dependabot[bot] opened a new pull request, #801: URL: https://github.com/apache/ws-axiom/pull/801
Bumps [jaxen:jaxen](https://github.com/jaxen-xpath/jaxen) from 2.0.0 to 2.0.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/jaxen-xpath/jaxen/releases";>jaxen:jaxen's releases</a>.</em></p> <blockquote> <h2>2.0.1</h2> <ul> <li> <p>The build is now fully byte-per-byte reproducible. If you use the same JDK on the same platform to compile, you'll get the same bytes out every time. This is a prerequisite for hash-based defenses against supply chain and MITM attacks.</p> </li> <li> <p>The release has been mostly automated. It's not quite a one-click deploy but it's close.</p> </li> <li> <p>Several bugs in XPath conformance detected by Claude Sonnet 4.6 were fixed:</p> <ul> <li>The <code>round()</code> function returns negative zero for values between -0.5 and -0.0.</li> <li>The <code>number()</code> function rejects some strings Java recognizes as a number but XPath does not.</li> <li><code>anyMatchingNode()</code> and <code>evaluateAsBoolean()</code> no longer throw <code>NoSuchElementException</code> when evaluating an XPath expression with multiple predicates and more nodes than predicates.</li> <li><code>DefaultCommentNodeStep.getText()</code> includes predicates. (This one's very unlikely to have any effect on XPath queries or evaluation.)</li> </ul> </li> <li> <p>The DOMNavigator can now search inside entity reference and document fragment nodes.</p> </li> </ul> <h2>What's Changed</h2> <ul> <li>punctuation and whitespace by <a href="https://github.com/elharo";><code>@elharo</code></a> in <a href="https://redirect.github.com/jaxen-xpath/jaxen/pull/157";>jaxen-xpath/jaxen#157</a></li> <li>remove duplicated condition from PatternParser convertStep by <a href="https://github.com/hduelme";><code>@hduelme</code></a> in <a href="https://redirect.github.com/jaxen-xpath/jaxen/pull/159";>jaxen-xpath/jaxen#159</a></li> <li>Parameterize translate function.evaluate by <a href="https://github.com/hduelme";><code>@hduelme</code></a> in <a href="https://redirect.github.com/jaxen-xpath/jaxen/pull/161";>jaxen-xpath/jaxen#161</a></li> <li>update compiler plugin to 3.10.1 by <a href="https://github.com/elharo";><code>@elharo</code></a> in <a href="https://redirect.github.com/jaxen-xpath/jaxen/pull/165";>jaxen-xpath/jaxen#165</a></li> <li>use StringBuilder instead of StringBuffer by <a href="https://github.com/hduelme";><code>@hduelme</code></a> in <a href="https://redirect.github.com/jaxen-xpath/jaxen/pull/160";>jaxen-xpath/jaxen#160</a></li> <li>Simplify assertions by <a href="https://github.com/hduelme";><code>@hduelme</code></a> in <a href="https://redirect.github.com/jaxen-xpath/jaxen/pull/162";>jaxen-xpath/jaxen#162</a></li> <li>maven-project-info-reports-plugin 3.4.2 by <a href="https://github.com/elharo";><code>@elharo</code></a> in <a href="https://redirect.github.com/jaxen-xpath/jaxen/pull/166";>jaxen-xpath/jaxen#166</a></li> <li>maven-javadoc-plugin 3.5.0 by <a href="https://github.com/elharo";><code>@elharo</code></a> in <a href="https://redirect.github.com/jaxen-xpath/jaxen/pull/167";>jaxen-xpath/jaxen#167</a></li> <li>deprecate own implementation of SingletonList by <a href="https://github.com/hduelme";><code>@hduelme</code></a> in <a href="https://redirect.github.com/jaxen-xpath/jaxen/pull/169";>jaxen-xpath/jaxen#169</a></li> <li>maven-source-plugin 3.2.1 by <a href="https://github.com/elharo";><code>@elharo</code></a> in <a href="https://redirect.github.com/jaxen-xpath/jaxen/pull/171";>jaxen-xpath/jaxen#171</a></li> <li>clarify a few comments by <a href="https://github.com/elharo";><code>@elharo</code></a> in <a href="https://redirect.github.com/jaxen-xpath/jaxen/pull/175";>jaxen-xpath/jaxen#175</a></li> <li>maven-compiler-plugin 3.11.0 by <a href="https://github.com/elharo";><code>@elharo</code></a> in <a href="https://redirect.github.com/jaxen-xpath/jaxen/pull/176";>jaxen-xpath/jaxen#176</a></li> <li>update source and assembly plugins by <a href="https://github.com/elharo";><code>@elharo</code></a> in <a href="https://redirect.github.com/jaxen-xpath/jaxen/pull/177";>jaxen-xpath/jaxen#177</a></li> <li>better test code namespaces by <a href="https://github.com/elharo";><code>@elharo</code></a> in <a href="https://redirect.github.com/jaxen-xpath/jaxen/pull/178";>jaxen-xpath/jaxen#178</a></li> <li>quiet javadoc by <a href="https://github.com/elharo";><code>@elharo</code></a> in <a href="https://redirect.github.com/jaxen-xpath/jaxen/pull/179";>jaxen-xpath/jaxen#179</a></li> <li>Remove defunct mailing list archives by <a href="https://github.com/elharo";><code>@elharo</code></a> in <a href="https://redirect.github.com/jaxen-xpath/jaxen/pull/183";>jaxen-xpath/jaxen#183</a></li> <li>Update build plugins by <a href="https://github.com/elharo";><code>@elharo</code></a> in <a href="https://redirect.github.com/jaxen-xpath/jaxen/pull/184";>jaxen-xpath/jaxen#184</a></li> <li>More plugin updates by <a href="https://github.com/elharo";><code>@elharo</code></a> in <a href="https://redirect.github.com/jaxen-xpath/jaxen/pull/185";>jaxen-xpath/jaxen#185</a></li> <li>Update Maven plugins by <a href="https://github.com/elharo";><code>@elharo</code></a> in <a href="https://redirect.github.com/jaxen-xpath/jaxen/pull/187";>jaxen-xpath/jaxen#187</a></li> <li>Remove maxPermSize by <a href="https://github.com/elharo";><code>@elharo</code></a> in <a href="https://redirect.github.com/jaxen-xpath/jaxen/pull/189";>jaxen-xpath/jaxen#189</a></li> <li>add devcontainer by <a href="https://github.com/elharo";><code>@elharo</code></a> in <a href="https://redirect.github.com/jaxen-xpath/jaxen/pull/192";>jaxen-xpath/jaxen#192</a></li> <li>Codespaces by <a href="https://github.com/elharo";><code>@elharo</code></a> in <a href="https://redirect.github.com/jaxen-xpath/jaxen/pull/193";>jaxen-xpath/jaxen#193</a></li> <li>use more defaults by <a href="https://github.com/elharo";><code>@elharo</code></a> in <a href="https://redirect.github.com/jaxen-xpath/jaxen/pull/194";>jaxen-xpath/jaxen#194</a></li> <li>Use https in pom.xml by <a href="https://github.com/elharo";><code>@elharo</code></a> in <a href="https://redirect.github.com/jaxen-xpath/jaxen/pull/196";>jaxen-xpath/jaxen#196</a></li> <li>Update Java 1.3 javadoc references to current project requirements by <a href="https://github.com/Copilot";><code>@Copilot</code></a> in <a href="https://redirect.github.com/jaxen-xpath/jaxen/pull/200";>jaxen-xpath/jaxen#200</a></li> <li>Add explicit versions for Maven core lifecycle plugins by <a href="https://github.com/Copilot";><code>@Copilot</code></a> in <a href="https://redirect.github.com/jaxen-xpath/jaxen/pull/198";>jaxen-xpath/jaxen#198</a></li> <li>Add comprehensive GitHub Copilot instructions for Jaxen development workflow by <a href="https://github.com/Copilot";><code>@Copilot</code></a> in <a href="https://redirect.github.com/jaxen-xpath/jaxen/pull/202";>jaxen-xpath/jaxen#202</a></li> <li>Fix all javadoc to conform to Oracle Javadoc guidelines by <a href="https://github.com/Copilot";><code>@Copilot</code></a> in <a href="https://redirect.github.com/jaxen-xpath/jaxen/pull/206";>jaxen-xpath/jaxen#206</a></li> <li>Implement comprehensive API compatibility checking with Animal Sniffer and Japicmp plugins by <a href="https://github.com/Copilot";><code>@Copilot</code></a> in <a href="https://redirect.github.com/jaxen-xpath/jaxen/pull/204";>jaxen-xpath/jaxen#204</a></li> <li>Add SECURITY.md file with security reporting instructions by <a href="https://github.com/Copilot";><code>@Copilot</code></a> in <a href="https://redirect.github.com/jaxen-xpath/jaxen/pull/208";>jaxen-xpath/jaxen#208</a></li> <li>Add Maven wrapper to project by <a href="https://github.com/Copilot";><code>@Copilot</code></a> in <a href="https://redirect.github.com/jaxen-xpath/jaxen/pull/210";>jaxen-xpath/jaxen#210</a></li> <li>Remove optimize flag by <a href="https://github.com/elharo";><code>@elharo</code></a> in <a href="https://redirect.github.com/jaxen-xpath/jaxen/pull/215";>jaxen-xpath/jaxen#215</a></li> <li>Remove <a href="https://github.com/see";><code>@see</code></a> references to Javadoc-excluded packages by <a href="https://github.com/Copilot";><code>@Copilot</code></a> in <a href="https://redirect.github.com/jaxen-xpath/jaxen/pull/218";>jaxen-xpath/jaxen#218</a></li> <li>Add GitHub Actions CI for Java 8 by <a href="https://github.com/Copilot";><code>@Copilot</code></a> in <a href="https://redirect.github.com/jaxen-xpath/jaxen/pull/220";>jaxen-xpath/jaxen#220</a></li> <li>2.0 no longer beta by <a href="https://github.com/elharo";><code>@elharo</code></a> in <a href="https://redirect.github.com/jaxen-xpath/jaxen/pull/222";>jaxen-xpath/jaxen#222</a></li> <li>Replace CircleCI with GitHub Actions CI (Java 8) by <a href="https://github.com/Copilot";><code>@Copilot</code></a> in <a href="https://redirect.github.com/jaxen-xpath/jaxen/pull/221";>jaxen-xpath/jaxen#221</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/jaxen-xpath/jaxen/commit/21b6f5f4a85c61964e79eabadbf32451fa2a14ec";><code>21b6f5f</code></a> Release 2.0.1</li> <li><a href="https://github.com/jaxen-xpath/jaxen/commit/861b412b552dd397ea086fe28246ed33ccff6d0e";><code>861b412</code></a> docs: fix GitHub fine-grained PAT setup instructions to match current UI (<a href="https://redirect.github.com/jaxen-xpath/jaxen/issues/307";>#307</a>)</li> <li><a href="https://github.com/jaxen-xpath/jaxen/commit/c0fb3052e46cdfa8e1bfa64f0d39ddbbc8984441";><code>c0fb305</code></a> Move GPG private key export step to point of use in RELEASING.md (<a href="https://redirect.github.com/jaxen-xpath/jaxen/issues/305";>#305</a>)</li> <li><a href="https://github.com/jaxen-xpath/jaxen/commit/b57f131ccc66efd95318bb1da7cb8ed044de47e8";><code>b57f131</code></a> doc: add GitHub PAT creation instructions to RELEASING.md (<a href="https://redirect.github.com/jaxen-xpath/jaxen/issues/304";>#304</a>)</li> <li><a href="https://github.com/jaxen-xpath/jaxen/commit/1cc4f79f81a86d6d10b1e6bcddf10f873f0fc7d2";><code>1cc4f79</code></a> docs: clarify release secrets are repository-scoped (<a href="https://redirect.github.com/jaxen-xpath/jaxen/issues/302";>#302</a>)</li> <li><a href="https://github.com/jaxen-xpath/jaxen/commit/efbe4bfb1fb082d20c1d3d0833df0bfa94267064";><code>efbe4bf</code></a> Change CI/CD integration from CircleCI to GitHub Actions (<a href="https://redirect.github.com/jaxen-xpath/jaxen/issues/301";>#301</a>)</li> <li><a href="https://github.com/jaxen-xpath/jaxen/commit/becec3a6f8ae76f20189e6c298b5c3902577abcd";><code>becec3a</code></a> Add hyperlinks to GitHub pages referenced in RELEASING.md (<a href="https://redirect.github.com/jaxen-xpath/jaxen/issues/298";>#298</a>)</li> <li><a href="https://github.com/jaxen-xpath/jaxen/commit/b54daecb3712c34e2cbf80dfe0d2df9c11e86131";><code>b54daec</code></a> Migrate release process from OSSRH to Central Publishing Portal (<a href="https://redirect.github.com/jaxen-xpath/jaxen/issues/295";>#295</a>)</li> <li><a href="https://github.com/jaxen-xpath/jaxen/commit/6800fd2294c872aed2039d2f8fd6b253e3c028c3";><code>6800fd2</code></a> Clarify GPG key creation instructions in RELEASING.md (<a href="https://redirect.github.com/jaxen-xpath/jaxen/issues/291";>#291</a>)</li> <li><a href="https://github.com/jaxen-xpath/jaxen/commit/6731f5712f67ada1948e9a9eb82d58e16fdb43eb";><code>6731f57</code></a> Update Maven distribution URL to version 3.9.15 (<a href="https://redirect.github.com/jaxen-xpath/jaxen/issues/289";>#289</a>)</li> <li>Additional commits viewable in <a href="https://github.com/jaxen-xpath/jaxen/compare/v2.0.0...v2.0.1";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
