1. f6404d4 [#] Questions answered for THREAD_MODEL.md by Matt Pavlovich · 3 days ago main
  2. e22dc20 [#] First pass edits to THREAD_MODEL.md and SECURITY.md by Matt Pavlovich · 8 days ago
  3. d8793e7 Add a draft security threat model (THREAT_MODEL.md) + discoverability wiring by Jarek Potiuk · 8 days ago
  4. e6dab78 build(deps): bump camel-version from 4.20.0 to 4.21.0 (#2173) by dependabot[bot] · 2 days ago
  5. 977cc63 build(deps-dev): bump netty-version from 4.2.15.Final to 4.2.16.Final (#2195) by dependabot[bot] · 2 days ago
  6. 04b5193 Minor updates to text message sync (#2209) by Christopher L. Shannon · 2 days ago
  7. f07c379 #2201 Update spring.schemas to include missing 'spring-beans.xsd' mapping (#2202) by lichtin · 2 days ago
  8. e1368d5 Add tests validating TextMessage body thread safety fix (#2207) by Christopher L. Shannon · 3 days ago
  9. 05b1e5c feat(#1828): Expose NetworkConnector URI and local URI in JMX MBean (#1829) by JB Onofré · 3 days ago
  10. ad9a30d feat(#1797): add message delivery tracking to QueueMessageReference (#1796) by Jean-Louis Monteiro · 3 days ago
  11. a32d07c build(deps): bump actions/checkout from 6 to 7 (#2129) by dependabot[bot] · 3 days ago
  12. 6183de0 build(deps): bump org.apache.groovy:groovy-ant from 5.0.6 to 5.0.7 (#2191) by dependabot[bot] · 3 days ago
  13. b131c3d Fix TextMessage body thread safety (#2188) by Christopher L. Shannon · 3 days ago
  14. 8e6f471 build(deps): bump org.apache.groovy:groovy from 5.0.6 to 5.0.7 (#2190) by dependabot[bot] · 3 days ago
  15. 6ed4ca1 build(deps): bump xbean-version from 4.30 to 4.31 (#2189) by dependabot[bot] · 3 days ago
  16. d1fd0aa build(deps): bump jackson-version from 2.22.0 to 2.22.1 (#2200) by dependabot[bot] · 3 days ago
  17. 3c54283 Fix Topic store/temp usage tracking (#2178) by Christopher L. Shannon · 6 days ago
  18. 0b6cf76 chore: Update Spring to 6.2.19 by Colm O hEigeartaigh · 9 days ago
  19. 4de77f1 build(deps): bump log4j-version from 2.26.0 to 2.26.1 by dependabot[bot] · 9 days ago
  20. c089259 Fire message discarded advisory on format errors (#2177) by Christopher L. Shannon · 10 days ago
  21. 4c34a49 Prevent cursor from using more than 100% temp store (#2165) by Christopher L. Shannon · 10 days ago
  22. 6e9dd5b Add better frame size validation for AMQP (#2167) by Christopher L. Shannon · 10 days ago
  23. 505f5a9 Lower default maxFrameSize to 100 MB in xml config (#2166) by Christopher L. Shannon · 10 days ago
  24. acdcce2 build(deps-dev): bump commons-logging:commons-logging (#2127) by dependabot[bot] · 12 days ago
  25. aa8d766 build(deps): bump org.apache:apache from 38 to 39 (#2162) by dependabot[bot] · 12 days ago
  26. ff29ab8 [#] GitHub DevOps: Disable GH Actions on forked repositories to reduce spam on failed test runs (#2164) by Matt Pavlovich · 12 days ago
  27. 7868824 More security.md updates (#2163) by Christopher L. Shannon · 12 days ago
  28. 1ac5eda Remove all author tags (#2159) by Christopher L. Shannon · 2 weeks ago
  29. 89838f6 build(deps): bump org.javassist:javassist from 3.31.0-GA to 3.32.0-GA (#2131) by dependabot[bot] · 2 weeks ago
  30. 9673781 Preserve property placeholders when removing/modifying networkConnectors (#2123) by JB Onofré · 2 weeks ago
  31. 5d9c303 Improve handling of partial reads and EOF in Frame size limited filter (#2154) by Christopher L. Shannon · 3 weeks ago
  32. f9957d1 build(deps): bump shiro-version from 2.2.0 to 2.2.1 (#2124) by dependabot[bot] · 3 weeks ago
  33. cda48d5 [#2137] Fix maxUncommittedCount usage across a network of brokers by Matt Pavlovich · 3 weeks ago
  34. d4c0b3c Fix test by enabling allowTempDestinationStealing (#2146) by Christopher L. Shannon · 3 weeks ago
  35. f166435 [#2020] Add expiryCheckEnabled option to MessageEvictionStrategy to skip O(n) expiry scan TopicSubscription by mwashburn · 8 weeks ago
  36. a148e59 [#2140] Improve KahaDB extensibility by Matt Pavlovich · 3 weeks ago
  37. 94a4056 Add support for maxInflateDataSize to limit uncompressed buffers (#2139) by Christopher L. Shannon · 3 weeks ago
  38. b20e61c Improve the broker's handling of message corruption (#2136) by Christopher L. Shannon · 3 weeks ago
  39. 664774e build(deps): bump org.codehaus.jettison:jettison from 1.5.5 to 1.5.6 (#2128) by dependabot[bot] · 3 weeks ago
  40. d8c5672 Add flag to optionally enable temp destination stealing (#2122) by Christopher L. Shannon · 4 weeks ago
  41. 81ab887 Provide a flexible filter style input stream that limits read amounts (#2118) by Timothy Bish · 4 weeks ago
  42. 74ac6da [#1984] Refactor use of deprecated StatsImpl.addStatistic to use addStatistics(Set.of(..)) by Matt Pavlovich · 2 months ago
  43. 230db1f Refactor network connections to process after ConnectionInfo (#2112) by Christopher L. Shannon · 4 weeks ago
  44. b20a4c7 Replace active temp dests map with set (#2113) by Christopher L. Shannon · 4 weeks ago
  45. 403ac4f Remove extra buffer copy in StompNIOSSLTransport (#2107) by Christopher L. Shannon · 4 weeks ago
  46. 7cb413b Validate Stomp headers against max frame size (#2104) by Christopher L. Shannon · 4 weeks ago
  47. 83ce2ba Add back missing closing tag (#2100) by Christopher L. Shannon · 4 weeks ago
  48. c36d5eb Update SECURITY.md with more details (#2103) by Christopher L. Shannon · 4 weeks ago
  49. ac3d064 Add validation for LDAP network connector URIs (#2077) by Christopher L. Shannon · 5 weeks ago
  50. a25839a build(deps): bump org.springframework:spring-webmvc (#2096) by dependabot[bot] · 5 weeks ago
  51. aff105a build(deps): bump com.fasterxml.jackson.core:jackson-annotations (#2070) by dependabot[bot] · 5 weeks ago
  52. 7c04e76 build(deps): bump jackson-version from 2.21.3 to 2.22.0 (#2072) by dependabot[bot] · 5 weeks ago
  53. 771f2ee build(deps-dev): bump org.sonarsource.scanner.maven:sonar-maven-plugin (#2050) by dependabot[bot] · 5 weeks ago
  54. 4e4a868 build(deps-dev): bump org.eclipse.jdt:ecj from 3.45.0 to 3.46.0 (#2085) by dependabot[bot] · 5 weeks ago
  55. e49e052 build(deps): bump org.glassfish.jaxb:jaxb-bom from 4.0.8 to 4.0.9 (#2053) by dependabot[bot] · 5 weeks ago
  56. 5155918 build(deps-dev): bump netty-version from 4.2.14.Final to 4.2.15.Final (#2069) by dependabot[bot] · 5 weeks ago
  57. 78cc238 build(deps): bump org.jvnet.jaxb:jaxb-plugins-runtime (#2084) by dependabot[bot] · 5 weeks ago
  58. 60af386 Limit platform details to a reasonable length (#2088) by Christopher L. Shannon · 5 weeks ago
  59. 085efea Restrict full web console URI to admins role (#2074) by JB Onofré · 5 weeks ago
  60. ea5a33c Adding missing jsp escapes (#2089) by Christopher L. Shannon · 5 weeks ago
  61. 80562ea Ensure at most one BrokerInfo command is received (#2083) by Christopher L. Shannon · 5 weeks ago
  62. 6fc46e5 Add validation for WireFormatInfo (#2080) by Christopher L. Shannon · 5 weeks ago
  63. dfa00d0 Add https to BrokerView restricted list (#2073) by Christopher L. Shannon · 5 weeks ago
  64. 3598fc5 Send advisory messages using Broker connection context (#2071) by Christopher L. Shannon · 5 weeks ago
  65. f84eb39 Improve Stomp protocol error messages (#2067) by Christopher L. Shannon · 6 weeks ago
  66. 1493db9 Update Stomp transports with improved validation (#2064) by Christopher L. Shannon · 6 weeks ago
  67. ba73f37 Update docs and default configs for advisory topics (#2055) by Christopher L. Shannon · 6 weeks ago
  68. b6f9a14 Ensure connection info is processed before durable sync (#2047) by Christopher L. Shannon · 7 weeks ago
  69. c18999b Add dependabot on activemq-6.2.x and activemq-5.19.x branches (#2040) by JB Onofré · 7 weeks ago
  70. fb663d1 build(deps): bump camel-version from 4.18.1 to 4.20.0 (#1970) by dependabot[bot] · 7 weeks ago
  71. f7d4b47 build(deps): bump karaf-version from 4.4.10 to 4.4.11 (#1978) by dependabot[bot] · 7 weeks ago
  72. 3879c27 build(deps): bump org.ow2.asm:asm from 9.10 to 9.10.1 (#2043) by dependabot[bot] · 7 weeks ago
  73. db9dd1b Harden default broker and web console configuration (#2029) by JB Onofré · 7 weeks ago
  74. b97aaaf build(deps): bump shiro-version from 2.1.0 to 2.2.0 (#2023) by dependabot[bot] · 7 weeks ago
  75. 1ae2832 [#] SECURITY.md updates (#2034) by Matt Pavlovich · 7 weeks ago
  76. 6d33219 [#] Fix flaky test: ActiveDurableSubscriptionBrowseExpireTest.java (#1986) by Matt Pavlovich · 7 weeks ago
  77. 052369f Harden web console and Jolokia access by default (#2025) by JB Onofré · 7 weeks ago
  78. bc5e831 build(deps): bump actions/stale from 10.2.0 to 10.3.0 (#2033) by dependabot[bot] · 7 weeks ago
  79. 74de2b7 build(deps-dev): bump netty-version from 4.2.13.Final to 4.2.14.Final (#2032) by dependabot[bot] · 7 weeks ago
  80. e9ed448 Remove "java.lang" package as a default allowed serializable package (#2026) by Christopher L. Shannon · 8 weeks ago
  81. e337506 build(deps): bump maven-core-version from 3.9.15 to 3.9.16 (#2024) by dependabot[bot] · 8 weeks ago
  82. d16c627 [#] Updated SECURITY.md by Matt Pavlovich · 8 weeks ago
  83. 8a8ab87d build(deps): bump org.ow2.asm:asm from 9.9.1 to 9.10 (#2021) by dependabot[bot] · 8 weeks ago
  84. 795a79e build(deps): bump org.jvnet.jaxb:jaxb-plugins-runtime by dependabot[bot] · 9 weeks ago
  85. 523d8c5 [#2005] Fix authorization check on removeDestination by Matt Pavlovich · 9 weeks ago
  86. d8a8540 Disable the message servlet by default (#2000) by Christopher L. Shannon · 9 weeks ago
  87. cf00060 Handle validation for Composite URIs without parens (#2004) by Christopher L. Shannon · 9 weeks ago
  88. 103962e Block the XBeanBrokerFactory by default inside VMTransportFactory (#2003) by Christopher L. Shannon · 9 weeks ago
  89. d98457d build(deps): bump slf4j-version from 2.0.17 to 2.0.18 (#2007) by dependabot[bot] · 9 weeks ago
  90. 64be6fc build(deps): bump org.apache:apache from 37 to 38 (#2002) by dependabot[bot] · 9 weeks ago
  91. 4178cf2 [#1979] activemq-protobuf: Convert to using Long.valueOf Double.valueOf by Matt Pavlovich · 2 months ago
  92. 1980955 build(deps-dev): bump org.owasp:dependency-check-maven (#1987) by dependabot[bot] · 9 weeks ago
  93. 35a69b7 build(deps): bump org.glassfish.jaxb:jaxb-bom from 4.0.7 to 4.0.8 (#1988) by dependabot[bot] · 9 weeks ago
  94. 0421a58 build(deps-dev): bump org.apache.cxf:cxf-xjc-plugin from 4.1.2 to 4.2.0 (#1991) by dependabot[bot] · 9 weeks ago
  95. 7cac138 build(deps): bump org.apache.groovy:groovy from 5.0.5 to 5.0.6 (#1996) by dependabot[bot] · 9 weeks ago
  96. 0547b22 build(deps): bump org.jvnet.jaxb:jaxb-plugins-runtime (#1990) by dependabot[bot] · 9 weeks ago
  97. a6b2316 build(deps): bump log4j-version from 2.25.4 to 2.26.0 (#1994) by dependabot[bot] · 9 weeks ago
  98. 3923a5c build(deps): bump org.apache.groovy:groovy-ant from 5.0.5 to 5.0.6 (#1995) by dependabot[bot] · 9 weeks ago
  99. 0deea08 build(deps-dev): bump netty-version from 4.2.12.Final to 4.2.13.Final (#1989) by dependabot[bot] · 10 weeks ago
  100. 9d6ab80 [#1981] Convert deprecated TransportConnector.conenctionCount() calls to use TransportConnector.getConnectionCount() by Matt Pavlovich · 2 months ago