commits  

Messages by Thread

• svn commit: r85228 - dev/struts/7.2.1 lukaszlenart
• (struts) branch release/7.2.1-RC1 updated: [maven-release-plugin] prepare for next development iteration lukaszlenart
• (struts) annotated tag STRUTS_7_2_1 created (now 5063ca224) lukaszlenart
• (struts) branch release/7.2.1-RC1 created (now 8e31112c0) lukaszlenart
  • (struts) 01/01: [maven-release-plugin] prepare release STRUTS_7_2_1 lukaszlenart
• (struts) branch WW-5256-textarea-whitespace-devmode deleted (was 133cbbd5c) lukaszlenart
• (struts) branch main updated: WW-5256 Decouple FreeMarker whitespace stripping from devMode (#1743) lukaszlenart
• svn commit: r85226 - dev/struts/7.2.0 lukaszlenart
• (struts) branch release/7.2.0-RC1 deleted (was 0473df9bc) lukaszlenart
• (struts) branch main updated: Release 7.2.0-RC1 (#1742) lukaszlenart
• (struts) branch WW-5256-textarea-whitespace-devmode created (now 133cbbd5c) lukaszlenart
  • (struts) 03/05: WW-5256 test: prove whitespace stripping wrongly disabled in devMode lukaszlenart
  • (struts) 05/05: WW-5256 docs: drop devMode note from whitespaceStripping constant lukaszlenart
  • (struts) 01/05: WW-5256 docs: design to decouple FreeMarker whitespace stripping from devMode lukaszlenart
  • (struts) 04/05: WW-5256 fix(freemarker): honor whitespaceStripping regardless of devMode lukaszlenart
  • (struts) 02/05: WW-5256 docs: implementation plan to decouple whitespace stripping from devMode lukaszlenart
• (struts-site) branch docs/skill-breaking-changes deleted (was 0a5767da9) lukaszlenart
• (struts-site) branch main updated: docs: add breaking-change detection to documenting-struts-release skill (#305) lukaszlenart
• (struts-site) branch docs/skill-breaking-changes created (now 0a5767da9) lukaszlenart
• (struts-site) branch main updated: docs: add documenting-struts-release skill (#304) lukaszlenart
• (struts-site) branch docs/skill-documenting-release deleted (was 6b4c5c36a) lukaszlenart
• (struts-site) branch docs/skill-documenting-release created (now 6b4c5c36a) lukaszlenart
  • (struts-site) 01/01: docs: add documenting-struts-release skill lukaszlenart
• (struts-site) branch main updated: docs: document Struts 7.2.0 changes (@StrutsParameter authorization, JSON limits) (#303) lukaszlenart
• (struts-site) branch docs/struts-720-content-audit deleted (was c4667571e) lukaszlenart
• (struts-site) branch docs/struts-720-content-audit created (now c4667571e) lukaszlenart
  • (struts-site) 01/07: docs: add 7.2.0 content audit design spec lukaszlenart
  • (struts-site) 02/07: docs: add 7.2.0 content audit implementation plan lukaszlenart
  • (struts-site) 03/07: docs: document chaining interceptor @StrutsParameter enforcement (WW-5631) lukaszlenart
  • (struts-site) 06/07: docs: document JSON deserialization limits and per-property authorization (WW-5618/5626) lukaszlenart
  • (struts-site) 05/07: docs: make @StrutsParameter page the authorization hub (WW-5626/5631/5627) lukaszlenart
  • (struts-site) 04/07: docs: document cookie interceptor @StrutsParameter authorization (WW-5627) lukaszlenart
  • (struts-site) 07/07: docs: note AuthorizationAwareContentTypeHandler in REST plugin (WW-5626) lukaszlenart
• svn commit: r85219 - dev/struts/7.2.0 lukaszlenart
• (struts) branch release/7.2.0-RC1 updated: [maven-release-plugin] prepare for next development iteration lukaszlenart
• (struts) annotated tag STRUTS_7_2_0 created (now ba572b037) lukaszlenart
• (struts) branch release/7.2.0-RC1 created (now 8e908137d) lukaszlenart
  • (struts) 01/01: [maven-release-plugin] prepare release STRUTS_7_2_0 lukaszlenart
• (struts) branch main updated: WW-5635 Avoid logging sensitive token values in TokenHelper (#1738) lukaszlenart
• (struts) branch main updated: WW-5636 Harden redirect URL escaping in non-302 response body (#1737) lukaszlenart
• (struts) branch support/struts-6-x-x updated: WW-5630 test(core): streamline ConfigParseUtilTest and convert to JUnit 4 (#1741) lukaszlenart
• (struts) branch WW-5630-configparseutil-test-cleanup-6x deleted (was 84c81189a) lukaszlenart
• (struts) branch WW-5630-configparseutil-test-cleanup-6x created (now 84c81189a) lukaszlenart
  • (struts) 01/01: WW-5630 test(core): streamline ConfigParseUtilTest and convert to JUnit 4 lukaszlenart
• (struts) branch support/struts-6-x-x updated: WW-5630 - Performance Issue SecurityMemberAccess (#1721) (#1736) lukaszlenart
• (struts) branch WW-5630-configparseutil-test-cleanup deleted (was af347675b) lukaszlenart
• (struts) branch main updated: WW-5630 test: streamline ConfigParseUtilTest and convert to JUnit 4 (#1740) lukaszlenart
• (struts) branch WW-5630-configparseutil-test-cleanup created (now af347675b) lukaszlenart
  • (struts) 01/01: WW-5630 test: streamline ConfigParseUtilTest and convert to JUnit 4 lukaszlenart
• (struts) branch support/struts-6-x-x updated: Prepare for a new development cycle of Struts 6.11.0 (#1739) lukaszlenart
• (struts) branch release/6.10.0-RC1 deleted (was 15852c309) lukaszlenart
• (struts) branch main updated: build(deps): bump org.htmlunit:htmlunit from 4.21.0 to 5.1.0 (#1733) lukaszlenart
• (struts) branch dependabot/maven/main/org.htmlunit-htmlunit-5.1.0 deleted (was 1bce050e0) lukaszlenart
• (struts) branch dependabot/maven/main/com.fasterxml.jackson-jackson-bom-2.22.0 deleted (was 8480ebed5) lukaszlenart
• (struts) branch main updated: build(deps): bump com.fasterxml.jackson:jackson-bom (#1729) lukaszlenart
• (struts) branch dependabot/maven/support/struts-6-x-x/asm.version-9.10.1 deleted (was baee2526a) lukaszlenart
• (struts) branch support/struts-6-x-x updated: build(deps): bump asm.version from 9.10 to 9.10.1 (#1728) lukaszlenart
• (struts) branch WW-5632-fileupload2-milestone-hardening deleted (was 6719bc029) lukaszlenart
• (struts) branch main updated: WW-5632 Harden commons-fileupload2 dependency against milestone binary-incompatibility (#1735) lukaszlenart
• (struts) branch main updated: WW-5630 - Performance Issue SecurityMemberAccess (#1721) lukaszlenart
• (struts-intellij-plugin) tag v261.19027-nightly.5 created (now 2849715) github-bot
• (struts-intellij-plugin) branch ci/pin-zipsigner-version deleted (was 549e6bf) lukaszlenart
• (struts-intellij-plugin) branch main updated: ci: pin Marketplace ZIP Signer to 0.1.43 (#88) lukaszlenart
• (struts-intellij-plugin) branch ci/pin-zipsigner-version created (now 549e6bf) lukaszlenart
  • (struts-intellij-plugin) 01/01: ci: pin Marketplace ZIP Signer to 0.1.43 lukaszlenart
• (struts-intellij-plugin) tag v261.19027-nightly.4 created (now 676874e) github-bot
• (struts) branch WW-5632-fileupload2-milestone-hardening updated (c3966a1cb -> 6719bc029) lukaszlenart
• (struts) branch dependabot/maven/support/struts-6-x-x/asm.version-9.10.1 updated (6e2b7d51d -> baee2526a) github-bot
• (struts) branch WW-5632-fileupload2-milestone-hardening created (now c3966a1cb) lukaszlenart
  • (struts) 05/05: WW-5632 fix(fileupload): fail fast on incompatible commons-fileupload2 API lukaszlenart
  • (struts) 01/05: WW-5632 docs: add commons-fileupload2 milestone-hardening design spec lukaszlenart
  • (struts) 03/05: WW-5632 build(deps): manage commons-fileupload2-core alongside jakarta-servlet6 lukaszlenart
  • (struts) 04/05: WW-5632 build: enforce a single commons-fileupload2 version lukaszlenart
  • (struts) 02/05: WW-5632 docs: add implementation plan for fileupload2 milestone hardening lukaszlenart
• (struts) branch dependabot/maven/main/org.apache.maven.plugins-maven-failsafe-plugin-3.5.6 deleted (was c70faf430) lukaszlenart
• (struts) branch main updated: build(deps-dev): bump org.apache.maven.plugins:maven-failsafe-plugin (#1732) lukaszlenart
• (struts) branch dependabot/github_actions/github/codeql-action-4.36.2 deleted (was ef6cd0a7b) lukaszlenart
• (struts) branch main updated: build(deps): bump github/codeql-action from 4.36.0 to 4.36.2 (#1734) lukaszlenart
• (struts) branch dependabot/maven/main/org.apache.maven.plugins-maven-dependency-plugin-3.11.0 deleted (was 0e1e84a10) lukaszlenart
• (struts) branch main updated: build(deps): bump org.apache.maven.plugins:maven-dependency-plugin (#1730) lukaszlenart
• (struts) branch dependabot/maven/main/maven-surefire-plugin.version-3.5.6 deleted (was e3085bf86) lukaszlenart
• (struts) branch main updated: build(deps): bump maven-surefire-plugin.version from 3.5.5 to 3.5.6 (#1731) lukaszlenart
• (struts) branch support/struts-6-x-x updated: build(deps): bump jackson.version from 2.21.3 to 2.21.4 (#1727) lukaszlenart
• (struts) branch dependabot/maven/support/struts-6-x-x/jackson.version-2.21.4 deleted (was 9587fdb65) lukaszlenart
• (struts) branch dependabot/maven/support/struts-6-x-x/org.owasp-dependency-check-maven-12.2.2 deleted (was 29656927e) lukaszlenart
• (struts) branch support/struts-6-x-x updated: build(deps): bump org.owasp:dependency-check-maven from 12.2.0 to 12.2.2 (#1726) lukaszlenart
• (struts) branch dependabot/maven/support/struts-6-x-x/org.apache.felix-maven-bundle-plugin-6.0.2 deleted (was 8b80494cf) github-bot
• (struts) branch dependabot/maven/support/struts-6-x-x/org.codehaus.plexus-plexus-container-default-2.1.1 deleted (was c0962ec09) github-bot
• (struts) branch main updated: WW-5631 Add opt-in @StrutsParameter enforcement to ChainingInterceptor (#1719) lukaszlenart
• (struts) branch WW-5631-chaining-require-annotations deleted (was ed4036311) lukaszlenart
• (struts-intellij-plugin) branch dependabot/github_actions/actions/checkout-6.0.3 deleted (was d47feae) lukaszlenart
• (struts-intellij-plugin) branch main updated: ci(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#86) lukaszlenart
• (struts-intellij-plugin) branch dependabot/github_actions/codecov/codecov-action-7.0.0 deleted (was a1efb7f) lukaszlenart
• (struts-intellij-plugin) branch main updated: ci(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0 (#87) lukaszlenart
• (struts) branch dependabot/github_actions/github/codeql-action-4.36.2 created (now ef6cd0a7b) github-bot
• (struts) branch dependabot/github_actions/github/codeql-action-4.36.1 deleted (was bc93c2b32) github-bot
• (struts-intellij-plugin) branch dependabot/github_actions/codecov/codecov-action-7.0.0 created (now a1efb7f) github-bot
• (struts) branch dependabot/maven/main/org.htmlunit-htmlunit-5.1.0 created (now 1bce050e0) github-bot
• (struts) branch dependabot/maven/main/maven-surefire-plugin.version-3.5.6 created (now e3085bf86) github-bot
• (struts) branch dependabot/maven/main/org.apache.maven.plugins-maven-failsafe-plugin-3.5.6 created (now c70faf430) github-bot
• (struts) branch dependabot/maven/main/org.apache.maven.plugins-maven-dependency-plugin-3.11.0 created (now 0e1e84a10) github-bot
• (struts) branch dependabot/maven/main/com.fasterxml.jackson-jackson-bom-2.22.0 created (now 8480ebed5) github-bot
• (struts) branch dependabot/maven/support/struts-6-x-x/jackson.version-2.21.4 created (now 9587fdb65) github-bot
• (struts) branch dependabot/maven/support/struts-6-x-x/asm.version-9.10.1 created (now 6e2b7d51d) github-bot
• (struts) branch dependabot/github_actions/github/codeql-action-4.36.1 created (now bc93c2b32) github-bot
• (struts) branch dependabot/maven/support/struts-6-x-x/org.owasp-dependency-check-maven-12.2.2 created (now 29656927e) github-bot
• (struts) branch dependabot/maven/support/struts-6-x-x/org.apache.felix-maven-bundle-plugin-6.0.2 created (now 8b80494cf) github-bot
• (struts) branch dependabot/maven/support/struts-6-x-x/org.codehaus.plexus-plexus-container-default-2.1.1 created (now c0962ec09) github-bot
• (struts-intellij-plugin) branch dependabot/github_actions/actions/checkout-6.0.3 created (now d47feae) github-bot
• (struts) branch docs/triaging-security-reports-skill deleted (was dd91cd7e1) lukaszlenart
• (struts) branch main updated: docs(skills): add triaging-security-reports skill (#1722) lukaszlenart
• (struts-site) branch main updated: docs: add announcing-struts-release skill (#302) lukaszlenart
• (struts-site) branch docs/skill-announcing-release deleted (was 1157bf34b) lukaszlenart
• (struts-site) branch docs/skill-announcing-release created (now 1157bf34b) lukaszlenart
  • (struts-site) 01/01: docs: add announcing-struts-release skill lukaszlenart
• (struts-site) branch docs/announce-6.10.0 deleted (was 458dabea5) lukaszlenart
• (struts-site) branch main updated: docs: announce Apache Struts 6.10.0 GA release (#301) lukaszlenart
• (struts-site) branch docs/announce-6.10.0 created (now 458dabea5) lukaszlenart
  • (struts-site) 01/01: docs: announce Apache Struts 6.10.0 GA release lukaszlenart
• (struts) branch WW-5631-chaining-require-annotations updated (ab5b25f7f -> ed4036311) lukaszlenart
• (struts) branch docs/triaging-security-reports-skill created (now dd91cd7e1) lukaszlenart
  • (struts) 01/01: docs(skills): add triaging-security-reports skill lukaszlenart
• svn commit: r84825 - dev/struts/6.10.0 release/struts/6.10.0 lukaszlenart
• (struts) branch support/struts-6-x-x updated: build(deps-dev): bump org.apache.maven.plugins:maven-site-plugin (#1718) lukaszlenart
• (struts) branch dependabot/maven/support/struts-6-x-x/org.apache.maven.plugins-maven-site-plugin-3.22.0 deleted (was 214657453) lukaszlenart
• (struts) branch dependabot/maven/support/struts-6-x-x/org.apache.maven.plugins-maven-assembly-plugin-3.8.0 deleted (was dfaa5bb40) lukaszlenart
• (struts) branch support/struts-6-x-x updated: build(deps-dev): bump org.apache.maven.plugins:maven-assembly-plugin (#1717) lukaszlenart
• (struts) branch dependabot/maven/support/struts-6-x-x/jackson.version-2.21.3 deleted (was cbf2b1172) lukaszlenart
• (struts) branch support/struts-6-x-x updated: build(deps): bump jackson.version from 2.21.2 to 2.21.3 (#1716) lukaszlenart
• (struts) branch dependabot/maven/support/struts-6-x-x/org.apache.maven.plugins-maven-enforcer-plugin-3.6.3 deleted (was 9ae509437) lukaszlenart
• (struts) branch support/struts-6-x-x updated: build(deps-dev): bump org.apache.maven.plugins:maven-enforcer-plugin (#1715) lukaszlenart
• (struts) branch dependabot/maven/support/struts-6-x-x/org.hibernate-hibernate-core-7.3.5.Final deleted (was cc6b3d89d) github-bot
• (struts) branch dependabot/maven/main/org.hibernate-hibernate-core-7.3.6.Final deleted (was ef9179c62) lukaszlenart
• (struts) branch dependabot/maven/main/asm.version-9.10.1 deleted (was ba9d6651d) lukaszlenart
• (struts) branch main updated: build(deps): bump asm.version from 9.10 to 9.10.1 (#1713) lukaszlenart
• (struts) branch dependabot/maven/main/org.apache.maven.plugins-maven-site-plugin-3.22.0 deleted (was ae3cbdca1) lukaszlenart
• (struts) branch main updated: build(deps): bump org.apache.maven.plugins:maven-site-plugin (#1711) lukaszlenart
• (struts) branch dependabot/github_actions/github/codeql-action-4.36.0 deleted (was 22e4a3c6e) lukaszlenart
• (struts) branch main updated: build(deps): bump github/codeql-action from 4.35.5 to 4.36.0 (#1710) lukaszlenart
• (struts) branch WW-5631-chaining-require-annotations updated (a1740a45c -> ab5b25f7f) lukaszlenart
• (struts) branch WW-5631-chaining-require-annotations created (now a1740a45c) lukaszlenart
  • (struts) 03/10: WW-5631 feat(chaining): default struts.chaining.requireAnnotations=false lukaszlenart
  • (struts) 04/10: WW-5631 test(chaining): add annotated/unannotated chaining fixtures lukaszlenart
  • (struts) 05/10: WW-5631 test(chaining): add failing @StrutsParameter enforcement tests lukaszlenart
  • (struts) 01/10: WW-5631 docs(chaining): add design spec and implementation plan lukaszlenart
  • (struts) 10/10: WW-5631 test(chaining): cover fail-closed introspection; clarify target==action lukaszlenart
  • (struts) 08/10: WW-5631 test(chaining): cover includes interaction and proxied target lukaszlenart
  • (struts) 09/10: WW-5631 docs(chaining): document struts.chaining.requireAnnotations lukaszlenart
  • (struts) 07/10: WW-5631 refactor(chaining): align requireAnnotations parsing with BooleanUtils lukaszlenart
  • (struts) 02/10: WW-5631 feat(chaining): add struts.chaining.requireAnnotations constant lukaszlenart
  • (struts) 06/10: WW-5631 feat(chaining): enforce @StrutsParameter on target when opted in lukaszlenart
• (struts-site) branch docs/wire-security-guide deleted (was 7af957caa) lukaszlenart
• (struts-site) branch main updated: docs(security): links security reporting with security guideline (#300) lukaszlenart
• (struts-site) branch docs/wire-security-guide created (now 7af957caa) lukaszlenart
  • (struts-site) 01/01: docs(security): links security reporting with security guideline lukaszlenart
• (struts) branch dependabot/maven/support/struts-6-x-x/org.apache.maven.plugins-maven-site-plugin-3.22.0 created (now 214657453) github-bot
• (struts) branch dependabot/maven/support/struts-6-x-x/org.apache.maven.plugins-maven-assembly-plugin-3.8.0 created (now dfaa5bb40) github-bot
• (struts) branch dependabot/maven/support/struts-6-x-x/jackson.version-2.21.3 created (now cbf2b1172) github-bot
• (struts) branch dependabot/maven/support/struts-6-x-x/org.apache.maven.plugins-maven-enforcer-plugin-3.6.3 created (now 9ae509437) github-bot
• (struts) branch dependabot/maven/support/struts-6-x-x/org.hibernate-hibernate-core-7.3.5.Final created (now cc6b3d89d) github-bot
• (struts) branch dependabot/maven/main/asm.version-9.10.1 created (now ba9d6651d) github-bot
• (struts) branch dependabot/maven/main/org.hibernate-hibernate-core-7.3.6.Final created (now ef9179c62) github-bot
• (struts) branch dependabot/maven/main/org.apache.maven.plugins-maven-site-plugin-3.22.0 created (now ae3cbdca1) github-bot
• (struts) branch dependabot/github_actions/github/codeql-action-4.36.0 created (now 22e4a3c6e) github-bot
• (struts-extras) branch master updated: [INFRA] Set up default rulesets for default and release branches (#7) lukaszlenart
• (struts-maven) branch trunk updated: [INFRA] Set up default rulesets for default and release branches (#1) lukaszlenart
• (struts-maven) branch infrastructure-ruleset-bot/default-branch-protection updated (c866e9e -> b07c608) lukaszlenart
• (struts-master) branch main updated: [INFRA] Set up default rulesets for default and release branches (#2) lukaszlenart
• (struts-archive) branch infrastructure-ruleset-bot/default-branch-protection updated (0d8faa2 -> f589e0d) lukaszlenart
• (struts-archetypes) branch infrastructure-ruleset-bot/default-branch-protection deleted (was e6a4d30) lukaszlenart
• (struts-archetypes) branch main updated (57b952c -> ed405ae) lukaszlenart
  • (struts-archetypes) 01/01: Merge pull request #21 from apache/infrastructure-ruleset-bot/default-branch-protection lukaszlenart
• (struts-extras) branch infrastructure-ruleset-bot/default-branch-protection deleted (was 0cee80e) lukaszlenart
• (struts-master) branch infrastructure-ruleset-bot/default-branch-protection deleted (was 1399191) lukaszlenart
• struts-archive.git: Error while running github feature from master:.asf.yaml Apache Infrastructure
• struts-extras.git: Error while running github feature from master:.asf.yaml Apache Infrastructure
• (struts-maven) branch infrastructure-ruleset-bot/default-branch-protection deleted (was b07c608) lukaszlenart
• struts-archetypes.git: Error while running github feature from main:.asf.yaml Apache Infrastructure
• (struts-archive) branch infrastructure-ruleset-bot/default-branch-protection deleted (was f589e0d) lukaszlenart
• (struts-extras) branch infrastructure-ruleset-bot/default-branch-protection updated (ee4b2a5 -> 0cee80e) lukaszlenart
• (struts-master) branch infrastructure-ruleset-bot/default-branch-protection updated (cdd348c -> 1399191) lukaszlenart
• struts-master.git: Error while running github feature from main:.asf.yaml Apache Infrastructure
• (struts-archive) branch master updated: [INFRA] Set up default rulesets for default and release branches (#6) lukaszlenart
• struts-annotations.git: Error while running github feature from main:.asf.yaml Apache Infrastructure
• (struts-archetypes) branch infrastructure-ruleset-bot/default-branch-protection updated (2986718 -> e6a4d30) lukaszlenart
• struts-maven.git: Error while running github feature from trunk:.asf.yaml Apache Infrastructure
• (struts-annotations) branch infrastructure-ruleset-bot/default-branch-protection deleted (was 9333a2a) lukaszlenart
• (struts-annotations) branch main updated (fab2fd1 -> 2a26d72) lukaszlenart
  • (struts-annotations) 01/01: Merge pull request #4 from apache/infrastructure-ruleset-bot/default-branch-protection lukaszlenart
• (struts-annotations) branch infrastructure-ruleset-bot/default-branch-protection updated (67d0c72 -> 9333a2a) lukaszlenart
• svn commit: r84716 - dev/struts/6.10.0 lukaszlenart
• (struts) branch release/6.10.0-RC1 updated: [maven-release-plugin] prepare for next development iteration lukaszlenart
• (struts) annotated tag STRUTS_6_10_0 created (now 068d4ace9) lukaszlenart
• (struts) branch release/6.10.0-RC1 created (now 4bfbfeb23) lukaszlenart
  • (struts) 01/01: [maven-release-plugin] prepare release STRUTS_6_10_0 lukaszlenart
• (struts) branch release/6.10.0-RC deleted (was 0fa47650e) lukaszlenart
• (struts) branch support/struts-6-x-x updated: pom(version): sets proper SNAPSHOT version (#1709) lukaszlenart
• (struts) branch release/6.10.0-RC created (now 0fa47650e) lukaszlenart
  • (struts) 01/01: pom(version): sets proper SNAPSHOT version lukaszlenart
• (struts) branch WW-5623-postback-result-xss-6x deleted (was 90751ff9a) lukaszlenart

• Earlier messages