[GitHub] [myfaces] volosied commented on a diff in pull request #492: MYFACES-4551: Allow group validation for uiselectone elements

[GitBox]

volosied commented on code in PR #492:
URL: https://github.com/apache/myfaces/pull/492#discussion_r1082867841


##
api/src/main/java/jakarta/faces/component/UISelectOne.java:
##
@@ -69,19 +69,20 @@ public String getFamily()
 }
 
 /**
- * Verify that when ever there is a ValueExpression and submitted value is 
not empty, then
+ * Check whether a group exists and then
  * visit all the UISelectItem elements within the UISelectOne radio 
components to check if
- * the submitted value exists in any of the select items.
+ * the submitted value is empty (ie. not submitted) or if a previous group 
item has been
+ * has failed to be validated (if no so further validation processing is 
needed)
  *
  * @see 
jakarta.faces.component.UIInput#processValidators(jakarta.faces.context.FacesContext)
  */
 @Override
 public void processValidators(FacesContext context) 
 {
 String group = getGroup();
-ValueExpression ve = getValueExpression("value");

Review Comment:
   ValueExpression was removed because not all scenario uses a VE in the TCK 
test, i.e: 
   ` `  



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] volosied commented on pull request #492: MYFACES-4551: Allow group validation for uiselectone elements

[GitBox]

volosied commented on PR #492:
URL: https://github.com/apache/myfaces/pull/492#issuecomment-1398707459

   Mojarra's steps: 
   
   
   1) MenuRenderer#decodeGroup -- submitted value is set to 
RIConstants.NO_VALUE ("") - 
https://github.com/eclipse-ee4j/mojarra/blob/3fd5d16cc3c0c631c97a0a62e8e68a6be66fbafe/impl/src/main/java/com/sun/faces/renderkit/html_basic/MenuRenderer.java#L872
   2) UIInput#validate- submittedValue is not not null, so it continues with 
validation. The if checks for ((String) submittedValue).length() == 0 and sets 
the submitted value back to null -  
https://github.com/eclipse-ee4j/mojarra/blob/be054fde83df012a6add3b406eec44aa28975a28/impl/src/main/java/jakarta/faces/component/UIInput.java#L806-L811
   3) MenuRenderer#convertSelectOneValue - during validate() a 
getConvertedValue call occurs, which leads to 
MenuRenderer#convertSelectOneValue. In this method, there's a isNoValueOrNull 
call which sees that the submitted value is null and logs ""No conversion 
necessary for SelectOne Component since the new value is null"
   
   These changes followed a similar pattern.   Although, I believe parts of 
this could be a potential challenge, such as the null check in the conversion 
call. 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] volosied commented on a diff in pull request #492: MYFACES-4551: Allow group validation for uiselectone elements

[GitBox]

volosied commented on code in PR #492:
URL: https://github.com/apache/myfaces/pull/492#discussion_r1082861220


##
impl/src/main/java/org/apache/myfaces/renderkit/RendererUtils.java:
##
@@ -693,17 +693,25 @@ else if (allowNonArrayOrCollectionValue)
 public static Object getConvertedUISelectOneValue(
 FacesContext facesContext, UISelectOne output, Object 
submittedValue)
 {
-if (submittedValue != null && !(submittedValue instanceof String))
+
+if(submittedValue == null)
+{
+if (log.isLoggable(Level.FINE))
+{
+log.fine("No conversion necessary for null uiselectone value: 
client id " + output.getClientId());
+}
+return null;

Review Comment:
   Mojarra returns null and so I did the same here ( since no value is 
submitted)
   
   I'm just not sure if this is correct, however. 
   
   



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] volosied opened a new pull request, #492: MYFACES-4551: Allow group validation for uiselectone elements

[GitBox]

volosied opened a new pull request, #492:
URL: https://github.com/apache/myfaces/pull/492

   https://issues.apache.org/jira/browse/MYFACES-4551
   
   
   Various scenarios tested in the TCK, see: 
https://github.com/jakartaee/faces/blob/c6d7d879065056978d74e5f486847fb203606203/tck/faces23/uiinput/src/main/webapp/spec329.xhtml
 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces-tobago] bohmber merged pull request #3691: build(deps): bump joinfaces.version from 4.7.7 to 4.7.8

[GitBox]

bohmber merged PR #3691:
URL: https://github.com/apache/myfaces-tobago/pull/3691


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces-tobago] dependabot[bot] opened a new pull request, #3691: build(deps): bump joinfaces.version from 4.7.7 to 4.7.8

[GitBox]

dependabot[bot] opened a new pull request, #3691:
URL: https://github.com/apache/myfaces-tobago/pull/3691

   Bumps `joinfaces.version` from 4.7.7 to 4.7.8.
   Updates `joinfaces-autoconfigure` from 4.7.7 to 4.7.8
   
   Release notes
   Sourced from https://github.com/joinfaces/joinfaces/releases;>joinfaces-autoconfigure's
 releases.
   
   4.7.8
   What's Changed
   
   Bump maven-plugin-annotations from 3.7.0 to 3.7.1 by https://github.com/dependabot;>@​dependabot in https://github-redirect.dependabot.com/joinfaces/joinfaces/pull/1649;>joinfaces/joinfaces#1649
   
   Full Changelog: https://github.com/joinfaces/joinfaces/compare/4.7.7...4.7.8;>https://github.com/joinfaces/joinfaces/compare/4.7.7...4.7.8
   
   
   
   Commits
   
   https://github.com/joinfaces/joinfaces/commit/6362c7abcc4cab4d86ada792450f41203ebf4184;>6362c7a
 Update IDEA Checkstyle config
   https://github.com/joinfaces/joinfaces/commit/65303b11dd30206eb2a8a408ca09558e4577d2ee;>65303b1
 Update to MyFaces Tobago 5.4.0
   https://github.com/joinfaces/joinfaces/commit/6f19cb55d2b6ae7df88616ff6962f373b69e81f0;>6f19cb5
 Update to RichFaces AYG 4.6.21
   https://github.com/joinfaces/joinfaces/commit/1d3132a803ec411310574b0cd6d0a000e24daf08;>1d3132a
 Update to Spring Boot 2.7.8
   https://github.com/joinfaces/joinfaces/commit/651755e8930f76116975a46a55fad35e207e8b1f;>651755e
 Merge pull request https://github-redirect.dependabot.com/joinfaces/joinfaces/issues/1649;>#1649
 from joinfaces/dependabot/gradle/4.7.x/org.apache.ma...
   https://github.com/joinfaces/joinfaces/commit/5176c79c1aeb75987aef8b60a4fda90db7762ace;>5176c79
 Bump maven-plugin-annotations from 3.7.0 to 3.7.1
   See full diff in https://github.com/joinfaces/joinfaces/compare/4.7.7...4.7.8;>compare 
view
   
   
   
   
   Updates `joinfaces-maven-plugin` from 4.7.7 to 4.7.8
   
   Release notes
   Sourced from https://github.com/joinfaces/joinfaces/releases;>joinfaces-maven-plugin's 
releases.
   
   4.7.8
   What's Changed
   
   Bump maven-plugin-annotations from 3.7.0 to 3.7.1 by https://github.com/dependabot;>@​dependabot in https://github-redirect.dependabot.com/joinfaces/joinfaces/pull/1649;>joinfaces/joinfaces#1649
   
   Full Changelog: https://github.com/joinfaces/joinfaces/compare/4.7.7...4.7.8;>https://github.com/joinfaces/joinfaces/compare/4.7.7...4.7.8
   
   
   
   Commits
   
   https://github.com/joinfaces/joinfaces/commit/6362c7abcc4cab4d86ada792450f41203ebf4184;>6362c7a
 Update IDEA Checkstyle config
   https://github.com/joinfaces/joinfaces/commit/65303b11dd30206eb2a8a408ca09558e4577d2ee;>65303b1
 Update to MyFaces Tobago 5.4.0
   https://github.com/joinfaces/joinfaces/commit/6f19cb55d2b6ae7df88616ff6962f373b69e81f0;>6f19cb5
 Update to RichFaces AYG 4.6.21
   https://github.com/joinfaces/joinfaces/commit/1d3132a803ec411310574b0cd6d0a000e24daf08;>1d3132a
 Update to Spring Boot 2.7.8
   https://github.com/joinfaces/joinfaces/commit/651755e8930f76116975a46a55fad35e207e8b1f;>651755e
 Merge pull request https://github-redirect.dependabot.com/joinfaces/joinfaces/issues/1649;>#1649
 from joinfaces/dependabot/gradle/4.7.x/org.apache.ma...
   https://github.com/joinfaces/joinfaces/commit/5176c79c1aeb75987aef8b60a4fda90db7762ace;>5176c79
 Bump maven-plugin-annotations from 3.7.0 to 3.7.1
   See full diff in https://github.com/joinfaces/joinfaces/compare/4.7.7...4.7.8;>compare 
view
   
   
   
   
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   


-- 
This is an automated message from the Apache Git Service.

[GitHub] [myfaces-tobago] bohmber merged pull request #3690: build(deps): bump spring-boot.version from 2.7.7 to 2.7.8

[GitBox]

bohmber merged PR #3690:
URL: https://github.com/apache/myfaces-tobago/pull/3690


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] pnicolucci commented on a diff in pull request #484: MYFACES-4550: throw exception if f:validateWholeBean is misplaced

[GitBox]

pnicolucci commented on code in PR #484:
URL: https://github.com/apache/myfaces/pull/484#discussion_r1081647278


##
impl/src/main/java/org/apache/myfaces/component/validate/ValidateWholeBeanComponent.java:
##
@@ -55,6 +62,79 @@ public void addValidator(Validator validator)
 // No-op. It does not make sense to allow additional validators to be 
installed.
 }
 
+
+@Override
+public void encodeBegin(FacesContext context) throws IOException
+{
+UIComponent parent = this.getParent();
+
+// find a parent form
+while (parent != null & !(parent instanceof 
jakarta.faces.component.UIForm))

Review Comment:
   @volosied does this help? 
https://github.com/apache/myfaces/blob/main/api/src/main/java/org/apache/myfaces/core/api/shared/ComponentUtils.java#L79



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] melloware commented on a diff in pull request #484: MYFACES-4550: throw exception if f:validateWholeBean is misplaced

[GitBox]

melloware commented on code in PR #484:
URL: https://github.com/apache/myfaces/pull/484#discussion_r1081643678


##
impl/src/main/java/org/apache/myfaces/component/validate/ValidateWholeBeanComponent.java:
##
@@ -55,6 +62,79 @@ public void addValidator(Validator validator)
 // No-op. It does not make sense to allow additional validators to be 
installed.
 }
 
+
+@Override
+public void encodeBegin(FacesContext context) throws IOException
+{
+UIComponent parent = this.getParent();
+
+// find a parent form
+while (parent != null & !(parent instanceof 
jakarta.faces.component.UIForm))

Review Comment:
   In PrimeFaces we have `closestForm`
   
   
https://github.com/primefaces/primefaces/blob/master/primefaces/src/main/java/org/primefaces/util/ComponentTraversalUtils.java#L173



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] volosied commented on a diff in pull request #484: MYFACES-4550: throw exception if f:validateWholeBean is misplaced

[GitBox]

volosied commented on code in PR #484:
URL: https://github.com/apache/myfaces/pull/484#discussion_r1081638859


##
impl/src/main/java/org/apache/myfaces/component/validate/ValidateWholeBeanComponent.java:
##
@@ -55,6 +62,79 @@ public void addValidator(Validator validator)
 // No-op. It does not make sense to allow additional validators to be 
installed.
 }
 
+
+@Override
+public void encodeBegin(FacesContext context) throws IOException
+{
+UIComponent parent = this.getParent();
+
+// find a parent form
+while (parent != null & !(parent instanceof 
jakarta.faces.component.UIForm))

Review Comment:
   I don't see any such method in 4.0. I could create one? I don't know which 
utility class it would be best be under though. 



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] tandraschko commented on a diff in pull request #484: MYFACES-4550: throw exception if f:validateWholeBean is misplaced

[GitBox]

tandraschko commented on code in PR #484:
URL: https://github.com/apache/myfaces/pull/484#discussion_r1081560352


##
impl/src/main/java/org/apache/myfaces/component/validate/ValidateWholeBeanComponent.java:
##
@@ -55,6 +62,79 @@ public void addValidator(Validator validator)
 // No-op. It does not make sense to allow additional validators to be 
installed.
 }
 
+
+@Override
+public void encodeBegin(FacesContext context) throws IOException
+{
+UIComponent parent = this.getParent();
+
+// find a parent form
+while (parent != null & !(parent instanceof 
jakarta.faces.component.UIForm))

Review Comment:
   i also think we have a util somewhere called "closestForm"



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] melloware commented on pull request #490: MYFACES-4547: return new DefaultVariableMapper if variableMapper is null

[GitBox]

melloware commented on PR #490:
URL: https://github.com/apache/myfaces/pull/490#issuecomment-1397284105

   Yep will do.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] volosied commented on pull request #484: MYFACES-4550: throw exception if f:validateWholeBean is misplaced

[GitBox]

volosied commented on PR #484:
URL: https://github.com/apache/myfaces/pull/484#issuecomment-1397250048

   We would need to address that via a TCK challenge since Mojarra checks it by 
default. 
   
   But I agree that that this check makes sense during development, not 
production. 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] tandraschko commented on pull request #490: MYFACES-4547: return new DefaultVariableMapper if variableMapper is null

[GitBox]

tandraschko commented on PR #490:
URL: https://github.com/apache/myfaces/pull/490#issuecomment-1397247618

   @melloware if you merge PRs, please always update the JIRA issues


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] tandraschko commented on pull request #484: MYFACES-4550: throw exception if f:validateWholeBean is misplaced

[GitBox]

tandraschko commented on PR #484:
URL: https://github.com/apache/myfaces/pull/484#issuecomment-1397245565

   i should we should also only check this if projecstage == development


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces-tobago] dependabot[bot] opened a new pull request, #3690: build(deps): bump spring-boot.version from 2.7.7 to 2.7.8

[GitBox]

dependabot[bot] opened a new pull request, #3690:
URL: https://github.com/apache/myfaces-tobago/pull/3690

   Bumps `spring-boot.version` from 2.7.7 to 2.7.8.
   Updates `spring-boot` from 2.7.7 to 2.7.8
   
   Release notes
   Sourced from https://github.com/spring-projects/spring-boot/releases;>spring-boot's 
releases.
   
   v2.7.8
   :lady_beetle: Bug Fixes
   
   Devtools sets non-existent property spring.reactor.debug https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/33858;>#33858
   Failing calls to reactive health indicators are not logged https://github-redirect.dependabot.com/spring-projects/spring-boot/pull/33774;>#33774
   Failure analysis of NoUniqueBeanDefinitionException reports 
defined in null when bean definition has no resource description https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/33765;>#33765
   NPE in RabbitProperties when user is given, but password not https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/33752;>#33752
   SDKMAN should not use repo.spring.io for releases https://github-redirect.dependabot.com/spring-projects/spring-boot/pull/33708;>#33708
   Homebrew and Scoop should not use repo.spring.io for releases https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/33702;>#33702
   EndpointRequestMatcher should have a toString method https://github-redirect.dependabot.com/spring-projects/spring-boot/pull/33690;>#33690
   It is not possible to provide a custom TransactionProvider bean for JOOQ 
https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32899;>#32899
   SpringBootMockResolver causes AopTestUtils.getUltimateTargetObject to 
recurse until the stack overflows when it calls it with Spring Security's 
authentication manager bean https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32632;>#32632
   Inconsistent discovery of parameter names for selectors in custom 
actuator endpoints https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/31240;>#31240
   @DeprecatedConfigurationProperty has no effect when 
declared on a record component's accessor method https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/29526;>#29526
   Headless mode is forced when banner.* file is present. https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/28803;>#28803
   Diagnostics are poor when the JMX port used by the Maven start goal is 
in use https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/24044;>#24044
   
   :notebook_with_decorative_cover: Documentation
   
   Replace via in documentation and use over or 
through instead https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/33878;>#33878
   Fix typo in kotlin getting started documentation https://github-redirect.dependabot.com/spring-projects/spring-boot/pull/33867;>#33867
   Update com.gorylenko.gradle-git-properties version to 2.4.1 in doc https://github-redirect.dependabot.com/spring-projects/spring-boot/pull/33838;>#33838
   Fix 'the the' typos https://github-redirect.dependabot.com/spring-projects/spring-boot/pull/33736;>#33736
   Fix typo in javadoc of 
org.springframework.boot.web.server.LocalServerPort https://github-redirect.dependabot.com/spring-projects/spring-boot/pull/33683;>#33683
   Fix a typo in the ExitCodeGenerator documentation https://github-redirect.dependabot.com/spring-projects/spring-boot/pull/33658;>#33658
   Fix typo in External Configuration documentation https://github-redirect.dependabot.com/spring-projects/spring-boot/pull/33630;>#33630
   Update getting started documentation to use 
@SpringBootApplication https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32795;>#32795
   Description of spring-boot-starter-websocket does not make it clear that 
it's Servlet-specific https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/32493;>#32493
   
   :hammer: Dependency Upgrades
   
   Upgrade to Byte Buddy 1.12.22 https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/33887;>#33887
   Upgrade to Dropwizard Metrics 4.2.15 https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/33779;>#33779
   Upgrade to FreeMarker 2.3.32 https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/33888;>#33888
   Upgrade to Groovy 3.0.14 https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/33780;>#33780
   Upgrade to Infinispan 13.0.15.Final https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/33781;>#33781
   Upgrade to Jolokia 1.7.2 https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/33782;>#33782
   Upgrade to MariaDB 3.0.10 https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/33783;>#33783
   Upgrade to Micrometer 1.9.7 https://github-redirect.dependabot.com/spring-projects/spring-boot/issues/33784;>#33784
   

[GitHub] [myfaces] volosied commented on pull request #484: MYFACES-4550: throw exception if f:validateWholeBean is misplaced

[GitBox]

volosied commented on PR #484:
URL: https://github.com/apache/myfaces/pull/484#issuecomment-1397208218

   Indented some of the nested statements / blocks so it should look better.  
Will merge once the CI build completes.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] volosied commented on pull request #484: MYFACES-4550: throw exception if f:validateWholeBean is misplaced

[GitBox]

volosied commented on PR #484:
URL: https://github.com/apache/myfaces/pull/484#issuecomment-1397205447

   Not a fan of the formatting either, but I get check style exceptions if the 
bracket's aren't on a new line. 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] melloware merged pull request #490: MYFACES-4547: return new DefaultVariableMapper if variableMapper is null

[GitBox]

melloware merged PR #490:
URL: https://github.com/apache/myfaces/pull/490


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] tandraschko commented on pull request #490: MYFACES-4547: return new DefaultVariableMapper if variableMapper is null

[GitBox]

tandraschko commented on PR #490:
URL: https://github.com/apache/myfaces/pull/490#issuecomment-1397171224

   +1


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] werpu closed pull request #491: Feature/myfaces 4466 tck790

[GitBox]

werpu closed pull request #491: Feature/myfaces 4466 tck790
URL: https://github.com/apache/myfaces/pull/491


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] werpu commented on pull request #491: Feature/myfaces 4466 tck790

[GitBox]

werpu commented on PR #491:
URL: https://github.com/apache/myfaces/pull/491#issuecomment-1397127792

   closing it... a pr is not what is needed for further work on this


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] werpu opened a new pull request, #491: Feature/myfaces 4466 tck790

[GitBox]

werpu opened a new pull request, #491:
URL: https://github.com/apache/myfaces/pull/491

   Do not merge this pull request, but use it for further changes.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] pnicolucci opened a new pull request, #490: MYFACES-4547: return new DefaultVariableMapper if variableMapper is null

[GitBox]

pnicolucci opened a new pull request, #490:
URL: https://github.com/apache/myfaces/pull/490

   https://issues.apache.org/jira/browse/MYFACES-4547


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] tandraschko commented on pull request #484: MYFACES-4550: throw exception if f:validateWholeBean is misplaced

[GitBox]

tandraschko commented on PR #484:
URL: https://github.com/apache/myfaces/pull/484#issuecomment-1396901570

   yep but IMO the myfaces checkstyle is not configured hard enough


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] melloware commented on pull request #484: MYFACES-4550: throw exception if f:validateWholeBean is misplaced

[GitBox]

melloware commented on PR #484:
URL: https://github.com/apache/myfaces/pull/484#issuecomment-1396897303

   @tandraschko i thought we had checkstyle on this project?  Shouldn't it 
catch indention issues?


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] bohmber merged pull request #489: build(ci): fix jenkins build

[GitBox]

bohmber merged PR #489:
URL: https://github.com/apache/myfaces/pull/489


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] tandraschko commented on pull request #484: MYFACES-4550: throw exception if f:validateWholeBean is misplaced

[GitBox]

tandraschko commented on PR #484:
URL: https://github.com/apache/myfaces/pull/484#issuecomment-1396634133

   the indentations are looking bit weird/to small? otherwise +1


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] bohmber commented on pull request #356: Feature/myfaces 4466 faces.js reimplementation (target 4.0.0 RC4)

[GitBox]

bohmber commented on PR #356:
URL: https://github.com/apache/myfaces/pull/356#issuecomment-1396619947

   I would like to see this merged


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces-tobago] bohmber merged pull request #3689: chore: fix github build status badges

[GitBox]

bohmber merged PR #3689:
URL: https://github.com/apache/myfaces-tobago/pull/3689


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces-tobago] bohmber merged pull request #3684: build(deps): bump dependency-check-maven from 8.0.0 to 8.0.1

[GitBox]

bohmber merged PR #3684:
URL: https://github.com/apache/myfaces-tobago/pull/3684


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces-tobago] bohmber merged pull request #3685: build(deps): bump dependency-check-maven from 8.0.0 to 8.0.1

[GitBox]

bohmber merged PR #3685:
URL: https://github.com/apache/myfaces-tobago/pull/3685


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces-tobago] bohmber merged pull request #3686: build(deps): bump dependency-check-maven from 8.0.0 to 8.0.1

[GitBox]

bohmber merged PR #3686:
URL: https://github.com/apache/myfaces-tobago/pull/3686


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces-tobago] bohmber merged pull request #3687: build(deps): bump dependency-check-maven from 8.0.0 to 8.0.1

[GitBox]

bohmber merged PR #3687:
URL: https://github.com/apache/myfaces-tobago/pull/3687


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces-tobago] bohmber merged pull request #3688: chore: fix github build status badges

[GitBox]

bohmber merged PR #3688:
URL: https://github.com/apache/myfaces-tobago/pull/3688


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] bohmber merged pull request #488: build: rename master to main

[GitBox]

bohmber merged PR #488:
URL: https://github.com/apache/myfaces/pull/488


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] bohmber opened a new pull request, #488: build: rename master to main

[GitBox]

bohmber opened a new pull request, #488:
URL: https://github.com/apache/myfaces/pull/488

   INFRA-23518


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] bohmber merged pull request #487: build(ci): fix it test without provided chromeDriverVersion

[GitBox]

bohmber merged PR #487:
URL: https://github.com/apache/myfaces/pull/487


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces-tobago] dependabot[bot] opened a new pull request, #3687: build(deps): bump dependency-check-maven from 8.0.0 to 8.0.1

[GitBox]

dependabot[bot] opened a new pull request, #3687:
URL: https://github.com/apache/myfaces-tobago/pull/3687

   Bumps 
[dependency-check-maven](https://github.com/jeremylong/DependencyCheck) from 
8.0.0 to 8.0.1.
   
   Release notes
   Sourced from https://github.com/jeremylong/DependencyCheck/releases;>dependency-check-maven's
 releases.
   
   Version 8.0.1
   Fixed
   
   Fixed Stack Overflow Exception in the gradle plugin 
([dependency-check-gradle/https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/308;>#308](https://github-redirect.dependabot.com/dependency-check/dependency-check-gradle/pull/308;>dependency-check/dependency-check-gradle#308)).
   Fixed No Signature of Method Exception in the gradle plugin 
([dependency-check-gradle/https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/305;>#305](https://github-redirect.dependabot.com/dependency-check/dependency-check-gradle/pull/305;>dependency-check/dependency-check-gradle#305)).
   Updated DB initialization scripts for externally hosted DBs (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5314;>#5314
 and https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5317;>#5317).
   
   Postgres users will need to use the updated init script and 8.0.1.
   
   
   Resolved NPE in the NodePackageAnalyzer (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5339;>#5339).
   
   See the full listing of https://github.com/jeremylong/DependencyCheck/milestone/58?closed=1;>changes.
   
   
   
   Changelog
   Sourced from https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md;>dependency-check-maven's
 changelog.
   
   https://github.com/jeremylong/DependencyCheck/releases/tag/v8.0.1;>Version
 8.0.1 (2023-01-18)
   Fixed
   
   Fixed Stack Overflow Exception in the gradle plugin 
([dependency-check-gradle/https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/308;>#308](https://github-redirect.dependabot.com/dependency-check/dependency-check-gradle/pull/308;>dependency-check/dependency-check-gradle#308)).
   Fixed No Signature of Method Exception in the gradle plugin 
([dependency-check-gradle/https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/305;>#305](https://github-redirect.dependabot.com/dependency-check/dependency-check-gradle/pull/305;>dependency-check/dependency-check-gradle#305)).
   Updated DB initialization scripts for externally hosted DBs (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5314;>#5314
 and https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5317;>#5317).
   
   Postgres users will need to use the updated init script and 8.0.1.
   
   
   Resolved NPE in the NodePackageAnalyzer (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5339;>#5339).
   
   See the full listing of https://github.com/jeremylong/DependencyCheck/milestone/58?closed=1;>changes.
   
   
   
   Commits
   
   https://github.com/jeremylong/DependencyCheck/commit/9873775f1498d4cd5914bbb500f1ca912532f0ba;>9873775
 build:prepare release v8.0.1
   https://github.com/jeremylong/DependencyCheck/commit/7ed94cbce66a2b281bdffac8008c71ff20b35c32;>7ed94cb
 docs: prepare release 8.0.1
   https://github.com/jeremylong/DependencyCheck/commit/a018cc3027908b2529e8f5b68eaed1b989df3d4d;>a018cc3
 fix: npe (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/5339;>#5339)
   https://github.com/jeremylong/DependencyCheck/commit/71ffdcf96f0ba9b49a229730b42dcf6a00b62b47;>71ffdcf
 fix: npe
   https://github.com/jeremylong/DependencyCheck/commit/be9719f5beab3554cde0c1e1e2cf5cf2691f2123;>be9719f
 fix: remove duplicate entries for CISA (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/5332;>#5332)
   https://github.com/jeremylong/DependencyCheck/commit/94afa45a1e9f5b4cff138679bdceaf18f6b67d69;>94afa45
 Remove duplicate entries for CISA
   https://github.com/jeremylong/DependencyCheck/commit/8fac93ba5a1c87797aa5ab50089f51690e9d725f;>8fac93b
 Remove duplicate entries for CISA
   https://github.com/jeremylong/DependencyCheck/commit/e63738ae3d87fd9407acdf3b6a971379e43564c5;>e63738a
 fix: merge_knownexploited is expected to be a procedure using PostgreSQL (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/5317;>#5317)
   https://github.com/jeremylong/DependencyCheck/commit/364e1b7ab8125d3aa7d184a616030f2b20786814;>364e1b7
 Merge branch 'main' into fix_5311
   https://github.com/jeremylong/DependencyCheck/commit/4c375f1618df580fbf1f6a741c3a1362d96ffc98;>4c375f1
 fix: correct typos and sql syntax (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/5314;>#5314)
   Additional commits viewable in https://github.com/jeremylong/DependencyCheck/compare/v8.0.0...v8.0.1;>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 

[GitHub] [myfaces] bohmber merged pull request #486: build(ci): fix rat on jenkins

[GitBox]

bohmber merged PR #486:
URL: https://github.com/apache/myfaces/pull/486


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces-tobago] dependabot[bot] opened a new pull request, #3686: build(deps): bump dependency-check-maven from 8.0.0 to 8.0.1

[GitBox]

dependabot[bot] opened a new pull request, #3686:
URL: https://github.com/apache/myfaces-tobago/pull/3686

   Bumps 
[dependency-check-maven](https://github.com/jeremylong/DependencyCheck) from 
8.0.0 to 8.0.1.
   
   Release notes
   Sourced from https://github.com/jeremylong/DependencyCheck/releases;>dependency-check-maven's
 releases.
   
   Version 8.0.1
   Fixed
   
   Fixed Stack Overflow Exception in the gradle plugin 
([dependency-check-gradle/https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/308;>#308](https://github-redirect.dependabot.com/dependency-check/dependency-check-gradle/pull/308;>dependency-check/dependency-check-gradle#308)).
   Fixed No Signature of Method Exception in the gradle plugin 
([dependency-check-gradle/https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/305;>#305](https://github-redirect.dependabot.com/dependency-check/dependency-check-gradle/pull/305;>dependency-check/dependency-check-gradle#305)).
   Updated DB initialization scripts for externally hosted DBs (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5314;>#5314
 and https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5317;>#5317).
   
   Postgres users will need to use the updated init script and 8.0.1.
   
   
   Resolved NPE in the NodePackageAnalyzer (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5339;>#5339).
   
   See the full listing of https://github.com/jeremylong/DependencyCheck/milestone/58?closed=1;>changes.
   
   
   
   Changelog
   Sourced from https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md;>dependency-check-maven's
 changelog.
   
   https://github.com/jeremylong/DependencyCheck/releases/tag/v8.0.1;>Version
 8.0.1 (2023-01-18)
   Fixed
   
   Fixed Stack Overflow Exception in the gradle plugin 
([dependency-check-gradle/https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/308;>#308](https://github-redirect.dependabot.com/dependency-check/dependency-check-gradle/pull/308;>dependency-check/dependency-check-gradle#308)).
   Fixed No Signature of Method Exception in the gradle plugin 
([dependency-check-gradle/https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/305;>#305](https://github-redirect.dependabot.com/dependency-check/dependency-check-gradle/pull/305;>dependency-check/dependency-check-gradle#305)).
   Updated DB initialization scripts for externally hosted DBs (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5314;>#5314
 and https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5317;>#5317).
   
   Postgres users will need to use the updated init script and 8.0.1.
   
   
   Resolved NPE in the NodePackageAnalyzer (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5339;>#5339).
   
   See the full listing of https://github.com/jeremylong/DependencyCheck/milestone/58?closed=1;>changes.
   
   
   
   Commits
   
   https://github.com/jeremylong/DependencyCheck/commit/9873775f1498d4cd5914bbb500f1ca912532f0ba;>9873775
 build:prepare release v8.0.1
   https://github.com/jeremylong/DependencyCheck/commit/7ed94cbce66a2b281bdffac8008c71ff20b35c32;>7ed94cb
 docs: prepare release 8.0.1
   https://github.com/jeremylong/DependencyCheck/commit/a018cc3027908b2529e8f5b68eaed1b989df3d4d;>a018cc3
 fix: npe (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/5339;>#5339)
   https://github.com/jeremylong/DependencyCheck/commit/71ffdcf96f0ba9b49a229730b42dcf6a00b62b47;>71ffdcf
 fix: npe
   https://github.com/jeremylong/DependencyCheck/commit/be9719f5beab3554cde0c1e1e2cf5cf2691f2123;>be9719f
 fix: remove duplicate entries for CISA (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/5332;>#5332)
   https://github.com/jeremylong/DependencyCheck/commit/94afa45a1e9f5b4cff138679bdceaf18f6b67d69;>94afa45
 Remove duplicate entries for CISA
   https://github.com/jeremylong/DependencyCheck/commit/8fac93ba5a1c87797aa5ab50089f51690e9d725f;>8fac93b
 Remove duplicate entries for CISA
   https://github.com/jeremylong/DependencyCheck/commit/e63738ae3d87fd9407acdf3b6a971379e43564c5;>e63738a
 fix: merge_knownexploited is expected to be a procedure using PostgreSQL (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/5317;>#5317)
   https://github.com/jeremylong/DependencyCheck/commit/364e1b7ab8125d3aa7d184a616030f2b20786814;>364e1b7
 Merge branch 'main' into fix_5311
   https://github.com/jeremylong/DependencyCheck/commit/4c375f1618df580fbf1f6a741c3a1362d96ffc98;>4c375f1
 fix: correct typos and sql syntax (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/5314;>#5314)
   Additional commits viewable in https://github.com/jeremylong/DependencyCheck/compare/v8.0.0...v8.0.1;>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 

[GitHub] [myfaces-tobago] dependabot[bot] opened a new pull request, #3684: build(deps): bump dependency-check-maven from 8.0.0 to 8.0.1

[GitBox]

dependabot[bot] opened a new pull request, #3684:
URL: https://github.com/apache/myfaces-tobago/pull/3684

   Bumps 
[dependency-check-maven](https://github.com/jeremylong/DependencyCheck) from 
8.0.0 to 8.0.1.
   
   Release notes
   Sourced from https://github.com/jeremylong/DependencyCheck/releases;>dependency-check-maven's
 releases.
   
   Version 8.0.1
   Fixed
   
   Fixed Stack Overflow Exception in the gradle plugin 
([dependency-check-gradle/https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/308;>#308](https://github-redirect.dependabot.com/dependency-check/dependency-check-gradle/pull/308;>dependency-check/dependency-check-gradle#308)).
   Fixed No Signature of Method Exception in the gradle plugin 
([dependency-check-gradle/https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/305;>#305](https://github-redirect.dependabot.com/dependency-check/dependency-check-gradle/pull/305;>dependency-check/dependency-check-gradle#305)).
   Updated DB initialization scripts for externally hosted DBs (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5314;>#5314
 and https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5317;>#5317).
   
   Postgres users will need to use the updated init script and 8.0.1.
   
   
   Resolved NPE in the NodePackageAnalyzer (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5339;>#5339).
   
   See the full listing of https://github.com/jeremylong/DependencyCheck/milestone/58?closed=1;>changes.
   
   
   
   Changelog
   Sourced from https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md;>dependency-check-maven's
 changelog.
   
   https://github.com/jeremylong/DependencyCheck/releases/tag/v8.0.1;>Version
 8.0.1 (2023-01-18)
   Fixed
   
   Fixed Stack Overflow Exception in the gradle plugin 
([dependency-check-gradle/https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/308;>#308](https://github-redirect.dependabot.com/dependency-check/dependency-check-gradle/pull/308;>dependency-check/dependency-check-gradle#308)).
   Fixed No Signature of Method Exception in the gradle plugin 
([dependency-check-gradle/https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/305;>#305](https://github-redirect.dependabot.com/dependency-check/dependency-check-gradle/pull/305;>dependency-check/dependency-check-gradle#305)).
   Updated DB initialization scripts for externally hosted DBs (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5314;>#5314
 and https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5317;>#5317).
   
   Postgres users will need to use the updated init script and 8.0.1.
   
   
   Resolved NPE in the NodePackageAnalyzer (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5339;>#5339).
   
   See the full listing of https://github.com/jeremylong/DependencyCheck/milestone/58?closed=1;>changes.
   
   
   
   Commits
   
   https://github.com/jeremylong/DependencyCheck/commit/9873775f1498d4cd5914bbb500f1ca912532f0ba;>9873775
 build:prepare release v8.0.1
   https://github.com/jeremylong/DependencyCheck/commit/7ed94cbce66a2b281bdffac8008c71ff20b35c32;>7ed94cb
 docs: prepare release 8.0.1
   https://github.com/jeremylong/DependencyCheck/commit/a018cc3027908b2529e8f5b68eaed1b989df3d4d;>a018cc3
 fix: npe (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/5339;>#5339)
   https://github.com/jeremylong/DependencyCheck/commit/71ffdcf96f0ba9b49a229730b42dcf6a00b62b47;>71ffdcf
 fix: npe
   https://github.com/jeremylong/DependencyCheck/commit/be9719f5beab3554cde0c1e1e2cf5cf2691f2123;>be9719f
 fix: remove duplicate entries for CISA (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/5332;>#5332)
   https://github.com/jeremylong/DependencyCheck/commit/94afa45a1e9f5b4cff138679bdceaf18f6b67d69;>94afa45
 Remove duplicate entries for CISA
   https://github.com/jeremylong/DependencyCheck/commit/8fac93ba5a1c87797aa5ab50089f51690e9d725f;>8fac93b
 Remove duplicate entries for CISA
   https://github.com/jeremylong/DependencyCheck/commit/e63738ae3d87fd9407acdf3b6a971379e43564c5;>e63738a
 fix: merge_knownexploited is expected to be a procedure using PostgreSQL (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/5317;>#5317)
   https://github.com/jeremylong/DependencyCheck/commit/364e1b7ab8125d3aa7d184a616030f2b20786814;>364e1b7
 Merge branch 'main' into fix_5311
   https://github.com/jeremylong/DependencyCheck/commit/4c375f1618df580fbf1f6a741c3a1362d96ffc98;>4c375f1
 fix: correct typos and sql syntax (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/5314;>#5314)
   Additional commits viewable in https://github.com/jeremylong/DependencyCheck/compare/v8.0.0...v8.0.1;>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 

[GitHub] [myfaces-tobago] dependabot[bot] opened a new pull request, #3685: build(deps): bump dependency-check-maven from 8.0.0 to 8.0.1

[GitBox]

dependabot[bot] opened a new pull request, #3685:
URL: https://github.com/apache/myfaces-tobago/pull/3685

   Bumps 
[dependency-check-maven](https://github.com/jeremylong/DependencyCheck) from 
8.0.0 to 8.0.1.
   
   Release notes
   Sourced from https://github.com/jeremylong/DependencyCheck/releases;>dependency-check-maven's
 releases.
   
   Version 8.0.1
   Fixed
   
   Fixed Stack Overflow Exception in the gradle plugin 
([dependency-check-gradle/https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/308;>#308](https://github-redirect.dependabot.com/dependency-check/dependency-check-gradle/pull/308;>dependency-check/dependency-check-gradle#308)).
   Fixed No Signature of Method Exception in the gradle plugin 
([dependency-check-gradle/https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/305;>#305](https://github-redirect.dependabot.com/dependency-check/dependency-check-gradle/pull/305;>dependency-check/dependency-check-gradle#305)).
   Updated DB initialization scripts for externally hosted DBs (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5314;>#5314
 and https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5317;>#5317).
   
   Postgres users will need to use the updated init script and 8.0.1.
   
   
   Resolved NPE in the NodePackageAnalyzer (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5339;>#5339).
   
   See the full listing of https://github.com/jeremylong/DependencyCheck/milestone/58?closed=1;>changes.
   
   
   
   Changelog
   Sourced from https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md;>dependency-check-maven's
 changelog.
   
   https://github.com/jeremylong/DependencyCheck/releases/tag/v8.0.1;>Version
 8.0.1 (2023-01-18)
   Fixed
   
   Fixed Stack Overflow Exception in the gradle plugin 
([dependency-check-gradle/https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/308;>#308](https://github-redirect.dependabot.com/dependency-check/dependency-check-gradle/pull/308;>dependency-check/dependency-check-gradle#308)).
   Fixed No Signature of Method Exception in the gradle plugin 
([dependency-check-gradle/https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/305;>#305](https://github-redirect.dependabot.com/dependency-check/dependency-check-gradle/pull/305;>dependency-check/dependency-check-gradle#305)).
   Updated DB initialization scripts for externally hosted DBs (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5314;>#5314
 and https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5317;>#5317).
   
   Postgres users will need to use the updated init script and 8.0.1.
   
   
   Resolved NPE in the NodePackageAnalyzer (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5339;>#5339).
   
   See the full listing of https://github.com/jeremylong/DependencyCheck/milestone/58?closed=1;>changes.
   
   
   
   Commits
   
   https://github.com/jeremylong/DependencyCheck/commit/9873775f1498d4cd5914bbb500f1ca912532f0ba;>9873775
 build:prepare release v8.0.1
   https://github.com/jeremylong/DependencyCheck/commit/7ed94cbce66a2b281bdffac8008c71ff20b35c32;>7ed94cb
 docs: prepare release 8.0.1
   https://github.com/jeremylong/DependencyCheck/commit/a018cc3027908b2529e8f5b68eaed1b989df3d4d;>a018cc3
 fix: npe (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/5339;>#5339)
   https://github.com/jeremylong/DependencyCheck/commit/71ffdcf96f0ba9b49a229730b42dcf6a00b62b47;>71ffdcf
 fix: npe
   https://github.com/jeremylong/DependencyCheck/commit/be9719f5beab3554cde0c1e1e2cf5cf2691f2123;>be9719f
 fix: remove duplicate entries for CISA (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/5332;>#5332)
   https://github.com/jeremylong/DependencyCheck/commit/94afa45a1e9f5b4cff138679bdceaf18f6b67d69;>94afa45
 Remove duplicate entries for CISA
   https://github.com/jeremylong/DependencyCheck/commit/8fac93ba5a1c87797aa5ab50089f51690e9d725f;>8fac93b
 Remove duplicate entries for CISA
   https://github.com/jeremylong/DependencyCheck/commit/e63738ae3d87fd9407acdf3b6a971379e43564c5;>e63738a
 fix: merge_knownexploited is expected to be a procedure using PostgreSQL (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/5317;>#5317)
   https://github.com/jeremylong/DependencyCheck/commit/364e1b7ab8125d3aa7d184a616030f2b20786814;>364e1b7
 Merge branch 'main' into fix_5311
   https://github.com/jeremylong/DependencyCheck/commit/4c375f1618df580fbf1f6a741c3a1362d96ffc98;>4c375f1
 fix: correct typos and sql syntax (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/5314;>#5314)
   Additional commits viewable in https://github.com/jeremylong/DependencyCheck/compare/v8.0.0...v8.0.1;>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 

[GitHub] [myfaces] melloware merged pull request #485: build(ci): update arquillian drone to 3.0.0-alpha.7 to support latest chromeDriver package.

[GitBox]

melloware merged PR #485:
URL: https://github.com/apache/myfaces/pull/485


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] melloware commented on pull request #485: build(ci): update arquillian drone to 3.0.0-alpha.7 to support latest chromeDriver package.

[GitBox]

melloware commented on PR #485:
URL: https://github.com/apache/myfaces/pull/485#issuecomment-1387304923

   thank you!


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] tandraschko commented on a diff in pull request #484: MYFACES-4550: throw exception if f:validateWholeBean is misplaced

[GitBox]

tandraschko commented on code in PR #484:
URL: https://github.com/apache/myfaces/pull/484#discussion_r1073692899


##
impl/src/main/java/org/apache/myfaces/component/validate/ValidateWholeBeanComponent.java:
##
@@ -55,6 +62,79 @@ public void addValidator(Validator validator)
 // No-op. It does not make sense to allow additional validators to be 
installed.
 }
 
+
+@Override
+public void encodeBegin(FacesContext context) throws IOException
+{
+  UIComponent parent = this.getParent();
+  
+  // find a parent form
+  while (parent != null & !(parent instanceof 
jakarta.faces.component.UIForm))
+  {
+parent = parent.getParent();
+  }
+  
+  if (!(parent instanceof jakarta.faces.component.UIForm))
+  {
+// Throw an exception just as Mojarra
+throw new IllegalStateException("f:validateWholeBean must be placed 
within a form");
+  }
+  
+  validateTagPlacement(parent, this.getClientId(context));
+}
+  
+/*
+ *  As required by https://github.com/jakartaee/faces/issues/1
+ *  Also ensures all inputs are available for f:wholeBeanValidate 
processing
+ *  (otherwise they'd be empty during the validation)
+ *  Based off Mojarra's UIValidateWholeBean#misplacedComponentCheck
+ *  1) Reverse the list of child elements in the form
+ *  2) Loop thorough each child and nested elements (if any)
+ *  3) If we find an input tag (EditableValueHolder) 
+ * and it's group validator matches f:wholeBeanValidate (this part is 
unique to myfaces)
+ * then throw an exception. 
+ *  4) If we find the f:wholeBeanValidate's client id before any 
EditableValueHolder tags, return. 
+ */
+public void validateTagPlacement(UIComponent component, String clientId)
+ throws IllegalStateException
+{
+  List children = component.getChildren();
+  List reversed = new ArrayList();
+  
+  for (int i = children.size() - 1; i >= 0; i--)
+  {
+reversed.add(children.get(i));
+  }
+  
+  for (UIComponent c : reversed)
+  {
+if (c instanceof EditableValueHolder && !(c instanceof 
ValidateWholeBeanComponent))
+{
+  Validator[] validators = ((EditableValueHolder) c).getValidators();
+  for (Validator v : validators)
+  {
+if (v instanceof BeanValidator 
+&& ((BeanValidator) 
v).getValidationGroups().equals(this.getValidationGroups()))
+{
+  System.out.println(((BeanValidator) v).getValidationGroups());

Review Comment:
   remove



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] bohmber opened a new pull request, #485: build(ci): update arquillian drone to 3.0.0-alpha.7 to support latest chromeDriver package.

[GitBox]

bohmber opened a new pull request, #485:
URL: https://github.com/apache/myfaces/pull/485

   remove graphene it's only supporting an old version of selenium. 
   update selenium and tomcat versions.
   minor fixes


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] volosied commented on pull request #484: MYFACES-4550: throw exception if f:validateWholeBean is misplaced

[GitBox]

volosied commented on PR #484:
URL: https://github.com/apache/myfaces/pull/484#issuecomment-1387176556

   What do you mean? An exception is thrown in our code already if the project 
is set to development mode? I tested this, but still received a 200 response? 
   
   Here's the output: 
   https://user-images.githubusercontent.com/5934310/213199541-7948c3f4-f6f5-4ca3-b305-a0c22a085a65.png;>
   
   
   The application would need to increase it's buffer size, since it commits 
the response and then just appends the exception. The TCK expects a 500. Unless 
you think the test needs to be updated? 
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces-tobago] henningn merged pull request #3682: docs(selectManyList): filter description

[GitBox]

henningn merged PR #3682:
URL: https://github.com/apache/myfaces-tobago/pull/3682


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces-tobago] henningn merged pull request #3683: docs(selectManyList): filter description

[GitBox]

henningn merged PR #3683:
URL: https://github.com/apache/myfaces-tobago/pull/3683


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces-tobago] henningn merged pull request #3670: feat: help/message position

[GitBox]

henningn merged PR #3670:
URL: https://github.com/apache/myfaces-tobago/pull/3670


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces-tobago] henningn merged pull request #3672: feat: help/message position

[GitBox]

henningn merged PR #3672:
URL: https://github.com/apache/myfaces-tobago/pull/3672


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces-tobago] henningn opened a new pull request, #3683: docs(selectManyList): filter description

[GitBox]

henningn opened a new pull request, #3683:
URL: https://github.com/apache/myfaces-tobago/pull/3683

   Add a description for filter.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces-tobago] henningn opened a new pull request, #3682: docs(selectManyList): filter description

[GitBox]

henningn opened a new pull request, #3682:
URL: https://github.com/apache/myfaces-tobago/pull/3682

   Add a description for filter.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] tandraschko commented on pull request #484: MYFACES-4550: throw exception if f:validateWholeBean is misplaced

[GitBox]

tandraschko commented on PR #484:
URL: https://github.com/apache/myfaces/pull/484#issuecomment-1386601234

   Actually this is a exception which already fails in development mode
   I would not increase the buffer size in general for this
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] melloware commented on pull request #484: MYFACES-4550: throw exception if f:validateWholeBean is misplaced

[GitBox]

melloware commented on PR #484:
URL: https://github.com/apache/myfaces/pull/484#issuecomment-1386142188

   Just an FYI Mojarra had a similar recent issue about not respecting 
FACELETS_BUFFER_SIZE.  https://github.com/eclipse-ee4j/mojarra/issues/5164


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] volosied commented on pull request #484: MYFACES-4550: throw exception if f:validateWholeBean is misplaced

[GitBox]

volosied commented on PR #484:
URL: https://github.com/apache/myfaces/pull/484#issuecomment-1386094408

   Need to run this against the TCK  before merging.  Also, the TCK needs to 
increase the jakarta.faces.FACELETS_BUFFER_SIZE param since we commit the 
response before the exception. 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] volosied opened a new pull request, #484: MYFACES-4550: throw exception if f:validateWholeBean is misplaced

[GitBox]

volosied opened a new pull request, #484:
URL: https://github.com/apache/myfaces/pull/484

   https://issues.apache.org/jira/browse/MYFACES-4550


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] bohmber commented on pull request #483: build(ci): chromedriver version 109.0.5414.25 contains two files.

[GitBox]

bohmber commented on PR #483:
URL: https://github.com/apache/myfaces/pull/483#issuecomment-1385358820

   @bartoszmajsak thanks a lot 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] bartoszmajsak commented on pull request #483: build(ci): chromedriver version 109.0.5414.25 contains two files.

[GitBox]

bartoszmajsak commented on PR #483:
URL: https://github.com/apache/myfaces/pull/483#issuecomment-1385350575

   @bohmber FYI I've just released Drone 3.0.0-alpha.7 with the fix for this 
very issue. It's already available in official JBoss Repository and should be 
synced with Maven Central shortly.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] bohmber commented on pull request #483: build(ci): chromedriver version 109.0.5414.25 contains two files.

[GitBox]

bohmber commented on PR #483:
URL: https://github.com/apache/myfaces/pull/483#issuecomment-1385101065

   #https://github.com/arquillian/arquillian-extension-drone/pull/373


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces-tobago] henningn merged pull request #3677: build(deps): bump dependency-check-maven from 7.4.4 to 8.0.0

[GitBox]

henningn merged PR #3677:
URL: https://github.com/apache/myfaces-tobago/pull/3677


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces-tobago] henningn merged pull request #3680: build(deps): bump dependency-check-maven from 7.4.4 to 8.0.0

[GitBox]

henningn merged PR #3680:
URL: https://github.com/apache/myfaces-tobago/pull/3680


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces-tobago] henningn merged pull request #3678: build(deps): bump dependency-check-maven from 7.4.4 to 8.0.0

[GitBox]

henningn merged PR #3678:
URL: https://github.com/apache/myfaces-tobago/pull/3678


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces-tobago] henningn merged pull request #3679: build(deps): bump dependency-check-maven from 7.4.4 to 8.0.0

[GitBox]

henningn merged PR #3679:
URL: https://github.com/apache/myfaces-tobago/pull/3679


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces-tobago] henningn merged pull request #3681: build(deps): bump maven-plugin-annotations from 3.7.0 to 3.7.1

[GitBox]

henningn merged PR #3681:
URL: https://github.com/apache/myfaces-tobago/pull/3681


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces-tobago] dependabot[bot] opened a new pull request, #3681: build(deps): bump maven-plugin-annotations from 3.7.0 to 3.7.1

[GitBox]

dependabot[bot] opened a new pull request, #3681:
URL: https://github.com/apache/myfaces-tobago/pull/3681

   Bumps 
[maven-plugin-annotations](https://github.com/apache/maven-plugin-tools) from 
3.7.0 to 3.7.1.
   
   Release notes
   Sourced from https://github.com/apache/maven-plugin-tools/releases;>maven-plugin-annotations's
 releases.
   
   3.7.1
   
   
   
   
   Commits
   
   https://github.com/apache/maven-plugin-tools/commit/52afb9ff7129912a1ff2d02c42487dc3a33f8364;>52afb9f
 [maven-release-plugin] prepare release maven-plugin-tools-3.7.1
   https://github.com/apache/maven-plugin-tools/commit/73065a1ba216235150b832edad4b43ad3207e3ce;>73065a1
 Set version to 3.7.1-SNAPSHOT
   https://github.com/apache/maven-plugin-tools/commit/17aabccca1590f01925db9f63f04a67bd0a4c2f1;>17aabcc
 [MPLUGIN-452] Maven scope and module name logs at wrong level (https://github-redirect.dependabot.com/apache/maven-plugin-tools/issues/190;>#190)
   See full diff in https://github.com/apache/maven-plugin-tools/compare/maven-plugin-tools-3.7.0...maven-plugin-tools-3.7.1;>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.maven.plugin-tools:maven-plugin-annotations=maven=3.7.0=3.7.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces-tobago] dependabot[bot] opened a new pull request, #3680: build(deps): bump dependency-check-maven from 7.4.4 to 8.0.0

[GitBox]

dependabot[bot] opened a new pull request, #3680:
URL: https://github.com/apache/myfaces-tobago/pull/3680

   Bumps 
[dependency-check-maven](https://github.com/jeremylong/DependencyCheck) from 
7.4.4 to 8.0.0.
   
   Release notes
   Sourced from https://github.com/jeremylong/DependencyCheck/releases;>dependency-check-maven's
 releases.
   
   Version 8.0.0
   Added
   
   Utilize the hosted suppression file to allow for faster remediation of 
reported False Positives (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/4723;>#4723).
   Include the https://www.cisa.gov/known-exploited-vulnerabilities-catalog;>CISA Known 
Exploited Vulnerability Catalog (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/4878;>#4878).
   The gradle and maven plugins now have the 
capability to scan the build plugins (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/4035;>#4035).
   The gradle and maven plugins, for transitive 
dependencies, will report the root dependency in the project that included the 
transitive dependency (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5001;>#5001).
   Added properties.security-severity to SARIF report for 
better integration with GitHub Security Code scanning (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5227;>#5277).
   Allow for HTTP auth settings for Retire JS respository (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5209;>#5209).
   New schema for the XML report was added to support some of the above 
additions (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5296;>#5296).
   Added missing gradle option to only warn on remote errors from the OSS 
Index Analyzer ([gradle https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/303;>#303](https://github-redirect.dependabot.com/dependency-check/dependency-check-gradle/pull/303;>dependency-check/dependency-check-gradle#303)).
   
   Changed
   
   Breaking: the database schema updated - if using an 
external database the update scripts must be run!
   The https://tldp.org/LDP/abs/html/exit-status.html;>exit 
codes from the CLI have been changed to be in the range from 0-255 (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/4511;>#4511.
   The OSS Index Analyzer will automatically disable itself if a transport 
error occurs - preventing copious errors from being reported (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5300%5D;>#5300).
   
   Fixed
   
   Added an additional check for rejected CVEs to reduce FP (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5268;>#5268.
   Corrected the analysis of node_modules to prevent NPEs (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5266;>#5266).
   Fixed error when scanning node packages with local dependencies (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5235;>#5235).
   Fixed NPE in the MSBuild Analyzer (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5293;>#5293).
   Several False Positives have been resolved.
   
   See the full listing of https://github.com/jeremylong/DependencyCheck/milestone/46?closed=1;>changes.
   
   
   
   Changelog
   Sourced from https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md;>dependency-check-maven's
 changelog.
   
   https://github.com/jeremylong/DependencyCheck/releases/tag/v8.0.0;>Version
 8.0.0 (2023-01-15)
   Added
   
   Utilize the hosted suppression file to allow for faster remediation of 
reported False Positives (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/4723;>#4723).
   Include the https://www.cisa.gov/known-exploited-vulnerabilities-catalog;>CISA Known 
Exploited Vulnerability Catalog (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/4878;>#4878).
   The gradle and maven plugins now have the 
capability to scan the build plugins (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/4035;>#4035).
   The gradle and maven plugins, for transitive 
dependencies, will report the root dependency in the project that included the 
transitive dependency (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5001;>#5001).
   Added properties.security-severity to SARIF report for 
better integration with GitHub Security Code scanning (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5227;>#5277).
   Allow for HTTP auth settings for Retire JS respository (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5209;>#5209).
   New schema for the XML report was added to support some of the above 
additions (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5296;>#5296).
   Added missing gradle option to only warn on remote errors from the OSS 
Index Analyzer ([gradle 

[GitHub] [myfaces-tobago] dependabot[bot] opened a new pull request, #3679: build(deps): bump dependency-check-maven from 7.4.4 to 8.0.0

[GitBox]

dependabot[bot] opened a new pull request, #3679:
URL: https://github.com/apache/myfaces-tobago/pull/3679

   Bumps 
[dependency-check-maven](https://github.com/jeremylong/DependencyCheck) from 
7.4.4 to 8.0.0.
   
   Release notes
   Sourced from https://github.com/jeremylong/DependencyCheck/releases;>dependency-check-maven's
 releases.
   
   Version 8.0.0
   Added
   
   Utilize the hosted suppression file to allow for faster remediation of 
reported False Positives (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/4723;>#4723).
   Include the https://www.cisa.gov/known-exploited-vulnerabilities-catalog;>CISA Known 
Exploited Vulnerability Catalog (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/4878;>#4878).
   The gradle and maven plugins now have the 
capability to scan the build plugins (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/4035;>#4035).
   The gradle and maven plugins, for transitive 
dependencies, will report the root dependency in the project that included the 
transitive dependency (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5001;>#5001).
   Added properties.security-severity to SARIF report for 
better integration with GitHub Security Code scanning (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5227;>#5277).
   Allow for HTTP auth settings for Retire JS respository (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5209;>#5209).
   New schema for the XML report was added to support some of the above 
additions (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5296;>#5296).
   Added missing gradle option to only warn on remote errors from the OSS 
Index Analyzer ([gradle https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/303;>#303](https://github-redirect.dependabot.com/dependency-check/dependency-check-gradle/pull/303;>dependency-check/dependency-check-gradle#303)).
   
   Changed
   
   Breaking: the database schema updated - if using an 
external database the update scripts must be run!
   The https://tldp.org/LDP/abs/html/exit-status.html;>exit 
codes from the CLI have been changed to be in the range from 0-255 (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/4511;>#4511.
   The OSS Index Analyzer will automatically disable itself if a transport 
error occurs - preventing copious errors from being reported (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5300%5D;>#5300).
   
   Fixed
   
   Added an additional check for rejected CVEs to reduce FP (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5268;>#5268.
   Corrected the analysis of node_modules to prevent NPEs (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5266;>#5266).
   Fixed error when scanning node packages with local dependencies (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5235;>#5235).
   Fixed NPE in the MSBuild Analyzer (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5293;>#5293).
   Several False Positives have been resolved.
   
   See the full listing of https://github.com/jeremylong/DependencyCheck/milestone/46?closed=1;>changes.
   
   
   
   Changelog
   Sourced from https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md;>dependency-check-maven's
 changelog.
   
   https://github.com/jeremylong/DependencyCheck/releases/tag/v8.0.0;>Version
 8.0.0 (2023-01-15)
   Added
   
   Utilize the hosted suppression file to allow for faster remediation of 
reported False Positives (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/4723;>#4723).
   Include the https://www.cisa.gov/known-exploited-vulnerabilities-catalog;>CISA Known 
Exploited Vulnerability Catalog (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/4878;>#4878).
   The gradle and maven plugins now have the 
capability to scan the build plugins (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/4035;>#4035).
   The gradle and maven plugins, for transitive 
dependencies, will report the root dependency in the project that included the 
transitive dependency (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5001;>#5001).
   Added properties.security-severity to SARIF report for 
better integration with GitHub Security Code scanning (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5227;>#5277).
   Allow for HTTP auth settings for Retire JS respository (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5209;>#5209).
   New schema for the XML report was added to support some of the above 
additions (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5296;>#5296).
   Added missing gradle option to only warn on remote errors from the OSS 
Index Analyzer ([gradle 

[GitHub] [myfaces-tobago] dependabot[bot] opened a new pull request, #3678: build(deps): bump dependency-check-maven from 7.4.4 to 8.0.0

[GitBox]

dependabot[bot] opened a new pull request, #3678:
URL: https://github.com/apache/myfaces-tobago/pull/3678

   Bumps 
[dependency-check-maven](https://github.com/jeremylong/DependencyCheck) from 
7.4.4 to 8.0.0.
   
   Release notes
   Sourced from https://github.com/jeremylong/DependencyCheck/releases;>dependency-check-maven's
 releases.
   
   Version 8.0.0
   Added
   
   Utilize the hosted suppression file to allow for faster remediation of 
reported False Positives (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/4723;>#4723).
   Include the https://www.cisa.gov/known-exploited-vulnerabilities-catalog;>CISA Known 
Exploited Vulnerability Catalog (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/4878;>#4878).
   The gradle and maven plugins now have the 
capability to scan the build plugins (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/4035;>#4035).
   The gradle and maven plugins, for transitive 
dependencies, will report the root dependency in the project that included the 
transitive dependency (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5001;>#5001).
   Added properties.security-severity to SARIF report for 
better integration with GitHub Security Code scanning (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5227;>#5277).
   Allow for HTTP auth settings for Retire JS respository (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5209;>#5209).
   New schema for the XML report was added to support some of the above 
additions (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5296;>#5296).
   Added missing gradle option to only warn on remote errors from the OSS 
Index Analyzer ([gradle https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/303;>#303](https://github-redirect.dependabot.com/dependency-check/dependency-check-gradle/pull/303;>dependency-check/dependency-check-gradle#303)).
   
   Changed
   
   Breaking: the database schema updated - if using an 
external database the update scripts must be run!
   The https://tldp.org/LDP/abs/html/exit-status.html;>exit 
codes from the CLI have been changed to be in the range from 0-255 (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/4511;>#4511.
   The OSS Index Analyzer will automatically disable itself if a transport 
error occurs - preventing copious errors from being reported (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5300%5D;>#5300).
   
   Fixed
   
   Added an additional check for rejected CVEs to reduce FP (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5268;>#5268.
   Corrected the analysis of node_modules to prevent NPEs (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5266;>#5266).
   Fixed error when scanning node packages with local dependencies (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5235;>#5235).
   Fixed NPE in the MSBuild Analyzer (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5293;>#5293).
   Several False Positives have been resolved.
   
   See the full listing of https://github.com/jeremylong/DependencyCheck/milestone/46?closed=1;>changes.
   
   
   
   Changelog
   Sourced from https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md;>dependency-check-maven's
 changelog.
   
   https://github.com/jeremylong/DependencyCheck/releases/tag/v8.0.0;>Version
 8.0.0 (2023-01-15)
   Added
   
   Utilize the hosted suppression file to allow for faster remediation of 
reported False Positives (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/4723;>#4723).
   Include the https://www.cisa.gov/known-exploited-vulnerabilities-catalog;>CISA Known 
Exploited Vulnerability Catalog (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/4878;>#4878).
   The gradle and maven plugins now have the 
capability to scan the build plugins (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/4035;>#4035).
   The gradle and maven plugins, for transitive 
dependencies, will report the root dependency in the project that included the 
transitive dependency (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5001;>#5001).
   Added properties.security-severity to SARIF report for 
better integration with GitHub Security Code scanning (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5227;>#5277).
   Allow for HTTP auth settings for Retire JS respository (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5209;>#5209).
   New schema for the XML report was added to support some of the above 
additions (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5296;>#5296).
   Added missing gradle option to only warn on remote errors from the OSS 
Index Analyzer ([gradle 

[GitHub] [myfaces-tobago] dependabot[bot] opened a new pull request, #3677: build(deps): bump dependency-check-maven from 7.4.4 to 8.0.0

[GitBox]

dependabot[bot] opened a new pull request, #3677:
URL: https://github.com/apache/myfaces-tobago/pull/3677

   Bumps 
[dependency-check-maven](https://github.com/jeremylong/DependencyCheck) from 
7.4.4 to 8.0.0.
   
   Release notes
   Sourced from https://github.com/jeremylong/DependencyCheck/releases;>dependency-check-maven's
 releases.
   
   Version 8.0.0
   Added
   
   Utilize the hosted suppression file to allow for faster remediation of 
reported False Positives (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/4723;>#4723).
   Include the https://www.cisa.gov/known-exploited-vulnerabilities-catalog;>CISA Known 
Exploited Vulnerability Catalog (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/4878;>#4878).
   The gradle and maven plugins now have the 
capability to scan the build plugins (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/4035;>#4035).
   The gradle and maven plugins, for transitive 
dependencies, will report the root dependency in the project that included the 
transitive dependency (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5001;>#5001).
   Added properties.security-severity to SARIF report for 
better integration with GitHub Security Code scanning (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5227;>#5277).
   Allow for HTTP auth settings for Retire JS respository (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5209;>#5209).
   New schema for the XML report was added to support some of the above 
additions (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5296;>#5296).
   Added missing gradle option to only warn on remote errors from the OSS 
Index Analyzer ([gradle https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/303;>#303](https://github-redirect.dependabot.com/dependency-check/dependency-check-gradle/pull/303;>dependency-check/dependency-check-gradle#303)).
   
   Changed
   
   Breaking: the database schema updated - if using an 
external database the update scripts must be run!
   The https://tldp.org/LDP/abs/html/exit-status.html;>exit 
codes from the CLI have been changed to be in the range from 0-255 (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/4511;>#4511.
   The OSS Index Analyzer will automatically disable itself if a transport 
error occurs - preventing copious errors from being reported (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5300%5D;>#5300).
   
   Fixed
   
   Added an additional check for rejected CVEs to reduce FP (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5268;>#5268.
   Corrected the analysis of node_modules to prevent NPEs (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5266;>#5266).
   Fixed error when scanning node packages with local dependencies (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5235;>#5235).
   Fixed NPE in the MSBuild Analyzer (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5293;>#5293).
   Several False Positives have been resolved.
   
   See the full listing of https://github.com/jeremylong/DependencyCheck/milestone/46?closed=1;>changes.
   
   
   
   Changelog
   Sourced from https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md;>dependency-check-maven's
 changelog.
   
   https://github.com/jeremylong/DependencyCheck/releases/tag/v8.0.0;>Version
 8.0.0 (2023-01-15)
   Added
   
   Utilize the hosted suppression file to allow for faster remediation of 
reported False Positives (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/4723;>#4723).
   Include the https://www.cisa.gov/known-exploited-vulnerabilities-catalog;>CISA Known 
Exploited Vulnerability Catalog (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/4878;>#4878).
   The gradle and maven plugins now have the 
capability to scan the build plugins (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/issues/4035;>#4035).
   The gradle and maven plugins, for transitive 
dependencies, will report the root dependency in the project that included the 
transitive dependency (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5001;>#5001).
   Added properties.security-severity to SARIF report for 
better integration with GitHub Security Code scanning (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5227;>#5277).
   Allow for HTTP auth settings for Retire JS respository (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5209;>#5209).
   New schema for the XML report was added to support some of the above 
additions (https://github-redirect.dependabot.com/jeremylong/DependencyCheck/pull/5296;>#5296).
   Added missing gradle option to only warn on remote errors from the OSS 
Index Analyzer ([gradle 

[GitHub] [myfaces] bohmber closed pull request #483: build(ci): chromedriver version 109.0.5414.25 contains two files.

[GitBox]

bohmber closed pull request #483: build(ci): chromedriver version 109.0.5414.25 
contains two files.
URL: https://github.com/apache/myfaces/pull/483


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] werpu commented on pull request #475: MYFACES-4545: 4.0 BeanValidator warning on in Development mode

[GitBox]

werpu commented on PR #475:
URL: https://github.com/apache/myfaces/pull/475#issuecomment-1384187957

   I have had a look at it quickly for my tck ports, I decided back then 
against it, because I needed to extend the webdriver. Afair it is a meta layer 
on top of the webdriver which simplifies a few things.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] werpu commented on pull request #475: MYFACES-4545: 4.0 BeanValidator warning on in Development mode

[GitBox]

werpu commented on PR #475:
URL: https://github.com/apache/myfaces/pull/475#issuecomment-1384160459

   Guys have a look at the chrome manager library 
https://github.com/bonigarcia/webdrivermanager
   this takes care of choosing and loading the proper chrome driver!
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] bohmber opened a new pull request, #483: build(ci): chromedriver version 109.0.5414.25 contains two files.

[GitBox]

bohmber opened a new pull request, #483:
URL: https://github.com/apache/myfaces/pull/483

   arquillian try to execute the LICENSE.chromedriver file. Need to stick to 
the 108 version


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] bohmber commented on pull request #475: MYFACES-4545: 4.0 BeanValidator warning on in Development mode

[GitBox]

bohmber commented on PR #475:
URL: https://github.com/apache/myfaces/pull/475#issuecomment-1384118186

   chromedriver version 109.0.5414.25 contains two files now.  
   
   `chromedriver 
LICENSE.chromedriver`
   
   that is the reason why the IT test are failing on my local 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces-master-pom] melloware merged pull request #72: Bump maven-pmd-plugin from 3.19.0 to 3.20.0

[GitBox]

melloware merged PR #72:
URL: https://github.com/apache/myfaces-master-pom/pull/72


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces-master-pom] melloware merged pull request #73: Bump maven-project-info-reports-plugin from 3.4.1 to 3.4.2

[GitBox]

melloware merged PR #73:
URL: https://github.com/apache/myfaces-master-pom/pull/73


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] werpu merged pull request #482: https://issues.apache.org/jira/browse/MYFACES-4532: Fix for MYFACES-4532

[GitBox]

werpu merged PR #482:
URL: https://github.com/apache/myfaces/pull/482


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] werpu merged pull request #481: https://issues.apache.org/jira/browse/MYFACES-4532: Fix for MYFACES-4532

[GitBox]

werpu merged PR #481:
URL: https://github.com/apache/myfaces/pull/481


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] werpu merged pull request #480: https://issues.apache.org/jira/browse/MYFACES-4532: Fix for MYFACES-4532

[GitBox]

werpu merged PR #480:
URL: https://github.com/apache/myfaces/pull/480


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] werpu merged pull request #479: https://issues.apache.org/jira/browse/MYFACES-4532: Fix for MYFACES-4532

[GitBox]

werpu merged PR #479:
URL: https://github.com/apache/myfaces/pull/479


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] tandraschko closed pull request #473: MYFACES-4543: Use Flash Cookies When In Client Window URL Default Mode

[GitBox]

tandraschko closed pull request #473: MYFACES-4543: Use Flash Cookies When In 
Client Window URL Default Mode
URL: https://github.com/apache/myfaces/pull/473


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] bohmber commented on pull request #475: MYFACES-4545: 4.0 BeanValidator warning on in Development mode

[GitBox]

bohmber commented on PR #475:
URL: https://github.com/apache/myfaces/pull/475#issuecomment-1383894858

   @melloware looks like with new Chrome version there is a problem with the IT 
test


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] tandraschko merged pull request #478: MYFACES-4545: 3.0 BeanValidator warning on in Development mode

[GitBox]

tandraschko merged PR #478:
URL: https://github.com/apache/myfaces/pull/478


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] tandraschko merged pull request #477: MYFACES-4545: 2.3 BeanValidator warning on in Development mode

[GitBox]

tandraschko merged PR #477:
URL: https://github.com/apache/myfaces/pull/477


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] tandraschko merged pull request #476: MYFACES-4545: 2.3.-next BeanValidator warning on in Development mode

[GitBox]

tandraschko merged PR #476:
URL: https://github.com/apache/myfaces/pull/476


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] tandraschko merged pull request #475: MYFACES-4545: 4.0 BeanValidator warning on in Development mode

[GitBox]

tandraschko merged PR #475:
URL: https://github.com/apache/myfaces/pull/475


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces-tobago] henningn merged pull request #3675: build(deps): bump tomcat.version from 9.0.70 to 9.0.71

[GitBox]

henningn merged PR #3675:
URL: https://github.com/apache/myfaces-tobago/pull/3675


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces-tobago] henningn merged pull request #3676: build(deps): bump tomcat9.version from 9.0.70 to 9.0.71

[GitBox]

henningn merged PR #3676:
URL: https://github.com/apache/myfaces-tobago/pull/3676


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces-master-pom] dependabot[bot] opened a new pull request, #73: Bump maven-project-info-reports-plugin from 3.4.1 to 3.4.2

[GitBox]

dependabot[bot] opened a new pull request, #73:
URL: https://github.com/apache/myfaces-master-pom/pull/73

   Bumps 
[maven-project-info-reports-plugin](https://github.com/apache/maven-project-info-reports-plugin)
 from 3.4.1 to 3.4.2.
   
   Commits
   
   https://github.com/apache/maven-project-info-reports-plugin/commit/c1eb1d4bcd28f260762045cfa9eea1d53539a58f;>c1eb1d4
 [maven-release-plugin] prepare release 
maven-project-info-reports-plugin-3.4.2
   https://github.com/apache/maven-project-info-reports-plugin/commit/dee3a29c0248c497a9229043490b70cac17b8c12;>dee3a29
 [MPIR-425] Verbatim content should be rendered as plain text
   https://github.com/apache/maven-project-info-reports-plugin/commit/88f2f7690059d71bc4def3a3e4db0bad0cae3e80;>88f2f76
 [MPIR-427] Explicitly start and end tables with Doxia Sinks in report 
renderers
   https://github.com/apache/maven-project-info-reports-plugin/commit/7f80826d74ffbbc66bad4eaff85c0f4c236fd9d0;>7f80826
 [MPIR-426] Remove Apache Buildr from Dependency Information Report
   https://github.com/apache/maven-project-info-reports-plugin/commit/6f03e00075792c1b0d477f4013713848c03fb063;>6f03e00
 update Reproducible Builds badge link
   https://github.com/apache/maven-project-info-reports-plugin/commit/f069182ac218e3696a699c241b2ebf5233c4dd3f;>f069182
 Fix typo
   https://github.com/apache/maven-project-info-reports-plugin/commit/6ca70bc3317a93a5f9c51e8281bd9f128c0bf120;>6ca70bc
 [maven-release-plugin] prepare for next development iteration
   See full diff in https://github.com/apache/maven-project-info-reports-plugin/compare/maven-project-info-reports-plugin-3.4.1...maven-project-info-reports-plugin-3.4.2;>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.maven.plugins:maven-project-info-reports-plugin=maven=3.4.1=3.4.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces-master-pom] dependabot[bot] opened a new pull request, #72: Bump maven-pmd-plugin from 3.19.0 to 3.20.0

[GitBox]

dependabot[bot] opened a new pull request, #72:
URL: https://github.com/apache/myfaces-master-pom/pull/72

   Bumps [maven-pmd-plugin](https://github.com/apache/maven-pmd-plugin) from 
3.19.0 to 3.20.0.
   
   Release notes
   Sourced from https://github.com/apache/maven-pmd-plugin/releases;>maven-pmd-plugin's 
releases.
   
   3.20.0
    Bug Fixes
   
   https://issues.apache.org/jira/browse/MPMD-335;>MPMD-335 - 
Aggregate mode doesn't use additional repositories (https://github-redirect.dependabot.com/apache/maven-pmd-plugin/pull/101;>#101)
 https://github.com/adangel;>@​adangel
   
    Maintenance
   
   https://issues.apache.org/jira/browse/MPMD-361;>MPMD-361 - 
Explicitly start and end tables with Doxia Sinks in report renderers
   
    Dependency updates
   
   https://issues.apache.org/jira/browse/MPMD-360;>MPMD-360 - 
Upgrade to PMD 6.53.0 (https://github-redirect.dependabot.com/apache/maven-pmd-plugin/pull/109;>#109)
 https://github.com/adangel;>@​adangel
   https://issues.apache.org/jira/browse/MPMD-358;>MPMD-358 - 
Upgrade to PMD 6.52.0 (https://github-redirect.dependabot.com/apache/maven-pmd-plugin/pull/104;>#104)
 https://github.com/adangel;>@​adangel
   https://issues.apache.org/jira/browse/MPMD-357;>MPMD-357 - 
Upgrade to PMD 6.51.0 (https://github-redirect.dependabot.com/apache/maven-pmd-plugin/pull/100;>#100)
 https://github.com/adangel;>@​adangel
   Bump release-drafter/release-drafter from 5.21.0 to 5.21.1 (https://github-redirect.dependabot.com/apache/maven-pmd-plugin/pull/99;>#99)
 https://github.com/dependabot;>@​dependabot
   https://issues.apache.org/jira/browse/MPMD-356;>MPMD-356 - 
Upgrade to PMD 6.50.0 (https://github-redirect.dependabot.com/apache/maven-pmd-plugin/pull/98;>#98)
 https://github.com/adangel;>@​adangel
   Bump maven-common-artifact-filters from 3.3.1 to 3.3.2 (https://github-redirect.dependabot.com/apache/maven-pmd-plugin/pull/95;>#95)
 https://github.com/dependabot;>@​dependabot
   Bump release-drafter/release-drafter from 5.20.1 to 5.21.0 (https://github-redirect.dependabot.com/apache/maven-pmd-plugin/pull/93;>#93)
 https://github.com/dependabot;>@​dependabot
   
   
   
   
   Commits
   
   https://github.com/apache/maven-pmd-plugin/commit/55c4d404a1109eded89ae760c92e0cad0b5be10e;>55c4d40
 [maven-release-plugin] prepare release maven-pmd-plugin-3.20.0
   https://github.com/apache/maven-pmd-plugin/commit/f3e188aed9812c38655b7c42ae5620f1d18705ab;>f3e188a
 [MPMD-361] Explicitly start and end tables with Doxia Sinks in report 
renderers
   https://github.com/apache/maven-pmd-plugin/commit/b65c7a6a7feb7ff25b6316e6aeb80114fc472648;>b65c7a6
 [MPMD-360] - Upgrade to PMD 6.53.0 (https://github-redirect.dependabot.com/apache/maven-pmd-plugin/issues/109;>#109)
   https://github.com/apache/maven-pmd-plugin/commit/3c7a47ef29d75ae5c4b0f50e7579c91ab8b9b867;>3c7a47e
 Remove method available from super class
   https://github.com/apache/maven-pmd-plugin/commit/6ee27fccaded3d5477e206f915ef1fe5370a245d;>6ee27fc
 [MPMD-358] - Upgrade to PMD 6.52.0 (https://github-redirect.dependabot.com/apache/maven-pmd-plugin/issues/104;>#104)
   https://github.com/apache/maven-pmd-plugin/commit/1dcc7c168f959947af10294ec9c8a7dfd46c42e5;>1dcc7c1
 Set next development version to 3.20.0-SNAPSHOT
   https://github.com/apache/maven-pmd-plugin/commit/255a35a9a5aee4cc5549915d55a4292eed85bb67;>255a35a
 (doc) Update releasenotes.md
   https://github.com/apache/maven-pmd-plugin/commit/cd954cc768c4bfc30440cda53c081a4640fe8548;>cd954cc
 [MPMD-335] - Aggregate mode doesn't use additional repositories
   https://github.com/apache/maven-pmd-plugin/commit/92434d0d96ebe37a5fb599fa6c3120ab5c7863f1;>92434d0
 add Reproducible Builds badge
   https://github.com/apache/maven-pmd-plugin/commit/7b6623bb49d3bf48f5e8c6b57279bca1cc1e12ef;>7b6623b
 [MPMD-357] - Upgrade to PMD 6.51.0 (https://github-redirect.dependabot.com/apache/maven-pmd-plugin/issues/100;>#100)
   Additional commits viewable in https://github.com/apache/maven-pmd-plugin/compare/maven-pmd-plugin-3.19.0...maven-pmd-plugin-3.20.0;>compare
 view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.apache.maven.plugins:maven-pmd-plugin=maven=3.19.0=3.20.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI 

[GitHub] [myfaces] melloware commented on pull request #475: MYFACES-4545: 4.0 BeanValidator warning on in Production mode

[GitBox]

melloware commented on PR #475:
URL: https://github.com/apache/myfaces/pull/475#issuecomment-1382727436

   @bohmber it looks like the IT tests just started failing with this error..
   
   " IntegrationTest.test » Runtime Unable to instantiate Drone via 
org.openqa.selenium.chrome.ChromeDriver(Capabilities): 
org.openqa.selenium.SessionNotCreatedException: session not created: This 
version of ChromeDriver only supports Chrome version 109"
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces-tobago] dependabot[bot] opened a new pull request, #3676: build(deps): bump tomcat9.version from 9.0.70 to 9.0.71

[GitBox]

dependabot[bot] opened a new pull request, #3676:
URL: https://github.com/apache/myfaces-tobago/pull/3676

   Bumps `tomcat9.version` from 9.0.70 to 9.0.71.
   Updates `tomcat-embed-core` from 9.0.70 to 9.0.71
   
   Updates `tomcat-embed-el` from 9.0.70 to 9.0.71
   
   Updates `tomcat-embed-websocket` from 9.0.70 to 9.0.71
   
   Updates `tomcat-embed-jasper` from 9.0.70 to 9.0.71
   
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces-tobago] dependabot[bot] opened a new pull request, #3675: build(deps): bump tomcat.version from 9.0.70 to 9.0.71

[GitBox]

dependabot[bot] opened a new pull request, #3675:
URL: https://github.com/apache/myfaces-tobago/pull/3675

   Bumps `tomcat.version` from 9.0.70 to 9.0.71.
   Updates `tomcat-el-api` from 9.0.70 to 9.0.71
   
   Updates `tomcat-jasper-el` from 9.0.70 to 9.0.71
   
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces] tandraschko commented on pull request #473: MYFACES-4543: Use Flash Cookies When In Client Window URL Default Mode

[GitBox]

tandraschko commented on PR #473:
URL: https://github.com/apache/myfaces/pull/473#issuecomment-1381912442

   I would do the following:
   1) change your IF to "isUrlMode", also when the user sets it
   2) please add a comment and link to the issue number


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces-tobago] henningn merged pull request #3674: feat(demo): messageLayout

[GitBox]

henningn merged PR #3674:
URL: https://github.com/apache/myfaces-tobago/pull/3674


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces-tobago] henningn merged pull request #3673: feat(demo): messageLayout

[GitBox]

henningn merged PR #3673:
URL: https://github.com/apache/myfaces-tobago/pull/3673


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces-tobago] henningn opened a new pull request, #3674: feat(demo): messageLayout

[GitBox]

henningn opened a new pull request, #3674:
URL: https://github.com/apache/myfaces-tobago/pull/3674

   * make tc:file required; validator is executed if file selected
   * add tc:range/tc:stars example


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [myfaces-tobago] henningn opened a new pull request, #3673: feat(demo): messageLayout

[GitBox]

henningn opened a new pull request, #3673:
URL: https://github.com/apache/myfaces-tobago/pull/3673

   * make tc:file required; validator is executed if file selected
   * add tc:range/tc:stars example


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org