This is an automated email from the ASF dual-hosted git repository.
dependabot[bot] pushed a change to branch
dependabot/maven/main/org.apache.felix-maven-bundle-plugin-6.1.2
in repository https://gitbox.apache.org/repos/asf/karaf.git
omit 23367a1f00 Pin bndlib to 7.1.0 to work around bnd 7.2.0+
Import-Service filter corruption
omit dab1a08979 build(deps): bump org.apache.felix:maven-bundle-plugin
add 515d1ceb64 Pin maven-plugin versions in karaf-maven-plugin (#2872)
add 25b80adbbf build(deps): bump
org.apache.maven.plugins:maven-plugin-plugin (#2875)
add b8d5faf5ac build(deps): bump
org.apache.maven.plugin-tools:maven-plugin-annotations (#2873)
add bd3efa68f3 feat(jakarta): Upgrade Pax Web to 11.1.3 (#2725)
add 3d60f0e737 build(deps): bump org.apache.aries:org.apache.aries.util
(#2780)
add 39b9149ff0 Use atomic move instead of delete-then-rename in
SimpleDownloadTask (#2841)
add d226d45021 Replace activation-api-1.2.1 by jakarta variant (#2621)
add fdd7b11b5b build(deps-dev): bump org.eclipse.platform:org.eclipse.osgi
(#2886)
add 54dd45ad05 fix(config): restrict config:install to the admin role
(#2861)
add f14236a6ee Apply the JMX RBAC guard to MBean lifecycle operations
(#2865)
add d2cff4af22 Escape %u/%dn/%fqdn substitutions in LDAP search filters
(CWE-90) (#2880)
add 2bf5992d23 Refactored usage of Optional<> as method parameters (#2720)
add 80b6182540 Drop guava 23 (#2889)
add 2e17378865 build(deps-dev): bump org.jline:jline from 4.4.2 to 4.4.3
(#2888)
add 01d37060b9 Reject shell metacharacters in instance javaOpts and add
missing instance ACL (#2878)
add 1b889e0412 Avoid the non-varargs call warning in AsmProxyFactory
(#2870)
add a3d1c631e3 Ensure configuration files are always written within
${karaf.etc} (#2867)
add df21d0d8e3 fix(jdbc,jms): add command ACLs for the jdbc and jms scopes
(#2864)
add 511df4e0fc Restrict feature:repo-add -i and feature:repo-remove -u to
admin role (#2883)
add e637cf5232 Allow configuring base docker image in DockerfileMojo
(#2785) (#2839)
add 11a24a18d4 Upgrade bouncycastle from 1.85 to 1.86 (#2896)
add 751700e01e GH-2741: Clean the OSGi bundle cache on JDK version change
(#2898)
add 772fcec2d7 Fix race condition corrupting cfg files when updating an
existing configuration (#2897)
add f137029173 build(deps): bump camel.version from 4.18.2 to 4.18.4
(#2903)
add 2b6096baed build(deps): bump
org.codehaus.mojo:build-helper-maven-plugin (#2902)
add b4831ef979 build(deps): bump org.codehaus.mojo:exec-maven-plugin
(#2907)
add 54c6fb156e Update security scope (#2912)
add 60c2c84524 build(deps): bump org.hibernate.orm:hibernate-core (#2913)
add 61d8201712 Restrict WebConsole plugin getResource() to /res/ paths
(#2892)
add c94ffea5b7 build(deps): bump maven.resolver.version from 2.0.22 to
2.0.23 (#2916)
add c039d152eb Update copyright year to 2026 in NOTICE files (#2917)
add 0c112e2ae0 build(deps): bump org.apache.felix:maven-bundle-plugin
This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version. This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:
* -- * -- B -- O -- O -- O (23367a1f00)
\
N -- N -- N
refs/heads/dependabot/maven/main/org.apache.felix-maven-bundle-plugin-6.1.2
(0c112e2ae0)
You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.
Any revisions marked "omit" are not gone; other references still
refer to them. Any revisions marked "discard" are gone forever.
No new revisions were added by this update.
Summary of changes:
NOTICE | 2 +-
SECURITY.md | 5 +-
.../src/main/distribution/NOTICE | 2 +-
.../src/main/distribution/NOTICE | 2 +-
.../apache-karaf-mix/src/main/distribution/NOTICE | 2 +-
.../apache-karaf/src/main/distribution/NOTICE | 2 +-
assemblies/features/base/pom.xml | 10 +-
.../enterprise/src/main/feature/feature.xml | 96 +++++++-
.../features/standard/src/main/feature/feature.xml | 68 +++++
.../karaf/config/command/InstallCommand.java | 5 +-
.../apache/karaf/config/command/MetaCommand.java | 17 +-
.../completers/ConfigurationPropertyCompleter.java | 21 +-
.../karaf/config/core/MetaServiceCaller.java | 5 +-
.../karaf/config/core/impl/ConfigMBeanImpl.java | 5 +-
.../config/core/impl/ConfigRepositoryImpl.java | 23 +-
.../config/core/impl/ConfigMBeanImplTest.java | 4 +-
.../impl/ConfigRepositoryImplContainmentTest.java | 137 +++++++++++
examples/karaf-docker-example/README.md | 4 +-
.../karaf-docker-example-dynamic-dist/pom.xml | 1 +
.../karaf-docker-example-static-dist/pom.xml | 3 +
.../src/main/feature/feature.xml | 2 +-
.../internal/download/impl/SimpleDownloadTask.java | 18 +-
.../internal/service/FeatureConfigInstaller.java | 21 +-
features/core/src/main/resources/META-INF/NOTICE | 2 +-
.../download/impl/SimpleDownloadTaskTest.java | 158 ++++++++++++
.../service/FeatureConfigInstallerTest.java | 45 +++-
http/src/main/resources/META-INF/NOTICE | 2 +-
.../core/internal/InstanceServiceImpl.java | 15 ++
.../karaf/instance/resources/etc/jmx.acl.cfg | 5 +
.../etc/org.apache.karaf.command.acl.config.cfg | 6 +
.../etc/org.apache.karaf.command.acl.feature.cfg | 11 +
...g => org.apache.karaf.command.acl.instance.cfg} | 20 +-
itests/test/pom.xml | 7 -
.../src/test/filtered-resources/etc/feature.xml | 10 +
.../java/org/apache/karaf/itests/FeatureTest.java | 10 +-
.../java/org/apache/karaf/itests/InstanceTest.java | 46 ++--
.../test/java/org/apache/karaf/itests/XATest.java | 22 +-
.../itests/ssh/ConfigSshCommandSecurityTest.java | 29 +++
.../itests/ssh/FeatureSshCommandSecurityTest.java | 30 +++
.../itests/ssh/JdbcSshCommandSecurityTest.java | 79 ++++++
.../itests/ssh/JmsSshCommandSecurityTest.java | 80 ++++++
.../apache/karaf/itests/ssh/SshKeyFormatTest.java | 11 +-
.../karaf/jaas/modules/ldap/LDAPBackingEngine.java | 4 +-
.../apache/karaf/jaas/modules/ldap/LDAPCache.java | 10 +-
.../karaf/jaas/modules/ldap/LDAPLoginModule.java | 2 +-
.../jaas/modules/ldap/LDAPPubkeyLoginModule.java | 2 +-
jaas/modules/src/main/resources/META-INF/NOTICE | 2 +-
.../karaf/jaas/modules/ldap/LdapCacheTest.java | 17 ++
.../org/apache/karaf/main/ConfigProperties.java | 10 +
.../java/org/apache/karaf/main/util/Utils.java | 38 +++
.../java/org/apache/karaf/main/util/UtilsTest.java | 117 +++++++++
.../karaf/management/KarafMBeanServerGuard.java | 86 ++++++-
.../internal/MBeanInvocationHandler.java | 2 +-
.../management/KarafMBeanServerGuardTest.java | 129 ++++++++++
.../developer-guide/karaf-maven-plugin.adoc | 10 +-
.../src/main/asciidoc/user-guide/monitoring.adoc | 11 +
manual/src/main/asciidoc/user-guide/security.adoc | 12 +-
maven/core/src/main/resources/META-INF/NOTICE | 2 +-
pom.xml | 45 ++--
.../coordinator/src/main/resources/META-INF/NOTICE | 2 +-
.../eventadmin/src/main/resources/META-INF/NOTICE | 2 +-
.../impl/runtime/proxy/AsmProxyFactory.java | 63 ++++-
.../impl/runtime/proxy/AsmProxyFactoryTest.java | 274 +++++++++++++++++++++
.../staticcm/src/main/resources/META-INF/NOTICE | 2 +-
tooling/karaf-maven-plugin/pom.xml | 2 +-
.../src/it/test-dockerfile/verify.bsh | 8 +-
.../org/apache/karaf/tooling/DockerfileMojo.java | 23 +-
.../main/resources/META-INF/plexus/components.xml | 16 +-
.../apache/karaf/tooling/DockerfileMojoTest.java | 175 +++++++++++++
tooling/karaf-services-maven-plugin/pom.xml | 2 +-
tooling/utils/pom.xml | 6 -
.../tools/utils/KarafPropertiesEditorTest.java | 5 +-
.../main/java/org/apache/karaf/util/PathUtils.java | 50 ++++
.../java/org/apache/karaf/util/PathUtilsTest.java | 67 +++++
.../console/src/main/resources/META-INF/NOTICE | 2 +-
.../karaf/webconsole/features/FeaturesPlugin.java | 10 +-
.../apache/karaf/webconsole/gogo/GogoPlugin.java | 11 +-
.../apache/karaf/webconsole/http/HttpPlugin.java | 11 +-
.../karaf/webconsole/instance/InstancePlugin.java | 11 +-
wrapper/src/main/resources/META-INF/NOTICE | 2 +-
80 files changed, 2074 insertions(+), 212 deletions(-)
create mode 100644
config/core/src/test/java/org/apache/karaf/config/core/impl/ConfigRepositoryImplContainmentTest.java
create mode 100644
features/core/src/test/java/org/apache/karaf/features/internal/download/impl/SimpleDownloadTaskTest.java
copy
instance/src/main/resources/org/apache/karaf/instance/resources/etc/{org.apache.karaf.command.acl.kar.cfg
=> org.apache.karaf.command.acl.instance.cfg} (74%)
create mode 100644
itests/test/src/test/java/org/apache/karaf/itests/ssh/JdbcSshCommandSecurityTest.java
create mode 100644
itests/test/src/test/java/org/apache/karaf/itests/ssh/JmsSshCommandSecurityTest.java
create mode 100644 main/src/test/java/org/apache/karaf/main/util/UtilsTest.java
create mode 100644
tooling/karaf-maven-plugin/src/test/java/org/apache/karaf/tooling/DockerfileMojoTest.java
create mode 100644 util/src/main/java/org/apache/karaf/util/PathUtils.java
create mode 100644 util/src/test/java/org/apache/karaf/util/PathUtilsTest.java
