You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@syncope.apache.org by il...@apache.org on 2026/09/22 10:35:15 UTC
(syncope) branch 4_0_X updated (3226072826 -> b40a41387b)
This is an automated email from the ASF dual-hosted git repository.
ilgrosso pushed a change to branch 4_0_X
in repository https://gitbox.apache.org/repos/asf/syncope.git
from 3226072826 Bump org.webjars:swagger-ui from 5.32.14 to 5.32.15
new cacdb049ea Upgrading Groovy
new 2f77bd4bea Bump org.codehaus.cargo:cargo-maven3-plugin from 1.10.28 to 1.10.29
new af866d3e5e Bump github/codeql-action from 4.38.0 to 4.38.1
new d4cf5a7424 Bump com.nimbusds:nimbus-jose-jwt from 10.9.1 to 10.10
new 6f18f3349b Upgrading Jakarta Faces
new b40a41387b Upgrading Wildfly
The 6 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.github/workflows/codeql-analysis.yml | 4 ++--
.github/workflows/crosschecks.yml | 2 +-
.../syncope/core/spring/security/DefaultCredentialChecker.java | 8 ++++----
fit/core-reference/pom.xml | 2 +-
fit/core-reference/src/main/resources/core-wildfly.properties | 2 +-
pom.xml | 10 +++++-----
6 files changed, 14 insertions(+), 14 deletions(-)
(syncope) 04/06: Bump com.nimbusds:nimbus-jose-jwt from 10.9.1 to 10.10
Posted by il...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
ilgrosso pushed a commit to branch 4_0_X
in repository https://gitbox.apache.org/repos/asf/syncope.git
commit d4cf5a7424e2fda4f191711741e7c6fb36232735
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Mon Sep 21 22:39:22 2026 +0000
Bump com.nimbusds:nimbus-jose-jwt from 10.9.1 to 10.10
Bumps [com.nimbusds:nimbus-jose-jwt](https://bitbucket.org/connect2id/nimbus-jose-jwt) from 10.9.1 to 10.10.
- [Changelog](https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt)
- [Commits](https://bitbucket.org/connect2id/nimbus-jose-jwt/branches/compare/10.10..10.9.1)
---
updated-dependencies:
- dependency-name: com.nimbusds:nimbus-jose-jwt
dependency-version: '10.10'
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <su...@github.com>
---
pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/pom.xml b/pom.xml
index f0bc2d755f..c91b402d59 100644
--- a/pom.xml
+++ b/pom.xml
@@ -433,7 +433,7 @@ under the License.
<cxf.version>4.1.8</cxf.version>
<bouncycastle.version>1.85</bouncycastle.version>
- <nimbus-jose-jwt.version>10.9.1</nimbus-jose-jwt.version>
+ <nimbus-jose-jwt.version>10.10</nimbus-jose-jwt.version>
<spring-framework.version>6.2.19</spring-framework.version>
<spring-boot.version>3.4.13</spring-boot.version>
(syncope) 01/06: Upgrading Groovy
Posted by il...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
ilgrosso pushed a commit to branch 4_0_X
in repository https://gitbox.apache.org/repos/asf/syncope.git
commit cacdb049eaa6a75538345a776ebb667af573d7c5
Author: Francesco Chicchiriccò <il...@apache.org>
AuthorDate: Tue Sep 22 10:45:36 2026 +0200
Upgrading Groovy
---
.github/workflows/crosschecks.yml | 2 +-
.../syncope/core/spring/security/DefaultCredentialChecker.java | 8 ++++----
pom.xml | 2 +-
3 files changed, 6 insertions(+), 6 deletions(-)
diff --git a/.github/workflows/crosschecks.yml b/.github/workflows/crosschecks.yml
index bc8eb436c7..825aed2fc8 100644
--- a/.github/workflows/crosschecks.yml
+++ b/.github/workflows/crosschecks.yml
@@ -31,7 +31,7 @@ jobs:
fail-fast: false
matrix:
language: ['java']
- java: [ '21', '27-ea' ]
+ java: [ '21', '28-ea' ]
os: [ubuntu-latest, windows-latest, macos-latest]
steps:
diff --git a/core/spring/src/main/java/org/apache/syncope/core/spring/security/DefaultCredentialChecker.java b/core/spring/src/main/java/org/apache/syncope/core/spring/security/DefaultCredentialChecker.java
index b6d1c7ce2e..b61a7e188d 100644
--- a/core/spring/src/main/java/org/apache/syncope/core/spring/security/DefaultCredentialChecker.java
+++ b/core/spring/src/main/java/org/apache/syncope/core/spring/security/DefaultCredentialChecker.java
@@ -32,19 +32,19 @@ public class DefaultCredentialChecker {
private static final Logger LOG = LoggerFactory.getLogger(DefaultCredentialChecker.class);
private static final String DEFAULT_AES_KEY_ERROR_MESSAGE =
- "⚠ The default AES key property is being used. "
+ "⚠️ WARNING: The default AES key property is being used. "
+ "This must be changed to avoid a security breach!";
private static final String DEFAULT_JWS_KEY_ERROR_MESSAGE =
- "⚠ The default JWKS key property is being used. "
+ "⚠️ WARNING: The default JWKS key property is being used. "
+ "This must be changed to avoid a security breach!";
private static final String DEFAULT_ADMIN_PASSWORD_ERROR_MESSAGE =
- "⚠ The default adminPassword property is being used. "
+ "⚠️ WARNING: The default adminPassword property is being used. "
+ "This must be changed to avoid a security breach!";
private static final String DEFAULT_ANON_KEY_ERROR_MESSAGE =
- "⚠ The default anonymousKey property is being used. "
+ "⚠️ WARNING: The default anonymousKey property is being used. "
+ "This must be changed to avoid a security breach!";
private final boolean defaultAesKeyInUse;
diff --git a/pom.xml b/pom.xml
index 9d657826ac..a74ceed443 100644
--- a/pom.xml
+++ b/pom.xml
@@ -443,7 +443,7 @@ under the License.
<jasypt.version>1.9.3</jasypt.version>
- <groovy.version>5.1.2</groovy.version>
+ <groovy.version>5.1.3</groovy.version>
<flowable.version>7.2.0</flowable.version>
<flowable-old.version>6.8.1</flowable-old.version>
(syncope) 03/06: Bump github/codeql-action from 4.38.0 to 4.38.1
Posted by il...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
ilgrosso pushed a commit to branch 4_0_X
in repository https://gitbox.apache.org/repos/asf/syncope.git
commit af866d3e5e528d8eb0e5e3f81fabf3ca3d044ad5
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Mon Sep 21 22:33:51 2026 +0000
Bump github/codeql-action from 4.38.0 to 4.38.1
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.38.0 to 4.38.1.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v4.38.0...v4.38.1)
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.38.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <su...@github.com>
---
.github/workflows/codeql-analysis.yml | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index ca23f3530a..9fecc9e148 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -55,7 +55,7 @@ jobs:
maven-version: 3.9.6
# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
- uses: github/codeql-action/init@v4.38.0
+ uses: github/codeql-action/init@v4.38.1
with:
languages: ${{ matrix.language }}
# If you wish to specify custom queries, you can do so here or in a config file.
@@ -80,4 +80,4 @@ jobs:
mvn -U -T 1C -PskipTests,all
- name: Perform CodeQL Analysis
- uses: github/codeql-action/analyze@v4.38.0
+ uses: github/codeql-action/analyze@v4.38.1
(syncope) 06/06: Upgrading Wildfly
Posted by il...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
ilgrosso pushed a commit to branch 4_0_X
in repository https://gitbox.apache.org/repos/asf/syncope.git
commit b40a41387ba096707fd637db31fc0f689754d350
Author: Francesco Chicchiriccò <il...@apache.org>
AuthorDate: Tue Sep 22 10:49:18 2026 +0200
Upgrading Wildfly
---
fit/core-reference/pom.xml | 2 +-
fit/core-reference/src/main/resources/core-wildfly.properties | 2 +-
pom.xml | 2 +-
3 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/fit/core-reference/pom.xml b/fit/core-reference/pom.xml
index 88fd435984..1cb91b4378 100644
--- a/fit/core-reference/pom.xml
+++ b/fit/core-reference/pom.xml
@@ -1391,7 +1391,7 @@ under the License.
<inherited>true</inherited>
<configuration>
<container>
- <containerId>wildfly40x</containerId>
+ <containerId>wildfly41x</containerId>
<zipUrlInstaller>
<url>https://github.com/wildfly/wildfly/releases/download/${wildfly.version}/wildfly-${wildfly.version}.zip</url>
<downloadDir>${settings.localRepository}/org/codehaus/cargo/cargo-container-archives</downloadDir>
diff --git a/fit/core-reference/src/main/resources/core-wildfly.properties b/fit/core-reference/src/main/resources/core-wildfly.properties
index 3e227ff177..27d492f6fe 100644
--- a/fit/core-reference/src/main/resources/core-wildfly.properties
+++ b/fit/core-reference/src/main/resources/core-wildfly.properties
@@ -14,7 +14,7 @@
# KIND, either express or implied. See the License for the
# specific language governing permissions and limitations
# under the License.
-persistence.metaDataFactory=jpa(URLs=vfs:${project.build.directory}/cargo/configurations/wildfly40x/deployments/syncope.war/WEB-INF/lib/syncope-core-persistence-jpa-${syncope.version}.jar; vfs:${project.build.directory}/cargo/configurations/wildfly40x/deployments/syncope.war/WEB-INF/lib/syncope-core-self-keymaster-starter-${syncope.version}.jar, Resources=##orm##)
+persistence.metaDataFactory=jpa(URLs=vfs:${project.build.directory}/cargo/configurations/wildfly41x/deployments/syncope.war/WEB-INF/lib/syncope-core-persistence-jpa-${syncope.version}.jar; vfs:${project.build.directory}/cargo/configurations/wildfly41x/deployments/syncope.war/WEB-INF/lib/syncope-core-self-keymaster-starter-${syncope.version}.jar, Resources=##orm##)
javadocPaths=/WEB-INF/lib/syncope-common-idrepo-rest-api-${syncope.version}-javadoc.jar,\
/WEB-INF/lib/syncope-common-idm-rest-api-${syncope.version}-javadoc.jar,\
diff --git a/pom.xml b/pom.xml
index e4b4023866..947c055fc4 100644
--- a/pom.xml
+++ b/pom.xml
@@ -528,7 +528,7 @@ under the License.
<cargo.deployable.ping.timeout>60000</cargo.deployable.ping.timeout>
<tomcat.version>10.1.60</tomcat.version>
- <wildfly.version>40.0.1.Final</wildfly.version>
+ <wildfly.version>41.0.1.Final</wildfly.version>
<payara.version>6.2025.11</payara.version>
<jakarta.faces.version>4.1.17</jakarta.faces.version>
(syncope) 02/06: Bump org.codehaus.cargo:cargo-maven3-plugin from 1.10.28 to 1.10.29
Posted by il...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
ilgrosso pushed a commit to branch 4_0_X
in repository https://gitbox.apache.org/repos/asf/syncope.git
commit 2f77bd4bea2f2f05e33e6bc8256e9d6520e47e7f
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Mon Sep 21 22:33:49 2026 +0000
Bump org.codehaus.cargo:cargo-maven3-plugin from 1.10.28 to 1.10.29
Bumps org.codehaus.cargo:cargo-maven3-plugin from 1.10.28 to 1.10.29.
---
updated-dependencies:
- dependency-name: org.codehaus.cargo:cargo-maven3-plugin
dependency-version: 1.10.29
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <su...@github.com>
---
pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/pom.xml b/pom.xml
index a74ceed443..f0bc2d755f 100644
--- a/pom.xml
+++ b/pom.xml
@@ -1787,7 +1787,7 @@ under the License.
<plugin>
<groupId>org.codehaus.cargo</groupId>
<artifactId>cargo-maven3-plugin</artifactId>
- <version>1.10.28</version>
+ <version>1.10.29</version>
<configuration>
<container>
<log>${project.build.directory}/log/cargo.log</log>
(syncope) 05/06: Upgrading Jakarta Faces
Posted by il...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
ilgrosso pushed a commit to branch 4_0_X
in repository https://gitbox.apache.org/repos/asf/syncope.git
commit 6f18f3349b9ca98a9337a9c2b5355b7254d7c9ce
Author: Francesco Chicchiriccò <il...@apache.org>
AuthorDate: Tue Sep 22 10:47:55 2026 +0200
Upgrading Jakarta Faces
---
pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/pom.xml b/pom.xml
index c91b402d59..e4b4023866 100644
--- a/pom.xml
+++ b/pom.xml
@@ -530,7 +530,7 @@ under the License.
<tomcat.version>10.1.60</tomcat.version>
<wildfly.version>40.0.1.Final</wildfly.version>
<payara.version>6.2025.11</payara.version>
- <jakarta.faces.version>4.1.16</jakarta.faces.version>
+ <jakarta.faces.version>4.1.17</jakarta.faces.version>
<docker.postgresql.version>17-alpine</docker.postgresql.version>
<docker.mysql.version>9</docker.mysql.version>