dev  

Messages by Thread

• [ANNOUNCE] Apache Jackrabbit Oak 1.22.25 released Julian Reschke
• [jira] [Updated] (JCRVLT-857) Upgrade embedded Woodstox and TXW to 7.3.0/4.0.9 Konrad Windszus (Jira)
• [ANNOUNCE] Apache Jackrabbit FileVault 4.3.0 released Konrad Windszus
• [jira] [Closed] (JCRVLT-844) Improve logging for CNFE when loading install hook Konrad Windszus (Jira)
• [jira] [Closed] (JCRVLT-859) Binary files resembling Docview XML may not survive export/import roundtrip Konrad Windszus (Jira)
• [jira] [Closed] (JCRVLT-855) Upgrade embedded JR2 versions to 2.22.5 Konrad Windszus (Jira)
• [jira] [Closed] (JCRVLT-861) Reject platform names containing traversal characters (.., or /) Konrad Windszus (Jira)
• [jira] [Closed] (JCRVLT-851) Unclosed package can leave tempfiles behind Konrad Windszus (Jira)
• [jira] [Closed] (JCRVLT-864) Bump JLine to 3.30.17 Konrad Windszus (Jira)
• [jira] [Closed] (JCRVLT-863) Bump minimum required JR2 version to 2.20.18 Konrad Windszus (Jira)
• [jira] [Closed] (JCRVLT-856) Install Hooks do not properly validate admin access Konrad Windszus (Jira)
• [jira] [Closed] (JCRVLT-857) Upgrade embedded Woodstox and TXW to 4.3.0/4.0.9 Konrad Windszus (Jira)
• [jira] [Closed] (JCRVLT-858) Prevent persistent writes during dry runs Konrad Windszus (Jira)
• [jira] [Closed] (JCRVLT-862) Restrict "config.xml" includes/excludes to ItemFilter's only Konrad Windszus (Jira)
• [jira] [Closed] (JCRVLT-860) Reject package ids containing "/" or control characters Konrad Windszus (Jira)
• [jira] [Closed] (JCRVLT-847) Defer spotless execution to "verify" phase Konrad Windszus (Jira)
• [jira] [Updated] (JCRVLT-859) Binary files resembling Docview XML may not survive export/import roundtrip Konrad Windszus (Jira)
• [jira] [Updated] (JCRVLT-858) Prevent persistent writes during dry runs Konrad Windszus (Jira)
• [jira] [Updated] (JCRVLT-862) Restrict "config.xml" includes/excludes to ItemFilter's only Konrad Windszus (Jira)
• [jira] [Updated] (JCRVLT-860) Reject package ids containing "/" or control characters Konrad Windszus (Jira)
• [jira] [Updated] (JCRVLT-861) Reject platform names containing traversal characters (.., or /) Konrad Windszus (Jira)
• [jira] [Updated] (JCRVLT-856) Install Hooks do not properly validate admin access Konrad Windszus (Jira)
• [ANNOUNCE] Apache Jackrabbit Oak 2.8.0 released Julian Reschke
• [jira] [Updated] (JCR-5257) Update Jackrabbit Trunk to Oak 2.8.0 Julian Reschke (Jira)
  • [jira] [Updated] (JCR-5257) Update Jackrabbit Trunk to Oak 2.8.0 Julian Reschke (Jira)
• [PR] Remove usage of o.a.felix.utils.json and o.a.commons.io [jackrabbit-filevault] via GitHub
  • Re: [PR] RCP: Remove usage of o.a.felix.utils.json and o.a.commons.io [jackrabbit-filevault] via GitHub
  • Re: [PR] RCP: Remove usage of o.a.felix.utils.json and o.a.commons.io [jackrabbit-filevault] via GitHub
• [PR] JCRVLT-856 : check permissions before registering install hooks [jackrabbit-filevault] via GitHub
• [PR] JCRVLT-863 : bump required Jackrabbit libraries to 2.20.18 [jackrabbit-filevault] via GitHub
• [PR] JCRVLT-862 : prevent loading arbitrary classes in config.xml [jackrabbit-filevault] via GitHub
  • Re: [PR] JCRVLT-862 : prevent loading arbitrary classes in config.xml [jackrabbit-filevault] via GitHub
  • Re: [PR] JCRVLT-862 : prevent loading arbitrary classes in config.xml [jackrabbit-filevault] via GitHub
  • Re: [PR] JCRVLT-862 : prevent loading arbitrary classes in config.xml [jackrabbit-filevault] via GitHub
  • Re: [PR] JCRVLT-862 : prevent loading arbitrary classes in config.xml [jackrabbit-filevault] via GitHub
  • Re: [PR] JCRVLT-862 : prevent loading arbitrary classes in config.xml [jackrabbit-filevault] via GitHub
  • Re: [PR] JCRVLT-862 : prevent loading arbitrary classes in config.xml [jackrabbit-filevault] via GitHub
  • Re: [PR] JCRVLT-862 : prevent loading arbitrary classes in config.xml [jackrabbit-filevault] via GitHub
  • Re: [PR] JCRVLT-862 : prevent loading arbitrary classes in config.xml [jackrabbit-filevault] via GitHub
  • Re: [PR] JCRVLT-862 : prevent loading arbitrary classes in config.xml [jackrabbit-filevault] via GitHub
  • Re: [PR] JCRVLT-862 : prevent loading arbitrary classes in config.xml [jackrabbit-filevault] via GitHub
  • Re: [PR] JCRVLT-862 : prevent loading arbitrary classes in config.xml [jackrabbit-filevault] via GitHub
  • Re: [PR] JCRVLT-862 : prevent loading arbitrary classes in config.xml [jackrabbit-filevault] via GitHub
  • Re: [PR] JCRVLT-862 : prevent loading arbitrary classes in config.xml [jackrabbit-filevault] via GitHub
• [jira] [Created] (JCRVLT-870) Add CI for 3.2.x branch Julian Reschke (Jira)
• [PR] JCRVLT-870: Enable CI for 3.2.x branch [jackrabbit-filevault] via GitHub
  • Re: [PR] JCRVLT-870: Enable CI for 3.2.x branch [jackrabbit-filevault] via GitHub
  • Re: [PR] JCRVLT-870: Enable CI for 3.2.x branch [jackrabbit-filevault] via GitHub
  • Re: [PR] JCRVLT-870: Enable CI for 3.2.x branch [jackrabbit-filevault] via GitHub
  • Re: [PR] JCRVLT-870: Enable CI for 3.2.x branch [jackrabbit-filevault] via GitHub
• [PR] JCRVLT-858 : prevent persistent writes during dry runs [jackrabbit-filevault] via GitHub
• [jira] [Updated] (JCRVLT-870) Enable CI for 3.2.x branch Julian Reschke (Jira)
• [PR] JCRVLT-859 : escape sniffable files during export [jackrabbit-filevault] via GitHub
• [PR] JCRVLT-860 : reject backslash and control characters in PackageId validation [jackrabbit-filevault] via GitHub
  • Re: [PR] JCRVLT-860 : reject backslash and control characters in PackageId validation [jackrabbit-filevault] via GitHub
  • Re: [PR] JCRVLT-860 : reject backslash and control characters in PackageId validation [jackrabbit-filevault] via GitHub
  • Re: [PR] JCRVLT-860 : reject backslash and control characters in PackageId validation [jackrabbit-filevault] via GitHub
  • Re: [PR] JCRVLT-860 : reject backslash and control characters in PackageId validation [jackrabbit-filevault] via GitHub
  • Re: [PR] JCRVLT-860 : reject backslash and control characters in PackageId validation [jackrabbit-filevault] via GitHub
• [PR] JCRVLT-861: Reject platform names containing traversal characters (ba… [jackrabbit-filevault] via GitHub
  • Re: [PR] JCRVLT-861: Reject platform names containing traversal characters (ba… [jackrabbit-filevault] via GitHub
• [jira] [Created] (JCRVLT-868) Upgrade to ASF Parent POM 40 Konrad Windszus (Jira)
• [jira] [Created] (JCRVLT-869) Update documentation at https://jackrabbit.apache.org/filevault/howto_release.html Konrad Windszus (Jira)
• [jira] [Created] (JCRVLT-867) Add project metadata to .asf.yaml Konrad Windszus (Jira)
• [jira] [Created] (JCRVLT-866) Set up vote template Konrad Windszus (Jira)
• [jira] [Updated] (JCRVLT-865) Release via ATR Konrad Windszus (Jira)
• [jira] [Updated] (JCRVLT-866) Set up vote template Konrad Windszus (Jira)
• [jira] [Updated] (JCRVLT-865) Release via ATR (Apache Trusted Releases) Konrad Windszus (Jira)
  • [jira] [Updated] (JCRVLT-865) Release via ATR (Apache Trusted Releases) Konrad Windszus (Jira)
  • [jira] [Updated] (JCRVLT-865) Release via ATR (Apache Trusted Releases) Konrad Windszus (Jira)
  • [jira] [Updated] (JCRVLT-865) Release via ATR (Apache Trusted Releases) Konrad Windszus (Jira)
• [jira] [Created] (JCRVLT-865) Release via ATR Konrad Windszus (Jira)
• [VOTE] Release Apache Jackrabbit FileVault 4.3.0 Konrad Windszus
  • Re: [VOTE] Release Apache Jackrabbit FileVault 4.3.0 Konrad Windszus
  • Re: [VOTE] Release Apache Jackrabbit FileVault 4.3.0 Manfred Baedke
  • Re: [VOTE] Release Apache Jackrabbit FileVault 4.3.0 Julian Reschke
  • Re: [VOTE] Release Apache Jackrabbit FileVault 4.3.0 Konrad Windszus
  • Re: [VOTE] Release Apache Jackrabbit FileVault 4.3.0 Jörg Hoh via dev
  • Re: [VOTE] Release Apache Jackrabbit FileVault 4.3.0 Rishabh Daim
  • [RESULT][VOTE] Release Apache Jackrabbit FileVault 4.3.0 Konrad Windszus
• [jira] [Resolved] (JCRVLT-863) Bump minimum required JR2 version to 2.20.18 Konrad Windszus (Jira)
• [PR] JCRVLT-799 Allow "check-release-notes-updated" on SNAPSHOT versions as [jackrabbit-filevault] via GitHub
  • Re: [PR] JCRVLT-799 Allow "check-release-notes-updated" on SNAPSHOT versions as [jackrabbit-filevault] via GitHub
  • Re: [PR] JCRVLT-799 Allow "check-release-notes-updated" on SNAPSHOT versions as [jackrabbit-filevault] via GitHub
• [jira] [Updated] (JCRVLT-799) mvn deploy fails on RELEASE-NOTES.txt check Konrad Windszus (Jira)
• [jira] [Updated] (JCRVLT-864) Bump JLine to 3.30.17 Konrad Windszus (Jira)
• [jira] [Resolved] (JCRVLT-864) Bump JAnsi to 3.30.17 Konrad Windszus (Jira)
• [jira] [Assigned] (JCRVLT-864) Bump JAnsi to 3.30.17 Konrad Windszus (Jira)
• [jira] [Created] (JCRVLT-864) Bump JAnsi to 3.30.17 Konrad Windszus (Jira)
• [PR] Release notes for 4.3.0 [jackrabbit-filevault] via GitHub
  • Re: [PR] Release notes for 4.3.0 [jackrabbit-filevault] via GitHub
  • Re: [PR] Release notes for 4.3.0 [jackrabbit-filevault] via GitHub
• [PR] JCRVLT-863 Bump minimum required JR2 version to 2.20.18 [jackrabbit-filevault] via GitHub
  • Re: [PR] JCRVLT-863 Bump minimum required JR2 version to 2.20.18 [jackrabbit-filevault] via GitHub
  • Re: [PR] JCRVLT-863 Bump minimum required JR2 version to 2.20.18 [jackrabbit-filevault] via GitHub
• [jira] [Updated] (JCRVLT-863) Bump minimum required JR2 version to 2.20.18 Konrad Windszus (Jira)
• [jira] [Created] (JCRVLT-863) Bump minimum required JR2 version to 2.20.18 Konrad Windszus (Jira)
• [jira] [Commented] (JCRVLT-714) Allow package to be built from multiple source directories Konrad Windszus (Jira)
• [jira] [Resolved] (JCRVLT-857) Upgrade embedded Woodstox and TXW to 4.3.0/4.0.9 Konrad Windszus (Jira)
• [jira] [Created] (JCRVLT-857) Upgrade embedded Woodstox and TXW to 4.3.0/4.0.9 Konrad Windszus (Jira)
• [PR] GRANITE-74250: enforce admin-session check before loading install hook classes [jackrabbit-filevault] via GitHub
  • Re: [PR] GRANITE-74250: enforce admin-session check before loading install hook classes [jackrabbit-filevault] via GitHub
  • Re: [PR] Enforce admin-session check before loading install hook classes [jackrabbit-filevault] via GitHub
  • Re: [PR] Enforce admin-session check before loading install hook classes [jackrabbit-filevault] via GitHub
  • Re: [PR] Enforce admin-session check before loading install hook classes [jackrabbit-filevault] via GitHub
  • Re: [PR] Enforce admin-session check before loading install hook classes [jackrabbit-filevault] via GitHub
• [jira] [Commented] (JCR-5266) Publish Build Scans to develocity.apache.org Robert Munteanu (Jira)
• [PR] Upgrade maximum Oak/JR2 version to 2.6.0/2.22.5 [jackrabbit-filevault] via GitHub
  • Re: [PR] JCRVLT-855 Upgrade maximum Oak/JR2 version to 2.6.0/2.22.5 [jackrabbit-filevault] via GitHub
  • Re: [PR] Upgrade maximum Oak/JR2 version to 2.6.0/2.22.5 [jackrabbit-filevault] via GitHub
  • Re: [PR] JCRVLT-855 Upgrade maximum Oak/JR2 version to 2.6.0/2.22.5 [jackrabbit-filevault] via GitHub
• [jira] [Created] (JCR-5266) Publish Build Scans to develocity.apache.org Clay Johnson (Jira)
• [jira] [Resolved] (JCRVLT-821) Update of Jackrabbit (max) to Jackrabbit 2.22.2 fails Konrad Windszus (Jira)
• [jira] [Created] (JCRVLT-855) Upgrade embedded JR2 versions to 2.22.5 Konrad Windszus (Jira)
• [jira] [Updated] (JCRVLT-855) Upgrade embedded JR2 versions to 2.22.5 Konrad Windszus (Jira)
  • [jira] [Updated] (JCRVLT-855) Upgrade embedded JR2 versions to 2.22.5 Konrad Windszus (Jira)
  • [jira] [Updated] (JCRVLT-855) Upgrade embedded JR2 versions to 2.22.5 Konrad Windszus (Jira)
  • [jira] [Updated] (JCRVLT-855) Upgrade embedded JR2 versions to 2.22.5 Konrad Windszus (Jira)
• [jira] [Created] (JCRVLT-854) Require Java 17 at runtime Konrad Windszus (Jira)
• [jira] [Resolved] (JCR-5258) webapp: update tomcat dependency to 9.0.121 Julian Reschke (Jira)
• [jira] [Created] (JCR-5265) Adopt Apache Commons Secure XML Konrad Windszus (Jira)
• [jira] [Commented] (JCR-5265) Adopt Apache Commons Secure XML Konrad Windszus (Jira)
  • [jira] [Commented] (JCR-5265) Adopt Apache Commons Secure XML Julian Reschke (Jira)
  • [jira] [Commented] (JCR-5265) Adopt Apache Commons Secure XML Konrad Windszus (Jira)
• Missing Gary D. Gregory
  • Re: Missing Konrad Windszus
• [jira] [Assigned] (JCRVLT-853) Use Apache Commons Secure XML for creating JAXP objects (parsers/generators) Konrad Windszus (Jira)
• [PR] JCRVLT-853 Use Apache Commons Secure for JAXP instantiation [jackrabbit-filevault] via GitHub
  • Re: [PR] JCRVLT-853 Use Apache Commons Secure for JAXP instantiation [jackrabbit-filevault] via GitHub
  • Re: [PR] JCRVLT-853 Use Apache Commons Secure for JAXP instantiation [jackrabbit-filevault] via GitHub
  • Re: [PR] JCRVLT-853 Use Apache Commons Secure for JAXP instantiation [jackrabbit-filevault] via GitHub
  • Re: [PR] JCRVLT-853 Use Apache Commons Secure for JAXP instantiation [jackrabbit-filevault] via GitHub
  • Re: [PR] JCRVLT-853 Use Apache Commons Secure XML for JAXP instantiation [jackrabbit-filevault] via GitHub
• Apache Jackrabbit Security Releases: CVE-2026-92414 and CVE-2026-92415 Julian Reschke
• [jira] [Updated] (JCRVLT-853) Use Apache Commons Secure XML for creating JAXP objects (parsers/generators) Konrad Windszus (Jira)
• [jira] [Updated] (JCRVLT-853) Use Apache Commons Secure XML for creating XML parsers Konrad Windszus (Jira)
• [jira] [Created] (JCRVLT-853) Use Apache Commons Secure XML for creating XML parsers Konrad Windszus (Jira)
• [jira] [Updated] (JCR-5260) DavEx client runs Class.forName + (String)-constructor on server-controlled error bodies (Uncaught non-RepositoryException types in HTTP responses break JCR clients) Julian Reschke (Jira)
  • [jira] [Updated] (JCR-5260) DavEx client runs Class.forName + (String)-constructor on server-controlled error bodies (Uncaught non-RepositoryException types in HTTP responses break JCR clients) Julian Reschke (Jira)
  • [jira] [Updated] (JCR-5260) DavEx client runs Class.forName + (String)-constructor on server-controlled error bodies (Uncaught non-RepositoryException types in HTTP responses break JCR clients) Julian Reschke (Jira)
  • [jira] [Updated] (JCR-5260) DavEx client runs Class.forName + (String)-constructor on server-controlled error bodies (Uncaught non-RepositoryException types in HTTP responses break JCR clients) Julian Reschke (Jira)
• [jira] [Updated] (JCR-5261) Pre-auth hijack of cached sessions via derivable WebDAV lock tokens (WebDAV lock tokens violate specs due to path-based generation) Julian Reschke (Jira)
  • [jira] [Updated] (JCR-5261) Pre-auth hijack of cached sessions via derivable WebDAV lock tokens (WebDAV lock tokens violate specs due to path-based generation) Julian Reschke (Jira)
  • [jira] [Updated] (JCR-5261) Pre-auth hijack of cached sessions via derivable WebDAV lock tokens (WebDAV lock tokens violate specs due to path-based generation) Julian Reschke (Jira)
  • [jira] [Updated] (JCR-5261) Pre-auth hijack of cached sessions via derivable WebDAV lock tokens (WebDAV lock tokens violate specs due to path-based generation) Julian Reschke (Jira)
• [jira] [Closed] (JCR-5259) Release Jackrabbit 2.20.18 Julian Reschke (Jira)
• [jira] [Resolved] (JCR-5263) Release Jackrabbit 2.23.6-beta Julian Reschke (Jira)
• [jira] [Resolved] (JCR-5259) Release Jackrabbit 2.20.18 Julian Reschke (Jira)
• [jira] [Closed] (JCR-5263) Release Jackrabbit 2.23.6-beta Julian Reschke (Jira)
• [jira] [Resolved] (JCR-5264) Release Jackrabbit 2.22.5 Julian Reschke (Jira)
• [ANNOUNCE] Apache Jackrabbit 2.20.18 released Julian Reschke
• [ANNOUNCE] Apache Jackrabbit 2.22.5 released Julian Reschke
• [ANNOUNCE] Apache Jackrabbit 2.23.6-beta released Julian Reschke
• [jira] [Closed] (JCR-5264) Release Jackrabbit 2.22.5 Julian Reschke (Jira)
• [VOTE] Release Apache Jackrabbit 2.20.18 Julian Reschke
  • Re: [VOTE] Release Apache Jackrabbit 2.20.18 Thomas Mueller
  • Re: [VOTE] Release Apache Jackrabbit 2.20.18 Julian Reschke
  • Re: [VOTE] Release Apache Jackrabbit 2.20.18 Jörg Hoh via dev
  • Re: [VOTE] Release Apache Jackrabbit 2.20.18 Alejandro Moratinos
  • [RESULT] [VOTE] Release Apache Jackrabbit 2.20.18 Julian Reschke
  • Re: [RESULT] [VOTE] Release Apache Jackrabbit 2.20.18 Konrad Windszus
• [jira] [Created] (JCR-5263) Release Jackrabbit 2.23.6-beta Julian Reschke (Jira)
• [jira] [Updated] (JCR-5259) Release Jackrabbit 2.20.18 Julian Reschke (Jira)
• [jira] [Resolved] (JCR-5260) Uncaught non-RepositoryException types in HTTP responses break JCR clients Julian Reschke (Jira)
• [VOTE] Release Apache Jackrabbit 2.22.5 Julian Reschke
  • Re: [VOTE] Release Apache Jackrabbit 2.22.5 Julian Reschke
  • Re: [VOTE] Release Apache Jackrabbit 2.22.5 Alejandro Moratinos
  • Re: [VOTE] Release Apache Jackrabbit 2.22.5 Angela Schreiber via dev
  • Re: [VOTE] Release Apache Jackrabbit 2.22.5 Manfred Baedke
  • Re: [VOTE] Release Apache Jackrabbit 2.22.5 Thomas Mueller
  • Re: [VOTE] Release Apache Jackrabbit 2.22.5 Jörg Hoh via dev
  • [RESULT] [VOTE] Release Apache Jackrabbit 2.22.5 Julian Reschke
• [jira] [Updated] (JCR-5264) Release Jackrabbit 2.22.5 Julian Reschke (Jira)
• [jira] [Updated] (JCR-5260) Uncaught non-RepositoryException types in HTTP responses break JCR clients Julian Reschke (Jira)
  • [jira] [Updated] (JCR-5260) Uncaught non-RepositoryException types in HTTP responses break JCR clients Julian Reschke (Jira)
  • [jira] [Updated] (JCR-5260) Uncaught non-RepositoryException types in HTTP responses break JCR clients Julian Reschke (Jira)
  • [jira] [Updated] (JCR-5260) Uncaught non-RepositoryException types in HTTP responses break JCR clients Julian Reschke (Jira)
  • [jira] [Updated] (JCR-5260) Uncaught non-RepositoryException types in HTTP responses break JCR clients Julian Reschke (Jira)
  • [jira] [Updated] (JCR-5260) Uncaught non-RepositoryException types in HTTP responses break JCR clients Julian Reschke (Jira)
• [jira] [Created] (JCR-5264) Release Jackrabbit 2.22.5 Julian Reschke (Jira)
• [VOTE] Release Apache Jackrabbit 2.23.6-beta Julian Reschke
  • Re: [VOTE] Release Apache Jackrabbit 2.23.6-beta Alejandro Moratinos
  • Re: [VOTE] Release Apache Jackrabbit 2.23.6-beta Julian Reschke
  • Re: [VOTE] Release Apache Jackrabbit 2.23.6-beta Jörg Hoh via dev
  • Re: [VOTE] Release Apache Jackrabbit 2.23.6-beta Jose Cordero
  • Re: [VOTE] Release Apache Jackrabbit 2.23.6-beta Thomas Mueller
  • Re: [VOTE] Release Apache Jackrabbit 2.23.6-beta Manfred Baedke
  • [RESULT] VOTE] Release Apache Jackrabbit 2.23.6-beta Julian Reschke
• [jira] [Resolved] (JCR-5261) WebDAV lock tokens violate specs due to path-based generation Julian Reschke (Jira)
• [jira] [Resolved] (JCR-5262) convert package.html to package-info.java Julian Reschke (Jira)
• [jira] [Updated] (JCR-5261) WebDAV lock tokens violate specs due to path-based generation Julian Reschke (Jira)
  • [jira] [Updated] (JCR-5261) WebDAV lock tokens violate specs due to path-based generation Julian Reschke (Jira)
  • [jira] [Updated] (JCR-5261) WebDAV lock tokens violate specs due to path-based generation Julian Reschke (Jira)
  • [jira] [Updated] (JCR-5261) WebDAV lock tokens violate specs due to path-based generation Julian Reschke (Jira)
  • [jira] [Updated] (JCR-5261) WebDAV lock tokens violate specs due to path-based generation Julian Reschke (Jira)
  • [jira] [Updated] (JCR-5261) WebDAV lock tokens violate specs due to path-based generation Julian Reschke (Jira)
• [jira] [Updated] (JCR-5263) Release Jackrabbit 2.23.6-beta Julian Reschke (Jira)
  • [jira] [Updated] (JCR-5263) Release Jackrabbit 2.23.6-beta Julian Reschke (Jira)
  • [jira] [Updated] (JCR-5263) Release Jackrabbit 2.23.6-beta Julian Reschke (Jira)
• [jira] [Assigned] (JCR-5263) Release Jackrabbit 2.23.6-beta Julian Reschke (Jira)

• Earlier messages