dev@cxf.apache.org, 2026-09

You are viewing a plain text version of this content. The canonical link for it is here.

- Re: [PR] Bump github/codeql-action/autobuild from 4.37.7 to 4.37.9 [cxf-build-utils] - posted by "reta (via GitHub)" <gi...@apache.org> on 2026/09/01 01:03:19 UTC, 2 replies.
- Re: [PR] Bump actions/setup-java from 5.7.0 to 6.0.0 [cxf-build-utils] - posted by "reta (via GitHub)" <gi...@apache.org> on 2026/09/01 01:05:56 UTC, 0 replies.
- Re: [PR] Bump github/codeql-action/init from 4.37.7 to 4.37.9 [cxf-build-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/01 01:08:28 UTC, 1 replies.
- Re: [PR] Bump github/codeql-action/analyze from 4.37.7 to 4.37.9 [cxf-build-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/01 01:08:39 UTC, 1 replies.
- [PR] Make sure attachment-max-header-size property is respected for repeated and multi-line headers [cxf] - posted by "reta (via GitHub)" <gi...@apache.org> on 2026/09/01 01:09:37 UTC, 2 replies.
- [PR] Bump commons-codec:commons-codec from 1.22.0 to 1.22.1 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/01 02:42:47 UTC, 1 replies.
- [PR] Bump io.undertow.ee:undertow-servlet from 2.0.1.Final to 2.0.2.Final [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/01 02:43:55 UTC, 1 replies.
- [PR] Bump org.jruby:jruby from 10.1.0.0 to 10.1.1.0 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/01 02:44:16 UTC, 1 replies.
- Re: [PR] Use a properly random source to generate digest client nonces [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/09/01 07:27:51 UTC, 4 replies.
- Re: [PR] Require in OidcRpAuthenticationFilter that IdTokens have an expiry [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/09/01 07:28:02 UTC, 0 replies.
- [PR] Make Netty client TLS code use hostname verification [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/09/01 10:46:25 UTC, 1 replies.
- [PR] Make sure attachment-max-headers-count property is respected for repeated headers [cxf] - posted by "reta (via GitHub)" <gi...@apache.org> on 2026/09/01 22:19:32 UTC, 2 replies.
- [PR] Bump org.apache.groovy:groovy from 5.0.8 to 5.1.1 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/02 02:44:30 UTC, 1 replies.
- [PR] Bump org.eclipse:yasson from 3.0.4 to 3.0.5 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/02 02:44:53 UTC, 1 replies.
- [PR] Bump tools.jackson.core:jackson-databind from 3.2.1 to 3.2.2 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/02 02:45:06 UTC, 1 replies.
- [PR] Restrict default SAML encryption algorithms [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/09/02 08:48:25 UTC, 1 replies.
- [PR] Add a fallback to prevent attacks on RSA 1.5 in the Jose code [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/09/02 10:24:49 UTC, 4 replies.
- [PR] Bump net.sourceforge.pmd:pmd-java from 7.26.0 to 7.27.0 [cxf-build-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/02 22:12:59 UTC, 1 replies.
- [PR] Bump org.apache.felix:maven-bundle-plugin from 6.1.0 to 6.1.2 [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/03 01:12:33 UTC, 1 replies.
- [PR] Bump io.undertow:undertow-core from 2.4.2.Final to 2.4.3.Final [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/03 02:42:57 UTC, 1 replies.
- [PR] Bump org.graalvm.buildtools:native-maven-plugin from 1.1.10 to 1.1.11 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/03 02:43:09 UTC, 1 replies.
- [PR] Bump net.sourceforge.pmd:pmd-java from 7.26.0 to 7.27.0 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/03 02:43:20 UTC, 2 replies.
- [PR] Bump org.jboss.ws.cxf:jbossws-cxf-client from 7.4.0.Final to 7.4.1.Final [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/04 02:46:05 UTC, 1 replies.
- [PR] Bump org.apache.felix:maven-bundle-plugin from 6.1.0 to 6.1.2 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/04 02:46:33 UTC, 1 replies.
- [PR] Bump org.atmosphere:atmosphere-runtime from 3.1.0 to 4.0.69 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/04 02:49:41 UTC, 2 replies.
- Re: [PR] Bump org.atmosphere:atmosphere-runtime from 3.1.0 to 4.0.68 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/04 02:49:43 UTC, 1 replies.
- [PR] Put a configurable limit on deeply parenthesized sub-expressions in … [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/09/04 06:55:41 UTC, 1 replies.
- [PR] Put a max length on the Fiql search term and fix performance parsing … [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/09/04 13:31:25 UTC, 1 replies.
- [PR] Bump org.apache.maven.plugins:maven-compiler-plugin from 3.15.0 to 3.16.0 [cxf-build-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/04 22:12:44 UTC, 1 replies.
- [PR] Add formParamsMaxSize to FormEncodingProvider and estimate form params count before decoding / parsing [cxf] - posted by "reta (via GitHub)" <gi...@apache.org> on 2026/09/06 15:29:55 UTC, 4 replies.
- [PR] Bump com.puppycrawl.tools:checkstyle from 12.3.1 to 14.1.0 [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/07 01:12:39 UTC, 2 replies.
- [PR] Bump org.apache.maven.plugins:maven-surefire-report-plugin from 3.5.6 to 3.6.0 [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/07 01:12:43 UTC, 1 replies.
- [PR] Bump org.apache.maven.plugins:maven-compiler-plugin from 3.15.0 to 3.16.0 [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/07 01:13:06 UTC, 1 replies.
- [PR] Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.6 to 3.6.0 [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/07 01:13:07 UTC, 1 replies.
- [PR] Bump io.swagger.core.v3:swagger-jaxrs2-jakarta from 2.2.54 to 2.2.55 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/07 02:43:00 UTC, 1 replies.
- [PR] Bump com.fasterxml.woodstox:woodstox-core from 7.2.1 to 7.2.2 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/07 02:43:25 UTC, 1 replies.
- [PR] Bump org.atmosphere:atmosphere-runtime from 3.1.0 to 4.0.70 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/07 02:47:41 UTC, 2 replies.
- Re: [PR] Put a max length on the Fiql search term [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/09/07 10:04:00 UTC, 1 replies.
- [PR] Harden Content-Disposition filename parsing against ReDoS [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/09/07 10:44:53 UTC, 1 replies.
- [PR] Bump org.apache.maven.plugins:maven-surefire-report-plugin from 3.5.6 to 3.6.0 [cxf-build-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/07 22:12:40 UTC, 1 replies.
- [PR] Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.6 to 3.6.0 [cxf-build-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/07 22:12:55 UTC, 1 replies.
- [PR] Bump cxf.dropwizard5.version from 5.0.7 to 5.0.8 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/08 02:43:09 UTC, 1 replies.
- [PR] Bump jakarta.json.bind:jakarta.json.bind-api from 3.0.2 to 3.0.3 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/08 02:43:20 UTC, 1 replies.
- [PR] [4.1] Fixup Use a properly random source to generate digest client nonces [cxf] - posted by "ppalaga (via GitHub)" <gi...@apache.org> on 2026/09/08 06:34:04 UTC, 1 replies.
- [PR] Fix STS secret-key sizing [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/09/08 09:44:01 UTC, 1 replies.
- [PR] Fix secret key sizing for Spnego as well [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/09/08 15:15:27 UTC, 1 replies.
- [PR] Bump org.eclipse.jdt:org.eclipse.jdt.core from 3.46.0 to 3.47.0 [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/09 01:12:25 UTC, 1 replies.
- [PR] Bump cxf.hibernate.em.version from 7.4.6.Final to 7.4.7.Final [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/09 02:50:59 UTC, 1 replies.
- [PR] Bump org.apache.maven.plugins:maven-compiler-plugin from 3.15.0 to 3.16.0 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/09 02:51:45 UTC, 1 replies.
- [PR] Add maxFormParameterSize contextual message parameter and bound form params processing to it [cxf] - posted by "reta (via GitHub)" <gi...@apache.org> on 2026/09/09 12:05:00 UTC, 1 replies.
- [PR] Fix encrypted properties tests to work with WSS4J 4.0.2 [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/09/09 15:01:55 UTC, 4 replies.
- [PR] Bump io.github.littleproxy:littleproxy from 2.8.0 to 2.9.1 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/10 03:20:45 UTC, 1 replies.
- [PR] Bump org.yaml:snakeyaml from 2.6 to 2.7 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/10 03:20:54 UTC, 1 replies.
- [PR] Bump cxf.slf4j.version from 2.0.18 to 2.0.19 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/11 02:44:19 UTC, 1 replies.
- [PR] Bump org.codehaus.plexus:plexus-archiver from 4.12.0 to 4.14.0 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/11 02:45:14 UTC, 1 replies.
- [PR] Bump org.apache.maven.plugins:maven-plugin-plugin from 3.15.2 to 3.16.0 [cxf-build-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/11 22:12:41 UTC, 1 replies.
- [PR] Add sensible defaults to StaxUtils's MAX_ELEMENT_COUNT and MAX_XML_CHARACTERS [cxf] - posted by "reta (via GitHub)" <gi...@apache.org> on 2026/09/13 15:40:51 UTC, 7 replies.
- [PR] Bump org.apache.maven.plugins:maven-plugin-plugin from 3.15.2 to 3.16.0 [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/14 01:11:07 UTC, 1 replies.
- [PR] Bump org.apache.maven.plugin-tools:maven-plugin-annotations from 3.15.2 to 3.16.0 [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/14 01:11:12 UTC, 1 replies.
- [PR] Bump github/codeql-action/init from 4.37.9 to 4.38.0 [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/14 01:11:57 UTC, 3 replies.
- [PR] Bump github/codeql-action/autobuild from 4.37.9 to 4.38.0 [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/14 01:12:41 UTC, 2 replies.
- [PR] Bump github/codeql-action/analyze from 4.37.9 to 4.38.0 [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/14 01:13:26 UTC, 2 replies.
- [PR] Bump actions/setup-java from 6.0.0 to 6.0.1 [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/14 01:13:32 UTC, 1 replies.
- [PR] Bump org.apache.groovy:groovy from 5.1.1 to 5.1.2 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/14 02:43:49 UTC, 1 replies.
- [PR] Bump org.apache.maven.plugins:maven-plugin-plugin from 3.15.2 to 3.16.0 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/14 02:44:11 UTC, 1 replies.
- [PR] Bump org.graalvm.buildtools:native-maven-plugin from 1.1.11 to 1.1.12 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/14 02:44:15 UTC, 1 replies.
- [PR] Bump github/codeql-action/upload-sarif from 4.37.9 to 4.38.0 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/14 02:44:39 UTC, 1 replies.
- [PR] Bump actions/setup-java from 6.0.0 to 6.0.1 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/14 02:44:48 UTC, 1 replies.
- [PR] Bump github/codeql-action/init from 4.37.9 to 4.38.0 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/14 02:45:45 UTC, 2 replies.
- [PR] Bump github/codeql-action/analyze from 4.37.9 to 4.38.0 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/14 02:46:46 UTC, 3 replies.
- [PR] Bump actions/setup-java from 6.0.0 to 6.0.1 [cxf-build-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/14 22:12:57 UTC, 1 replies.
- [PR] Bump github/codeql-action/analyze from 4.37.9 to 4.38.0 [cxf-build-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/14 22:13:56 UTC, 1 replies.
- [PR] Bump github/codeql-action/init from 4.37.9 to 4.38.0 [cxf-build-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/14 22:14:42 UTC, 1 replies.
- [PR] Bump github/codeql-action/autobuild from 4.37.9 to 4.38.0 [cxf-build-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/14 22:15:28 UTC, 1 replies.
- [PR] Bump cxf.openfeign.version from 13.14 to 13.15 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/15 02:43:42 UTC, 1 replies.
- [PR] Bump com.puppycrawl.tools:checkstyle from 14.0.0 to 14.1.0 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/15 02:44:46 UTC, 1 replies.
- [PR] Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.6 to 3.6.0 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/15 02:44:56 UTC, 1 replies.
- [PR] Group codeql updates together [cxf-fediz] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/09/15 07:11:52 UTC, 1 replies.
- Re: [PR] Bump github/codeql-action/analyze from 4.36.2 to 4.37.6 [cxf-fediz] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/09/15 07:12:23 UTC, 0 replies.
- Re: [PR] Bump github/codeql-action/init from 4.35.4 to 4.37.6 [cxf-fediz] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/09/15 07:12:34 UTC, 0 replies.
- Re: [PR] Bump github/codeql-action/autobuild from 4.35.4 to 4.37.6 [cxf-fediz] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/09/15 07:12:45 UTC, 0 replies.
- Re: [PR] Bump actions/checkout from 7.0.0 to 7.0.1 [cxf-fediz] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/09/15 07:13:18 UTC, 0 replies.
- Re: [PR] Bump actions/setup-java from 5.4.0 to 5.7.0 [cxf-fediz] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/09/15 07:13:36 UTC, 0 replies.
- [PR] Group codeql actions together [cxf-build-utils] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/09/15 07:14:40 UTC, 1 replies.
- [PR] Group codeql actions together [cxf-xjc-utils] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/09/15 07:16:13 UTC, 1 replies.
- [PR] Group codeql updates together [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/09/15 07:16:23 UTC, 1 replies.
- [PR] Bump net.sourceforge.pmd:pmd-java from 7.17.0 to 7.27.0 [cxf-fediz] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/15 08:46:44 UTC, 0 replies.
- Re: [PR] Bump net.sourceforge.pmd:pmd-java from 7.17.0 to 7.24.0 [cxf-fediz] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/15 08:46:46 UTC, 1 replies.
- [PR] Bump org.springframework.webflow:spring-webflow from 2.5.1.RELEASE to 4.0.1 [cxf-fediz] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/15 08:49:31 UTC, 0 replies.
- Re: [PR] Bump org.springframework.webflow:spring-webflow from 2.5.1.RELEASE to 4.0.0 [cxf-fediz] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/15 08:49:33 UTC, 1 replies.
- [PR] Bump the codeql-action group with 4 updates [cxf-fediz] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/15 08:50:54 UTC, 0 replies.
- [PR] Bump ossf/scorecard-action from 2.4.3 to 2.4.4 [cxf-fediz] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/15 08:51:01 UTC, 0 replies.
- [PR] Bump actions/setup-java from 5.7.0 to 6.0.1 [cxf-fediz] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/15 08:51:09 UTC, 0 replies.
- [PR] CXF-9245: Race Condition in ServerLifeCycleManagerImpl#stopServer() [cxf] - posted by "reta (via GitHub)" <gi...@apache.org> on 2026/09/16 00:33:54 UTC, 10 replies.
- [PR] Bump cxf.tomcat.version from 11.0.25 to 11.0.26 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/16 02:43:33 UTC, 1 replies.
- [PR] Bump cxf.activemq.artemis.version from 2.56.0 to 2.57.0 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/16 02:44:33 UTC, 1 replies.
- [PR] Bump org.apache.maven.plugins:maven-surefire-report-plugin from 3.5.6 to 3.6.0 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/16 02:44:56 UTC, 1 replies.
- [PR] Bump org.apache.maven.plugins:maven-deploy-plugin from 3.1.4 to 3.2.0 [cxf-build-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/16 22:12:52 UTC, 1 replies.
- [PR] Bump org.codehaus.mojo:build-helper-maven-plugin from 3.6.1 to 3.6.2 [cxf-build-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/16 22:13:06 UTC, 1 replies.
- [PR] Bump org.apache.maven.plugins:maven-install-plugin from 3.1.4 to 3.2.0 [cxf-build-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/16 22:13:10 UTC, 1 replies.
- [PR] Bump org.apache.maven.plugins:maven-install-plugin from 3.1.4 to 3.2.0 [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/17 01:12:23 UTC, 1 replies.
- [PR] Bump org.apache.maven.plugins:maven-deploy-plugin from 3.1.4 to 3.2.0 [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/17 01:12:46 UTC, 1 replies.
- [PR] Bump org.owasp:dependency-check-maven from 12.2.2 to 13.0.0 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/17 02:43:15 UTC, 1 replies.
- [PR] Bump org.apache.maven.plugin-tools:maven-plugin-annotations from 3.15.2 to 3.16.0 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/18 02:43:10 UTC, 1 replies.
- [PR] Bump cxf.hibernate.em.version from 7.4.7.Final to 7.4.8.Final [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/18 02:43:43 UTC, 1 replies.
- [PR] Bump org.codehaus.mojo:exec-maven-plugin from 3.6.3 to 3.6.4 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/18 02:44:23 UTC, 1 replies.
- [PR] Updating Neethi to 3.2.4 [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/09/18 15:06:30 UTC, 1 replies.
- [PR] Bump org.apache.felix:maven-bundle-plugin from 6.1.2 to 6.2.0 [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/21 01:13:45 UTC, 1 replies.
- [PR] Bump cxf.bcprov.version from 1.85 to 1.86 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/21 02:44:21 UTC, 1 replies.
- [PR] Bump org.sonarsource.scanner.maven:sonar-maven-plugin from 5.7.0.6970 to 5.8.0.7211 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/21 02:44:43 UTC, 1 replies.
- [PR] Bump org.codehaus.mojo:buildnumber-maven-plugin from 3.3.0 to 3.3.1 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/21 02:45:06 UTC, 1 replies.
- [VOTE] Apache cxf-build-utils 4.1.5 - posted by Andriy Redko <dr...@gmail.com> on 2026/09/22 02:03:36 UTC, 7 replies.
- [PR] Bump jakarta.enterprise:jakarta.enterprise.cdi-api from 4.1.0 to 5.0.0 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/22 02:44:12 UTC, 2 replies.
- [PR] Bump org.graalvm.buildtools:native-maven-plugin from 1.1.12 to 1.1.13 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/22 02:44:45 UTC, 1 replies.
- [PR] Bump org.apache:apache from 39 to 40 [cxf-build-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/22 22:13:27 UTC, 1 replies.
- [CANCEL] [VOTE] Apache cxf-build-utils 4.1.5 - posted by Andriy Redko <dr...@gmail.com> on 2026/09/22 23:06:39 UTC, 0 replies.
- [PR] Bump org.apache:apache from 39 to 40 [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/23 01:12:16 UTC, 1 replies.
- [PR] Bump org.apache.maven.plugins:maven-install-plugin from 3.1.4 to 3.2.0 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/23 02:42:53 UTC, 1 replies.
- [PR] Bump org.codehaus.mojo:build-helper-maven-plugin from 3.6.1 to 3.6.2 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/23 02:43:22 UTC, 1 replies.
- [PR] Bump the codeql-action group with 3 updates [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/23 02:45:34 UTC, 3 replies.
- [PR] Update bctls-jdk18on to 1.86.1 [cxf] - posted by "reta (via GitHub)" <gi...@apache.org> on 2026/09/23 12:48:27 UTC, 2 replies.
- Re: [PR] Bump com.squareup.okhttp3:okhttp from 4.12.0 to 5.5.0 [cxf] - posted by "reta (via GitHub)" <gi...@apache.org> on 2026/09/23 12:54:07 UTC, 1 replies.
- [PR] Bump org.apache.maven.plugins:maven-deploy-plugin from 3.1.4 to 3.2.0 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/24 02:42:39 UTC, 1 replies.
- [PR] Bump cxf.hibernate.em.version from 7.4.8.Final to 7.4.9.Final [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/24 02:43:34 UTC, 1 replies.
- [PR] Bump org.webjars:swagger-ui from 5.32.14 to 5.32.15 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/24 02:43:45 UTC, 1 replies.
- [PR] Bump org.apache.felix:maven-bundle-plugin from 6.1.2 to 6.2.0 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/24 02:44:09 UTC, 1 replies.
- [PR] Adding a more secure way of caching tokens in the STS [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/09/24 05:07:24 UTC, 1 replies.
- [PR] Adding a new pop switch for the X509TokenValidator in the STS [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/09/24 06:08:58 UTC, 1 replies.
- [PR] Make STSTokenValidator thread safe [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/09/24 15:47:24 UTC, 1 replies.
- [PR] Bump the codeql-action group with 3 updates [cxf-build-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/24 22:16:36 UTC, 1 replies.
- [PR] Bump the codeql-action group with 3 updates [cxf-xjc-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/25 01:15:23 UTC, 1 replies.
- [PR] Bump cxf.hibernate.em.version from 7.4.9.Final to 7.4.10.Final [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/25 02:44:19 UTC, 1 replies.
- [PR] Bump org.graalvm.buildtools:native-maven-plugin from 1.1.13 to 1.1.14 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/25 02:44:27 UTC, 1 replies.
- [PR] Bump com.h2database:h2 from 2.4.240 to 2.5.250 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/25 02:44:59 UTC, 1 replies.
- [PR] Bump org.apache.groovy:groovy from 5.1.2 to 6.0.0 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/25 02:46:47 UTC, 1 replies.
- [PR] Prevent XML Signature wrapping in AbstractXmlSigInHandler [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/09/25 05:20:29 UTC, 4 replies.
- [PR] Prevent XML Signature wrapping in XmlSecInInterceptor [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/09/25 05:52:22 UTC, 1 replies.
- [PR] Tighten scope and application_type validation in DynamicRegistrationS… [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/09/25 08:38:37 UTC, 1 replies.
- [PR] Bump cxf.slf4j.version from 2.0.19 to 2.0.20 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/28 02:44:15 UTC, 1 replies.
- [PR] Bump org.apache.httpcomponents.core5:httpcore5 from 5.4.3 to 5.4.4 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/28 02:44:23 UTC, 0 replies.
- [PR] Bump tools.jackson.core:jackson-databind from 3.2.2 to 3.2.3 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/28 02:44:38 UTC, 1 replies.
- [PR] Bump cxf.jackson.version from 3.2.2 to 3.2.3 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/28 02:46:22 UTC, 2 replies.
- [PR] wsdl2java: escape WSDL documentation in javadoc and validate customiz… [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/09/28 07:28:32 UTC, 1 replies.
- [PR] Harden schema and stylesheet loading against resolver bypasses [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/09/28 09:35:36 UTC, 5 replies.
- [PR] wadl2java: escape WADL documentation in generated javadoc. [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/09/28 14:05:13 UTC, 1 replies.
- [PR] [CXF-9250] Stop HttpClientHTTPConduit from endlessly resending failed… [cxf] - posted by "ffang (via GitHub)" <gi...@apache.org> on 2026/09/28 15:28:14 UTC, 5 replies.
- [PR] Bump org.jruby:jruby from 10.1.1.0 to 10.1.2.0 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/29 02:46:42 UTC, 1 replies.
- [PR] Bump org.hibernate.validator:hibernate-validator from 9.1.3.Final to 9.1.4.Final [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/29 02:47:17 UTC, 1 replies.
- [PR] Updating XML Schema to 2.3.3 [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/09/29 09:00:21 UTC, 1 replies.
- [PR] Harden JWT issuer and audience validation [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/09/29 10:26:30 UTC, 5 replies.
- [PR] Updating Karaf to 4.4.12 [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/09/29 13:38:59 UTC, 1 replies.
- [PR] Don't have a test failure on one JDK cancel the other runs [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/09/29 13:41:00 UTC, 1 replies.
- [PR] CXF-9251_DelayedCachedOutputStreamCleaner_double_callback_out_logging [cxf] - posted by "vp340 (via GitHub)" <gi...@apache.org> on 2026/09/29 21:34:12 UTC, 4 replies.
- [PR] Bump ch.qos.logback:logback-classic from 1.6.3 to 1.6.4 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/30 02:43:25 UTC, 1 replies.
- [PR] Bump org.atmosphere:atmosphere-runtime from 3.1.0 to 4.0.71 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/30 02:44:38 UTC, 0 replies.
- [PR] Bump org.eclipse.persistence:org.eclipse.persistence.moxy from 5.0.1 to 5.0.2 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/30 02:45:22 UTC, 1 replies.
- [PR] Bump org.asynchttpclient:async-http-client from 3.0.13 to 3.0.14 [cxf] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/30 02:46:56 UTC, 1 replies.
- [PR] Updating WSS4J to 4.0.2 [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/09/30 09:29:41 UTC, 1 replies.
- [PR] Updating WSS4J to 2.4.4 [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/09/30 09:30:37 UTC, 1 replies.
- [PR] Store the whole Signature value for SignatureConfirmation [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/09/30 11:57:17 UTC, 1 replies.
- [PR] Adding a flag to require an audience in JwtAccessTokenValidator [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/09/30 13:40:42 UTC, 4 replies.
- [PR] CXF-9032 - Fix JWS verification with a "jwk" key store [cxf] - posted by "coheigea (via GitHub)" <gi...@apache.org> on 2026/09/30 16:33:54 UTC, 1 replies.
- [PR] Bump net.sourceforge.pmd:pmd-java from 7.27.0 to 7.28.0 [cxf-build-utils] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/30 22:12:52 UTC, 1 replies.