dependabot[bot] opened a new pull request, #2873: URL: https://github.com/apache/tomee/pull/2873
Bumps [org.glassfish:jakarta.faces](https://github.com/eclipse-ee4j/mojarra) from 4.0.18 to 4.0.20. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/eclipse-ee4j/mojarra/releases";>org.glassfish:jakarta.faces's releases</a>.</em></p> <blockquote> <h2>4.0.20 has been released</h2> <p>Bugfix release to address issues found during <a href="https://redirect.github.com/primefaces/primefaces/pull/15049";>PrimeFaces integration tests</a> as well as during <a href="https://redirect.github.com/jakartaee/faces/pull/2215";>resurrecting remaining lost TCK tests</a>.</p> <ul> <li>Maven Central: <a href="https://repo1.maven.org/maven2/org/glassfish/jakarta.faces/4.0.20/";>https://repo1.maven.org/maven2/org/glassfish/jakarta.faces/4.0.20/</a></li> <li>Milestone: <a href="https://github.com/eclipse-ee4j/mojarra/milestone/77?closed=1";>https://github.com/eclipse-ee4j/mojarra/milestone/77?closed=1</a></li> </ul> <h2>What's Changed</h2> <ul> <li>Backport bulk resource read while scanning for EL expressions to 4.0 (<a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5858";>#5858</a>) by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5860";>eclipse-ee4j/mojarra#5860</a></li> <li>Backport dynamic add index fix to 4.0 (<a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5861";>#5861</a>) by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5863";>eclipse-ee4j/mojarra#5863</a></li> <li>Backport <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5864";>#5864</a> and <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5865";>#5865</a> into 4.0 by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5868";>eclipse-ee4j/mojarra#5868</a></li> <li>Fix <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5869";>#5869</a>: deny contracts access by the declared path, not the resolved url by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5870";>eclipse-ee4j/mojarra#5870</a></li> <li>Fix <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5871";>#5871</a>: discard buffered render output on reset instead of dropping the writer by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5872";>eclipse-ee4j/mojarra#5872</a></li> <li>Fix <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5871";>#5871</a>: drain instead of flush the buffered render output on release by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5873";>eclipse-ee4j/mojarra#5873</a></li> <li>Fix <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5874";>#5874</a>: key UIData/UIRepeat per-row child state by clientId, not row index by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5875";>eclipse-ee4j/mojarra#5875</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/eclipse-ee4j/mojarra/compare/4.0.19-RELEASE...4.0.20-RELEASE";>https://github.com/eclipse-ee4j/mojarra/compare/4.0.19-RELEASE...4.0.20-RELEASE</a></p> <h2>4.0.19 has been released</h2> <ul> <li>Maven Central: <a href="https://repo1.maven.org/maven2/org/glassfish/jakarta.faces/4.0.19/";>https://repo1.maven.org/maven2/org/glassfish/jakarta.faces/4.0.19/</a></li> <li>Milestone: <a href="https://github.com/eclipse-ee4j/mojarra/milestone/76?closed=1";>https://github.com/eclipse-ee4j/mojarra/milestone/76?closed=1</a></li> </ul> <h2>What's Changed</h2> <ul> <li>Add a WildFly profile for testing by <a href="https://github.com/jasondlee";><code>@jasondlee</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5738";>eclipse-ee4j/mojarra#5738</a></li> <li>Fix <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5735";>#5735</a>: add MojarraVersion so faces.js gets v= param by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5737";>eclipse-ee4j/mojarra#5737</a></li> <li>Issue 5741 - Fix CSP-related rendering in OutcomeTargetButtonRenderer by <a href="https://github.com/jasondlee";><code>@jasondlee</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5742";>eclipse-ee4j/mojarra#5742</a></li> <li>Update WildFly feature pack version to 40.0.0.Final by <a href="https://github.com/jasondlee";><code>@jasondlee</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5744";>eclipse-ee4j/mojarra#5744</a></li> <li>Fix <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5750";>#5750</a>: NPE when extensionless mapping is used without faces config by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5751";>eclipse-ee4j/mojarra#5751</a></li> <li>Fix <a href="ui:debug">ui:debug</a> under CSP: drop gratuitous eval in generated script by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5765";>eclipse-ee4j/mojarra#5765</a></li> <li>Fix NPE rendering h:inputText with pt: attribute and f:ajax <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5772";>#5772</a> by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5773";>eclipse-ee4j/mojarra#5773</a></li> <li>Emit a development-stage warning when a component binding is not request scoped by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5790";>eclipse-ee4j/mojarra#5790</a></li> <li>Treat a declared default as satisfying a required composite attribute by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5820";>eclipse-ee4j/mojarra#5820</a></li> <li>Fix <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5837";>#5837</a> render event handler attribute once when set via expression by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5839";>eclipse-ee4j/mojarra#5839</a></li> <li>Do not destroy the <a href="https://github.com/ViewScoped";><code>@ViewScoped</code></a> beans of a view map which is still in use by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5845";>eclipse-ee4j/mojarra#5845</a></li> </ul> <h3>Performance review (<a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5753";>#5753</a>)</h3> <p>A large batch of Faces lifecycle performance improvements, backported from 4.1/5.0 under the <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5753";>#5753</a> performance-review effort:</p> <ul> <li>Reduce component tree allocations + cache resolved Renderer to speed up Restore View / Render Response by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5754";>eclipse-ee4j/mojarra#5754</a></li> <li>Cache CDI bean resolution to eliminate per-render BeanManager lookups by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5752";>eclipse-ee4j/mojarra#5752</a></li> <li>Response-writer performance improvements (range-emit + buffer elimination) by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5755";>eclipse-ee4j/mojarra#5755</a></li> <li>Add test/perf benchmark module to compare Faces lifecycle phase timings across mojarra branches by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5756";>eclipse-ee4j/mojarra#5756</a></li> <li>Three small request-hot-path improvements: FacetsMap empty short-circuit, descriptor-map computeIfAbsent, and UIData/UIRepeat restore-state hoist by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5757";>eclipse-ee4j/mojarra#5757</a></li> <li>Reduce request-pipeline overhead (state, traversal, render output, events) — 4.0 backport by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5760";>eclipse-ee4j/mojarra#5760</a></li> <li>Fix slow RESTORE_VIEW: replace the descendant-mark-id cache with a refresh-gated direct scan — 4.0 backport by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5762";>eclipse-ee4j/mojarra#5762</a></li> <li>Backport <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5764";>#5764</a> to 4.0: reduce RESTORE_VIEW overhead (dynamic-add gate, field-backed Facelets markers, ancestor memoization) by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5766";>eclipse-ee4j/mojarra#5766</a></li> <li>Backport <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5767";>#5767</a> to 4.0: eliminate nested UIData/UIRepeat per-row state cost; field-back UIInput hot properties by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5768";>eclipse-ee4j/mojarra#5768</a></li> <li>Backport <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5770";>#5770</a> to 4.0: reduce per-component buildView/render overhead by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5771";>eclipse-ee4j/mojarra#5771</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/eclipse-ee4j/mojarra/commit/022d5cb8a3b75bb2efaf9ee3816f0c6a255c3a48";><code>022d5cb</code></a> Prepare release 4.0.20</li> <li><a href="https://github.com/eclipse-ee4j/mojarra/commit/d33b85737e995551654eaec6c11ae29147174fe6";><code>d33b857</code></a> Merge pull request <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5875";>#5875</a> from eclipse-ee4j/issue_5874</li> <li><a href="https://github.com/eclipse-ee4j/mojarra/commit/717112981d6e1cbb774f7ea1d6da5da179af028c";><code>7171129</code></a> Fix <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5874";>#5874</a>: key UIData/UIRepeat per-row child state by clientId, not row index</li> <li><a href="https://github.com/eclipse-ee4j/mojarra/commit/8b8280b819c414eed4d1b3f33e62b6111db5799d";><code>8b8280b</code></a> Merge pull request <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5873";>#5873</a> from eclipse-ee4j/issue_5871_drain</li> <li><a href="https://github.com/eclipse-ee4j/mojarra/commit/b299e4243366f1148816810510b6a94e654a455c";><code>b299e42</code></a> Fix <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5871";>#5871</a>: drain instead of flush the buffered render output on release</li> <li><a href="https://github.com/eclipse-ee4j/mojarra/commit/e7408da3c270d5ca257e8b7c15cf6152cd646d0b";><code>e7408da</code></a> Merge pull request <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5872";>#5872</a> from eclipse-ee4j/issue_5871</li> <li><a href="https://github.com/eclipse-ee4j/mojarra/commit/0f230012cf212f94c54937412cf47d2550e27b52";><code>0f23001</code></a> Fix <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5871";>#5871</a>: discard buffered render output on reset instead of dropping the wr...</li> <li><a href="https://github.com/eclipse-ee4j/mojarra/commit/a7247525f23942f290196ab36121e66351bc8164";><code>a724752</code></a> Merge pull request <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5870";>#5870</a> from eclipse-ee4j/issue_5869</li> <li><a href="https://github.com/eclipse-ee4j/mojarra/commit/fd3805483fb022bb23c4c3d5bf715a39fdd8c272";><code>fd38054</code></a> Fix <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5869";>#5869</a>: deny contracts access by the declared path, not the resolved url</li> <li><a href="https://github.com/eclipse-ee4j/mojarra/commit/9db7236243c0bc968f7459f37deef06a447b3ada";><code>9db7236</code></a> Merge pull request <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5868";>#5868</a> from eclipse-ee4j/backport_5864_5865</li> <li>Additional commits viewable in <a href="https://github.com/eclipse-ee4j/mojarra/compare/4.0.18-RELEASE...4.0.20-RELEASE";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
