You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cxf.apache.org by re...@apache.org on 2026/09/01 13:11:50 UTC
(cxf) branch 4.1.x-fixes updated (16a25d1d427 -> baed598cf36)
This is an automated email from the ASF dual-hosted git repository.
reta pushed a change to branch 4.1.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
from 16a25d1d427 Require in OidcRpAuthenticationFilter that IdTokens have an expiry (#3424)
new 4d6c46b01dd Bump org.cyclonedx:cyclonedx-maven-plugin from 2.9.2 to 2.9.3 (#3402)
new 61de3a6ed63 Bump org.graalvm.buildtools:native-maven-plugin from 1.1.5 to 1.1.10 (#3403)
new 0103142ad13 Bump ch.qos.logback:logback-classic from 1.6.1 to 1.6.3 (#3406)
new 776b35346e8 Bump cxf.activemq.artemis.version from 2.55.0 to 2.56.0 (#3407)
new 380d56cbbe0 Update Swagger Core to 2.2.54
new c3c57457a58 Bump actions/setup-java from 5.7.0 to 6.0.0 (#3416)
new 1e1b10fc628 Bump org.webjars:swagger-ui from 5.32.11 to 5.32.14 (#3417)
new c43e5f910ff Bump github/codeql-action/init from 4.37.7 to 4.37.9 (#3415)
new 3af6a3d7e4e Bump org.jruby:jruby from 10.1.0.0 to 10.1.1.0 (#3428)
new c61d83a4cf5 Recording .gitmergeinfo Changes
new baed598cf36 Recording .gitmergeinfo Changes
The 11 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.github/workflows/codeql-analysis.yml | 6 +++---
.github/workflows/pull-request-build.yml | 2 +-
.gitmergeinfo | 15 +++++++++++++++
.../src/main/release/samples/jax_rs/graalvm_basic/pom.xml | 4 ++--
.../src/main/release/samples/jaxws_graalvm/pom.xml | 4 ++--
.../release/samples/jaxws_graalvm_dynamic/client/pom.xml | 2 +-
.../release/samples/jaxws_graalvm_dynamic/server/pom.xml | 2 +-
distribution/src/main/release/samples/pom.xml | 2 +-
.../src/main/release/samples/ruby_spring_support/pom.xml | 2 +-
parent/pom.xml | 8 ++++----
pom.xml | 2 +-
11 files changed, 32 insertions(+), 17 deletions(-)
(cxf) 07/11: Bump org.webjars:swagger-ui from 5.32.11 to 5.32.14 (#3417)
Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 4.1.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit 1e1b10fc6287b278a1878a69ef11f5fd9cbe6c15
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Mon Aug 31 06:19:05 2026 -0400
Bump org.webjars:swagger-ui from 5.32.11 to 5.32.14 (#3417)
Bumps [org.webjars:swagger-ui](https://github.com/swagger-api/swagger-ui) from 5.32.11 to 5.32.14.
- [Release notes](https://github.com/swagger-api/swagger-ui/releases)
- [Commits](https://github.com/swagger-api/swagger-ui/compare/v5.32.11...v5.32.14)
---
updated-dependencies:
- dependency-name: org.webjars:swagger-ui
dependency-version: 5.32.14
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <su...@github.com>
Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
(cherry picked from commit 092d2cc7a0babf5a7d26167c4878e0cc3cfbbf14)
---
distribution/src/main/release/samples/pom.xml | 2 +-
parent/pom.xml | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/distribution/src/main/release/samples/pom.xml b/distribution/src/main/release/samples/pom.xml
index b2990a2fbb6..df839ddf82a 100644
--- a/distribution/src/main/release/samples/pom.xml
+++ b/distribution/src/main/release/samples/pom.xml
@@ -36,7 +36,7 @@
<cxf.jetty12.version>12.0.38</cxf.jetty12.version>
<cxf.netty.version>4.1.137.Final</cxf.netty.version>
<cxf.httpcomponents.client.version>4.5.14</cxf.httpcomponents.client.version>
- <cxf.swagger.ui.version>5.32.11</cxf.swagger.ui.version>
+ <cxf.swagger.ui.version>5.32.14</cxf.swagger.ui.version>
<cxf.tika.version>3.3.2</cxf.tika.version>
<cxf.tomcat.version>10.1.57</cxf.tomcat.version>
<cxf.jboss.weld.version>5.1.2.Final</cxf.jboss.weld.version>
diff --git a/parent/pom.xml b/parent/pom.xml
index 6c5a68a627c..149ee0f3322 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -219,7 +219,7 @@
<cxf.spring.security.version>6.4.13</cxf.spring.security.version>
<cxf.spring.version>6.2.19</cxf.spring.version>
<cxf.stax-ex.version>1.8.3</cxf.stax-ex.version>
- <cxf.swagger.ui.version>5.32.11</cxf.swagger.ui.version>
+ <cxf.swagger.ui.version>5.32.14</cxf.swagger.ui.version>
<cxf.swagger.v3.version>2.2.54</cxf.swagger.v3.version>
<cxf.tika.version>3.3.2</cxf.tika.version>
<cxf.tomcat.version>10.1.57</cxf.tomcat.version>
(cxf) 01/11: Bump org.cyclonedx:cyclonedx-maven-plugin from 2.9.2 to 2.9.3 (#3402)
Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 4.1.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit 4d6c46b01dd9f0ad91311c57cde2ecf89f103286
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Thu Aug 27 07:18:40 2026 -0400
Bump org.cyclonedx:cyclonedx-maven-plugin from 2.9.2 to 2.9.3 (#3402)
Bumps [org.cyclonedx:cyclonedx-maven-plugin](https://github.com/CycloneDX/cyclonedx-maven-plugin) from 2.9.2 to 2.9.3.
- [Release notes](https://github.com/CycloneDX/cyclonedx-maven-plugin/releases)
- [Commits](https://github.com/CycloneDX/cyclonedx-maven-plugin/compare/cyclonedx-maven-plugin-2.9.2...cyclonedx-maven-plugin-2.9.3)
---
updated-dependencies:
- dependency-name: org.cyclonedx:cyclonedx-maven-plugin
dependency-version: 2.9.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <su...@github.com>
Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
(cherry picked from commit 681940738d38eb4339dba963436fc5577ec4fe5c)
---
pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/pom.xml b/pom.xml
index d1f3f5d4925..9e32b4d409c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -718,7 +718,7 @@
<plugin>
<groupId>org.cyclonedx</groupId>
<artifactId>cyclonedx-maven-plugin</artifactId>
- <version>2.9.2</version>
+ <version>2.9.3</version>
<executions>
<execution>
<id>make-bom</id>
(cxf) 05/11: Update Swagger Core to 2.2.54
Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 4.1.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit 380d56cbbe0f537ca29a70c57dfa0d72eb8edb5e
Author: Andriy Redko <dr...@gmail.com>
AuthorDate: Fri Aug 28 17:17:28 2026 -0400
Update Swagger Core to 2.2.54
(cherry picked from commit db8b8891c323b5b518ef2103e608b460e6cf15fc)
---
parent/pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/parent/pom.xml b/parent/pom.xml
index 2bdbda54750..6c5a68a627c 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -220,7 +220,7 @@
<cxf.spring.version>6.2.19</cxf.spring.version>
<cxf.stax-ex.version>1.8.3</cxf.stax-ex.version>
<cxf.swagger.ui.version>5.32.11</cxf.swagger.ui.version>
- <cxf.swagger.v3.version>2.2.53</cxf.swagger.v3.version>
+ <cxf.swagger.v3.version>2.2.54</cxf.swagger.v3.version>
<cxf.tika.version>3.3.2</cxf.tika.version>
<cxf.tomcat.version>10.1.57</cxf.tomcat.version>
<cxf.tomitribe.http.signature.version>1.8</cxf.tomitribe.http.signature.version>
(cxf) 03/11: Bump ch.qos.logback:logback-classic from 1.6.1 to 1.6.3 (#3406)
Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 4.1.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit 0103142ad13f6d22013f747734f0c7fc376aee50
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Fri Aug 28 13:24:06 2026 -0400
Bump ch.qos.logback:logback-classic from 1.6.1 to 1.6.3 (#3406)
Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) from 1.6.1 to 1.6.3.
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](https://github.com/qos-ch/logback/compare/v_1.6.1...v_1.6.3)
---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-classic
dependency-version: 1.6.3
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <su...@github.com>
Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
(cherry picked from commit a837332ed37cae92e821ce17d7d95f24e55fd7a2)
# Conflicts:
# parent/pom.xml
---
parent/pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/parent/pom.xml b/parent/pom.xml
index aef6b9a02ec..acbcf134aa1 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -175,7 +175,7 @@
<cxf.kerby.version>2.1.2</cxf.kerby.version>
<cxf.ldapsdk.version>7.0.5</cxf.ldapsdk.version>
<cxf.littleproxy.version>2.8.0</cxf.littleproxy.version>
- <cxf.logback.classic.version>1.6.1</cxf.logback.classic.version>
+ <cxf.logback.classic.version>1.6.3</cxf.logback.classic.version>
<cxf.lucene.version>9.12.3</cxf.lucene.version>
<cxf.maven.core.version>3.9.16</cxf.maven.core.version>
<cxf.micrometer.version>1.14.14</cxf.micrometer.version>
(cxf) 11/11: Recording .gitmergeinfo Changes
Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 4.1.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit baed598cf36bad136522cafb3c9bed6567fe1b14
Author: Andriy Redko <dr...@gmail.com>
AuthorDate: Tue Sep 1 09:08:43 2026 -0400
Recording .gitmergeinfo Changes
---
.gitmergeinfo | 2 ++
1 file changed, 2 insertions(+)
diff --git a/.gitmergeinfo b/.gitmergeinfo
index 697d5b03238..5e661fc1243 100644
--- a/.gitmergeinfo
+++ b/.gitmergeinfo
@@ -152,6 +152,7 @@ M 3fa2ffd04bc814d2fa9ab723d9b6c7f9fad35ed8
M 3fd25230dd758f75d4700280ab0db20f3dbf7424
M 40bbcd8acfe0a60e4631aa69733ed33c5e2e4dd8
M 42b912b75a4c5a1537aa1f11a2eb1a2d712c25c3
+M 42e0314e1c8725f54a42933958814aae936fc3f8
M 435f456aca5f4167f7ed69613efbc2f3c74543f7
M 445dc128ce1a117414fb3ed2709c7f406080ae91
M 4516b07cbf2e9e239be7dd0736c65d3eee71b302
@@ -295,6 +296,7 @@ M 8d87eddef8079a1236cde5019d72ad17c4804f49
M 8df25e02635005f8244b0153f3405204372202c8
M 8df5c6271f89620622d2664d3fa68eeff04cc6f9
M 8e846734980667e546b4d0c8144b654ba3aebe07
+M 903c826274499c933f0c71ba3aa5c8de79496de5
M 904db98e2fa12394fef729bb2cb38181b811e28a
M 9063673f815a6e0009c63fb75ba1f41d434efe65
M 9160c3be7d44005c4452d62702eed028efc19dad
(cxf) 06/11: Bump actions/setup-java from 5.7.0 to 6.0.0 (#3416)
Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 4.1.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit c3c57457a583e8cce4d9014cb4ef7e4827a5a0c3
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Mon Aug 31 06:18:40 2026 -0400
Bump actions/setup-java from 5.7.0 to 6.0.0 (#3416)
Bumps [actions/setup-java](https://github.com/actions/setup-java) from 5.7.0 to 6.0.0.
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/b6effb05e454b25005698d916606bdc6ffcbf961...dd06d9cba3e5552c54d9f8ea23572deb30010f7c)
---
updated-dependencies:
- dependency-name: actions/setup-java
dependency-version: 6.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <su...@github.com>
Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
(cherry picked from commit 3534ed7959d2ea1db1b46072104cfa9763565218)
# Conflicts:
# .github/workflows/codeql-analysis.yml
# .github/workflows/pull-request-build.yml
---
.github/workflows/codeql-analysis.yml | 2 +-
.github/workflows/pull-request-build.yml | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 29f68718da9..480e8d9ae89 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -35,7 +35,7 @@ jobs:
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
- name: Setup JDK 17
- uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
+ uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v6.0.0
with:
distribution: 'temurin'
java-version: '17'
diff --git a/.github/workflows/pull-request-build.yml b/.github/workflows/pull-request-build.yml
index 8f86ba20a83..b86a8da3103 100644
--- a/.github/workflows/pull-request-build.yml
+++ b/.github/workflows/pull-request-build.yml
@@ -24,7 +24,7 @@ jobs:
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v3.6.0
- name: Set up JDK 17
- uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
+ uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v6.0.0
with:
java-version: '17'
distribution: 'temurin'
(cxf) 10/11: Recording .gitmergeinfo Changes
Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 4.1.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit c61d83a4cf53b8bfcfc1e9244978aeaf045ee614
Author: Andriy Redko <dr...@gmail.com>
AuthorDate: Tue Sep 1 09:08:29 2026 -0400
Recording .gitmergeinfo Changes
---
.gitmergeinfo | 13 +++++++++++++
1 file changed, 13 insertions(+)
diff --git a/.gitmergeinfo b/.gitmergeinfo
index ff07500ba99..697d5b03238 100644
--- a/.gitmergeinfo
+++ b/.gitmergeinfo
@@ -24,6 +24,7 @@ B f03d047433f7807420492b3893615f2926ed875d
B f9c5ed7540a8e1bc845132c25a2d2ac8bcbd39c6
M 0001a0b5e0e40fa3a040d0404a3c115373d76be3
M 0107e72e9ddf9898ab33a027fa0e1912d434633d
+M 0124c91e10b723d77e666a4b2e2c7abd221d8194
M 01828d6235ac8dbc8f58db7870f02e6c596c6915
M 01c5494157d37b1a26b5a15ad831569037a2a87d
M 023ea58c3347dd27b2c9c2307d695b9b92b3d1ad
@@ -32,17 +33,21 @@ M 02b8e46137a0c628d4daa93bda235949b2eb5ab2
M 0373b3eb06aa65dc829b054e900e950f87161dc0
M 03dfc17b31765600aec198e7a829c2f5ee01ec37
M 04045cdfb8c897138bba90209d0033cb9cc1b4c3
+M 041010ce953e22d17374703136f54d458cfe8b01
M 04dd8bfc54bdaac63e21cd5d6934f27126c4c73f
M 0513c1ffbeac75bc69b815fc3b6c629b9162100a
M 05c89d889522cd81007c1e00c4619ab4e228cc36
M 067121fa831e6126861c2ef11a813b358a15e78a
M 06f13af5bd49d9ab4bcaa43cefba597c50362baf
M 0730af2d8178d134daea7257c74cad06f8965e7f
+M 0765cb5bae03c8aa2c6f9da7850115394b19d211
+M 07a092a0c9b34935a49bf785a98c1e5d8a865d62
M 07af9883cf82c4932b19df39b8c46eb611ebac46
M 07ed95f391dbca4b7deb11c4f946cebc6cf5dea6
M 07f2405c4b4950f46ac11e85538eac28a613292a
M 08544d2ead3916b7a682cc886bcdd50202291d9a
M 08abe18dc90ea794eba1e627535061f7a3c1c910
+M 092d2cc7a0babf5a7d26167c4878e0cc3cfbbf14
M 0ac9b4c1ce9d5bb80966b9d2b6063932153309d0
M 0aeb3b880dc885f934efac3e8cfdc8f6393b2073
M 0b1e3f5d82b174aeca925db7147d8929c2d5f8dd
@@ -125,6 +130,7 @@ M 337557cc4bccb6ea0498b0078beb432968d5560b
M 3375b65a55ec20c29f3f1bb75c2ef72f9d1e48a9
M 33777b08f489d32347f68d1e3ab4e11ea68ebd36
M 351056140d3db507483b8e496bad64de5fd8c69e
+M 3534ed7959d2ea1db1b46072104cfa9763565218
M 353cc3cb1dd9f5f47f17604043049909ecbacb1c
M 35afa2b3534b4e0a3ddd657fca8462ad364e955d
M 35ccb3a4924cb69d2ce4d2a0e5cbc82140260e69
@@ -262,6 +268,7 @@ M 7c0c41157d5818eeb8dd302b5c7c31fe77b5be45
M 7c2845e4b506da60bd09a672ecb4a35c7f930299
M 7c2a6a3eaa6c5822731d92295291d5b0fa00a766
M 7c62b7eb1cbf107e18b8d6d21f4e3dd8905e1caa
+M 7c9e0986479e2a8bfc99455fb7b59742d94f9319
M 7ddd3c03aa687ecf100ab0096be0200129c56a44
M 7de9141077668a18f2db8bc2a97426025e027fd9
M 7e56b156d4e0b4dd751de755f42894d57dc5c78f
@@ -331,6 +338,7 @@ M a79442f46f1f25eca9cdc8dbb706d658a41fabb7
M a7cd1b1c043ac92bf76881723e56aad98ca97f7f
M a7cf20570e443a8d54918dbcc17e45c229771871
M a7f2d373d9161a562fd553c542edc43a28e46817
+M a837332ed37cae92e821ce17d7d95f24e55fd7a2
M a90163cc1e1b8958b9a6a511a15d7b2104669aad
M a97d12d02cd74d9382a94e9ed56bc9ec92ed80ca
M a9dc98b5c33bc5c88e58fc2c3b5c78546dfbddd6
@@ -364,6 +372,7 @@ M b9a3e0075d4d60408f79ab9bdaccb1f17cd8e132
M bb10fd89781c836eabe921da12a1abbb2da5cb9c
M bb22563ba46b33fee4478e5c4815216da4b49347
M bb810a01dd3a63420864098fe680fe0f8ce30e8a
+M bc543bb989e4c881d54825f65c55846eae016501
M bc8f6a4489af668f2e928efa327ca2a51cf30dad
M bd09a14b3529ddacb09237d099b34dddf28f253d
M bddb76ad6a4ae603dbcb6e61ac7ca0052a316b66
@@ -424,11 +433,13 @@ M d9691b4eb1620e730e1dd2ea6f3303d36931fac7
M da18028240a2fd32c3e59a32c968ea9a5e98e466
M da91116fbb397828b0c5c612ff5811df5b707bd7
M dad42493b27650e6549c87912d42fd23b891bcf3
+M db8b8891c323b5b518ef2103e608b460e6cf15fc
M db945030a75eb0ac3f8889c5da2426f0f8135e84
M dbaee7e6942383e0fa12adb878d3142513267175
M dc39c26071cede270d5d4c5684e2cbf41638023b
M dc62303d8d784f0598dccae652bd424bc4fdf21c
M dc6fc8f73a04299d0d99e97eca1352222c10072e
+M dc95f9a2b1d70a3c0bd819721c4cb7ee54b52bb0
M de02fdf9a5de9f1808db1da2b18ce4b847597b8a
M de05fb8cf297e1daebc6593843332dacc5605bb4
M de097dbdb66b486c4a0757915ab286ed819a3358
@@ -438,6 +449,7 @@ M de3a76c765902c04b6d3569f35b62374fbe5bf03
M de4e9483f3239d49b8425e1147bb084d96f50263
M de91745f9fc19dab8c75707cac42e3ec82642706
M deacc93ac293c0392e3b93b17c10b6dbe917f8f3
+M dfc027205cde8a9ee95258ecac50bdbd056feee3
M e0a357ed7ee3dc766421fda67329c074487c6f4a
M e0bfa160ee8abd22c4ca4929d209681691f06247
M e13aa91b7cadd3a909123041fd22eacc834c09f0
@@ -450,6 +462,7 @@ M e3caea13c4304a45e1a258890d49e87cc9f20aa9
M e40d8dd091a741051d9b4aa7e0d1e3f37b8d36b6
M e438db25f51db6ece35cc0b74866e57f956314d1
M e613b1a60fafc098e9a9e1d31bbc62730c349f3e
+M e7a54dad2b1fc2f772381d2119ac3624d3a19371
M e8395ad45d9f65ca3704bc508f73073d9d12f712
M e920da53d7538ed702746dec94ddae2aa82e3a01
M e92e6ebe085113183dacd3286ede8722496f5336
(cxf) 04/11: Bump cxf.activemq.artemis.version from 2.55.0 to 2.56.0 (#3407)
Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 4.1.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit 776b35346e8bf7e8342838271d8c9027c53b056b
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Fri Aug 28 13:24:24 2026 -0400
Bump cxf.activemq.artemis.version from 2.55.0 to 2.56.0 (#3407)
Bumps `cxf.activemq.artemis.version` from 2.55.0 to 2.56.0.
Updates `org.apache.artemis:artemis-jakarta-server` from 2.55.0 to 2.56.0
Updates `org.apache.artemis:artemis-jakarta-client` from 2.55.0 to 2.56.0
Updates `org.apache.artemis:artemis-jakarta-ra` from 2.55.0 to 2.56.0
Updates `org.apache.artemis:artemis-junit` from 2.55.0 to 2.56.0
---
updated-dependencies:
- dependency-name: org.apache.artemis:artemis-jakarta-server
dependency-version: 2.56.0
dependency-type: direct:production
update-type: version-update:semver-minor
- dependency-name: org.apache.artemis:artemis-jakarta-client
dependency-version: 2.56.0
dependency-type: direct:production
update-type: version-update:semver-minor
- dependency-name: org.apache.artemis:artemis-jakarta-ra
dependency-version: 2.56.0
dependency-type: direct:development
update-type: version-update:semver-minor
- dependency-name: org.apache.artemis:artemis-junit
dependency-version: 2.56.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <su...@github.com>
Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
(cherry picked from commit e7a54dad2b1fc2f772381d2119ac3624d3a19371)
---
parent/pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/parent/pom.xml b/parent/pom.xml
index acbcf134aa1..2bdbda54750 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -89,7 +89,7 @@
<cxf.osgi.jakarta.transaction.version>[2,3)</cxf.osgi.jakarta.transaction.version>
<!-- please maintain alphabetical order here -->
- <cxf.activemq.artemis.version>2.55.0</cxf.activemq.artemis.version>
+ <cxf.activemq.artemis.version>2.56.0</cxf.activemq.artemis.version>
<cxf.ahc.version>3.0.13</cxf.ahc.version>
<cxf.arquillian.version>1.8.1.Final</cxf.arquillian.version>
<cxf.arquillian.weld.container.version>3.0.2.Final</cxf.arquillian.weld.container.version>
(cxf) 08/11: Bump github/codeql-action/init from 4.37.7 to 4.37.9 (#3415)
Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 4.1.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit c43e5f910ff16e83de6e7a45d9065b22ae5c10b1
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Mon Aug 31 10:04:45 2026 -0400
Bump github/codeql-action/init from 4.37.7 to 4.37.9 (#3415)
* Bump github/codeql-action/init from 4.37.7 to 4.37.9
Bumps [github/codeql-action/init](https://github.com/github/codeql-action) from 4.37.7 to 4.37.9.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd...cdf488f595d80d6e07e03d4674febd5ab45fa938)
---
updated-dependencies:
- dependency-name: github/codeql-action/init
dependency-version: 4.37.9
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <su...@github.com>
* Apply suggestion from @reta
---------
Signed-off-by: dependabot[bot] <su...@github.com>
Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
Co-authored-by: Andriy Redko <dr...@gmail.com>
(cherry picked from commit ff15bc030119f7a62fc5007369c550c58d29c244)
---
.github/workflows/codeql-analysis.yml | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 480e8d9ae89..738a1d999ee 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -48,7 +48,7 @@ jobs:
# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
- uses: github/codeql-action/init@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7
+ uses: github/codeql-action/init@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9
with:
languages: java
#config-file: ./.github/codeql/codeql-cxf-config.yml
@@ -76,4 +76,4 @@ jobs:
# make release
- name: Perform CodeQL Analysis
- uses: github/codeql-action/analyze@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7
+ uses: github/codeql-action/analyze@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9
(cxf) 02/11: Bump org.graalvm.buildtools:native-maven-plugin from 1.1.5 to 1.1.10 (#3403)
Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 4.1.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit 61de3a6ed63ba97d6fc52376e8e9a72c482c2b51
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Thu Aug 27 07:19:04 2026 -0400
Bump org.graalvm.buildtools:native-maven-plugin from 1.1.5 to 1.1.10 (#3403)
Bumps [org.graalvm.buildtools:native-maven-plugin](https://github.com/graalvm/native-build-tools) from 1.1.5 to 1.1.10.
- [Release notes](https://github.com/graalvm/native-build-tools/releases)
- [Commits](https://github.com/graalvm/native-build-tools/compare/1.1.5...1.1.10)
---
updated-dependencies:
- dependency-name: org.graalvm.buildtools:native-maven-plugin
dependency-version: 1.1.10
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <su...@github.com>
Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
(cherry picked from commit a948b1f19c3f338160bf9709b295571690e1fb7e)
---
distribution/src/main/release/samples/jax_rs/graalvm_basic/pom.xml | 4 ++--
distribution/src/main/release/samples/jaxws_graalvm/pom.xml | 4 ++--
.../src/main/release/samples/jaxws_graalvm_dynamic/client/pom.xml | 2 +-
.../src/main/release/samples/jaxws_graalvm_dynamic/server/pom.xml | 2 +-
4 files changed, 6 insertions(+), 6 deletions(-)
diff --git a/distribution/src/main/release/samples/jax_rs/graalvm_basic/pom.xml b/distribution/src/main/release/samples/jax_rs/graalvm_basic/pom.xml
index 182f46e225a..4fff4481e87 100644
--- a/distribution/src/main/release/samples/jax_rs/graalvm_basic/pom.xml
+++ b/distribution/src/main/release/samples/jax_rs/graalvm_basic/pom.xml
@@ -67,7 +67,7 @@
<plugin>
<groupId>org.graalvm.buildtools</groupId>
<artifactId>native-maven-plugin</artifactId>
- <version>1.1.5</version>
+ <version>1.1.10</version>
<executions>
<execution>
<goals>
@@ -125,7 +125,7 @@
<plugin>
<groupId>org.graalvm.buildtools</groupId>
<artifactId>native-maven-plugin</artifactId>
- <version>1.1.5</version>
+ <version>1.1.10</version>
<executions>
<execution>
<goals>
diff --git a/distribution/src/main/release/samples/jaxws_graalvm/pom.xml b/distribution/src/main/release/samples/jaxws_graalvm/pom.xml
index 39459d24bf9..eb49b622fae 100644
--- a/distribution/src/main/release/samples/jaxws_graalvm/pom.xml
+++ b/distribution/src/main/release/samples/jaxws_graalvm/pom.xml
@@ -92,7 +92,7 @@
<plugin>
<groupId>org.graalvm.buildtools</groupId>
<artifactId>native-maven-plugin</artifactId>
- <version>1.1.5</version>
+ <version>1.1.10</version>
<executions>
<execution>
<goals>
@@ -146,7 +146,7 @@
<plugin>
<groupId>org.graalvm.buildtools</groupId>
<artifactId>native-maven-plugin</artifactId>
- <version>1.1.5</version>
+ <version>1.1.10</version>
<executions>
<execution>
<goals>
diff --git a/distribution/src/main/release/samples/jaxws_graalvm_dynamic/client/pom.xml b/distribution/src/main/release/samples/jaxws_graalvm_dynamic/client/pom.xml
index c1f38c946ad..3109c366a58 100644
--- a/distribution/src/main/release/samples/jaxws_graalvm_dynamic/client/pom.xml
+++ b/distribution/src/main/release/samples/jaxws_graalvm_dynamic/client/pom.xml
@@ -41,7 +41,7 @@
<plugin>
<groupId>org.graalvm.buildtools</groupId>
<artifactId>native-maven-plugin</artifactId>
- <version>1.1.5</version>
+ <version>1.1.10</version>
<executions>
<execution>
<goals>
diff --git a/distribution/src/main/release/samples/jaxws_graalvm_dynamic/server/pom.xml b/distribution/src/main/release/samples/jaxws_graalvm_dynamic/server/pom.xml
index 4acb1a55616..60607c0a990 100644
--- a/distribution/src/main/release/samples/jaxws_graalvm_dynamic/server/pom.xml
+++ b/distribution/src/main/release/samples/jaxws_graalvm_dynamic/server/pom.xml
@@ -68,7 +68,7 @@
<plugin>
<groupId>org.graalvm.buildtools</groupId>
<artifactId>native-maven-plugin</artifactId>
- <version>1.1.5</version>
+ <version>1.1.10</version>
<executions>
<execution>
<goals>
(cxf) 09/11: Bump org.jruby:jruby from 10.1.0.0 to 10.1.1.0 (#3428)
Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 4.1.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit 3af6a3d7e4ea7cea0384bf0fe697198054dde33e
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Tue Sep 1 09:00:53 2026 -0400
Bump org.jruby:jruby from 10.1.0.0 to 10.1.1.0 (#3428)
Bumps org.jruby:jruby from 10.1.0.0 to 10.1.1.0.
---
updated-dependencies:
- dependency-name: org.jruby:jruby
dependency-version: 10.1.1.0
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <su...@github.com>
Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
(cherry picked from commit 17185d8d072bb9fdb1c4e7e70193074e0366fecf)
---
distribution/src/main/release/samples/ruby_spring_support/pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/distribution/src/main/release/samples/ruby_spring_support/pom.xml b/distribution/src/main/release/samples/ruby_spring_support/pom.xml
index 90c6603b740..6d0100992fe 100644
--- a/distribution/src/main/release/samples/ruby_spring_support/pom.xml
+++ b/distribution/src/main/release/samples/ruby_spring_support/pom.xml
@@ -124,7 +124,7 @@
<dependency>
<groupId>org.jruby</groupId>
<artifactId>jruby</artifactId>
- <version>10.1.0.0</version>
+ <version>10.1.1.0</version>
</dependency>
<dependency>
<groupId>org.springframework</groupId>