This is an automated email from the ASF dual-hosted git repository.
reta pushed a change to branch
dependabot/maven/net.sourceforge.pmd-pmd-java-7.27.0
in repository https://gitbox.apache.org/repos/asf/cxf.git
discard 8b6334ff4ff Fix PMD violations
discard ce4ee66a182 Apply suggestion from @reta
discard d0a2dd5fcc1 Bump net.sourceforge.pmd:pmd-java from 7.26.0 to 7.27.0
add 177afac4f22 Restrict default SAML encryption algorithms (#3434)
add 7468e3c0b3e Add a fallback to prevent attacks on RSA 1.5 in the Jose
code (#3435)
add 89579d97d66 Bump io.undertow:undertow-core from 2.4.2.Final to
2.4.3.Final (#3436)
add cc6b208e8c8 Bump org.graalvm.buildtools:native-maven-plugin from
1.1.10 to 1.1.11 (#3437)
add 4656df1d766 Bump org.jboss.ws.cxf:jbossws-cxf-client from 7.4.0.Final
to 7.4.1.Final (#3439)
add a814dac0ae4 Bump org.apache.felix:maven-bundle-plugin from 6.1.0 to
6.1.2 (#3440)
add 8c2302b5dbd Put a configurable limit on deeply parenthesized
sub-expressions in the FiqlParser (#3442)
add 744d59daf9e Bump com.fasterxml.woodstox:woodstox-core from 7.2.1 to
7.2.2 (#3446)
add ec3389a6db2 Bump io.swagger.core.v3:swagger-jaxrs2-jakarta from 2.2.54
to 2.2.55 (#3445)
add 913f72c74cf Put a max length on the Fiql search term and fix
performance parsing issue (#3443)
add 6d2b4231868 Harden Content-Disposition filename parsing against ReDoS
(#3448)
add a958b4b96d5 Fixup #3423 Use a properly random source to generate
digest client (#3451)
add b5f9095340f Bump jakarta.json.bind:jakarta.json.bind-api from 3.0.2 to
3.0.3 (#3450)
add bb0766db255 Bump cxf.dropwizard5.version from 5.0.7 to 5.0.8 (#3449)
add 3fd6143353b Add formParamsMaxSize to FormEncodingProvider and estimate
form params count before decoding / parsing (#3444)
add d34ae62a4dc Fix STS secret-key sizing (#3453)
add bc5154d6d6b Update Dropwizard Metrics to 4.2.40
add b7d1fb98ea2 Update Jetty to 12.1.13
add 050efbc0861 Bump net.sourceforge.pmd:pmd-java from 7.26.0 to 7.27.0
add 12902a58512 Apply suggestion from @reta
add c38ed38029a Fix PMD violations
This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version. This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:
* -- * -- B -- O -- O -- O (8b6334ff4ff)
\
N -- N -- N
refs/heads/dependabot/maven/net.sourceforge.pmd-pmd-java-7.27.0 (c38ed38029a)
You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.
Any revisions marked "omit" are not gone; other references still
refer to them. Any revisions marked "discard" are gone forever.
No new revisions were added by this update.
Summary of changes:
.../apache/cxf/attachment/ContentDisposition.java | 3 +-
.../cxf/attachment/ContentDispositionTest.java | 37 +++----
.../release/samples/jax_rs/graalvm_basic/pom.xml | 4 +-
.../src/main/release/samples/jaxws_graalvm/pom.xml | 4 +-
.../samples/jaxws_graalvm_dynamic/client/pom.xml | 2 +-
.../samples/jaxws_graalvm_dynamic/server/pom.xml | 2 +-
distribution/src/main/release/samples/pom.xml | 4 +-
.../main/release/samples/ws_transaction/pom.xml | 2 +-
.../jaxws/CxfJaxwsAutoConfiguration.java | 1 +
.../SpringBasedTimedAnnotationProviderTest.java | 2 +-
.../cxf/maven_plugin/wadlto/OptionLoader.java | 2 +-
parent/pom.xml | 14 +--
pom.xml | 2 +-
.../cxf/jaxrs/provider/FormEncodingProvider.java | 9 +-
.../java/org/apache/cxf/jaxrs/utils/FormUtils.java | 28 ++++-
.../cxf/jaxrs/ext/search/SearchContextImpl.java | 6 +-
.../cxf/jaxrs/ext/search/fiql/FiqlParser.java | 73 ++++++++++++-
.../jaxrs/ext/search/SearchContextImplTest.java | 24 +++++
.../jaxrs/ext/search/fiql/FiqlParserDepthTest.java | 108 +++++++++++++++++++
.../jaxrs/ext/search/fiql/FiqlParserReDoSTest.java | 102 ++++++++++++++++++
.../jose/jwe/WrappedKeyDecryptionAlgorithm.java | 49 +++++++--
.../jose/jwe/JweCompactReaderWriterTest.java | 103 ++++++++++++++++++
.../saml/sso/SAMLProtocolResponseValidator.java | 56 +++++++++-
.../saml/sso/SAMLResponseValidatorTest.java | 118 +++++++++++++++++++++
.../transport/http/auth/DigestAuthSupplier.java | 18 +++-
...SecureConversationTokenInterceptorProvider.java | 7 +-
.../cxf/sts/operation/AbstractOperation.java | 3 +-
.../sts/token/provider/DefaultSubjectProvider.java | 8 +-
.../cxf/sts/token/provider/TokenProviderUtils.java | 36 +++++++
.../cxf/systest/jaxrs/BookContinuationStore.java | 2 +-
.../jaxrs/ClientHttpConnectionOutInterceptor.java | 3 +-
.../systest/jaxrs/JAXRSClientServerBookTest.java | 26 +++++
.../jaxrs/reactive/RxJava2MaybeService.java | 1 +
.../jaxrs/reactive/RxJava2SingleService.java | 1 +
.../jaxrs/reactive/RxJava3MaybeService.java | 1 +
.../jaxrs/reactive/RxJava3SingleService.java | 1 +
.../cxf/systest/swa/ClientServerSwaTest.java | 1 +
.../cxf/systest/swa/SwANoMimeServiceImpl.java | 1 +
.../org/apache/cxf/systest/swa/SwAServiceImpl.java | 1 +
.../cxf/systest/jms/swa/ClientServerSwaTest.java | 1 +
.../apache/cxf/systest/jms/swa/SwAServiceImpl.java | 1 +
.../multipart/SwANoMimeServiceImpl.java | 1 +
.../http_undertow/multipart/SwAServiceImpl.java | 1 +
.../systest/http_jetty/EngineLifecycleTest.java | 1 +
.../cxf/systest/https/conduit/HTTPSClientTest.java | 2 +
.../apache/cxf/systest/mtom/ClientMtomXopTest.java | 1 +
.../cxf/systest/mtom/ClientMtomXopWithJMSTest.java | 1 +
.../apache/cxf/systest/ws/transfer/TestUtils.java | 12 +--
48 files changed, 812 insertions(+), 74 deletions(-)
copy
rt/bindings/corba/src/test/java/org/apache/cxf/binding/corba/runtime/CorbaStreamWriterTest.java
=> core/src/test/java/org/apache/cxf/attachment/ContentDispositionTest.java
(56%)
create mode 100644
rt/rs/extensions/search/src/test/java/org/apache/cxf/jaxrs/ext/search/fiql/FiqlParserDepthTest.java
create mode 100644
rt/rs/extensions/search/src/test/java/org/apache/cxf/jaxrs/ext/search/fiql/FiqlParserReDoSTest.java
