You are viewing a plain text version of this content. The canonical link for it is here.
- Re: [PR] Bump org.bouncycastle:bc-fips from 2.1.2 to 2.1.3 [cxf] - posted by "reta (via GitHub)" <gi...@apache.org> on 2026/08/01 03:12:19 UTC, 0 replies.
- Re: [PR] [CXF-9233] Ghost RESP_OUT log [cxf] - posted by "vp340 (via GitHub)" <gi...@apache.org> on 2026/08/01 15:14:04 UTC, 15 replies.
- [PR] Bump actions/setup-java from 5 to 5.6.0 [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/03 01:12:34 UTC, 1 replies.
- [PR] Bump org.apache.felix:maven-bundle-plugin from 6.0.2 to 6.1.0 [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/03 01:12:39 UTC, 1 replies.
- [PR] Bump com.puppycrawl.tools:checkstyle from 12.3.1 to 13.9.0 [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/03 01:12:46 UTC, 2 replies.
- [PR] Bump ossf/scorecard-action from 2.4.3 to 2.4.4 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/03 02:42:51 UTC, 1 replies.
- [PR] Bump cxf.hibernate.em.version from 7.4.4.Final to 7.4.5.Final [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/03 02:43:42 UTC, 1 replies.
- Re: [PR] Add limit to the maximum number of attachment headers to be collected [cxf] - posted by "lashinijay (via GitHub)" <gi...@apache.org> on 2026/08/03 05:34:16 UTC, 3 replies.
- Re: [VOTE]Release Apache CXF 4.2.3, 4.1.8 and 3.6.12 - posted by Fabio Burzigotti via dev <de...@cxf.apache.org> on 2026/08/03 08:20:53 UTC, 4 replies.
- [PR] Bump actions/setup-java from 5 to 5.6.0 [cxf-build-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/03 22:12:45 UTC, 1 replies.
- [PR] Bump org.apache.felix:maven-bundle-plugin from 6.0.2 to 6.1.0 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/04 02:42:50 UTC, 1 replies.
- Re: [PR] More SchemaFactory hardenings [cxf] - posted by "PasanT9 (via GitHub)" <gi...@apache.org> on 2026/08/04 06:08:20 UTC, 2 replies.
- Re: [PR] [CXF-9234]Concurrent DynamicClientFactory.createClient for the same W… [cxf] - posted by "ffang (via GitHub)" <gi...@apache.org> on 2026/08/05 01:05:30 UTC, 0 replies.
- [PR] Bump cxf.tika.version from 3.3.1 to 3.3.2 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/05 02:43:11 UTC, 1 replies.
- [PR] Bump ch.qos.logback:logback-classic from 1.5.38 to 1.6.1 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/06 02:43:58 UTC, 1 replies.
- CVE-2026-54225: Apache CXF: Denial of Service attack via large attachments - posted by Colm O hEigeartaigh <co...@apache.org> on 2026/08/06 09:59:14 UTC, 0 replies.
- CVE-2026-57819: Apache CXF: No default restriction on the amount of form parameters per message - posted by Colm O hEigeartaigh <co...@apache.org> on 2026/08/06 10:04:42 UTC, 0 replies.
- CVE-2026-64958: Apache CXF: Denial of service via message header attachments - posted by Colm O hEigeartaigh <co...@apache.org> on 2026/08/06 10:09:43 UTC, 0 replies.
- CVE-2026-65432: Apache CXF: XXE via WSDL/XSD import parsing - posted by Colm O hEigeartaigh <co...@apache.org> on 2026/08/06 10:14:02 UTC, 0 replies.
- CVE-2026-66909: Apache CXF: Unsafe deserialization of inbound JMS ObjectMessage - posted by Colm O hEigeartaigh <co...@apache.org> on 2026/08/06 10:17:10 UTC, 0 replies.
- CVE-2026-57817: Apache CXF: The authorization code hash (c_hash) is not enforced for the hybrid OIDC flow - posted by Colm O hEigeartaigh <co...@apache.org> on 2026/08/06 10:21:01 UTC, 0 replies.
- CVE-2026-57818: Apache CXF: OAuth2 Authorization Code Replay via TOCTOU in JCacheCodeDataProvider - posted by Colm O hEigeartaigh <co...@apache.org> on 2026/08/06 10:27:03 UTC, 0 replies.
- CVE-2026-61466: Apache CXF: OAuth2 Dynamic Client Registration Scope Self-Escalation - posted by Colm O hEigeartaigh <co...@apache.org> on 2026/08/06 10:29:33 UTC, 0 replies.
- CVE-2026-63687: Apache CXF: JwtRequestCodeFilter silently overrides outer PKCE and nonce parameters - posted by Colm O hEigeartaigh <co...@apache.org> on 2026/08/06 10:42:10 UTC, 0 replies.
- CVE-2026-65583: Apache CXF: Self-issued ID token claims validation skipped - posted by Colm O hEigeartaigh <co...@apache.org> on 2026/08/06 10:44:32 UTC, 0 replies.
- CVE-2026-68079: Apache CXF: DefaultEncryptingCodeDataProvider allows unlimited authorization code replay - posted by Colm O hEigeartaigh <co...@apache.org> on 2026/08/06 10:46:55 UTC, 0 replies.
- CVE-2026-68481: Apache CXF: Revocation bypass in DefaultEncryptingOAuthDataProvider - posted by Colm O hEigeartaigh <co...@apache.org> on 2026/08/06 10:49:28 UTC, 0 replies.
- [PR] Bump cxf.bcprov.version from 1.84 to 1.85 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/07 02:43:21 UTC, 1 replies.
- [PR] Fix max_age check in OidcClientCodeRequestFilter [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/07 11:35:59 UTC, 1 replies.
- [PR] Fix some atomicity issues in removeCodeGrant [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/07 16:21:54 UTC, 5 replies.
- [PR] Bump github/codeql-action from 4.37.3 to 4.37.6 [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/10 01:11:50 UTC, 1 replies.
- [PR] Bump actions/setup-java from 5.6.0 to 5.7.0 [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/10 01:12:00 UTC, 1 replies.
- [PR] Bump github/codeql-action/analyze from 4.37.3 to 4.37.6 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/10 02:44:50 UTC, 2 replies.
- [PR] Bump github/codeql-action/upload-sarif from 4.37.3 to 4.37.6 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/10 02:45:46 UTC, 1 replies.
- [PR] Bump actions/setup-java from 5.6.0 to 5.7.0 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/10 02:46:01 UTC, 1 replies.
- [PR] Bump github/codeql-action/init from 4.37.3 to 4.37.6 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/10 02:47:04 UTC, 2 replies.
- [PR] Bump github/codeql-action/analyze from 4.37.3 to 4.37.6 [cxf-build-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/10 22:14:29 UTC, 2 replies.
- [PR] Bump github/codeql-action/init from 4.37.3 to 4.37.6 [cxf-build-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/10 22:14:55 UTC, 3 replies.
- [PR] Bump github/codeql-action/autobuild from 4.37.3 to 4.37.6 [cxf-build-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/10 22:16:04 UTC, 2 replies.
- [PR] Bump actions/setup-java from 5.6.0 to 5.7.0 [cxf-build-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/10 22:16:13 UTC, 1 replies.
- [PR] Bump cxf.openwebbeans.version from 4.1.0 to 4.1.1 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/11 02:43:26 UTC, 1 replies.
- Re: [PR] Bump actions/setup-java from 5.2.0 to 5.4.0 [cxf-fediz] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/11 08:47:59 UTC, 0 replies.
- Re: [PR] Bump github/codeql-action/analyze from 4.35.4 to 4.36.2 [cxf-fediz] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/11 08:48:10 UTC, 0 replies.
- Re: [PR] Bump actions/checkout from 6.0.2 to 7.0.0 [cxf-fediz] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/11 08:48:25 UTC, 0 replies.
- Re: [PR] Bump github/codeql-action/upload-sarif from 4.35.4 to 4.36.2 [cxf-fediz] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/11 08:49:10 UTC, 0 replies.
- Re: [PR] Bump github/codeql-action from 4.35.4 to 4.36.2 [cxf-fediz] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/11 09:04:35 UTC, 2 replies.
- Re: [PR] Bump github/codeql-action/upload-sarif from 4.35.4 to 4.37.6 [cxf-fediz] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/11 09:41:07 UTC, 0 replies.
- [PR] Porting locking fixes to revokeRefreshToken [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/11 11:09:48 UTC, 1 replies.
- [PR] Bump org.apache.groovy:groovy from 5.0.7 to 5.0.8 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/12 02:43:00 UTC, 1 replies.
- [PR] Bump org.atmosphere:atmosphere-runtime from 3.1.0 to 4.0.64 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/12 02:45:51 UTC, 2 replies.
- Re: [PR] Bump org.atmosphere:atmosphere-runtime from 3.1.0 to 4.0.63 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/12 02:45:53 UTC, 1 replies.
- [PR] CXF-9240 - OAuthJSONProvider.appendJsonPair() does not escape JSON st… [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/12 08:59:28 UTC, 1 replies.
- Re: [PR] Synchronize access token refresh when refresh tokens aren't recycled [cxf] - posted by "karlvr (via GitHub)" <gi...@apache.org> on 2026/08/12 23:45:06 UTC, 1 replies.
- [PR] Bump org.webjars:swagger-ui from 5.32.8 to 5.32.11 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/13 02:43:14 UTC, 1 replies.
- [PR] Bump org.atmosphere:atmosphere-runtime from 3.1.0 to 4.0.65 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/13 02:44:25 UTC, 2 replies.
- [PR] CXF-9237 - Add possibility to configure JCache expiry time [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/13 10:49:07 UTC, 6 replies.
- [PR] Bump org.apache.httpcomponents.client5:httpclient5 from 5.6.2 to 5.6.3 in /parent [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/13 19:04:55 UTC, 1 replies.
- [PR] CXF-9233: AbstractLoggingInterceptor.LIVE_LOGGING_PROP already set in the message properties, so RESP_OUT is not logged [cxf] - posted by "reta (via GitHub)" <gi...@apache.org> on 2026/08/13 22:14:25 UTC, 4 replies.
- [PR] Cxf 9233 fix response context [cxf] - posted by "vp340 (via GitHub)" <gi...@apache.org> on 2026/08/13 23:02:28 UTC, 5 replies.
- [PR] Bump cxf.johnzon.version from 2.1.0 to 2.2.0 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/14 02:43:15 UTC, 1 replies.
- [PR] fix Invocation.Builder.property() not visible to HTTP transport [cxf] - posted by "neenapj (via GitHub)" <gi...@apache.org> on 2026/08/14 10:39:16 UTC, 2 replies.
- Re: [PR] Bump org.apache.httpcomponents.client5:httpclient5 from 5.6.2 to 5.6.4 in /parent [cxf] - posted by "reta (via GitHub)" <gi...@apache.org> on 2026/08/16 20:32:06 UTC, 0 replies.
- [PR] Bump com.puppycrawl.tools:checkstyle from 12.3.1 to 13.10.0 [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/17 01:12:48 UTC, 2 replies.
- [PR] Bump org.apache.maven.plugins:maven-jar-plugin from 3.5.0 to 3.5.1 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/17 02:43:13 UTC, 1 replies.
- [PR] Bump org.atmosphere:atmosphere-runtime from 3.1.0 to 4.0.66 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/17 02:48:42 UTC, 2 replies.
- [PR] Bump actions/setup-java from 5.4.0 to 5.7.0 [cxf-fediz] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/17 12:57:54 UTC, 0 replies.
- [PR] Bump github/codeql-action/autobuild from 4.35.4 to 4.37.6 [cxf-fediz] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/17 12:59:29 UTC, 0 replies.
- [PR] Bump github/codeql-action/init from 4.35.4 to 4.37.6 [cxf-fediz] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/17 13:01:58 UTC, 0 replies.
- [PR] Bump actions/checkout from 7.0.0 to 7.0.1 [cxf-fediz] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/17 13:02:04 UTC, 0 replies.
- [PR] Bump github/codeql-action/analyze from 4.36.2 to 4.37.6 [cxf-fediz] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/17 13:03:16 UTC, 0 replies.
- Re: [PR] Bump org.apache.commons:commons-jexl3 from 3.6.4 to 3.7.0 [cxf] - posted by "reta (via GitHub)" <gi...@apache.org> on 2026/08/17 23:46:55 UTC, 1 replies.
- [PR] Bump org.hibernate.validator:hibernate-validator from 9.1.2.Final to 9.1.3.Final [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/18 02:43:43 UTC, 1 replies.
- [PR] Bump cxf.opentelemetry.version from 1.64.0 to 1.65.0 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/18 02:45:06 UTC, 2 replies.
- [PR] Bump cxf.tomcat.version from 11.0.24 to 11.0.25 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/19 02:43:56 UTC, 1 replies.
- [PR] Bump org.apache.camel.springboot:camel-spring-boot-dependencies from 4.21.0 to 4.22.0 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/20 02:51:37 UTC, 1 replies.
- [PR] Introduce a TTL in the AbstractAccessTokenValidator cache [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/20 15:20:22 UTC, 3 replies.
- [PR] Update Spring Boot to 4.2.0 baseline [cxf] - posted by "reta (via GitHub)" <gi...@apache.org> on 2026/08/20 22:39:15 UTC, 0 replies.
- Re: [PR] [CXF-8926] replace PipedInputStream with TimedBlockingPipe to fix MTO… [cxf] - posted by "reta (via GitHub)" <gi...@apache.org> on 2026/08/21 01:24:20 UTC, 3 replies.
- [PR] Bump cxf.jackson.version from 3.2.1 to 3.2.2 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/21 02:44:02 UTC, 1 replies.
- [PR] Validate token hashes if they are available [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/21 15:31:00 UTC, 1 replies.
- [PR] [CXF-9241] - Remove ImplicitConfidentialGrantService [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/21 16:07:29 UTC, 1 replies.
- [PR] Bump com.puppycrawl.tools:checkstyle from 12.3.1 to 14.0.0 [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/24 01:12:25 UTC, 2 replies.
- [PR] Bump github/codeql-action/init from 4.37.6 to 4.37.7 [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/24 01:14:52 UTC, 4 replies.
- [PR] Bump github/codeql-action/analyze from 4.37.6 to 4.37.7 [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/24 01:16:02 UTC, 2 replies.
- [PR] Bump github/codeql-action/autobuild from 4.37.6 to 4.37.7 [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/24 01:17:10 UTC, 2 replies.
- [PR] Bump cxf.tika.version from 3.3.2 to 4.0.0 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/24 02:43:20 UTC, 7 replies.
- [PR] Bump github/codeql-action/upload-sarif from 4.37.6 to 4.37.7 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/24 02:43:57 UTC, 1 replies.
- [PR] Bump cxf.lucene.version from 10.5.0 to 10.5.1 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/24 02:43:59 UTC, 1 replies.
- [PR] Bump github/codeql-action/analyze from 4.37.6 to 4.37.7 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/24 02:45:10 UTC, 2 replies.
- [PR] Bump com.squareup.okhttp3:okhttp from 4.12.0 to 5.5.0 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/24 02:45:36 UTC, 0 replies.
- Re: [PR] Bump com.squareup.okhttp3:okhttp from 4.12.0 to 5.4.0 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/24 02:45:40 UTC, 1 replies.
- [PR] Bump github/codeql-action/init from 4.37.6 to 4.37.7 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/24 02:46:24 UTC, 2 replies.
- [PR] Bump org.atmosphere:atmosphere-runtime from 3.1.0 to 4.0.67 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/24 02:46:38 UTC, 2 replies.
- [PR] Fix deflate bomb in compression utils [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/24 13:51:20 UTC, 3 replies.
- [PR] Bump cxf.openfeign.version from 13.13 to 13.14 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/24 15:08:49 UTC, 1 replies.
- Re: [PR] Bump net.sourceforge.pmd:pmd-java from 7.25.0 to 7.26.0 [cxf] - posted by "reta (via GitHub)" <gi...@apache.org> on 2026/08/24 15:49:32 UTC, 1 replies.
- [PR] Bump org.codehaus.plexus:plexus-utils from 4.0.3 to 4.1.0 [cxf-build-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/24 22:13:04 UTC, 1 replies.
- [PR] Bump github/codeql-action/init from 4.37.6 to 4.37.7 [cxf-build-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/24 22:13:52 UTC, 2 replies.
- [PR] Bump github/codeql-action/analyze from 4.37.6 to 4.37.7 [cxf-build-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/24 22:14:59 UTC, 2 replies.
- [PR] Bump github/codeql-action/autobuild from 4.37.6 to 4.37.7 [cxf-build-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/24 22:17:32 UTC, 2 replies.
- [PR] Bump org.codehaus.plexus:plexus-archiver from 4.12.0 to 4.13.0 [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/25 01:12:29 UTC, 1 replies.
- [PR] Bump org.codehaus.plexus:plexus-utils from 4.0.3 to 4.1.0 [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/25 01:12:59 UTC, 1 replies.
- [PR] Bump com.puppycrawl.tools:checkstyle from 13.8.0 to 14.0.0 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/25 02:42:59 UTC, 1 replies.
- [PR] Bump org.codehaus.plexus:plexus-utils from 4.0.3 to 4.1.0 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/25 02:43:25 UTC, 1 replies.
- [PR] For OIDC, allow only relative URLs or absolute URLs with the same sch… [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/25 10:35:56 UTC, 1 replies.
- [PR] Bump cxf.reactor.version from 3.8.6 to 3.8.7 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/26 02:44:50 UTC, 1 replies.
- [PR] Bump org.jspecify:jspecify from 1.0.0 to 1.0.1 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/26 02:45:09 UTC, 1 replies.
- [PR] Set bufferPayload to false [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/26 15:37:43 UTC, 1 replies.
- [PR] Bump org.cyclonedx:cyclonedx-maven-plugin from 2.9.2 to 2.9.3 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/27 02:43:34 UTC, 1 replies.
- [PR] Bump org.graalvm.buildtools:native-maven-plugin from 1.1.5 to 1.1.10 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/27 02:43:41 UTC, 1 replies.
- [PR] Fix bug in JwsInputStream and add tests [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/27 09:09:19 UTC, 1 replies.
- [PR] Use a free port not 8080 for SeBootstrapTest [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/27 13:34:20 UTC, 1 replies.
- [PR] Bump ch.qos.logback:logback-classic from 1.6.1 to 1.6.3 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/28 02:43:17 UTC, 1 replies.
- [PR] Bump cxf.activemq.artemis.version from 2.55.0 to 2.56.0 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/28 02:43:33 UTC, 1 replies.
- [PR] Default Oauth2 encryption providers to use AES-GCM [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/28 09:42:44 UTC, 5 replies.
- [PR] Fix Tika 4 detector context handling [cxf] - posted by "skrcode (via GitHub)" <gi...@apache.org> on 2026/08/28 15:38:47 UTC, 4 replies.
- [PR] Don't skip hostname verification with a custom trust manager [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/28 16:01:02 UTC, 1 replies.
- [PR] Use properly random IDs for WS-N [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/28 16:06:55 UTC, 1 replies.
- [PR] Bump org.javassist:javassist from 3.32.0-GA to 3.33.0-GA [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/31 01:12:14 UTC, 1 replies.
- [PR] Bump actions/setup-java from 5.7.0 to 6.0.0 [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/31 01:12:31 UTC, 1 replies.
- [PR] Bump org.codehaus.plexus:plexus-archiver from 4.13.0 to 4.14.0 [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/31 01:12:34 UTC, 1 replies.
- [PR] Bump github/codeql-action/init from 4.37.7 to 4.37.9 [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/31 01:13:42 UTC, 3 replies.
- [PR] Bump github/codeql-action/autobuild from 4.37.7 to 4.37.9 [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/31 01:14:50 UTC, 2 replies.
- [PR] Bump github/codeql-action/analyze from 4.37.7 to 4.37.9 [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/31 01:15:54 UTC, 2 replies.
- [PR] Bump cxf.hibernate.em.version from 7.4.5.Final to 7.4.6.Final [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/31 02:43:39 UTC, 1 replies.
- [PR] Bump org.atmosphere:atmosphere-runtime from 3.1.0 to 4.0.68 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/31 02:43:53 UTC, 0 replies.
- [PR] Bump github/codeql-action/init from 4.37.7 to 4.37.9 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/31 02:44:03 UTC, 2 replies.
- [PR] Bump actions/setup-java from 5.7.0 to 6.0.0 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/31 02:44:14 UTC, 1 replies.
- [PR] Bump org.webjars:swagger-ui from 5.32.11 to 5.32.14 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/31 02:44:26 UTC, 1 replies.
- [PR] Bump github/codeql-action/analyze from 4.37.7 to 4.37.9 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/31 02:45:26 UTC, 2 replies.
- [PR] Bump github/codeql-action/upload-sarif from 4.37.7 to 4.37.9 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/31 02:46:40 UTC, 1 replies.
- [PR] Wire through the TLS server parameter for Netty [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/31 09:43:48 UTC, 1 replies.
- [PR] Enforce a default TTL in AbstractJwtAuthenticationFilter so that toke… [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/31 13:59:36 UTC, 1 replies.
- [PR] Add default expiry for JwtAuthenticationClientFilter [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/31 14:00:52 UTC, 1 replies.
- [PR] Use a properly random source to generate digest client nonces [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/31 15:39:22 UTC, 0 replies.
- [PR] Require in OidcRpAuthenticationFilter that IdTokens have an expiry [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/31 16:30:30 UTC, 0 replies.
- [PR] Bump github/codeql-action/init from 4.37.7 to 4.37.9 [cxf-build-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/31 22:13:41 UTC, 0 replies.
- [PR] Bump github/codeql-action/analyze from 4.37.7 to 4.37.9 [cxf-build-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/31 22:14:45 UTC, 0 replies.
- [PR] Bump actions/setup-java from 5.7.0 to 6.0.0 [cxf-build-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/31 22:14:55 UTC, 0 replies.
- [PR] Bump github/codeql-action/autobuild from 4.37.7 to 4.37.9 [cxf-build-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/31 22:15:59 UTC, 0 replies.