You are viewing a plain text version of this content. The canonical link for it is here.
- (shiro) branch 3.x updated: enh: destroy existing session upon login - posted by lp...@apache.org on 2026/05/01 00:08:00 UTC, 0 replies.
- (shiro) branch main updated (be89663a1 -> 93961833b) - posted by lp...@apache.org on 2026/05/01 00:51:51 UTC, 0 replies.
- (shiro) 01/02: enh: destroy existing session upon login - posted by lp...@apache.org on 2026/05/01 00:51:52 UTC, 0 replies.
- (shiro) 02/02: chore: fixed deprecated methods in Hasher - posted by lp...@apache.org on 2026/05/01 00:51:53 UTC, 0 replies.
- (shiro) branch 3.x updated (adbbfe664 -> 6d57285d0) - posted by lp...@apache.org on 2026/05/01 00:56:49 UTC, 0 replies.
- (shiro) 01/01: Merge branch 'main' into 3.x - posted by lp...@apache.org on 2026/05/01 00:56:50 UTC, 10 replies.
- Re: [PR] chore(deps): bump https://github.com/oxipng/oxipng from v10.1.0 to 10.1.1 in the pre-commit-hooks group [shiro] - posted by "lprimak (via GitHub)" <gi...@apache.org> on 2026/05/01 00:57:48 UTC, 0 replies.
- (shiro) branch main updated: chore(deps): bump https://github.com/oxipng/oxipng (#2676) - posted by lp...@apache.org on 2026/05/01 00:57:52 UTC, 0 replies.
- (shiro) branch dependabot/pre_commit/pre-commit-hooks-4c01ccd002 deleted (was f1e9e584b) - posted by gi...@apache.org on 2026/05/01 00:57:57 UTC, 0 replies.
- (shiro) branch 3.x updated (6d57285d0 -> aa79e6a72) - posted by lp...@apache.org on 2026/05/01 00:58:24 UTC, 0 replies.
- (shiro-site) branch main updated: enh: document secure session cookie configuration for Jakarta EE - posted by lp...@apache.org on 2026/05/01 04:27:14 UTC, 0 replies.
- (shiro) branch main updated: enh(jakarta-ee): added secure configuration for session cookies automatically - posted by lp...@apache.org on 2026/05/01 04:29:30 UTC, 0 replies.
- (shiro) branch 3.x updated (aa79e6a72 -> a92a29ac7) - posted by lp...@apache.org on 2026/05/01 04:29:50 UTC, 0 replies.
- (shiro-site) branch asf-site updated: enh: content 5/1/2026 - posted by lp...@apache.org on 2026/05/01 17:55:59 UTC, 0 replies.
- (shiro-site) branch main updated: fix: download button color visibility - posted by lp...@apache.org on 2026/05/01 18:04:17 UTC, 0 replies.
- (shiro-site) branch asf-site updated: fixed d/l button visibility - posted by lp...@apache.org on 2026/05/01 18:04:38 UTC, 0 replies.
- (shiro) branch dependabot/maven/1.13.x/com.google.guava-guava-33.6.0-jre created (now 2aa974aca) - posted by gi...@apache.org on 2026/05/01 21:08:20 UTC, 0 replies.
- [PR] chore(deps): bump com.google.guava:guava from 33.5.0-jre to 33.6.0-jre [shiro] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/01 21:08:20 UTC, 1 replies.
- [PR] chore(deps-dev): bump jakarta.servlet.jsp:jakarta.servlet.jsp-api from 3.0.0 to 3.1.1 [shiro] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/01 21:08:36 UTC, 2 replies.
- (shiro) branch dependabot/maven/1.13.x/jakarta.servlet.jsp-jakarta.servlet.jsp-api-3.1.1 created (now 817edfbfc) - posted by gi...@apache.org on 2026/05/01 21:08:41 UTC, 0 replies.
- [PR] chore(deps-dev): bump org.apache.maven.plugins:maven-invoker-plugin from 3.9.1 to 3.10.0 [shiro] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/01 21:08:54 UTC, 1 replies.
- [PR] chore(deps): bump org.bouncycastle:bcprov-jdk18on from 1.83 to 1.84 [shiro] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/01 21:08:59 UTC, 1 replies.
- (shiro) branch dependabot/maven/1.13.x/org.apache.maven.plugins-maven-invoker-plugin-3.10.0 created (now da20e013c) - posted by gi...@apache.org on 2026/05/01 21:09:00 UTC, 0 replies.
- (shiro) branch dependabot/maven/1.13.x/org.bouncycastle-bcprov-jdk18on-1.84 created (now 340507e66) - posted by gi...@apache.org on 2026/05/01 21:09:06 UTC, 0 replies.
- [PR] chore(deps): bump org.apache.karaf.features:framework from 4.4.10 to 4.4.11 [shiro] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/01 21:09:07 UTC, 4 replies.
- (shiro) branch dependabot/maven/1.13.x/org.apache.karaf.features-framework-4.4.11 created (now 5d29d1f73) - posted by gi...@apache.org on 2026/05/01 21:09:13 UTC, 0 replies.
- [PR] chore(deps): bump org.owasp:dependency-check-maven from 12.2.0 to 12.2.1 [shiro] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/01 21:09:29 UTC, 1 replies.
- (shiro) branch dependabot/maven/1.13.x/org.owasp-dependency-check-maven-12.2.1 created (now da2524c57) - posted by gi...@apache.org on 2026/05/01 21:09:33 UTC, 0 replies.
- [PR] chore(deps-dev): bump tomcat.version from 10.0.27 to 11.0.21 [shiro] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/01 21:09:40 UTC, 2 replies.
- [PR] chore(deps): bump org.apache.commons:commons-configuration2 from 2.13.0 to 2.14.0 [shiro] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/01 21:09:44 UTC, 1 replies.
- (shiro) branch dependabot/maven/1.13.x/tomcat.version-11.0.21 created (now bf184f460) - posted by gi...@apache.org on 2026/05/01 21:09:44 UTC, 0 replies.
- [PR] chore(deps): bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.18.5 to 0.25.6 [shiro] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/01 21:09:50 UTC, 2 replies.
- (shiro) branch dependabot/maven/1.13.x/org.apache.commons-commons-configuration2-2.14.0 created (now 60be2ee5e) - posted by gi...@apache.org on 2026/05/01 21:09:51 UTC, 0 replies.
- [PR] chore(deps): bump commons-codec:commons-codec from 1.21.0 to 1.22.0 [shiro] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/01 21:09:57 UTC, 1 replies.
- (shiro) branch dependabot/maven/1.13.x/com.github.siom79.japicmp-japicmp-maven-plugin-0.25.6 created (now 36747cc10) - posted by gi...@apache.org on 2026/05/01 21:09:57 UTC, 0 replies.
- (shiro) branch dependabot/maven/1.13.x/commons-codec-commons-codec-1.22.0 created (now 85a51f742) - posted by gi...@apache.org on 2026/05/01 21:10:00 UTC, 0 replies.
- (shiro) branch dependabot/maven/1.13.x/com.github.siom79.japicmp-japicmp-maven-plugin-0.25.6 deleted (was 36747cc10) - posted by gi...@apache.org on 2026/05/01 21:39:38 UTC, 0 replies.
- (shiro) branch dependabot/maven/1.13.x/tomcat.version-11.0.21 deleted (was bf184f460) - posted by gi...@apache.org on 2026/05/01 21:39:50 UTC, 0 replies.
- (shiro) branch dependabot/maven/1.13.x/jakarta.servlet.jsp-jakarta.servlet.jsp-api-3.1.1 deleted (was 817edfbfc) - posted by gi...@apache.org on 2026/05/01 21:42:02 UTC, 0 replies.
- (shiro) branch dependabot/maven/1.13.x/org.apache.karaf.features-framework-4.4.11 deleted (was 5d29d1f73) - posted by gi...@apache.org on 2026/05/01 21:42:39 UTC, 0 replies.
- [PR] [CI] Add ASF Allowlist Check workflow [shiro] - posted by "jbampton (via GitHub)" <gi...@apache.org> on 2026/05/02 08:18:21 UTC, 1 replies.
- (shiro) branch 1.13.x updated: chore(deps): bump com.google.guava:guava from 33.5.0-jre to 33.6.0-jre (#2677) - posted by lp...@apache.org on 2026/05/02 21:33:07 UTC, 0 replies.
- (shiro) branch dependabot/maven/1.13.x/com.google.guava-guava-33.6.0-jre deleted (was 2aa974aca) - posted by gi...@apache.org on 2026/05/02 21:33:14 UTC, 0 replies.
- (shiro) branch 1.13.x updated: chore(deps-dev): bump org.apache.maven.plugins:maven-invoker-plugin (#2679) - posted by lp...@apache.org on 2026/05/02 21:33:24 UTC, 0 replies.
- (shiro) branch dependabot/maven/1.13.x/org.apache.maven.plugins-maven-invoker-plugin-3.10.0 deleted (was da20e013c) - posted by gi...@apache.org on 2026/05/02 21:33:31 UTC, 0 replies.
- (shiro) branch 1.13.x updated: chore(deps): bump org.bouncycastle:bcprov-jdk18on from 1.83 to 1.84 (#2680) - posted by lp...@apache.org on 2026/05/02 21:33:48 UTC, 0 replies.
- (shiro) branch dependabot/maven/1.13.x/org.bouncycastle-bcprov-jdk18on-1.84 deleted (was 340507e66) - posted by gi...@apache.org on 2026/05/02 21:33:53 UTC, 0 replies.
- (shiro) branch 1.13.x updated: chore(deps): bump org.owasp:dependency-check-maven from 12.2.0 to 12.2.1 (#2682) - posted by lp...@apache.org on 2026/05/02 21:34:03 UTC, 0 replies.
- (shiro) branch dependabot/maven/1.13.x/org.owasp-dependency-check-maven-12.2.1 deleted (was da2524c57) - posted by gi...@apache.org on 2026/05/02 21:34:09 UTC, 0 replies.
- (shiro) branch 1.13.x updated: chore(deps): bump commons-codec:commons-codec from 1.21.0 to 1.22.0 (#2686) - posted by lp...@apache.org on 2026/05/02 21:34:25 UTC, 0 replies.
- (shiro) branch dependabot/maven/1.13.x/commons-codec-commons-codec-1.22.0 deleted (was 85a51f742) - posted by gi...@apache.org on 2026/05/02 21:34:36 UTC, 0 replies.
- (shiro) branch 1.13.x updated: chore(deps): bump org.apache.commons:commons-configuration2 (#2684) - posted by lp...@apache.org on 2026/05/02 21:41:10 UTC, 0 replies.
- (shiro) branch dependabot/maven/1.13.x/org.apache.commons-commons-configuration2-2.14.0 deleted (was 60be2ee5e) - posted by gi...@apache.org on 2026/05/02 21:41:17 UTC, 0 replies.
- (shiro) branch main updated: [CI] Add ASF Allowlist Check workflow (#2687) - posted by lp...@apache.org on 2026/05/02 21:41:26 UTC, 0 replies.
- (shiro) branch 3.x updated (a92a29ac7 -> 29ac8399c) - posted by lp...@apache.org on 2026/05/02 21:43:52 UTC, 0 replies.
- (shiro) branch main updated: enh: reverted secureInDevMode addition and added native session management secure cookie Secure session and rememberMe cookies are turned off is the initial request that created them is insecure - posted by lp...@apache.org on 2026/05/03 05:00:21 UTC, 0 replies.
- (shiro) branch 3.x updated (29ac8399c -> 4479d4f68) - posted by lp...@apache.org on 2026/05/03 05:00:42 UTC, 0 replies.
- [PR] chore(deps): bump com.puppycrawl.tools:checkstyle from 10.26.1 to 13.4.2 [shiro] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/05 18:14:16 UTC, 2 replies.
- (shiro) branch dependabot/maven/com.puppycrawl.tools-checkstyle-13.4.2 created (now 0acc975c1) - posted by gi...@apache.org on 2026/05/05 18:14:21 UTC, 0 replies.
- [PR] chore(deps): bump github/codeql-action from 4.35.2 to 4.35.3 in the github-actions-dependencies group [shiro] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/05 18:14:34 UTC, 1 replies.
- (shiro) branch dependabot/github_actions/github-actions-dependencies-937d73b4db created (now 0cc8c1a70) - posted by gi...@apache.org on 2026/05/05 18:14:36 UTC, 0 replies.
- [PR] chore(deps): bump tomcat.version from 9.0.113 to 11.0.22 [shiro] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/05 18:14:38 UTC, 5 replies.
- (shiro) branch dependabot/maven/tomcat.version-11.0.22 created (now 0c2bc0468) - posted by gi...@apache.org on 2026/05/05 18:14:46 UTC, 0 replies.
- (shiro) branch dependabot/maven/org.apache.karaf.features-framework-4.4.11 created (now 05a915f01) - posted by gi...@apache.org on 2026/05/05 18:15:22 UTC, 0 replies.
- [PR] chore(deps): bump org.owasp:dependency-check-maven from 12.2.1 to 12.2.2 [shiro] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/05 18:15:36 UTC, 1 replies.
- (shiro) branch dependabot/maven/org.owasp-dependency-check-maven-12.2.2 created (now 4cb75d9f8) - posted by gi...@apache.org on 2026/05/05 18:15:40 UTC, 0 replies.
- (shiro) branch dependabot/maven/tomcat.version-11.0.22 deleted (was 0c2bc0468) - posted by gi...@apache.org on 2026/05/05 19:45:57 UTC, 0 replies.
- (shiro) branch dependabot/maven/com.puppycrawl.tools-checkstyle-13.4.2 deleted (was 0acc975c1) - posted by gi...@apache.org on 2026/05/05 19:46:06 UTC, 0 replies.
- (shiro) branch main updated (c95a185e6 -> 5ab9e46bc) - posted by fp...@apache.org on 2026/05/05 19:52:40 UTC, 0 replies.
- (shiro) 01/01: Merge pull request #2692 from apache/dependabot/maven/org.owasp-dependency-check-maven-12.2.2 - posted by fp...@apache.org on 2026/05/05 19:52:41 UTC, 0 replies.
- (shiro) branch dependabot/maven/org.owasp-dependency-check-maven-12.2.2 deleted (was 4cb75d9f8) - posted by gi...@apache.org on 2026/05/05 19:52:48 UTC, 0 replies.
- (shiro) branch main updated (5ab9e46bc -> d6246a062) - posted by fp...@apache.org on 2026/05/06 06:45:20 UTC, 0 replies.
- (shiro) 01/01: Merge pull request #2691 from apache/dependabot/maven/org.apache.karaf.features-framework-4.4.11 - posted by fp...@apache.org on 2026/05/06 06:45:21 UTC, 0 replies.
- (shiro) branch dependabot/maven/org.apache.karaf.features-framework-4.4.11 deleted (was 05a915f01) - posted by fp...@apache.org on 2026/05/06 06:45:27 UTC, 0 replies.
- (shiro) branch main updated (d6246a062 -> 97218c0d8) - posted by fp...@apache.org on 2026/05/06 06:45:41 UTC, 0 replies.
- (shiro) 01/01: Merge pull request #2689 from apache/dependabot/github_actions/github-actions-dependencies-937d73b4db - posted by fp...@apache.org on 2026/05/06 06:45:42 UTC, 0 replies.
- (shiro) branch dependabot/github_actions/github-actions-dependencies-937d73b4db deleted (was 0cc8c1a70) - posted by gi...@apache.org on 2026/05/06 06:45:51 UTC, 0 replies.
- (shiro) branch 3.x updated (4479d4f68 -> 561ed3310) - posted by lp...@apache.org on 2026/05/06 19:38:29 UTC, 0 replies.
- (shiro) branch main updated: enh(jakarta-ee): encrypt SAVED_REQUEST_KEY cookie - posted by lp...@apache.org on 2026/05/06 22:21:43 UTC, 0 replies.
- (shiro) branch 3.x updated (561ed3310 -> 3ed505231) - posted by lp...@apache.org on 2026/05/06 22:22:55 UTC, 0 replies.
- (shiro) branch main updated: improvement: implemented session key rotation via changeSessionId() in Web-Container mode only - posted by lp...@apache.org on 2026/05/07 01:00:11 UTC, 0 replies.
- (shiro) branch 3.x updated (3ed505231 -> d67372fd3) - posted by lp...@apache.org on 2026/05/07 01:00:57 UTC, 0 replies.
- (shiro) branch main updated: chore: remove extra newline - posted by lp...@apache.org on 2026/05/07 01:03:14 UTC, 0 replies.
- (shiro) branch 3.x updated (d67372fd3 -> 6ae355c1e) - posted by lp...@apache.org on 2026/05/07 01:03:29 UTC, 0 replies.
- (shiro-site) branch dependabot/maven/org.apache-apache-38 created (now 5882d4697) - posted by gi...@apache.org on 2026/05/11 12:47:07 UTC, 0 replies.
- (shiro-site) branch main updated: build(deps): bump org.apache:apache from 37 to 38 (#301) - posted by lp...@apache.org on 2026/05/11 16:02:10 UTC, 0 replies.
- (shiro-site) branch dependabot/maven/org.apache-apache-38 deleted (was 5882d4697) - posted by gi...@apache.org on 2026/05/11 16:02:19 UTC, 0 replies.
- [PR] chore(deps): bump groovy.version from 4.0.27 to 5.0.6 [shiro] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/12 22:25:11 UTC, 2 replies.
- (shiro) branch dependabot/maven/groovy.version-5.0.6 created (now cc6c252fa) - posted by gi...@apache.org on 2026/05/12 22:25:15 UTC, 0 replies.
- [PR] chore(deps): bump slf4j.version from 2.0.17 to 2.0.18 [shiro] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/12 22:25:42 UTC, 1 replies.
- (shiro) branch dependabot/maven/slf4j.version-2.0.18 created (now 7cd0b1c43) - posted by gi...@apache.org on 2026/05/12 22:25:46 UTC, 0 replies.
- [PR] chore(deps): bump the github-actions-dependencies group with 3 updates [shiro] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/12 22:26:02 UTC, 2 replies.
- (shiro) branch dependabot/github_actions/github-actions-dependencies-10fd86e523 created (now ebb1d2fb4) - posted by gi...@apache.org on 2026/05/12 22:26:06 UTC, 0 replies.
- (shiro) branch dependabot/maven/tomcat.version-11.0.22 created (now 325d3e273) - posted by gi...@apache.org on 2026/05/12 22:26:09 UTC, 0 replies.
- [PR] chore(deps): bump log4j.version from 2.25.4 to 2.26.0 [shiro] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/12 22:26:36 UTC, 1 replies.
- [PR] chore(deps): bump org.apache.johnzon:johnzon-jsonb from 1.2.22 to 1.3.0 [shiro] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/12 22:26:40 UTC, 1 replies.
- (shiro) branch dependabot/maven/log4j.version-2.26.0 created (now 3aa88c433) - posted by gi...@apache.org on 2026/05/12 22:26:41 UTC, 0 replies.
- (shiro) branch dependabot/maven/org.apache.johnzon-johnzon-jsonb-1.3.0 created (now 36aa07673) - posted by gi...@apache.org on 2026/05/12 22:26:48 UTC, 0 replies.
- [PR] chore(deps): bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.25.6 to 0.25.7 [shiro] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/12 22:27:09 UTC, 1 replies.
- (shiro) branch dependabot/maven/com.github.siom79.japicmp-japicmp-maven-plugin-0.25.7 created (now 5f13983cc) - posted by gi...@apache.org on 2026/05/12 22:27:12 UTC, 0 replies.
- [PR] chore(deps): bump org.apache:apache from 37 to 38 [shiro] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/12 22:27:19 UTC, 1 replies.
- (shiro) branch dependabot/maven/org.apache-apache-38 created (now 4fb4cbbdc) - posted by gi...@apache.org on 2026/05/12 22:27:20 UTC, 0 replies.
- (shiro) branch dependabot/maven/tomcat.version-11.0.22 deleted (was 325d3e273) - posted by gi...@apache.org on 2026/05/13 00:45:05 UTC, 0 replies.
- (shiro) branch dependabot/maven/groovy.version-5.0.6 deleted (was cc6c252fa) - posted by gi...@apache.org on 2026/05/13 00:45:38 UTC, 0 replies.
- [PR] chore: add branch protection rules [shiro] - posted by "lprimak (via GitHub)" <gi...@apache.org> on 2026/05/13 01:28:18 UTC, 2 replies.
- svn commit: r84530 - dev/shiro - posted by fp...@apache.org on 2026/05/14 21:17:25 UTC, 0 replies.
- (shiro) annotated tag shiro-root-2.2.0 updated (8454a317e -> 7fc3540a6) - posted by fp...@apache.org on 2026/05/14 21:21:03 UTC, 0 replies.
- [PR] Add AGENTS.md + SECURITY.md linking the project's security model [shiro] - posted by "potiuk (via GitHub)" <gi...@apache.org> on 2026/05/14 21:55:58 UTC, 5 replies.
- (shiro-site) branch dependabot/maven/asm.version-9.10 created (now 2c4e839d1) - posted by gi...@apache.org on 2026/05/15 09:04:46 UTC, 0 replies.
- (shiro-site) branch main updated: build(deps): bump asm.version from 9.9.1 to 9.10 (#303) - posted by lp...@apache.org on 2026/05/15 15:28:47 UTC, 0 replies.
- (shiro-site) branch dependabot/maven/asm.version-9.10 deleted (was 2c4e839d1) - posted by gi...@apache.org on 2026/05/15 15:28:57 UTC, 0 replies.
- (shiro-site) branch main updated: Set up default protection ruleset for default and release branches (#304) - posted by lp...@apache.org on 2026/05/15 23:28:13 UTC, 0 replies.
- (shiro-site) branch infrastructure-ruleset-bot/default-branch-protection deleted (was 308066ed0) - posted by lp...@apache.org on 2026/05/15 23:28:25 UTC, 0 replies.
- svn commit: r84591 - release/shiro/2.2.0 - posted by fp...@apache.org on 2026/05/18 09:41:13 UTC, 0 replies.
- [PR] Switch pre-commit to ASF approved prek-action [shiro] - posted by "jbampton (via GitHub)" <gi...@apache.org> on 2026/05/19 09:57:02 UTC, 1 replies.
- [PR] chore(deps): bump org.apache.commons:commons-configuration2 from 2.14.0 to 2.15.0 [shiro] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/20 02:03:07 UTC, 1 replies.
- (shiro) branch dependabot/maven/org.apache.commons-commons-configuration2-2.15.0 created (now dcbac50b4) - posted by gi...@apache.org on 2026/05/20 02:03:09 UTC, 0 replies.
- [PR] chore(deps): bump junit.version from 5.13.4 to 6.1.0 [shiro] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/20 02:03:24 UTC, 2 replies.
- (shiro) branch dependabot/maven/junit.version-6.1.0 created (now 530007149) - posted by gi...@apache.org on 2026/05/20 02:03:29 UTC, 0 replies.
- [PR] chore(deps-dev): bump junit.engine.version from 1.13.4 to 6.1.0 [shiro] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/20 02:03:43 UTC, 2 replies.
- (shiro) branch dependabot/maven/junit.engine.version-6.1.0 created (now dc5f4c593) - posted by gi...@apache.org on 2026/05/20 02:03:47 UTC, 0 replies.
- [PR] chore(deps): bump https://github.com/zizmorcore/zizmor-pre-commit from v1.24.1 to 1.25.2 in the pre-commit-hooks group [shiro] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/20 02:06:31 UTC, 1 replies.
- (shiro) branch dependabot/pre_commit/pre-commit-hooks-06c144ec33 created (now a6f7c54c3) - posted by gi...@apache.org on 2026/05/20 02:06:35 UTC, 0 replies.
- (shiro) branch main updated: chore(deps): bump https://github.com/zizmorcore/zizmor-pre-commit (#2709) - posted by lp...@apache.org on 2026/05/20 20:39:38 UTC, 0 replies.
- (shiro) branch dependabot/pre_commit/pre-commit-hooks-06c144ec33 deleted (was a6f7c54c3) - posted by gi...@apache.org on 2026/05/20 20:39:45 UTC, 0 replies.
- (shiro) branch dependabot/maven/junit.engine.version-6.1.0 deleted (was dc5f4c593) - posted by gi...@apache.org on 2026/05/20 20:39:58 UTC, 0 replies.
- (shiro) branch dependabot/maven/junit.version-6.1.0 deleted (was 530007149) - posted by gi...@apache.org on 2026/05/20 20:40:18 UTC, 0 replies.
- (shiro-site) branch main updated (99e5b8dd3 -> 6e7668d79) - posted by lp...@apache.org on 2026/05/20 20:43:18 UTC, 0 replies.
- (shiro-site) 01/05: enh: added CVE-2026-43827 - posted by lp...@apache.org on 2026/05/20 20:43:19 UTC, 0 replies.
- (shiro-site) 02/05: enh: reverted secureInDev flag and sync'd with current system proeprties - posted by lp...@apache.org on 2026/05/20 20:43:20 UTC, 0 replies.
- (shiro-site) 03/05: added note to for servlet-managed sessions - posted by lp...@apache.org on 2026/05/20 20:43:21 UTC, 0 replies.
- (shiro-site) 04/05: added unsecure cookies CVE - posted by lp...@apache.org on 2026/05/20 20:43:22 UTC, 0 replies.
- (shiro-site) 05/05: security: added shiroSavedRequest cookie CVE - posted by lp...@apache.org on 2026/05/20 20:43:23 UTC, 0 replies.
- [PR] Session fixation [shiro] - posted by "lprimak (via GitHub)" <gi...@apache.org> on 2026/05/21 03:05:04 UTC, 0 replies.
- [PR] bugfix: using atomics for session updates [shiro] - posted by "lprimak (via GitHub)" <gi...@apache.org> on 2026/05/21 04:50:09 UTC, 0 replies.
- Re: [PR] [#2704] [#2710] [3.x] Fixed Session fixation-related regressions [shiro] - posted by "apupier (via GitHub)" <gi...@apache.org> on 2026/05/21 08:10:36 UTC, 3 replies.
- (shiro-site) branch asf-site updated: no changes - posted by lp...@apache.org on 2026/05/21 09:12:38 UTC, 0 replies.
- [PR] bugfix(3.x): restore resource loading file:// and relative path funct… [shiro] - posted by "lprimak (via GitHub)" <gi...@apache.org> on 2026/05/21 09:18:16 UTC, 6 replies.
- [PR] [CI] Add hook to validate dependabot.yml with pre-commit [shiro] - posted by "jbampton (via GitHub)" <gi...@apache.org> on 2026/05/22 18:40:13 UTC, 0 replies.
- [PR] [CI] Add pre-commit hook to validate the CITATION file; Add missing required field `message` [shiro] - posted by "jbampton (via GitHub)" <gi...@apache.org> on 2026/05/22 19:11:04 UTC, 0 replies.
- (shiro) branch 3.x updated (6ae355c1e -> 169a49825) - posted by lp...@apache.org on 2026/05/24 00:57:17 UTC, 0 replies.
- (shiro) 01/03: enh(jakarta-ee): strip out the host part of the referer header - posted by lp...@apache.org on 2026/05/24 00:57:18 UTC, 0 replies.
- (shiro) 02/03: enh(jakarta-ee): strip out the host part of the referer header - posted by lp...@apache.org on 2026/05/24 00:57:19 UTC, 0 replies.
- (shiro) 03/03: Merge branch 'main' into 3.x - posted by lp...@apache.org on 2026/05/24 00:57:20 UTC, 0 replies.
- (shiro) branch main updated (c6af28cf4 -> bd278bcc3) - posted by lp...@apache.org on 2026/05/24 00:57:30 UTC, 0 replies.
- (shiro) branch main updated: chore(deps): bump org.apache.commons:commons-configuration2 (#2706) - posted by lp...@apache.org on 2026/05/24 01:17:13 UTC, 0 replies.
- (shiro) branch dependabot/maven/org.apache.commons-commons-configuration2-2.15.0 deleted (was dcbac50b4) - posted by gi...@apache.org on 2026/05/24 01:17:20 UTC, 0 replies.
- Re: [PR] [#2704] [#2710] Fixed Session fixation-related regressions [shiro] - posted by "Copilot (via GitHub)" <gi...@apache.org> on 2026/05/24 01:40:05 UTC, 1 replies.
- (shiro) branch main updated: [#2704] [#2710] Fixed Session fixation-related regressions (#2711) - posted by lp...@apache.org on 2026/05/24 01:54:58 UTC, 0 replies.
- (shiro) branch 3.x updated (169a49825 -> 07a65c9a9) - posted by lp...@apache.org on 2026/05/24 02:02:03 UTC, 0 replies.
- (shiro) 01/04: make sure subject's session gets fully cleared fix for #2704 - posted by lp...@apache.org on 2026/05/24 02:02:04 UTC, 0 replies.
- (shiro) 02/04: bugfix: session attributes survive id rotation in native session mode fixes #2710 - posted by lp...@apache.org on 2026/05/24 02:02:05 UTC, 0 replies.
- (shiro) 03/04: Merge branch 'session-fixation' into 3.x - posted by lp...@apache.org on 2026/05/24 02:02:06 UTC, 0 replies.
- (shiro) 04/04: Merge branch 'main' into 3.x - posted by lp...@apache.org on 2026/05/24 02:02:07 UTC, 0 replies.
- (shiro-site) branch main updated (6e7668d79 -> b8547cd70) - posted by lp...@apache.org on 2026/05/24 02:45:52 UTC, 0 replies.
- (shiro-site) 01/02: enh: update Apache Shiro vulnerability reports for CVE-2026-48589, CVE-2026-44598, CVE-2026-43827, and CVE-2026-43828 - posted by lp...@apache.org on 2026/05/24 02:45:53 UTC, 0 replies.
- (shiro-site) 02/02: bugfix: update spring matching strategy from markdown to asciidoc format - posted by lp...@apache.org on 2026/05/24 02:45:54 UTC, 0 replies.
- (shiro-site) branch asf-site updated: update CVEs May 23 2026 - posted by lp...@apache.org on 2026/05/24 02:46:48 UTC, 0 replies.
- Re: [PR] [#2713] [3.0] bugfix: using atomics for session updates [shiro] - posted by "Copilot (via GitHub)" <gi...@apache.org> on 2026/05/24 03:12:41 UTC, 6 replies.
- (shiro-site) branch dependabot/maven/asm.version-9.10.1 created (now e193c77e9) - posted by gi...@apache.org on 2026/05/25 13:05:47 UTC, 0 replies.
- (shiro-site) branch main updated: build(deps): bump asm.version from 9.10 to 9.10.1 (#305) - posted by lp...@apache.org on 2026/05/25 19:07:15 UTC, 0 replies.
- (shiro-site) branch dependabot/maven/asm.version-9.10.1 deleted (was e193c77e9) - posted by gi...@apache.org on 2026/05/25 19:07:22 UTC, 0 replies.
- (shiro-site) branch main updated: security-model.adoc: draft additions for adversary model, known non-findings, triage dispositions (#302) - posted by lp...@apache.org on 2026/05/25 19:15:39 UTC, 0 replies.
- (shiro-site) branch asf-site updated: update: security model - posted by lp...@apache.org on 2026/05/25 19:16:45 UTC, 0 replies.
- [PR] Session versioning support [shiro] - posted by "lprimak (via GitHub)" <gi...@apache.org> on 2026/05/26 04:09:48 UTC, 3 replies.
- (shiro) branch main updated (9371115fe -> eda402277) - posted by fp...@apache.org on 2026/05/26 07:07:08 UTC, 0 replies.
- (shiro) 01/01: Merge pull request #2700 from apache/dependabot/maven/org.apache-apache-38 - posted by fp...@apache.org on 2026/05/26 07:07:09 UTC, 0 replies.
- (shiro) branch dependabot/maven/org.apache-apache-38 deleted (was 4fb4cbbdc) - posted by fp...@apache.org on 2026/05/26 07:07:14 UTC, 0 replies.
- (shiro) branch main updated (eda402277 -> c589bb19c) - posted by fp...@apache.org on 2026/05/26 07:10:06 UTC, 0 replies.
- (shiro) 01/01: Merge pull request #2699 from apache/dependabot/maven/com.github.siom79.japicmp-japicmp-maven-plugin-0.25.7 - posted by fp...@apache.org on 2026/05/26 07:10:07 UTC, 0 replies.
- (shiro) branch dependabot/maven/com.github.siom79.japicmp-japicmp-maven-plugin-0.25.7 deleted (was 5f13983cc) - posted by fp...@apache.org on 2026/05/26 07:10:10 UTC, 0 replies.
- (shiro) branch main updated (c589bb19c -> be6769800) - posted by fp...@apache.org on 2026/05/26 13:19:50 UTC, 0 replies.
- (shiro) 01/01: Merge pull request #2694 from apache/dependabot/maven/slf4j.version-2.0.18 - posted by fp...@apache.org on 2026/05/26 13:19:51 UTC, 0 replies.
- (shiro) branch dependabot/maven/slf4j.version-2.0.18 deleted (was 7cd0b1c43) - posted by gi...@apache.org on 2026/05/26 13:19:58 UTC, 0 replies.
- (shiro) branch dependabot/maven/log4j.version-2.26.0 updated (3aa88c433 -> 9f3528313) - posted by gi...@apache.org on 2026/05/26 13:24:17 UTC, 0 replies.
- (shiro-site) branch main updated: [release]Â Announce 2.2.0 (#306) - posted by fp...@apache.org on 2026/05/26 13:49:52 UTC, 0 replies.
- (shiro) branch main updated (be6769800 -> 164cb1ef4) - posted by fp...@apache.org on 2026/05/26 14:37:11 UTC, 0 replies.
- (shiro) 01/01: Merge pull request #2702 from potiuk/asf-security/agents-md-security-link-2026-05-14 - posted by fp...@apache.org on 2026/05/26 14:37:12 UTC, 0 replies.
- (shiro) branch main updated (164cb1ef4 -> 91a69dcc9) - posted by fp...@apache.org on 2026/05/26 17:43:17 UTC, 0 replies.
- (shiro) 01/01: Merge pull request #2697 from apache/dependabot/maven/log4j.version-2.26.0 - posted by fp...@apache.org on 2026/05/26 17:43:18 UTC, 0 replies.
- (shiro) branch dependabot/maven/log4j.version-2.26.0 deleted (was 9f3528313) - posted by gi...@apache.org on 2026/05/26 17:43:27 UTC, 0 replies.
- (shiro) branch main updated (91a69dcc9 -> dbad41af1) - posted by fp...@apache.org on 2026/05/26 17:43:54 UTC, 0 replies.
- (shiro) 01/01: Merge pull request #2696 from apache/dependabot/github_actions/github-actions-dependencies-10fd86e523 - posted by fp...@apache.org on 2026/05/26 17:43:55 UTC, 0 replies.
- (shiro) branch dependabot/github_actions/github-actions-dependencies-10fd86e523 deleted (was ebb1d2fb4) - posted by gi...@apache.org on 2026/05/26 17:44:01 UTC, 0 replies.
- [PR] chore(deps-dev): bump org.apache.cxf:cxf-rt-frontend-jaxrs from 3.6.10 to 3.6.11 [shiro] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/26 23:23:37 UTC, 0 replies.
- [PR] chore(deps-dev): bump arquillian.core.version from 1.10.1.Final to 1.10.2.Final [shiro] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/26 23:24:08 UTC, 0 replies.
- (shiro) branch dependabot/maven/arquillian.core.version-1.10.2.Final created (now a1ebf6064) - posted by gi...@apache.org on 2026/05/26 23:24:13 UTC, 0 replies.
- (shiro) branch dependabot/github_actions/github-actions-dependencies-1ec6b7b1c2 created (now c18521051) - posted by gi...@apache.org on 2026/05/26 23:24:27 UTC, 0 replies.
- [PR] chore(deps): bump org.apache.commons:commons-configuration2 from 2.15.0 to 2.15.1 [shiro] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/26 23:24:55 UTC, 0 replies.
- (shiro) branch dependabot/maven/org.apache.commons-commons-configuration2-2.15.1 created (now 2f530ae07) - posted by gi...@apache.org on 2026/05/26 23:25:00 UTC, 0 replies.
- [PR] chore(deps): bump org.omnifaces:omnifaces from 3.14.20 to 3.14.21 [shiro] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/26 23:25:02 UTC, 0 replies.
- (shiro) branch dependabot/maven/org.omnifaces-omnifaces-3.14.21 created (now 1bd71d6ed) - posted by gi...@apache.org on 2026/05/26 23:25:08 UTC, 0 replies.
- [PR] chore(deps): bump org.htmlunit:htmlunit from 4.21.0 to 5.0.0 [shiro] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/26 23:25:15 UTC, 2 replies.
- (shiro) branch dependabot/maven/org.htmlunit-htmlunit-5.0.0 created (now 9394c7fbf) - posted by gi...@apache.org on 2026/05/26 23:25:20 UTC, 0 replies.
- [PR] chore(deps): bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.25.7 to 0.26.0 [shiro] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/26 23:25:23 UTC, 0 replies.
- (shiro) branch dependabot/maven/com.github.siom79.japicmp-japicmp-maven-plugin-0.26.0 created (now bfe9db9f7) - posted by gi...@apache.org on 2026/05/26 23:25:25 UTC, 0 replies.
- [PR] chore(deps): bump org.apache.cxf:cxf-bom from 3.6.10 to 3.6.11 [shiro] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/26 23:25:25 UTC, 0 replies.
- (shiro) branch dependabot/maven/org.apache.cxf-cxf-bom-3.6.11 created (now 62f0a5cc6) - posted by gi...@apache.org on 2026/05/26 23:25:28 UTC, 0 replies.
- [PR] chore(deps): bump org.apache.cxf:cxf-rt-rs-client from 3.6.10 to 3.6.11 [shiro] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/26 23:25:49 UTC, 0 replies.
- (shiro) branch dependabot/maven/org.apache.cxf-cxf-rt-rs-client-3.6.11 created (now ff97b28ab) - posted by gi...@apache.org on 2026/05/26 23:25:53 UTC, 0 replies.
- (shiro) branch dependabot/maven/org.apache.cxf-cxf-rt-frontend-jaxrs-3.6.11 created (now 9efd1efbb) - posted by gi...@apache.org on 2026/05/26 23:44:21 UTC, 0 replies.
- (shiro) branch dependabot/maven/org.htmlunit-htmlunit-5.0.0 deleted (was 9394c7fbf) - posted by gi...@apache.org on 2026/05/26 23:45:42 UTC, 0 replies.
- (shiro-site) branch main updated: enh: made alpha release optional - posted by lp...@apache.org on 2026/05/27 00:05:02 UTC, 0 replies.
- (shiro-site) branch asf-site updated: 2.2 release - posted by lp...@apache.org on 2026/05/27 00:06:25 UTC, 0 replies.
- Re: [PR] [#2713] [3.0] bugfix: Improve thread-safety of Shiro-native sessions by using Atomic* classes [shiro] - posted by "lprimak (via GitHub)" <gi...@apache.org> on 2026/05/27 00:48:18 UTC, 0 replies.
- (shiro) branch 3.x updated (07a65c9a9 -> 4f4001083) - posted by lp...@apache.org on 2026/05/27 01:19:12 UTC, 0 replies.
- (shiro) branch main updated (dbad41af1 -> 31fbdb81c) - posted by fp...@apache.org on 2026/05/27 12:39:41 UTC, 0 replies.
- (shiro) 01/01: Merge pull request #2698 from apache/dependabot/maven/org.apache.johnzon-johnzon-jsonb-1.3.0 - posted by fp...@apache.org on 2026/05/27 12:39:42 UTC, 0 replies.
- (shiro) branch dependabot/maven/org.apache.johnzon-johnzon-jsonb-1.3.0 deleted (was 36aa07673) - posted by gi...@apache.org on 2026/05/27 12:39:52 UTC, 0 replies.
- (shiro) branch 3.x updated: Using Rdn.escapeValues() - posted by lp...@apache.org on 2026/05/28 16:58:01 UTC, 0 replies.
- (shiro) branch main updated: Using Rdn.escapeValues() - posted by lp...@apache.org on 2026/05/28 16:58:37 UTC, 0 replies.
- (shiro) branch 3.x updated (0f4bfc6f8 -> 4088694b1) - posted by lp...@apache.org on 2026/05/28 17:00:25 UTC, 0 replies.