You are viewing a plain text version of this content. The canonical link for it is here.
- (commons-secure-xml) branch main updated (39df65a -> ce48b10) - posted by pk...@apache.org on 2026/09/01 07:03:48 UTC, 0 replies.
- (commons-secure-xml) 01/03: fix: add Mockito as Gradle dependency - posted by pk...@apache.org on 2026/09/01 07:03:49 UTC, 0 replies.
- (commons-secure-xml) 02/03: Rework the SAX default parser selection tests. - posted by pk...@apache.org on 2026/09/01 07:03:50 UTC, 0 replies.
- (commons-secure-xml) 03/03: Rework the DOM default parser selection test. - posted by pk...@apache.org on 2026/09/01 07:03:51 UTC, 0 replies.
- (commons-secure-xml) branch main updated: Disable Mockito-based tests in the native image - posted by pk...@apache.org on 2026/09/01 07:42:28 UTC, 0 replies.
- (commons-secure-xml) branch main updated: Verify the Gradle wrapper and distribution by checksum - posted by pk...@apache.org on 2026/09/01 07:51:23 UTC, 0 replies.
- (commons-skin) branch master updated (60e4e81 -> 46a5362) - posted by ah...@apache.org on 2026/09/01 09:25:31 UTC, 0 replies.
- (commons-skin) 01/02: Bump to next development version - posted by ah...@apache.org on 2026/09/01 09:25:32 UTC, 0 replies.
- (commons-skin) 02/02: Merge branch 'release' - posted by ah...@apache.org on 2026/09/01 09:25:33 UTC, 0 replies.
- (commons-skin) annotated tag rel/commons-skin-5.3.0 updated (8e1b3b1 -> 750ea31) - posted by ah...@apache.org on 2026/09/01 09:26:00 UTC, 0 replies.
- svn commit: r87108 - dev/commons/skin/5.3.0-RC1 - posted by ah...@apache.org on 2026/09/01 09:45:45 UTC, 0 replies.
- (commons-parent) branch master updated: Update Commons Skin 5.2.0 to 5.3.0 - posted by ah...@apache.org on 2026/09/01 09:47:28 UTC, 0 replies.
- (commons-secure-xml) branch ci/zulu-8u152 created (now 414da2f) - posted by pk...@apache.org on 2026/09/01 10:14:28 UTC, 0 replies.
- (commons-secure-xml) 01/01: Pin the CI Zulu job to JDK 8u152 - posted by pk...@apache.org on 2026/09/01 10:14:29 UTC, 0 replies.
- (commons-secure-xml) branch ci/zulu-8u152 updated (414da2f -> dad641f) - posted by pk...@apache.org on 2026/09/01 10:28:12 UTC, 0 replies.
- (commons-secure-xml) branch build/build-all-gate deleted (was a8116c3) - posted by pk...@apache.org on 2026/09/01 10:42:58 UTC, 0 replies.
- (commons-secure-xml) branch main updated: Restructure SECURITY.md into a full security policy (#67) - posted by gg...@apache.org on 2026/09/01 11:19:52 UTC, 0 replies.
- (commons-secure-xml) branch main updated: Forward getExternalSubset to a caller EntityResolver2 (#68) - posted by gg...@apache.org on 2026/09/01 11:23:46 UTC, 0 replies.
- svn commit: r87114 - dev/commons/secure-xml/1.0.0-RC1 - posted by gg...@apache.org on 2026/09/01 11:24:56 UTC, 0 replies.
- (commons-secure-xml) branch main updated: Resolve each unresolved URI to a fresh empty document (#69) - posted by gg...@apache.org on 2026/09/01 11:27:58 UTC, 0 replies.
- (commons-secure-xml) branch main updated: Rethrow JVM errors unchanged in MethodHandleFactory.invokeExact (#70) - posted by gg...@apache.org on 2026/09/01 11:28:39 UTC, 0 replies.
- (commons-secure-xml) branch main updated: Cover Saxon's unparsed-text family and json-doc on the TrAX path (#71) - posted by gg...@apache.org on 2026/09/01 11:30:12 UTC, 0 replies.
- (commons-secure-xml) branch main updated: Keep the resolver floor on a reader obtained before reset() (#72) - posted by gg...@apache.org on 2026/09/01 11:31:41 UTC, 0 replies.
- (commons-secure-xml) branch main updated: Bound the content model a schema expands into (#73) - posted by gg...@apache.org on 2026/09/01 11:34:37 UTC, 0 replies.
- (commons-secure-xml) branch ci/zulu-8u152 updated (dad641f -> 19f678d) - posted by gg...@apache.org on 2026/09/01 11:36:31 UTC, 0 replies.
- (commons-secure-xml) branch main updated: Secure getAssociatedStylesheet, and pin the CI Zulu job to JDK 8u152 (#74) - posted by gg...@apache.org on 2026/09/01 11:38:48 UTC, 0 replies.
- (commons-secure-xml) branch ci/zulu-8u152 deleted (was 19f678d) - posted by gg...@apache.org on 2026/09/01 11:38:55 UTC, 0 replies.
- (commons-secure-xml) branch main updated: Install a fresh StAX resolver floor per hook instead of mutating one (#75) - posted by gg...@apache.org on 2026/09/01 11:41:42 UTC, 0 replies.
- (commons-secure-xml) branch main updated: Delegate the Java 18 XPathFactory property methods (#76) - posted by gg...@apache.org on 2026/09/01 11:48:36 UTC, 0 replies.
- (commons-secure-xml) branch main updated: Package-private FallbackIgnoreEntityResolver2 can be final. - posted by gg...@apache.org on 2026/09/01 11:50:09 UTC, 0 replies.
- (commons-jcs) branch master updated (60b41be5 -> ced38659) - posted by tv...@apache.org on 2026/09/01 11:57:10 UTC, 0 replies.
- (commons-jcs) 01/03: Improve thread pool handling - posted by tv...@apache.org on 2026/09/01 11:57:11 UTC, 0 replies.
- (commons-jcs) 02/03: Document scheduled pool configuration - posted by tv...@apache.org on 2026/09/01 11:57:12 UTC, 0 replies.
- (commons-jcs) 03/03: Merge branch 'master' of https://gitbox.apache.org/repos/asf/commons-jcs.git - posted by tv...@apache.org on 2026/09/01 11:57:13 UTC, 0 replies.
- (commons-secure-xml) branch main updated (4ae7b9c -> e1dde41) - posted by gg...@apache.org on 2026/09/01 12:06:43 UTC, 0 replies.
- (commons-secure-xml) 01/05: Next RC will be RC2. - posted by gg...@apache.org on 2026/09/01 12:06:44 UTC, 0 replies.
- (commons-secure-xml) 02/05: Add android-tests to source assembly. - posted by gg...@apache.org on 2026/09/01 12:06:45 UTC, 0 replies.
- (commons-secure-xml) 03/05: Sort members. - posted by gg...@apache.org on 2026/09/01 12:06:46 UTC, 0 replies.
- (commons-secure-xml) 04/05: Javadoc - posted by gg...@apache.org on 2026/09/01 12:06:47 UTC, 0 replies.
- (commons-secure-xml) 05/05: Generate binary assembly. - posted by gg...@apache.org on 2026/09/01 12:06:48 UTC, 0 replies.
- (commons-secure-xml) branch main updated (e1dde41 -> b08f73e) - posted by gg...@apache.org on 2026/09/01 12:19:46 UTC, 0 replies.
- (commons-secure-xml) 01/02: Javadoc - posted by gg...@apache.org on 2026/09/01 12:19:47 UTC, 0 replies.
- (commons-secure-xml) 02/02: Javadoc - posted by gg...@apache.org on 2026/09/01 12:19:48 UTC, 0 replies.
- (commons-jcs) branch master updated: Fix inconsistent locking - posted by tv...@apache.org on 2026/09/01 13:04:42 UTC, 0 replies.
- (commons-secure-xml) branch main updated: Don't need protected method in final class (#77) - posted by pk...@apache.org on 2026/09/01 13:34:19 UTC, 0 replies.
- (commons-secure-xml) branch main updated: Small simplifications (#79) - posted by pk...@apache.org on 2026/09/01 13:52:22 UTC, 0 replies.
- (commons-secure-xml) branch main updated: Copy editing (#80) - posted by gg...@apache.org on 2026/09/01 14:09:22 UTC, 0 replies.
- (commons-secure-xml) branch main updated: Remove unthrown exceptions (#78) - posted by gg...@apache.org on 2026/09/01 14:11:04 UTC, 0 replies.
- (commons-secure-xml) branch main updated (94898e3 -> 1ff8851) - posted by pk...@apache.org on 2026/09/01 14:13:32 UTC, 0 replies.
- (commons-secure-xml) 01/02: Credit Elliotte Rusty Harold's clean-up in the changelog - posted by pk...@apache.org on 2026/09/01 14:13:33 UTC, 0 replies.
- (commons-secure-xml) 02/02: Use the ASF id in the changelog and the developer entry - posted by pk...@apache.org on 2026/09/01 14:13:34 UTC, 0 replies.
- (commons-secure-xml) branch main updated: Remove unused import. - posted by gg...@apache.org on 2026/09/01 14:41:56 UTC, 0 replies.
- (commons-secure-xml) branch main updated: Sharpen the threat model: honored JAXP contracts, XInclude, and expansion limits (#66) - posted by pk...@apache.org on 2026/09/01 15:30:51 UTC, 0 replies.
- (commons-secure-xml) branch main updated: Document resolvers in the Javadoc overview (#81) - posted by gg...@apache.org on 2026/09/01 16:21:22 UTC, 0 replies.
- (commons-secure-xml) branch main updated: SchemaContentModelLimitTest.MAX_OCCURS only needs to be just over 5,000. - posted by gg...@apache.org on 2026/09/01 16:50:43 UTC, 0 replies.
- (commons-secure-xml) branch main updated: Import class instead of using a FQCN. - posted by gg...@apache.org on 2026/09/01 16:53:32 UTC, 0 replies.
- (commons-statistics) branch master updated: Implement the range probability(from, to) using a single sum - posted by ah...@apache.org on 2026/09/01 17:01:00 UTC, 0 replies.
- (commons-secure-xml) branch main updated: Javadoc @link to our own classes. - posted by gg...@apache.org on 2026/09/01 17:11:58 UTC, 1 replies.
- (commons-secure-xml) branch main updated: Fix broken English. - posted by gg...@apache.org on 2026/09/01 18:06:32 UTC, 0 replies.
- (commons-secure-xml) branch main updated: Split the Security and Threat Model pages (#83) - posted by gg...@apache.org on 2026/09/01 20:33:56 UTC, 0 replies.
- (commons-lang) branch master updated: fix int overflow in Conversion count and position bounds guards (#1779) - posted by gg...@apache.org on 2026/09/01 20:55:38 UTC, 0 replies.
- (commons-lang) branch master updated: Fix int overflow in Conversion count and position bounds guards (#1779). - posted by gg...@apache.org on 2026/09/01 20:57:26 UTC, 0 replies.
- (commons-lang) branch master updated: Add DurationFormatUtilsTest.testFormatPeriodWithoutMonthsAfterLeapDayAnniversary() - posted by gg...@apache.org on 2026/09/01 21:41:18 UTC, 0 replies.
- (commons-lang) branch master updated: Checkstyle - posted by gg...@apache.org on 2026/09/01 21:47:40 UTC, 0 replies.
- (commons-beanutils) branch master updated: Preserve float and double magnitude when converting to BigInteger (#438) - posted by gg...@apache.org on 2026/09/01 21:53:18 UTC, 0 replies.
- (commons-beanutils) branch master updated: NumberConverter.toNumber(Class, Number): Preserve float and double magnitude when converting to BigInteger (#438). - posted by gg...@apache.org on 2026/09/01 21:54:17 UTC, 0 replies.
- (commons-secure-xml) branch main updated: Fix the site test report and count Android in the coverage (#82) - posted by gg...@apache.org on 2026/09/02 10:38:34 UTC, 0 replies.
- (commons-secure-xml) branch main updated (61fe771 -> 8af1672) - posted by gg...@apache.org on 2026/09/02 11:37:05 UTC, 0 replies.
- (commons-secure-xml) 01/10: Javadoc (grammar) - posted by gg...@apache.org on 2026/09/02 11:37:06 UTC, 0 replies.
- (commons-secure-xml) 02/10: Javadoc @see tag not needed here. - posted by gg...@apache.org on 2026/09/02 11:37:07 UTC, 0 replies.
- (commons-secure-xml) 03/10: Javadoc (grammar) - posted by gg...@apache.org on 2026/09/02 11:37:08 UTC, 0 replies.
- (commons-secure-xml) 04/10: Normalize spelling. - posted by gg...@apache.org on 2026/09/02 11:37:09 UTC, 0 replies.
- (commons-secure-xml) 05/10: Javadoc: Fix word salad - posted by gg...@apache.org on 2026/09/02 11:37:10 UTC, 0 replies.
- (commons-secure-xml) 06/10: Javadoc: Fix word salad. - posted by gg...@apache.org on 2026/09/02 11:37:11 UTC, 0 replies.
- (commons-secure-xml) 07/10: Javadoc - posted by gg...@apache.org on 2026/09/02 11:37:12 UTC, 0 replies.
- (commons-secure-xml) 08/10: Fix inline comment - posted by gg...@apache.org on 2026/09/02 11:37:13 UTC, 0 replies.
- (commons-secure-xml) 09/10: FIx Javadoc @param description - posted by gg...@apache.org on 2026/09/02 11:37:14 UTC, 0 replies.
- (commons-secure-xml) 10/10: Javadoc - posted by gg...@apache.org on 2026/09/02 11:37:15 UTC, 0 replies.
- (commons-secure-xml) branch main updated: Javadoc - posted by gg...@apache.org on 2026/09/02 14:41:56 UTC, 9 replies.
- (commons-secure-xml) branch main updated (92724fb -> 7602db1) - posted by gg...@apache.org on 2026/09/02 14:48:41 UTC, 0 replies.
- (commons-secure-xml) 01/02: Normalize Javadoc `@throws`. - posted by gg...@apache.org on 2026/09/02 14:48:42 UTC, 0 replies.
- (commons-secure-xml) 02/02: Normalize Javadoc `@param`. - posted by gg...@apache.org on 2026/09/02 14:48:43 UTC, 0 replies.
- (commons-secure-xml) branch main updated (7602db1 -> 10b4451) - posted by gg...@apache.org on 2026/09/02 18:19:03 UTC, 0 replies.
- (commons-secure-xml) 01/02: Better table description - posted by gg...@apache.org on 2026/09/02 18:19:04 UTC, 0 replies.
- (commons-secure-xml) 02/02: Fix HTML links - posted by gg...@apache.org on 2026/09/02 18:19:05 UTC, 0 replies.
- (commons-secure-xml) branch dependabot/maven/commons.graalvm.buildtools.version-1.1.11 created (now 327d5ab) - posted by gi...@apache.org on 2026/09/02 18:41:38 UTC, 0 replies.
- (commons-secure-xml) branch main updated: Bump commons.graalvm.buildtools.version from 1.1.10 to 1.1.11 (#85) - posted by gg...@apache.org on 2026/09/02 18:46:35 UTC, 0 replies.
- (commons-secure-xml) branch dependabot/maven/commons.graalvm.buildtools.version-1.1.11 deleted (was 327d5ab) - posted by gg...@apache.org on 2026/09/02 18:46:40 UTC, 0 replies.
- (commons-secure-xml) branch main updated: Prepare for the release candidate - posted by gg...@apache.org on 2026/09/02 22:09:27 UTC, 0 replies.
- (commons-secure-xml) branch release updated (157f41e -> 15e2597) - posted by gg...@apache.org on 2026/09/02 22:09:36 UTC, 0 replies.
- (commons-secure-xml) branch release updated: Prepare for the release candidate 1.0.0 RC2 - posted by gg...@apache.org on 2026/09/02 22:11:44 UTC, 0 replies.
- (commons-secure-xml) annotated tag commons-secure-xml-1.0.0-RC2 updated (f240d75 -> 0ae7c78) - posted by gg...@apache.org on 2026/09/02 22:11:58 UTC, 0 replies.
- svn commit: r87149 - in dev/commons/secure-xml/1.0.0-RC2: . binaries site site/apidocs site/apidocs/legal site/apidocs/org site/apidocs/org/apache site/apidocs/org/apache/commons site/apidocs/org/apache/commons/xml site/apidocs/org/apache/commons/xml/s... - posted by gg...@apache.org on 2026/09/02 22:14:54 UTC, 0 replies.
- (commons-lang) branch master updated: Fix DurationFormatUtils.formatPeriod() calculation when pattern omits M (#1780) - posted by gg...@apache.org on 2026/09/03 02:05:01 UTC, 0 replies.
- (commons-lang) branch master updated: Fix DurationFormatUtils.formatPeriod() calculation when pattern omits 'M' (#1780). - posted by gg...@apache.org on 2026/09/03 02:08:26 UTC, 0 replies.
- (commons-parent) branch master updated (186b455 -> 6f3fdc9) - posted by gg...@apache.org on 2026/09/03 02:14:49 UTC, 0 replies.
- (commons-parent) 01/02: Ignore macOS noise. - posted by gg...@apache.org on 2026/09/03 02:14:50 UTC, 0 replies.
- (commons-parent) 02/02: Bump commons.compiler.version from 3.15.0 to 3.16.0. - posted by gg...@apache.org on 2026/09/03 02:14:51 UTC, 0 replies.
- (commons-bsf) branch feat/use-commons-xml updated (31df147 -> 776e95e) - posted by pk...@apache.org on 2026/09/03 05:04:49 UTC, 0 replies.
- (commons-configuration) branch feat/use-commons-xml updated (264769b0d -> 327d76221) - posted by pk...@apache.org on 2026/09/03 05:04:51 UTC, 0 replies.
- (commons-digester) branch feat/use-commons-xml updated (ccd7f6f3 -> cad08f69) - posted by pk...@apache.org on 2026/09/03 05:04:55 UTC, 0 replies.
- (commons-geometry) branch feat/use-commons-xml updated (99a74470 -> 7abf4a4a) - posted by pk...@apache.org on 2026/09/03 05:04:58 UTC, 0 replies.
- (commons-graph) branch feat/use-commons-xml updated (36ed084 -> be774d1) - posted by pk...@apache.org on 2026/09/03 05:05:03 UTC, 0 replies.
- (commons-jelly) branch feat/use-commons-xml updated (55c5bad2 -> 6bcde77f) - posted by pk...@apache.org on 2026/09/03 05:05:06 UTC, 0 replies.
- (commons-jxpath) branch feat/use-commons-xml updated (915bc091 -> 49e6c1fd) - posted by pk...@apache.org on 2026/09/03 05:05:10 UTC, 0 replies.
- (commons-scxml) branch feat/use-commons-xml updated (cb9672c2 -> d48f1442) - posted by pk...@apache.org on 2026/09/03 05:05:14 UTC, 0 replies.
- (commons-text) branch feat/use-commons-xml updated (f758b18b -> ac4f28fc) - posted by pk...@apache.org on 2026/09/03 05:05:19 UTC, 0 replies.
- (commons-vfs) branch feat/use-commons-xml updated (1f65d1edd -> 377637feb) - posted by pk...@apache.org on 2026/09/03 05:05:21 UTC, 0 replies.
- (commons-jcs) branch dependabot/maven/commons-jcs4-jcache-extras/org.apache.tomcat-tomcat-catalina-11.0.25 created (now 79bf6aa7) - posted by gi...@apache.org on 2026/09/03 07:31:33 UTC, 0 replies.
- (commons-collections) branch master updated: Remove reference to sonatype-snapshots in POM (2026-08-15 f009). - posted by gg...@apache.org on 2026/09/03 10:48:38 UTC, 0 replies.
- (commons-collections) branch master updated: Fix putAll(K, Iterable) NPE for null value transformer (#731). - posted by gg...@apache.org on 2026/09/03 10:58:56 UTC, 0 replies.
- (commons-collections) branch master updated: Fix putAll(K, Iterable) NPE for null value transformer (#731) - posted by gg...@apache.org on 2026/09/03 11:07:38 UTC, 0 replies.
- (commons-collections) branch master updated: Fix TransformedMultiValuedMap.putAll(K, Iterable) NPE for null value transformer (#731). - posted by gg...@apache.org on 2026/09/03 11:09:32 UTC, 0 replies.
- (commons-text) branch master updated: Compare characters by value in DamerauLevenshteinDistance (#770) - posted by gg...@apache.org on 2026/09/03 11:23:02 UTC, 0 replies.
- (commons-text) branch master updated: Compare characters by value in DamerauLevenshteinDistance (#770). - posted by gg...@apache.org on 2026/09/03 11:23:48 UTC, 0 replies.
- (commons-compress) branch master updated: Bump om.github.luben:zstd-jni from 1.5.7-15 to 1.5.7-16. - posted by gg...@apache.org on 2026/09/03 20:10:10 UTC, 0 replies.
- (commons-parent) branch master updated (6f3fdc9 -> cd35faf) - posted by gg...@apache.org on 2026/09/04 11:31:16 UTC, 0 replies.
- (commons-parent) 01/02: Bump commons.checkstyle.version from 14.0.0 to 14.1.0 on Java 21 and up. - posted by gg...@apache.org on 2026/09/04 11:31:17 UTC, 0 replies.
- (commons-parent) 02/02: Bump maven-surefire-plugin to 3.5.6 to 3.6.0. - posted by gg...@apache.org on 2026/09/04 11:31:18 UTC, 0 replies.
- (commons-parent) branch master updated (cd35faf -> d172e0f) - posted by gg...@apache.org on 2026/09/04 11:35:29 UTC, 0 replies.
- (commons-parent) 01/03: Bump maven-surefire-report-plugin to 3.5.6 to 3.6.0. - posted by gg...@apache.org on 2026/09/04 11:35:30 UTC, 0 replies.
- (commons-parent) 02/03: Bump org.apache.felix:maven-bundle-plugin from 6.1.0 to 6.1.2 on Java 17 and up. - posted by gg...@apache.org on 2026/09/04 11:35:31 UTC, 0 replies.
- (commons-parent) 03/03: Bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.26.1 to 0.26.2. - posted by gg...@apache.org on 2026/09/04 11:35:32 UTC, 0 replies.
- (commons-parent) branch master updated: Bump maven-failsafe-plugin from 3.5.6 to 3.6.0. - posted by gg...@apache.org on 2026/09/04 11:36:46 UTC, 0 replies.
- (commons-text) branch master updated (ad7bce75 -> 8f11af0b) - posted by gg...@apache.org on 2026/09/04 11:46:38 UTC, 0 replies.
- (commons-text) 01/02: [test] Bump org.graalvm.js:js from 25.0.2 to 25.3.4.1 on Java 22 and up. - posted by gg...@apache.org on 2026/09/04 11:46:39 UTC, 0 replies.
- (commons-text) 02/02: Bump net.bytebuddy:byte-buddy from 1.18.10 to 1.18.13 - posted by gg...@apache.org on 2026/09/04 11:46:40 UTC, 0 replies.
- (commons-text) branch master updated: Move profile from Java 22 to 25 (LTS) boundary. - posted by gg...@apache.org on 2026/09/04 12:06:26 UTC, 0 replies.
- (commons-build-plugin) branch master updated: Bump graalvm.version from 25.1.3 to 25.3.4.1 on Java 25 and up - posted by gg...@apache.org on 2026/09/04 12:08:46 UTC, 0 replies.
- (commons-parent) branch master updated: Prepare for the release candidate - posted by gg...@apache.org on 2026/09/04 12:18:57 UTC, 0 replies.
- (commons-parent) branch release updated (029a890 -> 76013b5) - posted by gg...@apache.org on 2026/09/04 12:19:04 UTC, 0 replies.
- (commons-parent) branch release updated: Prepare for the release candidate 105 RC1 - posted by gg...@apache.org on 2026/09/04 12:20:00 UTC, 0 replies.
- (commons-parent) annotated tag commons-parent-105-RC1 updated (f26020f -> c41c050) - posted by gg...@apache.org on 2026/09/04 12:20:07 UTC, 0 replies.
- svn commit: r87183 - in dev/commons/parent/105-RC1: . binaries site site/css site/images site/images/logos site/img site/js source - posted by gg...@apache.org on 2026/09/04 12:21:10 UTC, 0 replies.
- (commons-jcs) branch master updated: Relax test timing for windows build - posted by tv...@apache.org on 2026/09/04 12:51:58 UTC, 0 replies.
- (commons-text) branch master updated: StringMatcher.isMatch(CharSequence, int, int, int) forwards bufferEnd as bufferStart (#768) - posted by gg...@apache.org on 2026/09/04 13:49:33 UTC, 0 replies.
- (commons-text) branch master updated (81de4f7a -> 5d882dca) - posted by gg...@apache.org on 2026/09/04 13:51:50 UTC, 0 replies.
- (commons-text) 01/02: Typo - posted by gg...@apache.org on 2026/09/04 13:51:51 UTC, 0 replies.
- (commons-text) 02/02: StringMatcher.isMatch(CharSequence, int, int, int) forwards bufferEnd as bufferStart (#768). - posted by gg...@apache.org on 2026/09/04 13:51:52 UTC, 0 replies.
- (commons-bcel) branch master updated: Nested Code/Record attributes drive unbounded parse-time recursion in ClassParser (f001). - posted by gg...@apache.org on 2026/09/04 14:26:25 UTC, 0 replies.
- (commons-bcel) branch master updated: f001 Nested Code/Record attributes drive unbounded parse-time recursion in ClassParser. - posted by gg...@apache.org on 2026/09/04 14:29:04 UTC, 0 replies.
- (commons-bcel) branch master updated (b27feadf -> ad48367d) - posted by gg...@apache.org on 2026/09/04 19:26:59 UTC, 0 replies.
- (commons-bcel) 01/02: Sort members - posted by gg...@apache.org on 2026/09/04 19:27:00 UTC, 0 replies.
- (commons-bcel) 02/02: Nested annotation element values recurse unboundedly; MAX_ARRAY_DIMENSIONS cap bypassed (f002). - posted by gg...@apache.org on 2026/09/04 19:27:01 UTC, 0 replies.
- (commons-bcel) branch master updated: Opcodes tableswitch and lookupswitch add boundary checks (f003). - posted by gg...@apache.org on 2026/09/04 19:35:18 UTC, 0 replies.
- (commons-bcel) branch master updated: JustIce Pass 2 hangs on cyclic superclass chain of a referenced exception class (f004). - posted by gg...@apache.org on 2026/09/04 19:40:06 UTC, 0 replies.
- (commons-bcel) branch master updated: JustIce Pass 2 LVT check amplifies each 10-byte entry into ~131k hashtable operations (f005). - posted by gg...@apache.org on 2026/09/04 19:46:00 UTC, 0 replies.
- (commons-bcel) branch master updated: Pass 3b dataflow stores frames per instruction and clones ever-growing execution chains (f006). - posted by gg...@apache.org on 2026/09/04 19:54:47 UTC, 0 replies.
- (commons-bcel) branch master updated: Cubic handlers × range × subroutines scan in Subroutines constructor hangs JustIce Pass 3b (f007). - posted by gg...@apache.org on 2026/09/04 20:03:06 UTC, 0 replies.
- (commons-bcel) branch master updated: Subroutines.noRecursiveCalls enumerates exponentially many JSR call paths (f008). - posted by gg...@apache.org on 2026/09/04 20:04:57 UTC, 0 replies.
- (commons-bcel) branch master updated: Disassembler and Class2HTML re-implement the unchecked switch-table allocation (f009). - posted by gg...@apache.org on 2026/09/04 20:10:27 UTC, 0 replies.
- (commons-bcel) branch master updated: ConstantPool.constantToString recurses forever on self-referencing CONSTANT_MethodHandle (f010). - posted by gg...@apache.org on 2026/09/04 20:13:42 UTC, 0 replies.
- (commons-bcel) branch master updated: f011: typeSignatureToString recurses per generic-nesting level, unbounded, with quadratic substring copies - posted by gg...@apache.org on 2026/09/04 20:28:08 UTC, 0 replies.
- (commons-jcs) branch master updated (ecc6241d -> 593885cb) - posted by tv...@apache.org on 2026/09/04 20:41:22 UTC, 0 replies.
- (commons-jcs) 01/02: Better data encapsulation - posted by tv...@apache.org on 2026/09/04 20:41:23 UTC, 0 replies.
- (commons-jcs) 02/02: A bit of reorganization in basic structures - posted by tv...@apache.org on 2026/09/04 20:41:24 UTC, 0 replies.
- (commons-bcel) branch master updated: Repositories cache classes under the input-defined this_class name; global static Repository/VerifierFactory make the poisoning ClassLoader-wide (f012). - posted by gg...@apache.org on 2026/09/04 21:06:30 UTC, 0 replies.
- (commons-bcel) branch master updated: Silent u2/u1 count truncation across dump paths corrupts emitted bytecode (f013). - posted by gg...@apache.org on 2026/09/04 21:12:49 UTC, 0 replies.
- (commons-jcs) branch master updated: Remove declaration of exceptions never thrown - posted by tv...@apache.org on 2026/09/04 21:14:09 UTC, 0 replies.
- (commons-jcs) branch master updated (816923b3 -> 735ba195) - posted by tv...@apache.org on 2026/09/04 21:15:03 UTC, 0 replies.
- (commons-jcs) 01/01: Merge pull request #418 from apache/dependabot/maven/commons-jcs4-jcache-extras/org.apache.tomcat-tomcat-catalina-11.0.25 - posted by tv...@apache.org on 2026/09/04 21:15:04 UTC, 0 replies.
- (commons-jcs) branch dependabot/maven/commons-jcs4-jcache-extras/org.apache.tomcat-tomcat-catalina-11.0.25 deleted (was 79bf6aa7) - posted by gi...@apache.org on 2026/09/04 21:15:11 UTC, 0 replies.
- (commons-bcel) branch master updated (512a70bb -> fb72c225) - posted by gg...@apache.org on 2026/09/04 21:19:48 UTC, 0 replies.
- (commons-bcel) 01/03: Repositories cache classes under the input-defined this_class name; global static Repository/VerifierFactory make the poisoning ClassLoader-wide. (f012). - posted by gg...@apache.org on 2026/09/04 21:19:49 UTC, 0 replies.
- (commons-bcel) 02/03: Silent u2/u1 count truncation across dump paths corrupts emitted bytecode. (f013). - posted by gg...@apache.org on 2026/09/04 21:19:50 UTC, 0 replies.
- (commons-bcel) 03/03: Class2HTML emitters write attacker class-file strings into HTML unescaped (stored XSS in reports) (f014). - posted by gg...@apache.org on 2026/09/04 21:19:51 UTC, 0 replies.
- (commons-jcs) branch master updated: Potential fix for code scanning alert no. 124: Failure to use secure cookies - posted by tv...@apache.org on 2026/09/04 21:23:15 UTC, 0 replies.
- (commons-bcel) branch master updated: Class2HTML builds output file paths from the unvalidated class name (f015). - posted by gg...@apache.org on 2026/09/04 21:24:21 UTC, 0 replies.
- (commons-jcs) branch dependabot/maven/commons-jcs4-jcache-openjpa/org.apache.derby-derby-10.17.1.0 created (now 2f3256aa) - posted by gi...@apache.org on 2026/09/04 21:26:51 UTC, 0 replies.
- (commons-jcs) branch dependabot/maven/commons-jcs4-jcache-openjpa/org.apache.derby-derby-10.17.1.0 updated (2f3256aa -> 8a8544cc) - posted by tv...@apache.org on 2026/09/04 21:28:54 UTC, 0 replies.
- (commons-jcs) branch master updated (c493ae79 -> 22c86674) - posted by tv...@apache.org on 2026/09/04 21:30:40 UTC, 0 replies.
- (commons-jcs) 01/01: Merge pull request #419 from apache/dependabot/maven/commons-jcs4-jcache-openjpa/org.apache.derby-derby-10.17.1.0 - posted by tv...@apache.org on 2026/09/04 21:30:41 UTC, 0 replies.
- (commons-jcs) branch dependabot/maven/commons-jcs4-jcache-openjpa/org.apache.derby-derby-10.17.1.0 deleted (was 8a8544cc) - posted by gi...@apache.org on 2026/09/04 21:30:49 UTC, 0 replies.
- (commons-bcel) branch master updated: ClassPath.getBytes() sizes its buffer from the forged ZIP uncompressed-size field (f016). - posted by gg...@apache.org on 2026/09/04 21:31:11 UTC, 0 replies.
- (commons-jcs) branch master updated: 10.16.1.2 does not exist - posted by tv...@apache.org on 2026/09/04 21:36:48 UTC, 0 replies.
- (commons-bcel) branch master updated: PMG attribute ignores declared length, enabling BCEL-vs-JVM parse divergence (f019). - posted by gg...@apache.org on 2026/09/04 21:52:38 UTC, 0 replies.
- (commons-bcel) branch master updated: Signature.matchGJIdent recurses unboundedly on nested generic signatures (Signature.translate) (f020). - posted by gg...@apache.org on 2026/09/04 21:56:48 UTC, 0 replies.
- (commons-bcel) branch master updated: Utility.decode fixed 3x buffer breaks the encode/decode round trip and throws unchecked AIOOBE (f021). - posted by gg...@apache.org on 2026/09/04 22:16:47 UTC, 0 replies.
- (commons-bcel) branch master updated: BCELifier interpolates attacker class/package names into generated Java source unescaped (f022). - posted by gg...@apache.org on 2026/09/04 22:20:00 UTC, 0 replies.
- (commons-bcel) branch master updated: Verifier pass 3a delayed checks are quadratic in attribute and code size (f023). - posted by gg...@apache.org on 2026/09/04 22:23:35 UTC, 0 replies.
- (commons-bcel) branch master updated (b0c3e6a1 -> 4a4b7577) - posted by gg...@apache.org on 2026/09/04 22:32:14 UTC, 0 replies.
- (commons-bcel) 01/02: Verifier cache grows unboundedly with attacker-chosen class names (f024). - posted by gg...@apache.org on 2026/09/04 22:32:15 UTC, 0 replies.
- (commons-bcel) 02/02: org.apache.bcel.verifier.VerifierFactory.DEFAULT_MAX_CACHE_SIZE doesn't need to be public. - posted by gg...@apache.org on 2026/09/04 22:32:16 UTC, 0 replies.
- (commons-bcel) branch master updated: Static WIDE ThreadLocal survives exceptions, corrupting the next class's disassembly on the same thread (f025). - posted by gg...@apache.org on 2026/09/04 22:35:56 UTC, 0 replies.
- (commons-bcel) branch master updated: Utility.JavaReader escape decoding: OOB table index, bad-hex crash, silent non-canonical aliasing (f026). - posted by gg...@apache.org on 2026/09/04 23:02:08 UTC, 0 replies.
- (commons-bcel) branch master updated: Sort members - posted by gg...@apache.org on 2026/09/05 00:23:09 UTC, 0 replies.
- (commons-lang) branch master updated: FastDateParser parses 'Y' (week year) as plain calendar year; asymmetric with FastDatePrinter and with SimpleDateFormat; boundary dates shift by a full year, silently (f002). - posted by gg...@apache.org on 2026/09/05 01:28:58 UTC, 1 replies.
- (commons-lang) branch master updated: UnicodeUnescaper.unescapeJava/EcmaScript/Json: malformed \u sequences throw undeclared IllegalArgumentException, AND non-ASCII digit spellings of \u escapes are silently accepted; both arms of one missing ASCII-hex prescan (f004). - posted by gg...@apache.org on 2026/09/05 01:52:45 UTC, 0 replies.
- (commons-lang) branch master updated: StringUtils.replaceEachRepeatedly derives its recursion budget from the input itself - the documented StackOverflowError protection fails on large tables, and expanding rules amplify text 64x even at the default TTL (f005). - posted by gg...@apache.org on 2026/09/05 02:17:23 UTC, 0 replies.
- (commons-lang) branch master updated: EventUtils.EventBindingInvocationHandler.invoke() dispatches Object.hashCode/equals/toString into the bound business method (empty-eventTypes default), or returns null -> NPE from hash collections (non-empty) (f006). - posted by gg...@apache.org on 2026/09/05 11:02:26 UTC, 0 replies.
- (commons-bcel) branch master updated: Javadoc - posted by gg...@apache.org on 2026/09/05 11:11:44 UTC, 0 replies.
- (commons-lang) branch master updated: LocaleUtils static caches no longer grows on invalid input to LocaleUtils.countriesByLanguage(String) (f007). - posted by gg...@apache.org on 2026/09/05 11:32:41 UTC, 0 replies.
- (commons-lang) branch master updated: Add missing test - posted by gg...@apache.org on 2026/09/05 11:48:57 UTC, 0 replies.
- (commons-lang) branch master updated: ExtendedMessageFormat.applyPattern() is quadratic: full pattern.toCharArray() per token (f008). - posted by gg...@apache.org on 2026/09/05 11:52:22 UTC, 0 replies.
- (commons-lang) branch master updated: WordUtils.wrap(wrapLongWords=false, the 2-arg default) copies the entire remaining string every iteration (f009). - posted by gg...@apache.org on 2026/09/05 12:00:44 UTC, 0 replies.
- (commons-lang) branch master updated: FastDateParser.parse throws undeclared IllegalArgumentException, NullPointerException, and IllegalStateException on crafted date strings (f010). - posted by gg...@apache.org on 2026/09/05 12:31:32 UTC, 0 replies.
- (commons-jcs) branch master updated (61215aac -> 638611a9) - posted by tv...@apache.org on 2026/09/05 12:34:12 UTC, 0 replies.
- (commons-jcs) 01/06: Move misc code out of the lock - posted by tv...@apache.org on 2026/09/05 12:34:13 UTC, 0 replies.
- (commons-jcs) 02/06: Move payload to derived classes - posted by tv...@apache.org on 2026/09/05 12:34:14 UTC, 0 replies.
- (commons-jcs) 03/06: Make DoubleLinkedList Iterable - posted by tv...@apache.org on 2026/09/05 12:34:15 UTC, 0 replies.
- (commons-jcs) 04/06: Simplify - posted by tv...@apache.org on 2026/09/05 12:34:16 UTC, 0 replies.
- (commons-jcs) 05/06: Re-add ASL - posted by tv...@apache.org on 2026/09/05 12:34:17 UTC, 0 replies.
- (commons-jcs) 06/06: Use same locking as in AbstractMemoryCache - posted by tv...@apache.org on 2026/09/05 12:34:18 UTC, 0 replies.
- (commons-jcs) branch dependabot/maven/jakarta.platform-jakarta.jakartaee-api-11.0.0 updated (ce128720 -> 2e572b78) - posted by gi...@apache.org on 2026/09/05 12:38:31 UTC, 0 replies.
- (commons-lang) branch master updated: Memoizer: default caches the first failure forever, has no size bound or eviction, and runs the user computation inside the ConcurrentHashMap bin lock (blocking unrelated keys, deadlocking reentrant use) (f011). - posted by gg...@apache.org on 2026/09/05 12:46:39 UTC, 0 replies.
- (commons-lang) branch master updated: StringEscapeUtils.escapeEcmaScript() misses backtick/template-literal (`, ${) and inline-script parser-state sequences (