You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cxf.apache.org by re...@apache.org on 2026/05/21 18:26:58 UTC
(cxf) branch 4.1.x-fixes updated (89c2372e6e1 -> 69a574e1aec)
This is an automated email from the ASF dual-hosted git repository.
reta pushed a change to branch 4.1.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
from 89c2372e6e1 Changing last commit to preserve old code verifier on 4.1
new 4a84c25e3b7 Bump cxf.slf4j.version from 2.0.17 to 2.0.18 (#3117)
new c91d955a96b Bump github/codeql-action from 4.35.3 to 4.35.4 (#3118)
new 66eae96e096 Bump jaxen:jaxen from 2.0.1 to 2.0.2 (#3120)
new 5ee1b8a5361 Bump cxf.hazelcast.version from 5.6.0 to 5.7.0 (#3116)
new 9649d1d869b Bump cxf.maven.core.version from 3.9.15 to 3.9.16 (#3122)
new 11a767c748e Bump cxf.activemq.artemis.version from 2.53.0 to 2.54.0 (#3125)
new 6d8cf2a081b Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.2 to 3.6.3 (#3129)
new 4ba88dda463 Bump jaxen:jaxen from 2.0.2 to 2.0.3 (#3130)
new 39696589288 Recording .gitmergeinfo Changes
new 69a574e1aec Update Netty to 4.1.134.Final
The 10 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.github/workflows/codeql-analysis.yml | 4 ++--
.gitmergeinfo | 13 +++++++++++++
distribution/src/main/release/samples/pom.xml | 4 ++--
parent/pom.xml | 12 ++++++------
pom.xml | 2 +-
5 files changed, 24 insertions(+), 11 deletions(-)
(cxf) 09/10: Recording .gitmergeinfo Changes
Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 4.1.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit 396965892888ed87b45b2f4f8daf37c386fa2948
Author: Andriy Redko <dr...@gmail.com>
AuthorDate: Thu May 21 14:03:12 2026 -0400
Recording .gitmergeinfo Changes
---
.gitmergeinfo | 13 +++++++++++++
1 file changed, 13 insertions(+)
diff --git a/.gitmergeinfo b/.gitmergeinfo
index 262e902fb1b..b1fddcb3fcb 100644
--- a/.gitmergeinfo
+++ b/.gitmergeinfo
@@ -28,6 +28,7 @@ M 08abe18dc90ea794eba1e627535061f7a3c1c910
M 0aeb3b880dc885f934efac3e8cfdc8f6393b2073
M 0b8ae6be6269c4fd163e7ca10111342f3abb3451
M 0cea81ce0e4bc9abe15ce4d8cafedd36b16ee2eb
+M 0fc3688402419a20a84784b0eed84470223999f4
M 10780b457e43c232cacfc767d48268a385ae4bc4
M 14599134aa443a21208fef21c57ed0af4a768df8
M 14af98e9ae2193603f8fcf82dde271af065cabb4
@@ -46,6 +47,7 @@ M 1b5d9a50adb4a13f1e18fe74417a5a987e43c575
M 1c08d09e491c7c4eb88c0113b9d4799a9267d56a
M 1d3aaddd2ceb267aa11159cc17fb545a36a05fcb
M 1dfcfd5871fce66ecbe544239bc65faf95e00d78
+M 1e16de926464532863c61d889fb697e9e0e0737d
M 1ed2a16caf52eb9559d175245a931ac5c0488e06
M 1f4e57ff6df5bb6c6e9d864ae5699d55ce5d3436
M 1ffb117c3cc2d47b2299b7299188254c9439e127
@@ -59,6 +61,7 @@ M 28f7a4aae536b4ae9a094af168fe7fbbc125320f
M 2968735a216540871780e081103e9bb892a1fbb5
M 29a9edbee874a6ee03119f0520ef23a3441960f6
M 29ea304966b903d098680deaf52292bb265aeb48
+M 2ac45fd1d732b7cdd171cb455444ab908358d731
M 2bf0e78c1b6b754cdbbcb07a0adfada4ae49ed0c
M 2cc6e66b9ea586617f092d42b7ebe7b222a19bbb
M 2d97d77762531c6539e08af65389ee2b1b037182
@@ -91,6 +94,7 @@ M 435f456aca5f4167f7ed69613efbc2f3c74543f7
M 445dc128ce1a117414fb3ed2709c7f406080ae91
M 459da92cd212e451cc1211b951f808a74563c81f
M 45f08f409ab9049c434d609a978b9f3b51698c4c
+M 462b4f078c6a89e63623c13566d3175efa18e295
M 46a5c00f200c2dbddfaaf33a2a4c23e0aee89f39
M 4a7b2d85bf7ce17033aed025a920f5788be0b817
M 4cb84e1b21728cc307e1240413ce10788c0c93f7
@@ -127,11 +131,15 @@ M 602954b3b8bb1a6e832edb2cfc2bde0cbebe6fd1
M 6184236a62ff058ce07d26cf3ac0c8ec4f1c3d4b
M 636e750866f67fd70fd022083da686909cdf0c5c
M 637adf0a5e81883e33cb183c9b9a18ab37b770e9
+M 64058b413c19dc3c323ade0b70cf447b8ca1c434
M 66ff35d260e4d0e72d38969c6544a536f1028471
M 67b7726041c8432a00374001d6b6cc1286680d5b
M 67cc81b1f29c887431d674df5187ca79f6eccf74
M 682e36ff0be2cf1548d73bb2afb968ea7c5006e4
+M 68aa7c40fbb60ddb865797507eee050b8555fb4d
+M 68c7befb9ec1dca1e6412b11ef0e9f621d2ad770
M 6902d650caa050feacb1b4fc666a6b5f9c3fed1b
+M 6908418bfe26fb69efeebda9591244445012914e
M 69197f0e29c0bcfb44184a9e8822fb66f3116e12
M 69e5e15fb3e3a20419d25e0739ece7d452f39632
M 6a30928864bbbc54a53f2775003017e7f1422c8d
@@ -153,6 +161,7 @@ M 783a56bf623759c965079a8b93b3dd5ee56e96b9
M 7844187c246d55ad3e00a4caeeefb3c1ea7593b5
M 7a19b0a9c001c7cd47611aa9143588b88ec08eaf
M 7a40959a0cda9e3e40d053cfe57915dfa714f0dd
+M 7aa721f9a36491ff27d6a323d8586d8c1b20240d
M 7ad896896c39bd6966adcec83500134a20368add
M 7c2a6a3eaa6c5822731d92295291d5b0fa00a766
M 7c62b7eb1cbf107e18b8d6d21f4e3dd8905e1caa
@@ -162,6 +171,7 @@ M 7f511ac763e25edb9cc9e986c1a681b6e6b8baef
M 7f9d7b33f320d244e8d4119a96cfd24425437d7a
M 7fa885c8933da70a006296ec2ef6479490a1aeef
M 82bde20f21d8c851df754ecf94f1370266461867
+M 834d90a6d7d35117b123eda0d8f4e1f5b14d94e6
M 866fdb167957c57d4a8adf4cd7641a4c98f09666
M 86edefd814f9a17114e8e150269a95a6e6bef163
M 87163914a8d9b621f967198b21b56fe9fa006a61
@@ -229,6 +239,7 @@ M bc8f6a4489af668f2e928efa327ca2a51cf30dad
M bd09a14b3529ddacb09237d099b34dddf28f253d
M bddb76ad6a4ae603dbcb6e61ac7ca0052a316b66
M be510b45c84c2ce9370e696b9e021c12e6d667d0
+M be511e592a487b74d1db45deb61cde5a25055a02
M be6812a1c99d17cadf755638eb578e4efcd1a234
M bfe9cb3dbe57726dadcdd15b0ddd872460ffc2c9
M c2a606ec19b599510f63cc16b134a76292b4a52c
@@ -239,6 +250,7 @@ M c426ca7f4dade93d534b45c27831c76303053ad0
M c430dba9ad92026405ca5594df9d7b511aa4c35f
M c435105d4c8b4d9e97e64959073fce695e402944
M c5126622a8536074d93af31e3c544c950895a690
+M c6968586c290a920aa3633b35da2dbb72bf2dea8
M c7c752099dc0562202cbd69e3e396d357ef2dd4e
M c7ebc48fba76b3979790722cc8a420673bfc4cf3
M c9603bec6e0acaee6f58f4bea970ca445984da21
@@ -270,6 +282,7 @@ M de4e9483f3239d49b8425e1147bb084d96f50263
M de91745f9fc19dab8c75707cac42e3ec82642706
M deacc93ac293c0392e3b93b17c10b6dbe917f8f3
M e0bfa160ee8abd22c4ca4929d209681691f06247
+M e13aa91b7cadd3a909123041fd22eacc834c09f0
M e1718c5cd1446c2d22a5d343bb4d25d3985de55b
M e1920e2106c073fe1f4b166dc4e651d61615efd4
M e24d2c4627dcd727e4cbc4f5b6a49c918f4563dc
(cxf) 05/10: Bump cxf.maven.core.version from 3.9.15 to 3.9.16 (#3122)
Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 4.1.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit 9649d1d869b300977104dab0c4cbbb8eb54b12b1
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Tue May 19 13:47:15 2026 -0400
Bump cxf.maven.core.version from 3.9.15 to 3.9.16 (#3122)
Bumps `cxf.maven.core.version` from 3.9.15 to 3.9.16.
Updates `org.apache.maven:maven-compat` from 3.9.15 to 3.9.16
- [Release notes](https://github.com/apache/maven/releases)
- [Commits](https://github.com/apache/maven/compare/maven-3.9.15...maven-3.9.16)
Updates `org.apache.maven:maven-plugin-api` from 3.9.15 to 3.9.16
- [Release notes](https://github.com/apache/maven/releases)
- [Commits](https://github.com/apache/maven/compare/maven-3.9.15...maven-3.9.16)
Updates `org.apache.maven:maven-artifact` from 3.9.15 to 3.9.16
Updates `org.apache.maven:maven-core` from 3.9.15 to 3.9.16
Updates `org.apache.maven:maven-settings` from 3.9.15 to 3.9.16
---
updated-dependencies:
- dependency-name: org.apache.maven:maven-compat
dependency-version: 3.9.16
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.apache.maven:maven-plugin-api
dependency-version: 3.9.16
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.apache.maven:maven-artifact
dependency-version: 3.9.16
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.apache.maven:maven-core
dependency-version: 3.9.16
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.apache.maven:maven-settings
dependency-version: 3.9.16
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <su...@github.com>
Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
(cherry picked from commit 834d90a6d7d35117b123eda0d8f4e1f5b14d94e6)
# Conflicts:
# parent/pom.xml
---
parent/pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/parent/pom.xml b/parent/pom.xml
index bbf725e5900..6ab90b2a6b3 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -176,7 +176,7 @@
<cxf.littleproxy.version>2.7.0</cxf.littleproxy.version>
<cxf.logback.classic.version>1.5.32</cxf.logback.classic.version>
<cxf.lucene.version>9.12.3</cxf.lucene.version>
- <cxf.maven.core.version>3.9.14</cxf.maven.core.version>
+ <cxf.maven.core.version>3.9.16</cxf.maven.core.version>
<cxf.micrometer.version>1.14.14</cxf.micrometer.version>
<cxf.micrometer-tracing.version>1.4.13</cxf.micrometer-tracing.version>
<cxf.microprofile.config.version>3.1</cxf.microprofile.config.version>
(cxf) 01/10: Bump cxf.slf4j.version from 2.0.17 to 2.0.18 (#3117)
Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 4.1.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit 4a84c25e3b77c7a0a70448a34386a3eede0975c5
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Mon May 18 08:45:36 2026 -0400
Bump cxf.slf4j.version from 2.0.17 to 2.0.18 (#3117)
Bumps `cxf.slf4j.version` from 2.0.17 to 2.0.18.
Updates `org.slf4j:slf4j-jdk14` from 2.0.17 to 2.0.18
Updates `org.slf4j:jcl-over-slf4j` from 2.0.17 to 2.0.18
Updates `org.slf4j:slf4j-api` from 2.0.17 to 2.0.18
Updates `org.slf4j:slf4j-log4j12` from 2.0.17 to 2.0.18
Updates `org.slf4j:slf4j-nop` from 2.0.17 to 2.0.18
Updates `org.slf4j:jul-to-slf4j` from 2.0.17 to 2.0.18
---
updated-dependencies:
- dependency-name: org.slf4j:slf4j-jdk14
dependency-version: 2.0.18
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.slf4j:jcl-over-slf4j
dependency-version: 2.0.18
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.slf4j:slf4j-api
dependency-version: 2.0.18
dependency-type: direct:development
update-type: version-update:semver-patch
- dependency-name: org.slf4j:slf4j-log4j12
dependency-version: 2.0.18
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.slf4j:slf4j-nop
dependency-version: 2.0.18
dependency-type: direct:development
update-type: version-update:semver-patch
- dependency-name: org.slf4j:jul-to-slf4j
dependency-version: 2.0.18
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <su...@github.com>
Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
(cherry picked from commit 0fc3688402419a20a84784b0eed84470223999f4)
# Conflicts:
# parent/pom.xml
---
parent/pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/parent/pom.xml b/parent/pom.xml
index d73cdba741d..762d84ae4bc 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -209,7 +209,7 @@
<cxf.servlet-api.artifact>jakarta.servlet-api</cxf.servlet-api.artifact>
<cxf.servlet-api.group>jakarta.servlet</cxf.servlet-api.group>
<cxf.servlet-api.version>6.0.0</cxf.servlet-api.version>
- <cxf.slf4j.version>2.0.17</cxf.slf4j.version>
+ <cxf.slf4j.version>2.0.18</cxf.slf4j.version>
<cxf.snakeyaml.version>2.6</cxf.snakeyaml.version>
<cxf.specs.jaxws.api.version>2.3_2</cxf.specs.jaxws.api.version>
<cxf.spring.boot.version>3.4.13</cxf.spring.boot.version>
(cxf) 04/10: Bump cxf.hazelcast.version from 5.6.0 to 5.7.0 (#3116)
Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 4.1.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit 5ee1b8a5361eab5e0616600bbd18ba8e7a7c4fa7
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Mon May 18 12:13:41 2026 -0400
Bump cxf.hazelcast.version from 5.6.0 to 5.7.0 (#3116)
Bumps `cxf.hazelcast.version` from 5.6.0 to 5.7.0.
Updates `com.hazelcast:hazelcast` from 5.6.0 to 5.7.0
- [Release notes](https://github.com/hazelcast/hazelcast/releases)
- [Commits](https://github.com/hazelcast/hazelcast/compare/v5.6.0...v5.7.0)
Updates `com.hazelcast:hazelcast-spring` from 5.6.0 to 5.7.0
- [Release notes](https://github.com/hazelcast/hazelcast/releases)
- [Commits](https://github.com/hazelcast/hazelcast/compare/v5.6.0...v5.7.0)
---
updated-dependencies:
- dependency-name: com.hazelcast:hazelcast
dependency-version: 5.7.0
dependency-type: direct:production
update-type: version-update:semver-minor
- dependency-name: com.hazelcast:hazelcast-spring
dependency-version: 5.7.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <su...@github.com>
Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
(cherry picked from commit 462b4f078c6a89e63623c13566d3175efa18e295)
# Conflicts:
# parent/pom.xml
---
parent/pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/parent/pom.xml b/parent/pom.xml
index a881cdb1f3f..bbf725e5900 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -120,7 +120,7 @@
<cxf.glassfish.el.version>4.0.2</cxf.glassfish.el.version>
<cxf.glassfish.json.version>2.0.1</cxf.glassfish.json.version>
<cxf.hamcrest.version>3.0</cxf.hamcrest.version>
- <cxf.hazelcast.version>5.5.0</cxf.hazelcast.version>
+ <cxf.hazelcast.version>5.7.0</cxf.hazelcast.version>
<cxf.hibernate.em.version>6.6.49.Final</cxf.hibernate.em.version>
<cxf.hibernate.validator.version>8.0.3.Final</cxf.hibernate.validator.version>
<cxf.hsqldb.version>2.7.4</cxf.hsqldb.version>
(cxf) 07/10: Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.2 to 3.6.3 (#3129)
Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 4.1.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit 6d8cf2a081b670181018ab5ab6ba5f8bd6332fdc
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Thu May 21 07:27:01 2026 -0400
Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.2 to 3.6.3 (#3129)
Bumps [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer) from 3.6.2 to 3.6.3.
- [Release notes](https://github.com/apache/maven-enforcer/releases)
- [Commits](https://github.com/apache/maven-enforcer/compare/enforcer-3.6.2...enforcer-3.6.3)
---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-enforcer-plugin
dependency-version: 3.6.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <su...@github.com>
Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
(cherry picked from commit 5fbaf3f6e6921e7526a1a1d0be2b064235219374)
---
distribution/src/main/release/samples/pom.xml | 2 +-
pom.xml | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/distribution/src/main/release/samples/pom.xml b/distribution/src/main/release/samples/pom.xml
index a0a3002e62d..78fe411a3dd 100644
--- a/distribution/src/main/release/samples/pom.xml
+++ b/distribution/src/main/release/samples/pom.xml
@@ -233,7 +233,7 @@
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-enforcer-plugin</artifactId>
- <version>3.6.2</version>
+ <version>3.6.3</version>
<executions>
<execution>
<goals>
diff --git a/pom.xml b/pom.xml
index 0a8ff3d1361..aaf016c634e 100644
--- a/pom.xml
+++ b/pom.xml
@@ -663,7 +663,7 @@
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-enforcer-plugin</artifactId>
- <version>3.6.2</version>
+ <version>3.6.3</version>
<configuration>
<rules>
<requireJavaVersion>
(cxf) 03/10: Bump jaxen:jaxen from 2.0.1 to 2.0.2 (#3120)
Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 4.1.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit 66eae96e09650dcd48e273ebf0676eaa8cfd9ef9
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Mon May 18 08:46:29 2026 -0400
Bump jaxen:jaxen from 2.0.1 to 2.0.2 (#3120)
Bumps [jaxen:jaxen](https://github.com/jaxen-xpath/jaxen) from 2.0.1 to 2.0.2.
- [Release notes](https://github.com/jaxen-xpath/jaxen/releases)
- [Commits](https://github.com/jaxen-xpath/jaxen/compare/v2.0.1...v2.0.2)
---
updated-dependencies:
- dependency-name: jaxen:jaxen
dependency-version: 2.0.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <su...@github.com>
Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
(cherry picked from commit 1e16de926464532863c61d889fb697e9e0e0737d)
---
parent/pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/parent/pom.xml b/parent/pom.xml
index 762d84ae4bc..a881cdb1f3f 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -154,7 +154,7 @@
<cxf.jaxb.runtime.version>4.0.8</cxf.jaxb.runtime.version>
<cxf.jaxb.version>4.0.5</cxf.jaxb.version>
<cxf.jaxb.xjc.version>${cxf.jaxb.runtime.version}</cxf.jaxb.xjc.version>
- <cxf.jaxen.version>2.0.1</cxf.jaxen.version>
+ <cxf.jaxen.version>2.0.2</cxf.jaxen.version>
<cxf.jboss.logging.version>3.6.3.Final</cxf.jboss.logging.version>
<cxf.jboss.weld.version>5.1.2.Final</cxf.jboss.weld.version>
<cxf.jboss.narayana.version>5.13.1.Final</cxf.jboss.narayana.version>
(cxf) 08/10: Bump jaxen:jaxen from 2.0.2 to 2.0.3 (#3130)
Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 4.1.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit 4ba88dda463a0e507ca5eccdec940a99fcbd44c5
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Thu May 21 07:27:22 2026 -0400
Bump jaxen:jaxen from 2.0.2 to 2.0.3 (#3130)
Bumps [jaxen:jaxen](https://github.com/jaxen-xpath/jaxen) from 2.0.2 to 2.0.3.
- [Release notes](https://github.com/jaxen-xpath/jaxen/releases)
- [Commits](https://github.com/jaxen-xpath/jaxen/compare/v2.0.2...v2.0.3)
---
updated-dependencies:
- dependency-name: jaxen:jaxen
dependency-version: 2.0.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <su...@github.com>
Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
(cherry picked from commit 2ac45fd1d732b7cdd171cb455444ab908358d731)
---
parent/pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/parent/pom.xml b/parent/pom.xml
index b9bb733a2c4..dbae31b29d7 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -154,7 +154,7 @@
<cxf.jaxb.runtime.version>4.0.8</cxf.jaxb.runtime.version>
<cxf.jaxb.version>4.0.5</cxf.jaxb.version>
<cxf.jaxb.xjc.version>${cxf.jaxb.runtime.version}</cxf.jaxb.xjc.version>
- <cxf.jaxen.version>2.0.2</cxf.jaxen.version>
+ <cxf.jaxen.version>2.0.3</cxf.jaxen.version>
<cxf.jboss.logging.version>3.6.3.Final</cxf.jboss.logging.version>
<cxf.jboss.weld.version>5.1.2.Final</cxf.jboss.weld.version>
<cxf.jboss.narayana.version>5.13.1.Final</cxf.jboss.narayana.version>
(cxf) 10/10: Update Netty to 4.1.134.Final
Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 4.1.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit 69a574e1aec519193ff4921452f90d68fc159b59
Author: Andriy Redko <dr...@gmail.com>
AuthorDate: Thu May 21 14:26:34 2026 -0400
Update Netty to 4.1.134.Final
---
distribution/src/main/release/samples/pom.xml | 2 +-
parent/pom.xml | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/distribution/src/main/release/samples/pom.xml b/distribution/src/main/release/samples/pom.xml
index 78fe411a3dd..5e707944e45 100644
--- a/distribution/src/main/release/samples/pom.xml
+++ b/distribution/src/main/release/samples/pom.xml
@@ -34,7 +34,7 @@
<cxf.spring.boot.version>3.4.13</cxf.spring.boot.version>
<cxf.spring.cloud.eureka.version>4.2.3</cxf.spring.cloud.eureka.version>
<cxf.jetty12.version>12.0.34</cxf.jetty12.version>
- <cxf.netty.version>4.1.133.Final</cxf.netty.version>
+ <cxf.netty.version>4.1.134.Final</cxf.netty.version>
<cxf.httpcomponents.client.version>4.5.14</cxf.httpcomponents.client.version>
<cxf.swagger.ui.version>5.32.5</cxf.swagger.ui.version>
<cxf.tika.version>3.3.0</cxf.tika.version>
diff --git a/parent/pom.xml b/parent/pom.xml
index dbae31b29d7..94e11d5ee05 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -187,7 +187,7 @@
<cxf.msv.version>2022.7</cxf.msv.version>
<cxf.neethi.version>3.2.2</cxf.neethi.version>
<cxf.netty.version.range>[4,5)</cxf.netty.version.range>
- <cxf.netty.version>4.1.133.Final</cxf.netty.version>
+ <cxf.netty.version>4.1.134.Final</cxf.netty.version>
<cxf.netty.tcnative.version>2.0.69.Final</cxf.netty.tcnative.version>
<cxf.olingo.version>2.0.13</cxf.olingo.version>
<cxf.openjpa.version>3.2.2</cxf.openjpa.version>
(cxf) 02/10: Bump github/codeql-action from 4.35.3 to 4.35.4 (#3118)
Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 4.1.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit c91d955a96bb00145db73be785e69b0dee89e008
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Mon May 18 08:46:02 2026 -0400
Bump github/codeql-action from 4.35.3 to 4.35.4 (#3118)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.3 to 4.35.4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/e46ed2cbd01164d986452f91f178727624ae40d7...68bde559dea0fdcac2102bfdf6230c5f70eb485e)
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.35.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <su...@github.com>
Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
(cherry picked from commit e13aa91b7cadd3a909123041fd22eacc834c09f0)
# Conflicts:
# .github/workflows/codeql-analysis.yml
# .github/workflows/scorecards.yml
---
.github/workflows/codeql-analysis.yml | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 0b4616cd789..a86c5a9fb28 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -44,7 +44,7 @@ jobs:
# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
- uses: github/codeql-action/init@e46ed2cbd01164d986452f91f178727624ae40d7 # 4.35.3
+ uses: github/codeql-action/init@68bde559dea0fdcac2102bfdf6230c5f70eb485e # v3.29.5
with:
languages: java
#config-file: ./.github/codeql/codeql-cxf-config.yml
@@ -72,4 +72,4 @@ jobs:
# make release
- name: Perform CodeQL Analysis
- uses: github/codeql-action/analyze@e46ed2cbd01164d986452f91f178727624ae40d7 # v4.35.3
+ uses: github/codeql-action/analyze@68bde559dea0fdcac2102bfdf6230c5f70eb485e # v3.29.5
(cxf) 06/10: Bump cxf.activemq.artemis.version from 2.53.0 to 2.54.0 (#3125)
Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 4.1.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit 11a767c748e2ea2a8ef5437c8398f01601a3b33a
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Wed May 20 09:18:04 2026 -0400
Bump cxf.activemq.artemis.version from 2.53.0 to 2.54.0 (#3125)
Bumps `cxf.activemq.artemis.version` from 2.53.0 to 2.54.0.
Updates `org.apache.artemis:artemis-jakarta-server` from 2.53.0 to 2.54.0
Updates `org.apache.artemis:artemis-jakarta-client` from 2.53.0 to 2.54.0
Updates `org.apache.artemis:artemis-jakarta-ra` from 2.53.0 to 2.54.0
Updates `org.apache.artemis:artemis-junit` from 2.53.0 to 2.54.0
---
updated-dependencies:
- dependency-name: org.apache.artemis:artemis-jakarta-server
dependency-version: 2.54.0
dependency-type: direct:production
update-type: version-update:semver-minor
- dependency-name: org.apache.artemis:artemis-jakarta-client
dependency-version: 2.54.0
dependency-type: direct:production
update-type: version-update:semver-minor
- dependency-name: org.apache.artemis:artemis-jakarta-ra
dependency-version: 2.54.0
dependency-type: direct:development
update-type: version-update:semver-minor
- dependency-name: org.apache.artemis:artemis-junit
dependency-version: 2.54.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <su...@github.com>
Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
(cherry picked from commit be511e592a487b74d1db45deb61cde5a25055a02)
---
parent/pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/parent/pom.xml b/parent/pom.xml
index 6ab90b2a6b3..b9bb733a2c4 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -88,7 +88,7 @@
<cxf.osgi.jakarta.transaction.version>[2,3)</cxf.osgi.jakarta.transaction.version>
<!-- please maintain alphabetical order here -->
- <cxf.activemq.artemis.version>2.53.0</cxf.activemq.artemis.version>
+ <cxf.activemq.artemis.version>2.54.0</cxf.activemq.artemis.version>
<cxf.ahc.version>3.0.10</cxf.ahc.version>
<cxf.arquillian.version>1.8.1.Final</cxf.arquillian.version>
<cxf.arquillian.weld.container.version>3.0.2.Final</cxf.arquillian.weld.container.version>