Re: [PR] Bump actions/checkout from 4.1.2 to 4.1.5 [cxf-fediz]

2024-05-20 Thread via GitHub


dependabot[bot] closed pull request #276: Bump actions/checkout from 4.1.2 to 
4.1.5
URL: https://github.com/apache/cxf-fediz/pull/276


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] Bump github/codeql-action from 2.13.4 to 3.25.5 [cxf-fediz]

2024-05-20 Thread via GitHub


dependabot[bot] opened a new pull request, #278:
URL: https://github.com/apache/cxf-fediz/pull/278

   Bumps [github/codeql-action](https://github.com/github/codeql-action) from 
2.13.4 to 3.25.5.
   
   Release notes
   Sourced from https://github.com/github/codeql-action/releases";>github/codeql-action's 
releases.
   
   CodeQL Bundle v2.17.3
   Bundles CodeQL CLI v2.17.3
   
   (https://github.com/github/codeql-cli-binaries/blob/HEAD/CHANGELOG.md";>changelog,
 https://github.com/github/codeql-cli-binaries/releases/tag/v2.17.3";>release)
   
   Includes the following CodeQL language packs from https://github.com/github/codeql/tree/codeql-cli/v2.17.3";>github/codeql@codeql-cli/v2.17.3:
   
   codeql/cpp-queries (https://github.com/github/codeql/tree/codeql-cli/v2.17.3/cpp/ql/src/CHANGELOG.md";>changelog,
 https://github.com/github/codeql/tree/codeql-cli/v2.17.3/cpp/ql/src";>source)
   codeql/cpp-all (https://github.com/github/codeql/tree/codeql-cli/v2.17.3/cpp/ql/lib/CHANGELOG.md";>changelog,
 https://github.com/github/codeql/tree/codeql-cli/v2.17.3/cpp/ql/lib";>source)
   codeql/csharp-queries (https://github.com/github/codeql/tree/codeql-cli/v2.17.3/csharp/ql/src/CHANGELOG.md";>changelog,
 https://github.com/github/codeql/tree/codeql-cli/v2.17.3/csharp/ql/src";>source)
   codeql/csharp-all (https://github.com/github/codeql/tree/codeql-cli/v2.17.3/csharp/ql/lib/CHANGELOG.md";>changelog,
 https://github.com/github/codeql/tree/codeql-cli/v2.17.3/csharp/ql/lib";>source)
   codeql/go-queries (https://github.com/github/codeql/tree/codeql-cli/v2.17.3/go/ql/src/CHANGELOG.md";>changelog,
 https://github.com/github/codeql/tree/codeql-cli/v2.17.3/go/ql/src";>source)
   codeql/go-all (https://github.com/github/codeql/tree/codeql-cli/v2.17.3/go/ql/lib/CHANGELOG.md";>changelog,
 https://github.com/github/codeql/tree/codeql-cli/v2.17.3/go/ql/lib";>source)
   codeql/java-queries (https://github.com/github/codeql/tree/codeql-cli/v2.17.3/java/ql/src/CHANGELOG.md";>changelog,
 https://github.com/github/codeql/tree/codeql-cli/v2.17.3/java/ql/src";>source)
   codeql/java-all (https://github.com/github/codeql/tree/codeql-cli/v2.17.3/java/ql/lib/CHANGELOG.md";>changelog,
 https://github.com/github/codeql/tree/codeql-cli/v2.17.3/java/ql/lib";>source)
   codeql/javascript-queries (https://github.com/github/codeql/tree/codeql-cli/v2.17.3/javascript/ql/src/CHANGELOG.md";>changelog,
 https://github.com/github/codeql/tree/codeql-cli/v2.17.3/javascript/ql/src";>source)
   codeql/javascript-all (https://github.com/github/codeql/tree/codeql-cli/v2.17.3/javascript/ql/lib/CHANGELOG.md";>changelog,
 https://github.com/github/codeql/tree/codeql-cli/v2.17.3/javascript/ql/lib";>source)
   codeql/python-queries (https://github.com/github/codeql/tree/codeql-cli/v2.17.3/python/ql/src/CHANGELOG.md";>changelog,
 https://github.com/github/codeql/tree/codeql-cli/v2.17.3/python/ql/src";>source)
   codeql/python-all (https://github.com/github/codeql/tree/codeql-cli/v2.17.3/python/ql/lib/CHANGELOG.md";>changelog,
 https://github.com/github/codeql/tree/codeql-cli/v2.17.3/python/ql/lib";>source)
   codeql/ruby-queries (https://github.com/github/codeql/tree/codeql-cli/v2.17.3/ruby/ql/src/CHANGELOG.md";>changelog,
 https://github.com/github/codeql/tree/codeql-cli/v2.17.3/ruby/ql/src";>source)
   codeql/ruby-all (https://github.com/github/codeql/tree/codeql-cli/v2.17.3/ruby/ql/lib/CHANGELOG.md";>changelog,
 https://github.com/github/codeql/tree/codeql-cli/v2.17.3/ruby/ql/lib";>source)
   codeql/swift-queries (https://github.com/github/codeql/tree/codeql-cli/v2.17.3/swift/ql/src/CHANGELOG.md";>changelog,
 https://github.com/github/codeql/tree/codeql-cli/v2.17.3/swift/ql/src";>source)
   codeql/swift-all (https://github.com/github/codeql/tree/codeql-cli/v2.17.3/swift/ql/lib/CHANGELOG.md";>changelog,
 https://github.com/github/codeql/tree/codeql-cli/v2.17.3/swift/ql/lib";>source)
   
   CodeQL Bundle v2.17.2
   Bundles CodeQL CLI v2.17.2
   
   (https://github.com/github/codeql-cli-binaries/blob/HEAD/CHANGELOG.md";>changelog,
 https://github.com/github/codeql-cli-binaries/releases/tag/v2.17.2";>release)
   
   Includes the following CodeQL language packs from https://github.com/github/codeql/tree/codeql-cli/v2.17.2";>github/codeql@codeql-cli/v2.17.2:
   
   codeql/cpp-queries (https://github.com/github/codeql/tree/codeql-cli/v2.17.2/cpp/ql/src/CHANGELOG.md";>changelog,
 https://github.com/github/codeql/tree/codeql-cli/v2.17.2/cpp/ql/src";>source)
   codeql/cpp-all (https://github.com/github/codeql/tree/codeql-cli/v2.17.2/cpp/ql/lib/CHANGELOG.md";>changelog,
 https://github.com/github/codeql/tree/codeql-cli/v2.17.2/cpp/ql/lib";>source)
   codeql/csharp-queries (https://github.com/github/codeql/tree/codeql-cli/v2.17.2/csharp/ql/src/CHANGELOG.md";>changelog,
 https://github.com/github/codeql/tree/codeql-cli/v2.17.2/csharp/ql/src";>source)
   codeql/csharp-all (https://github.com/github/codeql/tree/codeql-cli/v2.17.2/csharp/ql/lib/CHANGELOG.md";>changelog,
 h

[PR] Bump actions/checkout from 4.1.2 to 4.1.6 [cxf-fediz]

2024-05-20 Thread via GitHub


dependabot[bot] opened a new pull request, #279:
URL: https://github.com/apache/cxf-fediz/pull/279

   Bumps [actions/checkout](https://github.com/actions/checkout) from 4.1.2 to 
4.1.6.
   
   Release notes
   Sourced from https://github.com/actions/checkout/releases";>actions/checkout's 
releases.
   
   v4.1.6
   What's Changed
   
   Check platform to set archive extension appropriately by https://github.com/cory-miller";>@​cory-miller in https://redirect.github.com/actions/checkout/pull/1732";>actions/checkout#1732
   Update for 4.1.6 release by https://github.com/cory-miller";>@​cory-miller in https://redirect.github.com/actions/checkout/pull/1733";>actions/checkout#1733
   
   Full Changelog: https://github.com/actions/checkout/compare/v4.1.5...v4.1.6";>https://github.com/actions/checkout/compare/v4.1.5...v4.1.6
   v4.1.5
   What's Changed
   
   Update NPM dependencies by https://github.com/cory-miller";>@​cory-miller in https://redirect.github.com/actions/checkout/pull/1703";>actions/checkout#1703
   Bump github/codeql-action from 2 to 3 by https://github.com/dependabot";>@​dependabot in https://redirect.github.com/actions/checkout/pull/1694";>actions/checkout#1694
   Bump actions/setup-node from 1 to 4 by https://github.com/dependabot";>@​dependabot in https://redirect.github.com/actions/checkout/pull/1696";>actions/checkout#1696
   Bump actions/upload-artifact from 2 to 4 by https://github.com/dependabot";>@​dependabot in https://redirect.github.com/actions/checkout/pull/1695";>actions/checkout#1695
   README: Suggest user.email to be 
41898282+github-actions[bot]@users.noreply.github.com by https://github.com/cory-miller";>@​cory-miller in https://redirect.github.com/actions/checkout/pull/1707";>actions/checkout#1707
   
   Full Changelog: https://github.com/actions/checkout/compare/v4.1.4...v4.1.5";>https://github.com/actions/checkout/compare/v4.1.4...v4.1.5
   v4.1.4
   What's Changed
   
   Disable extensions.worktreeConfig when disabling 
sparse-checkout by https://github.com/jww3";>@​jww3 in https://redirect.github.com/actions/checkout/pull/1692";>actions/checkout#1692
   Add dependabot config by https://github.com/cory-miller";>@​cory-miller in https://redirect.github.com/actions/checkout/pull/1688";>actions/checkout#1688
   Bump word-wrap from 1.2.3 to 1.2.5 by https://github.com/dependabot";>@​dependabot in https://redirect.github.com/actions/checkout/pull/1643";>actions/checkout#1643
   Bump the minor-actions-dependencies group with 2 updates by https://github.com/dependabot";>@​dependabot in https://redirect.github.com/actions/checkout/pull/1693";>actions/checkout#1693
   
   Full Changelog: https://github.com/actions/checkout/compare/v4.1.3...v4.1.4";>https://github.com/actions/checkout/compare/v4.1.3...v4.1.4
   v4.1.3
   What's Changed
   
   Update actions/checkout version in 
update-main-version.yml by https://github.com/jww3";>@​jww3 in https://redirect.github.com/actions/checkout/pull/1650";>actions/checkout#1650
   Check git version before attempting to disable 
sparse-checkout by https://github.com/jww3";>@​jww3 in https://redirect.github.com/actions/checkout/pull/1656";>actions/checkout#1656
   Add SSH user parameter by https://github.com/cory-miller";>@​cory-miller in https://redirect.github.com/actions/checkout/pull/1685";>actions/checkout#1685
   
   Full Changelog: https://github.com/actions/checkout/compare/v4.1.2...v4.1.3";>https://github.com/actions/checkout/compare/v4.1.2...v4.1.3
   
   
   
   Changelog
   Sourced from https://github.com/actions/checkout/blob/main/CHANGELOG.md";>actions/checkout's
 changelog.
   
   Changelog
   v4.1.6
   
   Check platform to set archive extension appropriately by https://github.com/cory-miller";>@​cory-miller in https://redirect.github.com/actions/checkout/pull/1732";>actions/checkout#1732
   
   v4.1.5
   
   Update NPM dependencies by https://github.com/cory-miller";>@​cory-miller in https://redirect.github.com/actions/checkout/pull/1703";>actions/checkout#1703
   Bump github/codeql-action from 2 to 3 by https://github.com/dependabot";>@​dependabot in https://redirect.github.com/actions/checkout/pull/1694";>actions/checkout#1694
   Bump actions/setup-node from 1 to 4 by https://github.com/dependabot";>@​dependabot in https://redirect.github.com/actions/checkout/pull/1696";>actions/checkout#1696
   Bump actions/upload-artifact from 2 to 4 by https://github.com/dependabot";>@​dependabot in https://redirect.github.com/actions/checkout/pull/1695";>actions/checkout#1695
   README: Suggest user.email to be 
41898282+github-actions[bot]@users.noreply.github.com by https://github.com/cory-miller";>@​cory-miller in https://redirect.github.com/actions/checkout/pull/1707";>actions/checkout#1707
   
   v4.1.4
   
   Disable extensions.worktreeConfig when disabling 
sparse-checkout by https://github.com/jww3";>@​jww3 in https://redirect.github.com/actions/checkout/pull/1692";>actions/checkout#1692
   Add dependabot config by https://githu

Re: [PR] Bump actions/checkout from 4.1.2 to 4.1.5 [cxf-fediz]

2024-05-20 Thread via GitHub


dependabot[bot] commented on PR #276:
URL: https://github.com/apache/cxf-fediz/pull/276#issuecomment-2120324280

   Superseded by #279.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: SpringWebUtils in CXF in TomEE

2024-05-20 Thread Jonathan Gallimore
Thanks Andriy and Romain for your replies.

> This is quite an interesting issue, is it possible to share (or point out
to an example) small reproducer project for this problem?

Yes - here's a reproducer: https://github.com/jgallimore/demo

If you clone this and run mvn clean install tomee:run, it will boot up a
TomEE 9.1.3 (which includes CXF 4.0.4). If you invoke a GET
http://localhost:8080/hello you'll see the error on the console.

> * openejb.cxf.CxfContainerClassLoader is false

This didn't work.

> * cxf is in the webapp, tomee cxf services disabled and cxf packages
"forced-load"

I haven't tried this. As I noted in the original email, I would imagine
that if this were deployed in Tomcat, and both CXF and Spring were included
in the application's WEB-INF/lib, this would not be an issue. I suspect
this would essentially give the same setup and I would imagine it would
work, but I would expect we'd lose the integration functionality in TomEE
(which we run the TCK against). Its also a big ask ask for anyone using
JAX-RS services, and just so happens to have Spring in their application,
as this did work ok in TomEE 9.1.2 (CXF 4.0.3).

> If not it can just be to detect it in tomee and setup the webapp properly?

Can you give me some pointers on what you mean here? I'm happy to make
adjustments in TomEE, and equally happy to work on a suitable update for
CXF if preferred.

Many thanks!

Jon

On Fri, May 17, 2024 at 3:56 AM Romain Manni-Bucau 
wrote:

> Hi Jon,
>
> Does it happen in the following both cases:
>
> * openejb.cxf.CxfContainerClassLoader is false
> * cxf is in the webapp, tomee cxf services disabled and cxf packages
> "forced-load"
>
> ?
>
> If not it can just be to detect it in tomee and setup the webapp properly?
>
> Le jeu. 16 mai 2024 à 23:25, Andriy Redko  a écrit :
>
>> Hey Jonathan,
>>
>> This is quite an interesting issue, is it possible to share (or point out
>> to an example) small reproducer project for this problem? I think I
>> understand
>> what is happening but don't have a clear fix for that to suggest at the
>> moment.
>>
>> Thank you.
>>
>> Best Regards,
>> Andriy Redko
>>
>> > Hi,
>>
>> > Firstly, thank you for all the amazing work you do in CXF. I
>> participate in
>> > the Apache TomEE project, which includes CXF to enable TomEE to provide
>> > REST and SOAP based services.
>>
>> > We've had a slightly unusual problem crop up that specifically affects
>> > applications that expose Jakarta REST endpoints (through the included
>> CXF
>> > in TomEE), and include the Spring Framework in the application's
>> > WEB-INF/lib.
>>
>> > The exception we see is:
>>
>> > java.lang.NoClassDefFoundError:
>> > org/springframework/web/filter/ServerHttpObservationFilter
>> > at
>> >
>> org.apache.cxf.jaxrs.springmvc.SpringWebUtils.setHttpRequestURI(SpringWebUtils.java:51)
>> > ~[cxf-rt-frontend-jaxrs-4.0.4.jar:4.0.4]
>> > at
>> >
>> org.apache.cxf.jaxrs.utils.HttpUtils.setHttpRequestURI(HttpUtils.java:380)
>> > ~[cxf-rt-frontend-jaxrs-4.0.4.jar:4.0.4]
>> > at
>> >
>> org.apache.cxf.jaxrs.interceptor.JAXRSInInterceptor.setExchangeProperties(JAXRSInInterceptor.java:246)
>> > ~[cxf-rt-frontend-jaxrs-4.0.4.jar:4.0.4]
>> > at
>> >
>> org.apache.cxf.jaxrs.interceptor.JAXRSInInterceptor.processRequest(JAXRSInInterceptor.java:183)
>> > ~[cxf-rt-frontend-jaxrs-4.0.4.jar:4.0.4]
>> > at
>> >
>> org.apache.cxf.jaxrs.interceptor.JAXRSInInterceptor.handleMessage(JAXRSInInterceptor.java:78)
>> > ~[cxf-rt-frontend-jaxrs-4.0.4.jar:4.0.4]
>> > at
>> >
>> org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:307)
>> > ~[cxf-core-4.0.4.jar:4.0.4]
>> > at
>> >
>> org.apache.cxf.transport.ChainInitiationObserver.onMessage(ChainInitiationObserver.java:121)
>> > ~[cxf-core-4.0.4.jar:4.0.4]
>> > at
>> >
>> org.apache.cxf.transport.http.AbstractHTTPDestination.invoke(AbstractHTTPDestination.java:265)
>> > ~[cxf-rt-transports-http-4.0.4.jar:4.0.4]
>> > at
>> >
>> org.apache.openejb.server.cxf.rs.CxfRsHttpListener.doInvoke(CxfRsHttpListener.java:266)
>> > ~[openejb-cxf-rs-9.1.3.jar:9.1.3]
>> > at
>> >
>> org.apache.tomee.webservices.CXFJAXRSFilter.doFilter(CXFJAXRSFilter.java:99)
>> > ~[tomee-jaxrs-9.1.3.jar:9.1.3]
>> > at
>> >
>> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:185)
>> > ~[catalina.jar:10.0.27]
>> > at
>> >
>> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:158)
>> > ~[catalina.jar:10.0.27]
>> > at
>> > org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:53)
>> > ~[tomcat-websocket.jar:10.0.27]
>> > at
>> >
>> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:185)
>> > ~[catalina.jar:10.0.27]
>> > at
>> >
>> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:158)
>> > ~[catalina.jar:10.0.27]
>> > at
>> org.apache.openejb.server.httpd.EE

Re: SpringWebUtils in CXF in TomEE

2024-05-20 Thread Romain Manni-Bucau
Le lun. 20 mai 2024 à 17:29, Jonathan Gallimore <
jonathan.gallim...@gmail.com> a écrit :

> Thanks Andriy and Romain for your replies.
>
> > This is quite an interesting issue, is it possible to share (or point out
> to an example) small reproducer project for this problem?
>
> Yes - here's a reproducer: https://github.com/jgallimore/demo
>
> If you clone this and run mvn clean install tomee:run, it will boot up a
> TomEE 9.1.3 (which includes CXF 4.0.4). If you invoke a GET
> http://localhost:8080/hello you'll see the error on the console.
>
> > * openejb.cxf.CxfContainerClassLoader is false
>
> This didn't work.
>
> > * cxf is in the webapp, tomee cxf services disabled and cxf packages
> "forced-load"
>
> I haven't tried this. As I noted in the original email, I would imagine
> that if this were deployed in Tomcat, and both CXF and Spring were included
> in the application's WEB-INF/lib, this would not be an issue. I suspect
> this would essentially give the same setup and I would imagine it would
> work, but I would expect we'd lose the integration functionality in TomEE
> (which we run the TCK against). Its also a big ask ask for anyone using
> JAX-RS services, and just so happens to have Spring in their application,
> as this did work ok in TomEE 9.1.2 (CXF 4.0.3).
>
> > If not it can just be to detect it in tomee and setup the webapp
> properly?
>
> Can you give me some pointers on what you mean here? I'm happy to make
> adjustments in TomEE, and equally happy to work on a suitable update for
> CXF if preferred.
>

Like we detect the slf4j api is in the webapp or not to use the container
or webapp binding it would be done the same for cxf/spring integration I
suspect.
Ideally I agree cxf should only use spring stuff if the bus is a spring one
- it is ok to not use spring with cxf but have spring ;) - but tomee can
likely workaround that.
Something like loading the class SpringWebUtils in cxfrsservice#init method
would be sufficient IMHO.


>
> Many thanks!
>
> Jon
>
> On Fri, May 17, 2024 at 3:56 AM Romain Manni-Bucau 
> wrote:
>
> > Hi Jon,
> >
> > Does it happen in the following both cases:
> >
> > * openejb.cxf.CxfContainerClassLoader is false
> > * cxf is in the webapp, tomee cxf services disabled and cxf packages
> > "forced-load"
> >
> > ?
> >
> > If not it can just be to detect it in tomee and setup the webapp
> properly?
> >
> > Le jeu. 16 mai 2024 à 23:25, Andriy Redko  a écrit :
> >
> >> Hey Jonathan,
> >>
> >> This is quite an interesting issue, is it possible to share (or point
> out
> >> to an example) small reproducer project for this problem? I think I
> >> understand
> >> what is happening but don't have a clear fix for that to suggest at the
> >> moment.
> >>
> >> Thank you.
> >>
> >> Best Regards,
> >> Andriy Redko
> >>
> >> > Hi,
> >>
> >> > Firstly, thank you for all the amazing work you do in CXF. I
> >> participate in
> >> > the Apache TomEE project, which includes CXF to enable TomEE to
> provide
> >> > REST and SOAP based services.
> >>
> >> > We've had a slightly unusual problem crop up that specifically affects
> >> > applications that expose Jakarta REST endpoints (through the included
> >> CXF
> >> > in TomEE), and include the Spring Framework in the application's
> >> > WEB-INF/lib.
> >>
> >> > The exception we see is:
> >>
> >> > java.lang.NoClassDefFoundError:
> >> > org/springframework/web/filter/ServerHttpObservationFilter
> >> > at
> >> >
> >>
> org.apache.cxf.jaxrs.springmvc.SpringWebUtils.setHttpRequestURI(SpringWebUtils.java:51)
> >> > ~[cxf-rt-frontend-jaxrs-4.0.4.jar:4.0.4]
> >> > at
> >> >
> >>
> org.apache.cxf.jaxrs.utils.HttpUtils.setHttpRequestURI(HttpUtils.java:380)
> >> > ~[cxf-rt-frontend-jaxrs-4.0.4.jar:4.0.4]
> >> > at
> >> >
> >>
> org.apache.cxf.jaxrs.interceptor.JAXRSInInterceptor.setExchangeProperties(JAXRSInInterceptor.java:246)
> >> > ~[cxf-rt-frontend-jaxrs-4.0.4.jar:4.0.4]
> >> > at
> >> >
> >>
> org.apache.cxf.jaxrs.interceptor.JAXRSInInterceptor.processRequest(JAXRSInInterceptor.java:183)
> >> > ~[cxf-rt-frontend-jaxrs-4.0.4.jar:4.0.4]
> >> > at
> >> >
> >>
> org.apache.cxf.jaxrs.interceptor.JAXRSInInterceptor.handleMessage(JAXRSInInterceptor.java:78)
> >> > ~[cxf-rt-frontend-jaxrs-4.0.4.jar:4.0.4]
> >> > at
> >> >
> >>
> org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:307)
> >> > ~[cxf-core-4.0.4.jar:4.0.4]
> >> > at
> >> >
> >>
> org.apache.cxf.transport.ChainInitiationObserver.onMessage(ChainInitiationObserver.java:121)
> >> > ~[cxf-core-4.0.4.jar:4.0.4]
> >> > at
> >> >
> >>
> org.apache.cxf.transport.http.AbstractHTTPDestination.invoke(AbstractHTTPDestination.java:265)
> >> > ~[cxf-rt-transports-http-4.0.4.jar:4.0.4]
> >> > at
> >> >
> >>
> org.apache.openejb.server.cxf.rs.CxfRsHttpListener.doInvoke(CxfRsHttpListener.java:266)
> >> > ~[openejb-cxf-rs-9.1.3.jar:9.1.3]
> >> > at
> >> >
> >>
> org.apache.tomee.webservices.CXFJAXRSFilter.doFilter(CXFJAXRSFilter.jav

Re: [PR] Bump github/codeql-action from 2.13.4 to 3.25.5 [cxf]

2024-05-20 Thread via GitHub


reta merged PR #1881:
URL: https://github.com/apache/cxf/pull/1881


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] Bump org.codehaus.mojo:build-helper-maven-plugin from 3.5.0 to 3.6.0 [cxf-build-utils]

2024-05-20 Thread via GitHub


dependabot[bot] opened a new pull request, #84:
URL: https://github.com/apache/cxf-build-utils/pull/84

   Bumps 
[org.codehaus.mojo:build-helper-maven-plugin](https://github.com/mojohaus/build-helper-maven-plugin)
 from 3.5.0 to 3.6.0.
   
   Release notes
   Sourced from https://github.com/mojohaus/build-helper-maven-plugin/releases";>org.codehaus.mojo:build-helper-maven-plugin's
 releases.
   
   3.6.0
   Changes
   🚀 New features and improvements
   
   Deprecate remove-project-artifact goal (https://redirect.github.com/mojohaus/build-helper-maven-plugin/pull/205";>#205)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   Parallel execution of uptodate-properties (https://redirect.github.com/mojohaus/build-helper-maven-plugin/pull/201";>#201)
 https://github.com/mkarg";>@​mkarg
   
   📦 Dependency updates
   
   Bump org.codehaus.mojo:mojo-parent from 81 to 82 (https://redirect.github.com/mojohaus/build-helper-maven-plugin/pull/206";>#206)
 https://github.com/dependabot";>@​dependabot
   Bump org.codehaus.mojo:mojo-parent from 78 to 81 (https://redirect.github.com/mojohaus/build-helper-maven-plugin/pull/204";>#204)
 https://github.com/dependabot";>@​dependabot
   Bump org.codehaus.plexus:plexus-utils from 4.0.0 to 4.0.1 (https://redirect.github.com/mojohaus/build-helper-maven-plugin/pull/202";>#202)
 https://github.com/dependabot";>@​dependabot
   Bump apache/maven-gh-actions-shared from 3 to 4 (https://redirect.github.com/mojohaus/build-helper-maven-plugin/pull/200";>#200)
 https://github.com/dependabot";>@​dependabot
   Bump release-drafter/release-drafter from 5 to 6 (https://redirect.github.com/mojohaus/build-helper-maven-plugin/pull/195";>#195)
 https://github.com/dependabot";>@​dependabot
   Bump org.codehaus.mojo:mojo-parent from 77 to 78 (https://redirect.github.com/mojohaus/build-helper-maven-plugin/pull/193";>#193)
 https://github.com/dependabot";>@​dependabot
   
   👻 Maintenance
   
   Delete link to remove-project-artifact as is deprecated (https://redirect.github.com/mojohaus/build-helper-maven-plugin/pull/210";>#210)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   Cleanups dependencies (https://redirect.github.com/mojohaus/build-helper-maven-plugin/pull/209";>#209)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   Remove public modifiers from JUnit 5 tests (https://redirect.github.com/mojohaus/build-helper-maven-plugin/pull/208";>#208)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   Delete example about remove-project-artifact as is deprecated (https://redirect.github.com/mojohaus/build-helper-maven-plugin/pull/207";>#207)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   Fix goal in usage add-test-resource example (https://redirect.github.com/mojohaus/build-helper-maven-plugin/pull/199";>#199)
 https://github.com/mfussenegger";>@​mfussenegger
   
   🔧 Build
   
   Use shared action for release drafter (https://redirect.github.com/mojohaus/build-helper-maven-plugin/pull/203";>#203)
 https://github.com/slawekjaranowski";>@​slawekjaranowski
   
   
   
   
   Commits
   
   https://github.com/mojohaus/build-helper-maven-plugin/commit/45494bc6053095b7f42b1fccfb8f230f75d1";>454
 [maven-release-plugin] prepare release 3.6.0
   https://github.com/mojohaus/build-helper-maven-plugin/commit/05ee2cb17ff155862accaee1fc1b0ea1cae53911";>05ee2cb
 Delete link to remove-project-artifact as is deprecated
   https://github.com/mojohaus/build-helper-maven-plugin/commit/a4190d2f634210091031ad27a3a50d626ea37cfa";>a4190d2
 Cleanups dependencies
   https://github.com/mojohaus/build-helper-maven-plugin/commit/b99f6be8c876c012c41d163c832c4b0adfb28356";>b99f6be
 Remove public modifiers from JUnit 5 tests
   https://github.com/mojohaus/build-helper-maven-plugin/commit/f21a0272a00f6bb4e6d404817a6c144ac65b2778";>f21a027
 Add me as developer
   https://github.com/mojohaus/build-helper-maven-plugin/commit/211d4b9687c79085c3c036aefc14a8428195eb69";>211d4b9
 Delete example about remove-project-artifact as is deprecated
   https://github.com/mojohaus/build-helper-maven-plugin/commit/27ab33494dffaa5d5f5e9cbbbac4f581e4ed9479";>27ab334
 Deprecate remove-project-artifact goal
   https://github.com/mojohaus/build-helper-maven-plugin/commit/8a4c7c41842082f530775a933ab22088d673fd3c";>8a4c7c4
 Bump org.codehaus.mojo:mojo-parent from 81 to 82
   https://github.com/mojohaus/build-helper-maven-plugin/commit/57f54801686afb43b3540c597010f0c9857b5901";>57f5480
 Bump org.codehaus.mojo:mojo-parent from 78 to 81 (https://redirect.github.com/mojohaus/build-helper-maven-plugin/issues/204";>#204)
   https://github.com/mojohaus/build-helper-maven-plugin/commit/c09d77946636cf605515c851cd6ede87b94eb81a";>c09d779
 Use shared action for release drafter
   Additional commits viewable in https://github.com/mojohaus/build-helper-maven-plugin/compare/3.5.0...3.6.0";>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges

Re: [PR] Bump org.codehaus.mojo:build-helper-maven-plugin from 3.5.0 to 3.6.0 [cxf-build-utils]

2024-05-20 Thread via GitHub


reta merged PR #84:
URL: https://github.com/apache/cxf-build-utils/pull/84


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] Bump org.apache.maven.plugins:maven-install-plugin from 3.1.1 to 3.1.2 [cxf-xjc-utils]

2024-05-20 Thread via GitHub


dependabot[bot] opened a new pull request, #138:
URL: https://github.com/apache/cxf-xjc-utils/pull/138

   Bumps 
[org.apache.maven.plugins:maven-install-plugin](https://github.com/apache/maven-install-plugin)
 from 3.1.1 to 3.1.2.
   
   Release notes
   Sourced from https://github.com/apache/maven-install-plugin/releases";>org.apache.maven.plugins:maven-install-plugin's
 releases.
   
   3.1.2
   https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317524&version=12353548";>Release
 Notes - Maven Install Plugin - Version 3.1.2
   
   
   
   
   
   What's Changed
   
   [MNG-6829] Replace StringUtils#isEmpty(String) & #isNotEmpty(String) 
by https://github.com/timtebeek";>@​timtebeek in https://redirect.github.com/apache/maven-install-plugin/pull/58";>apache/maven-install-plugin#58
   [MINSTALL-197] Update to parent 41, cleanup by https://github.com/cstamas";>@​cstamas in https://redirect.github.com/apache/maven-install-plugin/pull/61";>apache/maven-install-plugin#61
   [MINSTALL-193] Parent 42, min Maven 3.6.3 by https://github.com/cstamas";>@​cstamas in https://redirect.github.com/apache/maven-install-plugin/pull/64";>apache/maven-install-plugin#64
   
   New Contributors
   
   https://github.com/timtebeek";>@​timtebeek made 
their first contribution in https://redirect.github.com/apache/maven-install-plugin/pull/58";>apache/maven-install-plugin#58
   
   Full Changelog: https://github.com/apache/maven-install-plugin/compare/maven-install-plugin-3.1.1...maven-install-plugin-3.1.2";>https://github.com/apache/maven-install-plugin/compare/maven-install-plugin-3.1.1...maven-install-plugin-3.1.2
   
   
   
   Commits
   
   https://github.com/apache/maven-install-plugin/commit/e1494c1296b022b72b19f2a3a1a1cf702495253f";>e1494c1
 [maven-release-plugin] prepare release maven-install-plugin-3.1.2
   https://github.com/apache/maven-install-plugin/commit/6712ae82ed5943218fc63dd08f2ec5583532c5b7";>6712ae8
 Remove workaround, handle it centrally
   https://github.com/apache/maven-install-plugin/commit/1fa847f674199397696ddb61661ddbc70a6875e5";>1fa847f
 Bump workflow
   https://github.com/apache/maven-install-plugin/commit/bdc93d5a648ae96968bd1ee8eb5ad6964f7de4fc";>bdc93d5
 Quickfix: move to zulu
   https://github.com/apache/maven-install-plugin/commit/7b9bf5138c482000dc0b8654ef88b35c17d3073d";>7b9bf51
 [MINSTALL-193] Parent 42, min Maven 3.6.3 (https://redirect.github.com/apache/maven-install-plugin/issues/64";>#64)
   https://github.com/apache/maven-install-plugin/commit/e9143678bac698483693b3b2ed2d58407920";>e914367
 [MINSTALL-195] Include artifactId in InstallMojo#processProject messages
   https://github.com/apache/maven-install-plugin/commit/3ebb44860673e141e3d5f680df434cd5ac61d46b";>3ebb448
 [MINSTALL-197] Update to parent 41, cleanup (https://redirect.github.com/apache/maven-install-plugin/issues/61";>#61)
   https://github.com/apache/maven-install-plugin/commit/30d2b530f7199bed86a03caf53cf884f68e76376";>30d2b53
 [MINSTALL-192] - Code cleanups
   https://github.com/apache/maven-install-plugin/commit/429ad5b9fcd3e700f8ce6d3f42cc135a740e20ba";>429ad5b
 [MNG-6829] Replace StringUtils#isEmpty(String) & #isNotEmpty(String) (https://redirect.github.com/apache/maven-install-plugin/issues/58";>#58)
   https://github.com/apache/maven-install-plugin/commit/f6377c406baf35fb148fc320f0c10de78e70639b";>f6377c4
 configure notifications
   Additional commits viewable in https://github.com/apache/maven-install-plugin/compare/maven-install-plugin-3.1.1...maven-install-plugin-3.1.2";>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.maven.plugins:maven-install-plugin&package-manager=maven&previous-version=3.1.1&new-version=3.1.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot show  ignore conditions` will show all of 
the

[PR] Bump com.puppycrawl.tools:checkstyle from 10.15.0 to 10.16.0 [cxf-xjc-utils]

2024-05-20 Thread via GitHub


dependabot[bot] opened a new pull request, #139:
URL: https://github.com/apache/cxf-xjc-utils/pull/139

   Bumps 
[com.puppycrawl.tools:checkstyle](https://github.com/checkstyle/checkstyle) 
from 10.15.0 to 10.16.0.
   
   Release notes
   Sourced from https://github.com/checkstyle/checkstyle/releases";>com.puppycrawl.tools:checkstyle's
 releases.
   
   checkstyle-10.16.0
   Checkstyle 10.16.0 - https://checkstyle.org/releasenotes.html#Release_10.16.0";>https://checkstyle.org/releasenotes.html#Release_10.16.0
   New:
   https://redirect.github.com/checkstyle/checkstyle/issues/14620";>#14620
 - LITERAL_CASE token support in RightCurlyCheck
   Bug fixes:
   https://redirect.github.com/checkstyle/checkstyle/issues/14765";>#14765
 - OverloadMethodDeclarationOrder check ignores anything besides methods
   https://redirect.github.com/checkstyle/checkstyle/issues/14788";>#14788
 - MagicNumberCheck NPE when ignoring field declarations
   https://redirect.github.com/checkstyle/checkstyle/issues/14092";>#14092
 - UnusedLocalVariable does not support local classes
   https://redirect.github.com/checkstyle/checkstyle/issues/12923";>#12923
 - UnusedImports does not report unused static imports when the method is used 
as a method reference
   
   
   
   
   Commits
   
   https://github.com/checkstyle/checkstyle/commit/e8aa612d624d62baa8f6208a39092a0a46e31987";>e8aa612
 [maven-release-plugin] prepare release checkstyle-10.16.0
   https://github.com/checkstyle/checkstyle/commit/87cf29c15a33e858c1927df6876c4827fc244cd4";>87cf29c
 doc: release notes for 10.16.0
   https://github.com/checkstyle/checkstyle/commit/4096711145aa7faae1958fd62355ffa0bf2d1295";>4096711
 Issue https://redirect.github.com/checkstyle/checkstyle/issues/14765";>#14765:
 fix OverloadMethodsDeclarationOrderCheck
   https://github.com/checkstyle/checkstyle/commit/5b05fffe0e0ea65842fe6e97091bdc9ad5305f80";>5b05fff
 Issue https://redirect.github.com/checkstyle/checkstyle/issues/14625";>#14625:
 fixed inspections violations MismatchedJavadocCode
   https://github.com/checkstyle/checkstyle/commit/48de2026faab830dad301253ac9b33e34527221b";>48de202
 dependency: bump com.google.errorprone:error_prone_core
   https://github.com/checkstyle/checkstyle/commit/508757d61f58bb8d6d6cb5a257dfcbd4f45a49c0";>508757d
 Issue https://redirect.github.com/checkstyle/checkstyle/issues/14625";>#14625:
 move TailRecursion inspection problems to separate issue
   https://github.com/checkstyle/checkstyle/commit/10908a4e6292954357508ff8d9ad276709a56f5b";>10908a4
 Issue https://redirect.github.com/checkstyle/checkstyle/issues/14625";>#14625:
 fix inspection violations OptionalGetWithoutIsPresent
   https://github.com/checkstyle/checkstyle/commit/508c3613a34e2313315799c6a424c54d3389bb40";>508c361
 Issue https://redirect.github.com/checkstyle/checkstyle/issues/13213";>#13213:
 Remove '//ok' comments from InputJavadocMethodExtraThrows
   https://github.com/checkstyle/checkstyle/commit/40a1bba5034c0f3425c480adcf3c4b99d8b022ac";>40a1bba
 supplemental: removed conditional that checks suppression list
   https://github.com/checkstyle/checkstyle/commit/101e62342cce1c51baea510798ceb219abdfc99a";>101e623
 Issue https://redirect.github.com/checkstyle/checkstyle/issues/14715";>#14715:
 Enforced new naming convention in IT area 24
   Additional commits viewable in https://github.com/checkstyle/checkstyle/compare/checkstyle-10.15.0...checkstyle-10.16.0";>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.puppycrawl.tools:checkstyle&package-manager=maven&previous-version=10.15.0&new-version=10.16.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot show  ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot

Re: [PR] Bump com.puppycrawl.tools:checkstyle from 10.15.0 to 10.16.0 [cxf-xjc-utils]

2024-05-20 Thread via GitHub


reta merged PR #139:
URL: https://github.com/apache/cxf-xjc-utils/pull/139


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [PR] Bump org.apache.maven.plugins:maven-install-plugin from 3.1.1 to 3.1.2 [cxf-xjc-utils]

2024-05-20 Thread via GitHub


reta merged PR #138:
URL: https://github.com/apache/cxf-xjc-utils/pull/138


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] Bump jakarta.xml.soap:jakarta.xml.soap-api from 3.0.1 to 3.0.2 [cxf]

2024-05-20 Thread via GitHub


dependabot[bot] opened a new pull request, #1884:
URL: https://github.com/apache/cxf/pull/1884

   Bumps 
[jakarta.xml.soap:jakarta.xml.soap-api](https://github.com/jakartaee/saaj-api) 
from 3.0.1 to 3.0.2.
   
   Release notes
   Sourced from https://github.com/jakartaee/saaj-api/releases";>jakarta.xml.soap:jakarta.xml.soap-api's
 releases.
   
   Jakarta SOAP with Attachments API 3.0.2
   What's Changed
   
   Fixes javadoc typos and formatting
   Integrates https://github.com/jakartaee/jaf-api/releases/tag/2.1.3";>Jakarta 
Activation API 2.1.3
   
   Full Changelog: https://github.com/jakartaee/saaj-api/compare/3.0.1...3.0.2";>https://github.com/jakartaee/saaj-api/compare/3.0.1...3.0.2
   
   
   
   Commits
   
   https://github.com/jakartaee/saaj-api/commit/03ea41abffa93d7bae82955cd40c1c2161b07d3a";>03ea41a
 Update API version of jakarta.xml.soap:jakarta.xml.soap-api to 3.0.2
   https://github.com/jakartaee/saaj-api/commit/5e861f927d01870f11f03063abff4fdc46695b76";>5e861f9
 switch release pipeline to SE 21
   https://github.com/jakartaee/saaj-api/commit/fd4f288870d4afbdfe0cbea11bd74b953da1c807";>fd4f288
 Use snippet in javadoc,
   https://github.com/jakartaee/saaj-api/commit/cc2beb53b71b84ab3ae73c78d56e5228185b15f7";>cc2beb5
 Update legal files
   https://github.com/jakartaee/saaj-api/commit/5fb9fac0ceaad29cc61f0d9593eeda20951801a3";>5fb9fac
 Update GH action build
   https://github.com/jakartaee/saaj-api/commit/dad2cbec967ee9a9f7aea769f043bbfa8e10f205";>dad2cbe
 Update build plugins
   https://github.com/jakartaee/saaj-api/commit/057690339a5fe6ac08f09ac7977542fd822d1dd7";>0576903
 Integrate activation-api 2.1.3
   https://github.com/jakartaee/saaj-api/commit/37486d0f1e34cb458436ccaa6fb588d2c87c0015";>37486d0
 Merge pull request https://redirect.github.com/jakartaee/saaj-api/issues/131";>#131 from 
jakartaee/3.0.1-RELEASE
   https://github.com/jakartaee/saaj-api/commit/b1d830f9083f143097219d9ba37e3c16fcd009b0";>b1d830f
 Update API version of jakarta.xml.soap:jakarta.xml.soap-api to 
3.0.2-SNAPSHOT
   See full diff in https://github.com/jakartaee/saaj-api/compare/3.0.1...3.0.2";>compare 
view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=jakarta.xml.soap:jakarta.xml.soap-api&package-manager=maven&previous-version=3.0.1&new-version=3.0.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot show  ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[PR] Bump cxf.spring.security.version from 6.2.4 to 6.3.0 [cxf]

2024-05-20 Thread via GitHub


dependabot[bot] opened a new pull request, #1885:
URL: https://github.com/apache/cxf/pull/1885

   Bumps `cxf.spring.security.version` from 6.2.4 to 6.3.0.
   Updates `org.springframework.security:spring-security-web` from 6.2.4 to 
6.3.0
   
   Release notes
   Sourced from https://github.com/spring-projects/spring-security/releases";>org.springframework.security:spring-security-web's
 releases.
   
   6.3.0
   :star: New Features
   
   Add getters to OAuth2AuthorizedClientId https://redirect.github.com/spring-projects/spring-security/pull/13648";>#13648
   Add timeout defaults to JwtDecoders https://redirect.github.com/spring-projects/spring-security/pull/14890";>#14890
   doc: added hint to declare GrantedAuthorityDefaults as infrastructure 
bean https://redirect.github.com/spring-projects/spring-security/issues/15065";>#15065
   Improve logging for Global Authentication https://redirect.github.com/spring-projects/spring-security/pull/14711";>#14711
   Minor docs fix https://redirect.github.com/spring-projects/spring-security/pull/15043";>#15043
   Minor Documentation update on import needed for using Kotlin DSL https://redirect.github.com/spring-projects/spring-security/pull/14969";>#14969
   OAuth2 Client Authentication docs are incomplete https://redirect.github.com/spring-projects/spring-security/issues/14982";>#14982
   Proofread CasAuthenticationFilter documentation https://redirect.github.com/spring-projects/spring-security/pull/14883";>#14883
   Replace "Spring Boot 2.x" with "Spring Boot" https://redirect.github.com/spring-projects/spring-security/pull/14919";>#14919
   Simplify Disabling application/x-www-form-urlencoded Encoding Client ID 
and Secret https://redirect.github.com/spring-projects/spring-security/pull/14859";>#14859
   Support Specifying Identifier for relying-party-registrations Element https://redirect.github.com/spring-projects/spring-security/issues/14487";>#14487
   Update What's New in 6.3 https://redirect.github.com/spring-projects/spring-security/issues/14918";>#14918
   
   :beetle: Bug Fixes
   
   Do Not Invalidate Current Session When Its Registered https://redirect.github.com/spring-projects/spring-security/pull/15066";>#15066
   Fix  MethodAuthorizationDeniedPostProcessor does not exist in java doc 
https://redirect.github.com/spring-projects/spring-security/pull/14955";>#14955
   fix docs error in AuthenticatedReactiveAuthorizationManager https://redirect.github.com/spring-projects/spring-security/pull/14979";>#14979
   OIDC Logout section is not shown in the navbar https://redirect.github.com/spring-projects/spring-security/issues/15113";>#15113
   Wrong information for RequestCacheAwareFilter in the Spring Security 
documentation. https://redirect.github.com/spring-projects/spring-security/issues/14996";>#14996
   
   :hammer: Dependency Upgrades
   
   Bump ch.qos.logback:logback-classic from 1.5.5 to 1.5.6 https://redirect.github.com/spring-projects/spring-security/pull/14926";>#14926
   Bump com.fasterxml.jackson:jackson-bom from 2.17.0 to 2.17.1 https://redirect.github.com/spring-projects/spring-security/pull/15010";>#15010
   Bump com.gradle.develocity from 3.17.2 to 3.17.3 https://redirect.github.com/spring-projects/spring-security/pull/15051";>#15051
   Bump com.gradle.develocity from 3.17.3 to 3.17.4 https://redirect.github.com/spring-projects/spring-security/pull/15104";>#15104
   Bump io.micrometer:micrometer-observation from 1.12.5 to 1.12.6 https://redirect.github.com/spring-projects/spring-security/pull/15068";>#15068
   Bump io.mockk:mockk from 1.13.10 to 1.13.11 https://redirect.github.com/spring-projects/spring-security/pull/15086";>#15086
   Bump io.projectreactor:reactor-bom from 2023.0.5 to 2023.0.6 https://redirect.github.com/spring-projects/spring-security/pull/15076";>#15076
   Bump org-apache-maven-resolver from 1.9.18 to 1.9.19 https://redirect.github.com/spring-projects/spring-security/pull/14940";>#14940
   Bump org-apache-maven-resolver from 1.9.19 to 1.9.20 https://redirect.github.com/spring-projects/spring-security/pull/14987";>#14987
   Bump org-aspectj from 1.9.22 to 1.9.22.1 https://redirect.github.com/spring-projects/spring-security/pull/15052";>#15052
   Bump org-bouncycastle from 1.78 to 1.78.1 https://redirect.github.com/spring-projects/spring-security/pull/14929";>#14929
   Bump org-eclipse-jetty from 11.0.20 to 11.0.21 https://redirect.github.com/spring-projects/spring-security/pull/15087";>#15087
   Bump org.hibernate.orm:hibernate-core from 6.4.4.Final to 6.4.5.Final https://redirect.github.com/spring-projects/spring-security/pull/14948";>#14948
   Bump org.hibernate.orm:hibernate-core from 6.4.5.Final to 6.4.6.Final https://redirect.github.com/spring-projects/spring-security/pull/14952";>#14952
   Bump org.hibernate.orm:hibernate-core from 6.4.6.Final to 6.4.7.Final https://redirect.github.com/spring-projects/spring-security/pull/14962";>#14962
   Bump org.hibernate.orm:hibernate-core from 6.4.7.Final to 6.4.8.Final htt