You are viewing a plain text version of this content. The canonical link for it is here.
- (struts) branch support/struts-6-x-x updated: Struts 6.9.0 (#1662) - posted by lu...@apache.org on 2026/05/01 08:41:32 UTC, 0 replies.
- (struts) branch struts-6-9-0-RC deleted (was aeeaabfb9) - posted by lu...@apache.org on 2026/05/01 08:41:38 UTC, 0 replies.
- (struts) branch main updated: fix(core): WW-5623 HTML-encode form action in PostbackResult to prevent XSS (#1653) - posted by lu...@apache.org on 2026/05/01 08:42:32 UTC, 0 replies.
- (struts) branch main updated: WW-5624: Enforce @StrutsParameter on JSON/REST body deserialization (#1657) - posted by lu...@apache.org on 2026/05/01 08:46:44 UTC, 0 replies.
- (struts) branch main updated: build(deps): bump github/codeql-action from 4.35.1 to 4.35.2 (#1668) - posted by lu...@apache.org on 2026/05/02 13:56:08 UTC, 0 replies.
- (struts) branch dependabot/github_actions/github/codeql-action-4.35.2 deleted (was 7ece9133d) - posted by lu...@apache.org on 2026/05/02 13:56:11 UTC, 0 replies.
- (struts) branch main updated: build(deps): bump com.fasterxml.jackson:jackson-bom (#1669) - posted by lu...@apache.org on 2026/05/02 13:56:28 UTC, 0 replies.
- (struts) branch dependabot/maven/main/com.fasterxml.jackson-jackson-bom-2.21.3 deleted (was f80d5477c) - posted by lu...@apache.org on 2026/05/02 13:56:34 UTC, 0 replies.
- (struts) branch release/struts-6-8-x updated: build(deps): bump jackson.version from 2.21.2 to 2.21.3 (#1670) - posted by lu...@apache.org on 2026/05/02 13:57:00 UTC, 0 replies.
- (struts) branch dependabot/maven/release/struts-6-8-x/jackson.version-2.21.3 deleted (was b0ad58bf6) - posted by lu...@apache.org on 2026/05/02 13:57:04 UTC, 0 replies.
- (struts) branch dependabot/maven/release/struts-6-8-x/commons-io-commons-io-2.22.0 deleted (was 9f7aee48c) - posted by lu...@apache.org on 2026/05/02 13:57:40 UTC, 0 replies.
- (struts) branch main updated: build(deps): bump commons-io:commons-io from 2.21.0 to 2.22.0 (#1672) - posted by lu...@apache.org on 2026/05/02 14:00:25 UTC, 0 replies.
- (struts) branch dependabot/maven/main/commons-io-commons-io-2.22.0 deleted (was 40214dfb1) - posted by lu...@apache.org on 2026/05/02 14:00:31 UTC, 0 replies.
- (struts) branch WW-5626-cleanup created (now d1d67d66c) - posted by lu...@apache.org on 2026/05/04 11:22:40 UTC, 0 replies.
- (struts) 01/05: WW-5626 add ParameterAuthorizer#resolveTarget for centralized ModelDriven resolution - posted by lu...@apache.org on 2026/05/04 11:22:41 UTC, 0 replies.
- (struts) 02/05: WW-5626 delegate ModelDriven target resolution to ParameterAuthorizer - posted by lu...@apache.org on 2026/05/04 11:22:42 UTC, 0 replies.
- (struts) 03/05: WW-5626 defensively skip non-String JSON keys in authorization filter - posted by lu...@apache.org on 2026/05/04 11:22:43 UTC, 0 replies.
- (struts) 04/05: WW-5626 add real JacksonJsonHandler integration tests for @StrutsParameter filtering - posted by lu...@apache.org on 2026/05/04 11:22:44 UTC, 0 replies.
- (struts) 05/05: WW-5626 make ParameterAuthorizer#resolveTarget a default method to preserve SAM - posted by lu...@apache.org on 2026/05/04 11:22:45 UTC, 0 replies.
- (struts) branch WW-5626-approach-c created (now 0166c6a0b) - posted by lu...@apache.org on 2026/05/04 16:46:04 UTC, 0 replies.
- (struts) 01/11: WW-5626 spike: validate Jackson per-property authorization mechanism - posted by lu...@apache.org on 2026/05/04 16:46:05 UTC, 0 replies.
- (struts) 02/11: WW-5626 add ParameterAuthorizationContext for deserializer-level authorization - posted by lu...@apache.org on 2026/05/04 16:46:06 UTC, 0 replies.
- (struts) 03/11: WW-5626 address review feedback on ParameterAuthorizationContext - posted by lu...@apache.org on 2026/05/04 16:46:07 UTC, 0 replies.
- (struts) 04/11: WW-5626 add AuthorizationAwareContentTypeHandler marker interface - posted by lu...@apache.org on 2026/05/04 16:46:08 UTC, 0 replies.
- (struts) 05/11: WW-5626 add AuthorizingSettableBeanProperty for Jackson per-property authorization - posted by lu...@apache.org on 2026/05/04 16:46:09 UTC, 0 replies.
- (struts) 06/11: WW-5626 add ParameterAuthorizingModule installing the property wrapper on Jackson mappers - posted by lu...@apache.org on 2026/05/04 16:46:10 UTC, 0 replies.
- (struts) 07/11: WW-5626 register ParameterAuthorizingModule on default Jackson REST handlers - posted by lu...@apache.org on 2026/05/04 16:46:11 UTC, 0 replies.
- (struts) 08/11: WW-5626 use AuthorizationAwareContentTypeHandler path when handler supports it - posted by lu...@apache.org on 2026/05/04 16:46:12 UTC, 0 replies.
- (struts) 09/11: WW-5626 add integration tests proving the new Jackson authorization path is used - posted by lu...@apache.org on 2026/05/04 16:46:13 UTC, 0 replies.
- (struts) 10/11: WW-5626 deprecate XStreamHandler in favor of JacksonXmlHandler - posted by lu...@apache.org on 2026/05/04 16:46:14 UTC, 0 replies.
- (struts) 11/11: WW-5626 remove Jackson auth spike; replaced by production tests - posted by lu...@apache.org on 2026/05/04 16:46:15 UTC, 0 replies.
- (struts) branch WW-5626-approach-c updated (0166c6a0b -> 3c0be4a3b) - posted by lu...@apache.org on 2026/05/05 04:15:22 UTC, 0 replies.
- (struts) branch dependabot/github_actions/github/codeql-action-4.35.3 created (now 60dd938e9) - posted by gi...@apache.org on 2026/05/06 01:34:37 UTC, 0 replies.
- (struts) branch dependabot/maven/main/org.glassfish.jaxb-jaxb-bom-4.0.8 created (now 9b69c99d6) - posted by gi...@apache.org on 2026/05/06 01:35:13 UTC, 0 replies.
- (struts) branch dependabot/maven/main/org.owasp-dependency-check-maven-12.2.2 created (now 299c37a20) - posted by gi...@apache.org on 2026/05/06 01:35:30 UTC, 0 replies.
- (struts) branch dependabot/maven/release/struts-6-8-x/org.owasp-dependency-check-maven-12.2.2 created (now 4aee87f5c) - posted by gi...@apache.org on 2026/05/06 01:36:39 UTC, 0 replies.
- (struts) branch dependabot/maven/main/com.github.ben-manes.caffeine-caffeine-3.2.4 created (now 4e190abc1) - posted by gi...@apache.org on 2026/05/06 01:36:42 UTC, 0 replies.
- (struts) branch chore/agentsmd created (now b39f029a1) - posted by lu...@apache.org on 2026/05/06 06:43:38 UTC, 0 replies.
- (struts) 01/01: chore(agents): defines a new AGENTS.md focused on reporting vulnerabilities - posted by lu...@apache.org on 2026/05/06 06:43:39 UTC, 0 replies.
- (struts) branch chore/agentsmd updated (b39f029a1 -> b0e0a36dd) - posted by lu...@apache.org on 2026/05/06 06:45:45 UTC, 0 replies.
- (struts) branch main updated: WW-5626 cleanup follow-ups for @StrutsParameter JSON/REST enforcement (#1673) - posted by lu...@apache.org on 2026/05/09 10:09:08 UTC, 0 replies.
- (struts) branch WW-5626-cleanup deleted (was d1d67d66c) - posted by lu...@apache.org on 2026/05/09 10:09:14 UTC, 0 replies.
- (struts) branch WW-5626-approach-c updated (3c0be4a3b -> 262b495a2) - posted by lu...@apache.org on 2026/05/09 10:10:19 UTC, 0 replies.
- (struts) branch main updated: build(deps): bump github/codeql-action from 4.35.2 to 4.35.3 (#1675) - posted by lu...@apache.org on 2026/05/09 11:48:33 UTC, 0 replies.
- (struts) branch dependabot/github_actions/github/codeql-action-4.35.3 deleted (was 60dd938e9) - posted by lu...@apache.org on 2026/05/09 11:48:40 UTC, 0 replies.
- (struts) branch main updated: build(deps): bump org.glassfish.jaxb:jaxb-bom from 4.0.7 to 4.0.8 (#1676) - posted by lu...@apache.org on 2026/05/09 11:48:53 UTC, 0 replies.
- (struts) branch dependabot/maven/main/org.glassfish.jaxb-jaxb-bom-4.0.8 deleted (was 9b69c99d6) - posted by lu...@apache.org on 2026/05/09 11:48:59 UTC, 0 replies.
- (struts) branch main updated: build(deps): bump org.owasp:dependency-check-maven from 12.2.1 to 12.2.2 (#1677) - posted by lu...@apache.org on 2026/05/09 11:49:06 UTC, 0 replies.
- (struts) branch dependabot/maven/main/org.owasp-dependency-check-maven-12.2.2 deleted (was 299c37a20) - posted by lu...@apache.org on 2026/05/09 11:49:09 UTC, 0 replies.
- (struts) branch release/struts-6-8-x updated: build(deps): bump org.owasp:dependency-check-maven from 12.2.1 to 12.2.2 (#1678) - posted by lu...@apache.org on 2026/05/09 11:49:21 UTC, 0 replies.
- (struts) branch dependabot/maven/release/struts-6-8-x/org.owasp-dependency-check-maven-12.2.2 deleted (was 4aee87f5c) - posted by lu...@apache.org on 2026/05/09 11:49:24 UTC, 0 replies.
- (struts) branch main updated: build(deps): bump com.github.ben-manes.caffeine:caffeine (#1679) - posted by lu...@apache.org on 2026/05/09 11:50:00 UTC, 0 replies.
- (struts) branch dependabot/maven/main/com.github.ben-manes.caffeine-caffeine-3.2.4 deleted (was 4e190abc1) - posted by lu...@apache.org on 2026/05/09 11:50:06 UTC, 0 replies.
- (struts) branch WW-5626-approach-c updated (262b495a2 -> 69ffeb0fe) - posted by lu...@apache.org on 2026/05/09 11:57:49 UTC, 0 replies.
- (struts) branch WW-5627-cookie-authorization created (now 87803213f) - posted by lu...@apache.org on 2026/05/09 17:23:20 UTC, 0 replies.
- (struts) 01/09: WW-5627 add ParameterAllowlister interface and STRUTS_PARAMETER_ALLOWLISTER constant - posted by lu...@apache.org on 2026/05/09 17:23:21 UTC, 0 replies.
- (struts) 02/09: WW-5627 add OgnlParameterAllowlister default implementation - posted by lu...@apache.org on 2026/05/09 17:23:22 UTC, 0 replies.
- (struts) 03/09: WW-5627 register ParameterAllowlister bean in struts-default DI - posted by lu...@apache.org on 2026/05/09 17:23:23 UTC, 0 replies.
- (struts) 04/09: WW-5627 delegate ParametersInterceptor OGNL allowlisting to OgnlParameterAllowlister - posted by lu...@apache.org on 2026/05/09 17:23:24 UTC, 0 replies.
- (struts) 05/09: WW-5627 test(cookie): failing test for unannotated setter skip - posted by lu...@apache.org on 2026/05/09 17:23:25 UTC, 0 replies.
- (struts) 06/09: WW-5627 gate CookieInterceptor cookie injection through ParameterAuthorizer - posted by lu...@apache.org on 2026/05/09 17:23:26 UTC, 0 replies.
- (struts) 07/09: WW-5627 cover CookieInterceptor authorization matrix in CookieInterceptorAnnotationTest - posted by lu...@apache.org on 2026/05/09 17:23:27 UTC, 0 replies.
- (struts) 08/09: WW-5627 docs(cookie): document new 5-arg extension hook and deprecation - posted by lu...@apache.org on 2026/05/09 17:23:28 UTC, 0 replies.
- (struts) 09/09: WW-5627 wire OgnlParameterAllowlister in StrutsParameterAnnotationTest fixture - posted by lu...@apache.org on 2026/05/09 17:23:29 UTC, 0 replies.
- (struts) branch WW-5627-cookie-authorization updated (87803213f -> 73f456b8d) - posted by lu...@apache.org on 2026/05/09 17:44:47 UTC, 0 replies.
- (struts) branch dependabot/github_actions/github/codeql-action-4.35.4 created (now bacd9a02f) - posted by gi...@apache.org on 2026/05/13 02:19:03 UTC, 0 replies.
- (struts) branch dependabot/maven/main/slf4j.version-2.0.18 created (now e921c5a5a) - posted by gi...@apache.org on 2026/05/13 02:19:46 UTC, 1 replies.
- (struts) branch dependabot/maven/main/org.apache.logging.log4j-log4j-bom-2.26.0 created (now 764b6bfcf) - posted by gi...@apache.org on 2026/05/13 02:19:56 UTC, 0 replies.
- (struts) branch dependabot/maven/release/struts-6-8-x/slf4j.version-2.0.18 created (now 1a0f3eff8) - posted by gi...@apache.org on 2026/05/13 02:19:59 UTC, 0 replies.
- (struts) branch dependabot/maven/release/struts-6-8-x/log4j2.version-2.26.0 created (now a8316be07) - posted by gi...@apache.org on 2026/05/13 02:20:08 UTC, 0 replies.
- (struts) branch dependabot/maven/release/struts-6-8-x/org.hibernate-hibernate-core-7.3.4.Final created (now 786a40213) - posted by gi...@apache.org on 2026/05/13 02:20:34 UTC, 0 replies.
- (struts) branch dependabot/maven/main/org.hibernate-hibernate-core-7.3.4.Final created (now 763648c7d) - posted by gi...@apache.org on 2026/05/13 02:20:46 UTC, 0 replies.
- (struts) branch chore/agentsmd updated (b0e0a36dd -> a0b8f040d) - posted by lu...@apache.org on 2026/05/13 07:16:29 UTC, 0 replies.
- (struts) branch chore/agentsmd updated (a0b8f040d -> 378684d5c) - posted by rg...@apache.org on 2026/05/13 08:20:44 UTC, 0 replies.
- (struts-site) branch main updated: docs: add EOL versions page and cross-link from related pages (#291) - posted by lu...@apache.org on 2026/05/14 12:04:01 UTC, 0 replies.
- (struts-site) branch feature/eol-versions-page deleted (was 80b118fc5) - posted by lu...@apache.org on 2026/05/14 12:04:10 UTC, 0 replies.
- (struts-site) branch asf-site updated: Automatic Site Publish by Buildbot - posted by gi...@apache.org on 2026/05/14 12:04:57 UTC, 3 replies.
- (struts) branch chore/agentsmd updated (378684d5c -> dcc2a256b) - posted by lu...@apache.org on 2026/05/14 12:28:47 UTC, 0 replies.
- (struts) branch main updated: build(deps): bump github/codeql-action from 4.35.3 to 4.35.4 (#1682) - posted by lu...@apache.org on 2026/05/14 12:57:56 UTC, 0 replies.
- (struts) branch dependabot/github_actions/github/codeql-action-4.35.4 deleted (was bacd9a02f) - posted by lu...@apache.org on 2026/05/14 12:58:02 UTC, 0 replies.
- (struts) branch main updated: build(deps): bump slf4j.version from 2.0.17 to 2.0.18 (#1683) - posted by lu...@apache.org on 2026/05/14 12:58:16 UTC, 0 replies.
- (struts) branch dependabot/maven/main/slf4j.version-2.0.18 deleted (was e921c5a5a) - posted by lu...@apache.org on 2026/05/14 12:58:19 UTC, 0 replies.
- (struts) branch release/struts-6-8-x updated: build(deps): bump slf4j.version from 2.0.17 to 2.0.18 (#1684) - posted by lu...@apache.org on 2026/05/14 12:58:44 UTC, 0 replies.
- (struts) branch main updated: WW-5626 per-property authorization for Jackson REST handlers (#1674) - posted by lu...@apache.org on 2026/05/14 13:01:07 UTC, 0 replies.
- (struts) branch dependabot/maven/main/org.hibernate-hibernate-core-7.3.4.Final deleted (was 763648c7d) - posted by lu...@apache.org on 2026/05/14 13:11:00 UTC, 0 replies.
- (struts) branch WW-5627-cookie-authorization updated (a751b5998 -> 590aca61a) - posted by lu...@apache.org on 2026/05/14 15:17:17 UTC, 0 replies.
- (struts) branch main updated: chore(agents): defines a new AGENTS.md focused on reporting vulnerabilities (#1680) - posted by lu...@apache.org on 2026/05/15 11:27:58 UTC, 0 replies.
- (struts) branch chore/agentsmd deleted (was dcc2a256b) - posted by lu...@apache.org on 2026/05/15 11:28:02 UTC, 0 replies.
- (struts) branch main updated: WW-5627 Gate CookieInterceptor through ParameterAuthorizer (#1681) - posted by lu...@apache.org on 2026/05/18 11:52:22 UTC, 0 replies.
- (struts) branch WW-5627-cookie-authorization deleted (was 590aca61a) - posted by lu...@apache.org on 2026/05/18 11:52:26 UTC, 0 replies.
- (struts) branch chore/rats-exclude-docs created (now 14165eee6) - posted by lu...@apache.org on 2026/05/18 12:30:28 UTC, 0 replies.
- (struts) 01/01: chore(rat): excludes Markdown files in docs/ folder - posted by lu...@apache.org on 2026/05/18 12:30:29 UTC, 0 replies.
- (struts) branch main updated: chore(rat): excludes Markdown files in docs/ folder (#1691) - posted by lu...@apache.org on 2026/05/18 13:05:05 UTC, 0 replies.
- (struts) branch chore/rats-exclude-docs deleted (was 14165eee6) - posted by lu...@apache.org on 2026/05/18 13:05:12 UTC, 0 replies.
- (struts) branch main updated: fix(core): enforce class-level HTTP method annotations for wildcard-resolved unannotated methods (#1690) - posted by lu...@apache.org on 2026/05/19 06:05:26 UTC, 0 replies.
- (struts) branch WW-5535-wildcard-integration-test created (now 381a687c0) - posted by lu...@apache.org on 2026/05/19 07:53:50 UTC, 0 replies.
- (struts) 01/01: WW-5535 test(core): cover wildcard-resolved unannotated methods via real proxy - posted by lu...@apache.org on 2026/05/19 07:53:51 UTC, 0 replies.
- (struts) branch main updated: WW-5535 test(core): cover wildcard-resolved unannotated methods via real proxy (#1692) - posted by lu...@apache.org on 2026/05/19 08:27:14 UTC, 0 replies.
- (struts) branch WW-5535-wildcard-integration-test deleted (was 381a687c0) - posted by lu...@apache.org on 2026/05/19 08:27:17 UTC, 0 replies.
- (struts-intellij-plugin) branch dependabot/github_actions/codecov/codecov-action-6.0.1 created (now 091f6d6) - posted by gi...@apache.org on 2026/05/20 03:32:49 UTC, 0 replies.
- (struts-intellij-plugin) branch main updated: ci(deps): bump codecov/codecov-action from 6.0.0 to 6.0.1 (#85) - posted by lu...@apache.org on 2026/05/20 05:33:34 UTC, 0 replies.
- (struts-intellij-plugin) branch dependabot/github_actions/codecov/codecov-action-6.0.1 deleted (was 091f6d6) - posted by lu...@apache.org on 2026/05/20 05:33:39 UTC, 0 replies.
- (struts) branch WW-5535-class-annotation-fallback-6x created (now 4724b71e7) - posted by lu...@apache.org on 2026/05/20 06:16:31 UTC, 0 replies.
- (struts) 01/01: WW-5535 fix(core): enforce class-level HTTP method annotations for wildcard-resolved unannotated methods - posted by lu...@apache.org on 2026/05/20 06:16:32 UTC, 0 replies.
- (struts) branch dependabot/github_actions/github/codeql-action-4.35.5 created (now 645b04e14) - posted by gi...@apache.org on 2026/05/20 06:27:16 UTC, 0 replies.
- (struts) branch dependabot/maven/main/asm.version-9.10 created (now d5c183bff) - posted by gi...@apache.org on 2026/05/20 06:28:19 UTC, 0 replies.
- (struts) branch dependabot/maven/release/struts-6-8-x/org.hibernate-hibernate-core-7.3.5.Final created (now 93d941b5f) - posted by gi...@apache.org on 2026/05/20 06:28:55 UTC, 0 replies.
- (struts) branch dependabot/maven/release/struts-6-8-x/org.apache.maven.plugins-maven-enforcer-plugin-3.6.3 created (now 26b43aee9) - posted by gi...@apache.org on 2026/05/20 06:28:58 UTC, 0 replies.
- (struts) branch dependabot/maven/main/org.apache.maven.plugins-maven-enforcer-plugin-3.6.3 created (now 08f6f4270) - posted by gi...@apache.org on 2026/05/20 06:29:08 UTC, 0 replies.
- (struts) branch dependabot/maven/release/struts-6-8-x/asm.version-9.10 created (now 96a46287b) - posted by gi...@apache.org on 2026/05/20 06:29:14 UTC, 0 replies.
- (struts) branch dependabot/maven/main/org.hibernate-hibernate-core-7.3.5.Final created (now 7fb356660) - posted by gi...@apache.org on 2026/05/20 06:29:35 UTC, 0 replies.
- (struts) branch WW-5623-postback-result-xss-6x created (now 90751ff9a) - posted by lu...@apache.org on 2026/05/20 06:52:48 UTC, 0 replies.
- (struts) 01/01: WW-5623 fix(core): HTML-encode form action in PostbackResult to prevent XSS - posted by lu...@apache.org on 2026/05/20 06:52:49 UTC, 0 replies.
- (struts) branch main updated: build(deps): bump github/codeql-action from 4.35.4 to 4.35.5 (#1694) - posted by lu...@apache.org on 2026/05/20 06:59:04 UTC, 0 replies.
- (struts) branch dependabot/github_actions/github/codeql-action-4.35.5 deleted (was 645b04e14) - posted by lu...@apache.org on 2026/05/20 06:59:11 UTC, 0 replies.
- (struts) branch main updated: build(deps-dev): bump org.apache.maven.plugins:maven-enforcer-plugin (#1698) - posted by lu...@apache.org on 2026/05/20 06:59:30 UTC, 0 replies.
- (struts) branch dependabot/maven/main/org.apache.maven.plugins-maven-enforcer-plugin-3.6.3 deleted (was 08f6f4270) - posted by lu...@apache.org on 2026/05/20 06:59:38 UTC, 0 replies.
- (struts) branch release/struts-6-8-x updated: build(deps-dev): bump org.apache.maven.plugins:maven-enforcer-plugin (#1697) - posted by lu...@apache.org on 2026/05/20 06:59:44 UTC, 0 replies.
- (struts) branch dependabot/maven/release/struts-6-8-x/org.apache.maven.plugins-maven-enforcer-plugin-3.6.3 deleted (was 26b43aee9) - posted by lu...@apache.org on 2026/05/20 06:59:47 UTC, 0 replies.
- (struts) branch dependabot/maven/main/org.hibernate-hibernate-core-7.3.5.Final deleted (was 7fb356660) - posted by lu...@apache.org on 2026/05/20 06:59:58 UTC, 0 replies.
- (struts) branch dependabot/maven/release/struts-6-8-x/org.hibernate-hibernate-core-7.3.5.Final deleted (was 93d941b5f) - posted by lu...@apache.org on 2026/05/20 07:00:30 UTC, 0 replies.
- (struts) branch ci/dependabot-cooldown-default-days created (now 6cb6922b0) - posted by lu...@apache.org on 2026/05/20 07:02:47 UTC, 0 replies.
- (struts) 01/01: ci(dependabot): fix cooldown property name - posted by lu...@apache.org on 2026/05/20 07:02:48 UTC, 0 replies.
- (struts) branch main updated: ci(dependabot): fix cooldown property name (#1702) - posted by lu...@apache.org on 2026/05/20 07:07:11 UTC, 0 replies.
- (struts) branch ci/dependabot-cooldown-default-days deleted (was 6cb6922b0) - posted by lu...@apache.org on 2026/05/20 07:07:17 UTC, 0 replies.
- (struts) branch dependabot/maven/support/struts-6-x-x/asm.version-9.10 created (now 9a40b15de) - posted by gi...@apache.org on 2026/05/20 07:08:18 UTC, 0 replies.
- (struts) branch dependabot/maven/support/struts-6-x-x/slf4j.version-2.0.18 created (now 07fbea253) - posted by gi...@apache.org on 2026/05/20 07:08:21 UTC, 0 replies.
- (struts) branch dependabot/maven/support/struts-6-x-x/commons-io-commons-io-2.22.0 created (now 40c2156ef) - posted by gi...@apache.org on 2026/05/20 07:08:31 UTC, 0 replies.
- (struts) branch dependabot/maven/support/struts-6-x-x/log4j2.version-2.26.0 created (now 5b779983b) - posted by gi...@apache.org on 2026/05/20 07:08:34 UTC, 0 replies.
- (struts) branch dependabot/maven/support/struts-6-x-x/org.apache.felix-org.apache.felix.framework-7.0.5 created (now 5e5497eae) - posted by gi...@apache.org on 2026/05/20 07:08:44 UTC, 0 replies.
- (struts) branch main updated: build(deps): bump asm.version from 9.9.1 to 9.10 (#1695) - posted by lu...@apache.org on 2026/05/20 07:18:29 UTC, 0 replies.
- (struts) branch dependabot/maven/main/asm.version-9.10 deleted (was d5c183bff) - posted by lu...@apache.org on 2026/05/20 07:18:36 UTC, 0 replies.
- (struts) branch release/struts-6-8-x updated: build(deps): bump asm.version from 9.9.1 to 9.10 (#1699) - posted by lu...@apache.org on 2026/05/20 07:18:48 UTC, 0 replies.
- (struts) branch dependabot/maven/release/struts-6-8-x/asm.version-9.10 deleted (was 96a46287b) - posted by lu...@apache.org on 2026/05/20 07:18:52 UTC, 0 replies.
- (struts) branch support/struts-6-x-x updated: build(deps): bump slf4j.version from 2.0.17 to 2.0.18 (#1704) - posted by lu...@apache.org on 2026/05/20 07:27:00 UTC, 0 replies.
- (struts) branch dependabot/maven/support/struts-6-x-x/slf4j.version-2.0.18 deleted (was 07fbea253) - posted by lu...@apache.org on 2026/05/20 07:27:07 UTC, 0 replies.
- (struts) branch support/struts-6-x-x updated: build(deps): bump asm.version from 9.9.1 to 9.10 (#1703) - posted by lu...@apache.org on 2026/05/20 07:56:32 UTC, 0 replies.
- (struts) branch dependabot/maven/support/struts-6-x-x/asm.version-9.10 deleted (was 9a40b15de) - posted by lu...@apache.org on 2026/05/20 07:56:35 UTC, 0 replies.
- (struts) branch dependabot/maven/support/struts-6-x-x/commons-io-commons-io-2.22.0 deleted (was 40c2156ef) - posted by lu...@apache.org on 2026/05/20 07:56:42 UTC, 0 replies.
- (struts) branch support/struts-6-x-x updated: build(deps): bump log4j2.version from 2.25.4 to 2.26.0 (#1706) - posted by lu...@apache.org on 2026/05/20 07:58:21 UTC, 0 replies.
- (struts) branch dependabot/maven/support/struts-6-x-x/log4j2.version-2.26.0 deleted (was 5b779983b) - posted by lu...@apache.org on 2026/05/20 07:58:27 UTC, 0 replies.
- (struts) branch dependabot/maven/support/struts-6-x-x/org.apache.felix-org.apache.felix.framework-7.0.5 deleted (was 5e5497eae) - posted by lu...@apache.org on 2026/05/20 08:00:54 UTC, 0 replies.
- (struts) branch dependabot/maven/release/struts-6-8-x/log4j2.version-2.26.0 deleted (was a8316be07) - posted by lu...@apache.org on 2026/05/20 08:05:49 UTC, 0 replies.
- (struts) branch main updated: build(deps): bump org.apache.logging.log4j:log4j-bom (#1685) - posted by lu...@apache.org on 2026/05/20 08:06:55 UTC, 0 replies.
- (struts) branch dependabot/maven/main/org.apache.logging.log4j-log4j-bom-2.26.0 deleted (was 764b6bfcf) - posted by lu...@apache.org on 2026/05/20 08:06:58 UTC, 0 replies.
- (struts-intellij-plugin) tag v261.19027-nightly.3 created (now 00c6d0b) - posted by gi...@apache.org on 2026/05/21 03:06:48 UTC, 0 replies.
- (struts) branch security/supported-versions created (now 8a6208e6f) - posted by lu...@apache.org on 2026/05/22 04:43:26 UTC, 0 replies.
- (struts) 01/01: security(versions): updates list of supported versions - posted by lu...@apache.org on 2026/05/22 04:43:27 UTC, 0 replies.
- (struts) branch main updated: security(versions): updates list of supported versions (#1708) - posted by lu...@apache.org on 2026/05/22 04:47:10 UTC, 0 replies.
- (struts) branch security/supported-versions deleted (was 8a6208e6f) - posted by lu...@apache.org on 2026/05/22 04:47:15 UTC, 0 replies.
- (struts-site) branch security/link-securitymd created (now 838ce6962) - posted by lu...@apache.org on 2026/05/22 04:47:56 UTC, 0 replies.
- (struts-site) branch main updated: security: updates the page and links to SECURITY.md (#299) - posted by lu...@apache.org on 2026/05/22 04:48:09 UTC, 0 replies.
- (struts-site) branch security/link-securitymd deleted (was 838ce6962) - posted by lu...@apache.org on 2026/05/22 04:48:12 UTC, 0 replies.
- (struts) branch support/struts-6-x-x updated: WW-5535 fix(core): enforce class-level HTTP method annotations for wildcard-resolved unannotated methods (#1693) - posted by lu...@apache.org on 2026/05/25 14:38:10 UTC, 0 replies.
- (struts) branch WW-5535-class-annotation-fallback-6x deleted (was 4724b71e7) - posted by lu...@apache.org on 2026/05/25 14:38:17 UTC, 0 replies.
- (struts) branch support/struts-6-x-x updated: WW-5623 fix(core): HTML-encode form action in PostbackResult to prevent XSS (#1701) - posted by lu...@apache.org on 2026/05/25 14:38:26 UTC, 0 replies.
- (struts) branch WW-5623-postback-result-xss-6x deleted (was 90751ff9a) - posted by lu...@apache.org on 2026/05/25 14:38:31 UTC, 0 replies.
- (struts) branch release/6.10.0-RC created (now 0fa47650e) - posted by lu...@apache.org on 2026/05/25 14:58:50 UTC, 0 replies.
- (struts) 01/01: pom(version): sets proper SNAPSHOT version - posted by lu...@apache.org on 2026/05/25 14:58:51 UTC, 0 replies.
- (struts) branch support/struts-6-x-x updated: pom(version): sets proper SNAPSHOT version (#1709) - posted by lu...@apache.org on 2026/05/25 15:04:36 UTC, 0 replies.
- (struts) branch release/6.10.0-RC deleted (was 0fa47650e) - posted by lu...@apache.org on 2026/05/25 15:04:42 UTC, 0 replies.
- (struts) branch release/6.10.0-RC1 created (now 4bfbfeb23) - posted by lu...@apache.org on 2026/05/25 15:19:52 UTC, 0 replies.
- (struts) 01/01: [maven-release-plugin] prepare release STRUTS_6_10_0 - posted by lu...@apache.org on 2026/05/25 15:19:53 UTC, 0 replies.
- (struts) annotated tag STRUTS_6_10_0 created (now 068d4ace9) - posted by lu...@apache.org on 2026/05/25 15:19:56 UTC, 0 replies.
- (struts) branch release/6.10.0-RC1 updated: [maven-release-plugin] prepare for next development iteration - posted by lu...@apache.org on 2026/05/25 15:20:01 UTC, 0 replies.
- svn commit: r84716 - dev/struts/6.10.0 - posted by lu...@apache.org on 2026/05/25 15:42:26 UTC, 0 replies.
- (struts-annotations) branch infrastructure-ruleset-bot/default-branch-protection updated (67d0c72 -> 9333a2a) - posted by lu...@apache.org on 2026/05/26 04:59:33 UTC, 0 replies.
- (struts-annotations) branch main updated (fab2fd1 -> 2a26d72) - posted by lu...@apache.org on 2026/05/26 05:06:59 UTC, 0 replies.
- (struts-annotations) 01/01: Merge pull request #4 from apache/infrastructure-ruleset-bot/default-branch-protection - posted by lu...@apache.org on 2026/05/26 05:07:00 UTC, 0 replies.
- struts-annotations.git: Error while running github feature from main:.asf.yaml - posted by Apache Infrastructure <us...@infra.apache.org> on 2026/05/26 05:07:08 UTC, 0 replies.
- (struts-annotations) branch infrastructure-ruleset-bot/default-branch-protection deleted (was 9333a2a) - posted by lu...@apache.org on 2026/05/26 05:07:13 UTC, 0 replies.
- (struts-archetypes) branch infrastructure-ruleset-bot/default-branch-protection updated (2986718 -> e6a4d30) - posted by lu...@apache.org on 2026/05/26 05:08:04 UTC, 0 replies.
- (struts-archetypes) branch main updated (57b952c -> ed405ae) - posted by lu...@apache.org on 2026/05/26 05:08:14 UTC, 0 replies.
- (struts-archetypes) 01/01: Merge pull request #21 from apache/infrastructure-ruleset-bot/default-branch-protection - posted by lu...@apache.org on 2026/05/26 05:08:15 UTC, 0 replies.
- struts-archetypes.git: Error while running github feature from main:.asf.yaml - posted by Apache Infrastructure <us...@infra.apache.org> on 2026/05/26 05:08:25 UTC, 0 replies.
- (struts-archetypes) branch infrastructure-ruleset-bot/default-branch-protection deleted (was e6a4d30) - posted by lu...@apache.org on 2026/05/26 05:08:31 UTC, 0 replies.
- (struts-archive) branch infrastructure-ruleset-bot/default-branch-protection updated (0d8faa2 -> f589e0d) - posted by lu...@apache.org on 2026/05/26 05:09:23 UTC, 0 replies.
- (struts-archive) branch master updated: [INFRA] Set up default rulesets for default and release branches (#6) - posted by lu...@apache.org on 2026/05/26 05:09:37 UTC, 0 replies.
- struts-archive.git: Error while running github feature from master:.asf.yaml - posted by Apache Infrastructure <us...@infra.apache.org> on 2026/05/26 05:09:43 UTC, 0 replies.
- (struts-archive) branch infrastructure-ruleset-bot/default-branch-protection deleted (was f589e0d) - posted by lu...@apache.org on 2026/05/26 05:09:50 UTC, 0 replies.
- (struts-extras) branch infrastructure-ruleset-bot/default-branch-protection updated (ee4b2a5 -> 0cee80e) - posted by lu...@apache.org on 2026/05/26 05:10:54 UTC, 0 replies.
- (struts-extras) branch master updated: [INFRA] Set up default rulesets for default and release branches (#7) - posted by lu...@apache.org on 2026/05/26 05:11:10 UTC, 0 replies.
- struts-extras.git: Error while running github feature from master:.asf.yaml - posted by Apache Infrastructure <us...@infra.apache.org> on 2026/05/26 05:11:17 UTC, 0 replies.
- (struts-extras) branch infrastructure-ruleset-bot/default-branch-protection deleted (was 0cee80e) - posted by lu...@apache.org on 2026/05/26 05:11:22 UTC, 0 replies.
- (struts-master) branch infrastructure-ruleset-bot/default-branch-protection updated (cdd348c -> 1399191) - posted by lu...@apache.org on 2026/05/26 05:12:02 UTC, 0 replies.
- (struts-master) branch main updated: [INFRA] Set up default rulesets for default and release branches (#2) - posted by lu...@apache.org on 2026/05/26 05:12:13 UTC, 0 replies.
- struts-master.git: Error while running github feature from main:.asf.yaml - posted by Apache Infrastructure <us...@infra.apache.org> on 2026/05/26 05:12:18 UTC, 0 replies.
- (struts-master) branch infrastructure-ruleset-bot/default-branch-protection deleted (was 1399191) - posted by lu...@apache.org on 2026/05/26 05:12:24 UTC, 0 replies.
- (struts-maven) branch infrastructure-ruleset-bot/default-branch-protection updated (c866e9e -> b07c608) - posted by lu...@apache.org on 2026/05/26 05:13:00 UTC, 0 replies.
- (struts-maven) branch trunk updated: [INFRA] Set up default rulesets for default and release branches (#1) - posted by lu...@apache.org on 2026/05/26 05:13:10 UTC, 0 replies.
- struts-maven.git: Error while running github feature from trunk:.asf.yaml - posted by Apache Infrastructure <us...@infra.apache.org> on 2026/05/26 05:13:15 UTC, 0 replies.
- (struts-maven) branch infrastructure-ruleset-bot/default-branch-protection deleted (was b07c608) - posted by lu...@apache.org on 2026/05/26 05:13:23 UTC, 0 replies.
- (struts) branch dependabot/github_actions/github/codeql-action-4.36.0 created (now 22e4a3c6e) - posted by gi...@apache.org on 2026/05/27 03:58:38 UTC, 0 replies.
- (struts) branch dependabot/maven/main/org.apache.maven.plugins-maven-site-plugin-3.22.0 created (now ae3cbdca1) - posted by gi...@apache.org on 2026/05/27 03:59:03 UTC, 0 replies.
- (struts) branch dependabot/maven/main/org.hibernate-hibernate-core-7.3.6.Final created (now ef9179c62) - posted by gi...@apache.org on 2026/05/27 03:59:31 UTC, 0 replies.
- (struts) branch dependabot/maven/main/asm.version-9.10.1 created (now ba9d6651d) - posted by gi...@apache.org on 2026/05/27 03:59:47 UTC, 0 replies.
- (struts) branch dependabot/maven/support/struts-6-x-x/org.hibernate-hibernate-core-7.3.5.Final created (now cc6b3d89d) - posted by gi...@apache.org on 2026/05/27 04:01:39 UTC, 0 replies.
- (struts) branch dependabot/maven/support/struts-6-x-x/org.apache.maven.plugins-maven-enforcer-plugin-3.6.3 created (now 9ae509437) - posted by gi...@apache.org on 2026/05/27 04:02:03 UTC, 0 replies.
- (struts) branch dependabot/maven/support/struts-6-x-x/jackson.version-2.21.3 created (now cbf2b1172) - posted by gi...@apache.org on 2026/05/27 04:02:14 UTC, 0 replies.
- (struts) branch dependabot/maven/support/struts-6-x-x/org.apache.maven.plugins-maven-assembly-plugin-3.8.0 created (now dfaa5bb40) - posted by gi...@apache.org on 2026/05/27 04:02:27 UTC, 0 replies.
- (struts) branch dependabot/maven/support/struts-6-x-x/org.apache.maven.plugins-maven-site-plugin-3.22.0 created (now 214657453) - posted by gi...@apache.org on 2026/05/27 04:02:38 UTC, 0 replies.
- (struts-site) branch docs/wire-security-guide created (now 7af957caa) - posted by lu...@apache.org on 2026/05/27 05:06:37 UTC, 0 replies.
- (struts-site) 01/01: docs(security): links security reporting with security guideline - posted by lu...@apache.org on 2026/05/27 05:06:38 UTC, 0 replies.
- (struts-site) branch asf-staging updated: Updates stage by Jenkins - posted by gi...@apache.org on 2026/05/27 05:16:21 UTC, 2 replies.
- (struts-site) branch main updated: docs(security): links security reporting with security guideline (#300) - posted by lu...@apache.org on 2026/05/27 05:37:29 UTC, 0 replies.
- (struts-site) branch docs/wire-security-guide deleted (was 7af957caa) - posted by lu...@apache.org on 2026/05/27 05:37:33 UTC, 0 replies.
- (struts) branch WW-5631-chaining-require-annotations created (now a1740a45c) - posted by lu...@apache.org on 2026/05/27 06:44:40 UTC, 0 replies.
- (struts) 01/10: WW-5631 docs(chaining): add design spec and implementation plan - posted by lu...@apache.org on 2026/05/27 06:44:41 UTC, 0 replies.
- (struts) 02/10: WW-5631 feat(chaining): add struts.chaining.requireAnnotations constant - posted by lu...@apache.org on 2026/05/27 06:44:42 UTC, 0 replies.
- (struts) 03/10: WW-5631 feat(chaining): default struts.chaining.requireAnnotations=false - posted by lu...@apache.org on 2026/05/27 06:44:43 UTC, 0 replies.
- (struts) 04/10: WW-5631 test(chaining): add annotated/unannotated chaining fixtures - posted by lu...@apache.org on 2026/05/27 06:44:44 UTC, 0 replies.
- (struts) 05/10: WW-5631 test(chaining): add failing @StrutsParameter enforcement tests - posted by lu...@apache.org on 2026/05/27 06:44:45 UTC, 0 replies.
- (struts) 06/10: WW-5631 feat(chaining): enforce @StrutsParameter on target when opted in - posted by lu...@apache.org on 2026/05/27 06:44:46 UTC, 0 replies.
- (struts) 07/10: WW-5631 refactor(chaining): align requireAnnotations parsing with BooleanUtils - posted by lu...@apache.org on 2026/05/27 06:44:47 UTC, 0 replies.
- (struts) 08/10: WW-5631 test(chaining): cover includes interaction and proxied target - posted by lu...@apache.org on 2026/05/27 06:44:48 UTC, 0 replies.
- (struts) 09/10: WW-5631 docs(chaining): document struts.chaining.requireAnnotations - posted by lu...@apache.org on 2026/05/27 06:44:49 UTC, 0 replies.
- (struts) 10/10: WW-5631 test(chaining): cover fail-closed introspection; clarify target==action - posted by lu...@apache.org on 2026/05/27 06:44:50 UTC, 0 replies.
- (struts) branch WW-5631-chaining-require-annotations updated (a1740a45c -> ab5b25f7f) - posted by lu...@apache.org on 2026/05/27 06:54:42 UTC, 0 replies.
- (struts) branch main updated: build(deps): bump github/codeql-action from 4.35.5 to 4.36.0 (#1710) - posted by lu...@apache.org on 2026/05/28 05:16:58 UTC, 0 replies.
- (struts) branch dependabot/github_actions/github/codeql-action-4.36.0 deleted (was 22e4a3c6e) - posted by lu...@apache.org on 2026/05/28 05:17:01 UTC, 0 replies.
- (struts) branch main updated: build(deps): bump org.apache.maven.plugins:maven-site-plugin (#1711) - posted by lu...@apache.org on 2026/05/28 05:17:21 UTC, 0 replies.
- (struts) branch dependabot/maven/main/org.apache.maven.plugins-maven-site-plugin-3.22.0 deleted (was ae3cbdca1) - posted by lu...@apache.org on 2026/05/28 05:17:27 UTC, 0 replies.
- (struts) branch main updated: build(deps): bump asm.version from 9.10 to 9.10.1 (#1713) - posted by lu...@apache.org on 2026/05/28 05:17:35 UTC, 0 replies.
- (struts) branch dependabot/maven/main/asm.version-9.10.1 deleted (was ba9d6651d) - posted by lu...@apache.org on 2026/05/28 05:17:45 UTC, 0 replies.
- (struts) branch dependabot/maven/main/org.hibernate-hibernate-core-7.3.6.Final deleted (was ef9179c62) - posted by lu...@apache.org on 2026/05/28 05:17:56 UTC, 0 replies.
- (struts) branch dependabot/maven/support/struts-6-x-x/org.hibernate-hibernate-core-7.3.5.Final deleted (was cc6b3d89d) - posted by gi...@apache.org on 2026/05/28 05:18:17 UTC, 0 replies.
- (struts) branch support/struts-6-x-x updated: build(deps-dev): bump org.apache.maven.plugins:maven-enforcer-plugin (#1715) - posted by lu...@apache.org on 2026/05/28 05:19:10 UTC, 0 replies.
- (struts) branch dependabot/maven/support/struts-6-x-x/org.apache.maven.plugins-maven-enforcer-plugin-3.6.3 deleted (was 9ae509437) - posted by lu...@apache.org on 2026/05/28 05:19:12 UTC, 0 replies.
- (struts) branch support/struts-6-x-x updated: build(deps): bump jackson.version from 2.21.2 to 2.21.3 (#1716) - posted by lu...@apache.org on 2026/05/28 05:19:22 UTC, 0 replies.
- (struts) branch dependabot/maven/support/struts-6-x-x/jackson.version-2.21.3 deleted (was cbf2b1172) - posted by lu...@apache.org on 2026/05/28 05:19:29 UTC, 0 replies.
- (struts) branch support/struts-6-x-x updated: build(deps-dev): bump org.apache.maven.plugins:maven-assembly-plugin (#1717) - posted by lu...@apache.org on 2026/05/28 05:19:40 UTC, 0 replies.
- (struts) branch dependabot/maven/support/struts-6-x-x/org.apache.maven.plugins-maven-assembly-plugin-3.8.0 deleted (was dfaa5bb40) - posted by lu...@apache.org on 2026/05/28 05:19:47 UTC, 0 replies.
- (struts) branch dependabot/maven/support/struts-6-x-x/org.apache.maven.plugins-maven-site-plugin-3.22.0 deleted (was 214657453) - posted by lu...@apache.org on 2026/05/28 05:19:50 UTC, 0 replies.
- (struts) branch support/struts-6-x-x updated: build(deps-dev): bump org.apache.maven.plugins:maven-site-plugin (#1718) - posted by lu...@apache.org on 2026/05/28 05:19:53 UTC, 0 replies.
- svn commit: r84825 - dev/struts/6.10.0 release/struts/6.10.0 - posted by lu...@apache.org on 2026/05/29 05:37:37 UTC, 0 replies.
- (struts) branch docs/triaging-security-reports-skill created (now dd91cd7e1) - posted by lu...@apache.org on 2026/05/29 07:05:40 UTC, 0 replies.
- (struts) 01/01: docs(skills): add triaging-security-reports skill - posted by lu...@apache.org on 2026/05/29 07:05:41 UTC, 0 replies.
- (struts) branch WW-5631-chaining-require-annotations updated (ab5b25f7f -> ed4036311) - posted by lu...@apache.org on 2026/05/29 09:30:46 UTC, 0 replies.
- (struts-site) branch docs/announce-6.10.0 created (now 458dabea5) - posted by lu...@apache.org on 2026/05/29 12:20:36 UTC, 0 replies.
- (struts-site) 01/01: docs: announce Apache Struts 6.10.0 GA release - posted by lu...@apache.org on 2026/05/29 12:20:37 UTC, 0 replies.
- (struts-site) branch main updated: docs: announce Apache Struts 6.10.0 GA release (#301) - posted by lu...@apache.org on 2026/05/29 12:28:24 UTC, 0 replies.
- (struts-site) branch docs/announce-6.10.0 deleted (was 458dabea5) - posted by lu...@apache.org on 2026/05/29 12:28:30 UTC, 0 replies.
- (struts-site) branch docs/skill-announcing-release created (now 1157bf34b) - posted by lu...@apache.org on 2026/05/29 12:29:37 UTC, 0 replies.
- (struts-site) 01/01: docs: add announcing-struts-release skill - posted by lu...@apache.org on 2026/05/29 12:29:38 UTC, 0 replies.
- (struts-site) branch main updated: docs: add announcing-struts-release skill (#302) - posted by lu...@apache.org on 2026/05/29 12:40:32 UTC, 0 replies.
- (struts-site) branch docs/skill-announcing-release deleted (was 1157bf34b) - posted by lu...@apache.org on 2026/05/29 12:40:36 UTC, 0 replies.