You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cxf.apache.org by re...@apache.org on 2023/02/13 13:26:09 UTC

[cxf] branch 3.6.x-fixes updated (ec2d67972c -> ca3c28f4c9)

This is an automated email from the ASF dual-hosted git repository.

reta pushed a change to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git


    from ec2d67972c Bump tycho-packaging-plugin from 0.26.0 to 2.7.5 (#1126) (#1130)
     new a948ca8934 Bump actions/cache from 3.2.4 to 3.2.5 (#1132)
     new b45d527de3 Bump github/codeql-action from 2.2.3 to 2.2.4 (#1131)
     new d32310f728 Bump cxf.netty.version from 4.1.87.Final to 4.1.88.Final (#1133)
     new ca3c28f4c9 Bump stax-utils from 20060502 to 20070216 (#1135)

The 4 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.


Summary of changes:
 .github/workflows/codeql-analysis.yml                          | 6 +++---
 distribution/src/main/release/samples/aegis_standalone/pom.xml | 2 +-
 distribution/src/main/release/samples/pom.xml                  | 2 +-
 parent/pom.xml                                                 | 2 +-
 4 files changed, 6 insertions(+), 6 deletions(-)


[cxf] 04/04: Bump stax-utils from 20060502 to 20070216 (#1135)

Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git

commit ca3c28f4c9ac1720cd8f5e079a7ba31a2aa9f6e4
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Mon Feb 13 07:39:38 2023 -0500

    Bump stax-utils from 20060502 to 20070216 (#1135)
    
    Bumps stax-utils from 20060502 to 20070216.
    
    ---
    updated-dependencies:
    - dependency-name: net.java.dev.stax-utils:stax-utils
      dependency-type: direct:production
      update-type: version-update:semver-major
    ...
    
    Signed-off-by: dependabot[bot] <su...@github.com>
    Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
---
 distribution/src/main/release/samples/aegis_standalone/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/distribution/src/main/release/samples/aegis_standalone/pom.xml b/distribution/src/main/release/samples/aegis_standalone/pom.xml
index 1488593d3b..d9ecd26982 100644
--- a/distribution/src/main/release/samples/aegis_standalone/pom.xml
+++ b/distribution/src/main/release/samples/aegis_standalone/pom.xml
@@ -93,7 +93,7 @@
         <dependency>
             <groupId>net.java.dev.stax-utils</groupId>
             <artifactId>stax-utils</artifactId>
-            <version>20060502</version>
+            <version>20070216</version>
             <exclusions>
                 <exclusion>
                     <groupId>com.bea.xml</groupId>


[cxf] 02/04: Bump github/codeql-action from 2.2.3 to 2.2.4 (#1131)

Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git

commit b45d527de329c643b7fc814091a642f10cb1ea92
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Mon Feb 13 07:59:26 2023 +0000

    Bump github/codeql-action from 2.2.3 to 2.2.4 (#1131)
    
    Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.2.3 to 2.2.4.
    - [Release notes](https://github.com/github/codeql-action/releases)
    - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
    - [Commits](https://github.com/github/codeql-action/compare/8775e868027fa230df8586bdf502bbd9b618a477...17573ee1cc1b9d061760f3a006fc4aac4f944fd5)
    
    ---
    updated-dependencies:
    - dependency-name: github/codeql-action
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <su...@github.com>
    Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
---
 .github/workflows/codeql-analysis.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 469cce1633..36f8f06760 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -56,7 +56,7 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@8775e868027fa230df8586bdf502bbd9b618a477 # v2.2.3
+      uses: github/codeql-action/init@17573ee1cc1b9d061760f3a006fc4aac4f944fd5 # v2.2.4
       with:
         languages: ${{ matrix.language }}
         #config-file: ./.github/codeql/codeql-cxf-config.yml
@@ -84,4 +84,4 @@ jobs:
     #   make release
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@8775e868027fa230df8586bdf502bbd9b618a477 # v2.2.3
+      uses: github/codeql-action/analyze@17573ee1cc1b9d061760f3a006fc4aac4f944fd5 # v2.2.4


[cxf] 03/04: Bump cxf.netty.version from 4.1.87.Final to 4.1.88.Final (#1133)

Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git

commit d32310f72819e210f41e3e0fdcddccf0f436ca92
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Mon Feb 13 07:38:46 2023 -0500

    Bump cxf.netty.version from 4.1.87.Final to 4.1.88.Final (#1133)
    
    Bumps `cxf.netty.version` from 4.1.87.Final to 4.1.88.Final.
    
    Updates `netty-codec-http` from 4.1.87.Final to 4.1.88.Final
    - [Release notes](https://github.com/netty/netty/releases)
    - [Commits](https://github.com/netty/netty/compare/netty-4.1.87.Final...netty-4.1.88.Final)
    
    Updates `netty-codec-http2` from 4.1.87.Final to 4.1.88.Final
    - [Release notes](https://github.com/netty/netty/releases)
    - [Commits](https://github.com/netty/netty/compare/netty-4.1.87.Final...netty-4.1.88.Final)
    
    Updates `netty-codec-socks` from 4.1.87.Final to 4.1.88.Final
    - [Release notes](https://github.com/netty/netty/releases)
    - [Commits](https://github.com/netty/netty/compare/netty-4.1.87.Final...netty-4.1.88.Final)
    
    Updates `netty-handler-proxy` from 4.1.87.Final to 4.1.88.Final
    - [Release notes](https://github.com/netty/netty/releases)
    - [Commits](https://github.com/netty/netty/compare/netty-4.1.87.Final...netty-4.1.88.Final)
    
    ---
    updated-dependencies:
    - dependency-name: io.netty:netty-codec-http
      dependency-type: direct:production
      update-type: version-update:semver-patch
    - dependency-name: io.netty:netty-codec-http2
      dependency-type: direct:development
      update-type: version-update:semver-patch
    - dependency-name: io.netty:netty-codec-socks
      dependency-type: direct:development
      update-type: version-update:semver-patch
    - dependency-name: io.netty:netty-handler-proxy
      dependency-type: direct:development
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <su...@github.com>
    Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
---
 distribution/src/main/release/samples/pom.xml | 2 +-
 parent/pom.xml                                | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/distribution/src/main/release/samples/pom.xml b/distribution/src/main/release/samples/pom.xml
index c4db77adba..f4f63c551e 100644
--- a/distribution/src/main/release/samples/pom.xml
+++ b/distribution/src/main/release/samples/pom.xml
@@ -33,7 +33,7 @@
         <spring.boot.version>2.7.8</spring.boot.version>
         <spring.cloud.eureka.version>3.1.4</spring.cloud.eureka.version>
         <cxf.jetty10.version>10.0.13</cxf.jetty10.version>
-        <cxf.netty.version>4.1.87.Final</cxf.netty.version>
+        <cxf.netty.version>4.1.88.Final</cxf.netty.version>
         <cxf.httpcomponents.client.version>4.5.13</cxf.httpcomponents.client.version>
         <cxf.swagger.ui.version>4.15.5</cxf.swagger.ui.version>
         <cxf.tika.version>2.7.0</cxf.tika.version>
diff --git a/parent/pom.xml b/parent/pom.xml
index 25cc1ae49a..66aa9e5d54 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -177,7 +177,7 @@
         <cxf.msv.version>2022.7</cxf.msv.version>
         <cxf.neethi.version>3.2.0</cxf.neethi.version>
         <cxf.netty.version.range>[4,5)</cxf.netty.version.range>
-        <cxf.netty.version>4.1.87.Final</cxf.netty.version>
+        <cxf.netty.version>4.1.88.Final</cxf.netty.version>
         <cxf.netty.tcnative.version>2.0.46.Final</cxf.netty.tcnative.version>
         <cxf.olingo.version>2.0.12</cxf.olingo.version>
         <cxf.openjpa.version>3.2.2</cxf.openjpa.version>


[cxf] 01/04: Bump actions/cache from 3.2.4 to 3.2.5 (#1132)

Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git

commit a948ca8934c4e731ad6a9da9c7d0233101778f5a
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Mon Feb 13 07:59:12 2023 +0000

    Bump actions/cache from 3.2.4 to 3.2.5 (#1132)
    
    Bumps [actions/cache](https://github.com/actions/cache) from 3.2.4 to 3.2.5.
    - [Release notes](https://github.com/actions/cache/releases)
    - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
    - [Commits](https://github.com/actions/cache/compare/627f0f41f6904a5b1efbaed9f96d9eb58e92e920...6998d139ddd3e68c71e9e398d8e40b71a2f39812)
    
    ---
    updated-dependencies:
    - dependency-name: actions/cache
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <su...@github.com>
    Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
---
 .github/workflows/codeql-analysis.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 43624b826b..469cce1633 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -43,7 +43,7 @@ jobs:
         # a pull request then we can checkout the head.
         fetch-depth: 2
     - name: Cache local Maven repository
-      uses: actions/cache@v3
+      uses: actions/cache@6998d139ddd3e68c71e9e398d8e40b71a2f39812 # v3.2.5
       with:
         path: ~/.m2/repository
         key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}