[GitHub] [tomee] rzo1 merged pull request #970: Regenerated BOMs after dependency upgrades

2022-11-15 Thread GitBox
rzo1 merged PR #970: URL: https://github.com/apache/tomee/pull/970 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@tomee.apache.org

[GitHub] [tomee] github-actions[bot] opened a new pull request, #970: Regenerated BOMs after dependency upgrades

2022-11-15 Thread GitBox
github-actions[bot] opened a new pull request, #970: URL: https://github.com/apache/tomee/pull/970 Found some uncommited changes (from BOM regeneration) after running build on TomEE main -- This is an automated message from the Apache Git Service. To respond to the message, please log on

[GitHub] [tomee] sultan opened a new pull request, #969: [TOMEE-4053] Dependency properties cleanup, step 3 on branch 9.x

2022-11-15 Thread GitBox
sultan opened a new pull request, #969: URL: https://github.com/apache/tomee/pull/969 this one is about tck tests and microprofile api & impl. thanks @jeanouii for the wss4j merge -- This is an automated message from the Apache Git Service. To respond to the message, please log on

[GitHub] [tomee] sultan commented on pull request #964: [TOMEE-4109] TomEE 9.x Update velocity to 2.3 and avoid CVE warnings

2022-11-15 Thread GitBox
sultan commented on PR #964: URL: https://github.com/apache/tomee/pull/964#issuecomment-1315237755 Good to go -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To

[GitHub] [tomee] sultan commented on pull request #965: [TOMEE-4109] TomEE 8.x Update velocity to 2.3 and avoid CVE warnings

2022-11-15 Thread GitBox
sultan commented on PR #965: URL: https://github.com/apache/tomee/pull/965#issuecomment-1315237683 Good to go -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To

[GitHub] [tomee] rzo1 commented on pull request #965: [TOMEE-4109] TomEE 8.x Update velocity to 2.3 and avoid CVE warnings

2022-11-15 Thread GitBox
rzo1 commented on PR #965: URL: https://github.com/apache/tomee/pull/965#issuecomment-1315019924 There is no `LogChute` replacement. I am using 2.x for a long time with TomEE now w/o issues, so I guess it is ok to loose it. -- This is an automated message from the Apache Git Service. To

[GitHub] [tomee] rzo1 merged pull request #966: [TOMEE-4053] Dependency properties cleanup, step 5 on branch 8.x

2022-11-15 Thread GitBox
rzo1 merged PR #966: URL: https://github.com/apache/tomee/pull/966 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@tomee.apache.org

[GitHub] [tomee] rzo1 merged pull request #967: Regenerated BOMs after dependency upgrades

2022-11-15 Thread GitBox
rzo1 merged PR #967: URL: https://github.com/apache/tomee/pull/967 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@tomee.apache.org

[GitHub] [tomee] jeanouii merged pull request #968: Update Santuario to mitigate CVE-2022-40152 on Woodstox. See TOMEE-4110

2022-11-15 Thread GitBox
jeanouii merged PR #968: URL: https://github.com/apache/tomee/pull/968 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@tomee.apache.org

Cleaning up CXF patches

2022-11-15 Thread Jean-Louis Monteiro
Hi, Richard did some cleanup on CXF on the 8.x branch and I have backported most of his cleanup to 9.x (main). Good news, the build looks good (aside from some timing issues with JWT tests). Increasing the timeout btw so that on slow environments such as Apache Jenkins nodes, it gives TomEE a bit