You are viewing a plain text version of this content. The canonical link for it is here.
- [jira] [Created] (RAT-558) Explain XXE-warnings in RAT code and add security guidelines to webpage and RAT repo - posted by "Philipp Ottlinger (Jira)" <ji...@apache.org> on 2026/06/01 06:19:00 UTC, 0 replies.
- [jira] [Updated] (RAT-558) Explain XXE-warnings in RAT code and add security guidelines to webpage and RAT repo - posted by "Philipp Ottlinger (Jira)" <ji...@apache.org> on 2026/06/01 06:19:00 UTC, 1 replies.
- Re: [RAT] security issues - posted by "P. Ottlinger" <po...@apache.org> on 2026/06/01 06:19:33 UTC, 1 replies.
- Re: [PR] RAT-532: Bump org.apache.maven.plugins:maven-dependency-plugin from 3.10.0 to 3.11.0 [creadur-rat] - posted by "ottlinger (via GitHub)" <gi...@apache.org> on 2026/06/01 08:45:53 UTC, 0 replies.
- [jira] [Commented] (RAT-532) ONGOING - Dependency updates via dependabot performed for release 1.0.0 - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/06/01 08:46:00 UTC, 26 replies.
- [jira] [Updated] (RAT-532) ONGOING - Dependency updates via dependabot performed for release 1.0.0 - posted by "Philipp Ottlinger (Jira)" <ji...@apache.org> on 2026/06/01 08:47:00 UTC, 10 replies.
- [jira] [Commented] (RAT-540) Create UI package in Core and support additional options - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/06/01 08:48:00 UTC, 7 replies.
- [jira] [Commented] (RAT-482) Maven Changelog Plugin breaks the builds due to deprecated git command used within the plugin - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/06/01 08:48:00 UTC, 1 replies.
- [jira] [Closed] (RAT-482) Maven Changelog Plugin breaks the builds due to deprecated git command used within the plugin - posted by "Philipp Ottlinger (Jira)" <ji...@apache.org> on 2026/06/01 08:52:00 UTC, 1 replies.
- Re: [PR] RAT-482: Re-enable version 3.0.0-M2 of changelog plugin [creadur-rat] - posted by "sonarqubecloud[bot] (via GitHub)" <gi...@apache.org> on 2026/06/01 08:53:07 UTC, 1 replies.
- [jira] [Reopened] (RAT-482) Maven Changelog Plugin breaks the builds due to deprecated git command used within the plugin - posted by "Philipp Ottlinger (Jira)" <ji...@apache.org> on 2026/06/01 08:56:00 UTC, 0 replies.
- Re: [PR] RAT-541: create testhelpers.data package [creadur-rat] - posted by "sonarqubecloud[bot] (via GitHub)" <gi...@apache.org> on 2026/06/01 13:57:47 UTC, 13 replies.
- [PR] RAT-482: Regen webpage after latest merges [creadur-site] - posted by "ottlinger (via GitHub)" <gi...@apache.org> on 2026/06/01 15:21:21 UTC, 1 replies.
- [jira] [Updated] (RAT-558) Explain XXE-warnings in RAT code and add security guidelines to webpage and agents config to RAT repo - posted by "Philipp Ottlinger (Jira)" <ji...@apache.org> on 2026/06/01 19:33:00 UTC, 1 replies.
- [PR] RAT-558: Add proposals for AGENTS and SECURITY configuration - to be discussed [creadur-rat] - posted by "ottlinger (via GitHub)" <gi...@apache.org> on 2026/06/01 19:47:43 UTC, 6 replies.
- [jira] [Commented] (RAT-558) Explain XXE-warnings in RAT code and add security guidelines to webpage and agents config to RAT repo - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/06/01 19:48:00 UTC, 8 replies.
- [jira] [Assigned] (RAT-558) Explain XXE-warnings in RAT code and add security guidelines to webpage and agents config to RAT repo - posted by "Philipp Ottlinger (Jira)" <ji...@apache.org> on 2026/06/01 20:10:00 UTC, 0 replies.
- [PR] Bump com.fasterxml.jackson.module:jackson-module-jaxb-annotations from 2.21.4 to 2.22.0 [creadur-tentacles] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/02 18:27:52 UTC, 3 replies.
- [PR] Bump org.jacoco:jacoco-maven-plugin from 0.8.14 to 0.8.15 [creadur-rat] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/08 00:33:11 UTC, 0 replies.
- Re: [PR] RAT-532: Bump org.jacoco:jacoco-maven-plugin from 0.8.14 to 0.8.15 [creadur-rat] - posted by "ottlinger (via GitHub)" <gi...@apache.org> on 2026/06/08 07:36:14 UTC, 0 replies.
- Re: [PR] TENTACLES-16: Bump com.fasterxml.jackson.module:jackson-module-jaxb-annotations from 2.21.4 to 2.22.0 [creadur-tentacles] - posted by "ottlinger (via GitHub)" <gi...@apache.org> on 2026/06/08 14:15:51 UTC, 0 replies.
- [PR] Bump com.github.spotbugs:spotbugs-annotations from 4.9.8 to 4.10.1 [creadur-rat] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/09 00:32:36 UTC, 0 replies.
- Re: [PR] RAT-532: Bump com.github.spotbugs:spotbugs-annotations from 4.9.8 to 4.10.1 [creadur-rat] - posted by "ottlinger (via GitHub)" <gi...@apache.org> on 2026/06/09 08:00:40 UTC, 0 replies.
- [jira] [Created] (RAT-559) Issues with DocumentName - posted by "Claude Warren (Jira)" <ji...@apache.org> on 2026/06/09 12:59:00 UTC, 0 replies.
- [jira] [Assigned] (RAT-559) Issues with DocumentName - posted by "Claude Warren (Jira)" <ji...@apache.org> on 2026/06/09 12:59:00 UTC, 0 replies.
- [jira] [Updated] (RAT-559) Issues with DocumentName - posted by "Claude Warren (Jira)" <ji...@apache.org> on 2026/06/09 13:01:00 UTC, 0 replies.
- [PR] fix DocumentName issues [creadur-rat] - posted by "Claudenw (via GitHub)" <gi...@apache.org> on 2026/06/09 13:47:18 UTC, 0 replies.
- Re: [PR] RAT-559: fix DocumentName issues in archives/on Windows [creadur-rat] - posted by "sonarqubecloud[bot] (via GitHub)" <gi...@apache.org> on 2026/06/09 13:52:43 UTC, 24 replies.
- [PR] Bump com.github.spotbugs:spotbugs-maven-plugin from 4.9.8.3 to 4.10.2.0 [creadur-rat] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/10 00:32:49 UTC, 2 replies.
- [PR] Bump com.github.spotbugs:spotbugs-annotations from 4.10.1 to 4.10.2 [creadur-rat] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/10 00:33:08 UTC, 0 replies.
- [PR] Add security threat model (THREAT_MODEL.md + SECURITY.md + AGENTS.md) [creadur-rat] - posted by "potiuk (via GitHub)" <gi...@apache.org> on 2026/06/10 17:38:17 UTC, 0 replies.
- [PR] RAT-532: Update spotbugs and use UTF-8 encoding in LicenseAppender an… [creadur-rat] - posted by "ottlinger (via GitHub)" <gi...@apache.org> on 2026/06/12 09:17:21 UTC, 0 replies.
- Re: [PR] RAT-532: Update spotbugs plugin and UTF-8 encoding [creadur-rat] - posted by "sonarqubecloud[bot] (via GitHub)" <gi...@apache.org> on 2026/06/12 09:21:28 UTC, 1 replies.
- Re: [PR] RAT-532: Bump com.github.spotbugs:spotbugs-annotations from 4.10.1 to 4.10.2 [creadur-rat] - posted by "ottlinger (via GitHub)" <gi...@apache.org> on 2026/06/12 11:13:24 UTC, 0 replies.
- Re: [PR] RAT-558: Add security threat model (THREAT_MODEL.md + SECURITY.md + AGENTS.md) [creadur-rat] - posted by "Claudenw (via GitHub)" <gi...@apache.org> on 2026/06/15 14:40:47 UTC, 26 replies.
- [PR] changes to reduce XXE exposure [creadur-rat] - posted by "Claudenw (via GitHub)" <gi...@apache.org> on 2026/06/16 15:49:19 UTC, 1 replies.
- [jira] [Assigned] (RAT-560) Static analysis shows XXE attack vectors - streamline usage in RAT and add documentation - posted by "Philipp Ottlinger (Jira)" <ji...@apache.org> on 2026/06/16 16:11:00 UTC, 0 replies.
- [jira] [Updated] (RAT-560) Static analysis shows XXE attack vectors - streamline usage in RAT and add documentation - posted by "Philipp Ottlinger (Jira)" <ji...@apache.org> on 2026/06/16 16:11:00 UTC, 1 replies.
- [jira] [Created] (RAT-560) Static analysis shows XXE attack vectors - streamline usage in RAT and add documentation - posted by "Philipp Ottlinger (Jira)" <ji...@apache.org> on 2026/06/16 16:11:00 UTC, 0 replies.
- [jira] [Commented] (RAT-560) Static analysis shows XXE attack vectors - streamline usage in RAT and add documentation - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/06/16 20:51:00 UTC, 20 replies.
- Re: [PR] RAT-560: changes to reduce XXE exposure [creadur-rat] - posted by "sonarqubecloud[bot] (via GitHub)" <gi...@apache.org> on 2026/06/16 20:54:17 UTC, 12 replies.
- [jira] [Resolved] (RAT-560) Static analysis shows XXE attack vectors - streamline usage in RAT and add documentation - posted by "Claude Warren (Jira)" <ji...@apache.org> on 2026/06/17 21:08:00 UTC, 0 replies.
- [PR] Bump actions/checkout from 6 to 7 [creadur-rat] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/19 00:32:19 UTC, 0 replies.
- [PR] Bump actions/checkout from 6 to 7 [creadur-whisker] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/19 04:12:40 UTC, 3 replies.
- Re: [PR] RAT-532: Bump actions/checkout from 6 to 7 [creadur-rat] - posted by "ottlinger (via GitHub)" <gi...@apache.org> on 2026/06/19 10:50:19 UTC, 0 replies.
- [PR] Bump actions/checkout from 6 to 7 [creadur-tentacles] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/19 14:02:17 UTC, 1 replies.
- Re: [PR] TENTACLES-16: Bump actions/checkout from 6 to 7 [creadur-tentacles] - posted by "ottlinger (via GitHub)" <gi...@apache.org> on 2026/06/19 14:07:13 UTC, 1 replies.
- [PR] Bump org.apache.ant:ant-antunit from 1.4.1 to 1.5.0 [creadur-rat] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/22 00:32:23 UTC, 0 replies.
- [PR] Bump com.gradle:develocity-maven-extension from 2.4.1 to 2.4.2 [creadur-rat] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/22 00:32:48 UTC, 0 replies.
- [PR] Bump com.gradle:develocity-maven-extension from 2.4.1 to 2.4.2 [creadur-whisker] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/22 04:24:50 UTC, 3 replies.
- Re: [PR] RAT-532: Bump com.gradle:develocity-maven-extension from 2.4.1 to 2.4.2 [creadur-rat] - posted by "ottlinger (via GitHub)" <gi...@apache.org> on 2026/06/22 07:34:56 UTC, 0 replies.
- Re: [PR] RAT-532: Bump org.apache.ant:ant-antunit from 1.4.1 to 1.5.0 [creadur-rat] - posted by "ottlinger (via GitHub)" <gi...@apache.org> on 2026/06/22 07:35:50 UTC, 0 replies.
- [PR] Bump com.gradle:develocity-maven-extension from 2.4.1 to 2.4.2 [creadur-tentacles] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/22 14:03:03 UTC, 1 replies.
- Re: [PR] TENTACLES-16: Bump com.gradle:develocity-maven-extension from 2.4.1 to 2.4.2 [creadur-tentacles] - posted by "ottlinger (via GitHub)" <gi...@apache.org> on 2026/06/22 14:11:14 UTC, 1 replies.
- [PR] Cleanup XmlWriter resource issues [creadur-rat] - posted by "Claudenw (via GitHub)" <gi...@apache.org> on 2026/06/23 11:09:09 UTC, 2 replies.
- [jira] [Assigned] (RAT-561) Simplify XmlWriter and tackle possible resource leakage - posted by "Philipp Ottlinger (Jira)" <ji...@apache.org> on 2026/06/23 12:31:00 UTC, 0 replies.
- [jira] [Created] (RAT-561) Simplify XmlWriter and tackle possible resource leakage - posted by "Philipp Ottlinger (Jira)" <ji...@apache.org> on 2026/06/23 12:31:00 UTC, 0 replies.
- [jira] [Commented] (RAT-559) Issues with DocumentName - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/06/23 13:23:00 UTC, 7 replies.
- Re: [PR] RAT-561: Cleanup XmlWriter resource issues [creadur-rat] - posted by "sonarqubecloud[bot] (via GitHub)" <gi...@apache.org> on 2026/06/23 14:06:25 UTC, 8 replies.
- [PR] Bump actions/cache from 5 to 6 [creadur-rat] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/24 00:32:17 UTC, 0 replies.
- [PR] Bump actions/cache from 5 to 6 [creadur-whisker] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/24 04:10:50 UTC, 3 replies.
- [jira] [Commented] (RAT-561) Simplify XmlWriter and tackle possible resource leakage - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/06/24 12:18:00 UTC, 6 replies.
- [PR] Bump actions/cache from 5 to 6 [creadur-tentacles] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/24 14:02:32 UTC, 3 replies.
- [jira] [Resolved] (RAT-561) Simplify XmlWriter and tackle possible resource leakage - posted by "Claude Warren (Jira)" <ji...@apache.org> on 2026/06/24 14:32:00 UTC, 0 replies.
- [jira] [Commented] (RAT-541) Create testhelper/data package - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/06/24 16:33:00 UTC, 2 replies.
- [jira] [Resolved] (RAT-559) Issues with DocumentName - posted by "Claude Warren (Jira)" <ji...@apache.org> on 2026/06/25 07:22:00 UTC, 0 replies.
- Re: [PR] RAT-532: Bump actions/cache from 5 to 6 [creadur-rat] - posted by "ottlinger (via GitHub)" <gi...@apache.org> on 2026/06/26 12:16:50 UTC, 0 replies.
- [jira] [Updated] (RAT-561) Simplify XmlWriter and tackle possible resource leakage - posted by "Philipp Ottlinger (Jira)" <ji...@apache.org> on 2026/06/26 17:13:00 UTC, 0 replies.
- [jira] [Created] (RAT-562) Remove boxing-unboxing in ClaimValidator - posted by "Claude Warren (Jira)" <ji...@apache.org> on 2026/06/28 07:09:00 UTC, 0 replies.
- [jira] [Assigned] (RAT-562) Remove boxing-unboxing in ClaimValidator - posted by "Claude Warren (Jira)" <ji...@apache.org> on 2026/06/28 07:10:00 UTC, 0 replies.
- [PR] RAT-562: Use MutableInt in ClaimValidator [creadur-rat] - posted by "Claudenw (via GitHub)" <gi...@apache.org> on 2026/06/28 07:14:34 UTC, 13 replies.
- [jira] [Created] (RAT-563) rename IReportable and IReportableListWalker in line with other buildable classes - posted by "Claude Warren (Jira)" <ji...@apache.org> on 2026/06/28 07:30:00 UTC, 0 replies.
- [jira] [Assigned] (RAT-563) rename IReportable and IReportableListWalker in line with other buildable classes - posted by "Claude Warren (Jira)" <ji...@apache.org> on 2026/06/28 07:31:00 UTC, 0 replies.
- [PR] RAT-563: Rename IReportable and IReportableListWalker [creadur-rat] - posted by "Claudenw (via GitHub)" <gi...@apache.org> on 2026/06/28 07:35:56 UTC, 1 replies.
- [jira] [Created] (RAT-564) Make license collections unmodifiable - posted by "Claude Warren (Jira)" <ji...@apache.org> on 2026/06/28 07:40:00 UTC, 0 replies.
- [jira] [Assigned] (RAT-564) Make license collections unmodifiable - posted by "Claude Warren (Jira)" <ji...@apache.org> on 2026/06/28 07:40:00 UTC, 0 replies.
- [jira] [Created] (RAT-565) Use assertj in core RAT tests - posted by "Claude Warren (Jira)" <ji...@apache.org> on 2026/06/28 08:01:00 UTC, 0 replies.
- [jira] [Assigned] (RAT-565) Use assertj in core RAT tests - posted by "Claude Warren (Jira)" <ji...@apache.org> on 2026/06/28 08:01:00 UTC, 0 replies.
- [PR] RAT-562: make LicenseSetFactory return unmodifiable licenses sets [creadur-rat] - posted by "Claudenw (via GitHub)" <gi...@apache.org> on 2026/06/28 08:05:47 UTC, 0 replies.
- Re: [PR] RAT-564: make LicenseSetFactory return unmodifiable licenses sets [creadur-rat] - posted by "sonarqubecloud[bot] (via GitHub)" <gi...@apache.org> on 2026/06/28 08:09:53 UTC, 3 replies.
- [jira] [Assigned] (RAT-566) Fix spotbugs issues in core - posted by "Claude Warren (Jira)" <ji...@apache.org> on 2026/06/28 08:14:00 UTC, 0 replies.
- [jira] [Created] (RAT-566) Fix spotbugs issues in core - posted by "Claude Warren (Jira)" <ji...@apache.org> on 2026/06/28 08:14:00 UTC, 0 replies.
- [PR] RAT-566: fix some spotbugs issues in core. [creadur-rat] - posted by "Claudenw (via GitHub)" <gi...@apache.org> on 2026/06/28 08:18:53 UTC, 2 replies.
- [jira] [Commented] (RAT-565) Use assertj in core RAT tests - posted by "Philipp Ottlinger (Jira)" <ji...@apache.org> on 2026/06/28 19:59:00 UTC, 0 replies.
- [jira] [Assigned] (RAT-336) Use assertj in RAT tests - posted by "Philipp Ottlinger (Jira)" <ji...@apache.org> on 2026/06/28 20:04:00 UTC, 0 replies.
- [jira] [Commented] (RAT-562) Remove boxing-unboxing in ClaimValidator - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/06/28 20:49:00 UTC, 4 replies.
- Re: [PR] RAT-566: fix some spotbugs issues in core [creadur-rat] - posted by "Claudenw (via GitHub)" <gi...@apache.org> on 2026/06/28 21:33:56 UTC, 0 replies.
- [jira] [Commented] (RAT-566) Fix spotbugs issues in core - posted by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2026/06/28 21:34:00 UTC, 1 replies.
- [PR] Bump org.junit:junit-bom from 6.1.0 to 6.1.1 [creadur-rat] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/29 00:33:27 UTC, 0 replies.
- [PR] Bump org.apache:apache from 38 to 39 [creadur-rat] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/29 00:33:39 UTC, 0 replies.
- [PR] Bump org.apache:apache from 38 to 39 [creadur-whisker] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/29 04:21:46 UTC, 3 replies.
- Re: [PR] RAT-532: Bump org.junit:junit-bom from 6.1.0 to 6.1.1 [creadur-rat] - posted by "ottlinger (via GitHub)" <gi...@apache.org> on 2026/06/29 07:51:03 UTC, 0 replies.
- Re: [PR] RAT-532: Bump org.apache:apache from 38 to 39 [creadur-rat] - posted by "ottlinger (via GitHub)" <gi...@apache.org> on 2026/06/29 09:02:36 UTC, 0 replies.
- [jira] [Created] (RAT-567) Interoperability improvement; common config file - posted by "Tamas Cservenak (Jira)" <ji...@apache.org> on 2026/06/29 11:02:00 UTC, 0 replies.
- [jira] [Updated] (RAT-567) Interoperability improvement; common config file - posted by "Tamas Cservenak (Jira)" <ji...@apache.org> on 2026/06/29 11:15:00 UTC, 0 replies.
- [jira] [Commented] (RAT-567) Interoperability improvement; common config file - posted by "Tamas Cservenak (Jira)" <ji...@apache.org> on 2026/06/29 11:16:00 UTC, 0 replies.
- [jira] [Commented] (RAT-554) Share ignore information between different RAT tools - posted by "Tamas Cservenak (Jira)" <ji...@apache.org> on 2026/06/29 11:17:00 UTC, 0 replies.
- [PR] Bump org.apache:apache from 38 to 39 [creadur-tentacles] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/29 14:05:59 UTC, 1 replies.
- Re: [PR] TENTACLES-16: Bump org.apache:apache from 38 to 39 [creadur-tentacles] - posted by "ottlinger (via GitHub)" <gi...@apache.org> on 2026/06/29 14:18:46 UTC, 1 replies.
- Re: [PR] Bump com.gradle:common-custom-user-data-maven-extension from 2.2.0 to 2.3.0 [creadur-whisker] - posted by "ottlinger (via GitHub)" <gi...@apache.org> on 2026/06/30 07:43:37 UTC, 1 replies.
- Re: [PR] RAT-532: Bump com.gradle:common-custom-user-data-maven-extension from 2.2.0 to 2.3.0 [creadur-rat] - posted by "ottlinger (via GitHub)" <gi...@apache.org> on 2026/06/30 08:55:00 UTC, 0 replies.
- [PR] Bump com.gradle:develocity-maven-extension from 2.4.2 to 2.5.0 [creadur-tentacles] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/30 14:02:30 UTC, 1 replies.
- [PR] Bump com.gradle:common-custom-user-data-maven-extension from 2.2.0 to 2.3.0 [creadur-tentacles] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/30 14:02:50 UTC, 1 replies.