This is an automated email from the ASF dual-hosted git repository.
jamesfredley pushed a change to branch fix/binddata-mass-assignment
in repository https://gitbox.apache.org/repos/asf/grails-core.git
from b89e6a02dd Merge branch '8.0.x' into fix/binddata-mass-assignment
add 5784450e7e [skip ci] Release v8.0.0-M5
add c989200e71 [skip ci] Bump version to 8.0.0-SNAPSHOT
add e88612c33c Merge pull request #16106 from apache/merge-back-8.0.0-M5
add a330f176fa port validate-actions GitHub action from Groovy to Grails
add 674a3a375d Merge pull request #16100 from paulk-asert/validateAction
add 4ac99ab547 Bump release-drafter/release-drafter
add 95d2232e9e Merge pull request #15711 from
apache/dependabot/github_actions/release-drafter/release-drafter-693d20e7c1ce1a81d3a41962f85914253b518449
add 4242d6b39c Bump codecov/codecov-action from 6.0.0 to 7.0.0
add 93fd522fb6 Merge pull request #16038 from
apache/dependabot/github_actions/codecov/codecov-action-7.0.0
add f252b430cb Harden synchronizer token consumption
add 880e6b36ab Trim oversized synchronizer token state
add 5130d3c4ac Document synchronizer token consumption and bounds
add 1ffe64ea47 Merge remote-tracking branch 'origin/8.0.x' into
fix/synchronizer-token-hardening
add e929338408 Merge pull request #15803 from
apache/fix/synchronizer-token-hardening
add bfa1f8e676 Remove unused Forge GitHub create and OAuth integration
add a1e526fd02 Merge branch '8.0.x' into fix/forge-oauth-state-validation
add ac94b25e81 Merge pull request #15812 from
apache/fix/forge-oauth-state-validation
add 994311865b Keep BeanBuilder DSL independent of XML setup
add 833d3e4d8e Avoid XML reader init for missing namespaces
add 5b3d004648 Merge remote-tracking branch 'origin/8.0.x' into
fix/14915-beanbuilder-spring7
add 0f1cf52699 Merge 8.0.x into fix/14915-beanbuilder-spring7
add a3b910951c Merge remote-tracking branch 'origin/8.0.x' into
fix/14915-beanbuilder-spring7
add a1b7309d20 Merge origin/8.0.x into fix/14915-beanbuilder-spring7
add c47fb1ebdb Merge branch '8.0.x' into fix/14915-beanbuilder-spring7
add afabbc5c2a Merge remote-tracking branch 'origin/8.0.x' into
apache/fix/14915-beanbuilder-spring7
add 71efa807c7 Merge pull request #15824 from
apache/fix/14915-beanbuilder-spring7
add f18fc9af04 Revert "Keep BeanBuilder DSL independent of XML setup"
add 3e4fa5c897 Merge pull request #16112 from
apache/revert-15824-fix/14915-beanbuilder-spring7
add 8a3a79ffb6 Add deterministic test task sharding
add 57a387c032 Parallelize critical CI test workloads
add cd4490aea5 Parallelize remaining critical CI workloads
add 7ebf2fb3e1 Shard critical selector test legs
add 7bb015970e Separate rerun build work from its test shards
add 8804f208a9 Shard remaining critical CI test legs
add fcc8f257b9 Merge pull request #16116 from
apache/perf/8.0.x-ci-wall-clock-regression
add 6e914ccac0 Avoid duplicate cached codec metaclass registration
add 5311c4cd97 Add codec metaclass registration benchmark
add 4805301d26 Run codec benchmark as opt-in Spock spec
add a81a84baaf Track codec registrations by weak factory keys
add 413a4f345b Merge remote-tracking branch 'origin/8.0.x' into
fix/15374-codec-metaclass-registration-overhead
add c421fbabcc Merge remote-tracking branch 'origin/8.0.x' into
fix/15374-codec-metaclass-registration-overhead
add ac31469817 Address codec metaclass registration review feedback
add e655aaae65 Merge branch '8.0.x' into
fix/15374-codec-metaclass-registration-overhead
add b37a11c061 Avoid double codec registration at startup and in mockCodec
add 7e08fa926a Key codec metaclass registration by Class and lock per
factory
add bd7ef514fc Merge branch '8.0.x' into
fix/15374-codec-metaclass-registration-overhead
add 59f9b22e7b Preserve codec metaclass registration contracts
add 09b037af96 Remove the ad hoc codec benchmark
add ab63e4e5c0 Cover codec lookup lifecycle initialization
add cf62c7f8d4 Cover mockCodec without lookup reinitialization
add b9f5c1f17e Merge branch '8.0.x' into
fix/15374-codec-metaclass-registration-overhead
add 19bcf52e8c Merge branch '8.0.x' into
fix/15374-codec-metaclass-registration-overhead
add fbdf186fe1 Merge pull request #15800 from
apache/fix/15374-codec-metaclass-registration-overhead
add dad867634c Merge branch '8.0.x' into fix/binddata-mass-assignment
No new revisions were added by this update.
Summary of changes:
.github/workflows/coverage.yml | 2 +-
.github/workflows/forge-deploy-next.yml | 3 +-
.github/workflows/forge-deploy-prev-snapshot.yml | 3 +-
.github/workflows/forge-deploy-prev.yml | 3 +-
.github/workflows/forge-deploy-release.yml | 4 +-
.github/workflows/forge-deploy-snapshot.yml | 3 +-
.github/workflows/gradle.yml | 197 ++++++++++-
.github/workflows/groovy-joint-workflow.yml | 39 ++-
.github/workflows/release-notes.yml | 2 +-
.../workflows/{rat.yml => validate-actions.yml} | 45 ++-
THREAT_MODEL.md | 4 +-
build-logic/plugins/build.gradle | 8 +
.../buildsrc/GrailsValidateActionsPlugin.groovy | 62 ++++
.../grails/buildsrc/TestTaskShardingPlugin.groovy | 174 +++++++++
.../grails/buildsrc/ValidateActionsTask.groovy | 236 +++++++++++++
.../buildsrc/TestTaskShardingPluginSpec.groovy | 387 +++++++++++++++++++++
build.gradle | 4 +-
.../grails/plugins/codecs/CodecsConfiguration.java | 6 +-
.../plugins/codecs/CodecsConfigurationSpec.groovy | 47 +--
.../main/groovy/grails/artefact/Controller.groovy | 29 +-
.../guide/theWebLayer/controllers/formtokens.adoc | 2 +
grails-doc/src/en/ref/Controllers/withForm.adoc | 2 +
grails-encoder/build.gradle | 3 +-
.../grails/encoder/CodecMetaClassSupport.groovy | 74 +++-
.../encoder/CodecMetaClassSupportSpec.groovy | 336 ++++++++++++++++++
grails-forge/README.md | 34 +-
grails-forge/gradle.properties | 1 -
.../grails/forge/api/GrailsForgeConfiguration.java | 69 +---
.../api/create/github/GitHubCreateController.java | 181 ----------
.../forge/api/create/github/GitHubCreateDTO.java | 57 ---
.../api/create/github/GitHubCreateOperation.java | 76 ----
.../api/create/github/GitHubCreateService.java | 220 ------------
.../api/create/github/GitHubRedirectService.java | 149 --------
.../grails-forge-api/native-image.properties | 14 -
.../forge/api/GrailsForgeConfigurationSpec.groovy | 27 +-
.../create/github/GitHubApiMockedController.groovy | 101 ------
.../github/GitHubCreateControllerSpec.groovy | 116 ------
.../github/GitHubOauthMockedController.groovy | 45 ---
.../src/test/resources/logback.xml | 1 -
grails-forge/grails-forge-core/build.gradle | 1 -
.../forge/client/github/oauth/AccessToken.java | 59 ----
.../client/github/oauth/GitHubOAuthClient.java | 37 --
.../client/github/oauth/GitHubOAuthOperations.java | 37 --
.../forge/client/github/v3/GitHubApiClient.java | 39 ---
.../client/github/v3/GitHubApiOperations.java | 94 -----
.../forge/client/github/v3/GitHubRepository.java | 89 -----
.../forge/client/github/v3/GitHubSecret.java | 58 ---
.../client/github/v3/GitHubSecretsPublicKey.java | 50 ---
.../grails/forge/client/github/v3/GitHubUser.java | 68 ----
.../forge/client/github/v3/GitHubWorkflowRun.java | 67 ----
.../forge/client/github/v3/GitHubWorkflowRuns.java | 53 ---
.../java/org/grails/forge/util/GitHubUtil.java | 94 -----
.../grails-forge-web-netty/reflect-config.json | 30 --
.../grails-forge-web-netty/resource-config.json | 5 +-
.../src/main/resources/application.yml | 13 +-
.../src/test/groovy/demo/TestControllerSpec.groovy | 7 +
.../src/test/groovy/demo/TestControllerSpec.groovy | 7 +
.../commons/DefaultGrailsCodecClassTests.groovy | 16 +
.../groovy/org/grails/web/codecs/CodecSpec.groovy | 40 +++
.../mvc/SynchronizerTokensHolderTests.groovy | 145 ++++++++
.../grails/testing/web/GrailsWebUnitTest.groovy | 3 +-
.../servlet/mvc/SynchronizerTokensHolder.groovy | 90 +++--
threat-model.yaml | 1 -
63 files changed, 1870 insertions(+), 1999 deletions(-)
copy .github/workflows/{rat.yml => validate-actions.yml} (61%)
create mode 100644
build-logic/plugins/src/main/groovy/org/apache/grails/buildsrc/GrailsValidateActionsPlugin.groovy
create mode 100644
build-logic/plugins/src/main/groovy/org/apache/grails/buildsrc/TestTaskShardingPlugin.groovy
create mode 100644
build-logic/plugins/src/main/groovy/org/apache/grails/buildsrc/ValidateActionsTask.groovy
create mode 100644
build-logic/plugins/src/test/groovy/org/apache/grails/buildsrc/TestTaskShardingPluginSpec.groovy
copy
grails-data-hibernate5/boot-plugin/src/test/groovy/org/springframework/bean/reader/GroovyBeanDefinitionReaderSpec.groovy
=>
grails-codecs/src/test/groovy/org/grails/plugins/codecs/CodecsConfigurationSpec.groovy
(50%)
create mode 100644
grails-encoder/src/test/groovy/org/grails/encoder/CodecMetaClassSupportSpec.groovy
delete mode 100644
grails-forge/grails-forge-api/src/main/java/org/grails/forge/api/create/github/GitHubCreateController.java
delete mode 100644
grails-forge/grails-forge-api/src/main/java/org/grails/forge/api/create/github/GitHubCreateDTO.java
delete mode 100644
grails-forge/grails-forge-api/src/main/java/org/grails/forge/api/create/github/GitHubCreateOperation.java
delete mode 100644
grails-forge/grails-forge-api/src/main/java/org/grails/forge/api/create/github/GitHubCreateService.java
delete mode 100644
grails-forge/grails-forge-api/src/main/java/org/grails/forge/api/create/github/GitHubRedirectService.java
delete mode 100644
grails-forge/grails-forge-api/src/main/resources/META-INF/native-image/org.grails.forge.api/grails-forge-api/native-image.properties
copy
grails-converters/src/test/groovy/org/grails/web/converters/ConverterUtilSpec.groovy
=>
grails-forge/grails-forge-api/src/test/groovy/org/grails/forge/api/GrailsForgeConfigurationSpec.groovy
(57%)
delete mode 100644
grails-forge/grails-forge-api/src/test/groovy/org/grails/forge/api/create/github/GitHubApiMockedController.groovy
delete mode 100644
grails-forge/grails-forge-api/src/test/groovy/org/grails/forge/api/create/github/GitHubCreateControllerSpec.groovy
delete mode 100644
grails-forge/grails-forge-api/src/test/groovy/org/grails/forge/api/create/github/GitHubOauthMockedController.groovy
delete mode 100644
grails-forge/grails-forge-core/src/main/java/org/grails/forge/client/github/oauth/AccessToken.java
delete mode 100644
grails-forge/grails-forge-core/src/main/java/org/grails/forge/client/github/oauth/GitHubOAuthClient.java
delete mode 100644
grails-forge/grails-forge-core/src/main/java/org/grails/forge/client/github/oauth/GitHubOAuthOperations.java
delete mode 100644
grails-forge/grails-forge-core/src/main/java/org/grails/forge/client/github/v3/GitHubApiClient.java
delete mode 100644
grails-forge/grails-forge-core/src/main/java/org/grails/forge/client/github/v3/GitHubApiOperations.java
delete mode 100644
grails-forge/grails-forge-core/src/main/java/org/grails/forge/client/github/v3/GitHubRepository.java
delete mode 100644
grails-forge/grails-forge-core/src/main/java/org/grails/forge/client/github/v3/GitHubSecret.java
delete mode 100644
grails-forge/grails-forge-core/src/main/java/org/grails/forge/client/github/v3/GitHubSecretsPublicKey.java
delete mode 100644
grails-forge/grails-forge-core/src/main/java/org/grails/forge/client/github/v3/GitHubUser.java
delete mode 100644
grails-forge/grails-forge-core/src/main/java/org/grails/forge/client/github/v3/GitHubWorkflowRun.java
delete mode 100644
grails-forge/grails-forge-core/src/main/java/org/grails/forge/client/github/v3/GitHubWorkflowRuns.java
delete mode 100644
grails-forge/grails-forge-core/src/main/java/org/grails/forge/util/GitHubUtil.java
delete mode 100644
grails-forge/grails-forge-web-netty/src/main/resources/META-INF/native-image/org.grails.forge/grails-forge-web-netty/reflect-config.json
