You are viewing a plain text version of this content. The canonical link for it is here.
- [VOTE] Apache cxf-xjc-utils 4.2.0 / 4.1.3 - posted by Andriy Redko <dr...@gmail.com> on 2026/05/01 02:05:18 UTC, 6 replies.
- [PR] Updating Mina to 2.2.7 [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/05/01 10:55:34 UTC, 1 replies.
- Re: [PR] Make sure UriInfoImpl#getMatchedResourceTemplate incorporates application path if configured [cxf] - posted by "reta (via GitHub)" <gi...@apache.org> on 2026/05/02 14:52:18 UTC, 0 replies.
- [VOTE] Apache cxf-build-utils 4.1.4 - posted by Andriy Redko <dr...@gmail.com> on 2026/05/02 17:57:07 UTC, 7 replies.
- [PR] Bump com.puppycrawl.tools:checkstyle from 12.3.1 to 13.4.1 [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/04 01:17:23 UTC, 2 replies.
- [PR] Bump github/codeql-action from 4 to 4.35.2 [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/04 01:18:27 UTC, 1 replies.
- [PR] Bump cxf.openwebbeans.version from 4.0.3 to 4.1.0 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/04 02:43:48 UTC, 1 replies.
- [PR] Bump com.puppycrawl.tools:checkstyle from 13.4.0 to 13.4.1 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/04 02:44:03 UTC, 1 replies.
- [PR] Bump io.swagger.core.v3:swagger-jaxrs2-jakarta from 2.2.48 to 2.2.49 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/04 02:46:19 UTC, 1 replies.
- [PR] Bump cxf.johnzon.version from 2.0.2 to 2.1.0 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/04 02:46:56 UTC, 1 replies.
- [PR] Bump github/codeql-action from 4 to 4.35.2 [cxf-build-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/05 01:38:36 UTC, 1 replies.
- [PR] Bump org.atmosphere:atmosphere-runtime from 3.1.0 to 4.0.41 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/05 04:19:14 UTC, 2 replies.
- Re: [PR] Bump org.atmosphere:atmosphere-runtime from 3.1.0 to 4.0.40 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/05 04:19:16 UTC, 1 replies.
- [PR] Bump org.webjars:swagger-ui from 5.32.4 to 5.32.5 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/05 04:20:51 UTC, 1 replies.
- [PR] Bump jaxb-runtime-version from 4.0.7 to 4.0.8 [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/06 01:12:54 UTC, 1 replies.
- [PR] Bump org.glassfish.jaxb:jaxb-xjc from 4.0.7 to 4.0.8 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/06 02:44:14 UTC, 4 replies.
- [PR] Bump org.glassfish.jaxb:jaxb-runtime from 4.0.7 to 4.0.8 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/06 02:44:42 UTC, 1 replies.
- [PR] Bump io.opentelemetry.semconv:opentelemetry-semconv from 1.40.0 to 1.41.0 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/06 02:48:34 UTC, 1 replies.
- [PR] Update Jetty to 12.1.9 [cxf] - posted by "reta (via GitHub)" <gi...@apache.org> on 2026/05/07 01:50:05 UTC, 1 replies.
- [PR] Bump cxf.jetty.version from 12.1.8 to 12.1.9 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/07 02:48:08 UTC, 0 replies.
- [PR] Bump org.atmosphere:atmosphere-runtime from 3.1.0 to 4.0.42 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/07 02:49:14 UTC, 2 replies.
- [PR] Bump cxf.tomcat.version from 11.0.21 to 11.0.22 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/07 02:50:22 UTC, 1 replies.
- Re: [PR] Fix OAuth2 test flakiness from Response/WebClient resource leaks [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/05/07 09:41:39 UTC, 0 replies.
- Re: [PR] Fix RFC 9068 compliance: set typ header to at+jwt for JWT access tokens [cxf] - posted by "reta (via GitHub)" <gi...@apache.org> on 2026/05/07 13:22:45 UTC, 0 replies.
- [PR] Adding LDAP XKMS tests [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/05/07 15:55:24 UTC, 1 replies.
- Re: [PR] Improve tracing test diagnostics for flaky test investigation [cxf] - posted by "reta (via GitHub)" <gi...@apache.org> on 2026/05/07 23:32:15 UTC, 0 replies.
- [PR] Bump com.puppycrawl.tools:checkstyle from 12.3.1 to 13.4.2 [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/08 01:11:54 UTC, 2 replies.
- [PR] Bump cxf.hibernate.em.version from 7.3.2.Final to 7.3.3.Final [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/08 02:44:05 UTC, 1 replies.
- [PR] Bump org.apache.maven.plugins:maven-invoker-plugin from 3.10.0 to 3.10.1 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/08 02:45:04 UTC, 1 replies.
- [PR] Bump com.puppycrawl.tools:checkstyle from 13.4.1 to 13.4.2 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/08 02:46:17 UTC, 1 replies.
- Re: [PR] Updating Apache Neethi to 3.2.2 [cxf] - posted by "dldnhf (via GitHub)" <gi...@apache.org> on 2026/05/08 06:18:21 UTC, 1 replies.
- [PR] Removing Jackson2 jars coming from WSS4J [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/05/08 08:32:40 UTC, 1 replies.
- [PR] Restrict valid URL protocols in TLSParameterJaxBUtils and URIResolver [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/05/08 11:22:18 UTC, 3 replies.
- [PR] Validate SQL expressions after FIQL conversion [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/05/08 12:11:41 UTC, 1 replies.
- [PR] [CXF-9147]To accommodate the behaviour that several schema namespaces… [cxf] - posted by "ffang (via GitHub)" <gi...@apache.org> on 2026/05/08 15:01:33 UTC, 3 replies.
- [PR] Bump github/codeql-action from 4.35.2 to 4.35.3 [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/11 01:22:10 UTC, 1 replies.
- [PR] Bump github/codeql-action from 4.35.2 to 4.35.3 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/11 02:47:50 UTC, 1 replies.
- [PR] Bump org.apache.groovy:groovy from 5.0.5 to 5.0.6 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/11 02:47:58 UTC, 1 replies.
- [PR] Bump jakarta.ws.rs:jakarta.ws.rs-api from 3.1.0 to 4.0.0 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/11 02:48:13 UTC, 1 replies.
- [PR] Bump org.glassfish.corba:glassfish-corba-orb from 5.0.0 to 5.0.2 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/11 02:49:29 UTC, 1 replies.
- Re: [PR] Remove SQLPrinterVisitor [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/05/11 10:27:03 UTC, 3 replies.
- [PR] Removing HTTPSPStateManager from 4.2.x as it appears not to be used [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/05/11 13:06:47 UTC, 1 replies.
- [PR] Make sure that users can't revoke other users tokens [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/05/11 13:56:42 UTC, 1 replies.
- [PR] Bump github/codeql-action from 4.31.0 to 4.35.3 [cxf-fediz] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/11 20:05:41 UTC, 1 replies.
- Re: [PR] Bump github/codeql-action from 4.31.0 to 4.35.2 [cxf-fediz] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/11 20:05:44 UTC, 1 replies.
- [PR] CXF-9211: [JAX-RS proxy clients] Use template URL instead of actual path values for JAX-RS micrometer metrics [cxf] - posted by "reta (via GitHub)" <gi...@apache.org> on 2026/05/12 00:28:26 UTC, 1 replies.
- [PR] Bump org.apache:apache from 37 to 38 [cxf-build-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/12 04:25:44 UTC, 1 replies.
- [PR] Bump github/codeql-action from 4.35.2 to 4.35.4 [cxf-build-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/12 04:26:35 UTC, 1 replies.
- [PR] Some other DN injection issues found in the LdapCertificateRepo [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/05/12 05:31:51 UTC, 1 replies.
- [PR] Bump org.apache:apache from 37 to 38 [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/12 06:37:46 UTC, 1 replies.
- [PR] Bump io.undertow:undertow-core from 2.4.0.RC4 to 2.4.0.Final [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/12 07:38:00 UTC, 1 replies.
- [PR] Bump org.atmosphere:atmosphere-runtime from 3.1.0 to 4.0.43 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/12 07:38:20 UTC, 2 replies.
- [PR] Bump org.owasp:dependency-check-maven from 12.2.1 to 12.2.2 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/12 07:38:44 UTC, 1 replies.
- [PR] Bump org.jboss.ws.cxf:jbossws-cxf-client from 7.3.7.Final to 7.3.8.Final [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/12 07:39:24 UTC, 1 replies.
- [PR] Coheigea/misc fixes [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/05/12 09:07:49 UTC, 0 replies.
- Re: [PR] Wire the STSClient through to URIResolver [cxf] - posted by "github-advanced-security[bot] (via GitHub)" <gi...@apache.org> on 2026/05/12 09:26:19 UTC, 1 replies.
- [PR] Removing some unused util Jose methods [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/05/12 10:54:59 UTC, 1 replies.
- [PR] Tighten up where we can download resources for Jose from [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/05/12 14:04:51 UTC, 1 replies.
- Re: New releases? - posted by Colm O hEigeartaigh <co...@apache.org> on 2026/05/12 15:27:05 UTC, 10 replies.
- [PR] CXF-9161: Some of the OIDCFlowTest fail with timeout (JPA only) when HttpClient instance is shared [cxf] - posted by "reta (via GitHub)" <gi...@apache.org> on 2026/05/12 23:08:01 UTC, 0 replies.
- [PR] Bump org.atmosphere:atmosphere-runtime from 3.1.0 to 4.0.44 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/13 02:51:19 UTC, 2 replies.
- [PR] Bump org.codehaus.cargo:cargo-maven2-plugin from 1.8.5 to 1.9.0 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/13 02:52:54 UTC, 1 replies.
- [PR] Bump com.sun.xml.messaging.saaj:saaj-impl from 3.0.4 to 3.0.5 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/13 02:53:14 UTC, 1 replies.
- Re: [PR] Bump actions/upload-artifact from 7.0.0 to 7.0.1 [cxf-fediz] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/05/13 12:11:40 UTC, 0 replies.
- Re: [PR] Bump org.apache.rat:apache-rat-plugin from 0.17 to 0.18 [cxf-fediz] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/05/13 12:11:50 UTC, 0 replies.
- Re: [PR] Bump org.ehcache:ehcache from 3.10.8 to 3.11.1 [cxf-fediz] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/05/13 12:12:00 UTC, 0 replies.
- [PR] Bump org.apache.maven.plugins:maven-source-plugin from 3.3.1 to 3.4.0 [cxf-fediz] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/13 12:43:24 UTC, 1 replies.
- [PR] Bump net.sourceforge.pmd:pmd-java from 7.17.0 to 7.24.0 [cxf-fediz] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/13 12:43:45 UTC, 0 replies.
- [PR] Bump org.apache.syncope.core:syncope-core-persistence-jpa from 2.1.6 to 4.1.0 [cxf-fediz] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/13 12:46:36 UTC, 3 replies.
- Re: [PR] Bump org.apache.syncope.core:syncope-core-persistence-jpa from 2.1.6 to 4.0.4 [cxf-fediz] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/13 12:46:38 UTC, 1 replies.
- Re: [PR] Bump org.apache.wss4j:wss4j-ws-security-dom from 2.4.3 to 4.0.1 [cxf-fediz] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/05/13 13:39:50 UTC, 2 replies.
- [PR] Copy JPA classes form Syncope into the project [cxf-fediz] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/05/13 14:57:45 UTC, 1 replies.
- Re: [PR] Bump org.glassfish.jaxb:jaxb-runtime from 2.3.9 to 3.0.0 [cxf-fediz] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/05/13 15:40:46 UTC, 2 replies.
- "Restrict valid URL protocols in TLSParameterJaxBUtils and URIResolver" PR issue tracker - posted by Fabio Burzigotti via dev <de...@cxf.apache.org> on 2026/05/14 11:18:35 UTC, 5 replies.
- [PR] Add vfs to URIResolver [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/05/14 12:43:03 UTC, 1 replies.
- [PR] Bump org.ehcache:ehcache from 3.11.1 to 3.12.0 [cxf-fediz] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/14 12:44:10 UTC, 0 replies.
- [PR] Bump org.apache.bval:bval-jsr from 2.0.6 to 3.0.0 [cxf-fediz] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/14 12:44:15 UTC, 0 replies.
- [PR] Bump com.fasterxml.jackson:jackson-bom from 2.21.0 to 2.21.3 [cxf-fediz] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/14 12:44:21 UTC, 1 replies.
- [PR] Bump openjpa.version from 3.2.2 to 4.0.0 [cxf-fediz] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/14 12:44:32 UTC, 3 replies.
- [PR] Eliminate superfluous dependendencies from cxf-xjc-javadoc [cxf-xjc-utils] - posted by "ppalaga (via GitHub)" <gi...@apache.org> on 2026/05/14 13:11:38 UTC, 1 replies.
- [VOTE] Release CXF 4.2.1, 4.1.6 and 3.6.11 - posted by Freeman Fang <fr...@gmail.com> on 2026/05/14 20:40:11 UTC, 9 replies.
- [PR] Bump org.apache.cxf.build-utils:cxf-buildtools from 4.1.3 to 4.1.4 [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/15 01:12:40 UTC, 1 replies.
- [PR] Bump cxf.hibernate.em.version from 7.3.3.Final to 7.3.4.Final [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/15 02:47:18 UTC, 1 replies.
- [PR] [INFRA] Set up default rulesets for default and release branches [cxf-build-utils] - posted by "asf-gitbox-commits (via GitHub)" <gi...@apache.org> on 2026/05/15 20:22:19 UTC, 2 replies.
- [PR] [INFRA] Set up default rulesets for default and release branches [cxf-fediz] - posted by "asf-gitbox-commits (via GitHub)" <gi...@apache.org> on 2026/05/15 20:22:24 UTC, 1 replies.
- [PR] [INFRA] Set up default rulesets for default and release branches [cxf-site] - posted by "asf-gitbox-commits (via GitHub)" <gi...@apache.org> on 2026/05/15 20:22:34 UTC, 2 replies.
- [PR] [INFRA] Set up default rulesets for default and release branches [cxf-xjc-utils] - posted by "asf-gitbox-commits (via GitHub)" <gi...@apache.org> on 2026/05/15 20:22:36 UTC, 4 replies.
- [PR] [INFRA] Set up default rulesets for default and release branches [cxf] - posted by "asf-gitbox-commits (via GitHub)" <gi...@apache.org> on 2026/05/15 20:22:38 UTC, 2 replies.
- [PR] Bump github/codeql-action from 4.35.3 to 4.35.4 [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/18 01:38:21 UTC, 1 replies.
- [PR] Bump cxf.hazelcast.version from 5.6.0 to 5.7.0 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/18 03:10:03 UTC, 1 replies.
- [PR] Bump cxf.slf4j.version from 2.0.17 to 2.0.18 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/18 03:10:57 UTC, 1 replies.
- [PR] Bump github/codeql-action from 4.35.3 to 4.35.4 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/18 03:11:05 UTC, 1 replies.
- [PR] Bump org.atmosphere:atmosphere-runtime from 3.1.0 to 4.0.45 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/18 03:12:33 UTC, 2 replies.
- [PR] Bump jaxen:jaxen from 2.0.1 to 2.0.2 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/18 03:12:48 UTC, 1 replies.
- [PR] Bump org.apache.kerby:kerb-simplekdc from 2.1.0 to 2.1.1 [cxf-fediz] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/18 22:24:03 UTC, 1 replies.
- [PR] Bump spring.security.version from 5.8.16 to 7.0.5 [cxf-fediz] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/18 22:24:33 UTC, 3 replies.
- [PR] Bump github/codeql-action from 4.35.3 to 4.35.4 [cxf-fediz] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/18 22:25:32 UTC, 1 replies.
- [PR] Bump org.apache.maven:maven-plugin-api from 3.9.15 to 3.9.16 [cxf-build-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/19 08:01:10 UTC, 1 replies.
- [PR] Bump org.apache.maven:maven-model from 3.9.15 to 3.9.16 [cxf-build-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/19 08:01:12 UTC, 1 replies.
- [PR] Bump org.apache.maven:maven-artifact from 3.9.15 to 3.9.16 [cxf-build-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/19 08:01:14 UTC, 1 replies.
- [PR] Properly throw exception in introspection service [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/05/19 09:17:22 UTC, 1 replies.
- [PR] Bump org.apache.maven:maven-core from 3.9.15 to 3.9.16 [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/19 12:29:54 UTC, 1 replies.
- [PR] Bump org.apache.maven:maven-plugin-api from 3.9.15 to 3.9.16 [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/19 12:30:07 UTC, 1 replies.
- [PR] Bump org.apache.maven:maven-compat from 3.9.15 to 3.9.16 [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/19 12:30:13 UTC, 1 replies.
- [PR] Bump cxf.maven.core.version from 3.9.15 to 3.9.16 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/19 14:50:04 UTC, 1 replies.
- [PR] Bump io.opentelemetry.semconv:opentelemetry-semconv from 1.41.0 to 1.41.1 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/19 14:53:22 UTC, 1 replies.
- [PR] CXF-9214 WSDLs and XSDs cannot be loaded from class path on GraalVM [cxf] - posted by "ppalaga (via GitHub)" <gi...@apache.org> on 2026/05/19 17:34:06 UTC, 8 replies.
- [PR] Bump org.apache.wss4j:wss4j-ws-security-dom from 2.4.3 to 3.0.0 [cxf-fediz] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/19 23:32:42 UTC, 0 replies.
- [PR] Bump org.springframework.webflow:spring-webflow from 2.5.1.RELEASE to 4.0.0 [cxf-fediz] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/19 23:33:01 UTC, 0 replies.
- [PR] Bump cxf.activemq.artemis.version from 2.53.0 to 2.54.0 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/20 07:14:05 UTC, 1 replies.
- [PR] Validate expiry, nbf + audience for the JwtAccessTokenValidator [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/05/20 14:02:52 UTC, 1 replies.
- [PR] Fix the OAuth2 client ip address check and add a test [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/05/20 16:08:51 UTC, 1 replies.
- [PR] Removing OAuthServiceExceptionMapper which isn't used anywhere [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/05/20 16:23:07 UTC, 3 replies.
- Re: Buildbot job disabled which used to publish your website - posted by Andriy Redko <dr...@gmail.com> on 2026/05/20 18:25:28 UTC, 0 replies.
- [PR] Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.2 to 3.6.3 [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/21 01:57:49 UTC, 1 replies.
- [PR] Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.2 to 3.6.3 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/21 02:48:49 UTC, 1 replies.
- [PR] Bump jaxen:jaxen from 2.0.2 to 2.0.3 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/21 02:50:56 UTC, 1 replies.
- [PR] Bump org.atmosphere:atmosphere-runtime from 3.1.0 to 4.0.46 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/21 02:51:16 UTC, 2 replies.
- JDK 27 Approaches Rampdown | Final Field Mutation Warnings Heads-up - posted by David Delabassee via dev <de...@cxf.apache.org> on 2026/05/21 08:00:42 UTC, 0 replies.
- [PR] CXF-9216 - Switch default OAuth2 code verifier to Digest [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/05/21 09:01:56 UTC, 3 replies.
- [PR] Synchronize access token refresh when refresh tokens aren't recycled [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/05/21 15:23:24 UTC, 2 replies.
- [PR] Remove TLS v1 + 1.1 from the default protocol list [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/05/21 16:11:51 UTC, 1 replies.
- [PR] Bump cxf.hibernate.em.version from 7.3.4.Final to 7.3.5.Final [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/22 02:44:33 UTC, 1 replies.
- [PR] Removing control characters from OAuth2 realm and logs [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/05/22 10:20:44 UTC, 2 replies.
- CVE-2026-44417: Apache CXF: Incomplete fix for CVE-2025-48913 (Untrusted JMS configuration can lead to RCE) - posted by Colm O hEigeartaigh <co...@apache.org> on 2026/05/22 11:10:29 UTC, 0 replies.
- CVE-2026-44618: Apache CXF: XXE vulnerability in WS-Transfer functionality - posted by Colm O hEigeartaigh <co...@apache.org> on 2026/05/22 11:11:59 UTC, 0 replies.
- CVE-2026-44930: Apache CXF: LDAP Injection vulnerability in XKMS LDAP Repository - posted by Colm O hEigeartaigh <co...@apache.org> on 2026/05/22 11:12:46 UTC, 0 replies.
- [PR] Handle NaN or infinite times in JSON/JWT [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/05/22 14:31:38 UTC, 3 replies.
- Re: [PR] CXF-8966 : Validation of nillable tags fails [cxf] - posted by "ppalaga (via GitHub)" <gi...@apache.org> on 2026/05/22 19:42:16 UTC, 4 replies.
- [PR] Update Woodstox to 7.2.0 [cxf] - posted by "reta (via GitHub)" <gi...@apache.org> on 2026/05/23 20:30:45 UTC, 1 replies.
- [PR] Bump github/codeql-action from 4.35.4 to 4.35.5 [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/25 01:34:33 UTC, 1 replies.
- [PR] Bump github/codeql-action from 4.35.4 to 4.35.5 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/25 03:05:04 UTC, 1 replies.
- [PR] Fix bug in JSON parsing relating to escaped backslashes [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/05/25 09:47:16 UTC, 1 replies.
- [PR] Improve JSON key parsing [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/05/25 13:09:12 UTC, 1 replies.
- [PR] Support unicode characters in the json parser [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/05/25 16:09:07 UTC, 1 replies.
- [PR] Bump github/codeql-action from 4.35.4 to 4.35.5 [cxf-fediz] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/25 18:40:08 UTC, 0 replies.
- [PR] [CXF-9213]make RetryStrategy stateless [cxf] - posted by "ffang (via GitHub)" <gi...@apache.org> on 2026/05/25 20:07:35 UTC, 4 replies.
- [PR] Bump org.apache.maven.plugins:maven-site-plugin from 3.21.0 to 3.22.0 [cxf-build-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/26 03:40:25 UTC, 1 replies.
- [PR] Bump github/codeql-action from 4.35.4 to 4.35.5 [cxf-build-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/26 03:41:31 UTC, 1 replies.
- [PR] Bump org.apache.maven.plugins:maven-site-plugin from 3.21.0 to 3.22.0 [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/26 06:21:24 UTC, 1 replies.
- [PR] Bump org.apache.maven.plugins:maven-site-plugin from 3.21.0 to 3.22.0 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/26 07:38:09 UTC, 1 replies.
- [PR] Escape JSON control characters [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/05/26 08:49:45 UTC, 1 replies.
- [PR] Bump cxf.tika.version from 3.3.0 to 3.3.1 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/27 04:42:04 UTC, 1 replies.
- [PR] Bump org.atmosphere:atmosphere-runtime from 3.1.0 to 4.0.47 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/27 04:42:27 UTC, 0 replies.
- [PR] UriInfoImpl import proper StringUtils [cxf] - posted by "jungm (via GitHub)" <gi...@apache.org> on 2026/05/27 07:05:30 UTC, 2 replies.
- [PR] Add a depth limit for JSON parsing mirroring what Jettison does [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/05/27 09:35:13 UTC, 1 replies.
- [PR] More JNDI validation [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/05/27 12:12:38 UTC, 1 replies.
- [PR] [CXF-8966] : fix validation of nil int in xsd [cxf] - posted by "reta (via GitHub)" <gi...@apache.org> on 2026/05/28 02:51:03 UTC, 1 replies.
- [PR] Apply the JSON depth limit to writes as well [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/05/28 08:58:22 UTC, 1 replies.
- [PR] [CXF-9129]Chunked attachment streaming not working when using ws-secu… [cxf] - posted by "ffang (via GitHub)" <gi...@apache.org> on 2026/05/28 13:51:55 UTC, 2 replies.
- [PR] [CXF-9218]Respect configured ProxySelector instead of hard-wiring sys… [cxf] - posted by "ffang (via GitHub)" <gi...@apache.org> on 2026/05/28 23:28:48 UTC, 2 replies.
- [PR] Bump cxf.hibernate.em.version from 7.3.5.Final to 7.3.6.Final [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/29 02:45:59 UTC, 1 replies.
- [PR] Bump org.ow2.asm:asm from 9.10 to 9.10.1 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/29 02:46:38 UTC, 1 replies.
- [PR] Bump org.apache.maven.plugins:maven-dependency-plugin from 3.10.0 to 3.11.0 [cxf-build-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/30 00:00:21 UTC, 1 replies.
- [PR] More SchemaFactory hardenings [cxf] - posted by "reta (via GitHub)" <gi...@apache.org> on 2026/05/30 03:57:16 UTC, 1 replies.
- [PR] Add umbrella threat model + AGENTS.md and link from SECURITY.md for security-model discoverability [cxf] - posted by "potiuk (via GitHub)" <gi...@apache.org> on 2026/05/31 01:27:23 UTC, 0 replies.
- [PR] Add draft threat model + AGENTS.md and link from SECURITY.md for security-model discoverability [cxf-fediz] - posted by "potiuk (via GitHub)" <gi...@apache.org> on 2026/05/31 01:32:38 UTC, 0 replies.
- [PR] Add SECURITY.md + AGENTS.md pointing at the CXF umbrella threat model for discoverability [cxf-build-utils] - posted by "potiuk (via GitHub)" <gi...@apache.org> on 2026/05/31 01:33:32 UTC, 0 replies.
- [PR] Add SECURITY.md + AGENTS.md pointing at the CXF umbrella threat model for discoverability [cxf-xjc-utils] - posted by "potiuk (via GitHub)" <gi...@apache.org> on 2026/05/31 01:37:51 UTC, 0 replies.
- [PR] Add limit to the maximum number of attachment headers to be collected [cxf] - posted by "reta (via GitHub)" <gi...@apache.org> on 2026/05/31 14:28:50 UTC, 0 replies.