This is an automated email from the ASF dual-hosted git repository.
dependabot[bot] pushed a change to branch
dependabot/gradle/release24.09/gradle-wrapper-8.14.6
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git
discard 4281a54b2a Bump gradle-wrapper from 8.14.5 to 8.14.6
add 0a7e193c77 Fix CodeQL "Use of externally-controlled format string"
alert in Debug
add 96ab24ebd6 Improved: GL-posting and order-completion invoicing
commit-ECAs lack run-as-user="system" (OFBIZ-13673)
add a123869b0b Improved: Scope password-reset JWTs to their purpose,
confined to the password-change flow
add 2f1c02cbad Bump com.twelvemonkeys.imageio:imageio-tiff from 3.15.2 to
3.15.3
add af0f3a2289 Bump org.apache.tika:tika-core from 3.3.2 to 3.3.3
add 0a2f37b0f1 Bump org.apache.tomcat:tomcat-jasper from 9.0.122 to 9.0.123
add 20bb1fc92a Bump actions/upload-artifact from 7.0.1 to 7.0.2
add 290afc2d65 Fixed: Missing permission checks on FinAccount
GL-reconciliation services (OFBIZ-13683)
add 5c03e83907 Improved: Bump github/codeql-action/init and analyze from
4.38.2 to 4.38.3
add 74aaccf3e8 Bump ossf/scorecard-action from 2.4.4 to 2.5.0
add 0f6d9389de Bump dompurify in
/themes/common-theme/webapp/common-theme/js
add b1319105d9 Fixed: URL.getFile() used as a filesystem path breaks OFBiz
when the install directory contains a space (OFBIZ-13687)
add b3ead19c4c Fixed: Allow the content upload directory in the default
LOCAL_FILE allow-list (OFBIZ-13689)
add b0ef62cda2 Fixed: PDF survey services fail to store answers and throw
a NullPointerException when no PDF is given (OFBIZ-13688)
add 9bbbb9a325 Fixed: Preserve Webtools theme when editing entities
(OFBIZ-12072)
add 09aee9791f Fixed: Survey PDF services read any server file named in
the pdfFileNameIn parameter (OFBIZ-13690)
add 438e730102 Bump com.github.ben-manes.caffeine:caffeine from 3.3.0 to
3.3.1
add 81c415f30f Bump com.auth0:java-jwt from 4.6.1 to 4.6.2
add 971b3b85ec Fixed: Survey PDF services throw a NullPointerException
when contentId matches no Content (OFBIZ-13692)
add 8560a95ef0 Fixed: cleanAll deletes the version-controlled
package-lock.json files (OFBIZ-13695)
add 09cd441570 Implemented: Generate release notes with GitHub and label
pull requests by type from their title prefix (OFBIZ-13696)
add f283779a43 Improved: Label pull requests titled "Bump ..." as
dependencies so that the release notes leave them out (OFBIZ-13696)
add 704c45d21d Fixed: PDF files with a ZUGFeRD invoice are always rejected
on upload
add 991e4e1089 Improved: Set the release_branch label of pull requests
automatically (OFBIZ-13696)
add bd60bae496 Bump the codeql-action group with 2 updates
add fb81b2f5ac Bump actions/setup-java from 6.0.1 to 6.1.0
add 22cfe98ed9 Fixed: Add permission checks to WebAnalyticsConfig services
add 258bae01aa Fixed: Encode the source URL of screen image widgets
add 5297b1fc39 Fixed: Enforces order-update authorization in
updateShipGroupShipInfo and addItemToApprovedOrder
add 124855ba1a Fixed: Require the ORDERMGR_UPDATE permission in the
updateTrackingNumber service
add 56eed8aeb2 Fixed: Encode the source URL of menu, tree and form images
add 2bcee44388 Fixed: CodeQL workflow fails while printing debug logs
add e0153bbb9a Fixed: Build the sort links of list forms with an encoded
query string
add 80c72a01e7 Improved: Remove the parsing of query strings encoded in
the request path
add d67b3bbab2 Fixed: Check every URL parameter value for markup in
ControlFilter
add 2dadc449d5 Fixed: init-gradle-wrapper installs a wrapper jar that does
not match the published checksum (OFBIZ-13699)
add b8ff9f1df8 Fixed: Check the owner of the shopping list in
checkShoppingListSecurity
add d8c71e71fd Fixed: Check that the dataResourceId belongs to the
contentId in SimpleContentViewHandler
add a4c8bf80f0 Bump gradle-wrapper from 8.14.5 to 8.14.6
This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version. This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:
* -- * -- B -- O -- O -- O (4281a54b2a)
\
N -- N -- N
refs/heads/dependabot/gradle/release24.09/gradle-wrapper-8.14.6 (a4c8bf80f0)
You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.
Any revisions marked "omit" are not gone; other references still
refer to them. Any revisions marked "discard" are gone forever.
No new revisions were added by this update.
Summary of changes:
.../asf-allowlist-check.yml => release.yml} | 53 +++----
.github/workflows/codeql-analysis.yml | 5 +-
.github/workflows/gradle.yml | 2 +-
.github/workflows/pr-type-label.yml | 162 +++++++++++++++++++++
.github/workflows/scorecard.yml | 4 +-
.../accounting/servicedef/secas_ledger.xml | 8 +-
.../accounting/servicedef/services_finaccount.xml | 12 +-
.../invoice/InvoiceServicesScript.groovy | 5 +-
applications/content/config/ContentUiLabels.xml | 18 +--
.../content/servicedef/services_survey.xml | 11 +-
.../ofbiz/content/survey/PdfSurveyServices.java | 50 +++----
.../content/view/SimpleContentViewHandler.java | 7 +
applications/content/widget/survey/SurveyForms.xml | 2 -
applications/order/servicedef/secas.xml | 2 +-
applications/order/servicedef/services.xml | 5 +-
.../order/servicedef/services_shoppinglist.xml | 1 +
.../shoppinglist/ShoppingListServicesScript.groovy | 8 +
.../apache/ofbiz/order/order/OrderServices.java | 12 ++
applications/product/servicedef/services.xml | 3 +
.../org/apache/ofbiz/product/image/ScaleImage.java | 5 +-
.../imagemanagement/ImageManagementServices.java | 3 +-
.../ofbiz/securityext/login/LoginEvents.java | 5 +-
.../src/main/groovy/ofbiz-node-conventions.gradle | 19 +--
dependencies.gradle | 16 +-
.../java/org/apache/ofbiz/base/util/Debug.java | 70 ++++-----
.../org/apache/ofbiz/base/util/ScriptUtil.java | 3 +-
.../java/org/apache/ofbiz/base/util/UtilHttp.java | 21 ---
.../java/org/apache/ofbiz/base/util/UtilURL.java | 23 ++-
framework/common/servicedef/services.xml | 8 +
.../java/org/apache/ofbiz/common/CommonEvents.java | 3 +-
.../apache/ofbiz/common/login/LoginServices.java | 11 +-
.../org/apache/ofbiz/minilang/MiniLangUtil.java | 3 +-
framework/security/config/security.properties | 9 +-
.../org/apache/ofbiz/security/SecuredUpload.java | 2 +-
.../org/apache/ofbiz/security/SecurityUtil.java | 35 ++++-
.../apache/ofbiz/webapp/control/ControlFilter.java | 36 +----
.../apache/ofbiz/webapp/control/LoginWorker.java | 33 ++++-
.../apache/ofbiz/webapp/view/ApacheFopWorker.java | 6 +-
.../ofbiz/webtools/entity/FindGeneric.groovy | 4 -
framework/webtools/widget/CommonScreens.xml | 1 +
.../widget/renderer/html/HtmlMenuRenderer.java | 15 +-
.../widget/renderer/html/HtmlTreeRenderer.java | 16 +-
.../widget/renderer/macro/MacroFormRenderer.java | 23 +--
.../widget/renderer/macro/MacroMenuRenderer.java | 4 +
.../widget/renderer/macro/MacroScreenRenderer.java | 5 +
.../widget/renderer/macro/MacroTreeRenderer.java | 9 +-
.../macro/RenderableFtlFormElementsBuilder.java | 4 +-
.../renderer/macro/MacroFormRendererTest.java | 3 +-
gradle/init-gradle-wrapper.ps1 | 100 ++++++++++++-
gradle/init-gradle-wrapper.sh | 97 +++++++++++-
.../webapp/common-theme/js/package-lock.json | 8 +-
.../webapp/common-theme/js/package.json | 2 +-
52 files changed, 694 insertions(+), 278 deletions(-)
copy .github/{workflows/asf-allowlist-check.yml => release.yml} (50%)
create mode 100644 .github/workflows/pr-type-label.yml
