Re: [PR] Bump org.apache.camel.springboot:camel-spring-boot-dependencies from 4.5.0 to 4.6.0 [cxf]

2024-05-15 Thread via GitHub


reta merged PR #1873:
URL: https://github.com/apache/cxf/pull/1873


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



SpringWebUtils in CXF in TomEE

2024-05-15 Thread Jonathan Gallimore
Hi,

Firstly, thank you for all the amazing work you do in CXF. I participate in
the Apache TomEE project, which includes CXF to enable TomEE to provide
REST and SOAP based services.

We've had a slightly unusual problem crop up that specifically affects
applications that expose Jakarta REST endpoints (through the included CXF
in TomEE), and include the Spring Framework in the application's
WEB-INF/lib.

The exception we see is:

java.lang.NoClassDefFoundError:
org/springframework/web/filter/ServerHttpObservationFilter
at
org.apache.cxf.jaxrs.springmvc.SpringWebUtils.setHttpRequestURI(SpringWebUtils.java:51)
~[cxf-rt-frontend-jaxrs-4.0.4.jar:4.0.4]
at
org.apache.cxf.jaxrs.utils.HttpUtils.setHttpRequestURI(HttpUtils.java:380)
~[cxf-rt-frontend-jaxrs-4.0.4.jar:4.0.4]
at
org.apache.cxf.jaxrs.interceptor.JAXRSInInterceptor.setExchangeProperties(JAXRSInInterceptor.java:246)
~[cxf-rt-frontend-jaxrs-4.0.4.jar:4.0.4]
at
org.apache.cxf.jaxrs.interceptor.JAXRSInInterceptor.processRequest(JAXRSInInterceptor.java:183)
~[cxf-rt-frontend-jaxrs-4.0.4.jar:4.0.4]
at
org.apache.cxf.jaxrs.interceptor.JAXRSInInterceptor.handleMessage(JAXRSInInterceptor.java:78)
~[cxf-rt-frontend-jaxrs-4.0.4.jar:4.0.4]
at
org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:307)
~[cxf-core-4.0.4.jar:4.0.4]
at
org.apache.cxf.transport.ChainInitiationObserver.onMessage(ChainInitiationObserver.java:121)
~[cxf-core-4.0.4.jar:4.0.4]
at
org.apache.cxf.transport.http.AbstractHTTPDestination.invoke(AbstractHTTPDestination.java:265)
~[cxf-rt-transports-http-4.0.4.jar:4.0.4]
at
org.apache.openejb.server.cxf.rs.CxfRsHttpListener.doInvoke(CxfRsHttpListener.java:266)
~[openejb-cxf-rs-9.1.3.jar:9.1.3]
at
org.apache.tomee.webservices.CXFJAXRSFilter.doFilter(CXFJAXRSFilter.java:99)
~[tomee-jaxrs-9.1.3.jar:9.1.3]
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:185)
~[catalina.jar:10.0.27]
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:158)
~[catalina.jar:10.0.27]
at
org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:53)
~[tomcat-websocket.jar:10.0.27]
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:185)
~[catalina.jar:10.0.27]
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:158)
~[catalina.jar:10.0.27]
at org.apache.openejb.server.httpd.EEFilter.doFilter(EEFilter.java:67)
~[openejb-http-9.1.3.jar:9.1.3]
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:185)
~[catalina.jar:10.0.27]
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:158)
~[catalina.jar:10.0.27]
at
org.springframework.web.filter.RequestContextFilter.doFilterInternal(RequestContextFilter.java:100)
~[spring-web-6.0.19.jar:6.0.19]
at
org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:116)
~[spring-web-6.0.19.jar:6.0.19]
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:185)
~[catalina.jar:10.0.27]
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:158)
~[catalina.jar:10.0.27]
at
org.springframework.web.filter.FormContentFilter.doFilterInternal(FormContentFilter.java:93)
~[spring-web-6.0.19.jar:6.0.19]
at
org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:116)
~[spring-web-6.0.19.jar:6.0.19]
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:185)
~[catalina.jar:10.0.27]
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:158)
~[catalina.jar:10.0.27]
at
org.springframework.boot.web.servlet.support.ErrorPageFilter.doFilter(ErrorPageFilter.java:124)
~[spring-boot-3.1.11.jar:3.1.11]
at
org.springframework.boot.web.servlet.support.ErrorPageFilter$1.doFilterInternal(ErrorPageFilter.java:99)
~[spring-boot-3.1.11.jar:3.1.11]
at
org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:116)
~[spring-web-6.0.19.jar:6.0.19]
at
org.springframework.boot.web.servlet.support.ErrorPageFilter.doFilter(ErrorPageFilter.java:117)
~[spring-boot-3.1.11.jar:3.1.11]
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:185)
~[catalina.jar:10.0.27]
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:158)
~[catalina.jar:10.0.27]
at
org.springframework.web.filter.CharacterEncodingFilter.doFilterInternal(CharacterEncodingFilter.java:201)
~[spring-web-6.0.19.jar:6.0.19]
at
org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:116)
~[spring-web-6.0.19.jar:6.0.19]
at
org.apache.catalina.core.ApplicationFilterChain.internalDoF

[PR] [CXF-9014]1024-bit RSA key (weak) and isn't allowed in modern JDK ver… [cxf]

2024-05-15 Thread via GitHub


ffang opened a new pull request, #1875:
URL: https://github.com/apache/cxf/pull/1875

   …sions(SignatureWhitespaceTest failure)


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] Bump cxf.reactor.version from 3.6.5 to 3.6.6 [cxf]

2024-05-15 Thread via GitHub


reta merged PR #1874:
URL: https://github.com/apache/cxf/pull/1874


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] CXF-9013: Move performance benchmark to distribution samples folder [cxf]

2024-05-15 Thread via GitHub


reta commented on code in PR #1867:
URL: https://github.com/apache/cxf/pull/1867#discussion_r1601790214


##
benchmark/performance/basic_type/bin/run_client:
##


Review Comment:
   @jgoodyear we probably have to move `bin/*` as well - the project still have 
`build.xml`!



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] CXF-9013: Move performance benchmark to distribution samples folder [cxf]

2024-05-15 Thread via GitHub


jgoodyear commented on code in PR #1867:
URL: https://github.com/apache/cxf/pull/1867#discussion_r1601817191


##
benchmark/performance/basic_type/bin/run_client:
##


Review Comment:
   That's odd - i moved those files my side. Let me check on this.



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] CXF-9013: Move performance benchmark to distribution samples folder [cxf]

2024-05-15 Thread via GitHub


jgoodyear commented on code in PR #1867:
URL: https://github.com/apache/cxf/pull/1867#discussion_r1601829291


##
benchmark/performance/basic_type/bin/run_client:
##


Review Comment:
   Added them back in. Not sure why/how they did not get included.



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] CXF-9013: Move performance benchmark to distribution samples folder [cxf]

2024-05-15 Thread via GitHub


reta merged PR #1867:
URL: https://github.com/apache/cxf/pull/1867


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] Bump org.owasp:dependency-check-maven from 9.1.0 to 9.2.0 [cxf]

2024-05-15 Thread via GitHub


dependabot[bot] opened a new pull request, #1876:
URL: https://github.com/apache/cxf/pull/1876

   Bumps 
[org.owasp:dependency-check-maven](https://github.com/jeremylong/DependencyCheck)
 from 9.1.0 to 9.2.0.
   
   Release notes
   Sourced from https://github.com/jeremylong/DependencyCheck/releases";>org.owasp:dependency-check-maven's
 releases.
   
   Version 9.2.0
   Refer to the https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md#change-log";>CHANGELOG.md
 for information about improvements and upgrade notes.
   
   
   
   Changelog
   Sourced from https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md";>org.owasp:dependency-check-maven's
 changelog.
   
   https://github.com/jeremylong/DependencyCheck/releases/tag/v9.2.0";>Version
 9.2.0 (2024-05-15)
   
   docs: update logo per intellj (https://redirect.github.com/jeremylong/DependencyCheck/issues/6660";>#6660)
   feat: Carthage analyzer (https://redirect.github.com/jeremylong/DependencyCheck/issues/6614";>#6614)
   fix: Ensure valid JSON output for gitlab report (https://redirect.github.com/jeremylong/DependencyCheck/issues/6630";>#6630)
   feat: Support Package.swift version 3 Specification (https://redirect.github.com/jeremylong/DependencyCheck/issues/6578";>#6578)
   chore: Update the packaged suppressions to include new hosted 
suppressions (https://redirect.github.com/jeremylong/DependencyCheck/issues/6567";>#6567)
   
   See the full listing of https://github.com/jeremylong/DependencyCheck/milestone/82?closed=1";>changes.
   
   
   
   Commits
   
   https://github.com/jeremylong/DependencyCheck/commit/192b4cdb1e8245c1b202287eadd55d9241ea21d2";>192b4cd
 build: prepare release v9.2.0
   https://github.com/jeremylong/DependencyCheck/commit/e50e20de54b468b2c4e30e939092ecdd0b6d86a8";>e50e20d
 docs: update changelog
   https://github.com/jeremylong/DependencyCheck/commit/5ce66cf46ca5ff5bb0ceb2ea44bcd9255e7ea5a0";>5ce66cf
 build(deps): bump org.apache.maven.plugin-tools:maven-plugin-annotations 
from...
   https://github.com/jeremylong/DependencyCheck/commit/61edfd1e9a72b9f96c53cf084e5fcd1f16acc174";>61edfd1
 docs: update logo per intellj (https://redirect.github.com/jeremylong/DependencyCheck/issues/6660";>#6660)
   https://github.com/jeremylong/DependencyCheck/commit/8b1746eb4d141c919e05728519b7bc636d7cfea5";>8b1746e
 build(deps): bump com.github.spotbugs:spotbugs-annotations from 4.8.4 to 
4.8
   https://github.com/jeremylong/DependencyCheck/commit/754dec1cdc8457bcd8062e87b1021ae4e60ac543";>754dec1
 build(deps): bump maven-plugin-plugin (https://redirect.github.com/jeremylong/DependencyCheck/issues/6646";>#6646)
   https://github.com/jeremylong/DependencyCheck/commit/969bc2741d02803ddf6b4eeb98e55368beaceef8";>969bc27
 build(deps): bump org.apache.maven.plugins:maven-surefire-report-plugin from 
...
   https://github.com/jeremylong/DependencyCheck/commit/57b916a0494f656c27ab2abf38ba1bcae56e5df2";>57b916a
 build(deps): bump com.github.spotbugs:spotbugs-maven-plugin from 4.8.4.0 to 
4...
   https://github.com/jeremylong/DependencyCheck/commit/9c9c466ee3bab322e9c163409c275a6fce2ab1fb";>9c9c466
 build(deps): bump commons-codec:commons-codec from 1.16.1 to 1.17.0 (https://redirect.github.com/jeremylong/DependencyCheck/issues/6633";>#6633)
   https://github.com/jeremylong/DependencyCheck/commit/e26096dc15b3cc08a0e90be983c5087c554400ad";>e26096d
 build(deps): bump commons-cli:commons-cli from 1.6.0 to 1.7.0 (https://redirect.github.com/jeremylong/DependencyCheck/issues/6629";>#6629)
   Additional commits viewable in https://github.com/jeremylong/DependencyCheck/compare/v9.1.0...v9.2.0";>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.owasp:dependency-check-maven&package-manager=maven&previous-version=9.1.0&new-version=9.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by clo

[PR] Bump io.swagger.core.v3:swagger-jaxrs2-jakarta from 2.2.21 to 2.2.22 [cxf]

2024-05-15 Thread via GitHub


dependabot[bot] opened a new pull request, #1877:
URL: https://github.com/apache/cxf/pull/1877

   Bumps io.swagger.core.v3:swagger-jaxrs2-jakarta from 2.2.21 to 2.2.22.
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=io.swagger.core.v3:swagger-jaxrs2-jakarta&package-manager=maven&previous-version=2.2.21&new-version=2.2.22)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot show  ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org