You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@directory.apache.org by gi...@apache.org on 2026/06/10 09:37:03 UTC
(directory-kerby) branch dependabot/maven/slf4j.version-2.0.18 updated (0e74eb715 -> 4603865f9)
This is an automated email from the ASF dual-hosted git repository.
dependabot[bot] pushed a change to branch dependabot/maven/slf4j.version-2.0.18
in repository https://gitbox.apache.org/repos/asf/directory-kerby.git
omit 0e74eb715 Bump slf4j.version from 1.7.36 to 2.0.18
add 33d34d35e Bump github/codeql-action from 4.35.3 to 4.35.4
add 7f86ede34 Merge pull request #665 from apache/dependabot/github_actions/github/codeql-action-4.35.4
add a4386a6c6 Bump netty.version from 4.2.13.Final to 4.2.14.Final
add cbf2a6c5b Merge pull request #666 from apache/dependabot/maven/netty.version-4.2.14.Final
add 60f82f821 Bump github/codeql-action from 4.35.4 to 4.35.5
add fabb6303e Merge pull request #667 from apache/dependabot/github_actions/github/codeql-action-4.35.5
add 4b00eb579 Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.5 to 3.5.6
add 3c94f9e71 Merge pull request #672 from apache/dependabot/maven/org.apache.maven.plugins-maven-surefire-plugin-3.5.6
add d79b423cc Bump ldap.api.version from 2.1.7 to 2.1.8
add 27b59ca8b Merge pull request #671 from apache/dependabot/maven/ldap.api.version-2.1.8
add aba163168 Bump github/codeql-action from 4.35.5 to 4.36.0
add 99f3b606b Merge pull request #673 from apache/dependabot/github_actions/github/codeql-action-4.36.0
add 09e039746 Add/link SECURITY.md + AGENTS.md to the Apache Directory umbrella threat model for discoverability
add 85ec8949f Merge pull request #670 from potiuk/asf-security/discoverability-2026-05-31
add d72a30759 Simplify and explain the JWT functionality in Kerby
add 672c84e35 Merge pull request #679 from apache/coheigea/jwt-signing-changes
add 9b85568b5 DIRKRB-778 - Remove jsch
add 79820d3d9 Improve hardening matching JWT algorithms to verification keys
add 1fa1a03f1 Setting xincludeaware to be false
add 09b2972b4 Harden MySQL realm values
add 256d0db38 Fixing owner permissions on TokenAuthLoginModule cc cache
add a30c1c196 Improving key selection for pre-auth
add 1b8be837f Bump actions/checkout from 6.0.2 to 6.0.3
add fceabfbd3 Merge pull request #678 from apache/dependabot/github_actions/actions/checkout-6.0.3
add 84ba0e6fb Bump netty.version from 4.2.14.Final to 4.2.15.Final
add f158f1d37 Merge pull request #676 from apache/dependabot/maven/netty.version-4.2.15.Final
add 688ed5720 Bump github/codeql-action from 4.36.0 to 4.36.1
add 18e0278fe Merge pull request #677 from apache/dependabot/github_actions/github/codeql-action-4.36.1
add 49d9e1782 Bump com.nimbusds:nimbus-jose-jwt from 10.9 to 10.9.1
add 1365ce2ea Merge pull request #675 from apache/dependabot/maven/com.nimbusds-nimbus-jose-jwt-10.9.1
add 9341e6b2e Updating NOTICE years
add 4603865f9 Bump slf4j.version from 1.7.36 to 2.0.18
This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version. This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:
* -- * -- B -- O -- O -- O (0e74eb715)
\
N -- N -- N refs/heads/dependabot/maven/slf4j.version-2.0.18 (4603865f9)
You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.
Any revisions marked "omit" are not gone; other references still
refer to them. Any revisions marked "discard" are gone forever.
No new revisions were added by this update.
Summary of changes:
.github/workflows/codeql.yml | 8 +-
.github/workflows/pull-request-build.yaml | 2 +-
.github/workflows/scorecards.yml | 4 +-
AGENTS.md | 16 ++
NOTICE | 2 +-
SECURITY.md | 11 ++
.../kdc/identitybackend/MySQLIdentityBackend.java | 18 +-
.../MySQLIdentityBackendRealmValidationTest.java | 50 ++++++
.../org/apache/kerby/config/XmlConfigLoader.java | 6 +-
kerby-dist/kdc-dist/LICENSE | 5 -
kerby-dist/kdc-dist/NOTICE | 2 +-
kerby-dist/kdc-dist/licenses/LICENSE-jsch.txt | 30 ----
kerby-dist/tool-dist/NOTICE | 2 +-
...public_key.pem => token-service_public_key.pem} | 0
...public_key.pem => token-service_public_key.pem} | 0
kerby-kerb/kerb-admin/pom.xml | 5 -
.../kerb/client/jaas/TokenAuthLoginModule.java | 49 ++++--
.../kerby/kerberos/kerb/provider/TokenDecoder.java | 7 +
.../kerby/kerberos/kerb/type/base/KrbToken.java | 17 +-
.../kerb/server/preauth/token/TokenPreauth.java | 23 ++-
.../server/preauth/token/TokenPreauthTest.java | 87 ++++++++++
.../kerberos/provider/token/JwtTokenDecoder.java | 40 ++++-
.../kerby/kerberos/provider/token/TokenTest.java | 188 ++++++++++++++++++++-
parent/pom.xml | 7 +-
pom.xml | 2 +-
25 files changed, 494 insertions(+), 87 deletions(-)
create mode 100644 AGENTS.md
create mode 100644 SECURITY.md
create mode 100644 kerby-backend/mysql-backend/src/test/java/org/apache/kerby/kerberos/kdc/identitybackend/MySQLIdentityBackendRealmValidationTest.java
delete mode 100644 kerby-dist/kdc-dist/licenses/LICENSE-jsch.txt
rename kerby-kerb/integration-test-gss/src/test/resources/{token-service-public_key.pem => token-service_public_key.pem} (100%)
rename kerby-kerb/integration-test/src/test/resources/{token-service-public_key.pem => token-service_public_key.pem} (100%)
create mode 100644 kerby-kerb/kerb-server/src/test/java/org/apache/kerby/kerberos/kerb/server/preauth/token/TokenPreauthTest.java