigea
• svn commit: r84680 - in release/cxf: 3.6.10 3.6.3 3.6.4 3.6.5 3.6.6 3.6.7 3.6.8 3.6.9 4.1.0 4.1.1 4.1.2 4.1.3 4.1.4 4.1.5 4.2.0 coheigea
• svn commit: r84679 - in release/cxf: 3.5.10 3.5.11 3.5.8 3.5.9 4.0.10 4.0.11 4.0.4 4.0.5 4.0.6 4.0.7 4.0.8 4.0.9 coheigea
• (cxf) branch 4.1.x-fixes updated: Synchronize access token refresh when refresh tokens aren't recycled (#3133) coheigea
• (cxf) branch coheigea/oauth2-refresh-tokens deleted (was c068d8d098d) coheigea
• (cxf) branch main updated: Synchronize access token refresh when refresh tokens aren't recycled (#3133) coheigea
• (cxf) branch coheigea/tls-v1 deleted (was 07feaba4cde) coheigea
• (cxf) branch main updated: Remove TLS v1 + 1.1 from the default protocol list (#3134) coheigea
• (cxf) branch 4.1.x-fixes updated (89c2372e6e1 -> 69a574e1aec) reta
  • (cxf) 01/10: Bump cxf.slf4j.version from 2.0.17 to 2.0.18 (#3117) reta
  • (cxf) 03/10: Bump jaxen:jaxen from 2.0.1 to 2.0.2 (#3120) reta
  • (cxf) 09/10: Recording .gitmergeinfo Changes reta
  • (cxf) 04/10: Bump cxf.hazelcast.version from 5.6.0 to 5.7.0 (#3116) reta
  • (cxf) 02/10: Bump github/codeql-action from 4.35.3 to 4.35.4 (#3118) reta
  • (cxf) 10/10: Update Netty to 4.1.134.Final reta
  • (cxf) 05/10: Bump cxf.maven.core.version from 3.9.15 to 3.9.16 (#3122) reta
  • (cxf) 07/10: Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.2 to 3.6.3 (#3129) reta
  • (cxf) 08/10: Bump jaxen:jaxen from 2.0.2 to 2.0.3 (#3130) reta
  • (cxf) 06/10: Bump cxf.activemq.artemis.version from 2.53.0 to 2.54.0 (#3125) reta
• (cxf) branch coheigea/tls-v1 created (now 07feaba4cde) coheigea
  • (cxf) 01/01: Remove TLS v1 + 1.1 from the default protocol list coheigea
• (cxf) branch 4.1.x-fixes updated (d38e4565bb8 -> 89c2372e6e1) coheigea
  • (cxf) 02/03: Recording .gitmergeinfo Changes coheigea
  • (cxf) 03/03: Changing last commit to preserve old code verifier on 4.1 coheigea
  • (cxf) 01/03: CXF-9216 - Switch default OAuth2 code verifier to Digest (#3132) coheigea
• (cxf) branch coheigea/oauth2-refresh-tokens created (now c068d8d098d) coheigea
• svn commit: r1093043 - in websites/production/cxf/content: . cache docs buildbot
• (cxf) branch coheigea/oauth2-verifiers deleted (was 38f6142431a) coheigea
• (cxf) branch main updated: CXF-9216 - Switch default OAuth2 code verifier to Digest (#3132) coheigea
• (cxf) branch coheigea/oauth2-verifiers updated (d362892db87 -> 38f6142431a) coheigea
• (cxf) branch dependabot/maven/jaxen-jaxen-2.0.3 deleted (was e0cc20793c7) github-bot
• (cxf) branch dependabot/maven/org.apache.maven.plugins-maven-enforcer-plugin-3.6.3 deleted (was ee893c19159) github-bot
• (cxf) branch main updated: Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.2 to 3.6.3 (#3129) reta
• (cxf) branch main updated: Bump jaxen:jaxen from 2.0.2 to 2.0.3 (#3130) reta
• (cxf) branch coheigea/oauth2-verifiers created (now d362892db87) coheigea
  • (cxf) 02/02: CXF-9216 - Switch default OAuth2 code verifier to Digest coheigea
  • (cxf) 01/02: Consolidating test code in PublicClientTest coheigea
• (cxf) branch 4.1.x-fixes updated: Marking OAuthServiceExceptionMapper as deprecated for removal coheigea
• (cxf) branch coheigea/remove-OAuthServiceExceptionMapper deleted (was 7d2aa31c8e2) coheigea
• (cxf) branch main updated: Removing OAuthServiceExceptionMapper which isn't used anywhere (#3128) coheigea
• (cxf) branch coheigea/oauth2-client-ip deleted (was 5a09e1814ee) coheigea
• (cxf) branch 4.1.x-fixes updated (57a1782d80e -> 1e5c5695675) coheigea
  • (cxf) 02/02: Recording .gitmergeinfo Changes coheigea
  • (cxf) 01/02: Fix the OAuth2 client ip address check and add a test (#3127) coheigea
• (cxf) branch main updated: Fix the OAuth2 client ip address check and add a test (#3127) coheigea
• (cxf) branch coheigea/remove-OAuthServiceExceptionMapper updated (e90f2a1dcda -> 7d2aa31c8e2) coheigea
• (cxf) branch dependabot/maven/org.atmosphere-atmosphere-runtime-4.0.45 deleted (was 26477f1de99) github-bot
• (cxf) branch dependabot/maven/org.atmosphere-atmosphere-runtime-4.0.46 created (now 398d0dbc635) github-bot
• (cxf) branch dependabot/maven/jaxen-jaxen-2.0.3 created (now e0cc20793c7) github-bot
• (cxf) branch dependabot/maven/org.apache.maven.plugins-maven-enforcer-plugin-3.6.3 created (now ee893c19159) github-bot
• (cxf) branch main updated (d6bce8e256a -> 68aa7c40fbb) reta
  • (cxf) 02/04: Update Undertow to 2.4.1.Final reta
  • (cxf) 03/04: Update Arquillian to 1.10.2.Final reta
  • (cxf) 01/04: Update Netty to 4.2.14.Final reta
  • (cxf) 04/04: Update Glassfish to 8.0.2 reta
• (cxf-xjc-utils) branch dependabot/maven/org.apache.maven.plugins-maven-enforcer-plugin-3.6.3 deleted (was 78cc4d1) github-bot
• (cxf-xjc-utils) branch main updated: Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.2 to 3.6.3 (#331) reta
• (cxf-xjc-utils) branch dependabot/maven/org.apache.maven.plugins-maven-enforcer-plugin-3.6.3 created (now 78cc4d1) github-bot
• (cxf) branch coheigea/remove-OAuthServiceExceptionMapper created (now e90f2a1dcda) coheigea
  • (cxf) 01/01: Removing OAuthServiceExceptionMapper which isn't used anywhere coheigea

• Earlier messages
• Later messages