dev  

Messages by Thread

• [PR] Bound diagnostic type tracking and the MVEL expression cache [unomi] via GitHub
  • Re: [PR] Bound diagnostic type tracking and the MVEL expression cache [unomi] via GitHub
• (unomi) branch UNOMI-977-router-config-authz updated (ad70714c4 -> eb0e5711d) shuber
  • (unomi) 01/01: UNOMI-977: Restrict router import/export configuration to system administrators shuber
• (unomi) branch graphql-ws-auth-review-followups updated (7979d5279 -> d6ac273f7) shuber
  • (unomi) 01/01: Challenge on every WebSocket 401, case-insensitive scheme, restore idle timeout shuber
• (unomi) branch write-filtered-personalization-contents updated (70acde153 -> cdf479c2e) shuber
• (unomi) branch graphql-scope-profile-events-filter updated (a00929ed3 -> 231aebcae) shuber
• (unomi) branch validate-public-session-and-client-ip updated (3a8b785fc -> f3557a8af) shuber
  • (unomi) 01/01: Validate eventcollector query session ids and honor client IPs only from configured proxies. shuber
• (unomi) branch deny-mvel-public-eval-apis updated (1540a26af -> 1ee5c319d) shuber
• (unomi) branch bound-matchesregex-condition-evaluation updated (b0cd65b3c -> 7ec8eed1f) shuber
  • (unomi) 01/04: Combine the profile scope with client event filters instead of replacing it shuber
  • (unomi) 02/04: Cover profile event-scope with an integration test shuber
  • (unomi) 03/04: Bound regular-expression evaluation in the matchesRegex operator shuber
  • (unomi) 04/04: Cover caller-supplied condition patterns with an integration test shuber
• (unomi) branch bound-diagnostic-and-script-caches updated (7c792a7ab -> 9a4f6b65b) shuber
  • (unomi) 01/04: Write filtered personalization contents back onto the request. shuber
  • (unomi) 03/04: Deny public MVEL eval APIs from the scripting class loader. shuber
  • (unomi) 04/04: Bound diagnostic type tracking and the MVEL expression cache. shuber
  • (unomi) 02/04: Keep personalization fallback when mixed contents include a script value. shuber
• (unomi) branch UNOMI-977-router-config-authz updated (eb0e5711d -> 595fcb52e) shuber
  • (unomi) 01/01: UNOMI-977: Restrict router import/export configuration to system administrators shuber
• (unomi) branch drop-public-cors-credentials updated (1068f7de2 -> c0497920f) shuber
  • (unomi) 01/01: Drop credentialed CORS on the public tracker endpoints. shuber
• (unomi) branch simplify-request-id-validation-patterns updated (ee351c08c -> 203222d69) shuber
  • (unomi) 01/02: Simplify identifier validation patterns to a single character class shuber
  • (unomi) 02/02: Cover identifier validation with an integration test shuber
• [PR] Challenge on every WebSocket 401, compare the Basic scheme case-insensitively, restore idle timeout [unomi] via GitHub
  • Re: [PR] Challenge on every WebSocket 401, compare the Basic scheme case-insensitively, restore idle timeout [unomi] via GitHub
• (unomi) branch graphql-ws-auth-review-followups created (now 7979d5279) shuber
  • (unomi) 01/01: Challenge on every WebSocket 401, case-insensitive scheme, restore idle timeout shuber
• (unomi) branch drop-public-cors-credentials created (now 1068f7de2) shuber
  • (unomi) 01/01: Drop credentialed CORS on the public tracker endpoints. shuber
• (unomi) branch UNOMI-978-action-identity-ownership updated (c10e68b5c -> 81504c791) shuber
  • (unomi) 01/01: UNOMI-978: Gate cross-profile merge and systemProperties writes on a trusted caller shuber
• (unomi) branch UNOMI-976-groovy-action-authz updated (0cfc41702 -> 27416cfc2) shuber
  • (unomi) 01/01: UNOMI-976: Restrict Groovy action upload to system administrators shuber
• (unomi) branch bound-diagnostic-and-script-caches created (now 7c792a7ab) shuber
  • (unomi) 01/01: Bound diagnostic type tracking and the MVEL expression cache. shuber
• (unomi) branch graphql-ws-it-signatures created (now 9af5a7546) shuber
  • (unomi) 01/01: Keep Jetty client types out of GraphQLWebSocketIT method signatures shuber
• [PR] Keep Jetty client types out of GraphQLWebSocketIT method signatures [unomi] via GitHub
• [PR] Validate eventcollector query session ids and honor client IPs only from configured proxies [unomi] via GitHub
  • Re: [PR] Validate eventcollector query session ids and honor client IPs only from configured proxies [unomi] via GitHub
• [PR] Drop credentialed CORS on the public tracker endpoints [unomi] via GitHub
  • Re: [PR] Drop credentialed CORS on the public tracker endpoints [unomi] via GitHub
• (unomi) branch validate-public-session-and-client-ip created (now 3a8b785fc) shuber
  • (unomi) 01/01: Validate eventcollector query session ids and honor client IPs only from configured proxies. shuber
• (unomi) branch deny-mvel-public-eval-apis updated (7bb972c52 -> 1540a26af) shuber
  • (unomi) 01/01: Deny public MVEL eval APIs from the scripting class loader. shuber
• (unomi) branch graphql-gate-processevents updated: Cover the GraphQL restricted-event-type gate with unit tests. shuber
• (unomi) branch graphql-ws-scheduler-shutdown deleted (was 07ffe7f2d) shuber
• (unomi) branch write-filtered-personalization-contents created (now 70acde153) shuber
  • (unomi) 02/02: Keep personalization fallback when mixed contents include a script value. shuber
  • (unomi) 01/02: Write filtered personalization contents back onto the request. shuber
• [PR] Bound regular-expression evaluation in the matchesRegex operator [unomi] via GitHub
  • Re: [PR] Bound regular-expression evaluation in the matchesRegex operator [unomi] via GitHub
• [PR] Write filtered personalization contents back onto the request [unomi] via GitHub
  • Re: [PR] Write filtered personalization contents back onto the request [unomi] via GitHub
• [PR] Deny public MVEL eval APIs from the scripting class loader [unomi] via GitHub
  • Re: [PR] Deny public MVEL eval APIs from the scripting class loader [unomi] via GitHub
• [PR] Check roles and tenant authority after a realm login [unomi] via GitHub
• [PR] Authorize the executed GraphQL operation, not the first definition [unomi] via GitHub
• [PR] Combine the profile scope with client event filters instead of replacing it [unomi] via GitHub
  • Re: [PR] Combine the profile scope with client event filters instead of replacing it [unomi] via GitHub
• [PR] Apply the restricted-event-type gate to events submitted over GraphQL [unomi] via GitHub
• [PR] Simplify identifier validation patterns to a single character class [unomi] via GitHub
  • Re: [PR] Simplify identifier validation patterns to a single character class [unomi] via GitHub
• (unomi) branch graphql-authenticated-role-tenant-checks created (now c62897a46) shuber
  • (unomi) 01/01: Check roles and tenant authority after a realm login shuber
• (unomi) branch graphql-gate-processevents created (now 437942a7a) shuber
  • (unomi) 01/01: Apply the restricted-event-type gate to events submitted over GraphQL shuber
• (unomi) branch simplify-request-id-validation-patterns created (now ee351c08c) shuber
  • (unomi) 02/02: Cover identifier validation with an integration test shuber
  • (unomi) 01/02: Simplify identifier validation patterns to a single character class shuber
• (unomi) branch deny-mvel-public-eval-apis created (now 7bb972c52) shuber
  • (unomi) 03/03: Keep MVEL enabled and rely on the class-loader deny. shuber
  • (unomi) 02/03: Harden MVEL sandbox so public eval APIs stay unreachable. shuber
  • (unomi) 01/03: Disable MVEL scripting by default and add an opt-in for existing rules. shuber
• (unomi) branch graphql-scope-profile-events-filter created (now a00929ed3) shuber
  • (unomi) 01/02: Combine the profile scope with client event filters instead of replacing it shuber
  • (unomi) 02/02: Cover profile event-scope with an integration test shuber
• (unomi) branch graphql-authorize-selected-operation created (now 4a41fd898) shuber
  • (unomi) 02/02: Cover public-operation authorization with integration tests shuber
  • (unomi) 01/02: Authorize the executed GraphQL operation, not the first definition shuber
• (unomi) branch bound-matchesregex-condition-evaluation created (now b0cd65b3c) shuber
  • (unomi) 01/02: Bound regular-expression evaluation in the matchesRegex operator shuber
  • (unomi) 02/02: Cover caller-supplied condition patterns with an integration test shuber
• (unomi) branch master updated: Stop the GraphQL WebSocket deadline scheduler when the servlet is destroyed (#858) shuber
• [jira] [Created] (UNOMI-987) The BOM does not list unomi-plugins-advanced-conditions Jira
• [jira] [Updated] (UNOMI-987) The BOM does not list unomi-plugins-advanced-conditions Jira
  • [jira] [Updated] (UNOMI-987) The BOM does not list unomi-plugins-advanced-conditions Jira
• (unomi) branch master updated: UNOMI-987: List unomi-plugins-advanced-conditions in the BOM (#869) jsinovassinnaik
• [PR] UNOMI-987: List unomi-plugins-advanced-conditions in the BOM [unomi] via GitHub
  • Re: [PR] UNOMI-987: List unomi-plugins-advanced-conditions in the BOM [unomi] via GitHub
• [jira] [Assigned] (UNOMI-987) The BOM does not list unomi-plugins-advanced-conditions Jira
• (unomi) branch UNOMI-987-bom-advanced-conditions created (now 93d6479b0) jsinovassinnaik
  • (unomi) 01/01: UNOMI-987: List unomi-plugins-advanced-conditions in the BOM jsinovassinnaik
• [jira] [Updated] (UNOMI-983) Saving an item with no itemId overwrites a single shared document Jira
• [PR] UNOMI-985: Update Develocity and Common Custom User Data Maven extensions [unomi] via GitHub
• (unomi) branch UNOMI-983-refuse-item-without-itemid created (now 5824a0597) jsinovassinnaik
  • (unomi) 01/01: UNOMI-983: Refuse to save an item that carries no itemId jsinovassinnaik
• [PR] UNOMI-983: Refuse to save an item that carries no itemId [unomi] via GitHub
  • Re: [PR] UNOMI-983: Refuse to save an item that carries no itemId [unomi] via GitHub
• (unomi) branch UNOMI-982-optional-condition-parameter created (now dbc7ede33) jsinovassinnaik
  • (unomi) 01/01: UNOMI-982: Drop a condition whose optional parameter the context does not supply jsinovassinnaik
• (unomi) branch UNOMI-982-optional-condition-parameter updated (dbc7ede33 -> 7f204028f) jsinovassinnaik
• [PR] UNOMI-986: Write a one-shot import CSV to the directory of its tenant [unomi] via GitHub
  • Re: [PR] UNOMI-986: Write a one-shot import CSV to the directory of its tenant [unomi] via GitHub
• [jira] [Assigned] (UNOMI-986) A one-shot CSV import uploaded through the REST endpoint is never processed Jira
• (unomi) branch UNOMI-986-oneshot-import-tenant-dir created (now 59a98f19e) jsinovassinnaik
  • (unomi) 01/01: UNOMI-986: Write a one-shot import CSV to the directory of its tenant jsinovassinnaik
• [jira] [Created] (UNOMI-986) A one-shot CSV import uploaded through the REST endpoint is never processed Jira
• [jira] [Created] (UNOMI-984) Document the 3.1 answer to a search condition with no resolvable type Jira
• [jira] [Assigned] (UNOMI-984) Document the 3.1 answer to a search condition with no resolvable type Jira
• [jira] [Created] (UNOMI-985) Build scans lack current insight data because the Develocity build extensions are out of date Clay Johnson (Jira)
• [PR] UNOMI-984: Record how 3.1 answers a search condition with no resolvable type [unomi] via GitHub
  • Re: [PR] UNOMI-984: Record how 3.1 answers a search condition with no resolvable type [unomi] via GitHub
• (unomi) branch UNOMI-984-untyped-search-condition created (now 53c436f1e) jsinovassinnaik
  • (unomi) 01/01: UNOMI-984: Record how 3.1 answers a search condition with no resolvable type jsinovassinnaik
• [jira] [Assigned] (UNOMI-983) Saving an item with no itemId overwrites a single shared document Jira
• [jira] [Created] (UNOMI-983) Saving an item with no itemId overwrites a single shared document Jira
• [jira] [Updated] (UNOMI-982) A condition with an unset optional parameter never matches Jira
• [jira] [Assigned] (UNOMI-982) A condition with an unset optional parameter never matches Jira
• [jira] [Created] (UNOMI-982) A condition with an unset optional parameter never matches Jira
• [PR] UNOMI-982: Drop a condition whose optional parameter the context does not supply [unomi] via GitHub
  • Re: [PR] UNOMI-982: Drop a condition whose optional parameter the context does not supply [unomi] via GitHub
• [jira] [Created] (UNOMI-981) The package module deploys nothing, so no 3.1.0-SNAPSHOT distribution has been published since June Jira
• (unomi) branch master updated: UNOMI-981: deploy the distribution again (#862) jsinovassinnaik
• (unomi) branch UNOMI-package-deploy-fix created (now b1b8c0c0a) jsinovassinnaik
  • (unomi) 01/01: UNOMI-981: deploy the distribution again jsinovassinnaik
• [PR] Bump browserslist from 4.28.4 to 4.29.0 in /graphql/graphql-ui [unomi] via GitHub
• (unomi) branch dependabot/npm_and_yarn/graphql/graphql-ui/browserslist-4.29.0 created (now 13709b21b) github-bot
• (unomi) branch UNOMI-package-deploy-fix deleted (was b1b8c0c0a) jsinovassinnaik
• [jira] [Assigned] (UNOMI-981) The package module deploys nothing, so no 3.1.0-SNAPSHOT distribution has been published since June Jira
• [PR] UNOMI-981: deploy the distribution again [unomi] via GitHub
  • Re: [PR] UNOMI-981: deploy the distribution again [unomi] via GitHub
• (unomi) branch UNOMI-v2compat-default-tenant created (now 81ad9fac3) jsinovassinnaik
  • (unomi) 01/01: UNOMI-980: create the compatibility tenant, and name the mode for what it does jsinovassinnaik
• [PR] UNOMI-980: create the compatibility tenant, and name the mode for what it does [unomi] via GitHub
  • Re: [PR] UNOMI-980: create the compatibility tenant, and name the mode for what it does [unomi] via GitHub
• [jira] [Assigned] (UNOMI-980) Single-tenant compatibility mode refuses every request until its tenant is created by hand Jira
• [jira] [Updated] (UNOMI-980) Single-tenant compatibility mode refuses every request until its tenant is created by hand Jira
  • [jira] [Updated] (UNOMI-980) Single-tenant compatibility mode refuses every request until its tenant is created by hand Jira
  • [jira] [Updated] (UNOMI-980) Single-tenant compatibility mode refuses every request until its tenant is created by hand Jira
  • [jira] [Updated] (UNOMI-980) Single-tenant compatibility mode refuses every request until its tenant is created by hand Jira
• [jira] [Created] (UNOMI-980) Rework default tenant behaviour Jira
• Unomi September Monthly Meeting minutes Serge Huber
• [PR] Bump baseline-browser-mapping from 2.10.40 to 2.11.22 in /extensions/web-tracker/wab [unomi] via GitHub
• (unomi) branch dependabot/npm_and_yarn/extensions/web-tracker/wab/baseline-browser-mapping-2.11.22 created (now d955b8151) github-bot
• (unomi) branch dependabot/npm_and_yarn/extensions/web-tracker/wab/browserslist-4.28.9 created (now bff9de043) github-bot
• [PR] Bump browserslist from 4.28.4 to 4.28.9 in /extensions/web-tracker/wab [unomi] via GitHub
• (unomi) branch backport/graphql-websocket-auth-3.0.x updated: Address review: challenge on every 401, case-insensitive scheme, restore idle timeout shuber
• (unomi) branch graphql-ws-scheduler-shutdown updated: Cover the destroy() wiring that stops the WebSocket deadline scheduler shuber
• (unomi) branch backport/graphql-websocket-auth-3.0.x updated: Keep Jetty client types out of GraphQLWebSocketIT method signatures shuber
• (unomi) branch graphql-ws-scheduler-shutdown updated (f5deaab62 -> 07ffe7f2d) shuber
  • (unomi) 01/01: Cover the destroy() wiring that stops the WebSocket deadline scheduler shuber
• [PR] Stop the GraphQL WebSocket deadline scheduler when the servlet is destroyed [unomi] via GitHub
  • Re: [PR] Stop the GraphQL WebSocket deadline scheduler when the servlet is destroyed [unomi] via GitHub
  • Re: [PR] Stop the GraphQL WebSocket deadline scheduler when the servlet is destroyed [unomi] via GitHub
  • Re: [PR] Stop the GraphQL WebSocket deadline scheduler when the servlet is destroyed [unomi] via GitHub
• (unomi) branch graphql-ws-scheduler-shutdown created (now d8a0d4126) shuber
  • (unomi) 01/01: Stop the GraphQL WebSocket deadline scheduler when the servlet is destroyed shuber
• (unomi) branch backport/graphql-websocket-auth-3.0.x updated (b9f6d6f0f -> 6d55e73ad) shuber
  • (unomi) 01/01: Require authentication for GraphQL WebSocket upgrade (unomi-3.0.x) shuber
• (unomi) branch fix/graphql-websocket-auth deleted (was d571e49fe) shuber
• (unomi) branch master updated: Require authentication for GraphQL WebSocket upgrade (master) (#843) shuber
• (unomi) branch fix/graphql-websocket-auth updated: Close a GraphQL WebSocket that does not authenticate within its deadline shuber
• (unomi) branch fix/graphql-websocket-auth updated (5ef9ce208 -> 5ca094dde) shuber
  • (unomi) 01/01: Authenticate the GraphQL playground's subscription WebSocket shuber
• (unomi) branch fix/graphql-websocket-auth updated: Read the playground's WebSocket credential from the live headers editor shuber
• (unomi) branch fix/graphql-websocket-auth updated: Authenticate the GraphQL playground's subscription WebSocket shuber
• (unomi) branch fix/graphql-websocket-auth updated (ff8752ca6 -> c7d3e0c87) shuber
• (unomi) branch UNOMI-973-file-endpoint-containment updated (56664e9f4 -> 249d88369) jayblanc
• (unomi) branch fix/graphql-websocket-auth updated (7e3564da8 -> ff8752ca6) shuber
• (unomi) branch UNOMI-973-review-followups updated (174a179df -> 3067709c5) jsinovassinnaik
• [PR] [UNOMI-973] - Follow-ups from the review of the file endpoint containment PR [unomi] via GitHub
  • Re: [PR] [UNOMI-973] - Follow-ups from the review of the file endpoint containment PR [unomi] via GitHub
• (unomi) branch UNOMI-973-review-followups created (now 174a179df) jsinovassinnaik
  • (unomi) 04/07: UNOMI-973: Give the two new settings a system property and a manual entry jsinovassinnaik
  • (unomi) 01/07: UNOMI-973: Resolve a path the way the file system does, one component at a time jsinovassinnaik
  • (unomi) 05/07: UNOMI-973: Do not read a setting the router has not published yet as a refusal jsinovassinnaik
  • (unomi) 02/07: UNOMI-973: Confine localWorkDirectory whatever the endpoint's scheme jsinovassinnaik
  • (unomi) 07/07: UNOMI-973: Cover what the follow-ups changed and the existing tests did not jsinovassinnaik
  • (unomi) 03/07: UNOMI-973: Append moveFailed as an option, not to the directory name jsinovassinnaik
  • (unomi) 06/07: UNOMI-973: Keep a failure to record the refusal from costing the batch its routes jsinovassinnaik
• (unomi) branch fix/graphql-websocket-auth updated (53f06dcca -> 7e3564da8) shuber
• [PR] Didvc phase 01 [unomi] via GitHub
  • Re: [PR] Didvc phase 01 [unomi] via GitHub
• [jira] [Assigned] (UNOMI-973) Confine recurrent import/export file endpoints to configurable base directories Serge Huber (Jira)
• [jira] [Updated] (UNOMI-975) Bind a public context request to the profile named by its own cookie Serge Huber (Jira)
  • [jira] [Updated] (UNOMI-975) Bind a public context request to the profile named by its own cookie Serge Huber (Jira)
• (unomi) branch UNOMI-973-file-endpoint-containment updated (d233a9fbe -> 56664e9f4) jayblanc
• (unomi) branch backport/graphql-websocket-auth-2.7.x deleted (was 42727808a) shuber
• (unomi) branch master updated: UNOMI-979: Judge scheduler lock expiry by the owner's recorded lease, deflake scheduler tests (#855) shuber
• (unomi) branch UNOMI-979-scheduler-lock-lease deleted (was cb25ad27b) shuber
• (unomi) branch UNOMI-973-file-endpoint-containment updated (8da970e73 -> d233a9fbe) jayblanc
• (unomi) branch UNOMI-979-scheduler-lock-lease updated: UNOMI-979: Sample per-process CPU and disk I/O during integration tests shuber
• (unomi) branch UNOMI-979-scheduler-lock-lease updated: UNOMI-979: Skip Javadoc validation in the integration-test CI jobs shuber

• Earlier messages