You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cxf.apache.org by re...@apache.org on 2026/06/25 17:51:13 UTC

(cxf) branch 3.6.x-fixes updated (35d62a6d4a3 -> 1d1e0d8d529)

This is an automated email from the ASF dual-hosted git repository.

reta pushed a change to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git


    from 35d62a6d4a3 Add sensible default value to attachment-max-size property (#3188)
     new 3e9129ec06c Bump cxf.maven.core.version from 3.9.15 to 3.9.16 (#3122)
     new 49270ece74c Update ASM to 9.10
     new 0972d65a1da Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.2 to 3.6.3 (#3129)
     new 4cd78863fb9 Bump jaxen:jaxen from 2.0.2 to 2.0.3 (#3130)
     new 58d607d0473 Update Netty to 4.1.134.Final
     new c95925853a8 Bump org.ow2.asm:asm from 9.10 to 9.10.1 (#3156)
     new 043d561f2bf Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.5 to 3.5.6 (#3160)
     new 4aabc20cfa6 Bump org.apache.maven.plugins:maven-surefire-report-plugin (#3163)
     new 530435a1547 Update Netty to 4.1.135.Final
     new bbe2048f452 Bump cxf.dropwizard4.version from 4.2.38 to 4.2.39 (#3173)
     new 6be03344186 Bump org.webjars:swagger-ui from 5.32.5 to 5.32.6 (#3179)
     new d4e4e14f50f Update Jackson to 2.22.0
     new 4a4dd99b9dd Bump org.graalvm.buildtools:native-maven-plugin from 1.1.0 to 1.1.1 (#3189)
     new 76f472c678c Bump org.apache.maven.plugins:maven-dependency-plugin (#3202)
     new 90b446a0f9e Bump jaxen:jaxen from 2.0.5 to 2.0.6 (#3208)
     new d1a0b35f8f5 Bump com.unboundid:unboundid-ldapsdk from 7.0.4 to 7.0.5 (#3229)
     new 43016a141d4 Bump org.codehaus.plexus:plexus-archiver from 4.11.0 to 4.12.0 (#3228)
     new 5c4564f09a9 Bump io.swagger.core.v3:swagger-jaxrs2-jakarta from 2.2.50 to 2.2.51 (#3233)
     new 107d8d04c6b Bump cxf.openfeign.version from 13.12 to 13.13 (#3239)
     new 1d1e0d8d529 Update Swagger Core to 2.2.52

The 20 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.


Summary of changes:
 .../release/samples/jax_rs/graalvm_basic/pom.xml   |  4 ++--
 .../src/main/release/samples/jaxws_graalvm/pom.xml |  4 ++--
 .../samples/jaxws_graalvm_dynamic/client/pom.xml   |  2 +-
 .../samples/jaxws_graalvm_dynamic/server/pom.xml   |  2 +-
 distribution/src/main/release/samples/pom.xml      |  8 ++++----
 parent/pom.xml                                     | 24 +++++++++++-----------
 pom.xml                                            |  8 ++++----
 7 files changed, 26 insertions(+), 26 deletions(-)


(cxf) 10/20: Bump cxf.dropwizard4.version from 4.2.38 to 4.2.39 (#3173)

Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git

commit bbe2048f452bceda0c9c2287b34407dd7f4aff55
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Wed Jun 3 19:12:21 2026 -0400

    Bump cxf.dropwizard4.version from 4.2.38 to 4.2.39 (#3173)
    
    Bumps `cxf.dropwizard4.version` from 4.2.38 to 4.2.39.
    
    Updates `io.dropwizard.metrics:metrics-core` from 4.2.38 to 4.2.39
    - [Release notes](https://github.com/dropwizard/metrics/releases)
    - [Commits](https://github.com/dropwizard/metrics/compare/v4.2.38...v4.2.39)
    
    Updates `io.dropwizard.metrics:metrics-jmx` from 4.2.38 to 4.2.39
    - [Release notes](https://github.com/dropwizard/metrics/releases)
    - [Commits](https://github.com/dropwizard/metrics/compare/v4.2.38...v4.2.39)
    
    ---
    updated-dependencies:
    - dependency-name: io.dropwizard.metrics:metrics-core
      dependency-version: 4.2.39
      dependency-type: direct:production
      update-type: version-update:semver-patch
    - dependency-name: io.dropwizard.metrics:metrics-jmx
      dependency-version: 4.2.39
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <su...@github.com>
    Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
    (cherry picked from commit f49e6126c892ec49b1e9f65a12d80088be8dc5ba)
    
    # Conflicts:
    #       parent/pom.xml
---
 parent/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/parent/pom.xml b/parent/pom.xml
index b59ec9b01e8..e63ea92f3a5 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -102,7 +102,7 @@
         <cxf.derby.version>10.15.2.0</cxf.derby.version>
         <cxf.dom4j.version>2.1.4</cxf.dom4j.version>
         <cxf.dropwizard3.version>3.2.6</cxf.dropwizard3.version>
-        <cxf.dropwizard4.version>4.2.38</cxf.dropwizard4.version>
+        <cxf.dropwizard4.version>4.2.39</cxf.dropwizard4.version>
         <cxf.ehcache3.version>3.10.8</cxf.ehcache3.version>
         <cxf.el-api.version>3.0.3</cxf.el-api.version>
         <cxf.findbugs.version>3.0.2</cxf.findbugs.version>


(cxf) 19/20: Bump cxf.openfeign.version from 13.12 to 13.13 (#3239)

Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git

commit 107d8d04c6b4b613c4ad5a0d572e470f5d8de5da
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Fri Jun 19 11:21:47 2026 -0400

    Bump cxf.openfeign.version from 13.12 to 13.13 (#3239)
    
    Bumps `cxf.openfeign.version` from 13.12 to 13.13.
    
    Updates `io.github.openfeign:feign-core` from 13.12 to 13.13
    - [Release notes](https://github.com/openfeign/feign/releases)
    - [Changelog](https://github.com/OpenFeign/feign/blob/master/CHANGELOG.md)
    - [Commits](https://github.com/openfeign/feign/compare/13.12...13.13)
    
    Updates `io.github.openfeign:feign-httpclient` from 13.12 to 13.13
    - [Release notes](https://github.com/openfeign/feign/releases)
    - [Changelog](https://github.com/OpenFeign/feign/blob/master/CHANGELOG.md)
    - [Commits](https://github.com/openfeign/feign/compare/13.12...13.13)
    
    Updates `io.github.openfeign:feign-micrometer` from 13.12 to 13.13
    - [Release notes](https://github.com/openfeign/feign/releases)
    - [Changelog](https://github.com/OpenFeign/feign/blob/master/CHANGELOG.md)
    - [Commits](https://github.com/openfeign/feign/compare/13.12...13.13)
    
    ---
    updated-dependencies:
    - dependency-name: io.github.openfeign:feign-core
      dependency-version: '13.13'
      dependency-type: direct:production
      update-type: version-update:semver-minor
    - dependency-name: io.github.openfeign:feign-httpclient
      dependency-version: '13.13'
      dependency-type: direct:production
      update-type: version-update:semver-minor
    - dependency-name: io.github.openfeign:feign-micrometer
      dependency-version: '13.13'
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...
    
    Signed-off-by: dependabot[bot] <su...@github.com>
    Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
    (cherry picked from commit bb10fd89781c836eabe921da12a1abbb2da5cb9c)
---
 distribution/src/main/release/samples/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/distribution/src/main/release/samples/pom.xml b/distribution/src/main/release/samples/pom.xml
index 029d41cdc44..af9eef1305e 100644
--- a/distribution/src/main/release/samples/pom.xml
+++ b/distribution/src/main/release/samples/pom.xml
@@ -43,7 +43,7 @@
         <cxf.brave.version>5.17.0</cxf.brave.version>
         <cxf.camel.version>3.21.1</cxf.camel.version>
         <cxf.olingo.version>4.10.0</cxf.olingo.version>
-        <cxf.openfeign.version>13.12</cxf.openfeign.version>
+        <cxf.openfeign.version>13.13</cxf.openfeign.version>
     </properties>
     <dependencies>
         <dependency>


(cxf) 20/20: Update Swagger Core to 2.2.52

Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git

commit 1d1e0d8d5299324e8e0f23ae19d37444e5d56605
Author: Andriy Redko <dr...@gmail.com>
AuthorDate: Wed Jun 24 10:02:19 2026 -0400

    Update Swagger Core to 2.2.52
    
    (cherry picked from commit ef1684d398f0c8151f002e35f57c66f517a8fcb2)
---
 parent/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/parent/pom.xml b/parent/pom.xml
index e0e0e22a19a..2c74ca3964e 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -212,7 +212,7 @@
         <cxf.spring.version>5.3.39</cxf.spring.version>
         <cxf.stax-ex.version>1.8.3</cxf.stax-ex.version>
         <cxf.swagger.ui.version>5.32.6</cxf.swagger.ui.version>
-        <cxf.swagger.v3.version>2.2.51</cxf.swagger.v3.version>
+        <cxf.swagger.v3.version>2.2.52</cxf.swagger.v3.version>
         <cxf.swagger2.version>1.6.15</cxf.swagger2.version>
         <cxf.swagger2.guava.version>32.1.3-jre</cxf.swagger2.guava.version>
         <cxf.swagger2.guava.failureaccess.version>1.0.1</cxf.swagger2.guava.failureaccess.version>


(cxf) 04/20: Bump jaxen:jaxen from 2.0.2 to 2.0.3 (#3130)

Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git

commit 4cd78863fb907519d7390bf0c40ab51e2bdbd16f
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Thu May 21 07:27:22 2026 -0400

    Bump jaxen:jaxen from 2.0.2 to 2.0.3 (#3130)
    
    Bumps [jaxen:jaxen](https://github.com/jaxen-xpath/jaxen) from 2.0.2 to 2.0.3.
    - [Release notes](https://github.com/jaxen-xpath/jaxen/releases)
    - [Commits](https://github.com/jaxen-xpath/jaxen/compare/v2.0.2...v2.0.3)
    
    ---
    updated-dependencies:
    - dependency-name: jaxen:jaxen
      dependency-version: 2.0.3
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <su...@github.com>
    Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
    (cherry picked from commit 2ac45fd1d732b7cdd171cb455444ab908358d731)
---
 parent/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/parent/pom.xml b/parent/pom.xml
index 2400e1a595f..87fb5d7d078 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -146,7 +146,7 @@
         <cxf.jaxb.runtime.version>2.3.5</cxf.jaxb.runtime.version>
         <cxf.jaxb.version>2.3.3</cxf.jaxb.version>
         <cxf.jaxb.xjc.version>${cxf.jaxb.runtime.version}</cxf.jaxb.xjc.version>
-        <cxf.jaxen.version>2.0.1</cxf.jaxen.version>
+        <cxf.jaxen.version>2.0.3</cxf.jaxen.version>
         <cxf.jboss.logging.version>3.6.3.Final</cxf.jboss.logging.version>
         <cxf.jboss.weld.version>3.1.7.SP1</cxf.jboss.weld.version>
         <cxf.jcache.version>1.1.1</cxf.jcache.version>


(cxf) 15/20: Bump jaxen:jaxen from 2.0.5 to 2.0.6 (#3208)

Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git

commit 90b446a0f9e0ffb37d6cf07786ea39eee2e88c9a
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Fri Jun 12 13:15:11 2026 -0400

    Bump jaxen:jaxen from 2.0.5 to 2.0.6 (#3208)
    
    Bumps [jaxen:jaxen](https://github.com/jaxen-xpath/jaxen) from 2.0.5 to 2.0.6.
    - [Release notes](https://github.com/jaxen-xpath/jaxen/releases)
    - [Commits](https://github.com/jaxen-xpath/jaxen/compare/v2.0.5...v2.0.6)
    
    ---
    updated-dependencies:
    - dependency-name: jaxen:jaxen
      dependency-version: 2.0.6
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <su...@github.com>
    Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
    (cherry picked from commit 26d3f23bd795c580ef44f66a3e87709158e34f50)
---
 parent/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/parent/pom.xml b/parent/pom.xml
index 0f6970e2705..8060269bf5a 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -146,7 +146,7 @@
         <cxf.jaxb.runtime.version>2.3.5</cxf.jaxb.runtime.version>
         <cxf.jaxb.version>2.3.3</cxf.jaxb.version>
         <cxf.jaxb.xjc.version>${cxf.jaxb.runtime.version}</cxf.jaxb.xjc.version>
-        <cxf.jaxen.version>2.0.3</cxf.jaxen.version>
+        <cxf.jaxen.version>2.0.6</cxf.jaxen.version>
         <cxf.jboss.logging.version>3.6.3.Final</cxf.jboss.logging.version>
         <cxf.jboss.weld.version>3.1.7.SP1</cxf.jboss.weld.version>
         <cxf.jcache.version>1.1.1</cxf.jcache.version>


(cxf) 14/20: Bump org.apache.maven.plugins:maven-dependency-plugin (#3202)

Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git

commit 76f472c678c41576b65105ebc99993a6d62285b5
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Wed Jun 10 09:14:37 2026 -0400

    Bump org.apache.maven.plugins:maven-dependency-plugin (#3202)
    
    Bumps [org.apache.maven.plugins:maven-dependency-plugin](https://github.com/apache/maven-dependency-plugin) from 3.10.0 to 3.11.0.
    - [Release notes](https://github.com/apache/maven-dependency-plugin/releases)
    - [Commits](https://github.com/apache/maven-dependency-plugin/compare/maven-dependency-plugin-3.10.0...maven-dependency-plugin-3.11.0)
    
    ---
    updated-dependencies:
    - dependency-name: org.apache.maven.plugins:maven-dependency-plugin
      dependency-version: 3.11.0
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...
    
    Signed-off-by: dependabot[bot] <su...@github.com>
    Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
    (cherry picked from commit 67cd317ef83e786376672b6d0180d1843c4f4562)
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index f7681175599..506a8d7690c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -555,7 +555,7 @@
                 <plugin>
                     <groupId>org.apache.maven.plugins</groupId>
                     <artifactId>maven-dependency-plugin</artifactId>
-                    <version>3.10.0</version>
+                    <version>3.11.0</version>
                 </plugin>
                 <plugin>
                     <groupId>org.apache.maven.plugins</groupId>


(cxf) 11/20: Bump org.webjars:swagger-ui from 5.32.5 to 5.32.6 (#3179)

Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git

commit 6be0334418639ae7b92384e6f287e739eda33fd1
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Thu Jun 4 07:23:45 2026 -0400

    Bump org.webjars:swagger-ui from 5.32.5 to 5.32.6 (#3179)
    
    Bumps [org.webjars:swagger-ui](https://github.com/swagger-api/swagger-ui) from 5.32.5 to 5.32.6.
    - [Release notes](https://github.com/swagger-api/swagger-ui/releases)
    - [Commits](https://github.com/swagger-api/swagger-ui/compare/v5.32.5...v5.32.6)
    
    ---
    updated-dependencies:
    - dependency-name: org.webjars:swagger-ui
      dependency-version: 5.32.6
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <su...@github.com>
    Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
    (cherry picked from commit 5de63cbc5228a3b5809e26e1dbaf77eb2740ce93)
---
 distribution/src/main/release/samples/pom.xml | 2 +-
 parent/pom.xml                                | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/distribution/src/main/release/samples/pom.xml b/distribution/src/main/release/samples/pom.xml
index 58ecb15888f..029d41cdc44 100644
--- a/distribution/src/main/release/samples/pom.xml
+++ b/distribution/src/main/release/samples/pom.xml
@@ -35,7 +35,7 @@
         <cxf.jetty10.version>10.0.26</cxf.jetty10.version>
         <cxf.netty.version>4.1.135.Final</cxf.netty.version>
         <cxf.httpcomponents.client.version>4.5.14</cxf.httpcomponents.client.version>
-        <cxf.swagger.ui.version>5.32.5</cxf.swagger.ui.version>
+        <cxf.swagger.ui.version>5.32.6</cxf.swagger.ui.version>
         <cxf.tika.version>2.9.1</cxf.tika.version>
         <cxf.tomcat.version>9.0.119</cxf.tomcat.version>
         <cxf.lucene.version>9.12.3</cxf.lucene.version>
diff --git a/parent/pom.xml b/parent/pom.xml
index e63ea92f3a5..69924950a63 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -211,7 +211,7 @@
         <cxf.spring.security.version>5.8.16</cxf.spring.security.version>
         <cxf.spring.version>5.3.39</cxf.spring.version>
         <cxf.stax-ex.version>1.8.3</cxf.stax-ex.version>
-        <cxf.swagger.ui.version>5.32.5</cxf.swagger.ui.version>
+        <cxf.swagger.ui.version>5.32.6</cxf.swagger.ui.version>
         <cxf.swagger.v3.version>2.2.50</cxf.swagger.v3.version>
         <cxf.swagger2.version>1.6.15</cxf.swagger2.version>
         <cxf.swagger2.guava.version>32.1.3-jre</cxf.swagger2.guava.version>


(cxf) 17/20: Bump org.codehaus.plexus:plexus-archiver from 4.11.0 to 4.12.0 (#3228)

Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git

commit 43016a141d4d1a40ac0e9db8f07bd65663d925d0
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Wed Jun 17 13:05:46 2026 -0400

    Bump org.codehaus.plexus:plexus-archiver from 4.11.0 to 4.12.0 (#3228)
    
    Bumps [org.codehaus.plexus:plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver) from 4.11.0 to 4.12.0.
    - [Release notes](https://github.com/codehaus-plexus/plexus-archiver/releases)
    - [Changelog](https://github.com/codehaus-plexus/plexus-archiver/blob/master/ReleaseNotes.md)
    - [Commits](https://github.com/codehaus-plexus/plexus-archiver/compare/plexus-archiver-4.11.0...plexus-archiver-4.12.0)
    
    ---
    updated-dependencies:
    - dependency-name: org.codehaus.plexus:plexus-archiver
      dependency-version: 4.12.0
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...
    
    Signed-off-by: dependabot[bot] <su...@github.com>
    Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
    (cherry picked from commit 07f2405c4b4950f46ac11e85538eac28a613292a)
---
 parent/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/parent/pom.xml b/parent/pom.xml
index d708101d2f2..7c0c684305a 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -189,7 +189,7 @@
         <cxf.opentracing.version>0.33.0</cxf.opentracing.version>
         <cxf.openwebbeans.version>2.0.28</cxf.openwebbeans.version>
         <cxf.persistence-api.version>2.2.3</cxf.persistence-api.version>
-        <cxf.plexus-archiver.version>4.11.0</cxf.plexus-archiver.version>
+        <cxf.plexus-archiver.version>4.12.0</cxf.plexus-archiver.version>
         <cxf.plexus-utils.version>3.5.1</cxf.plexus-utils.version>
         <cxf.reactivestreams.version>1.0.4</cxf.reactivestreams.version>
         <cxf.reactor.version>3.5.20</cxf.reactor.version>


(cxf) 05/20: Update Netty to 4.1.134.Final

Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git

commit 58d607d0473ad0b03d5902a060e5668d1bdfc744
Author: Andriy Redko <dr...@gmail.com>
AuthorDate: Thu May 21 14:26:34 2026 -0400

    Update Netty to 4.1.134.Final
---
 distribution/src/main/release/samples/pom.xml | 2 +-
 parent/pom.xml                                | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/distribution/src/main/release/samples/pom.xml b/distribution/src/main/release/samples/pom.xml
index b79b179ff8e..6c589d7b211 100644
--- a/distribution/src/main/release/samples/pom.xml
+++ b/distribution/src/main/release/samples/pom.xml
@@ -33,7 +33,7 @@
         <cxf.spring.boot.version>2.7.18</cxf.spring.boot.version>
         <cxf.spring.cloud.eureka.version>3.1.7</cxf.spring.cloud.eureka.version>
         <cxf.jetty10.version>10.0.26</cxf.jetty10.version>
-        <cxf.netty.version>4.1.133.Final</cxf.netty.version>
+        <cxf.netty.version>4.1.134.Final</cxf.netty.version>
         <cxf.httpcomponents.client.version>4.5.14</cxf.httpcomponents.client.version>
         <cxf.swagger.ui.version>5.32.5</cxf.swagger.ui.version>
         <cxf.tika.version>2.9.1</cxf.tika.version>
diff --git a/parent/pom.xml b/parent/pom.xml
index 87fb5d7d078..74f6ab1a7e3 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -178,7 +178,7 @@
         <cxf.msv.version>2022.7</cxf.msv.version>
         <cxf.neethi.version>3.2.2</cxf.neethi.version>
         <cxf.netty.version.range>[4,5)</cxf.netty.version.range>
-        <cxf.netty.version>4.1.133.Final</cxf.netty.version>
+        <cxf.netty.version>4.1.134.Final</cxf.netty.version>
         <cxf.netty.tcnative.version>2.0.69.Final</cxf.netty.tcnative.version>
         <cxf.olingo.version>2.0.13</cxf.olingo.version>
         <cxf.openjpa.version>3.2.2</cxf.openjpa.version>


(cxf) 13/20: Bump org.graalvm.buildtools:native-maven-plugin from 1.1.0 to 1.1.1 (#3189)

Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git

commit 4a4dd99b9dd2006211c9f367f840b853126891dc
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Mon Jun 8 09:18:07 2026 -0400

    Bump org.graalvm.buildtools:native-maven-plugin from 1.1.0 to 1.1.1 (#3189)
    
    Bumps [org.graalvm.buildtools:native-maven-plugin](https://github.com/graalvm/native-build-tools) from 1.1.0 to 1.1.1.
    - [Release notes](https://github.com/graalvm/native-build-tools/releases)
    - [Commits](https://github.com/graalvm/native-build-tools/compare/1.1.0...1.1.1)
    
    ---
    updated-dependencies:
    - dependency-name: org.graalvm.buildtools:native-maven-plugin
      dependency-version: 1.1.1
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <su...@github.com>
    Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
    (cherry picked from commit 58d9bac496692ccca1945a467b368ec8997e3eef)
---
 distribution/src/main/release/samples/jax_rs/graalvm_basic/pom.xml    | 4 ++--
 distribution/src/main/release/samples/jaxws_graalvm/pom.xml           | 4 ++--
 .../src/main/release/samples/jaxws_graalvm_dynamic/client/pom.xml     | 2 +-
 .../src/main/release/samples/jaxws_graalvm_dynamic/server/pom.xml     | 2 +-
 4 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/distribution/src/main/release/samples/jax_rs/graalvm_basic/pom.xml b/distribution/src/main/release/samples/jax_rs/graalvm_basic/pom.xml
index 1873faf31bc..80bf40650e9 100644
--- a/distribution/src/main/release/samples/jax_rs/graalvm_basic/pom.xml
+++ b/distribution/src/main/release/samples/jax_rs/graalvm_basic/pom.xml
@@ -68,7 +68,7 @@
                     <plugin>
                         <groupId>org.graalvm.buildtools</groupId>
                         <artifactId>native-maven-plugin</artifactId>
-                        <version>1.1.0</version>
+                        <version>1.1.1</version>
                         <executions>
                             <execution>
                                 <goals>
@@ -126,7 +126,7 @@
                     <plugin>
                         <groupId>org.graalvm.buildtools</groupId>
                         <artifactId>native-maven-plugin</artifactId>
-                        <version>1.1.0</version>
+                        <version>1.1.1</version>
                         <executions>
                             <execution>
                                 <goals>
diff --git a/distribution/src/main/release/samples/jaxws_graalvm/pom.xml b/distribution/src/main/release/samples/jaxws_graalvm/pom.xml
index d0c5373bf56..eb1ae0fad9d 100644
--- a/distribution/src/main/release/samples/jaxws_graalvm/pom.xml
+++ b/distribution/src/main/release/samples/jaxws_graalvm/pom.xml
@@ -93,7 +93,7 @@
                     <plugin>
                         <groupId>org.graalvm.buildtools</groupId>
                         <artifactId>native-maven-plugin</artifactId>
-                        <version>1.1.0</version>
+                        <version>1.1.1</version>
                         <executions>
                             <execution>
                                 <goals>
@@ -147,7 +147,7 @@
                     <plugin>
                         <groupId>org.graalvm.buildtools</groupId>
                         <artifactId>native-maven-plugin</artifactId>
-                        <version>1.1.0</version>
+                        <version>1.1.1</version>
                         <executions>
                             <execution>
                                 <goals>
diff --git a/distribution/src/main/release/samples/jaxws_graalvm_dynamic/client/pom.xml b/distribution/src/main/release/samples/jaxws_graalvm_dynamic/client/pom.xml
index 5716ec0455c..b1b876ff320 100644
--- a/distribution/src/main/release/samples/jaxws_graalvm_dynamic/client/pom.xml
+++ b/distribution/src/main/release/samples/jaxws_graalvm_dynamic/client/pom.xml
@@ -41,7 +41,7 @@
                     <plugin>
                         <groupId>org.graalvm.buildtools</groupId>
                         <artifactId>native-maven-plugin</artifactId>
-                        <version>1.1.0</version>
+                        <version>1.1.1</version>
                         <executions>
                             <execution>
                                 <goals>
diff --git a/distribution/src/main/release/samples/jaxws_graalvm_dynamic/server/pom.xml b/distribution/src/main/release/samples/jaxws_graalvm_dynamic/server/pom.xml
index 46edfad09e1..cafb30c185c 100644
--- a/distribution/src/main/release/samples/jaxws_graalvm_dynamic/server/pom.xml
+++ b/distribution/src/main/release/samples/jaxws_graalvm_dynamic/server/pom.xml
@@ -68,7 +68,7 @@
                     <plugin>
                         <groupId>org.graalvm.buildtools</groupId>
                         <artifactId>native-maven-plugin</artifactId>
-                        <version>1.1.0</version>
+                        <version>1.1.1</version>
                         <executions>
                             <execution>
                                 <goals>


(cxf) 18/20: Bump io.swagger.core.v3:swagger-jaxrs2-jakarta from 2.2.50 to 2.2.51 (#3233)

Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git

commit 5c4564f09a92253258c284b7b83af06adefb5439
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Wed Jun 17 23:57:41 2026 -0400

    Bump io.swagger.core.v3:swagger-jaxrs2-jakarta from 2.2.50 to 2.2.51 (#3233)
    
    Bumps io.swagger.core.v3:swagger-jaxrs2-jakarta from 2.2.50 to 2.2.51.
    
    ---
    updated-dependencies:
    - dependency-name: io.swagger.core.v3:swagger-jaxrs2-jakarta
      dependency-version: 2.2.51
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <su...@github.com>
    Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
    (cherry picked from commit ed6055dd4b5f23b6f8ece864d3ead3be55be6720)
---
 parent/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/parent/pom.xml b/parent/pom.xml
index 7c0c684305a..e0e0e22a19a 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -212,7 +212,7 @@
         <cxf.spring.version>5.3.39</cxf.spring.version>
         <cxf.stax-ex.version>1.8.3</cxf.stax-ex.version>
         <cxf.swagger.ui.version>5.32.6</cxf.swagger.ui.version>
-        <cxf.swagger.v3.version>2.2.50</cxf.swagger.v3.version>
+        <cxf.swagger.v3.version>2.2.51</cxf.swagger.v3.version>
         <cxf.swagger2.version>1.6.15</cxf.swagger2.version>
         <cxf.swagger2.guava.version>32.1.3-jre</cxf.swagger2.guava.version>
         <cxf.swagger2.guava.failureaccess.version>1.0.1</cxf.swagger2.guava.failureaccess.version>


(cxf) 07/20: Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.5 to 3.5.6 (#3160)

Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git

commit 043d561f2bff2b110eb4f1842df7f15a8a5a4621
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Mon Jun 1 07:16:33 2026 -0400

    Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.5 to 3.5.6 (#3160)
    
    Bumps [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) from 3.5.5 to 3.5.6.
    - [Release notes](https://github.com/apache/maven-surefire/releases)
    - [Commits](https://github.com/apache/maven-surefire/compare/surefire-3.5.5...surefire-3.5.6)
    
    ---
    updated-dependencies:
    - dependency-name: org.apache.maven.plugins:maven-surefire-plugin
      dependency-version: 3.5.6
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <su...@github.com>
    Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
    (cherry picked from commit c5193b004e53a4caa3176bd1dbe56bc57b5ca65f)
---
 distribution/src/main/release/samples/pom.xml | 2 +-
 pom.xml                                       | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/distribution/src/main/release/samples/pom.xml b/distribution/src/main/release/samples/pom.xml
index 6c589d7b211..fb2d2ff1143 100644
--- a/distribution/src/main/release/samples/pom.xml
+++ b/distribution/src/main/release/samples/pom.xml
@@ -224,7 +224,7 @@
                 <plugin>
                     <groupId>org.apache.maven.plugins</groupId>
                     <artifactId>maven-surefire-plugin</artifactId>
-                    <version>3.5.5</version>
+                    <version>3.5.6</version>
                 </plugin>
                 <plugin>
                     <groupId>org.apache.maven.plugins</groupId>
diff --git a/pom.xml b/pom.xml
index 5c97bf17711..7c0b543f037 100644
--- a/pom.xml
+++ b/pom.xml
@@ -496,7 +496,7 @@
                 <plugin>
                     <groupId>org.apache.maven.plugins</groupId>
                     <artifactId>maven-surefire-plugin</artifactId>
-                    <version>3.5.5</version>
+                    <version>3.5.6</version>
                 </plugin>
                 <plugin>
                     <groupId>org.apache.maven.plugins</groupId>


(cxf) 12/20: Update Jackson to 2.22.0

Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git

commit d4e4e14f50f7f53eeacdc3473c65f608b08a5b4f
Author: Andriy Redko <dr...@gmail.com>
AuthorDate: Thu Jun 4 18:26:56 2026 -0400

    Update Jackson to 2.22.0
---
 parent/pom.xml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/parent/pom.xml b/parent/pom.xml
index 69924950a63..0f6970e2705 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -128,9 +128,9 @@
         <cxf.httpcomponents.core.version>4.4.16</cxf.httpcomponents.core.version>
         <cxf.httpcomponents.client5.version>5.3.1</cxf.httpcomponents.client5.version>
         <cxf.httpcomponents.core5.version>5.2.5</cxf.httpcomponents.core5.version>
-        <cxf.jackson.version>2.21.3</cxf.jackson.version>
-        <cxf.jackson.databind.version>2.21.3</cxf.jackson.databind.version>
-        <cxf.jackson.annotations.version>2.21</cxf.jackson.annotations.version>
+        <cxf.jackson.version>2.22.0</cxf.jackson.version>
+        <cxf.jackson.databind.version>2.22.0</cxf.jackson.databind.version>
+        <cxf.jackson.annotations.version>2.22</cxf.jackson.annotations.version>
         <cxf.jacorb.version>3.9</cxf.jacorb.version>
         <cxf.jaeger.version>1.8.1</cxf.jaeger.version>
         <cxf.jakarta.activation.version>1.2.2</cxf.jakarta.activation.version>


(cxf) 02/20: Update ASM to 9.10

Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git

commit 49270ece74c26cc1afe1660b6a27e0d55cf6bf7a
Author: Andriy Redko <dr...@gmail.com>
AuthorDate: Fri May 15 08:49:11 2026 -0400

    Update ASM to 9.10
    
    (cherry picked from commit 1859331272ceb5b67d9a5c120df0a1e17fb7702a)
---
 parent/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/parent/pom.xml b/parent/pom.xml
index 0a3d9491d61..2400e1a595f 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -56,7 +56,7 @@
         <!-- stuff related to ASM -->
         <cxf.asm.groupId>org.ow2.asm</cxf.asm.groupId>
         <cxf.asm.artifactId>asm</cxf.asm.artifactId>
-        <cxf.asm.version>9.9.1</cxf.asm.version>
+        <cxf.asm.version>9.10</cxf.asm.version>
         <cxf.osgi.asm.version>[3.0,10)</cxf.osgi.asm.version>
         <!-- OSGi related properties -->
         <cxf.fragment.host />


(cxf) 03/20: Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.2 to 3.6.3 (#3129)

Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git

commit 0972d65a1da2bfe1c054bb96bef368fa72e89e81
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Thu May 21 07:27:01 2026 -0400

    Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.2 to 3.6.3 (#3129)
    
    Bumps [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer) from 3.6.2 to 3.6.3.
    - [Release notes](https://github.com/apache/maven-enforcer/releases)
    - [Commits](https://github.com/apache/maven-enforcer/compare/enforcer-3.6.2...enforcer-3.6.3)
    
    ---
    updated-dependencies:
    - dependency-name: org.apache.maven.plugins:maven-enforcer-plugin
      dependency-version: 3.6.3
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <su...@github.com>
    Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
    (cherry picked from commit 5fbaf3f6e6921e7526a1a1d0be2b064235219374)
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index f49c84ea4ec..5c97bf17711 100644
--- a/pom.xml
+++ b/pom.xml
@@ -657,7 +657,7 @@
                 <plugin>
                     <groupId>org.apache.maven.plugins</groupId>
                     <artifactId>maven-enforcer-plugin</artifactId>
-                    <version>3.6.2</version>
+                    <version>3.6.3</version>
                     <configuration>
                         <rules>
                             <requireJavaVersion>


(cxf) 06/20: Bump org.ow2.asm:asm from 9.10 to 9.10.1 (#3156)

Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git

commit c95925853a84318ed303f292304dde08c18caa37
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Fri May 29 00:20:50 2026 -0400

    Bump org.ow2.asm:asm from 9.10 to 9.10.1 (#3156)
    
    Bumps org.ow2.asm:asm from 9.10 to 9.10.1.
    
    ---
    updated-dependencies:
    - dependency-name: org.ow2.asm:asm
      dependency-version: 9.10.1
      dependency-type: direct:development
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <su...@github.com>
    Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
    (cherry picked from commit 89de93dc00a1a44feaa6f2e1743155432f4ea573)
---
 parent/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/parent/pom.xml b/parent/pom.xml
index 74f6ab1a7e3..3a24a853aec 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -56,7 +56,7 @@
         <!-- stuff related to ASM -->
         <cxf.asm.groupId>org.ow2.asm</cxf.asm.groupId>
         <cxf.asm.artifactId>asm</cxf.asm.artifactId>
-        <cxf.asm.version>9.10</cxf.asm.version>
+        <cxf.asm.version>9.10.1</cxf.asm.version>
         <cxf.osgi.asm.version>[3.0,10)</cxf.osgi.asm.version>
         <!-- OSGi related properties -->
         <cxf.fragment.host />


(cxf) 01/20: Bump cxf.maven.core.version from 3.9.15 to 3.9.16 (#3122)

Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git

commit 3e9129ec06c23230e9e4365181090bb5471624a6
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Tue May 19 13:47:15 2026 -0400

    Bump cxf.maven.core.version from 3.9.15 to 3.9.16 (#3122)
    
    Bumps `cxf.maven.core.version` from 3.9.15 to 3.9.16.
    
    Updates `org.apache.maven:maven-compat` from 3.9.15 to 3.9.16
    - [Release notes](https://github.com/apache/maven/releases)
    - [Commits](https://github.com/apache/maven/compare/maven-3.9.15...maven-3.9.16)
    
    Updates `org.apache.maven:maven-plugin-api` from 3.9.15 to 3.9.16
    - [Release notes](https://github.com/apache/maven/releases)
    - [Commits](https://github.com/apache/maven/compare/maven-3.9.15...maven-3.9.16)
    
    Updates `org.apache.maven:maven-artifact` from 3.9.15 to 3.9.16
    
    Updates `org.apache.maven:maven-core` from 3.9.15 to 3.9.16
    
    Updates `org.apache.maven:maven-settings` from 3.9.15 to 3.9.16
    
    ---
    updated-dependencies:
    - dependency-name: org.apache.maven:maven-compat
      dependency-version: 3.9.16
      dependency-type: direct:production
      update-type: version-update:semver-patch
    - dependency-name: org.apache.maven:maven-plugin-api
      dependency-version: 3.9.16
      dependency-type: direct:production
      update-type: version-update:semver-patch
    - dependency-name: org.apache.maven:maven-artifact
      dependency-version: 3.9.16
      dependency-type: direct:production
      update-type: version-update:semver-patch
    - dependency-name: org.apache.maven:maven-core
      dependency-version: 3.9.16
      dependency-type: direct:production
      update-type: version-update:semver-patch
    - dependency-name: org.apache.maven:maven-settings
      dependency-version: 3.9.16
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <su...@github.com>
    Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
---
 parent/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/parent/pom.xml b/parent/pom.xml
index 4fe05ea185d..0a3d9491d61 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -168,7 +168,7 @@
         <cxf.littleproxy.version>1.1.2</cxf.littleproxy.version>
         <cxf.logback.classic.version>1.2.13</cxf.logback.classic.version>
         <cxf.lucene.version>9.12.3</cxf.lucene.version>
-        <cxf.maven.core.version>3.9.14</cxf.maven.core.version>
+        <cxf.maven.core.version>3.9.16</cxf.maven.core.version>
         <cxf.micrometer.version>1.9.17</cxf.micrometer.version>
         <cxf.microprofile.config.version>2.0</cxf.microprofile.config.version>
         <cxf.microprofile.rest.client.version>2.0</cxf.microprofile.rest.client.version>


(cxf) 16/20: Bump com.unboundid:unboundid-ldapsdk from 7.0.4 to 7.0.5 (#3229)

Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git

commit d1a0b35f8f50ba6d42a687915944b6235ec13147
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Wed Jun 17 13:05:29 2026 -0400

    Bump com.unboundid:unboundid-ldapsdk from 7.0.4 to 7.0.5 (#3229)
    
    Bumps [com.unboundid:unboundid-ldapsdk](https://github.com/pingidentity/ldapsdk) from 7.0.4 to 7.0.5.
    - [Release notes](https://github.com/pingidentity/ldapsdk/releases)
    - [Changelog](https://github.com/pingidentity/ldapsdk/blob/master/docs/release-notes.html)
    - [Commits](https://github.com/pingidentity/ldapsdk/commits)
    
    ---
    updated-dependencies:
    - dependency-name: com.unboundid:unboundid-ldapsdk
      dependency-version: 7.0.5
      dependency-type: direct:development
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <su...@github.com>
    Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
    (cherry picked from commit 0513c1ffbeac75bc69b815fc3b6c629b9162100a)
---
 parent/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/parent/pom.xml b/parent/pom.xml
index 8060269bf5a..d708101d2f2 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -164,7 +164,7 @@
         <cxf.junit.version>4.13.2</cxf.junit.version>
         <cxf.junit5.version>5.14.4</cxf.junit5.version>
         <cxf.kerby.version>2.1.1</cxf.kerby.version>
-        <cxf.ldapsdk.version>7.0.4</cxf.ldapsdk.version>
+        <cxf.ldapsdk.version>7.0.5</cxf.ldapsdk.version>
         <cxf.littleproxy.version>1.1.2</cxf.littleproxy.version>
         <cxf.logback.classic.version>1.2.13</cxf.logback.classic.version>
         <cxf.lucene.version>9.12.3</cxf.lucene.version>


(cxf) 08/20: Bump org.apache.maven.plugins:maven-surefire-report-plugin (#3163)

Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git

commit 4aabc20cfa62139fd447b8aa61c27d2631c0d90b
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Mon Jun 1 10:08:08 2026 -0400

    Bump org.apache.maven.plugins:maven-surefire-report-plugin (#3163)
    
    Bumps [org.apache.maven.plugins:maven-surefire-report-plugin](https://github.com/apache/maven-surefire) from 3.5.5 to 3.5.6.
    - [Release notes](https://github.com/apache/maven-surefire/releases)
    - [Commits](https://github.com/apache/maven-surefire/compare/surefire-3.5.5...surefire-3.5.6)
    
    ---
    updated-dependencies:
    - dependency-name: org.apache.maven.plugins:maven-surefire-report-plugin
      dependency-version: 3.5.6
      dependency-type: direct:development
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <su...@github.com>
    Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
    (cherry picked from commit 2013d0056ad80a14772a3914609a0be7d4030368)
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 7c0b543f037..f7681175599 100644
--- a/pom.xml
+++ b/pom.xml
@@ -565,7 +565,7 @@
                 <plugin>
                     <groupId>org.apache.maven.plugins</groupId>
                     <artifactId>maven-surefire-report-plugin</artifactId>
-                    <version>3.5.5</version>
+                    <version>3.5.6</version>
                 </plugin>
                 <plugin>
                     <groupId>org.apache.maven.plugins</groupId>


(cxf) 09/20: Update Netty to 4.1.135.Final

Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git

commit 530435a1547d9d87bbd29059ba587971a7637b3d
Author: Andriy Redko <dr...@gmail.com>
AuthorDate: Tue Jun 2 20:36:56 2026 -0400

    Update Netty to 4.1.135.Final
---
 distribution/src/main/release/samples/pom.xml | 2 +-
 parent/pom.xml                                | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/distribution/src/main/release/samples/pom.xml b/distribution/src/main/release/samples/pom.xml
index fb2d2ff1143..58ecb15888f 100644
--- a/distribution/src/main/release/samples/pom.xml
+++ b/distribution/src/main/release/samples/pom.xml
@@ -33,7 +33,7 @@
         <cxf.spring.boot.version>2.7.18</cxf.spring.boot.version>
         <cxf.spring.cloud.eureka.version>3.1.7</cxf.spring.cloud.eureka.version>
         <cxf.jetty10.version>10.0.26</cxf.jetty10.version>
-        <cxf.netty.version>4.1.134.Final</cxf.netty.version>
+        <cxf.netty.version>4.1.135.Final</cxf.netty.version>
         <cxf.httpcomponents.client.version>4.5.14</cxf.httpcomponents.client.version>
         <cxf.swagger.ui.version>5.32.5</cxf.swagger.ui.version>
         <cxf.tika.version>2.9.1</cxf.tika.version>
diff --git a/parent/pom.xml b/parent/pom.xml
index 3a24a853aec..b59ec9b01e8 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -178,7 +178,7 @@
         <cxf.msv.version>2022.7</cxf.msv.version>
         <cxf.neethi.version>3.2.2</cxf.neethi.version>
         <cxf.netty.version.range>[4,5)</cxf.netty.version.range>
-        <cxf.netty.version>4.1.134.Final</cxf.netty.version>
+        <cxf.netty.version>4.1.135.Final</cxf.netty.version>
         <cxf.netty.tcnative.version>2.0.69.Final</cxf.netty.tcnative.version>
         <cxf.olingo.version>2.0.13</cxf.olingo.version>
         <cxf.openjpa.version>3.2.2</cxf.openjpa.version>