(ofbiz-framework) branch dependabot/github_actions/docker/login-action-4.1.0 updated (b91cdab26e -> 6e3acfddda)

[gi...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

github-bot pushed a change to branch dependabot/github_actions/docker/login-action-4.1.0
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git


 discard b91cdab26e Bump docker/login-action from 4.0.0 to 4.1.0
     add 3dd9014821 Fixed: Replace RandomStringUtils with custom salt generation in HashCrypt for enhanced security
     add 94406db2c1 Fixed: Derive servlet path from trusted _CONTROL_PATH_ request attribute to enhance security against user-influenced input
     add d387aea387 Fixed: Validate last view name input in RequestHandler to enhance security and prevent user manipulation
     add f569b5192b Fixed: Rename README for GitHub CI/CD configuration (#1071)
     add 5c627e288b Fixed: Enhance string escaping in MacroScreenRenderer
     add 05fbeb5c2c Improved: Move file path validation to SecurityUtil
     add d06b61393f Fixed: Implement file path validation using SecurityUtil in CoreEvents to enhance security
     add 93b08e85d3 Fixed: Integrate SecurityUtil to validate file paths in CommonEvents for enhanced security
     add 95b4898a16 Fixed: Remove legacy HttpEngine (disabled 5 years ago for security reasons)
     add da00c04638 Fixed: Cast parse result to int in EntityDataLoader
     add 81f802f729 Fixed: Cast parse result to int in EntityXmlAssertTest
     add a49c02322f Implemented: Convert README from AsciiDoc to Markdown format (#1079)
     add 5d40cb21fe Fixed: [SECURITY]  Several CVEs in Apache Tomcat (OFBIZ-13381)
     add b32ee11ed9 Add ASF allowlist check workflow
     add d40f60865f Rename workflow files from .yaml to .yml for consistency and compatibility with the new asf-allowlist-check.yml workflow
     add 6e3acfddda Bump docker/login-action from 4.0.0 to 4.1.0

This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version.  This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:

 * -- * -- B -- O -- O -- O   (b91cdab26e)
            \
             N -- N -- N   refs/heads/dependabot/github_actions/docker/login-action-4.1.0 (6e3acfddda)

You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.

Any revisions marked "omit" are not gone; other references still
refer to them.  Any revisions marked "discard" are gone forever.

No new revisions were added by this update.

Summary of changes:
 .github/{README.md => README-CI-CD.md}             |   8 +-
 .../workflows/asf-allowlist-check.yml              |  37 +-
 .../{docker-image.yaml => docker-image.yml}        |   0
 .github/workflows/{gradle.yaml => gradle.yml}      |   0
 README.adoc => README.md                           | 607 +++++++++------------
 .../ofbiz/content/data/DataResourceWorker.java     |  79 +--
 dependencies.gradle                                |   4 +-
 .../org/apache/ofbiz/base/crypto/HashCrypt.java    |   9 +-
 .../apache/ofbiz/base/util/FileUtilTests.groovy    |  10 +-
 .../java/org/apache/ofbiz/common/CommonEvents.java |   5 +-
 .../apache/ofbiz/entity/util/EntityDataLoader.java |   2 +-
 .../org/apache/ofbiz/security/SecurityUtil.java    |  74 +++
 framework/service/config/serviceengine.xml         |   1 -
 .../apache/ofbiz/service/engine/HttpEngine.java    | 210 -------
 .../ofbiz/testtools/EntityXmlAssertTest.java       |   2 +-
 .../ofbiz/webapp/control/RequestHandler.java       |  13 +-
 .../org/apache/ofbiz/webapp/event/CoreEvents.java  |   8 +
 .../webapp/webtools/WEB-INF/controller.xml         |   8 +-
 .../widget/renderer/macro/MacroFormRenderer.java   |   7 +-
 .../widget/renderer/macro/MacroScreenRenderer.java |   2 +-
 20 files changed, 397 insertions(+), 689 deletions(-)
 rename .github/{README.md => README-CI-CD.md} (85%)
 copy framework/common/config/qrcode.properties => .github/workflows/asf-allowlist-check.yml (53%)
 rename .github/workflows/{docker-image.yaml => docker-image.yml} (100%)
 rename .github/workflows/{gradle.yaml => gradle.yml} (100%)
 rename README.adoc => README.md (52%)
 delete mode 100644 framework/service/src/main/java/org/apache/ofbiz/service/engine/HttpEngine.java