dependabot[bot] opened a new pull request, #2886: URL: https://github.com/apache/tomee/pull/2886
Bumps [org.glassfish:jakarta.faces](https://github.com/eclipse-ee4j/mojarra) from 4.1.9 to 4.1.11. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/eclipse-ee4j/mojarra/releases";>org.glassfish:jakarta.faces's releases</a>.</em></p> <blockquote> <h2>4.1.11 has been released</h2> <p>Bugfix release to address issues found during <a href="https://redirect.github.com/primefaces/primefaces/pull/15049";>PrimeFaces integration tests</a> as well as during <a href="https://redirect.github.com/jakartaee/faces/pull/2215";>resurrecting remaining lost TCK tests</a>.</p> <ul> <li>Maven Central: <a href="https://repo1.maven.org/maven2/org/glassfish/jakarta.faces/4.1.11/";>https://repo1.maven.org/maven2/org/glassfish/jakarta.faces/4.1.11/</a></li> <li>Milestone: <a href="https://github.com/eclipse-ee4j/mojarra/milestone/78?closed=1";>https://github.com/eclipse-ee4j/mojarra/milestone/78?closed=1</a></li> </ul> <h2>What's Changed</h2> <ul> <li>Backport bulk resource read while scanning for EL expressions to 4.0 (<a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5858";>#5858</a>) by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5860";>eclipse-ee4j/mojarra#5860</a></li> <li>Backport dynamic add index fix to 4.0 (<a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5861";>#5861</a>) by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5863";>eclipse-ee4j/mojarra#5863</a></li> <li>Backport <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5864";>#5864</a> and <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5865";>#5865</a> into 4.0 by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5868";>eclipse-ee4j/mojarra#5868</a></li> <li>Fix <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5869";>#5869</a>: deny contracts access by the declared path, not the resolved url by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5870";>eclipse-ee4j/mojarra#5870</a></li> <li>Fix <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5871";>#5871</a>: discard buffered render output on reset instead of dropping the writer by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5872";>eclipse-ee4j/mojarra#5872</a></li> <li>Fix <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5871";>#5871</a>: drain instead of flush the buffered render output on release by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5873";>eclipse-ee4j/mojarra#5873</a></li> <li>Fix <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5874";>#5874</a>: key UIData/UIRepeat per-row child state by clientId, not row index by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5875";>eclipse-ee4j/mojarra#5875</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/eclipse-ee4j/mojarra/compare/4.1.10-RELEASE...4.1.11-RELEASE";>https://github.com/eclipse-ee4j/mojarra/compare/4.1.10-RELEASE...4.1.11-RELEASE</a></p> <h2>4.1.10 has been released</h2> <ul> <li>Maven Central: <a href="https://repo1.maven.org/maven2/org/glassfish/jakarta.faces/4.1.10/";>https://repo1.maven.org/maven2/org/glassfish/jakarta.faces/4.1.10/</a></li> <li>Milestone: <a href="https://github.com/eclipse-ee4j/mojarra/milestone/75?closed=1";>https://github.com/eclipse-ee4j/mojarra/milestone/75?closed=1</a></li> </ul> <h2>What's Changed</h2> <ul> <li>Fix <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5733";>#5733</a>: fallback using response encoding when request encoding is by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5734";>eclipse-ee4j/mojarra#5734</a></li> <li>Backport of inline js for non-CSP apps by <a href="https://github.com/jasondlee";><code>@jasondlee</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5732";>eclipse-ee4j/mojarra#5732</a></li> <li>Add a WildFly profile for testing by <a href="https://github.com/jasondlee";><code>@jasondlee</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5738";>eclipse-ee4j/mojarra#5738</a></li> <li>Fix <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5735";>#5735</a>: add MojarraVersion so faces.js gets v= param by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5737";>eclipse-ee4j/mojarra#5737</a></li> <li>Issue 5741 - Fix CSP-related rendering in OutcomeTargetButtonRenderer by <a href="https://github.com/jasondlee";><code>@jasondlee</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5742";>eclipse-ee4j/mojarra#5742</a></li> <li>Update feature pack coords for WildFly 40 Final, EE 11 variant by <a href="https://github.com/jasondlee";><code>@jasondlee</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5743";>eclipse-ee4j/mojarra#5743</a></li> <li>Update WildFly feature pack version to 40.0.0.Final by <a href="https://github.com/jasondlee";><code>@jasondlee</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5744";>eclipse-ee4j/mojarra#5744</a></li> <li>Fix <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5750";>#5750</a>: NPE when extensionless mapping is used without faces config by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5751";>eclipse-ee4j/mojarra#5751</a></li> <li>Fix <a href="ui:debug">ui:debug</a> under CSP: drop gratuitous eval in generated script by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5765";>eclipse-ee4j/mojarra#5765</a></li> <li>Fix NPE rendering h:inputText with pt: attribute and f:ajax <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5772";>#5772</a> by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5773";>eclipse-ee4j/mojarra#5773</a></li> <li>Emit a development-stage warning when a component binding is not request scoped by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5790";>eclipse-ee4j/mojarra#5790</a></li> <li>Treat a declared default as satisfying a required composite attribute by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5820";>eclipse-ee4j/mojarra#5820</a></li> <li>Fix <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5837";>#5837</a> render event handler attribute once when set via expression by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5839";>eclipse-ee4j/mojarra#5839</a></li> <li>Do not destroy the <a href="https://github.com/ViewScoped";><code>@ViewScoped</code></a> beans of a view map which is still in use by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5845";>eclipse-ee4j/mojarra#5845</a></li> </ul> <h3>Performance review (<a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5753";>#5753</a>)</h3> <p>A large batch of Faces lifecycle performance improvements, developed on 4.1 and 5.0 under the <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5753";>#5753</a> performance-review effort (the paired 4.0 backports are included in the compare range below):</p> <ul> <li>Reduce component tree allocations + cache resolved Renderer to speed up Restore View / Render Response by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5754";>eclipse-ee4j/mojarra#5754</a></li> <li>Cache CDI bean resolution to eliminate per-render BeanManager lookups by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5752";>eclipse-ee4j/mojarra#5752</a></li> <li>Response-writer performance improvements (range-emit + buffer elimination) by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5755";>eclipse-ee4j/mojarra#5755</a></li> <li>Add test/perf benchmark module to compare Faces lifecycle phase timings across mojarra branches by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5756";>eclipse-ee4j/mojarra#5756</a></li> <li>Three small request-hot-path improvements: FacetsMap empty short-circuit, descriptor-map computeIfAbsent, and UIData/UIRepeat restore-state hoist by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5757";>eclipse-ee4j/mojarra#5757</a></li> <li>Reduce request-pipeline overhead (state, traversal, render output, events) by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5759";>eclipse-ee4j/mojarra#5759</a></li> <li>Reduce request-pipeline overhead (state, traversal, render output, events) — 4.0 backport by <a href="https://github.com/BalusC";><code>@BalusC</code></a> in <a href="https://redirect.github.com/eclipse-ee4j/mojarra/pull/5760";>eclipse-ee4j/mojarra#5760</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/eclipse-ee4j/mojarra/commit/12cd8daa3a5fa6d3d5936f8f6b2141a89ac18049";><code>12cd8da</code></a> Prepare release 4.1.11</li> <li><a href="https://github.com/eclipse-ee4j/mojarra/commit/f1d656d96ba10249a92e1433430c13443fe8de4d";><code>f1d656d</code></a> Merge <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5874";>#5874</a> from 4.0 into 4.1</li> <li><a href="https://github.com/eclipse-ee4j/mojarra/commit/d33b85737e995551654eaec6c11ae29147174fe6";><code>d33b857</code></a> Merge pull request <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5875";>#5875</a> from eclipse-ee4j/issue_5874</li> <li><a href="https://github.com/eclipse-ee4j/mojarra/commit/717112981d6e1cbb774f7ea1d6da5da179af028c";><code>7171129</code></a> Fix <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5874";>#5874</a>: key UIData/UIRepeat per-row child state by clientId, not row index</li> <li><a href="https://github.com/eclipse-ee4j/mojarra/commit/b7379a9a7779e0f144ca3d293b62bf929d22ed6c";><code>b7379a9</code></a> Merge <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5871";>#5871</a> from 4.0 into 4.1</li> <li><a href="https://github.com/eclipse-ee4j/mojarra/commit/8b8280b819c414eed4d1b3f33e62b6111db5799d";><code>8b8280b</code></a> Merge pull request <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5873";>#5873</a> from eclipse-ee4j/issue_5871_drain</li> <li><a href="https://github.com/eclipse-ee4j/mojarra/commit/b299e4243366f1148816810510b6a94e654a455c";><code>b299e42</code></a> Fix <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5871";>#5871</a>: drain instead of flush the buffered render output on release</li> <li><a href="https://github.com/eclipse-ee4j/mojarra/commit/b0e8c7ab66873ee6b95efac93e707c9b1044ff2c";><code>b0e8c7a</code></a> Merge <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5869";>#5869</a>, <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5871";>#5871</a> from 4.0 into 4.1</li> <li><a href="https://github.com/eclipse-ee4j/mojarra/commit/e7408da3c270d5ca257e8b7c15cf6152cd646d0b";><code>e7408da</code></a> Merge pull request <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5872";>#5872</a> from eclipse-ee4j/issue_5871</li> <li><a href="https://github.com/eclipse-ee4j/mojarra/commit/0f230012cf212f94c54937412cf47d2550e27b52";><code>0f23001</code></a> Fix <a href="https://redirect.github.com/eclipse-ee4j/mojarra/issues/5871";>#5871</a>: discard buffered render output on reset instead of dropping the wr...</li> <li>Additional commits viewable in <a href="https://github.com/eclipse-ee4j/mojarra/compare/4.1.9-RELEASE...4.1.11-RELEASE";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
