You are viewing a plain text version of this content. The canonical link for it is here.
- (ofbiz-framework) branch trunk updated (b7a984a012 -> bb9ec639ba) - posted by ja...@apache.org on 2026/04/01 09:07:22 UTC, 0 replies.
- (ofbiz-framework) 01/02: Fixed: Remove unnecessary string expansion for email subject and body in EmailServices - posted by ja...@apache.org on 2026/04/01 09:07:23 UTC, 1 replies.
- (ofbiz-framework) 02/02: Fixed: Simplify permission checks for email and comment note communication events in PartyPermissionServices - posted by ja...@apache.org on 2026/04/01 09:07:24 UTC, 1 replies.
- (ofbiz-framework) branch release24.09 updated (2161ad15bc -> 5caa820f66) - posted by ja...@apache.org on 2026/04/01 09:25:37 UTC, 0 replies.
- Buildbot success in on ofbizBranch24FrameworkPlugins - posted by bu...@apache.org on 2026/04/01 10:18:05 UTC, 1 replies.
- (ofbiz-plugins) branch trunk updated: Improved: Bump dependencies group across 5 directories with 14 updates - posted by ja...@apache.org on 2026/04/01 13:06:56 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated: Improved: Bump minor versions of dependencies - posted by ja...@apache.org on 2026/04/01 13:13:20 UTC, 0 replies.
- (ofbiz-plugins) branch release24.09 updated (25ff2c55d -> 9d717f89b) - posted by ja...@apache.org on 2026/04/01 13:31:48 UTC, 0 replies.
- (ofbiz-plugins) 01/02: Bump the all-dependencies group across 5 directories with 14 updates - posted by ja...@apache.org on 2026/04/01 13:31:49 UTC, 0 replies.
- (ofbiz-plugins) 02/02: Fixed: post-Dependabot bump compilation and runtime errors - posted by ja...@apache.org on 2026/04/01 13:31:50 UTC, 0 replies.
- (ofbiz-framework) branch release24.09 updated (5caa820f66 -> bad956bb62) - posted by ja...@apache.org on 2026/04/01 13:53:25 UTC, 0 replies.
- (ofbiz-framework) 01/05: Bump the all-dependencies group with 55 updates - posted by ja...@apache.org on 2026/04/01 13:53:26 UTC, 0 replies.
- (ofbiz-framework) 02/05: Fixed: post-Dependabot bump compilation and runtime errors - posted by ja...@apache.org on 2026/04/01 13:53:27 UTC, 0 replies.
- (ofbiz-framework) 03/05: Improved: Update url of Groovy javadocs - posted by ja...@apache.org on 2026/04/01 13:53:28 UTC, 0 replies.
- (ofbiz-framework) 04/05: Improved: Replace iText by librePDF (OFBIZ-13300) - posted by ja...@apache.org on 2026/04/01 13:53:29 UTC, 0 replies.
- (ofbiz-framework) 05/05: Fix: Update url for java 17 javadocs - posted by ja...@apache.org on 2026/04/01 13:53:30 UTC, 0 replies.
- Buildbot failure in on ofbizTrunkFramework - posted by bu...@apache.org on 2026/04/01 14:01:11 UTC, 2 replies.
- (ofbiz-framework) branch release24.09 updated: Fixed: Not possible to add product to Promo Action Rule (OFBIZ-13379) - posted by jl...@apache.org on 2026/04/01 14:45:37 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated (fbb16d2d51 -> 180ab5e72d) - posted by jl...@apache.org on 2026/04/01 14:45:38 UTC, 0 replies.
- (ofbiz-framework) 01/02: Fixed: Pressing sort button in any UI view will end with NPE (OFBIZ-13378) - posted by jl...@apache.org on 2026/04/01 14:45:39 UTC, 0 replies.
- (ofbiz-framework) 02/02: Fixed: Not possible to add product to Promo Action Rule (OFBIZ-13379) - posted by jl...@apache.org on 2026/04/01 14:45:40 UTC, 0 replies.
- (ofbiz-framework) branch release24.09 updated: Fixed: Pressing sort button in any UI view will end with NPE (OFBIZ-13378) - posted by jl...@apache.org on 2026/04/01 15:46:10 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated: Fixed: Update Gradle wrapper version and checksum in init script and properties file - posted by ja...@apache.org on 2026/04/01 19:05:40 UTC, 0 replies.
- (ofbiz-framework) branch release24.09 updated: Fixed: Update Gradle wrapper to version 7.6.6 and adjust checksums - posted by ja...@apache.org on 2026/04/01 20:50:39 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated: Fixed: Update init-gradle-wrapper.ps1 to version 8.14.4 - posted by ja...@apache.org on 2026/04/02 09:01:47 UTC, 0 replies.
- (ofbiz-framework) branch release24.09 updated: Fixed: Update init-gradle-wrapper.ps1 to version 7.6.6 - posted by ja...@apache.org on 2026/04/02 09:02:08 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated: Testing: A commit has been assigned to a person that did not work on it (OFBIZ-27796) - posted by jl...@apache.org on 2026/04/02 11:30:48 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated: Fixed: Resolve test errors in framework-only deployments by adding spring-web dependency - posted by ja...@apache.org on 2026/04/03 07:13:58 UTC, 0 replies.
- Buildbot success in on ofbizTrunkFramework - posted by bu...@apache.org on 2026/04/03 07:34:51 UTC, 2 replies.
- (ofbiz-framework) branch release24.09 updated: Fixed: Add spring-web version 5.3.39 to dependencies.gradle for testing framework-only deployments - posted by ja...@apache.org on 2026/04/03 08:45:26 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/github_actions/release24.09/docker/login-action-4.1.0 created (now c429e353fe) - posted by gi...@apache.org on 2026/04/03 13:36:00 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/github_actions/docker/login-action-4.1.0 created (now 959eab83a0) - posted by gi...@apache.org on 2026/04/03 13:36:07 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated (1a0675a8e3 -> b109e9c34a) - posted by ja...@apache.org on 2026/04/04 06:30:24 UTC, 0 replies.
- (ofbiz-framework) 01/03: Improved: Remove gradle-wrapper.jar from the repository and enhance the init-gradle-wrapper scripts to download and verify the version specified in gradle-wrapper.properties - posted by ja...@apache.org on 2026/04/04 06:30:25 UTC, 1 replies.
- (ofbiz-framework) 02/03: Fixed: Update Dockerfile to copy gradle-wrapper.properties and remove unnecessary sed command - posted by ja...@apache.org on 2026/04/04 06:30:26 UTC, 1 replies.
- (ofbiz-framework) 03/03: Fixed: Add init-gradle-wrapper.sh execution step to CI workflow - posted by ja...@apache.org on 2026/04/04 06:30:27 UTC, 1 replies.
- (ofbiz-framework) branch release24.09 updated (205d053fef -> 539dfa860f) - posted by ja...@apache.org on 2026/04/04 07:59:48 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated: Bump docker/login-action from 4.0.0 to 4.1.0 - posted by ja...@apache.org on 2026/04/04 08:45:55 UTC, 1 replies.
- (ofbiz-framework) branch dependabot/github_actions/docker/login-action-4.1.0 deleted (was 959eab83a0) - posted by gi...@apache.org on 2026/04/04 08:46:04 UTC, 0 replies.
- (ofbiz-framework) branch revert-1053-dependabot/github_actions/docker/login-action-4.1.0 created (now 453d427f45) - posted by ja...@apache.org on 2026/04/04 08:51:09 UTC, 0 replies.
- (ofbiz-framework) 01/01: Revert "Bump docker/login-action from 4.0.0 to 4.1.0" - posted by ja...@apache.org on 2026/04/04 08:51:10 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated: Revert "Bump docker/login-action from 4.0.0 to 4.1.0" - posted by ja...@apache.org on 2026/04/04 09:15:11 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated: Fixed: remove generateSecretKeys dependency from test to improve build caching - posted by ja...@apache.org on 2026/04/05 05:11:03 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated: Improved: Add comments to clarify purpose of test security.properties override - posted by ja...@apache.org on 2026/04/05 05:56:44 UTC, 0 replies.
- (ofbiz-framework) branch release24.09 updated: Fixed: remove generateSecretKeys dependency from test to improve build caching - posted by ja...@apache.org on 2026/04/05 06:23:10 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated: Fixed: Ensure that the invoice item quantity is set to 1 only if the quantity is null when invoice items are created by the createInvoiceItem service (OFBIZ-13362) - posted by ja...@apache.org on 2026/04/05 06:34:15 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated: Fixed: Avoid displaying quantities equal to zero as 1 in the invoice items grid of the View Invoice screen (OFBIZ-13362) - posted by ja...@apache.org on 2026/04/05 06:36:47 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated (aef5f8e33b -> 44c9055e16) - posted by ja...@apache.org on 2026/04/06 09:17:55 UTC, 0 replies.
- (ofbiz-framework) 01/02: Fixed: Move checkContextFileBoundary call to ensure file boundary is checked before existence check - posted by ja...@apache.org on 2026/04/06 09:17:56 UTC, 1 replies.
- (ofbiz-framework) 02/02: Fixed: Update checkContextFileBoundary method visibility and ensure it is called in DataServices to validate file paths - posted by ja...@apache.org on 2026/04/06 09:17:57 UTC, 1 replies.
- (ofbiz-framework) branch release24.09 updated (4123861ce5 -> 8d3153baa9) - posted by ja...@apache.org on 2026/04/06 09:39:57 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated: Fixed: Enhance error logging in ICalConverter for service invocation failures - posted by ja...@apache.org on 2026/04/06 13:34:49 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/github_actions/docker/login-action-4.1.0 created (now b91cdab26e) - posted by gi...@apache.org on 2026/04/06 13:41:16 UTC, 0 replies.
- (ofbiz-framework) branch release24.09 updated: Fixed: Enhance error logging in ICalConverter for service invocation failures - posted by ja...@apache.org on 2026/04/06 13:55:54 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated: Fixed: Replace RandomStringUtils with custom salt generation in HashCrypt for enhanced security - posted by ja...@apache.org on 2026/04/06 16:40:03 UTC, 0 replies.
- (ofbiz-framework) branch release24.09 updated: Fixed: Replace RandomStringUtils with custom salt generation in HashCrypt for enhanced security - posted by ja...@apache.org on 2026/04/06 17:00:03 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/vite-8.0.5 created (now db7d2c6e2) - posted by gi...@apache.org on 2026/04/06 18:33:33 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/release24.09/vite-8.0.5 created (now ebcb63898) - posted by gi...@apache.org on 2026/04/07 03:56:01 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated: Fixed: Derive servlet path from trusted _CONTROL_PATH_ request attribute to enhance security against user-influenced input - posted by ja...@apache.org on 2026/04/07 06:34:38 UTC, 0 replies.
- (ofbiz-framework) branch release24.09 updated: Fixed: Derive servlet path from trusted _CONTROL_PATH_ request attribute to enhance security against user-influenced input - posted by ja...@apache.org on 2026/04/07 07:27:54 UTC, 0 replies.
- (ofbiz-plugins) branch trunk updated: Bump vite from 8.0.3 to 8.0.5 in /example/vite-react-app - posted by ja...@apache.org on 2026/04/07 07:41:15 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/vite-8.0.5 deleted (was db7d2c6e2) - posted by gi...@apache.org on 2026/04/07 07:41:25 UTC, 0 replies.
- (ofbiz-plugins) branch release24.09 updated: Bump vite from 8.0.3 to 8.0.5 in /example/vite-react-app - posted by ja...@apache.org on 2026/04/07 07:41:57 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/release24.09/vite-8.0.5 deleted (was ebcb63898) - posted by gi...@apache.org on 2026/04/07 07:42:06 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated: Fixed: Validate last view name input in RequestHandler to enhance security and prevent user manipulation - posted by ja...@apache.org on 2026/04/07 10:38:23 UTC, 0 replies.
- (ofbiz-framework) branch release24.09 updated: Fixed: Validate last view name input in RequestHandler to enhance security and prevent user manipulation - posted by ja...@apache.org on 2026/04/07 11:07:04 UTC, 0 replies.
- (ofbiz-framework) branch release24.09 updated (7e9f93e33d -> ed603dc87b) - posted by ja...@apache.org on 2026/04/07 12:28:48 UTC, 0 replies.
- (ofbiz-framework) 01/02: Fixed: Ensure that the invoice item quantity is set to 1 only if the quantity is null when invoice items are created by the createInvoiceItem service (OFBIZ-13362) - posted by ja...@apache.org on 2026/04/07 12:28:49 UTC, 0 replies.
- (ofbiz-framework) 02/02: Fixed: Avoid displaying quantities equal to zero as 1 in the invoice items grid of the View Invoice screen (OFBIZ-13362) - posted by ja...@apache.org on 2026/04/07 12:28:50 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated: Fixed: Rename README for GitHub CI/CD configuration (#1071) - posted by jl...@apache.org on 2026/04/07 13:01:24 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated: Fixed: Enhance string escaping in MacroScreenRenderer - posted by ja...@apache.org on 2026/04/07 14:02:50 UTC, 0 replies.
- (ofbiz-framework) branch release24.09 updated: Fixed: Enhance string escaping in MacroScreenRenderer - posted by ja...@apache.org on 2026/04/07 14:57:32 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/vite-8.0.7 created (now da0770d98) - posted by gi...@apache.org on 2026/04/08 03:53:22 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/release24.09/vite-8.0.7 created (now 7577c5fba) - posted by gi...@apache.org on 2026/04/08 03:56:12 UTC, 0 replies.
- (ofbiz-plugins) branch trunk updated: Bump vite from 8.0.5 to 8.0.7 in /example/vite-react-app - posted by ja...@apache.org on 2026/04/08 06:15:14 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/vite-8.0.7 deleted (was da0770d98) - posted by gi...@apache.org on 2026/04/08 06:15:21 UTC, 0 replies.
- (ofbiz-plugins) branch release24.09 updated: Bump vite from 8.0.5 to 8.0.7 in /example/vite-react-app - posted by ja...@apache.org on 2026/04/08 06:16:14 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/release24.09/vite-8.0.7 deleted (was 7577c5fba) - posted by gi...@apache.org on 2026/04/08 06:16:21 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated (5c627e288b -> 81f802f729) - posted by ja...@apache.org on 2026/04/08 11:02:31 UTC, 0 replies.
- (ofbiz-framework) 01/06: Improved: Move file path validation to SecurityUtil - posted by ja...@apache.org on 2026/04/08 11:02:32 UTC, 1 replies.
- (ofbiz-framework) 02/06: Fixed: Implement file path validation using SecurityUtil in CoreEvents to enhance security - posted by ja...@apache.org on 2026/04/08 11:02:33 UTC, 1 replies.
- (ofbiz-framework) 03/06: Fixed: Integrate SecurityUtil to validate file paths in CommonEvents for enhanced security - posted by ja...@apache.org on 2026/04/08 11:02:34 UTC, 1 replies.
- (ofbiz-framework) 04/06: Fixed: Remove legacy HttpEngine (disabled 5 years ago for security reasons) - posted by ja...@apache.org on 2026/04/08 11:02:35 UTC, 1 replies.
- (ofbiz-framework) 05/06: Fixed: Cast parse result to int in EntityDataLoader - posted by ja...@apache.org on 2026/04/08 11:02:36 UTC, 1 replies.
- (ofbiz-framework) 06/06: Fixed: Cast parse result to int in EntityXmlAssertTest - posted by ja...@apache.org on 2026/04/08 11:02:37 UTC, 1 replies.
- (ofbiz-framework) branch release24.09 updated (b7ce265226 -> 58de07fbfd) - posted by ja...@apache.org on 2026/04/08 14:51:50 UTC, 0 replies.
- (ofbiz-tools) branch master updated: Fixed: the recent VM change from ofbiz-vm1.apache.org to ofbiz-ec2-or.apache.org - posted by jl...@apache.org on 2026/04/08 14:56:04 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/react-dom-19.2.5 created (now 7ec37451b) - posted by gi...@apache.org on 2026/04/09 03:53:16 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/react-19.2.5 created (now 29f118fe9) - posted by gi...@apache.org on 2026/04/09 03:53:27 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/release24.09/react-dom-19.2.5 created (now 129a0c4b5) - posted by gi...@apache.org on 2026/04/09 03:55:53 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/release24.09/react-19.2.5 created (now 23dc13027) - posted by gi...@apache.org on 2026/04/09 03:56:04 UTC, 0 replies.
- (ofbiz-plugins) branch trunk updated: Bump react from 19.2.4 to 19.2.5 in /example/vite-react-app - posted by ja...@apache.org on 2026/04/09 06:18:28 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/react-19.2.5 deleted (was 29f118fe9) - posted by gi...@apache.org on 2026/04/09 06:18:38 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/react-dom-19.2.5 updated (7ec37451b -> 532ca9d5b) - posted by gi...@apache.org on 2026/04/09 06:19:51 UTC, 0 replies.
- (ofbiz-plugins) branch trunk updated: Bump react-dom from 19.2.4 to 19.2.5 in /example/vite-react-app - posted by ja...@apache.org on 2026/04/09 06:23:52 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/react-dom-19.2.5 deleted (was 532ca9d5b) - posted by gi...@apache.org on 2026/04/09 06:24:01 UTC, 0 replies.
- (ofbiz-plugins) branch release24.09 updated: Bump react from 19.2.4 to 19.2.5 in /example/vite-react-app - posted by ja...@apache.org on 2026/04/09 06:31:39 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/release24.09/react-19.2.5 deleted (was 23dc13027) - posted by gi...@apache.org on 2026/04/09 06:31:50 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/release24.09/react-dom-19.2.5 updated (129a0c4b5 -> 295bd520b) - posted by gi...@apache.org on 2026/04/09 06:33:52 UTC, 0 replies.
- Buildbot failure in on ofbizTrunkFrameworkPlugins - posted by bu...@apache.org on 2026/04/09 06:38:44 UTC, 1 replies.
- (ofbiz-plugins) branch release24.09 updated: Bump react-dom from 19.2.4 to 19.2.5 in /example/vite-react-app - posted by ja...@apache.org on 2026/04/09 06:40:20 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/release24.09/react-dom-19.2.5 deleted (was 295bd520b) - posted by gi...@apache.org on 2026/04/09 06:40:27 UTC, 0 replies.
- Buildbot failure in on ofbizBranch24FrameworkPlugins - posted by bu...@apache.org on 2026/04/09 06:54:14 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated: Implemented: Convert README from AsciiDoc to Markdown format (#1079) - posted by jl...@apache.org on 2026/04/09 10:46:11 UTC, 0 replies.
- Buildbot success in on ofbizTrunkFrameworkPlugins - posted by bu...@apache.org on 2026/04/09 10:56:50 UTC, 1 replies.
- (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/vite-8.0.8 created (now 999d8bfe4) - posted by gi...@apache.org on 2026/04/10 03:53:26 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/prettier-3.8.2 created (now 8a2a3d33f) - posted by gi...@apache.org on 2026/04/10 03:53:43 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/release24.09/prettier-3.8.2 created (now abe96e257) - posted by gi...@apache.org on 2026/04/10 03:55:39 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/release24.09/vite-8.0.8 created (now 739117767) - posted by gi...@apache.org on 2026/04/10 03:55:57 UTC, 0 replies.
- (ofbiz-plugins) branch trunk updated: Bump vite from 8.0.7 to 8.0.8 in /example/vite-react-app (#185) - posted by jl...@apache.org on 2026/04/10 07:14:34 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/vite-8.0.8 deleted (was 999d8bfe4) - posted by gi...@apache.org on 2026/04/10 07:14:43 UTC, 0 replies.
- (ofbiz-plugins) branch trunk updated: Bump prettier from 3.8.1 to 3.8.2 in /example/vite-react-app (#184) - posted by jl...@apache.org on 2026/04/10 07:15:11 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/prettier-3.8.2 deleted (was 8a2a3d33f) - posted by gi...@apache.org on 2026/04/10 07:15:17 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/github_actions/docker/build-push-action-7.1.0 created (now 9a7cf23274) - posted by gi...@apache.org on 2026/04/10 13:37:27 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/github_actions/release24.09/docker/build-push-action-7.1.0 created (now 04288b8f67) - posted by gi...@apache.org on 2026/04/10 13:37:34 UTC, 0 replies.
- (ofbiz-plugins) branch release24.09 updated: Fixed: [SECURITY] Several CVEs in Apache Tomcat (OFBIZ-13381) - posted by jl...@apache.org on 2026/04/10 15:23:06 UTC, 0 replies.
- (ofbiz-framework) branch release24.09 updated: Fixed: [SECURITY] Several CVEs in Apache Tomcat (OFBIZ-13381) - posted by jl...@apache.org on 2026/04/10 15:41:01 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated: Fixed: [SECURITY] Several CVEs in Apache Tomcat (OFBIZ-13381) - posted by jl...@apache.org on 2026/04/10 15:41:02 UTC, 0 replies.
- (ofbiz-plugins) branch release24.09 updated: Bump prettier from 3.8.1 to 3.8.2 in /example/vite-react-app - posted by ja...@apache.org on 2026/04/11 16:18:27 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/release24.09/prettier-3.8.2 deleted (was abe96e257) - posted by gi...@apache.org on 2026/04/11 16:18:36 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/release24.09/vite-8.0.8 updated (739117767 -> 21a3f5977) - posted by gi...@apache.org on 2026/04/11 16:19:45 UTC, 0 replies.
- (ofbiz-plugins) branch release24.09 updated: Bump vite from 8.0.7 to 8.0.8 in /example/vite-react-app - posted by ja...@apache.org on 2026/04/11 16:21:04 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/release24.09/vite-8.0.8 deleted (was 21a3f5977) - posted by gi...@apache.org on 2026/04/11 16:21:12 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated: Add ASF allowlist check workflow - posted by ja...@apache.org on 2026/04/13 07:30:16 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/github_actions/docker/build-push-action-7.1.0 updated (9a7cf23274 -> 9bf30450f7) - posted by gi...@apache.org on 2026/04/13 07:50:24 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated: Rename workflow files from .yaml to .yml for consistency and compatibility with the new asf-allowlist-check.yml workflow - posted by ja...@apache.org on 2026/04/13 08:22:26 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/github_actions/docker/login-action-4.1.0 updated (b91cdab26e -> 6e3acfddda) - posted by gi...@apache.org on 2026/04/13 08:28:42 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/github_actions/docker/build-push-action-7.1.0 updated (9bf30450f7 -> 41e387ff8d) - posted by gi...@apache.org on 2026/04/13 08:28:50 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated: Restrict ASF allowlist checks to main branches only - posted by ja...@apache.org on 2026/04/13 08:51:23 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/github_actions/docker/build-push-action-7.1.0 updated (41e387ff8d -> 8c7f0b2b00) - posted by gi...@apache.org on 2026/04/13 08:56:20 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/github_actions/docker/login-action-4.1.0 updated (6e3acfddda -> d3b45b31d2) - posted by gi...@apache.org on 2026/04/13 08:58:20 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/github_actions/docker/login-action-4.1.0 deleted (was d3b45b31d2) - posted by gi...@apache.org on 2026/04/13 09:18:33 UTC, 0 replies.
- (ofbiz-framework) branch release24.09 updated (c5724f398e -> 2bc7dab04b) - posted by ja...@apache.org on 2026/04/13 09:20:23 UTC, 0 replies.
- (ofbiz-framework) 01/03: Add ASF allowlist check workflow - posted by ja...@apache.org on 2026/04/13 09:20:24 UTC, 0 replies.
- (ofbiz-framework) 02/03: Rename workflow files from .yaml to .yml for consistency and compatibility with the new asf-allowlist-check.yml workflow - posted by ja...@apache.org on 2026/04/13 09:20:25 UTC, 0 replies.
- (ofbiz-framework) 03/03: Restrict ASF allowlist checks to main branches only - posted by ja...@apache.org on 2026/04/13 09:20:26 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/github_actions/release24.09/docker/login-action-4.1.0 updated (c429e353fe -> f67f9078dc) - posted by gi...@apache.org on 2026/04/13 09:21:30 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/github_actions/release24.09/docker/build-push-action-7.1.0 updated (04288b8f67 -> 944760162b) - posted by gi...@apache.org on 2026/04/13 09:21:39 UTC, 0 replies.
- (ofbiz-framework) branch release24.09 updated: Bump docker/login-action from 4.0.0 to 4.1.0 - posted by ja...@apache.org on 2026/04/13 09:29:56 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/github_actions/release24.09/docker/login-action-4.1.0 deleted (was f67f9078dc) - posted by gi...@apache.org on 2026/04/13 09:30:08 UTC, 0 replies.
- (ofbiz-framework) branch release24.09 updated (ed6e0f9f00 -> 528ed7e13c) - posted by ja...@apache.org on 2026/04/13 10:12:17 UTC, 0 replies.
- (ofbiz-framework) 01/03: Fixed: Update Gradle wrapper to version 8.14.4 - posted by ja...@apache.org on 2026/04/13 10:12:18 UTC, 0 replies.
- (ofbiz-framework) 02/03: Backported: Refactor boolean assignments to comply with codestyle rules - posted by ja...@apache.org on 2026/04/13 10:12:19 UTC, 0 replies.
- (ofbiz-framework) 03/03: Fixed: Increase memory for checkstyleMain to support Gradle 8+ - posted by ja...@apache.org on 2026/04/13 10:12:20 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated (eaf6eb9457 -> 4f0b99bca3) - posted by ja...@apache.org on 2026/04/13 10:28:10 UTC, 0 replies.
- (ofbiz-framework) 01/04: Fixed: Modify property assignments in build.gradle to fix warning messages - posted by ja...@apache.org on 2026/04/13 10:28:11 UTC, 0 replies.
- (ofbiz-framework) 02/04: Fixed: Remove org.asciidoctor.jvm.pdf that doesn't work since several months and is incompatible with the current version of Gradle and its plugins - posted by ja...@apache.org on 2026/04/13 10:28:12 UTC, 0 replies.
- (ofbiz-framework) 03/04: Fixed: Clean up commented-out plugin line - posted by ja...@apache.org on 2026/04/13 10:28:13 UTC, 0 replies.
- (ofbiz-framework) 04/04: Fixed: Disable the unused CrapMetric rule. - posted by ja...@apache.org on 2026/04/13 10:28:14 UTC, 0 replies.
- (ofbiz-framework) branch new-shipment-screen-issue created (now 7250ce35c3) - posted by ar...@apache.org on 2026/04/13 10:56:56 UTC, 0 replies.
- (ofbiz-framework) 01/02: Fixed: Issue on New Shipment screen after error on first attempt and then rentering correct value. Form was calling invalid request as there was a check on shipmenType which was not empty in context on reloaded page after after.(OFBIZ-12157) - posted by ar...@apache.org on 2026/04/13 10:56:57 UTC, 0 replies.
- (ofbiz-framework) 02/02: Merge branch 'trunk' of https://github.com/apache/ofbiz-framework into new-shipment-screen-issue - posted by ar...@apache.org on 2026/04/13 10:56:58 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated: Revert "Fixed: Issue while building & pushing OFBiz docker container images (OFBIZ-13296)" - posted by ja...@apache.org on 2026/04/13 11:10:26 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated: Fixed: Issue on Create New Shipment Screen after page re-loading on error due to any reason. (#1088) - posted by ar...@apache.org on 2026/04/13 12:24:50 UTC, 0 replies.
- (ofbiz-framework) branch new-shipment-screen-issue deleted (was 7250ce35c3) - posted by ar...@apache.org on 2026/04/13 12:42:30 UTC, 0 replies.
- (ofbiz-framework) branch release24.09 updated (528ed7e13c -> 9f5b043b58) - posted by ja...@apache.org on 2026/04/13 13:18:35 UTC, 0 replies.
- (ofbiz-framework) 01/05: Fixed: Modify property assignments in build.gradle to fix warning messages - posted by ja...@apache.org on 2026/04/13 13:18:36 UTC, 0 replies.
- (ofbiz-framework) 02/05: Fixed: Remove org.asciidoctor.jvm.pdf that doesn't work since several months and is incompatible with the current version of Gradle and its plugins - posted by ja...@apache.org on 2026/04/13 13:18:37 UTC, 0 replies.
- (ofbiz-framework) 03/05: Fixed: Clean up commented-out plugin line - posted by ja...@apache.org on 2026/04/13 13:18:38 UTC, 0 replies.
- (ofbiz-framework) 04/05: Fixed: Disable the unused CrapMetric rule. - posted by ja...@apache.org on 2026/04/13 13:18:39 UTC, 0 replies.
- (ofbiz-framework) 05/05: Fixed: Update AsciidoctorTask configuration to use the new API - posted by ja...@apache.org on 2026/04/13 13:18:40 UTC, 0 replies.
- (ofbiz-plugins) branch trunk updated: Fixed: jsgantt-improved bloks qs.js update (OFBIZ-13339) - posted by jl...@apache.org on 2026/04/13 13:20:53 UTC, 4 replies.
- (ofbiz-framework) branch dependabot/github_actions/actions/upload-artifact-7.0.1 created (now 72dab69ab9) - posted by gi...@apache.org on 2026/04/13 14:55:20 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/github_actions/release24.09/actions/upload-artifact-7.0.1 created (now 5f5af4ab6f) - posted by gi...@apache.org on 2026/04/13 14:55:27 UTC, 0 replies.
- (ofbiz-plugins) branch trunk updated: Revert "Fixed: jsgantt-improved bloks qs.js update (OFBIZ-13339)" - posted by jl...@apache.org on 2026/04/13 15:14:40 UTC, 2 replies.
- (ofbiz-framework) branch trunk updated: Bump actions/upload-artifact from 7.0.0 to 7.0.1 - posted by ja...@apache.org on 2026/04/13 15:17:43 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/github_actions/actions/upload-artifact-7.0.1 deleted (was 72dab69ab9) - posted by gi...@apache.org on 2026/04/13 15:17:52 UTC, 0 replies.
- (ofbiz-framework) branch release24.09 updated: Bump actions/upload-artifact from 7.0.0 to 7.0.1 - posted by ja...@apache.org on 2026/04/13 15:27:44 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/github_actions/release24.09/actions/upload-artifact-7.0.1 deleted (was 5f5af4ab6f) - posted by gi...@apache.org on 2026/04/13 15:27:51 UTC, 0 replies.
- Buildbot failure in on ofbizBranch24Framework - posted by bu...@apache.org on 2026/04/13 16:12:02 UTC, 2 replies.
- (ofbiz-framework) branch trunk updated: Update log4j dependencies to version 2.25.4, Groovy to 5.0.5 and common-custom-user-data-gradle-plugin to 2.6.0 - posted by ja...@apache.org on 2026/04/13 17:15:34 UTC, 0 replies.
- (ofbiz-plugins) branch trunk updated: Add Dependabot configuration for Gradle in various plugins - posted by ja...@apache.org on 2026/04/13 17:20:55 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/gradle/example/org.apache.tomcat.embed-tomcat-embed-websocket-9.0.117 created (now d641bd11c) - posted by gi...@apache.org on 2026/04/13 17:21:53 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/gradle/rest-api/release24.09/io.swagger.core.v3-swagger-jaxrs2-2.2.48 created (now cce8d30cc) - posted by gi...@apache.org on 2026/04/13 17:22:01 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/gradle/rest-api/release24.09/io.swagger.core.v3-swagger-annotations-2.2.48 created (now 4a5f24af8) - posted by gi...@apache.org on 2026/04/13 17:22:15 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/gradle/rest-api/release24.09/io.swagger.core.v3-swagger-jaxrs2-servlet-initializer-2.2.48 created (now 241233297) - posted by gi...@apache.org on 2026/04/13 17:22:18 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/gradle/rest-api/io.swagger.core.v3-swagger-annotations-2.2.48 created (now 3af214b54) - posted by gi...@apache.org on 2026/04/13 17:22:22 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/gradle/rest-api/io.swagger.core.v3-swagger-jaxrs2-2.2.48 created (now 03ef95c46) - posted by gi...@apache.org on 2026/04/13 17:22:26 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/gradle/rest-api/io.swagger.core.v3-swagger-jaxrs2-servlet-initializer-2.2.48 created (now f8e2bc94d) - posted by gi...@apache.org on 2026/04/13 17:22:33 UTC, 0 replies.
- Buildbot success in on ofbizBranch24Framework - posted by bu...@apache.org on 2026/04/13 17:24:53 UTC, 2 replies.
- (ofbiz-framework) branch trunk updated: Add Gradle dependency updates to Dependabot configuration - posted by ja...@apache.org on 2026/04/13 17:30:47 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/org.apache.derby-derby-10.17.1.0 created (now 385d68647d) - posted by gi...@apache.org on 2026/04/13 17:33:32 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/org.apache.ant-ant-junit-1.10.17 created (now 31a86ed1d7) - posted by gi...@apache.org on 2026/04/13 17:33:39 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/org.apache.commons-commons-imaging-1.0.0-alpha6 created (now 8ab7c30f4f) - posted by gi...@apache.org on 2026/04/13 17:34:29 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/org.apache.derby-derbytools-10.17.1.0 created (now ab4ad2d9ab) - posted by gi...@apache.org on 2026/04/13 17:34:36 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/release24.09/org.apache.logging.log4j-log4j-jcl-2.25.4 created (now df2a8d1b38) - posted by gi...@apache.org on 2026/04/13 17:34:39 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/release24.09/com.github.librepdf-openpdf-1.4.2 created (now ca38e9089b) - posted by gi...@apache.org on 2026/04/13 17:34:53 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/release24.09/org.apache.logging.log4j-log4j-api-2.25.4 created (now 3eeda5691b) - posted by gi...@apache.org on 2026/04/13 17:35:06 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/release24.09/org.apache.xmlgraphics-fop-2.11 created (now 470e538cd1) - posted by gi...@apache.org on 2026/04/13 17:35:21 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/release24.09/org.apache.logging.log4j-log4j-core-2.25.4 created (now b45db48ef7) - posted by gi...@apache.org on 2026/04/13 17:35:30 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/com.drewnoakes-metadata-extractor-2.20.0 created (now 30ef0cabf7) - posted by gi...@apache.org on 2026/04/13 17:36:13 UTC, 0 replies.
- (ofbiz-framework) branch release24.09 updated: Bump org.apache.logging.log4j:log4j-core from 2.25.3 to 2.25.4 - posted by ja...@apache.org on 2026/04/13 17:47:14 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/release24.09/org.apache.logging.log4j-log4j-core-2.25.4 deleted (was b45db48ef7) - posted by gi...@apache.org on 2026/04/13 17:47:24 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/release24.09/org.apache.logging.log4j-log4j-jcl-2.25.4 deleted (was df2a8d1b38) - posted by gi...@apache.org on 2026/04/13 17:49:44 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/release24.09/org.apache.logging.log4j-log4j-api-2.25.4 deleted (was 3eeda5691b) - posted by gi...@apache.org on 2026/04/13 17:49:49 UTC, 0 replies.
- (ofbiz-framework) branch cherrypick-OFBIZ-12157 created (now 6f6bf46098) - posted by ar...@apache.org on 2026/04/14 04:47:19 UTC, 0 replies.
- (ofbiz-framework) branch cherrypick-OFBIZ-12157 updated: Fixed: Issue on Create New Shipment Screen after page re-loading on error due to any reason. (#1088) - posted by ar...@apache.org on 2026/04/14 05:59:58 UTC, 0 replies.
- (ofbiz-framework) branch release24.09 updated: Fixed: Issue on Create New Shipment Screen after page re-loading on e… (#1105) - posted by ar...@apache.org on 2026/04/14 07:26:57 UTC, 0 replies.
- (ofbiz-framework) branch cherrypick-OFBIZ-12157 deleted (was b52bb41ed3) - posted by ar...@apache.org on 2026/04/14 07:27:28 UTC, 0 replies.
- (ofbiz-plugins) branch trunk updated: Bump org.apache.tomcat.embed:tomcat-embed-websocket in /example - posted by ja...@apache.org on 2026/04/14 10:20:02 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/gradle/example/org.apache.tomcat.embed-tomcat-embed-websocket-9.0.117 deleted (was d641bd11c) - posted by gi...@apache.org on 2026/04/14 10:20:12 UTC, 0 replies.
- (ofbiz-plugins) branch trunk updated: Bump io.swagger.core.v3:swagger-jaxrs2-servlet-initializer in /rest-api - posted by ja...@apache.org on 2026/04/14 10:20:39 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/gradle/rest-api/io.swagger.core.v3-swagger-jaxrs2-servlet-initializer-2.2.48 deleted (was f8e2bc94d) - posted by gi...@apache.org on 2026/04/14 10:20:49 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/gradle/rest-api/io.swagger.core.v3-swagger-jaxrs2-2.2.48 deleted (was 03ef95c46) - posted by gi...@apache.org on 2026/04/14 10:21:40 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/gradle/rest-api/io.swagger.core.v3-swagger-annotations-2.2.48 deleted (was 3af214b54) - posted by gi...@apache.org on 2026/04/14 10:21:42 UTC, 0 replies.
- (ofbiz-plugins) branch release24.09 updated: Bump io.swagger.core.v3:swagger-annotations in /rest-api - posted by ja...@apache.org on 2026/04/14 10:35:51 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/gradle/rest-api/release24.09/io.swagger.core.v3-swagger-annotations-2.2.48 deleted (was 4a5f24af8) - posted by gi...@apache.org on 2026/04/14 10:35:58 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/gradle/rest-api/release24.09/io.swagger.core.v3-swagger-jaxrs2-servlet-initializer-2.2.48 deleted (was 241233297) - posted by gi...@apache.org on 2026/04/14 10:36:49 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/gradle/rest-api/release24.09/io.swagger.core.v3-swagger-jaxrs2-2.2.48 deleted (was cce8d30cc) - posted by gi...@apache.org on 2026/04/14 10:37:10 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated: Bump com.drewnoakes:metadata-extractor from 2.19.0 to 2.20.0 - posted by ja...@apache.org on 2026/04/14 12:33:30 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/com.drewnoakes-metadata-extractor-2.20.0 deleted (was 30ef0cabf7) - posted by gi...@apache.org on 2026/04/14 12:33:40 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated: Bump org.apache.ant:ant-junit from 1.10.15 to 1.10.17 - posted by ja...@apache.org on 2026/04/14 12:35:07 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/org.apache.ant-ant-junit-1.10.17 deleted (was 31a86ed1d7) - posted by gi...@apache.org on 2026/04/14 12:35:14 UTC, 0 replies.
- (ofbiz-framework) branch release24.09 updated (0f48dc0f34 -> 4ede6be62a) - posted by jl...@apache.org on 2026/04/14 13:31:40 UTC, 0 replies.
- (ofbiz-framework) 01/02: Fixed: Possible NPE in PayPal services (OFBIZ-13385) - posted by jl...@apache.org on 2026/04/14 13:31:41 UTC, 1 replies.
- (ofbiz-framework) 02/02: Fixed: Accounting - New Agreement shows wrong form (OFBIZ-13384) - posted by jl...@apache.org on 2026/04/14 13:31:42 UTC, 1 replies.
- (ofbiz-framework) branch trunk updated (68527c0673 -> 87d6f23140) - posted by jl...@apache.org on 2026/04/14 13:31:43 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/npm_and_yarn/themes/common-theme/webapp/common-theme/js/dompurify-3.4.0 created (now 99864666e0) - posted by gi...@apache.org on 2026/04/14 13:31:50 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/npm_and_yarn/themes/common-theme/webapp/common-theme/js/release24.09/dompurify-3.4.0 created (now aac6b8e332) - posted by gi...@apache.org on 2026/04/14 13:37:12 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/org.activiti-activiti-juel-jakarta-8.8.0 created (now c8fdb6b535) - posted by gi...@apache.org on 2026/04/14 13:37:25 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/org.bouncycastle-bcprov-jdk18on-1.84 created (now b0946a6dfc) - posted by gi...@apache.org on 2026/04/14 13:37:59 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/release24.09/org.mustangproject-library-2.22.0 created (now 1dee61c679) - posted by gi...@apache.org on 2026/04/14 13:38:02 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/release24.09/com.drewnoakes-metadata-extractor-2.20.0 created (now 6599e7a726) - posted by gi...@apache.org on 2026/04/14 13:39:35 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/release24.09/org.apache.derby-derby-10.17.1.0 created (now 2d9c3c2071) - posted by gi...@apache.org on 2026/04/14 13:40:17 UTC, 0 replies.
- (ofbiz-framework) branch release24.09 updated: Fixed: Possible NPE in PayPal services (OFBIZ-13385) - posted by jl...@apache.org on 2026/04/14 15:00:39 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated: Fixed: Possible NPE in PayPal services (OFBIZ-13385) - posted by jl...@apache.org on 2026/04/14 15:00:40 UTC, 0 replies.
- (ofbiz-framework) branch release24.09 updated: Improved: Possible NPE in PayPal services (OFBIZ-13385) - posted by jl...@apache.org on 2026/04/14 16:59:22 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated: Improved: Possible NPE in PayPal services (OFBIZ-13385) - posted by jl...@apache.org on 2026/04/14 16:59:23 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated (d24228096d -> 0369a9192d) - posted by jl...@apache.org on 2026/04/14 16:59:34 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/npm_and_yarn/themes/common-theme/webapp/common-theme/js/dompurify-3.4.0 deleted (was 99864666e0) - posted by gi...@apache.org on 2026/04/14 16:59:45 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/prettier-3.8.3 created (now 065fc3544) - posted by gi...@apache.org on 2026/04/15 03:53:22 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/release24.09/prettier-3.8.3 created (now d2ea9561b) - posted by gi...@apache.org on 2026/04/15 03:56:07 UTC, 0 replies.
- (ofbiz-plugins) branch ai-agent-skills deleted (was e868741e8) - posted by ar...@apache.org on 2026/04/15 05:12:34 UTC, 0 replies.
- (ofbiz-plugins) branch trunk updated: Fixed: Correct and complete Dependabot configuration for projectmgr npm packages - posted by ja...@apache.org on 2026/04/15 09:14:24 UTC, 0 replies.
- (ofbiz-plugins) branch trunk updated: Bump prettier from 3.8.2 to 3.8.3 in /example/vite-react-app - posted by ja...@apache.org on 2026/04/15 11:03:16 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/prettier-3.8.3 deleted (was 065fc3544) - posted by gi...@apache.org on 2026/04/15 11:03:23 UTC, 0 replies.
- (ofbiz-plugins) branch trunk updated (46ba4bfad -> 3f10d06e7) - posted by ja...@apache.org on 2026/04/15 11:19:05 UTC, 0 replies.
- (ofbiz-plugins) 01/02: Removed unused task definitions and commented-out configuration in build.gradle of the rest-api plugin - posted by ja...@apache.org on 2026/04/15 11:19:06 UTC, 0 replies.
- (ofbiz-plugins) 02/02: Commented-out npm configuration for projectmgr in dependabot.yml - posted by ja...@apache.org on 2026/04/15 11:19:07 UTC, 0 replies.
- (ofbiz-plugins) branch release24.09 updated: Bump prettier from 3.8.2 to 3.8.3 in /example/vite-react-app - posted by ja...@apache.org on 2026/04/15 11:27:33 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/release24.09/prettier-3.8.3 deleted (was d2ea9561b) - posted by gi...@apache.org on 2026/04/15 11:27:44 UTC, 0 replies.
- (ofbiz-plugins) branch release24.09 updated: Backported: Removed unused task definitions and commented-out configuration in build.gradle of the rest-api plugin - posted by ja...@apache.org on 2026/04/15 11:29:42 UTC, 0 replies.
- (ofbiz-plugins) branch release24.09 updated: Remove redundant Dependabot configuration file - posted by ja...@apache.org on 2026/04/15 12:20:56 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/github_actions/github/codeql-action-4.35.2 created (now 1540902e48) - posted by gi...@apache.org on 2026/04/15 13:39:59 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/github_actions/release24.09/github/codeql-action-4.35.2 created (now 3578a61758) - posted by gi...@apache.org on 2026/04/15 13:40:10 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated: Bump github/codeql-action from 4.35.1 to 4.35.2 - posted by ja...@apache.org on 2026/04/15 13:59:34 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/github_actions/github/codeql-action-4.35.2 deleted (was 1540902e48) - posted by gi...@apache.org on 2026/04/15 13:59:41 UTC, 0 replies.
- (ofbiz-framework) branch release24.09 updated: Bump github/codeql-action from 4.35.1 to 4.35.2 - posted by ja...@apache.org on 2026/04/15 14:40:18 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/github_actions/release24.09/github/codeql-action-4.35.2 deleted (was 3578a61758) - posted by gi...@apache.org on 2026/04/15 14:40:28 UTC, 0 replies.
- (ofbiz-framework) branch release24.09 updated: Bump com.drewnoakes:metadata-extractor from 2.19.0 to 2.20.0 - posted by ja...@apache.org on 2026/04/15 15:32:26 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/release24.09/com.drewnoakes-metadata-extractor-2.20.0 deleted (was 6599e7a726) - posted by gi...@apache.org on 2026/04/15 15:32:36 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated: Bump org.bouncycastle:bcprov-jdk18on from 1.83 to 1.84 - posted by ja...@apache.org on 2026/04/15 16:02:36 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/org.bouncycastle-bcprov-jdk18on-1.84 deleted (was b0946a6dfc) - posted by gi...@apache.org on 2026/04/15 16:02:43 UTC, 0 replies.
- (ofbiz-plugins) branch trunk updated: Fixed: Add package-lock.json for projectmgr to manage dependencies - posted by ja...@apache.org on 2026/04/15 16:56:19 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/org.apache.derby-derby-10.17.1.0 deleted (was 385d68647d) - posted by gi...@apache.org on 2026/04/15 18:04:36 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/org.apache.derby-derbytools-10.17.1.0 deleted (was ab4ad2d9ab) - posted by gi...@apache.org on 2026/04/15 18:07:13 UTC, 0 replies.
- (ofbiz-framework) branch release24.09 updated: Bump Apache Derby to version 10.16.1.1 - posted by ja...@apache.org on 2026/04/15 18:31:32 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/release24.09/org.apache.derby-derby-10.17.1.0 updated (2d9c3c2071 -> 1bfa87c5ba) - posted by gi...@apache.org on 2026/04/15 18:32:56 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/release24.09/org.apache.derby-derby-10.17.1.0 deleted (was 1bfa87c5ba) - posted by gi...@apache.org on 2026/04/15 18:41:10 UTC, 0 replies.
- (ofbiz-plugins) branch trunk updated: FIXED: Issue on canceling an item from multi item order ecommerce order view page by customer. (#203) - posted by ar...@apache.org on 2026/04/16 12:07:02 UTC, 0 replies.
- (ofbiz-plugins) branch release24.09 updated: FIXED: Issue on canceling an item from multi item order ecommerce order view page by customer. (#203) (#204) - posted by ar...@apache.org on 2026/04/16 12:19:58 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/release24.09/org.apache.commons-commons-imaging-1.0.0-alpha6 created (now 57761b2cee) - posted by gi...@apache.org on 2026/04/16 13:38:43 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/release24.09/com.gradle.common-custom-user-data-gradle-plugin-2.6.0 created (now 6f059a7c2c) - posted by gi...@apache.org on 2026/04/16 13:39:14 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/com.google.guava-guava-33.6.0-jre created (now 4070a7a1e5) - posted by gi...@apache.org on 2026/04/16 13:41:15 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated: Bump com.google.guava:guava from 33.5.0-jre to 33.6.0-jre - posted by ja...@apache.org on 2026/04/16 17:25:20 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/com.google.guava-guava-33.6.0-jre deleted (was 4070a7a1e5) - posted by gi...@apache.org on 2026/04/16 17:25:29 UTC, 0 replies.
- Buildbot success in on ofbizTrunkFrameworkRat - posted by bu...@apache.org on 2026/04/16 17:48:16 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/typescript-6.0.3 created (now cde589e37) - posted by gi...@apache.org on 2026/04/17 03:53:18 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/release24.09/typescript-6.0.3 created (now 04a086ccd) - posted by gi...@apache.org on 2026/04/17 03:56:12 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/org.springframework-spring-web-6.2.18 created (now 0424dc718d) - posted by gi...@apache.org on 2026/04/17 13:37:39 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/org.springframework-spring-test-6.2.18 created (now a2881dafd2) - posted by gi...@apache.org on 2026/04/17 13:40:43 UTC, 0 replies.
- (ofbiz-plugins) branch trunk updated (31d50a981 -> fe14e0b33) - posted by ja...@apache.org on 2026/04/17 14:21:09 UTC, 0 replies.
- (ofbiz-plugins) 01/02: Fixed: Replace TopScoreDocCollector with TopDocs in LuceneTests to resolve compilation warnings - posted by ja...@apache.org on 2026/04/17 14:21:10 UTC, 0 replies.
- (ofbiz-plugins) 02/02: Fixed: Refactor JacksonConfig to use JsonMapper to suppress waarnings - posted by ja...@apache.org on 2026/04/17 14:21:11 UTC, 0 replies.
- (ofbiz-plugins) branch trunk updated: Bump typescript from 6.0.2 to 6.0.3 in /example/vite-react-app - posted by ja...@apache.org on 2026/04/17 14:47:46 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/typescript-6.0.3 deleted (was cde589e37) - posted by gi...@apache.org on 2026/04/17 14:47:56 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated (9da205b991 -> 3dd6605bdc) - posted by ja...@apache.org on 2026/04/17 14:49:11 UTC, 0 replies.
- (ofbiz-framework) 01/08: Fixed: Update StartupCommandUtil to fix warning messages for usage of deprecated methods in the org.apache.commons.cli library - posted by ja...@apache.org on 2026/04/17 14:49:12 UTC, 0 replies.
- (ofbiz-framework) 02/08: Fixed: Replace deprecated StringUtils methods with native string operations to resolve compilation warnings - posted by ja...@apache.org on 2026/04/17 14:49:13 UTC, 0 replies.
- (ofbiz-framework) 03/08: Fixed: Update CSVFormat usage to resolve compilation warnings - posted by ja...@apache.org on 2026/04/17 14:49:14 UTC, 0 replies.
- (ofbiz-framework) 04/08: Fixed: Remove deprecated use of AccessController in AuthHelper to resolve compilation warnings - posted by ja...@apache.org on 2026/04/17 14:49:15 UTC, 0 replies.
- (ofbiz-framework) 05/08: Fixed: Update context data handling in OFBizDynamicThresholdFilter to resolve compilation warnings - posted by ja...@apache.org on 2026/04/17 14:49:16 UTC, 0 replies.
- (ofbiz-framework) 06/08: Fixed: Update getValue method in UelUtil to use generics and suppress warnings - posted by ja...@apache.org on 2026/04/17 14:49:17 UTC, 0 replies.
- (ofbiz-framework) 07/08: Fixed: Remove unused imports and method to resolve compilation warnings in NodeELResolver - posted by ja...@apache.org on 2026/04/17 14:49:18 UTC, 0 replies.
- (ofbiz-framework) 08/08: Fixed: Suppress deprecation warning for GenericPrincipal constructor in OFBizRealm - posted by ja...@apache.org on 2026/04/17 14:49:19 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated: Bump org.springframework:spring-web from 6.2.17 to 6.2.18 - posted by ja...@apache.org on 2026/04/17 15:04:13 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/org.springframework-spring-web-6.2.18 deleted (was 0424dc718d) - posted by gi...@apache.org on 2026/04/17 15:04:21 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/org.springframework-spring-test-6.2.18 deleted (was a2881dafd2) - posted by gi...@apache.org on 2026/04/17 15:05:22 UTC, 0 replies.
- (ofbiz-plugins) branch release24.09 updated: Bump typescript from 6.0.2 to 6.0.3 in /example/vite-react-app - posted by ja...@apache.org on 2026/04/17 15:41:27 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/release24.09/typescript-6.0.3 deleted (was 04a086ccd) - posted by gi...@apache.org on 2026/04/17 15:41:37 UTC, 0 replies.
- (ofbiz-framework) branch release24.09 updated (6758dfd784 -> b034fc3392) - posted by ja...@apache.org on 2026/04/17 15:42:16 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/release24.09/com.gradle.common-custom-user-data-gradle-plugin-2.6.0 deleted (was 6f059a7c2c) - posted by gi...@apache.org on 2026/04/17 15:42:27 UTC, 0 replies.
- Buildbot success in on ofbizNextFrameworkRat - posted by bu...@apache.org on 2026/04/17 16:43:03 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated: Improved: No functional change, just adding missing licenses. - posted by jl...@apache.org on 2026/04/18 08:41:04 UTC, 0 replies.
- (ofbiz-plugins) branch trunk updated: Improved: No functional change, just adding missing licenses. - posted by jl...@apache.org on 2026/04/18 08:43:56 UTC, 0 replies.
- (ofbiz-plugins) branch release24.09 updated: Fixed: Add license header to ServiceContextCleanupFilter.java - posted by ja...@apache.org on 2026/04/18 16:14:28 UTC, 0 replies.
- (ofbiz-plugins) branch release24.09 updated: Fixed: Refactor JacksonConfig to use JsonMapper to suppress warnings - posted by ja...@apache.org on 2026/04/18 16:38:11 UTC, 0 replies.
- (ofbiz-framework) branch release24.09 updated (b034fc3392 -> f31511788c) - posted by ja...@apache.org on 2026/04/18 16:39:26 UTC, 0 replies.
- (ofbiz-framework) 01/07: Fixed: Update StartupCommandUtil to fix warning messages for usage of deprecated methods in the org.apache.commons.cli library - posted by ja...@apache.org on 2026/04/18 16:39:27 UTC, 0 replies.
- (ofbiz-framework) 02/07: Fixed: Replace deprecated StringUtils methods with native string operations to resolve compilation warnings - posted by ja...@apache.org on 2026/04/18 16:39:28 UTC, 0 replies.
- (ofbiz-framework) 03/07: Fixed: Update CSVFormat usage to resolve compilation warnings - posted by ja...@apache.org on 2026/04/18 16:39:29 UTC, 0 replies.
- (ofbiz-framework) 04/07: Fixed: Remove deprecated use of AccessController in AuthHelper to resolve compilation warnings - posted by ja...@apache.org on 2026/04/18 16:39:30 UTC, 0 replies.
- (ofbiz-framework) 05/07: Fixed: Update context data handling in OFBizDynamicThresholdFilter to resolve compilation warnings - posted by ja...@apache.org on 2026/04/18 16:39:31 UTC, 0 replies.
- (ofbiz-framework) 06/07: Improved: getFields() in AcroFields has been deprecated (OFBIZ-13312) - posted by ja...@apache.org on 2026/04/18 16:39:32 UTC, 0 replies.
- (ofbiz-framework) 07/07: Fixed: Update import statement for GroovyTestCase to resolve compilation warnings - posted by ja...@apache.org on 2026/04/18 16:39:33 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated (b675bb7b6d -> 0a2085cb55) - posted by ja...@apache.org on 2026/04/20 08:43:08 UTC, 0 replies.
- (ofbiz-framework) 01/04: Fixed: Remove support for serialization and deserialization of custom Java objects in XmlSerializer for security reasons - posted by ja...@apache.org on 2026/04/20 08:43:09 UTC, 0 replies.
- (ofbiz-framework) 02/04: Fixed: Prevent deserialization of untrusted data in JMS listener - Restrict XStream allowlist in UtilXml to the exact types handled by XmlSerializer.serializeSingle - Replace the broad java..* and org.apache.ofbiz..* wildcards in SafeObjectInputStream with an explicit minimal allowlist of the same safe types - Move the isExport() authorization check before XmlSerializer.deserialize in AbstractJmsListener.runService so gadget chains cannot fire for non-exported or unknown services - posted by ja...@apache.org on 2026/04/20 08:43:10 UTC, 0 replies.
- (ofbiz-framework) 03/04: Fixed: Remove references to the no more used 'sun.util.calendar.*' package from (commented out) JVM argument and from serialization allow list - posted by ja...@apache.org on 2026/04/20 08:43:11 UTC, 0 replies.
- (ofbiz-framework) 04/04: Fixed: Extend allowlist in SafeObjectInputStream to include GString* Groovy classes - posted by ja...@apache.org on 2026/04/20 08:43:12 UTC, 0 replies.
- (ofbiz-plugins) branch release24.09 updated: Fixed: jsgantt-improved bloks qs.js update (OFBIZ-13339) - posted by jl...@apache.org on 2026/04/20 15:33:52 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/release24.09/org.apache.ant-ant-junit-1.10.17 created (now 4cfe3dc150) - posted by gi...@apache.org on 2026/04/20 16:03:25 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated (0a2085cb55 -> 23dd3f9a1f) - posted by ja...@apache.org on 2026/04/20 16:30:40 UTC, 0 replies.
- (ofbiz-framework) 01/04: Fixed: Escape username in DN template - posted by ja...@apache.org on 2026/04/20 16:30:41 UTC, 0 replies.
- (ofbiz-framework) 02/04: Fixed: Replace ObjectInputStream with SafeObjectInputStream for safer JDBC object deserialization - posted by ja...@apache.org on 2026/04/20 16:30:42 UTC, 0 replies.
- (ofbiz-framework) 03/04: Fixed: Enhance parsing security by disabling external entity resolution - posted by ja...@apache.org on 2026/04/20 16:30:43 UTC, 0 replies.
- (ofbiz-framework) 04/04: Fixed: Implement path traversal protection in OutputServices - posted by ja...@apache.org on 2026/04/20 16:30:44 UTC, 0 replies.
- (ofbiz-plugins) branch trunk updated: Add npm configuration for release24.09 for projectmgr to dependabot.yml for daily updates - posted by ja...@apache.org on 2026/04/20 16:48:03 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/vite-8.0.9 created (now b128afbf5) - posted by gi...@apache.org on 2026/04/20 16:49:09 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/release24.09/vite-8.0.9 created (now 134201e86) - posted by gi...@apache.org on 2026/04/20 16:49:18 UTC, 0 replies.
- (ofbiz-plugins) branch trunk updated: Bump vite from 8.0.8 to 8.0.9 in /example/vite-react-app - posted by ja...@apache.org on 2026/04/20 17:07:59 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/vite-8.0.9 deleted (was b128afbf5) - posted by gi...@apache.org on 2026/04/20 17:08:09 UTC, 0 replies.
- (ofbiz-plugins) branch release24.09 updated: Bump vite from 8.0.8 to 8.0.9 in /example/vite-react-app - posted by ja...@apache.org on 2026/04/20 17:08:20 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/release24.09/vite-8.0.9 deleted (was 134201e86) - posted by gi...@apache.org on 2026/04/20 17:08:31 UTC, 0 replies.
- (ofbiz-framework) branch release24.09 updated: Bump org.apache.ant:ant-junit from 1.10.15 to 1.10.17 - posted by ja...@apache.org on 2026/04/20 17:11:14 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/release24.09/org.apache.ant-ant-junit-1.10.17 deleted (was 4cfe3dc150) - posted by gi...@apache.org on 2026/04/20 17:11:26 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/release24.09/org.apache.derby-derbytools-10.17.1.0 created (now 8d25d3c338) - posted by gi...@apache.org on 2026/04/21 13:48:56 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/com.auth0-jwks-rsa-0.23.1 created (now e1912a5f60) - posted by gi...@apache.org on 2026/04/21 13:49:03 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/release24.09/org.apache.derby-derbytools-10.17.1.0 deleted (was 8d25d3c338) - posted by gi...@apache.org on 2026/04/21 14:53:53 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated: Bump com.auth0:jwks-rsa from 0.23.0 to 0.23.1 - posted by ja...@apache.org on 2026/04/22 08:29:48 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/com.auth0-jwks-rsa-0.23.1 deleted (was e1912a5f60) - posted by gi...@apache.org on 2026/04/22 08:29:57 UTC, 0 replies.
- (ofbiz-framework) branch release24.09 updated (397af6a3fe -> 3ddc59666f) - posted by ja...@apache.org on 2026/04/22 13:12:10 UTC, 0 replies.
- (ofbiz-framework) 01/08: Fixed: Remove support for serialization and deserialization of custom Java objects in XmlSerializer for security reasons - posted by ja...@apache.org on 2026/04/22 13:12:11 UTC, 0 replies.
- (ofbiz-framework) 02/08: Fixed: Prevent deserialization of untrusted data in JMS listener - Restrict XStream allowlist in UtilXml to the exact types handled by XmlSerializer.serializeSingle - Replace the broad java..* and org.apache.ofbiz..* wildcards in SafeObjectInputStream with an explicit minimal allowlist of the same safe types - Move the isExport() authorization check before XmlSerializer.deserialize in AbstractJmsListener.runService so gadget chains cannot fire for non-exported or unknown services - posted by ja...@apache.org on 2026/04/22 13:12:12 UTC, 0 replies.
- (ofbiz-framework) 03/08: Fixed: Remove references to the no more used 'sun.util.calendar.*' package from (commented out) JVM argument and from serialization allow list - posted by ja...@apache.org on 2026/04/22 13:12:13 UTC, 0 replies.
- (ofbiz-framework) 04/08: Fixed: Extend allowlist in SafeObjectInputStream to include GString* Groovy classes - posted by ja...@apache.org on 2026/04/22 13:12:14 UTC, 0 replies.
- (ofbiz-framework) 05/08: Fixed: Escape username in DN template - posted by ja...@apache.org on 2026/04/22 13:12:15 UTC, 0 replies.
- (ofbiz-framework) 06/08: Fixed: Replace ObjectInputStream with SafeObjectInputStream for safer JDBC object deserialization - posted by ja...@apache.org on 2026/04/22 13:12:16 UTC, 0 replies.
- (ofbiz-framework) 07/08: Fixed: Enhance parsing security by disabling external entity resolution - posted by ja...@apache.org on 2026/04/22 13:12:17 UTC, 0 replies.
- (ofbiz-framework) 08/08: Fixed: Implement path traversal protection in OutputServices - posted by ja...@apache.org on 2026/04/22 13:12:18 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/npm_and_yarn/themes/common-theme/webapp/common-theme/js/dompurify-3.4.1 created (now 4d46bc595d) - posted by gi...@apache.org on 2026/04/22 13:33:27 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/npm_and_yarn/themes/common-theme/webapp/common-theme/js/release24.09/dompurify-3.4.1 created (now 4a22b8d298) - posted by gi...@apache.org on 2026/04/22 13:38:40 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/npm_and_yarn/themes/common-theme/webapp/common-theme/js/release24.09/dompurify-3.4.0 deleted (was aac6b8e332) - posted by gi...@apache.org on 2026/04/22 13:38:46 UTC, 0 replies.
- (ofbiz-framework) branch revert-1053-dependabot/github_actions/docker/login-action-4.1.0 deleted (was 453d427f45) - posted by ja...@apache.org on 2026/04/23 12:40:25 UTC, 0 replies.
- (ofbiz-framework) branch revert-1035-dependabot/github_actions/github/codeql-action-4.35.0 deleted (was 9b3d6ba2eb) - posted by ja...@apache.org on 2026/04/23 12:40:31 UTC, 0 replies.
- (ofbiz-framework) branch revert-845-OFBIZ-13168 deleted (was 30a59ba22d) - posted by ja...@apache.org on 2026/04/23 12:41:54 UTC, 0 replies.
- (ofbiz-framework) branch revert-846-revert-845-OFBIZ-13168 deleted (was d6ab0417ac) - posted by ja...@apache.org on 2026/04/23 12:42:03 UTC, 0 replies.
- (ofbiz-framework) branch PierreSmits-OFBIZ-13048 deleted (was 6b57e35dbc) - posted by ja...@apache.org on 2026/04/23 12:46:59 UTC, 0 replies.
- (ofbiz-framework) branch CharlesNereide-seo-improvements deleted (was d272bbf512) - posted by ja...@apache.org on 2026/04/23 12:47:05 UTC, 0 replies.
- (ofbiz-framework) branch OFBIZ-12308-split-util deleted (was 292274c4d3) - posted by ja...@apache.org on 2026/04/23 12:49:14 UTC, 0 replies.
- (ofbiz-plugins) branch test18.12.17 deleted (was 18f011d64) - posted by ja...@apache.org on 2026/04/23 13:36:50 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/vite-8.0.10 created (now 6aff1b6ca) - posted by gi...@apache.org on 2026/04/24 03:53:21 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/release24.09/vite-8.0.10 created (now 515ba9a70) - posted by gi...@apache.org on 2026/04/24 03:56:14 UTC, 0 replies.
- (ofbiz-plugins) branch trunk updated: Bump vite from 8.0.9 to 8.0.10 in /example/vite-react-app - posted by ja...@apache.org on 2026/04/24 06:47:37 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/vite-8.0.10 deleted (was 6aff1b6ca) - posted by gi...@apache.org on 2026/04/24 06:47:47 UTC, 0 replies.
- (ofbiz-plugins) branch release24.09 updated: Bump vite from 8.0.9 to 8.0.10 in /example/vite-react-app - posted by ja...@apache.org on 2026/04/24 06:49:35 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/npm_and_yarn/example/vite-react-app/release24.09/vite-8.0.10 deleted (was 515ba9a70) - posted by gi...@apache.org on 2026/04/24 06:49:45 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/release24.09/org.mustangproject-library-2.23.0 created (now 890c496da6) - posted by gi...@apache.org on 2026/04/24 13:38:18 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/release24.09/org.mustangproject-library-2.22.0 deleted (was 1dee61c679) - posted by gi...@apache.org on 2026/04/24 13:38:22 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/org.mustangproject-library-2.23.0 created (now 4aac36f968) - posted by gi...@apache.org on 2026/04/24 13:38:31 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated: Improved: Update allowed local file paths to enhance security - posted by ja...@apache.org on 2026/04/27 10:04:40 UTC, 0 replies.
- (ofbiz-framework) branch release24.09 updated: Improved: Update allowed local file paths to enhance security - posted by ja...@apache.org on 2026/04/27 10:26:31 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated (f82bca8c8a -> 618de331c1) - posted by ja...@apache.org on 2026/04/27 15:39:07 UTC, 0 replies.
- (ofbiz-framework) 01/02: Reverted: commit 6e8d8620ac - posted by ja...@apache.org on 2026/04/27 15:39:08 UTC, 0 replies.
- (ofbiz-framework) 02/02: Fixed: Enhance XML processing security by disabling external entity resolution across multiple classes - posted by ja...@apache.org on 2026/04/27 15:39:09 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/npm_and_yarn/themes/common-theme/webapp/common-theme/js/moment-timezone-0.6.2 created (now 6163e5e012) - posted by gi...@apache.org on 2026/04/27 17:14:24 UTC, 0 replies.
- (ofbiz-framework) branch release24.09 updated (a9a3237fe9 -> 86c6f3a4f4) - posted by ja...@apache.org on 2026/04/27 18:35:59 UTC, 0 replies.
- (ofbiz-framework) 01/03: Reverted: commit 6e8d8620ac - posted by ja...@apache.org on 2026/04/27 18:36:00 UTC, 0 replies.
- (ofbiz-framework) 02/03: Fixed: Enhance XML processing security by disabling external entity resolution across multiple classes - posted by ja...@apache.org on 2026/04/27 18:36:01 UTC, 0 replies.
- (ofbiz-framework) 03/03: Fixed: Wrap setAttribute(ACCESS_EXTERNAL_DTD, ...) calls to catch IllegalArgumentException thrown by older versions of Xalan/Saxon that predate JAXP 1.5 - posted by ja...@apache.org on 2026/04/27 18:36:02 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated: Bump dompurify in /themes/common-theme/webapp/common-theme/js - posted by ja...@apache.org on 2026/04/27 19:18:06 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/npm_and_yarn/themes/common-theme/webapp/common-theme/js/dompurify-3.4.1 deleted (was 4d46bc595d) - posted by gi...@apache.org on 2026/04/27 19:18:16 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated: Bump moment-timezone in /themes/common-theme/webapp/common-theme/js - posted by ja...@apache.org on 2026/04/27 19:20:11 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/npm_and_yarn/themes/common-theme/webapp/common-theme/js/moment-timezone-0.6.2 deleted (was 6163e5e012) - posted by gi...@apache.org on 2026/04/27 19:20:21 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated: Fixed: Update badge links in README.md (#1141) - posted by jl...@apache.org on 2026/04/28 11:34:02 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated: Fixed: Canceling an item from the order view and refreshing the page caused promotional items to endlessly duplicate in the ITEM_CREATED status. (#1142) - posted by ar...@apache.org on 2026/04/28 12:37:17 UTC, 1 replies.
- (ofbiz-framework) branch release24.09 updated: Fixed issue in reCreateOrderAdjustment service on adding promo item after cancel order item request. (#1137) - posted by ar...@apache.org on 2026/04/28 12:37:43 UTC, 0 replies.
- (ofbiz-framework) branch release24.09 updated: Fixed: we mostly no longer use yaml files, notably for gradle.yml - posted by jl...@apache.org on 2026/04/28 13:08:36 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/gradle/rest-api/io.swagger.core.v3-swagger-jaxrs2-servlet-initializer-2.2.49 created (now 5bdec16f7) - posted by gi...@apache.org on 2026/04/29 03:56:01 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/gradle/rest-api/release24.09/io.swagger.core.v3-swagger-jaxrs2-2.2.49 created (now 9cd16eb8f) - posted by gi...@apache.org on 2026/04/29 03:56:10 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/gradle/rest-api/release24.09/io.swagger.core.v3-swagger-jaxrs2-servlet-initializer-2.2.49 created (now c624e97e5) - posted by gi...@apache.org on 2026/04/29 03:56:16 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/gradle/rest-api/io.swagger.core.v3-swagger-jaxrs2-2.2.49 created (now 394a576ae) - posted by gi...@apache.org on 2026/04/29 03:56:19 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/gradle/rest-api/release24.09/io.swagger.core.v3-swagger-annotations-2.2.49 created (now f641a287d) - posted by gi...@apache.org on 2026/04/29 03:56:22 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/gradle/rest-api/io.swagger.core.v3-swagger-annotations-2.2.49 created (now 4240d17f3) - posted by gi...@apache.org on 2026/04/29 03:56:29 UTC, 0 replies.
- (ofbiz-plugins) branch trunk updated: Bump io.swagger.core.v3:swagger-jaxrs2 in /rest-api - posted by ja...@apache.org on 2026/04/29 08:08:48 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/gradle/rest-api/io.swagger.core.v3-swagger-jaxrs2-2.2.49 deleted (was 394a576ae) - posted by gi...@apache.org on 2026/04/29 08:08:58 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/gradle/rest-api/io.swagger.core.v3-swagger-jaxrs2-servlet-initializer-2.2.49 deleted (was 5bdec16f7) - posted by gi...@apache.org on 2026/04/29 08:09:54 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/gradle/rest-api/io.swagger.core.v3-swagger-annotations-2.2.49 deleted (was 4240d17f3) - posted by gi...@apache.org on 2026/04/29 08:10:00 UTC, 0 replies.
- (ofbiz-plugins) branch release24.09 updated: Bump io.swagger.core.v3:swagger-jaxrs2 in /rest-api - posted by ja...@apache.org on 2026/04/29 10:08:23 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/gradle/rest-api/release24.09/io.swagger.core.v3-swagger-jaxrs2-2.2.49 deleted (was 9cd16eb8f) - posted by gi...@apache.org on 2026/04/29 10:08:33 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/gradle/rest-api/release24.09/io.swagger.core.v3-swagger-jaxrs2-servlet-initializer-2.2.49 deleted (was c624e97e5) - posted by gi...@apache.org on 2026/04/29 10:09:27 UTC, 0 replies.
- (ofbiz-plugins) branch dependabot/gradle/rest-api/release24.09/io.swagger.core.v3-swagger-annotations-2.2.49 deleted (was f641a287d) - posted by gi...@apache.org on 2026/04/29 10:09:34 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/release24.09/com.fasterxml.jackson.core-jackson-databind-2.21.3 created (now 7266ba9b61) - posted by gi...@apache.org on 2026/04/29 13:40:04 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/com.auth0-java-jwt-4.5.2 created (now 97e9499823) - posted by gi...@apache.org on 2026/04/29 13:40:58 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/com.fasterxml.jackson.core-jackson-databind-2.21.3 created (now a16ce35656) - posted by gi...@apache.org on 2026/04/29 13:42:15 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated: Bump com.fasterxml.jackson.core:jackson-databind from 2.21.2 to 2.21.3 - posted by ja...@apache.org on 2026/04/29 15:37:29 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/com.fasterxml.jackson.core-jackson-databind-2.21.3 deleted (was a16ce35656) - posted by gi...@apache.org on 2026/04/29 15:37:40 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/com.auth0-java-jwt-4.5.2 updated (97e9499823 -> f4c4855a9c) - posted by gi...@apache.org on 2026/04/29 15:58:00 UTC, 0 replies.
- (ofbiz-framework) branch trunk updated: Bump com.auth0:java-jwt from 4.5.1 to 4.5.2 - posted by ja...@apache.org on 2026/04/29 16:20:25 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/com.auth0-java-jwt-4.5.2 deleted (was f4c4855a9c) - posted by gi...@apache.org on 2026/04/29 16:20:36 UTC, 0 replies.
- (ofbiz-framework) branch release24.09 updated: Bump com.fasterxml.jackson.core:jackson-databind from 2.21.2 to 2.21.3 - posted by ja...@apache.org on 2026/04/29 16:33:32 UTC, 0 replies.
- (ofbiz-framework) branch dependabot/gradle/release24.09/com.fasterxml.jackson.core-jackson-databind-2.21.3 deleted (was 7266ba9b61) - posted by gi...@apache.org on 2026/04/29 16:33:42 UTC, 0 replies.
- (ofbiz-plugins) branch trunk updated (a3e2ffd68 -> 589dd4d91) - posted by ja...@apache.org on 2026/04/30 08:21:58 UTC, 0 replies.
- (ofbiz-plugins) 01/04: Improved: Remove old elrte editor, replace with plain