[PR] Bump org.apache.maven.plugins:maven-jar-plugin from 3.3.0 to 3.4.1 [cxf-fediz]

2024-04-22 Thread via GitHub


dependabot[bot] opened a new pull request, #271:
URL: https://github.com/apache/cxf-fediz/pull/271

   Bumps 
[org.apache.maven.plugins:maven-jar-plugin](https://github.com/apache/maven-jar-plugin)
 from 3.3.0 to 3.4.1.
   
   Release notes
   Sourced from https://github.com/apache/maven-jar-plugin/releases";>org.apache.maven.plugins:maven-jar-plugin's
 releases.
   
   3.4.1
   
   🐛 Bug Fixes
   
   https://issues.apache.org/jira/browse/MJAR-307";>[MJAR-307] 
- Wrong version of commons-io cause a ClassNotFound 
o.a.commons.io.file.attribute.FileTimes (https://redirect.github.com/apache/maven-jar-plugin/pull/83";>#83) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   https://issues.apache.org/jira/browse/MJAR-308";>[MJAR-308] 
- Bump org.apache.maven.plugins:maven-plugins from 41 to 42 (https://redirect.github.com/apache/maven-jar-plugin/pull/85";>#85) https://github.com/dependabot";>@​dependabot
   
   3.4.0
   
   🚀 New features and improvements
   
   https://issues.apache.org/jira/browse/MJAR-296";>[MJAR-296] 
- Allow including files excluded by default. (https://redirect.github.com/apache/maven-jar-plugin/pull/67";>#67) https://github.com/redzi";>@​redzi
   https://issues.apache.org/jira/browse/MJAR-302";>[MJAR-302] 
- Require Maven 3.6.3 (https://redirect.github.com/apache/maven-jar-plugin/pull/77";>#77) https://github.com/slawekjaranowski";>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MJAR-292";>[MJAR-292] 
- Detect MRJAR and add Multi-Release manifest entry (https://redirect.github.com/apache/maven-jar-plugin/pull/57";>#57) https://github.com/jorsol";>@​jorsol
   
   🐛 Bug Fixes
   
   https://issues.apache.org/jira/browse/MJAR-62";>[MJAR-62] - 
Set Build-Jdk according to used toolchain (https://redirect.github.com/apache/maven-jar-plugin/pull/73";>#73) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   https://issues.apache.org/jira/browse/MJAR-306";>[MJAR-306] 
- Use properties for plugins versions in LifecycleMapping (https://redirect.github.com/apache/maven-jar-plugin/pull/82";>#82) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Bump org.junit:junit-bom from 5.10.1 to 5.10.2 (https://redirect.github.com/apache/maven-jar-plugin/pull/74";>#74) https://github.com/dependabot";>@​dependabot
   https://issues.apache.org/jira/browse/MJAR-298";>[MJAR-298] 
- Update Maven-Archiver to 3.6.2 (https://redirect.github.com/apache/maven-jar-plugin/pull/78";>#78) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Bump apache/maven-gh-actions-shared from 2 to 4 (https://redirect.github.com/apache/maven-jar-plugin/pull/72";>#72) https://github.com/dependabot";>@​dependabot
   Bump commons-io:commons-io from 2.14.0 to 2.15.1 (https://redirect.github.com/apache/maven-jar-plugin/pull/68";>#68) https://github.com/dependabot";>@​dependabot
   https://issues.apache.org/jira/browse/MJAR-297";>[MJAR-297] 
- Update Parent to 40 (https://redirect.github.com/apache/maven-jar-plugin/pull/64";>#64) https://github.com/jorsol";>@​jorsol
   https://issues.apache.org/jira/browse/MJAR-298";>[MJAR-298] 
- Update Maven-Archiver to 3.6.1 (https://redirect.github.com/apache/maven-jar-plugin/pull/65";>#65) https://github.com/jorsol";>@​jorsol
   https://issues.apache.org/jira/browse/MJAR-293";>[MJAR-293] 
- Update Parent to 39 (https://redirect.github.com/apache/maven-jar-plugin/pull/59";>#59) https://github.com/jorsol";>@​jorsol
   
   👻 Maintenance
   
   https://issues.apache.org/jira/browse/MJAR-304";>[MJAR-304] 
- Refresh download page (https://redirect.github.com/apache/maven-jar-plugin/pull/80";>#80) https://github.com/slawekjaranowski";>@​slawekjaranowski
   https://issues.apache.org/jira/browse/MJAR-303";>[MJAR-303] 
- Cleanup declared dependencies (https://redirect.github.com/apache/maven-jar-plugin/pull/79";>#79) https://github.com/slawekjaranowski";>@​slawekjaranowski
   Remove dependency on plexus (https://redirect.github.com/apache/maven-jar-plugin/pull/63";>#63) https://github.com/elharo";>@​elharo
   
   
   
   
   Commits
   
   https://github.com/apache/maven-jar-plugin/commit/8b29adc0e420b1da1495791c9d5bb9399590cc51";>8b29adc
 [maven-release-plugin] prepare release maven-jar-plugin-3.4.1
   https://github.com/apache/maven-jar-plugin/commit/325b2990308f08d4a2b3010cafe8bb55304ef53c";>325b299
 [MJAR-308] Bump org.apache.maven.plugins:maven-plugins from 41 to 42 (https://redirect.github.com/apache/maven-jar-plugin/issues/85";>#85)
   https://github.com/apache/maven-jar-plugin/commit/52111cc9250fc5876f4a6570a48bc679d099d8e2";>52111cc
 [MJAR-307] Wrong version of commons-io cause a ClassNotFound 
o.a.commons.io.f...
   https://github.com/apache/maven-jar-plugin/commit/902d4c55a19f301c31a4e187fbd798d4f847cb19";>902d4c5
 [maven-release-plugin] prepare for next development iteration
   https://github.com/apache/maven-jar-plugin/commit/992f44a2ef710326a6b98e18d4e40f724bea5f90";>992f44a
 [maven-release-pl

Re: [PR] Bump org.apache.maven.plugins:maven-jar-plugin from 3.3.0 to 3.4.0 [cxf-fediz]

2024-04-22 Thread via GitHub


dependabot[bot] commented on PR #270:
URL: https://github.com/apache/cxf-fediz/pull/270#issuecomment-2069235944

   Superseded by #271.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] Bump org.apache.maven.plugins:maven-jar-plugin from 3.3.0 to 3.4.0 [cxf-fediz]

2024-04-22 Thread via GitHub


dependabot[bot] closed pull request #270: Bump 
org.apache.maven.plugins:maven-jar-plugin from 3.3.0 to 3.4.0
URL: https://github.com/apache/cxf-fediz/pull/270


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] Bump actions/upload-artifact from 4.3.1 to 4.3.2 [cxf-fediz]

2024-04-22 Thread via GitHub


dependabot[bot] opened a new pull request, #272:
URL: https://github.com/apache/cxf-fediz/pull/272

   Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) 
from 4.3.1 to 4.3.2.
   
   Release notes
   Sourced from https://github.com/actions/upload-artifact/releases";>actions/upload-artifact's
 releases.
   
   v4.3.2
   What's Changed
   
   Update release-new-action-version.yml by https://github.com/konradpabjan";>@​konradpabjan in https://redirect.github.com/actions/upload-artifact/pull/516";>actions/upload-artifact#516
   Minor fix to the migration readme by https://github.com/andrewakim";>@​andrewakim in https://redirect.github.com/actions/upload-artifact/pull/523";>actions/upload-artifact#523
   Update readme with v3/v2/v1 deprecation notice by https://github.com/robherley";>@​robherley in https://redirect.github.com/actions/upload-artifact/pull/561";>actions/upload-artifact#561
   updating @actions/artifact dependency to v2.1.5 and 
@actions/core to v1.0.1 by https://github.com/eggyhead";>@​eggyhead in https://redirect.github.com/actions/upload-artifact/pull/562";>actions/upload-artifact#562
   
   New Contributors
   
   https://github.com/andrewakim";>@​andrewakim 
made their first contribution in https://redirect.github.com/actions/upload-artifact/pull/523";>actions/upload-artifact#523
   
   Full Changelog: https://github.com/actions/upload-artifact/compare/v4.3.1...v4.3.2";>https://github.com/actions/upload-artifact/compare/v4.3.1...v4.3.2
   
   
   
   Commits
   
   https://github.com/actions/upload-artifact/commit/1746f4ab65b179e0ea60a494b83293b640dd5bba";>1746f4a
 Revert "updating to release 4.3.2"
   https://github.com/actions/upload-artifact/commit/31685d04a0d6557fe2be4174c3ea69ee4cbfa6bb";>31685d0
 updating to release 4.3.2
   https://github.com/actions/upload-artifact/commit/18bf333cd2249fbbbdb605fd9d9ed57efd7adf34";>18bf333
 Merge pull request https://redirect.github.com/actions/upload-artifact/issues/562";>#562 
from actions/eggyhead/update-artifact-v215
   https://github.com/actions/upload-artifact/commit/dac413befa086181ab17cf3db942667aede55e0d";>dac413b
 update package lock version
   https://github.com/actions/upload-artifact/commit/bb3b4a3cdbef901e2e185ca492d513e798fd1b9f";>bb3b4a3
 updating package version
   https://github.com/actions/upload-artifact/commit/3e3da837d2a1e030e44fe2bb5c4b9f63c25f33e3";>3e3da83
 updating artifact and core dependencies
   https://github.com/actions/upload-artifact/commit/e35774f165aac0e3b0c8273137b1845a2ac8c5f1";>e35774f
 Merge pull request https://redirect.github.com/actions/upload-artifact/issues/561";>#561 
from actions/robherley/deprecation-notice
   https://github.com/actions/upload-artifact/commit/e63ea677fb182f6827027a7b74f61debfca990ab";>e63ea67
 Update readme with v3/v2/v1 deprecation notice
   https://github.com/actions/upload-artifact/commit/ef09cdac3e2d3e60d8ccadda691f4f1cec5035cb";>ef09cda
 Merge pull request https://redirect.github.com/actions/upload-artifact/issues/523";>#523 
from andrewakim/andrewakim/migration-readme-fix
   https://github.com/actions/upload-artifact/commit/00e36f94d817ea235422592a23d468b262071bf4";>00e36f9
 Minor fix to the migration readme
   Additional commits viewable in https://github.com/actions/upload-artifact/compare/5d5d22a31266ced268874388b861e4b58bb5c2f3...1746f4ab65b179e0ea60a494b83293b640dd5bba";>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/upload-artifact&package-manager=github_actions&previous-version=4.3.1&new-version=4.3.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot show  ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unl

[PR] Bump actions/checkout from 4.1.2 to 4.1.3 [cxf-fediz]

2024-04-22 Thread via GitHub


dependabot[bot] opened a new pull request, #273:
URL: https://github.com/apache/cxf-fediz/pull/273

   Bumps [actions/checkout](https://github.com/actions/checkout) from 4.1.2 to 
4.1.3.
   
   Release notes
   Sourced from https://github.com/actions/checkout/releases";>actions/checkout's 
releases.
   
   v4.1.3
   What's Changed
   
   Update actions/checkout version in 
update-main-version.yml by https://github.com/jww3";>@​jww3 in https://redirect.github.com/actions/checkout/pull/1650";>actions/checkout#1650
   Check git version before attempting to disable 
sparse-checkout by https://github.com/jww3";>@​jww3 in https://redirect.github.com/actions/checkout/pull/1656";>actions/checkout#1656
   Add SSH user parameter by https://github.com/cory-miller";>@​cory-miller in https://redirect.github.com/actions/checkout/pull/1685";>actions/checkout#1685
   
   Full Changelog: https://github.com/actions/checkout/compare/v4.1.2...v4.1.3";>https://github.com/actions/checkout/compare/v4.1.2...v4.1.3
   
   
   
   Commits
   
   https://github.com/actions/checkout/commit/1d96c772d19495a3b5c517cd2bc0cb401ea0529f";>1d96c77
 Add SSH user parameter (https://redirect.github.com/actions/checkout/issues/1685";>#1685)
   https://github.com/actions/checkout/commit/cd7d8d697e10461458bc61a30d094dc601a8b017";>cd7d8d6
 Check git version before attempting to disable sparse-checkout 
(https://redirect.github.com/actions/checkout/issues/1656";>#1656)
   https://github.com/actions/checkout/commit/8410ad0602e1e429cee44a835ae9f77f654a6694";>8410ad0
 Update actions/checkout version in 
update-main-version.yml (https://redirect.github.com/actions/checkout/issues/1650";>#1650)
   See full diff in https://github.com/actions/checkout/compare/9bb56186c3b09b4f86b1c65136769dd318469633...1d96c772d19495a3b5c517cd2bc0cb401ea0529f";>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/checkout&package-manager=github_actions&previous-version=4.1.2&new-version=4.1.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot show  ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] Exception for getUserPrincipal() in AbstractHTTPDestination is slurped since CXF 4.1.x [cxf]

2024-04-22 Thread via GitHub


ffang commented on code in PR #1822:
URL: https://github.com/apache/cxf/pull/1822#discussion_r1574802910


##
rt/transports/http/src/main/java/org/apache/cxf/transport/http/AbstractHTTPDestination.java:
##
@@ -410,8 +410,12 @@ private boolean isWSAddressingReplyToSpecified(Exchange 
ex) {
 public Principal getUserPrincipal() {
 try {
 return req.getUserPrincipal();
-} catch (Exception ex) {
-return null;
+} catch (Exception e) {

Review Comment:
   Awesome! Thanks for the update @rzo1 !



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: Deprecate aegis databinding ?

2024-04-22 Thread Dennis Kieselhorst

Hi Jim,

good call out.


The first I can think of is aegis databinding. Is the aegis databinding
still used by CXF users ? Is it a good time to deprecate and remove in the
future release ?


I liked the databinding in the past but nowadays JAXB is the standard.

To get an indication who else might be still using it, I checked 
https://repository.apache.org/#central-stat for 
org.apache.cxf:cxf-rt-databinding-aegis: Last month 4.0.0 17944 
downloads (29% of total) and 3.3.10 8513 downloads (14%). For comparison 
cxf-rt-databinding-jaxb 3.5.5 79295 (9%) and 4.0.3 60053 (7%).


Best,

Dennis



Re: [PR] Exception for getUserPrincipal() in AbstractHTTPDestination is slurped since CXF 4.1.x [cxf]

2024-04-22 Thread via GitHub


rzo1 commented on code in PR #1822:
URL: https://github.com/apache/cxf/pull/1822#discussion_r1575258821


##
rt/transports/http/src/main/java/org/apache/cxf/transport/http/AbstractHTTPDestination.java:
##
@@ -410,8 +410,12 @@ private boolean isWSAddressingReplyToSpecified(Exchange 
ex) {
 public Principal getUserPrincipal() {
 try {
 return req.getUserPrincipal();
-} catch (Exception ex) {
-return null;
+} catch (Exception e) {

Review Comment:
   @ffang Did some more tests. 4.1.0-SNAPSHOT only produces 3 JAX-RS TCK 
Failures (3.1.5) - quite promising :)



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] Bump org.apache.maven.plugins:maven-jar-plugin from 3.4.0 to 3.4.1 [cxf-build-utils]

2024-04-22 Thread via GitHub


dependabot[bot] opened a new pull request, #78:
URL: https://github.com/apache/cxf-build-utils/pull/78

   Bumps 
[org.apache.maven.plugins:maven-jar-plugin](https://github.com/apache/maven-jar-plugin)
 from 3.4.0 to 3.4.1.
   
   Release notes
   Sourced from https://github.com/apache/maven-jar-plugin/releases";>org.apache.maven.plugins:maven-jar-plugin's
 releases.
   
   3.4.1
   
   🐛 Bug Fixes
   
   https://issues.apache.org/jira/browse/MJAR-307";>[MJAR-307] 
- Wrong version of commons-io cause a ClassNotFound 
o.a.commons.io.file.attribute.FileTimes (https://redirect.github.com/apache/maven-jar-plugin/pull/83";>#83) https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   📦 Dependency updates
   
   https://issues.apache.org/jira/browse/MJAR-308";>[MJAR-308] 
- Bump org.apache.maven.plugins:maven-plugins from 41 to 42 (https://redirect.github.com/apache/maven-jar-plugin/pull/85";>#85) https://github.com/dependabot";>@​dependabot
   
   
   
   
   Commits
   
   https://github.com/apache/maven-jar-plugin/commit/8b29adc0e420b1da1495791c9d5bb9399590cc51";>8b29adc
 [maven-release-plugin] prepare release maven-jar-plugin-3.4.1
   https://github.com/apache/maven-jar-plugin/commit/325b2990308f08d4a2b3010cafe8bb55304ef53c";>325b299
 [MJAR-308] Bump org.apache.maven.plugins:maven-plugins from 41 to 42 (https://redirect.github.com/apache/maven-jar-plugin/issues/85";>#85)
   https://github.com/apache/maven-jar-plugin/commit/52111cc9250fc5876f4a6570a48bc679d099d8e2";>52111cc
 [MJAR-307] Wrong version of commons-io cause a ClassNotFound 
o.a.commons.io.f...
   https://github.com/apache/maven-jar-plugin/commit/902d4c55a19f301c31a4e187fbd798d4f847cb19";>902d4c5
 [maven-release-plugin] prepare for next development iteration
   See full diff in https://github.com/apache/maven-jar-plugin/compare/maven-jar-plugin-3.4.0...maven-jar-plugin-3.4.1";>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.maven.plugins:maven-jar-plugin&package-manager=maven&previous-version=3.4.0&new-version=3.4.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot show  ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] Bump org.apache.maven.plugins:maven-jar-plugin from 3.4.0 to 3.4.1 [cxf-build-utils]

2024-04-22 Thread via GitHub


reta merged PR #78:
URL: https://github.com/apache/cxf-build-utils/pull/78


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] Bump ch.qos.logback:logback-classic from 1.5.5 to 1.5.6 [cxf]

2024-04-22 Thread via GitHub


dependabot[bot] opened a new pull request, #1829:
URL: https://github.com/apache/cxf/pull/1829

   Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) 
from 1.5.5 to 1.5.6.
   
   Commits
   
   https://github.com/qos-ch/logback/commit/7812a55f3280fbb74076b2512a06dd34230a83f1";>7812a55
 prepare release 1.5.6
   https://github.com/qos-ch/logback/commit/759fc25ee384354a9159e64aa1fb7269d770fce4";>759fc25
 fix issues/805 i.e. LOGBACK-1768, included file with inner conditional
   https://github.com/qos-ch/logback/commit/3d5563899f3f9a2524d37333017007a291e37e79";>3d55638
 start work on 1.5.6-SNAPSHOT
   https://github.com/qos-ch/logback/commit/a91d2b6a562ac67e6bc247c7c7d8ed48d8479867";>a91d2b6
 notes about javadocs
   See full diff in https://github.com/qos-ch/logback/compare/v_1.5.5...v_1.5.6";>compare 
view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ch.qos.logback:logback-classic&package-manager=maven&previous-version=1.5.5&new-version=1.5.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot show  ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] Bump org.eclipse.parsson:parsson from 1.1.5 to 1.1.6 [cxf]

2024-04-22 Thread via GitHub


dependabot[bot] opened a new pull request, #1830:
URL: https://github.com/apache/cxf/pull/1830

   Bumps [org.eclipse.parsson:parsson](https://github.com/eclipse-ee4j/parsson) 
from 1.1.5 to 1.1.6.
   
   Release notes
   Sourced from https://github.com/eclipse-ee4j/parsson/releases";>org.eclipse.parsson:parsson's
 releases.
   
   1.1.6
   What's Changed
   
   Load optional UTF-32 charsets lazily https://redirect.github.com/eclipse-ee4j/parsson/issues/121";>#121 by 
https://github.com/danielkec";>@​danielkec in https://redirect.github.com/eclipse-ee4j/parsson/pull/122";>eclipse-ee4j/parsson#122
   [#112]Corrected skip methods behavior of JsonParserImpl;  by https://github.com/api-from-the-ion";>@​api-from-the-ion 
in https://redirect.github.com/eclipse-ee4j/parsson/pull/113";>eclipse-ee4j/parsson#113
   JUnit5 by https://github.com/api-from-the-ion";>@​api-from-the-ion 
in https://redirect.github.com/eclipse-ee4j/parsson/pull/115";>eclipse-ee4j/parsson#115
   Fixes by https://github.com/lukasj";>@​lukasj 
in https://redirect.github.com/eclipse-ee4j/parsson/pull/124";>eclipse-ee4j/parsson#124
   update parent to 1.0.9, by https://github.com/lukasj";>@​lukasj in https://redirect.github.com/eclipse-ee4j/parsson/pull/125";>eclipse-ee4j/parsson#125
   
   New Contributors
   
   https://github.com/danielkec";>@​danielkec made 
their first contribution in https://redirect.github.com/eclipse-ee4j/parsson/pull/122";>eclipse-ee4j/parsson#122
   https://github.com/api-from-the-ion";>@​api-from-the-ion 
made their first contribution in https://redirect.github.com/eclipse-ee4j/parsson/pull/113";>eclipse-ee4j/parsson#113
   
   Full Changelog: https://github.com/eclipse-ee4j/parsson/compare/1.1.5...1.1.6";>https://github.com/eclipse-ee4j/parsson/compare/1.1.5...1.1.6
   
   
   
   Commits
   
   https://github.com/eclipse-ee4j/parsson/commit/1f6be61144a493ee91463e70d1012ac649e9140a";>1f6be61
 Prepare release org.eclipse.parsson:project:1.1.6
   https://github.com/eclipse-ee4j/parsson/commit/d72cd2c58172a7fba4a5d702b38ff11eadd67999";>d72cd2c
 Revert "Implement stream methods in JsonStructureParser; fulfill more of 
JSON...
   https://github.com/eclipse-ee4j/parsson/commit/30da884899e723f1aa51889719b2b97e4ebf8db4";>30da884
 update parent to 1.0.9,
   https://github.com/eclipse-ee4j/parsson/commit/c96ef80bb3366caf2abdeb925265afc8646cd19a";>c96ef80
 Update dependencies, build plugins
   https://github.com/eclipse-ee4j/parsson/commit/96d531156fe756fcf268092398054b9dc1e2c681";>96d5311
 fix cp rights, access of JsonParserImpl, static imports removal
   https://github.com/eclipse-ee4j/parsson/commit/ebf6534c2338330fa6b02b0f18e6a87c414d49d0";>ebf6534
 Small improvements in the tests
   https://github.com/eclipse-ee4j/parsson/commit/85cdc8486ec6bd37059a3f41c7c2a7b4d5e1b99a";>85cdc84
 Deduplicate some code in both parsers
   https://github.com/eclipse-ee4j/parsson/commit/146a2f7ae09c97ae8e385c674f89b0a6cd06992c";>146a2f7
 Implement stream methods in JsonStructureParser; fulfill more of JSONP 
Parser...
   https://github.com/eclipse-ee4j/parsson/commit/a38b7d11a2c95914b313e4ee61ff64893863fc48";>a38b7d1
 JUnit5 (https://redirect.github.com/eclipse-ee4j/parsson/issues/115";>#115)
   https://github.com/eclipse-ee4j/parsson/commit/dfbe33a5b29271b929a8c6ba495de680be2e69ff";>dfbe33a
 [#112]Corrected skip methods behavior of JsonParserImpl;  (https://redirect.github.com/eclipse-ee4j/parsson/issues/113";>#113)
   Additional commits viewable in https://github.com/eclipse-ee4j/parsson/compare/1.1.5...1.1.6";>compare 
view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.eclipse.parsson:parsson&package-manager=maven&previous-version=1.1.5&new-version=1.1.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot show  ignore conditions` will show all of 
the ignore conditions of the

Re: [PR] Exception for getUserPrincipal() in AbstractHTTPDestination is slurped since CXF 4.1.x [cxf]

2024-04-22 Thread via GitHub


rzo1 commented on code in PR #1822:
URL: https://github.com/apache/cxf/pull/1822#discussion_r1575690967


##
rt/transports/http/src/main/java/org/apache/cxf/transport/http/AbstractHTTPDestination.java:
##
@@ -410,8 +410,12 @@ private boolean isWSAddressingReplyToSpecified(Exchange 
ex) {
 public Principal getUserPrincipal() {
 try {
 return req.getUserPrincipal();
-} catch (Exception ex) {
-return null;
+} catch (Exception e) {

Review Comment:
   @ffang https://issues.apache.org/jira/browse/CXF-9005



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org