You are viewing a plain text version of this content. The canonical link for it is here.
- [PR] Bump org.apache:apache from 38 to 39 [ws-neethi] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/01 17:17:01 UTC, 1 replies.
- [PR] Bump actions/cache from 5 to 6 [ws-neethi] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/01 17:18:19 UTC, 1 replies.
- Re: [PR] Bump actions/cache from 5 to 6.1.0 [ws-neethi] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/01 17:18:20 UTC, 1 replies.
- [PR] Bump actions/cache from 5 to 6 [ws-xmlschema] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/01 17:33:08 UTC, 1 replies.
- Re: [PR] Bump actions/cache from 5 to 6.1.0 [ws-xmlschema] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/01 17:33:10 UTC, 1 replies.
- [PR] Bump org.apache:apache from 38 to 39 [ws-xmlschema] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/01 17:33:16 UTC, 1 replies.
- [PR] Bump checkerframework.version from 4.2.0 to 4.2.1 [ws-axiom] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/02 03:52:31 UTC, 1 replies.
- Re: [PR] Bump log4j.version from 2.26.0 to 2.26.1 [ws-axiom] - posted by "veithen (via GitHub)" <gi...@apache.org> on 2026/07/04 09:36:42 UTC, 0 replies.
- Re: [PR] Bump actions/checkout from 6 to 7 [ws-neethi] - posted by "veithen (via GitHub)" <gi...@apache.org> on 2026/07/04 09:37:28 UTC, 0 replies.
- Re: [PR] Bump com.diffplug.spotless:spotless-maven-plugin from 3.7.0 to 3.8.0 [ws-axiom] - posted by "veithen (via GitHub)" <gi...@apache.org> on 2026/07/04 09:37:50 UTC, 0 replies.
- Re: [PR] Bump actions/checkout from 6 to 7 [ws-xmlschema] - posted by "veithen (via GitHub)" <gi...@apache.org> on 2026/07/04 15:37:53 UTC, 0 replies.
- Re: [PR] Bump org.codehaus.gmavenplus:gmavenplus-plugin from 5.0.0 to 5.1.0 [ws-axiom] - posted by "veithen (via GitHub)" <gi...@apache.org> on 2026/07/04 15:39:38 UTC, 0 replies.
- [PR] Bump groovy.version from 5.0.6 to 5.0.7 [ws-axiom] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/06 03:56:50 UTC, 1 replies.
- [PR] Bump github/codeql-action from 4.35.5 to 4.36.3 [ws-neethi] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/07 17:28:38 UTC, 1 replies.
- Re: [PR] Bump github/codeql-action from 4.35.5 to 4.36.2 [ws-neethi] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/07 17:28:40 UTC, 1 replies.
- [PR] Bump github/codeql-action from 4.35.5 to 4.36.3 [ws-xmlschema] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/07 17:47:03 UTC, 1 replies.
- Re: [PR] Bump github/codeql-action from 4.35.5 to 4.36.2 [ws-xmlschema] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/07 17:47:05 UTC, 1 replies.
- [PR] Bump jetty.version from 12.1.10 to 12.1.11 [ws-axiom] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/08 04:04:51 UTC, 1 replies.
- [PR] Bump actions/setup-java from 5 to 5.4.0 [ws-neethi] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/08 17:15:03 UTC, 1 replies.
- Re: [PR] Bump actions/setup-java from 5 to 5.3.0 [ws-neethi] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/08 17:15:05 UTC, 1 replies.
- [PR] Bump actions/setup-java from 5 to 5.4.0 [ws-xmlschema] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/08 17:34:08 UTC, 1 replies.
- Re: [PR] Bump actions/setup-java from 5 to 5.3.0 [ws-xmlschema] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/08 17:34:10 UTC, 1 replies.
- Re: [PR] Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.5 to 3.5.6 [ws-xmlschema] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/07/09 15:02:30 UTC, 0 replies.
- Re: [PR] Add draft project security threat-model document [ws-xmlschema] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/07/09 15:16:28 UTC, 0 replies.
- [PR] Detect cycles when there is no Policy Id [ws-neethi] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/07/09 15:59:42 UTC, 1 replies.
- [PR] normalization alternative limit can be bypassed through ExactlyOne ag… [ws-neethi] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/07/09 16:07:32 UTC, 1 replies.
- [PR] Fixing policy intersection bug [ws-neethi] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/07/10 08:01:41 UTC, 1 replies.
- [PR] Add limits for max depth, attributes, elements in a policy [ws-neethi] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/07/10 09:29:41 UTC, 1 replies.
- [PR] Enforce the amount of bytes that can be read from the remote reference [ws-neethi] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/07/10 10:18:30 UTC, 1 replies.
- [PR] Policy Containing Primitive fix [ws-neethi] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/07/10 10:45:50 UTC, 1 replies.
- Re: [PR] Add draft project security threat-model document [ws-neethi] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/07/10 10:47:26 UTC, 0 replies.
- [PR] Update threat model and remove draft [ws-neethi] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/07/10 10:53:47 UTC, 1 replies.
- [PR] Reviewed threat model, removed draft [ws-xmlschema] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/07/10 11:14:29 UTC, 1 replies.
- [PR] Bump org.junit:junit-bom from 6.1.1 to 6.1.2 [ws-axiom] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/13 03:55:45 UTC, 1 replies.
- [PR] Bump actions/setup-java from 5.4.0 to 5.5.0 [ws-neethi] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/13 17:14:48 UTC, 2 replies.
- [PR] Bump github/codeql-action from 4.36.3 to 4.37.0 [ws-neethi] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/13 17:15:57 UTC, 1 replies.
- [PR] Bump github/codeql-action from 4.36.3 to 4.37.0 [ws-xmlschema] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/13 17:33:56 UTC, 1 replies.
- [PR] Bump actions/setup-java from 5.4.0 to 5.5.0 [ws-xmlschema] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/13 17:34:21 UTC, 2 replies.
- [PR] Bump org.wildfly:wildfly-preview-dist from 40.0.1.Final to 41.0.0.Final [ws-axiom] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/16 03:53:59 UTC, 1 replies.
- Build failed in Jenkins: webservices » Apache WSS4J - 2.3.x-fixes JDK 8 #40 - posted by Apache Jenkins Server <je...@builds.apache.org> on 2026/07/16 17:20:25 UTC, 0 replies.
- Re: [PR] Bump actions/checkout from 6.0.2 to 7.0.0 [ws-wss4j] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/07/20 09:23:34 UTC, 0 replies.
- Re: [PR] Bump actions/cache from 5.0.5 to 6.1.0 [ws-wss4j] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/07/20 09:23:48 UTC, 0 replies.
- Re: [PR] Bump actions/setup-java from 5.2.0 to 5.4.0 [ws-wss4j] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/07/20 09:24:01 UTC, 0 replies.
- Re: [PR] Bump github/codeql-action from 4.36.0 to 4.36.2 [ws-wss4j] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/07/20 09:29:35 UTC, 0 replies.
- Re: [PR] Bump github/codeql-action/init from 4.36.0 to 4.36.2 [ws-wss4j] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/07/20 09:29:44 UTC, 0 replies.
- Re: [PR] Add draft project security threat-model document [ws-wss4j] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/07/20 10:10:58 UTC, 0 replies.
- Re: [PR] Add draft project security threat-model document [ws-axiom] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/07/20 10:29:51 UTC, 0 replies.
- Re: [PR] Bump org.owasp:dependency-check-maven from 12.2.0 to 12.2.2 [ws-wss4j] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/07/20 10:47:34 UTC, 1 replies.
- [PR] Wire the security threat model for agent discoverability (AGENTS.md + SECURITY.md) [ws-wss4j] - posted by "potiuk (via GitHub)" <gi...@apache.org> on 2026/07/20 12:17:41 UTC, 1 replies.
- [PR] Wire the security threat model for agent discoverability (AGENTS.md + SECURITY.md) [ws-axiom] - posted by "potiuk (via GitHub)" <gi...@apache.org> on 2026/07/20 12:17:50 UTC, 1 replies.
- [PR] Wire the security threat model for agent discoverability (AGENTS.md + SECURITY.md) [ws-xmlschema] - posted by "potiuk (via GitHub)" <gi...@apache.org> on 2026/07/20 12:18:03 UTC, 1 replies.
- [PR] Wire the security threat model for agent discoverability (AGENTS.md + SECURITY.md) [ws-neethi] - posted by "potiuk (via GitHub)" <gi...@apache.org> on 2026/07/20 12:18:08 UTC, 1 replies.
- [GH] (ws-axiom/master): Workflow run "Continuous Integration" failed! - posted by GitBox <gi...@apache.org> on 2026/07/20 12:38:03 UTC, 0 replies.
- [PR] Bump actions/setup-java from 5.4.0 to 5.6.0 [ws-neethi] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/20 17:22:28 UTC, 1 replies.
- [PR] Bump actions/setup-java from 5.4.0 to 5.6.0 [ws-xmlschema] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/20 17:42:34 UTC, 1 replies.
- [PR] Bump org.cyclonedx:cyclonedx-maven-plugin from 2.9.1 to 2.9.2 [ws-wss4j] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/21 08:03:28 UTC, 1 replies.
- [PR] Bump com.sun.xml.messaging.saaj:saaj-impl from 3.0.4 to 3.0.6 [ws-wss4j] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/21 08:04:08 UTC, 1 replies.
- Re: [PR] Bump com.sun.xml.messaging.saaj:saaj-impl from 3.0.4 to 3.0.5 [ws-wss4j] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/21 08:04:12 UTC, 1 replies.
- [PR] Bump com.google.errorprone:error_prone_core from 2.38.0 to 2.50.0 [ws-wss4j] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/21 08:05:00 UTC, 0 replies.
- Re: [PR] Bump com.google.errorprone:error_prone_core from 2.38.0 to 2.49.0 [ws-wss4j] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/21 08:05:04 UTC, 1 replies.
- [VOTE] - Release Apache Neethi 3.2.3 - posted by Colm O hEigeartaigh <co...@apache.org> on 2026/07/21 09:23:47 UTC, 3 replies.
- [PR] Bump github/codeql-action from 4.37.0 to 4.37.1 [ws-neethi] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/21 17:14:07 UTC, 1 replies.
- [PR] Bump github/codeql-action from 4.37.0 to 4.37.1 [ws-xmlschema] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/21 17:33:46 UTC, 1 replies.
- [PR] Bump slf4j.version from 2.0.17 to 2.0.18 [ws-wss4j] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/22 08:16:50 UTC, 0 replies.
- [PR] Bump xmlunit.version from 2.11.0 to 2.12.0 [ws-wss4j] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/22 08:16:58 UTC, 0 replies.
- [PR] Bump org.apache.maven.plugins:maven-jar-plugin from 3.5.0 to 3.5.1 [ws-axiom] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/23 03:55:39 UTC, 0 replies.
- CVE-2026-66142: Apache Neethi: Uncontrolled recursion in policy processing - posted by Colm O hEigeartaigh <co...@apache.org> on 2026/07/24 10:51:11 UTC, 0 replies.
- CVE-2026-66143: Apache Neethi: Missing global alternative-output budget across policy computation paths - posted by Colm O hEigeartaigh <co...@apache.org> on 2026/07/24 10:53:22 UTC, 0 replies.
- CVE-2026-66144: Apache Neethi: Remote PolicyReference fetch lacks resource bounds - posted by Colm O hEigeartaigh <co...@apache.org> on 2026/07/24 11:03:49 UTC, 0 replies.
- [PR] Bump actions/checkout from 7.0.0 to 7.0.1 [ws-wss4j] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/27 08:03:31 UTC, 1 replies.
- [PR] Bump actions/setup-java from 5.4.0 to 5.6.0 [ws-wss4j] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/27 08:03:46 UTC, 1 replies.
- [PR] Bump github/codeql-action/analyze from 4.36.2 to 4.37.3 [ws-wss4j] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/27 08:05:05 UTC, 1 replies.
- [PR] Bump github/codeql-action/init from 4.36.2 to 4.37.3 [ws-wss4j] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/27 08:06:18 UTC, 1 replies.
- Re: [PR] Bump github/codeql-action/init from 4.36.2 to 4.37.0 [ws-wss4j] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/27 08:06:20 UTC, 1 replies.
- [PR] Bump github/codeql-action/upload-sarif from 4.36.2 to 4.37.3 [ws-wss4j] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/27 08:07:31 UTC, 1 replies.
- [PR] Bump github/codeql-action from 4.37.1 to 4.37.3 [ws-neethi] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/27 18:04:47 UTC, 1 replies.
- [PR] Bump github/codeql-action from 4.37.1 to 4.37.3 [ws-xmlschema] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/27 18:14:35 UTC, 1 replies.
- [PR] Bump com.diffplug.spotless:spotless-maven-plugin from 3.8.0 to 3.9.0 [ws-axiom] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/28 03:57:39 UTC, 0 replies.
- [PR] Bump commons-codec:commons-codec from 1.22.0 to 1.22.1 [ws-axiom] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/31 03:52:57 UTC, 0 replies.
- [PR] Bump org.apache.felix:maven-bundle-plugin from 6.0.2 to 6.1.0 [ws-axiom] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/31 03:54:11 UTC, 0 replies.