You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cxf.apache.org by re...@apache.org on 2024/09/05 01:48:57 UTC
(cxf) branch 3.6.x-fixes updated (adc8bce42d -> 2b178ee39f)
This is an automated email from the ASF dual-hosted git repository.
reta pushed a change to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
from adc8bce42d Replace net.java.dev.jaxb2-commons:jaxb-fluent-api with org.jvnet.jaxb2_commons:jaxb2-fluent-api
new c12c6cbf42 Bump org.yaml:snakeyaml from 2.2 to 2.3 (#2041)
new ffd0005a97 Bump github/codeql-action from 3.26.5 to 3.26.6 (#2044)
new 916510c739 Bump com.puppycrawl.tools:checkstyle from 10.18.0 to 10.18.1 (#2047)
new 4c08c7a135 Bump org.owasp:dependency-check-maven from 10.0.3 to 10.0.4 (#2046)
new 7694b0a1c9 Bump org.apache.maven.plugins:maven-dependency-plugin (#2049)
new a40820d697 Recording .gitmergeinfo Changes
new 2b178ee39f Update Jetty to 10.0.24
The 7 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.github/workflows/codeql-analysis.yml | 4 ++--
.gitmergeinfo | 5 +++++
distribution/src/main/release/samples/pom.xml | 2 +-
parent/pom.xml | 6 +++---
pom.xml | 4 ++--
5 files changed, 13 insertions(+), 8 deletions(-)
(cxf) 07/07: Update Jetty to 10.0.24
Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit 2b178ee39f2280756b73c80b98f4beaf9d048f74
Author: Andriy Redko <dr...@gmail.com>
AuthorDate: Wed Sep 4 21:43:29 2024 -0400
Update Jetty to 10.0.24
---
distribution/src/main/release/samples/pom.xml | 2 +-
parent/pom.xml | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/distribution/src/main/release/samples/pom.xml b/distribution/src/main/release/samples/pom.xml
index c7ad45e572..a7271d25a8 100644
--- a/distribution/src/main/release/samples/pom.xml
+++ b/distribution/src/main/release/samples/pom.xml
@@ -32,7 +32,7 @@
<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
<cxf.spring.boot.version>2.7.18</cxf.spring.boot.version>
<cxf.spring.cloud.eureka.version>3.1.7</cxf.spring.cloud.eureka.version>
- <cxf.jetty10.version>10.0.23</cxf.jetty10.version>
+ <cxf.jetty10.version>10.0.24</cxf.jetty10.version>
<cxf.netty.version>4.1.112.Final</cxf.netty.version>
<cxf.httpcomponents.client.version>4.5.14</cxf.httpcomponents.client.version>
<cxf.swagger.ui.version>5.17.14</cxf.swagger.ui.version>
diff --git a/parent/pom.xml b/parent/pom.xml
index 6a6b075f53..dac4c6bc2a 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -152,7 +152,7 @@
<cxf.jdom.version>1.0</cxf.jdom.version>
<cxf.jettison.version>1.5.4</cxf.jettison.version>
<cxf.jetty.osgi.version>[9.2,11)</cxf.jetty.osgi.version>
- <cxf.jetty10.version>10.0.23</cxf.jetty10.version>
+ <cxf.jetty10.version>10.0.24</cxf.jetty10.version>
<cxf.jetty.version>${cxf.jetty10.version}</cxf.jetty.version>
<cxf.jexl.version>3.3</cxf.jexl.version>
<cxf.joda.time.version>2.10.10</cxf.joda.time.version>
(cxf) 02/07: Bump github/codeql-action from 3.26.5 to 3.26.6 (#2044)
Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit ffd0005a974cd47659336883feeb5569f7d43f8d
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Mon Sep 2 11:58:18 2024 -0400
Bump github/codeql-action from 3.26.5 to 3.26.6 (#2044)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.26.5 to 3.26.6.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/2c779ab0d087cd7fe7b826087247c2c81f27bfa6...4dd16135b69a43b6c8efb853346f8437d92d3c93)
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <su...@github.com>
Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
(cherry picked from commit cb60d2f78f5223abf0b985f44c4a75f27b826f85)
# Conflicts:
# .github/workflows/scorecards.yml
(cherry picked from commit 1ae3c632ec4802818118474acd69ae178ded6693)
---
.github/workflows/codeql-analysis.yml | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 03a4ecbc78..27572d60bb 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -61,7 +61,7 @@ jobs:
# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
- uses: github/codeql-action/init@2c779ab0d087cd7fe7b826087247c2c81f27bfa6 # v3.26.5
+ uses: github/codeql-action/init@4dd16135b69a43b6c8efb853346f8437d92d3c93 # v3.26.6
with:
languages: ${{ matrix.language }}
#config-file: ./.github/codeql/codeql-cxf-config.yml
@@ -89,4 +89,4 @@ jobs:
# make release
- name: Perform CodeQL Analysis
- uses: github/codeql-action/analyze@2c779ab0d087cd7fe7b826087247c2c81f27bfa6 # v3.26.5
+ uses: github/codeql-action/analyze@4dd16135b69a43b6c8efb853346f8437d92d3c93 # v3.26.6
(cxf) 04/07: Bump org.owasp:dependency-check-maven from 10.0.3 to 10.0.4 (#2046)
Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit 4c08c7a135e200ea5b59a6dbcbfa694286937cd0
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Tue Sep 3 11:05:56 2024 -0400
Bump org.owasp:dependency-check-maven from 10.0.3 to 10.0.4 (#2046)
Bumps [org.owasp:dependency-check-maven](https://github.com/jeremylong/DependencyCheck) from 10.0.3 to 10.0.4.
- [Release notes](https://github.com/jeremylong/DependencyCheck/releases)
- [Changelog](https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jeremylong/DependencyCheck/compare/v10.0.3...v10.0.4)
---
updated-dependencies:
- dependency-name: org.owasp:dependency-check-maven
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <su...@github.com>
Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
(cherry picked from commit 1b1f7cd3e96a2426d6438f55e1df4d83daa4e858)
(cherry picked from commit 2d04300879cf075de3027f3fb94490b812e2883a)
# Conflicts:
# pom.xml
---
pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/pom.xml b/pom.xml
index c8d48f7493..30096cd1c3 100644
--- a/pom.xml
+++ b/pom.xml
@@ -45,7 +45,7 @@
<cxf.jdk.version>11</cxf.jdk.version>
<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
<site.deploy.url>scp://people.apache.org/www/cxf.apache.org/maven-site</site.deploy.url>
- <maven-owasp-plugin-version>10.0.3</maven-owasp-plugin-version>
+ <maven-owasp-plugin-version>10.0.4</maven-owasp-plugin-version>
</properties>
<distributionManagement>
<repository>
(cxf) 03/07: Bump com.puppycrawl.tools:checkstyle from 10.18.0 to 10.18.1 (#2047)
Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit 916510c739481fa414d2bf0cb0ffee33dd01199b
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Tue Sep 3 11:05:37 2024 -0400
Bump com.puppycrawl.tools:checkstyle from 10.18.0 to 10.18.1 (#2047)
Bumps [com.puppycrawl.tools:checkstyle](https://github.com/checkstyle/checkstyle) from 10.18.0 to 10.18.1.
- [Release notes](https://github.com/checkstyle/checkstyle/releases)
- [Commits](https://github.com/checkstyle/checkstyle/compare/checkstyle-10.18.0...checkstyle-10.18.1)
---
updated-dependencies:
- dependency-name: com.puppycrawl.tools:checkstyle
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <su...@github.com>
Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
(cherry picked from commit 01e049b10f7cc8bc95bedc4482e6be8b292d4a97)
(cherry picked from commit 3d7b918c21bed5a234d97b53a4ece85ce1f1863f)
---
parent/pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/parent/pom.xml b/parent/pom.xml
index 3de1970dab..6a6b075f53 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -397,7 +397,7 @@
<dependency>
<groupId>com.puppycrawl.tools</groupId>
<artifactId>checkstyle</artifactId>
- <version>10.18.0</version>
+ <version>10.18.1</version>
</dependency>
</dependencies>
<configuration>
(cxf) 01/07: Bump org.yaml:snakeyaml from 2.2 to 2.3 (#2041)
Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit c12c6cbf4247670e0f1f6f732bedeedd763320f9
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Mon Sep 2 08:09:43 2024 -0400
Bump org.yaml:snakeyaml from 2.2 to 2.3 (#2041)
Bumps [org.yaml:snakeyaml](https://bitbucket.org/snakeyaml/snakeyaml) from 2.2 to 2.3.
- [Commits](https://bitbucket.org/snakeyaml/snakeyaml/branches/compare/snakeyaml-2.3..snakeyaml-2.2)
---
updated-dependencies:
- dependency-name: org.yaml:snakeyaml
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <su...@github.com>
Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
(cherry picked from commit 7893cecebde71c4e8318450bc60b05ae59f71ff2)
(cherry picked from commit b157cf11ceedaf6f2d850608d4d7404429836d3d)
# Conflicts:
# parent/pom.xml
---
parent/pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/parent/pom.xml b/parent/pom.xml
index 6a7fee4081..3de1970dab 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -201,7 +201,7 @@
<cxf.servlet-api.group>jakarta.servlet</cxf.servlet-api.group>
<cxf.servlet-api.version>4.0.4</cxf.servlet-api.version>
<cxf.slf4j.version>1.7.36</cxf.slf4j.version>
- <cxf.snakeyaml.version>2.2</cxf.snakeyaml.version>
+ <cxf.snakeyaml.version>2.3</cxf.snakeyaml.version>
<cxf.specs.jaxws.api.version>2.3_2</cxf.specs.jaxws.api.version>
<cxf.spring.boot.version>2.7.18</cxf.spring.boot.version>
<cxf.spring.ldap.version>2.4.0</cxf.spring.ldap.version>
(cxf) 06/07: Recording .gitmergeinfo Changes
Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit a40820d697ddef27fb275b592108fdf40bbc446f
Author: Andriy Redko <dr...@gmail.com>
AuthorDate: Wed Sep 4 21:41:49 2024 -0400
Recording .gitmergeinfo Changes
---
.gitmergeinfo | 5 +++++
1 file changed, 5 insertions(+)
diff --git a/.gitmergeinfo b/.gitmergeinfo
index 589bd0c7a2..36ec9985d5 100644
--- a/.gitmergeinfo
+++ b/.gitmergeinfo
@@ -66,6 +66,7 @@ B 3d5564dbff38b782837e291871cd210351acbfc2
B 3f7b2f9d3e4f1d66d0139b4176c6847833f3ea07
B 400ed2294f316c46f5bce5190314e6ab1f504ba8
B 40ad2263e5c080bf3b55542bf3ee052fa7465733
+B 40ed87ef68c72aa827017e4c7ca17e962ea79c4f
B 419e1849157cfe0146227dfc3e8da7c693c71045
B 43e1aa22d5498bc0a324fc57292e241c42e7ea0c
B 448ce7865eae2f20208e238af2ad1e795d359ed7
@@ -317,6 +318,7 @@ M 137d85d477562d122cfc525ce6e7a28f8f67b8b6
M 13b3d763721b7abb4eccd776e5fcf48dd5ebaea6
M 13b63145c3713690d77ecf6d90d73fca22b7816b
M 148b2182e5e0c900d7fe658b50502f1bdc9d21c8
+M 14cc8b5d17702d7a09d36e64df167572247da066
M 14dffc86df075c75517b04da559c74a0001e87a3
M 150d7b3715028f769ea78f9ddd7d7049038504ed
M 153ecb7c32332882843333856ec4323e75d3f0fc
@@ -345,6 +347,7 @@ M 1a3bc6682d9ed7c59068e7abb312a7af847e50fa
M 1a434023d792e352785e0be73815560fcae1efe4
M 1a6e82e9c1d5f15062ab3dabf677ba713c4eafe1
M 1aa37ee19b69b96d4d4dd0313f9ea48b130ac586
+M 1ae3c632ec4802818118474acd69ae178ded6693
M 1b04ad8026a8ad0dcd203ece3e435f50fac681cc
M 1b078aa212ee17050bad33dc7d6f61b22785afad
M 1ba515ec4125aa0f104a251a7b4f386400fa0d95
@@ -430,6 +433,7 @@ M 2c36f60c16c9b7929fab281d920c8be48893215a
M 2c3ffce9ac1f5516229d67bce1deacae8b789d3a
M 2c73505856b6afb071aec6c00e482bfd82a7a7f5
M 2c9be58586580ce1c2e9642a1fb44fa92d109c8a
+M 2d04300879cf075de3027f3fb94490b812e2883a
M 2d1dbd8a9a3dd602653cd7bf7f0106e97fe2e5cd
M 2d5d085df8621805ff33640f7aa43b47d098622d
M 2db882176d45017b2fc53046bdabdd2da53b886f
@@ -968,6 +972,7 @@ M afe5533fd087deac36a73b6b73983c17a7038c0d
M b022662c7cece750534769abe83a6d5ce662cf17
M b065acb970fd12f4a338b37d1e513e0d37ede7ef
M b12b9319e5b563814f20879f29e12fbe25a95258
+M b157cf11ceedaf6f2d850608d4d7404429836d3d
M b15e3580e8f8692b2ffd51e6b2c44ce9dd8a5730
M b1a512265c4a646912ec057eff24eb269e7bfe26
M b1c647659ad5df3c21e83b670fb7ea0ff3dbe889
(cxf) 05/07: Bump org.apache.maven.plugins:maven-dependency-plugin (#2049)
Posted by re...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit 7694b0a1c99fa0e2673a73e540f1d0b8d1912cae
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Wed Sep 4 09:31:07 2024 -0400
Bump org.apache.maven.plugins:maven-dependency-plugin (#2049)
Bumps [org.apache.maven.plugins:maven-dependency-plugin](https://github.com/apache/maven-dependency-plugin) from 3.7.1 to 3.8.0.
- [Release notes](https://github.com/apache/maven-dependency-plugin/releases)
- [Commits](https://github.com/apache/maven-dependency-plugin/compare/maven-dependency-plugin-3.7.1...maven-dependency-plugin-3.8.0)
---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-dependency-plugin
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <su...@github.com>
Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
(cherry picked from commit 4b3d63f66e79ff8ce5beb0137c4400e78d7a065f)
(cherry picked from commit ac6e51c47bf09972f07041c11155fc1f7c6721e1)
---
pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/pom.xml b/pom.xml
index 30096cd1c3..04dc781690 100644
--- a/pom.xml
+++ b/pom.xml
@@ -543,7 +543,7 @@
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-dependency-plugin</artifactId>
- <version>3.7.1</version>
+ <version>3.8.0</version>
</plugin>
<plugin>
<groupId>org.apache.maven.plugins</groupId>