You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cxf.apache.org by re...@apache.org on 2024/10/31 21:54:14 UTC
(cxf) branch 4.0.x-fixes updated (2ec76bb8ac -> b4e2e0950f)
This is an automated email from the ASF dual-hosted git repository.
reta pushed a change to branch 4.0.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
from 2ec76bb8ac Updating Neethi to 3.2.1 (#2129)
new a097713231 Bump actions/setup-java from 4.4.0 to 4.5.0 (#2120)
new b6d0ee9176 Bump actions/checkout from 4.2.1 to 4.2.2 (#2123)
new ed10ada1f2 Bump actions/cache from 4.1.1 to 4.1.2 (#2122)
new 52527564ce Bump github/codeql-action from 3.26.13 to 3.27.0 (#2121)
new 30e8d17294 Bump org.apache.maven.plugins:maven-plugin-plugin from 3.15.0 to 3.15.1 (#2128)
new 65d2857ff3 Bump org.atmosphere:atmosphere-runtime from 3.0.11 to 3.0.13 (#2130)
new e2ebf8ac67 [CXF-9074] Fix problem with custom SSLContext in TLSClientParameters (#2131)
new b4e2e0950f Recording .gitmergeinfo Changes
The 8 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.github/workflows/codeql-analysis.yml | 10 +--
.github/workflows/pull-request-build.yml | 4 +-
.gitmergeinfo | 7 ++
parent/pom.xml | 2 +-
pom.xml | 2 +-
.../cxf/transport/http/HttpClientHTTPConduit.java | 1 +
.../systest/https/conduit/HTTPSConduitTest.java | 84 +++++++++++++++++++++-
7 files changed, 100 insertions(+), 10 deletions(-)
(cxf) 01/08: Bump actions/setup-java from 4.4.0 to 4.5.0 (#2120)
Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 4.0.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit a0977132310c45b7f5f4445b6065b5101f87c098
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Mon Oct 28 09:28:51 2024 -0400
Bump actions/setup-java from 4.4.0 to 4.5.0 (#2120)
Bumps [actions/setup-java](https://github.com/actions/setup-java) from 4.4.0 to 4.5.0.
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/b36c23c0d998641eff861008f374ee103c25ac73...8df1039502a15bceb9433410b1a100fbe190c53b)
---
updated-dependencies:
- dependency-name: actions/setup-java
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <su...@github.com>
Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
(cherry picked from commit 7b43956cbac47bcc55ce9e63dfe28f398c03aaab)
---
.github/workflows/codeql-analysis.yml | 2 +-
.github/workflows/pull-request-build.yml | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 9c28cc8285..b871e713d8 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -31,7 +31,7 @@ jobs:
uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
- name: Setup JDK 17
- uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # v4.4.0
+ uses: actions/setup-java@8df1039502a15bceb9433410b1a100fbe190c53b # v4.5.0
with:
distribution: 'temurin'
java-version: '17'
diff --git a/.github/workflows/pull-request-build.yml b/.github/workflows/pull-request-build.yml
index 2b384074b9..a32db48b16 100644
--- a/.github/workflows/pull-request-build.yml
+++ b/.github/workflows/pull-request-build.yml
@@ -20,7 +20,7 @@ jobs:
steps:
- uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v3.6.0
- name: Set up JDK 17
- uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # v4.4.0
+ uses: actions/setup-java@8df1039502a15bceb9433410b1a100fbe190c53b # v4.5.0
with:
java-version: '17'
distribution: 'temurin'
(cxf) 03/08: Bump actions/cache from 4.1.1 to 4.1.2 (#2122)
Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 4.0.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit ed10ada1f2030a6e480b012596d23211e0f58905
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Mon Oct 28 09:29:35 2024 -0400
Bump actions/cache from 4.1.1 to 4.1.2 (#2122)
Bumps [actions/cache](https://github.com/actions/cache) from 4.1.1 to 4.1.2.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/3624ceb22c1c5a301c8db4169662070a689d9ea8...6849a6489940f00c2f30c0fb92c6274307ccb58a)
---
updated-dependencies:
- dependency-name: actions/cache
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <su...@github.com>
Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
(cherry picked from commit 751a076643bc313628dc03b127c90b6c23863efc)
---
.github/workflows/codeql-analysis.yml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 5859f7d520..0fbfc97961 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -36,7 +36,7 @@ jobs:
distribution: 'temurin'
java-version: '17'
- name: Cache local Maven repository
- uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1
+ uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4.1.2
with:
path: ~/.m2/repository
key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
(cxf) 08/08: Recording .gitmergeinfo Changes
Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 4.0.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit b4e2e0950f8ceb54a718559a5a4787b2479403f1
Author: Andriy Redko <dr...@gmail.com>
AuthorDate: Thu Oct 31 17:47:05 2024 -0400
Recording .gitmergeinfo Changes
---
.gitmergeinfo | 7 +++++++
1 file changed, 7 insertions(+)
diff --git a/.gitmergeinfo b/.gitmergeinfo
index 7b06e7f769..edf907eb75 100644
--- a/.gitmergeinfo
+++ b/.gitmergeinfo
@@ -56,6 +56,8 @@ M 3896935619e1bbdc3ba8dce54755be646f53cab4
M 38f4171e832c87e30b95756bb923d8a0a0257e1f
M 3901f921ca83dd2ba9e191a01b63fe85fef1baaa
M 399a5e8bd55d1e98cf236058a6cff9b41560c64e
+M 39f98b2685b0088f9be5dbb55777e92e10ab7a35
+M 3a6c3e8667160a78ad094779e631deba46c0b8be
M 3bceb74bb469657b283995162aa7634070cd54d1
M 3e9348f48df34adc5600d2197edfc41f2c9dc981
M 3f8e439fc58d00e3fd342a243d6ad6a0c7b3c32e
@@ -98,6 +100,7 @@ M 67e46e86a9ab3ad96296e4665bdf60195ea29391
M 685bdc334d481b6020bcf6ef03f097c964a35632
M 6b44a9bc855ab85e98114f547c6cfed4bbd9bde3
M 6b62d3de04966cdc3f23096eed4f772afdcc560c
+M 6c569cfab2fb5665d73076fe8fa8b09a4ba4ae48
M 6c9b93929d03ffe7eb84f82f93e021ae3b05f64a
M 6ca9c89bda9ec21d1acfb3fe60344ff598e2525f
M 6cad549a732245d3caff16cc09cd8dfe6979c33a
@@ -122,8 +125,10 @@ M 81a3dc73acf4bb5ec52099ab65137662984dea85
M 81f2683bfe081b44514a57bb80f0b1ca4986742e
M 8412ed8a29be3d0ae1481d7344c7a296ea42494b
M 8588de147e96abfc5852645768a11bebde53a851
+M 85f31862370b15fd26fcfa0078813921afdbbd8c
M 88554e0c6e68d209e62bdf09178149e01ae18bd6
M 8ae1a24afe6a2e4896010d143422481e0229cc4a
+M 8bb01ba388f382a34cbb32e5e01942f7b3e8839b
M 8cc050b21a33c6c917eb50d0785286a7a43f76df
M 8cd915ddd181275c26f36c5f7fbea8392a3d1fd1
M 8d280d87deacdde9038d4828fd083706fac0d2f5
@@ -135,9 +140,11 @@ M 9240d8d1dc248f796b10f128b65281aa4645f2b4
M 94a851c1942e0348fd28a6f1923bdcc5992cd975
M 94d649af6f76058334250334dd2b85fa555824fb
M 96717fda5668ba3b3730fb8fbd09ab1bf6781bf6
+M 96788dca979ef5711efbfe4c96c513788bd89df5
M 97d3e0643545be2c363f4ca3b7f4723d7fdcd102
M 99998a4cd990b73f830c9e9036f2120f5af1dcc3
M 99c88879b905c0fab21a4901d7da1a090db56c1b
+M 9bef7a027c3ff17fed3568f9ef1e338c43132d36
M 9cdc5e53db22c0362ed63080fe82399adc06f2b2
M 9deffa6ddfa9df0ea8011a54dd16773c059fe5e9
M 9e499509931af040026c908444bacbea93bade6e
(cxf) 04/08: Bump github/codeql-action from 3.26.13 to 3.27.0 (#2121)
Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 4.0.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit 52527564ce037114803d1af091283e1ca3b178c5
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Mon Oct 28 09:29:50 2024 -0400
Bump github/codeql-action from 3.26.13 to 3.27.0 (#2121)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.26.13 to 3.27.0.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/f779452ac5af1c261dce0346a8f964149f49322b...662472033e021d55d94146f66f6058822b0b39fd)
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <su...@github.com>
Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
(cherry picked from commit 85f31862370b15fd26fcfa0078813921afdbbd8c)
# Conflicts:
# .github/workflows/scorecards.yml
---
.github/workflows/codeql-analysis.yml | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 0fbfc97961..96e01f1e8e 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -44,7 +44,7 @@ jobs:
# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
- uses: github/codeql-action/init@f779452ac5af1c261dce0346a8f964149f49322b # v3.26.13
+ uses: github/codeql-action/init@662472033e021d55d94146f66f6058822b0b39fd # v3.27.0
with:
languages: java
#config-file: ./.github/codeql/codeql-cxf-config.yml
@@ -72,4 +72,4 @@ jobs:
# make release
- name: Perform CodeQL Analysis
- uses: github/codeql-action/analyze@f779452ac5af1c261dce0346a8f964149f49322b # v3.26.13
+ uses: github/codeql-action/analyze@662472033e021d55d94146f66f6058822b0b39fd # v3.27.0
(cxf) 05/08: Bump org.apache.maven.plugins:maven-plugin-plugin from 3.15.0 to 3.15.1 (#2128)
Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 4.0.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit 30e8d17294426e0496138065c667c015e60f3384
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Wed Oct 30 09:14:45 2024 -0400
Bump org.apache.maven.plugins:maven-plugin-plugin from 3.15.0 to 3.15.1 (#2128)
Bumps [org.apache.maven.plugins:maven-plugin-plugin](https://github.com/apache/maven-plugin-tools) from 3.15.0 to 3.15.1.
- [Release notes](https://github.com/apache/maven-plugin-tools/releases)
- [Commits](https://github.com/apache/maven-plugin-tools/compare/maven-plugin-tools-3.15.0...maven-plugin-tools-3.15.1)
---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-plugin-plugin
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <su...@github.com>
Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
(cherry picked from commit 90b1151c6da824703f408cbcdb5a24ef303941e7)
---
pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/pom.xml b/pom.xml
index 4b45dc2fb5..1573ef8b9d 100644
--- a/pom.xml
+++ b/pom.xml
@@ -563,7 +563,7 @@
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-plugin-plugin</artifactId>
- <version>3.15.0</version>
+ <version>3.15.1</version>
</plugin>
<plugin>
<groupId>org.apache.maven.plugins</groupId>
(cxf) 07/08: [CXF-9074] Fix problem with custom SSLContext in TLSClientParameters (#2131)
Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 4.0.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit e2ebf8ac67d9928145f68f1e5479b8f23bf6d4aa
Author: Radek Kraus <63...@users.noreply.github.com>
AuthorDate: Thu Oct 31 21:01:02 2024 +0100
[CXF-9074] Fix problem with custom SSLContext in TLSClientParameters (#2131)
Fix problem in https communication, when Java HttpClient is used and
custom SSLContext is registered in TLSClientParameters.
(cherry picked from commit 85492df6c6c5ed18d0be3027482f84793f042efe)
---
.../cxf/transport/http/HttpClientHTTPConduit.java | 1 +
.../systest/https/conduit/HTTPSConduitTest.java | 84 +++++++++++++++++++++-
2 files changed, 84 insertions(+), 1 deletion(-)
diff --git a/rt/transports/http/src/main/java/org/apache/cxf/transport/http/HttpClientHTTPConduit.java b/rt/transports/http/src/main/java/org/apache/cxf/transport/http/HttpClientHTTPConduit.java
index d40582d576..a59bc3e6a1 100644
--- a/rt/transports/http/src/main/java/org/apache/cxf/transport/http/HttpClientHTTPConduit.java
+++ b/rt/transports/http/src/main/java/org/apache/cxf/transport/http/HttpClientHTTPConduit.java
@@ -383,6 +383,7 @@ public class HttpClientHTTPConduit extends URLConnectionHTTPConduit {
cb.sslContext(sslContext);
}
if (sslContext != null) {
+ cb.sslContext(sslContext);
String[] supportedCiphers = org.apache.cxf.configuration.jsse.SSLUtils
.getSupportedCipherSuites(sslContext);
String[] cipherSuites = org.apache.cxf.configuration.jsse.SSLUtils
diff --git a/systests/transports/src/test/java/org/apache/cxf/systest/https/conduit/HTTPSConduitTest.java b/systests/transports/src/test/java/org/apache/cxf/systest/https/conduit/HTTPSConduitTest.java
index bcb9616c47..ae69692507 100644
--- a/systests/transports/src/test/java/org/apache/cxf/systest/https/conduit/HTTPSConduitTest.java
+++ b/systests/transports/src/test/java/org/apache/cxf/systest/https/conduit/HTTPSConduitTest.java
@@ -22,19 +22,29 @@ package org.apache.cxf.systest.https.conduit;
import java.io.IOException;
import java.io.InputStream;
+import java.net.Socket;
import java.net.URI;
import java.net.URL;
import java.security.GeneralSecurityException;
import java.security.KeyStore;
+import java.security.SecureRandom;
+import java.security.cert.Certificate;
+import java.security.cert.X509Certificate;
import java.util.ArrayList;
import java.util.List;
import java.util.Map;
import java.util.TreeMap;
+import javax.net.ssl.HostnameVerifier;
import javax.net.ssl.KeyManager;
import javax.net.ssl.KeyManagerFactory;
+import javax.net.ssl.SSLContext;
+import javax.net.ssl.SSLEngine;
+import javax.net.ssl.SSLPeerUnverifiedException;
+import javax.net.ssl.SSLSession;
import javax.net.ssl.TrustManager;
import javax.net.ssl.TrustManagerFactory;
+import javax.net.ssl.X509ExtendedTrustManager;
import javax.xml.namespace.QName;
import org.apache.cxf.Bus;
@@ -361,6 +371,78 @@ public class HTTPSConduitTest extends AbstractBusClientServerTestBase {
*/
@Test
public void testHttpsBasicConnection() throws Exception {
+ // Use common/shared TLSClientParameters
+ testHttpsBasicConnection(tlsClientParameters);
+ }
+
+ @Test
+ public void testHttpsBasicConnectionCustomSslContext() throws Exception {
+ // Use custom SSLContext registered in TLSClientParameters
+ SSLContext ctx = SSLContext.getInstance("TLSv1.3");
+ try (InputStream keyStoreIs = ClassLoaderUtils.getResourceAsStream(
+ "keys/Morpit.jks", HTTPSConduitTest.class
+ )) {
+ KeyManager[] keyManagers = getKeyManagers(getKeyStore(
+ "JKS", keyStoreIs, "password"), "password"
+ );
+ // I need to disable CN verification (as certificate contains Bethal as CN),
+ // but I cannot use TLSClientParameters.setDisableCNCheck(), because in this case
+ // URLCONNECTION is always used (see HttpClientHTTPConduit.setupConnection())
+ // -> I must used own TrustManager without verification
+ TrustManager trustManager = new X509ExtendedTrustManager() {
+ @Override
+ public X509Certificate[] getAcceptedIssuers() {
+ return new X509Certificate[] {};
+ }
+ @Override
+ public void checkClientTrusted(X509Certificate[] chain, String authType) {
+ }
+ @Override
+ public void checkServerTrusted(X509Certificate[] chain, String authType) {
+ }
+ @Override
+ public void checkClientTrusted(X509Certificate[] chain, String authType, Socket socket) {
+ }
+ @Override
+ public void checkServerTrusted(X509Certificate[] chain, String authType, Socket socket) {
+ }
+ @Override
+ public void checkClientTrusted(X509Certificate[] chain, String authType, SSLEngine engine) {
+ }
+ @Override
+ public void checkServerTrusted(X509Certificate[] chain, String authType, SSLEngine engine) {
+ }
+ };
+ ctx.init(
+ keyManagers,
+ new TrustManager[] {trustManager},
+ SecureRandom.getInstance("SHA1PRNG")
+ );
+ }
+
+ // HostnameVerifier (disable host name verification)
+ class AllowAllHostnameVerifier implements HostnameVerifier {
+ @Override
+ public boolean verify(String host, SSLSession session) {
+ try {
+ Certificate[] certs = session.getPeerCertificates();
+ return certs != null && certs[0] instanceof X509Certificate;
+ } catch (SSLPeerUnverifiedException e) {
+ return false;
+ }
+ }
+ }
+
+ // TLSClientParameters (Custom SSLContext)
+ TLSClientParameters tlsClientParams = new TLSClientParameters();
+ tlsClientParams.setSslContext(ctx);
+ // TLSClientParameters (disable host name verification - now needed only when URLConnection is used)
+ tlsClientParams.setHostnameVerifier(new AllowAllHostnameVerifier());
+
+ testHttpsBasicConnection(tlsClientParams);
+ }
+
+ private void testHttpsBasicConnection(TLSClientParameters tlsClientParams) throws Exception {
startServer("Bethal");
URL wsdl = getClass().getResource("greeting.wsdl");
@@ -392,7 +474,7 @@ public class HTTPSConduitTest extends AbstractBusClientServerTestBase {
authPolicy.setPassword("password");
http.setClient(httpClientPolicy);
- http.setTlsClientParameters(tlsClientParameters);
+ http.setTlsClientParameters(tlsClientParams);
http.setAuthorization(authPolicy);
configureProxy(client);
(cxf) 02/08: Bump actions/checkout from 4.2.1 to 4.2.2 (#2123)
Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 4.0.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit b6d0ee917644382b212a4428930a27d554b58fae
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Mon Oct 28 09:29:20 2024 -0400
Bump actions/checkout from 4.2.1 to 4.2.2 (#2123)
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.2.1 to 4.2.2.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871...11bd71901bbe5b1630ceea73d27597364c9af683)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <su...@github.com>
Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
(cherry picked from commit 39f98b2685b0088f9be5dbb55777e92e10ab7a35)
# Conflicts:
# .github/workflows/scorecards.yml
---
.github/workflows/codeql-analysis.yml | 2 +-
.github/workflows/pull-request-build.yml | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index b871e713d8..5859f7d520 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -28,7 +28,7 @@ jobs:
steps:
- name: Checkout repository
- uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
+ uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
- name: Setup JDK 17
uses: actions/setup-java@8df1039502a15bceb9433410b1a100fbe190c53b # v4.5.0
diff --git a/.github/workflows/pull-request-build.yml b/.github/workflows/pull-request-build.yml
index a32db48b16..8a7d3ffc4c 100644
--- a/.github/workflows/pull-request-build.yml
+++ b/.github/workflows/pull-request-build.yml
@@ -18,7 +18,7 @@ jobs:
pull-requests: read
timeout-minutes: 130
steps:
- - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v3.6.0
+ - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v3.6.0
- name: Set up JDK 17
uses: actions/setup-java@8df1039502a15bceb9433410b1a100fbe190c53b # v4.5.0
with:
(cxf) 06/08: Bump org.atmosphere:atmosphere-runtime from 3.0.11 to 3.0.13 (#2130)
Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 4.0.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit 65d2857ff37135b85f418085d98425127fb334ee
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Thu Oct 31 07:58:07 2024 -0400
Bump org.atmosphere:atmosphere-runtime from 3.0.11 to 3.0.13 (#2130)
Bumps [org.atmosphere:atmosphere-runtime](https://github.com/Atmosphere/atmosphere) from 3.0.11 to 3.0.13.
- [Commits](https://github.com/Atmosphere/atmosphere/compare/atmosphere-project-3.0.11...atmosphere-project-3.0.13)
---
updated-dependencies:
- dependency-name: org.atmosphere:atmosphere-runtime
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <su...@github.com>
Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
(cherry picked from commit 6c569cfab2fb5665d73076fe8fa8b09a4ba4ae48)
---
parent/pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/parent/pom.xml b/parent/pom.xml
index 65dae00e17..9a83405ded 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -95,7 +95,7 @@
<cxf.aspectj.version>1.9.22.1</cxf.aspectj.version>
<cxf.assertj.version>3.26.3</cxf.assertj.version>
<cxf.atmosphere.version.range>[3.0, 4.0)</cxf.atmosphere.version.range>
- <cxf.atmosphere.version>3.0.11</cxf.atmosphere.version>
+ <cxf.atmosphere.version>3.0.13</cxf.atmosphere.version>
<cxf.bcprov.version>1.77</cxf.bcprov.version>
<cxf.brave.version>5.17.1</cxf.brave.version>
<cxf.cdi.api.version>3.0.0</cxf.cdi.api.version>