dependabot[bot] opened a new pull request, #427: URL: https://github.com/apache/struts-examples/pull/427
Bumps `struts2.version` from 7.0.0 to 7.0.3. Updates `org.apache.struts:struts2-core` from 7.0.0 to 7.0.3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/apache/struts/releases";>org.apache.struts:struts2-core's releases</a>.</em></p> <blockquote> <h2>Struts 7.0.3</h2> <h2>What's Changed</h2> <ul> <li>Adds info about homepage and descritpion to Github repo by <a href="https://github.com/lukaszlenart";><code>@lukaszlenart</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1151";>apache/struts#1151</a></li> <li>[readme] add link to struts site commercial support page by <a href="https://github.com/ljharb";><code>@ljharb</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1160";>apache/struts#1160</a></li> <li>Adds additional test cases to match Struts packages by <a href="https://github.com/lukaszlenart";><code>@lukaszlenart</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1161";>apache/struts#1161</a></li> <li>WW-5503 Removes unused dependencies by <a href="https://github.com/lukaszlenart";><code>@lukaszlenart</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1159";>apache/struts#1159</a></li> <li>Uses exact branch name instead of wildcard by <a href="https://github.com/lukaszlenart";><code>@lukaszlenart</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1162";>apache/struts#1162</a></li> <li>Add YourKit thank you section by <a href="https://github.com/lukaszlenart";><code>@lukaszlenart</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1165";>apache/struts#1165</a></li> <li>Removes checking branch ref and removes branch name as not needed by <a href="https://github.com/lukaszlenart";><code>@lukaszlenart</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1166";>apache/struts#1166</a></li> <li>Updates SECURITY.md by <a href="https://github.com/lukaszlenart";><code>@lukaszlenart</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1172";>apache/struts#1172</a></li> <li>Updates dependabot.yml by <a href="https://github.com/lukaszlenart";><code>@lukaszlenart</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1173";>apache/struts#1173</a></li> <li>WW-5498 Adds devMode errors as action messages to avoid breaking validation logic by <a href="https://github.com/lukaszlenart";><code>@lukaszlenart</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1170";>apache/struts#1170</a></li> <li>WW-5500 Extends pattern to validate multipart uploads by <a href="https://github.com/lukaszlenart";><code>@lukaszlenart</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1171";>apache/struts#1171</a></li> <li>Add jakarta package to exclusion list by <a href="https://github.com/kusalk";><code>@kusalk</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1179";>apache/struts#1179</a></li> <li>WW-5510 Marks support for tooltips as deprecated by <a href="https://github.com/lukaszlenart";><code>@lukaszlenart</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1185";>apache/struts#1185</a></li> <li>Adds 6.7.x branch to nigthlies step by <a href="https://github.com/lukaszlenart";><code>@lukaszlenart</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1186";>apache/struts#1186</a></li> <li>WW-5517 Fixes <!-- raw HTML omitted --> to be compatible with allowlist capability by <a href="https://github.com/lukaszlenart";><code>@lukaszlenart</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1187";>apache/struts#1187</a></li> <li>7.0: WW-5516 Fix TemplateDir and Theme fallback to Request/Session/Application attributes by <a href="https://github.com/kusalk";><code>@kusalk</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1193";>apache/struts#1193</a></li> <li>WW-5512 Extends the container to support injecting optional parameters into constructor by <a href="https://github.com/lukaszlenart";><code>@lukaszlenart</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1191";>apache/struts#1191</a></li> <li>Improves code quality by <a href="https://github.com/lukaszlenart";><code>@lukaszlenart</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1204";>apache/struts#1204</a></li> <li>WW-5526 Fix AttributeMap NPE when PageContext has no request by <a href="https://github.com/kusalk";><code>@kusalk</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1209";>apache/struts#1209</a></li> <li>WW-5501 Reverts changes related to WW-5501 by <a href="https://github.com/lukaszlenart";><code>@lukaszlenart</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1219";>apache/struts#1219</a></li> <li>WW-5525 Fix NPE in ProxyUtil for SecurityMemberAccess originating static members by <a href="https://github.com/kusalk";><code>@kusalk</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1214";>apache/struts#1214</a></li> <li>WW-5525 Fixes NPE when checking if expressions is acceptable by <a href="https://github.com/lukaszlenart";><code>@lukaszlenart</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1201";>apache/struts#1201</a></li> <li>WW-5529 Drops unused misleading setter setMaxLength in favor of setMaxlength by <a href="https://github.com/lukaszlenart";><code>@lukaszlenart</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1221";>apache/struts#1221</a></li> </ul> <h3>Dependencies</h3> <ul> <li>Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.5.1 to 3.5.2 by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1147";>apache/struts#1147</a></li> <li>Bump org.codehaus.mojo:exec-maven-plugin from 3.4.1 to 3.5.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1148";>apache/struts#1148</a></li> <li>Bump github/codeql-action from 3.27.7 to 3.27.9 by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1149";>apache/struts#1149</a></li> <li>Bump actions/upload-artifact from 4.4.3 to 4.5.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1155";>apache/struts#1155</a></li> <li>Bump github/codeql-action from 3.27.9 to 3.28.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1154";>apache/struts#1154</a></li> <li>Bump org.codehaus.mojo:versions-maven-plugin from 2.17.1 to 2.18.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1152";>apache/struts#1152</a></li> <li>Bump org.freemarker:freemarker from 2.3.33 to 2.3.34 by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1163";>apache/struts#1163</a></li> <li>Bump org.apache.velocity:velocity-engine-core from 2.3 to 2.4.1 by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1164";>apache/struts#1164</a></li> <li>Bump commons-io:commons-io from 2.15.1 to 2.18.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1133";>apache/struts#1133</a></li> <li>Bump log4j2.version from 2.24.2 to 2.24.3 by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1178";>apache/struts#1178</a></li> <li>Bump github/codeql-action from 3.28.0 to 3.28.1 by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1182";>apache/struts#1182</a></li> <li>Bump actions/upload-artifact from 4.5.0 to 4.6.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1183";>apache/struts#1183</a></li> <li>Bump byte-buddy.version from 1.14.11 to 1.15.11 by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1176";>apache/struts#1176</a></li> <li>Bump org.sitemesh:sitemesh from 3.2.1 to 3.2.2 by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1189";>apache/struts#1189</a></li> <li>Bump github/codeql-action from 3.28.1 to 3.28.5 by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1196";>apache/struts#1196</a></li> <li>Bump byte-buddy.version from 1.15.11 to 1.16.1 by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1198";>apache/struts#1198</a></li> <li>Bump org.apache.commons:commons-text from 1.12.0 to 1.13.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1199";>apache/struts#1199</a></li> <li>Bump github/codeql-action from 3.28.5 to 3.28.8 by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1205";>apache/struts#1205</a></li> <li>Bump org.htmlunit:htmlunit from 4.2.0 to 4.9.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1207";>apache/struts#1207</a></li> <li>Bump github/codeql-action from 3.28.8 to 3.28.9 by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1217";>apache/struts#1217</a></li> </ul> <h2>New Contributors</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/apache/struts/commits";>compare view</a></li> </ul> </details> <br /> Updates `org.apache.struts:struts2-config-browser-plugin` from 7.0.0 to 7.0.3 Updates `org.apache.struts:struts2-convention-plugin` from 7.0.0 to 7.0.3 Updates `org.apache.struts:struts2-bean-validation-plugin` from 7.0.0 to 7.0.3 Updates `org.apache.struts:struts2-junit-plugin` from 7.0.0 to 7.0.3 Updates `org.apache.struts:struts2-jfreechart-plugin` from 7.0.0 to 7.0.3 Updates `org.apache.struts:struts2-json-plugin` from 7.0.0 to 7.0.3 Updates `org.apache.struts:struts2-rest-plugin` from 7.0.0 to 7.0.3 Updates `org.apache.struts:struts2-spring-plugin` from 7.0.0 to 7.0.3 Updates `org.apache.struts:struts2-tiles-plugin` from 7.0.0 to 7.0.3 Updates `org.apache.struts:struts2-jasperreports-plugin` from 7.0.0 to 7.0.3 Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
