You are viewing a plain text version of this content. The canonical link for it is here.
- Re: [PR] Bump org.apache.felix:maven-bundle-plugin from 6.0.2 to 6.1.0 [ws-axiom] - posted by "veithen (via GitHub)" <gi...@apache.org> on 2026/08/01 21:25:48 UTC, 0 replies.
- Re: [PR] Bump commons-codec:commons-codec from 1.22.0 to 1.22.1 [ws-axiom] - posted by "veithen (via GitHub)" <gi...@apache.org> on 2026/08/01 21:26:16 UTC, 0 replies.
- Re: [PR] Bump com.diffplug.spotless:spotless-maven-plugin from 3.8.0 to 3.9.0 [ws-axiom] - posted by "veithen (via GitHub)" <gi...@apache.org> on 2026/08/01 21:47:04 UTC, 0 replies.
- Re: [PR] Bump org.apache.maven.plugins:maven-jar-plugin from 3.5.0 to 3.5.1 [ws-axiom] - posted by "veithen (via GitHub)" <gi...@apache.org> on 2026/08/02 10:53:59 UTC, 0 replies.
- [PR] Bump groovy.version from 5.0.7 to 5.0.8 [ws-axiom] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/03 03:54:39 UTC, 1 replies.
- [PR] Bump ossf/scorecard-action from 2.4.3 to 2.4.4 [ws-wss4j] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/03 08:14:34 UTC, 1 replies.
- [jira] [Created] (WSS-727) SignatureProcessor retains the entire attachment in heap when verifying an SwA signed attachment (cacheReference) - posted by "Ivan Novak (Jira)" <ji...@apache.org> on 2026/08/03 09:00:00 UTC, 0 replies.
- [jira] [Updated] (WSS-727) SignatureProcessor retains the entire attachment in heap when verifying an SwA signed attachment (cacheReference) - posted by "Ivan Novak (Jira)" <ji...@apache.org> on 2026/08/03 09:01:00 UTC, 0 replies.
- [PR] Bump org.xmlunit:xmlunit-assertj3 from 2.12.0 to 2.13.0 [ws-axiom] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/04 03:52:50 UTC, 1 replies.
- Re: [PR] Bump xmlunit.version from 2.11.0 to 2.12.0 [ws-wss4j] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/04 08:10:05 UTC, 0 replies.
- Re: [PR] Bump slf4j.version from 2.0.17 to 2.0.18 [ws-wss4j] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/04 08:10:13 UTC, 0 replies.
- [jira] [Commented] (WSS-727) SignatureProcessor retains the entire attachment in heap when verifying an SwA signed attachment (cacheReference) - posted by "Colm O hEigeartaigh (Jira)" <ji...@apache.org> on 2026/08/04 10:32:00 UTC, 0 replies.
- [PR] Bump github/codeql-action from 4.37.3 to 4.37.4 [ws-neethi] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/04 17:47:20 UTC, 1 replies.
- [PR] Bump github/codeql-action from 4.37.3 to 4.37.4 [ws-xmlschema] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/04 18:10:36 UTC, 1 replies.
- [PR] WSS-727 Do not cache SwA attachment References when verifying a Signature [ws-wss4j] - posted by "shunkica (via GitHub)" <gi...@apache.org> on 2026/08/05 05:21:54 UTC, 0 replies.
- [PR] Bump org.apache.maven.plugins:maven-site-plugin from 3.21.0 to 3.22.0 [ws-wss4j] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/05 08:32:26 UTC, 1 replies.
- [PR] Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.2 to 3.6.3 [ws-wss4j] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/05 08:32:34 UTC, 1 replies.
- [PR] Bump actions/setup-java from 5.6.0 to 5.7.0 [ws-neethi] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/05 17:20:36 UTC, 1 replies.
- [PR] Bump actions/setup-java from 5.6.0 to 5.7.0 [ws-xmlschema] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/05 17:38:33 UTC, 1 replies.
- [PR] Bump jetty.version from 12.1.11 to 12.1.12 [ws-axiom] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/07 03:53:21 UTC, 1 replies.
- [PR] Bump com.fasterxml.woodstox:woodstox-core from 7.2.1 to 7.2.2 [ws-axiom] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/07 03:53:30 UTC, 1 replies.
- [PR] Bump checkerframework.version from 4.2.1 to 4.2.2 [ws-axiom] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/10 03:53:34 UTC, 1 replies.
- [PR] Bump github/codeql-action/upload-sarif from 4.37.3 to 4.37.6 [ws-wss4j] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/10 08:08:32 UTC, 1 replies.
- [PR] Bump github/codeql-action/analyze from 4.37.3 to 4.37.6 [ws-wss4j] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/10 08:09:52 UTC, 1 replies.
- [PR] Bump actions/setup-java from 5.6.0 to 5.7.0 [ws-wss4j] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/10 08:10:05 UTC, 1 replies.
- [PR] Bump github/codeql-action/init from 4.37.3 to 4.37.6 [ws-wss4j] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/10 08:11:24 UTC, 1 replies.
- [PR] Bump github/codeql-action/init from 4.37.4 to 4.37.6 [ws-neethi] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/10 17:15:33 UTC, 1 replies.
- [PR] Bump github/codeql-action/analyze from 4.37.4 to 4.37.6 [ws-neethi] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/10 17:16:49 UTC, 1 replies.
- [PR] Bump github/codeql-action/init from 4.37.4 to 4.37.6 [ws-xmlschema] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/10 17:35:34 UTC, 1 replies.
- [PR] Bump github/codeql-action/analyze from 4.37.4 to 4.37.6 [ws-xmlschema] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/10 17:36:58 UTC, 1 replies.
- [PR] Remove Bouncy Castle from X.509 key identifier parsing [ws-wss4j] - posted by "araiprof (via GitHub)" <gi...@apache.org> on 2026/08/10 19:02:40 UTC, 0 replies.
- [PR] Bump org.junit:junit-bom from 6.1.2 to 6.1.3 [ws-axiom] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/11 03:52:41 UTC, 1 replies.
- [PR] Bump org.bouncycastle:bc-fips from 2.1.2 to 2.1.3 [ws-wss4j] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/11 08:03:21 UTC, 1 replies.
- [PR] Bump org.owasp:dependency-check-maven from 12.2.2 to 13.0.0 [ws-wss4j] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/11 08:03:30 UTC, 1 replies.
- [PR] Bump org.apache.maven:apache-maven from 3.9.11 to 3.9.16 [ws-axiom] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/14 03:52:45 UTC, 1 replies.
- Build failed in Jenkins: webservices » Apache WSS4J - 2.3.x-fixes JDK 8 #41 - posted by Apache Jenkins Server <je...@builds.apache.org> on 2026/08/16 17:20:25 UTC, 0 replies.
- [PR] Bump groovy.version from 5.0.8 to 5.1.0 [ws-axiom] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/17 03:53:26 UTC, 1 replies.
- [PR] Bump github/codeql-action/analyze from 4.37.6 to 4.37.7 [ws-neethi] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/18 17:22:48 UTC, 1 replies.
- [PR] Bump github/codeql-action/init from 4.37.6 to 4.37.7 [ws-neethi] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/18 17:24:04 UTC, 1 replies.
- [PR] Bump github/codeql-action/analyze from 4.37.6 to 4.37.7 [ws-xmlschema] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/18 17:36:59 UTC, 1 replies.
- [PR] Bump github/codeql-action/init from 4.37.6 to 4.37.7 [ws-xmlschema] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/18 17:38:31 UTC, 1 replies.
- [PR] Fixing recursion case for nested policy [ws-neethi] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/19 08:18:01 UTC, 1 replies.
- [PR] Put limit on reference expansions [ws-neethi] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/19 08:29:19 UTC, 1 replies.
- [PR] Add a cap on max normalized components [ws-neethi] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/19 10:27:34 UTC, 1 replies.
- [PR] Updating the threat model with the policy normalize behaviour [ws-neethi] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/19 15:14:24 UTC, 1 replies.
- [PR] Bump com.diffplug.spotless:spotless-maven-plugin from 3.9.0 to 3.10.0 [ws-axiom] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/20 03:52:56 UTC, 1 replies.
- [PR] Adding a policy comparator budget [ws-neethi] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/20 08:34:05 UTC, 1 replies.
- [PR] Adding policy intersection budget [ws-neethi] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/20 09:30:28 UTC, 1 replies.
- [PR] Adding subtree budget [ws-neethi] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/20 14:50:26 UTC, 1 replies.
- [PR] Add a bound on the maximum total time allowed to fetch a remote polic… [ws-neethi] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/20 15:53:20 UTC, 1 replies.
- [PR] Bump com.google.guava:guava from 33.6.0-jre to 33.7.1-jre [ws-axiom] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/21 03:53:03 UTC, 1 replies.
- [PR] Adding new org.apache.neethi.remote.maxFetchMillis property for Polic… [ws-neethi] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/21 05:25:28 UTC, 1 replies.
- [PR] Check all DNS entries for the host to see if they are allowed and pin… [ws-neethi] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/21 05:42:09 UTC, 1 replies.
- [PR] Also exclude some IPv6 addresses [ws-neethi] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/21 05:54:25 UTC, 1 replies.
- [PR] Isolate downloaded policies from the main registry [ws-neethi] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/21 06:04:27 UTC, 1 replies.
- [PR] Explicitly catch NumberFormatException in XmlSchemaElementValidator [ws-xmlschema] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/21 08:49:08 UTC, 1 replies.
- [PR] Use an explicit heap stack in SaxWalkerOverDom [ws-xmlschema] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/21 16:33:58 UTC, 1 replies.
- [PR] Bump spring.version from 7.0.8 to 7.0.9 [ws-axiom] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/24 03:57:03 UTC, 1 replies.
- [PR] Bump biz.aQute.bnd:biz.aQute.bndlib from 7.3.0 to 7.4.0 [ws-axiom] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/24 03:57:26 UTC, 1 replies.
- [PR] Bump github/codeql-action/init from 4.37.6 to 4.37.7 [ws-wss4j] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/24 08:04:39 UTC, 1 replies.
- [PR] Bump github/codeql-action/analyze from 4.37.6 to 4.37.7 [ws-wss4j] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/24 08:05:44 UTC, 1 replies.
- [PR] Bump github/codeql-action/upload-sarif from 4.37.6 to 4.37.7 [ws-wss4j] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/24 08:06:59 UTC, 1 replies.
- [PR] Add maxDecisionPoints and maxReplayedEvents to the path walker [ws-xmlschema] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/24 08:23:46 UTC, 1 replies.
- [PR] Fix state machine generation for shared schema types [ws-xmlschema] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/24 09:35:50 UTC, 1 replies.
- [PR] Improve cycle detection in the schema walker [ws-xmlschema] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/24 13:29:21 UTC, 1 replies.
- [PR] Bump com.google.guava:guava-testlib from 33.6.0-jre to 33.7.1-jre [ws-xmlschema] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/24 17:40:45 UTC, 1 replies.
- [PR] Bump org.apache.xmlbeans:xmlbeans from 5.3.0 to 5.4.0 [ws-axiom] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/25 03:54:04 UTC, 1 replies.
- [PR] Use provider-neutral X.509 key identifier parsing [ws-wss4j] - posted by "gregjotau (via GitHub)" <gi...@apache.org> on 2026/08/25 07:29:30 UTC, 0 replies.
- [PR] Fix resolved schema cache key collisions and validate cache hits [ws-xmlschema] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/25 10:11:29 UTC, 1 replies.
- [PR] Impose an import depth limit [ws-xmlschema] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/25 10:58:28 UTC, 1 replies.
- [jira] [Created] (WSS-728) Switch to JBoss repository to download Opensaml - posted by "Colm O hEigeartaigh (Jira)" <ji...@apache.org> on 2026/08/25 15:16:00 UTC, 0 replies.
- [PR] WSS-728 - Switch to JBoss repository [ws-wss4j] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/25 15:16:25 UTC, 1 replies.
- Re: [PR] Bump opensaml.version from 5.2.1 to 5.2.2 [ws-wss4j] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/25 15:38:14 UTC, 0 replies.
- [jira] [Resolved] (WSS-728) Switch to JBoss repository to download Opensaml - posted by "Colm O hEigeartaigh (Jira)" <ji...@apache.org> on 2026/08/25 16:12:00 UTC, 0 replies.
- Re: [PR] Bump opensaml.version from 5.2.1 to 5.2.3 [ws-wss4j] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/25 16:17:16 UTC, 0 replies.
- [PR] Bump xmlunit.version from 2.12.0 to 2.13.0 [ws-wss4j] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/26 08:03:16 UTC, 1 replies.
- [PR] Bump junit.version from 6.0.3 to 6.1.3 [ws-wss4j] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/26 08:03:24 UTC, 2 replies.
- [PR] Bump bcprov.version from 1.84 to 1.85 [ws-wss4j] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/26 08:03:30 UTC, 3 replies.
- [PR] Add max nesting depth [ws-xmlschema] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/26 09:06:02 UTC, 1 replies.
- [PR] Properly throw XMLSchemaException in some places [ws-xmlschema] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/26 10:31:54 UTC, 1 replies.
- [PR] Bump github/codeql-action/init from 4.37.7 to 4.37.8 [ws-neethi] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/26 17:15:27 UTC, 1 replies.
- [PR] Bump github/codeql-action/analyze from 4.37.7 to 4.37.8 [ws-neethi] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/26 17:16:36 UTC, 1 replies.
- [PR] Bump github/codeql-action/init from 4.37.7 to 4.37.8 [ws-xmlschema] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/26 17:36:05 UTC, 1 replies.
- [PR] Bump github/codeql-action/analyze from 4.37.7 to 4.37.8 [ws-xmlschema] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/26 17:37:11 UTC, 1 replies.
- [PR] Bump actions/setup-java from 5 to 6 [ws-axiom] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/27 03:53:19 UTC, 1 replies.
- [PR] Bump groovy.version from 5.1.0 to 5.1.1 [ws-axiom] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/27 03:53:35 UTC, 1 replies.
- [PR] Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.5 to 3.5.6 [ws-wss4j] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/27 08:15:11 UTC, 0 replies.
- [PR] Bump org.apache.felix:maven-bundle-plugin from 6.0.2 to 6.1.0 [ws-wss4j] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/27 08:15:17 UTC, 0 replies.
- [PR] Bump com.fasterxml.woodstox:woodstox-core from 7.1.1 to 7.2.2 [ws-wss4j] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/27 08:15:29 UTC, 0 replies.
- [PR] Harden default resolver [ws-xmlschema] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/27 09:05:12 UTC, 1 replies.
- [PR] Tighten Max/Min Occurs parsing [ws-xmlschema] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/27 13:53:58 UTC, 1 replies.
- [PR] Harden internal parser against DTDs [ws-xmlschema] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/28 08:09:49 UTC, 1 replies.
- [PR] Fix DOMSource correctness bug [ws-xmlschema] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/08/28 08:19:21 UTC, 1 replies.
- [PR] Remove eclipse-settings-maven-plugin configuration [ws-axiom] - posted by "veithen (via GitHub)" <gi...@apache.org> on 2026/08/30 16:35:26 UTC, 1 replies.
- [PR] Bump com.diffplug.spotless:spotless-maven-plugin from 3.10.0 to 3.10.1 [ws-axiom] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/31 03:53:20 UTC, 1 replies.
- [PR] Bump org.wildfly:wildfly-preview-dist from 41.0.0.Final to 41.0.1.Final [ws-axiom] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/31 03:54:18 UTC, 1 replies.
- [PR] Bump github/codeql-action/init from 4.37.7 to 4.37.9 [ws-wss4j] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/31 08:05:18 UTC, 0 replies.
- [PR] Bump actions/setup-java from 5.7.0 to 6.0.0 [ws-wss4j] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/31 08:05:30 UTC, 0 replies.
- [PR] Bump github/codeql-action/upload-sarif from 4.37.7 to 4.37.9 [ws-wss4j] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/31 08:06:41 UTC, 0 replies.
- [PR] Bump github/codeql-action/analyze from 4.37.7 to 4.37.9 [ws-wss4j] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/31 08:07:48 UTC, 0 replies.
- [PR] Bump actions/setup-java from 5.7.0 to 6.0.0 [ws-neethi] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/31 17:14:20 UTC, 0 replies.
- [PR] Bump github/codeql-action/init from 4.37.8 to 4.37.9 [ws-neethi] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/31 17:15:23 UTC, 0 replies.
- [PR] Bump github/codeql-action/analyze from 4.37.8 to 4.37.9 [ws-neethi] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/31 17:15:56 UTC, 0 replies.
- [PR] Bump actions/setup-java from 5.7.0 to 6.0.0 [ws-xmlschema] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/31 17:39:50 UTC, 0 replies.
- [PR] Bump github/codeql-action/analyze from 4.37.8 to 4.37.9 [ws-xmlschema] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/31 17:41:04 UTC, 0 replies.
- [PR] Bump github/codeql-action/init from 4.37.8 to 4.37.9 [ws-xmlschema] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/08/31 17:42:14 UTC, 0 replies.