)]}' { "log": [ { "commit": "a68a3bf206ca15ebff11d011d3dcb41f926b2ff2", "tree": "88f01854dd9991ac376d994ce98df41c4ec0bae0", "parents": [ "463a03f31394e692e908327143d25f34146f17d2" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Fri Jul 31 17:49:49 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jul 31 17:49:49 2026 +0200" }, "message": "build(deps): bump commons-codec:commons-codec from 1.22.0 to 1.22.1 (#2268)\n\nBumps [commons-codec:commons-codec](https://github.com/apache/commons-codec) from 1.22.0 to 1.22.1.\n- [Changelog](https://github.com/apache/commons-codec/blob/master/RELEASE-NOTES.txt)\n- [Commits](https://github.com/apache/commons-codec/compare/rel/commons-codec-1.22.0...rel/commons-codec-1.22.1)\n\n---\nupdated-dependencies:\n- dependency-name: commons-codec:commons-codec\n dependency-version: 1.22.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "463a03f31394e692e908327143d25f34146f17d2", "tree": "52ebf00899c88434e8bc3a687a179d4494f14ada", "parents": [ "a5b2681d2aa66223ac61f5b37572acd62290773b" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Fri Jul 31 17:49:27 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jul 31 17:49:27 2026 +0200" }, "message": "build(deps): bump org.apache.felix:maven-bundle-plugin (#2269)\n\nBumps org.apache.felix:maven-bundle-plugin from 6.0.2 to 6.1.0.\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.felix:maven-bundle-plugin\n dependency-version: 6.1.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "a5b2681d2aa66223ac61f5b37572acd62290773b", "tree": "13bdbaa4300c9e440e511de6fd579fc780bf07b4", "parents": [ "2d60a8518d635205879fb8dc391bfb312755cb6a" ], "author": { "name": "JB Onofré", "email": "jbonofre@apache.org", "time": "Wed Jul 29 07:39:28 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 29 07:39:28 2026 +0200" }, "message": "Use Eclipse Temurin 25 now for the Docker image (#2257)" }, { "commit": "2d60a8518d635205879fb8dc391bfb312755cb6a", "tree": "ab63ec1c0afea6f8a24526751cd7c36982d4cdfc", "parents": [ "bd2f0a59f00be28709722d8a3f4c48c4ae32bd4f" ], "author": { "name": "Christopher L. Shannon", "email": "cshannon@apache.org", "time": "Tue Jul 28 10:26:34 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jul 28 10:26:34 2026 -0400" }, "message": "Fix AMQP Object message decompression (#2256)\n\nThis fixes the AmqpMessageSupport utility to correctly decompress the\nbody of Object Message\u0027s in all cases.\n\nPreviously the decompression could stop early and not decompress the entire stream of\ndata. This was due to the loop incorrectly casting the read int from the inflater\nstream as a byte before comparing to -1 to look for end of stream.\n\nThis is incorrect because the read() method can return a value between -1 and 255.\nJava uses Two\u0027s Complement to represent signed ints, so if the returned value int\nis 255 and is cast to a byte it becomes -1. This meant that reading 255 would return -1\nleading to the code to exit thinking end of stream has been reached." }, { "commit": "bd2f0a59f00be28709722d8a3f4c48c4ae32bd4f", "tree": "1d9deabf719112f404076a5ac6aa96d117eb04c2", "parents": [ "70985414f5c9a5c530e67db225a87207a6c1fbcb" ], "author": { "name": "Anmol Saxena", "email": "asaxena@meshiq.com", "time": "Mon Jul 27 21:04:41 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jul 27 17:34:41 2026 +0200" }, "message": "make surefire enableProcessChecker overridable for Windows 11 compatibility. (#1968)" }, { "commit": "70985414f5c9a5c530e67db225a87207a6c1fbcb", "tree": "d09b965e1d8fb1e307d1422e7bae2ea59159e073", "parents": [ "603d2683d5d928f435f6794271c9624072065987" ], "author": { "name": "Matt Pavlovich", "email": "mattrpav@apache.org", "time": "Mon Jul 27 10:32:20 2026 -0500" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jul 27 10:32:20 2026 -0500" }, "message": "Update SECURITY.md (#2255)\n\n* Update SECURITY.md\n\n- Link PR for per-transport SSL\r\n- Mark Jetty using upstream config as [Done]\n\n* Update SECURITY.md\n\n- Add 6.3.x as security supported release" }, { "commit": "603d2683d5d928f435f6794271c9624072065987", "tree": "05bab6c47ad4f3425fd47aad6b3e1f1bd5bff7fa", "parents": [ "3f3081df5fe2be1fd9f0264d1805e4189b6ceeb0" ], "author": { "name": "Anmol Saxena", "email": "asaxena@meshiq.com", "time": "Mon Jul 27 20:52:39 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jul 27 17:22:39 2026 +0200" }, "message": "fix(console): fix NPE in AbstractJmxCommand and AbstractCommand.handleException. (#1967)" }, { "commit": "3f3081df5fe2be1fd9f0264d1805e4189b6ceeb0", "tree": "07094bcc6ad98b0ffc5ddb00f35d5db99db9186e", "parents": [ "9066194119d37628ab84a80b433c5bf501001801" ], "author": { "name": "JB Onofré", "email": "jbonofre@apache.org", "time": "Mon Jul 27 17:15:57 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jul 27 17:15:57 2026 +0200" }, "message": "Bump to 6.4.0-SNAPSHOT (#2244)" }, { "commit": "9066194119d37628ab84a80b433c5bf501001801", "tree": "1ee8a07a706cfdc4fb71a84f514fb302c18b7e5c", "parents": [ "71a87589a7e93c55c704b5245f50d706a5bb60a6" ], "author": { "name": "JB Onofré", "email": "jbonofre@apache.org", "time": "Mon Jul 27 17:09:27 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jul 27 17:09:27 2026 +0200" }, "message": "Bootstrap activemq-6.3.x branch (#2245)" }, { "commit": "71a87589a7e93c55c704b5245f50d706a5bb60a6", "tree": "0e89dcd90a543d550a5eb4ae78442dfb54d29cb2", "parents": [ "3bd3e31359173df843db5e3d7beb90968a183676" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jul 27 14:34:34 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jul 27 14:34:34 2026 +0200" }, "message": "build(deps): bump org.codehaus.mojo:flatten-maven-plugin (#2254)\n\nBumps [org.codehaus.mojo:flatten-maven-plugin](https://github.com/mojohaus/flatten-maven-plugin) from 1.7.3 to 1.8.0.\n- [Release notes](https://github.com/mojohaus/flatten-maven-plugin/releases)\n- [Commits](https://github.com/mojohaus/flatten-maven-plugin/compare/1.7.3...1.8.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.codehaus.mojo:flatten-maven-plugin\n dependency-version: 1.8.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "3bd3e31359173df843db5e3d7beb90968a183676", "tree": "8c89074a2b596d959886463bf90de305fb7701a9", "parents": [ "b4f0e5c8689ec2326b7af6c92a3b5b6bcb9ceb2f" ], "author": { "name": "JB Onofré", "email": "jbonofre@apache.org", "time": "Fri Jul 24 16:26:59 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jul 24 10:26:59 2026 -0400" }, "message": "Fix javadoc on activemq-osgi (#2248)" }, { "commit": "b4f0e5c8689ec2326b7af6c92a3b5b6bcb9ceb2f", "tree": "2f15d5c8f048cc74ec54d61587a9f12c914270c1", "parents": [ "af6d6de26f5f99d9704f65f394a3a3b9ba6466df" ], "author": { "name": "JB Onofré", "email": "jbonofre@apache.org", "time": "Fri Jul 24 16:26:43 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jul 24 10:26:43 2026 -0400" }, "message": "Fix reactor build for sources (used by release plugin) (#2246)" }, { "commit": "af6d6de26f5f99d9704f65f394a3a3b9ba6466df", "tree": "45fd25ac1eededdf31a62c15bbb4ea19e61bd799", "parents": [ "76b878a6b2378971639f39870d5527c291318d76" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Fri Jul 24 15:28:32 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jul 24 15:28:32 2026 +0200" }, "message": "build(deps): bump org.codehaus.jettison:jettison from 1.5.6 to 1.5.7 (#2250)\n\nBumps [org.codehaus.jettison:jettison](https://github.com/jettison-json/jettison) from 1.5.6 to 1.5.7.\n- [Release notes](https://github.com/jettison-json/jettison/releases)\n- [Commits](https://github.com/jettison-json/jettison/compare/jettison-1.5.6...jettison-1.5.7)\n\n---\nupdated-dependencies:\n- dependency-name: org.codehaus.jettison:jettison\n dependency-version: 1.5.7\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "76b878a6b2378971639f39870d5527c291318d76", "tree": "ff70dda7ab40c5d68c829b637e917304874af5cf", "parents": [ "cea5c0917beea41b934d9cbd5df773097a80fda3" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Fri Jul 24 06:15:52 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jul 24 06:15:52 2026 +0200" }, "message": "build(deps): bump spring-version from 6.2.19 to 7.0.8 (#2102)\n\n* build(deps): bump spring-version from 6.2.19 to 7.0.8\n\nBumps `spring-version` from 6.2.19 to 7.0.8.\n\nUpdates `org.springframework:spring-aop` from 6.2.19 to 7.0.8\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.19...v7.0.8)\n\nUpdates `org.springframework:spring-beans` from 6.2.19 to 7.0.8\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.19...v7.0.8)\n\nUpdates `org.springframework:spring-context` from 6.2.19 to 7.0.8\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.19...v7.0.8)\n\nUpdates `org.springframework:spring-core` from 6.2.19 to 7.0.8\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.19...v7.0.8)\n\nUpdates `org.springframework:spring-expression` from 6.2.19 to 7.0.8\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.19...v7.0.8)\n\nUpdates `org.springframework:spring-jms` from 6.2.19 to 7.0.8\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.19...v7.0.8)\n\nUpdates `org.springframework:spring-tx` from 6.2.19 to 7.0.8\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.19...v7.0.8)\n\nUpdates `org.springframework:spring-webmvc` from 6.2.19 to 7.0.8\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.19...v7.0.8)\n\nUpdates `org.springframework:spring-web` from 6.2.19 to 7.0.8\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.19...v7.0.8)\n\nUpdates `org.springframework:spring-test` from 6.2.19 to 7.0.8\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.19...v7.0.8)\n\nUpdates `org.springframework:spring-oxm` from 6.2.19 to 7.0.8\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.19...v7.0.8)\n\n---\nupdated-dependencies:\n- dependency-name: org.springframework:spring-aop\n dependency-version: 7.0.8\n dependency-type: direct:production\n update-type: version-update:semver-major\n- dependency-name: org.springframework:spring-beans\n dependency-version: 7.0.8\n dependency-type: direct:production\n update-type: version-update:semver-major\n- dependency-name: org.springframework:spring-context\n dependency-version: 7.0.8\n dependency-type: direct:production\n update-type: version-update:semver-major\n- dependency-name: org.springframework:spring-core\n dependency-version: 7.0.8\n dependency-type: direct:production\n update-type: version-update:semver-major\n- dependency-name: org.springframework:spring-expression\n dependency-version: 7.0.8\n dependency-type: direct:production\n update-type: version-update:semver-major\n- dependency-name: org.springframework:spring-jms\n dependency-version: 7.0.8\n dependency-type: direct:production\n update-type: version-update:semver-major\n- dependency-name: org.springframework:spring-oxm\n dependency-version: 7.0.8\n dependency-type: direct:production\n update-type: version-update:semver-major\n- dependency-name: org.springframework:spring-test\n dependency-version: 7.0.8\n dependency-type: direct:production\n update-type: version-update:semver-major\n- dependency-name: org.springframework:spring-tx\n dependency-version: 7.0.8\n dependency-type: direct:production\n update-type: version-update:semver-major\n- dependency-name: org.springframework:spring-web\n dependency-version: 7.0.8\n dependency-type: direct:production\n update-type: version-update:semver-major\n- dependency-name: org.springframework:spring-webmvc\n dependency-version: 7.0.8\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\n\n* Add Karaf features verification and Spring 7 support\n\nAdd the karaf-maven-plugin verify goal to activemq-karaf to statically\nvalidate the ActiveMQ features against the Karaf 4.4 framework, standard,\nspring and enterprise descriptors on every build.\n\nVerification surfaced several pre-existing feature resolution problems,\nnow fixed:\n\n- activemq-blueprint: correct the Fragment-Host header, which targeted\n org.apache.activemq.activemq-osgi while the host bundle\u0027s symbolic name\n is org.apache.activemq.osgi, so the fragment could never attach.\n- activemq-amqp-client: add the netty-codec-base and netty-codec-compression\n bundles (packages relocated in Netty 4.2) and the jakarta.jms-api bundle\n required by qpid-jms-client.\n- activemq-shell: pull the activemq-client feature so the org.apache.activemq.console\n package is available.\n- activemq-web-console: provide the Jakarta EE 9 servlet/JSP/EL API bundles\n the migrated WAR imports.\n\nSpring 7: Karaf only ships Spring 6.1 features and there are no ServiceMix\nOSGi wrappers for Spring 7, so add spring and spring-web features that wrap\nthe plain Spring 7 jars via the pax-url wrap protocol, and point\nactivemq-client and activemq-web-console at them ([7,8)). Also align\nspring-version-range with the 7.x import range.\n\n* Run Karaf features verification in activemq-karaf-itest\n\nThe karaf-maven-plugin verify goal resolves the feature bundles through\npax-url from the local repository. When bound to the activemq-karaf module\nit fails in a clean reactor build because sibling SNAPSHOTs referenced by\nthe features (activemq-osgi, activemq-blueprint, activemq-http and the\nactivemq-karaf bundle itself) are not installed yet at that point in the\nreactor.\n\nMove the verification to activemq-karaf-itest, which is built last (after\nall referenced modules are installed) and already sets up the local\nrepository for pax-url. The feature descriptors are now referenced as\nattached mvn: artifacts of activemq-karaf instead of local files.\n\n* Use filtered properties for Jakarta versions and align to Jakarta EE 11\n\nReference the parent pom Jakarta versions from the Karaf features through\nfiltered properties instead of hardcoded versions, as requested in review.\n\nMake the activemq-web-console bundle imports deterministic so feature\nverification is stable regardless of the transitively resolved API versions:\npin jakarta.servlet to [5,7) and jakarta.servlet.jsp to [3,5), and widen the\norg.objectweb.asm import range to [6,10) to match the asm 9.x now used by the\nJetty 12 based web console. Provide the org.objectweb.asm package (used in\nprovided scope by the web console) through an asm bundle in the\nactivemq-web-console feature.\n\n* Address review comments: use spring-version-range and narrow servlet import to [6,7)\n\n---------\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e\nCo-authored-by: JB Onofré \u003cjb.onofre@dremio.com\u003e" }, { "commit": "cea5c0917beea41b934d9cbd5df773097a80fda3", "tree": "4f6d5b8065e1f451af286077005dafca6751157a", "parents": [ "d74a6a179d88a20df767252e241d0bbdf4d744e7" ], "author": { "name": "Matt Pavlovich", "email": "mattrpav@apache.org", "time": "Thu Apr 10 07:27:25 2025 -0500" }, "committer": { "name": "Matt Pavlovich", "email": "matt@hyte.io", "time": "Thu Jul 23 12:12:54 2026 -0500" }, "message": "[AMQ-9687] Add metrics about error and reconnect counts to network connector and network bridges\n\n - NetworkConnector statistics now parent the bridge statistics\n - Use a CAS AtomicBoolean to ensure only one of local exception or remote exception is counted in a bridge\n - Bridge statistics guard against shutdown leading to miscounts\n - More tests to affirm local and remote counted separately\n" }, { "commit": "d74a6a179d88a20df767252e241d0bbdf4d744e7", "tree": "6df0d1532ef4e90ab77de4ca1d3e2c521cdb7d45", "parents": [ "8d56cffd625f4fc5b28a603ab7ce2b233059571b" ], "author": { "name": "Matt Pavlovich", "email": "mattrpav@apache.org", "time": "Sat Jul 18 09:02:37 2026 -0500" }, "committer": { "name": "Matt Pavlovich", "email": "matt@hyte.io", "time": "Tue Jul 21 21:50:39 2026 -0500" }, "message": "[#2230] KahaDB optionally use a isolatedIterator with isolatedCursor\n" }, { "commit": "8d56cffd625f4fc5b28a603ab7ce2b233059571b", "tree": "73b8e0fdde2ce71199d7ad1b810e2be4ef65394e", "parents": [ "6035aeace27ce2e028935382750144ab1078844e" ], "author": { "name": "JB Onofré", "email": "jbonofre@apache.org", "time": "Tue Jul 21 18:32:51 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jul 21 18:32:51 2026 +0200" }, "message": "Bump default JVM heap and add OOM diagnostics (#2044)\n\n* Bump default JVM heap and add OOM diagnostics\n\nRaise the shipped default heap from -Xms64M/-Xmx1G to -Xms512M/-Xmx2G\nwhich is more representative of a production broker workload while\nstill leaving headroom on small hosts (override via ACTIVEMQ_OPTS_MEMORY).\n\nAdd ACTIVEMQ_OOM_OPTS with -XX:+ExitOnOutOfMemoryError so that an\nOutOfMemoryError terminates the JVM instead of leaving the broker running\nin a degraded state.\n\nHeap dump on OOM is disabled by default to avoid unexpected disk usage\nwhen large heap sizes are configured. Users can opt in by uncommenting\nthe ACTIVEMQ_OOM_DUMP_OPTS lines in bin/setenv (or bin/activemq for the\nno-setenv fallback). The commented template includes -XX:HeapDumpGzipLevel\u003d6\n(JDK 17+) to compress the dump.\n\n* Keep Xms at 64M; only bump Xmx to 2G\n\nPer mattrpav\u0027s review feedback: setting -Xms512M by default would be\nmisconstrued as a high baseline memory requirement. Keep the initial\nheap at the original 64M so the JVM starts small and grows on demand,\nwhile still raising the ceiling to 2G." }, { "commit": "6035aeace27ce2e028935382750144ab1078844e", "tree": "c6eb4f47760892fd8e1b6da2086b6988556c39f3", "parents": [ "dce599f02be91890cdb7c26754d5f7221436fc8b" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Jul 21 17:30:46 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jul 21 17:30:46 2026 +0200" }, "message": "build(deps): bump actions/stale from 10.3.0 to 10.4.0 (#2212)\n\nBumps [actions/stale](https://github.com/actions/stale) from 10.3.0 to 10.4.0.\n- [Release notes](https://github.com/actions/stale/releases)\n- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/stale/compare/eb5cf3af3ac0a1aa4c9c45633dd1ae542a27a899...1e223db275d687790206a7acac4d1a11bd6fe629)\n\n---\nupdated-dependencies:\n- dependency-name: actions/stale\n dependency-version: 10.4.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "dce599f02be91890cdb7c26754d5f7221436fc8b", "tree": "3c56fa3e10defd979674c805afe3d126bf7ac3f6", "parents": [ "467ef369722796eff7ed0196a40d1c9ee63c6cea" ], "author": { "name": "Murali Mogalayapalli", "email": "49990229+TylerMurali@users.noreply.github.com", "time": "Fri Jul 17 15:41:46 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jul 17 15:41:46 2026 -0400" }, "message": "Fix network bridge silent death when transport exception occurs during broker info handshake (#1865)\n\nRemove early return in onException() handlers for local and remote\ntransports in DemandForwardingBridgeSupport. When futureBrokerInfo\nwas not done, the handler cancelled the future and returned without\ncalling serviceLocalException()/serviceRemoteException(), preventing\nthe reconnection chain from firing in some cases. This prevents\nrelying on only the timeout connection on the future from triggering reconnect\nand passes the original error." }, { "commit": "467ef369722796eff7ed0196a40d1c9ee63c6cea", "tree": "ef6632ae284b2b02390992a9593949fc4ceefe56", "parents": [ "0906afdf2b20d8f177e03f29482c11497671011d" ], "author": { "name": "Matt Pavlovich", "email": "mattrpav@apache.org", "time": "Mon Jul 13 07:16:35 2026 -0500" }, "committer": { "name": "Matt Pavlovich", "email": "matt@hyte.io", "time": "Thu Jul 16 16:55:28 2026 -0600" }, "message": "[#] Fix flaky test TopicSubscriptionEnableExpiryTest.java\n" }, { "commit": "0906afdf2b20d8f177e03f29482c11497671011d", "tree": "6dcf6fce26798b73584a9d17ec6863da5bbb106c", "parents": [ "5dcc72b779c3b51b32bbad3daa6b44a7f19648b4" ], "author": { "name": "Christopher L. Shannon", "email": "cshannon@apache.org", "time": "Thu Jul 16 16:06:19 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jul 16 16:06:19 2026 -0400" }, "message": "Move JMH version to root pom (#2223)" }, { "commit": "5dcc72b779c3b51b32bbad3daa6b44a7f19648b4", "tree": "246fb7fa4b9d2077be8b670ff1957d9ec7ab1f2a", "parents": [ "bb5ccb4aaf4e5dee98186936eedef4433e56737c" ], "author": { "name": "Jean-Louis Monteiro", "email": "jeanouii@gmail.com", "time": "Thu Jul 16 16:44:01 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jul 16 10:44:01 2026 -0400" }, "message": "feat(#1798) Performance fix for topic send (#1792)\n\nThis change replaces synchronized with a ReentrantLock held only during persistence (to guarantee message ordering as javadoc was mentioning). Dispatch to subscribers and result.get() happen outside the lock, allowing concurrent dispatch for messages from different producers.\n\nCloses #1798" }, { "commit": "bb5ccb4aaf4e5dee98186936eedef4433e56737c", "tree": "b9855ad3c0debaecdd149d6e0f09704cf944b8f1", "parents": [ "6c54b268f09384828a0f18856856b9f63c76c4f3" ], "author": { "name": "Matt Pavlovich", "email": "mattrpav@apache.org", "time": "Tue Jul 14 08:52:22 2026 -0500" }, "committer": { "name": "Christopher L. Shannon", "email": "cshannon@apache.org", "time": "Wed Jul 15 18:48:21 2026 -0400" }, "message": "[AMQ-9359] Migrate Jetty EE9 -\u003e EE11\n\n- BOM: jetty-ee9-bom -\u003e jetty-ee11-bom\n- Dropped artifacts with no EE11 equiv\n- WebSocket: the legacy WebSocketListener API is gone in EE11\n- Security/TRACE: ee9.nested.ServletConstraint is gone; configureTraceMethod now uses\n the core immutable Constraint (FORBIDDEN/ALLOWED) via ee11.servlet.security.\n- ServletContextHandler: EE11 dropped the (Server, path, options) constructor\n- XML: WebAppContext ee9.webapp -\u003e ee11.webapp\n" }, { "commit": "6c54b268f09384828a0f18856856b9f63c76c4f3", "tree": "ca8762197b99621cab969b5c1c9eaba1cd7d51f6", "parents": [ "92efb318cbfd2494bc69a18077ee138370dd6c59" ], "author": { "name": "Matt Pavlovich", "email": "mattrpav@apache.org", "time": "Thu May 15 09:15:07 2025 -0500" }, "committer": { "name": "Christopher L. Shannon", "email": "cshannon@apache.org", "time": "Wed Jul 15 18:48:21 2026 -0400" }, "message": "Update MQTTWSConnection used for testing\n\n - Convert to using xml files from jetty distribution for Jetty configuration\n - MQTTWSConnection port fixes\n - Fix StompWS and update release to use jetty-spring.properties\n - Add tests for security wiring to align with 6.2.x hardening\n - Updates to thing JettyServerBean to use jetty-dist xml and security hardening\n - Add Jetty dist xml files for configuration\n - Jetty 12 boots the console\n\n[#] Upgrade to Jetty 12.1\n\n - Use Jetty 12.1.x dist config files\n - Update to use latest Jetty security xml cfgs\n - Add ASF headers\n - Update Jetty SSL support with testing\n - Cleanup name for jetty test keystore\n - Update sni handling to be per-transport connector\n - Add support for key password\n - Fix up websocket transport handling of pure text payload\n - Fix TRACE tests\n - Fix AMQP WebSocket test dependency\n - Fix tests\n - Update samples to align config to new jetty-spring bean\n" }, { "commit": "92efb318cbfd2494bc69a18077ee138370dd6c59", "tree": "e819b19fe2b35f9277a58f79883f27deec432ffe", "parents": [ "a603710b909590e1524ead9a4b1a0ec4a587ca7c" ], "author": { "name": "Grzegorz Grzybek", "email": "gr.grzybek@gmail.com", "time": "Wed May 14 13:30:23 2025 +0200" }, "committer": { "name": "Christopher L. Shannon", "email": "cshannon@apache.org", "time": "Wed Jul 15 18:48:21 2026 -0400" }, "message": "[Jetty 12] Use proper jetty-ee9-maven-plugin\n" }, { "commit": "a603710b909590e1524ead9a4b1a0ec4a587ca7c", "tree": "abe9448302cf959280fbd5bd5c8671e9a1dc8ee3", "parents": [ "d31d590f0bc29a7927399beffe10dd8279e40284" ], "author": { "name": "Grzegorz Grzybek", "email": "gr.grzybek@gmail.com", "time": "Wed May 14 13:29:30 2025 +0200" }, "committer": { "name": "Christopher L. Shannon", "email": "cshannon@apache.org", "time": "Wed Jul 15 18:48:21 2026 -0400" }, "message": "[AMQ-9359] Switch to Jetty 12 native websocket API\n" }, { "commit": "d31d590f0bc29a7927399beffe10dd8279e40284", "tree": "33c367e25d6e728059bdf3ae220f7b2a139d3d1d", "parents": [ "91e35e07def30d4fc7602bb4b2f775c56f02cf76" ], "author": { "name": "Matt Pavlovich", "email": "mattrpav@apache.org", "time": "Thu May 30 08:16:02 2024 -0500" }, "committer": { "name": "Christopher L. Shannon", "email": "cshannon@apache.org", "time": "Wed Jul 15 18:48:21 2026 -0400" }, "message": "[AMQ-9359] Jetty-12 conversion\n" }, { "commit": "91e35e07def30d4fc7602bb4b2f775c56f02cf76", "tree": "a6aa88dead5ed8b9fa77e3ad9a744006135bb351", "parents": [ "f6404d47cf6e9bedaa31743ec9bc5c6f0f721221" ], "author": { "name": "Christopher L. Shannon", "email": "cshannon@apache.org", "time": "Wed Jul 15 09:25:43 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 15 09:25:43 2026 -0400" }, "message": "Ensure composite temp dests are handled in AuthorizationBroker (#2219)\n\nFor temporary destinations we need to iterate over the list of composite\ndestinations and compute the union using the same strategy as\nDefaultAuthorizationMap." }, { "commit": "f6404d47cf6e9bedaa31743ec9bc5c6f0f721221", "tree": "98fb4a48a15f9c925cdb872765e934a90e0c56c5", "parents": [ "e22dc204aced5e9ec4236c86650b6aca25373204" ], "author": { "name": "Matt Pavlovich", "email": "mattrpav@apache.org", "time": "Thu Jul 09 10:40:10 2026 -0500" }, "committer": { "name": "Matt Pavlovich", "email": "matt@hyte.io", "time": "Sat Jul 11 12:52:12 2026 -0500" }, "message": "[#] Questions answered for THREAD_MODEL.md\n" }, { "commit": "e22dc204aced5e9ec4236c86650b6aca25373204", "tree": "78cf70ac83bfe5174f8a237e90782ae005314618", "parents": [ "d8793e753ba1b3d2a9b89464e0344fc933381a07" ], "author": { "name": "Matt Pavlovich", "email": "mattrpav@apache.org", "time": "Sat Jul 04 08:28:48 2026 -0500" }, "committer": { "name": "Matt Pavlovich", "email": "matt@hyte.io", "time": "Sat Jul 11 10:27:21 2026 -0500" }, "message": "[#] First pass edits to THREAD_MODEL.md and SECURITY.md\n" }, { "commit": "d8793e753ba1b3d2a9b89464e0344fc933381a07", "tree": "46628a3f961f8676039fd54c3696b2afc3261a75", "parents": [ "e6dab78c2688ba3c8595d47e737d099421550425" ], "author": { "name": "Jarek Potiuk", "email": "jarek@potiuk.com", "time": "Sat Jul 04 14:02:35 2026 +0200" }, "committer": { "name": "Matt Pavlovich", "email": "matt@hyte.io", "time": "Sat Jul 11 10:27:21 2026 -0500" }, "message": "Add a draft security threat model (THREAT_MODEL.md) + discoverability wiring\n\nGenerated-by: Claude Code\n" }, { "commit": "e6dab78c2688ba3c8595d47e737d099421550425", "tree": "99fe1fa76b2c1f616992adf152b3ca7abcd7c509", "parents": [ "977cc634a1b56bdd81025677b5495a9feea4aaa3" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Fri Jul 10 09:12:32 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jul 10 09:12:32 2026 -0400" }, "message": "build(deps): bump camel-version from 4.20.0 to 4.21.0 (#2173)\n\nBumps `camel-version` from 4.20.0 to 4.21.0.\n\nUpdates `org.apache.camel:camel-bom` from 4.20.0 to 4.21.0\n\nUpdates `org.apache.camel:camel-core` from 4.20.0 to 4.21.0\n\nUpdates `org.apache.camel:camel-spring` from 4.20.0 to 4.21.0\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.camel:camel-bom\n dependency-version: 4.21.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n- dependency-name: org.apache.camel:camel-core\n dependency-version: 4.21.0\n dependency-type: direct:development\n update-type: version-update:semver-minor\n- dependency-name: org.apache.camel:camel-spring\n dependency-version: 4.21.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "977cc634a1b56bdd81025677b5495a9feea4aaa3", "tree": "0bdee40bb14e22650bb821b60a0e5c32e5067b83", "parents": [ "04b5193747bc7e5aea15fd32b617ef36f44fec71" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Fri Jul 10 09:11:59 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jul 10 09:11:59 2026 -0400" }, "message": "build(deps-dev): bump netty-version from 4.2.15.Final to 4.2.16.Final (#2195)\n\nBumps `netty-version` from 4.2.15.Final to 4.2.16.Final.\n\nUpdates `io.netty:netty-buffer` from 4.2.15.Final to 4.2.16.Final\n- [Release notes](https://github.com/netty/netty/releases)\n- [Commits](https://github.com/netty/netty/compare/netty-4.2.15.Final...netty-4.2.16.Final)\n\nUpdates `io.netty:netty-common` from 4.2.15.Final to 4.2.16.Final\n- [Release notes](https://github.com/netty/netty/releases)\n- [Commits](https://github.com/netty/netty/compare/netty-4.2.15.Final...netty-4.2.16.Final)\n\nUpdates `io.netty:netty-handler` from 4.2.15.Final to 4.2.16.Final\n- [Release notes](https://github.com/netty/netty/releases)\n- [Commits](https://github.com/netty/netty/compare/netty-4.2.15.Final...netty-4.2.16.Final)\n\nUpdates `io.netty:netty-codec-http` from 4.2.15.Final to 4.2.16.Final\n- [Release notes](https://github.com/netty/netty/releases)\n- [Commits](https://github.com/netty/netty/compare/netty-4.2.15.Final...netty-4.2.16.Final)\n\nUpdates `io.netty:netty-transport` from 4.2.15.Final to 4.2.16.Final\n- [Release notes](https://github.com/netty/netty/releases)\n- [Commits](https://github.com/netty/netty/compare/netty-4.2.15.Final...netty-4.2.16.Final)\n\n---\nupdated-dependencies:\n- dependency-name: io.netty:netty-buffer\n dependency-version: 4.2.16.Final\n dependency-type: direct:development\n update-type: version-update:semver-patch\n- dependency-name: io.netty:netty-common\n dependency-version: 4.2.16.Final\n dependency-type: direct:development\n update-type: version-update:semver-patch\n- dependency-name: io.netty:netty-handler\n dependency-version: 4.2.16.Final\n dependency-type: direct:development\n update-type: version-update:semver-patch\n- dependency-name: io.netty:netty-codec-http\n dependency-version: 4.2.16.Final\n dependency-type: direct:development\n update-type: version-update:semver-patch\n- dependency-name: io.netty:netty-transport\n dependency-version: 4.2.16.Final\n dependency-type: direct:development\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "04b5193747bc7e5aea15fd32b617ef36f44fec71", "tree": "ae5c954341d4bf5e6b9d29039abd0902dd228360", "parents": [ "f07c379f58a4d9defd87fa9df7aa0ac0ffd5d55d" ], "author": { "name": "Christopher L. Shannon", "email": "cshannon@apache.org", "time": "Fri Jul 10 08:07:27 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jul 10 08:07:27 2026 -0400" }, "message": "Minor updates to text message sync (#2209)\n\nThis is a small follow on to #2188 to simply some of the sync by moving\nto the method level and also adding sync in a spot or 2 that got missed.\n\nThis commit also updates the race condition test to add all the other\nmessage types to show that they do not suffer from the same race\ncondition with null bodies either." }, { "commit": "f07c379f58a4d9defd87fa9df7aa0ac0ffd5d55d", "tree": "ea29b042fe20b7981add36e724ee014f9df4551a", "parents": [ "e1368d5f45570f5667d73cd1c9fd7ce066fe6cff" ], "author": { "name": "lichtin", "email": "lichtin@yahoo.com", "time": "Fri Jul 10 06:44:50 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jul 10 06:44:50 2026 +0200" }, "message": "#2201 Update spring.schemas to include missing \u0027spring-beans.xsd\u0027 mapping (#2202)" }, { "commit": "e1368d5f45570f5667d73cd1c9fd7ce066fe6cff", "tree": "4cac92cff082bcbc1a620cf647ff3c5e2e347f6f", "parents": [ "05b1e5c9c0a824538f2e7fd24782d96dfc4ffa17" ], "author": { "name": "Christopher L. Shannon", "email": "cshannon@apache.org", "time": "Thu Jul 09 17:11:14 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jul 09 17:11:14 2026 -0400" }, "message": "Add tests validating TextMessage body thread safety fix (#2207)\n\nValidates the fix for the race between getText(), storeContentAndClear()\nand copy() on a shared ActiveMQTextMessage instance that could null the\nmessage body: getText() decoded content into text and cleared content\nwhile storeContentAndClear() observed the pre-clear content, skipped\nre-encoding, and cleared text — losing the body permanently. Triggered on\nthe broker by XPath selector evaluation or JMX browse racing dispatch\nmarshalling, with the network bridge copy() adding a third participant.\n\nFour tests:\n- sequential control: getText/storeContentAndClear round trips preserve\n the body\n- two-way race: 20k iterations of concurrent getText vs\n storeContentAndClear; no iteration may lose the body\n- three-way race including copy(): both the original and the copy must\n retain a recoverable body (pre-fix this loses the original\u0027s body\n within a few thousand iterations)\n- deterministic lock-discipline pin: the fix serializes the text/content\n state transitions on the message instance, so storeContentAndClear()\n must block while another thread holds the message monitor; fails\n immediately on any regression to unsynchronized transitions\n\nVerified failing (2 of 4) against the pre-fix base and passing on this\nbranch.\n\nCo-authored-by: Matt Pavlovich \u003cmattrpav@apache.org\u003e" }, { "commit": "05b1e5c9c0a824538f2e7fd24782d96dfc4ffa17", "tree": "71870d262f63978b7d701bd58e5cc2e52c5e972d", "parents": [ "ad9a30dfa0835c1712b794d0ea00f16cd79981fa" ], "author": { "name": "JB Onofré", "email": "jbonofre@apache.org", "time": "Thu Jul 09 18:45:55 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jul 09 18:45:55 2026 +0200" }, "message": "feat(#1828): Expose NetworkConnector URI and local URI in JMX MBean (#1829)\n\n* feat(#1828): Expose NetworkConnector URI and local URI in JMX MBean\n\nAdd getUri() and getLocalUri() attributes to NetworkConnectorViewMBean\nso that the network connector URI is visible via JMX. Add abstract\ngetUri() to NetworkConnector base class and implement it in\nMulticastNetworkConnector.\n\n* fix(#1828): delegate getUri() to getRemoteURI() in MulticastNetworkConnector\n\nAddress PR review: implement abstract getUri() by delegating to\ngetRemoteURI() and add a comment to clarify the relationship between\nthe two methods." }, { "commit": "ad9a30dfa0835c1712b794d0ea00f16cd79981fa", "tree": "1235df370e20ed0a2b24fd01d3588dd53707907a", "parents": [ "a32d07ce5bc4f28873cfe1380befaf7f27331c99" ], "author": { "name": "Jean-Louis Monteiro", "email": "jeanouii@gmail.com", "time": "Thu Jul 09 16:37:59 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jul 09 16:37:59 2026 +0200" }, "message": "feat(#1797): add message delivery tracking to QueueMessageReference (#1796)\n\n* feat: add message delivery tracking to QueueMessageReference\n\nAdd isDelivered()/setDelivered() to QueueMessageReference interface\nwith implementations in IndirectMessageReference (boolean field) and\nNullMessageReference (no-op). PrefetchSubscription.acknowledge() now\nmarks messages as delivered\u003dtrue when processing DeliveredAck, enabling\ndownstream consumers to distinguish delivered-but-unacked messages.\n\n* fix: incorporate feedback" }, { "commit": "a32d07ce5bc4f28873cfe1380befaf7f27331c99", "tree": "322497579312aaa1461926f5925b65954e166c82", "parents": [ "6183de08b4406e34a24f819c048883a1151bd2de" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Jul 09 15:23:06 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jul 09 15:23:06 2026 +0200" }, "message": "build(deps): bump actions/checkout from 6 to 7 (#2129)\n\nBumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v6...v7)\n\n---\nupdated-dependencies:\n- dependency-name: actions/checkout\n dependency-version: \u00277\u0027\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "6183de08b4406e34a24f819c048883a1151bd2de", "tree": "e7236b3b0ea83bde3100e0fa23475d1f5501c6d0", "parents": [ "b131c3d2661ad28236a5ac18826e7d88cd3cb976" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Jul 09 15:22:01 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jul 09 15:22:01 2026 +0200" }, "message": "build(deps): bump org.apache.groovy:groovy-ant from 5.0.6 to 5.0.7 (#2191)\n\nBumps [org.apache.groovy:groovy-ant](https://github.com/apache/groovy) from 5.0.6 to 5.0.7.\n- [Commits](https://github.com/apache/groovy/commits)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.groovy:groovy-ant\n dependency-version: 5.0.7\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "b131c3d2661ad28236a5ac18826e7d88cd3cb976", "tree": "bd73f1cf0be83b06446168012bab1450990c04f0", "parents": [ "8e6f47143074e29691644cc30e0c1b0303196a15" ], "author": { "name": "Christopher L. Shannon", "email": "cshannon@apache.org", "time": "Thu Jul 09 09:05:47 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jul 09 09:05:47 2026 -0400" }, "message": "Fix TextMessage body thread safety (#2188)\n\nThis fixes the rare null body issues seen on the broker when using text\nmessages by using synchronization when marshaling or unmarshaling the\nbody into a String to prevent a race condition from causing the body to\nend up null. This has been optimized to use volatiles and double checked\nlocking to avoid synchronization unless needed." }, { "commit": "8e6f47143074e29691644cc30e0c1b0303196a15", "tree": "db4e712f365f579408bb5e3f8c1b4df894f7461f", "parents": [ "6ed4ca1de3aeab15f3342f148e89419472c62a2b" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Jul 09 07:23:19 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jul 09 07:23:19 2026 +0200" }, "message": "build(deps): bump org.apache.groovy:groovy from 5.0.6 to 5.0.7 (#2190)\n\nBumps [org.apache.groovy:groovy](https://github.com/apache/groovy) from 5.0.6 to 5.0.7.\n- [Commits](https://github.com/apache/groovy/commits)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.groovy:groovy\n dependency-version: 5.0.7\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "6ed4ca1de3aeab15f3342f148e89419472c62a2b", "tree": "3573ee9be59dc201c583cf9b699762dba4bb5eda", "parents": [ "d1fd0aa953060c7d933def98691d90ac17da174d" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Jul 08 18:59:24 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 08 18:59:24 2026 -0400" }, "message": "build(deps): bump xbean-version from 4.30 to 4.31 (#2189)\n\nBumps `xbean-version` from 4.30 to 4.31.\n\nUpdates `org.apache.xbean:xbean-spring` from 4.30 to 4.31\n\nUpdates `org.apache.xbean:maven-xbean-plugin` from 4.30 to 4.31\n\nUpdates `org.apache.xbean:xbean-blueprint` from 4.30 to 4.31\n\nUpdates `org.apache.xbean:xbean-finder` from 4.30 to 4.31\n\nUpdates `org.apache.xbean:xbean-asm-util` from 4.30 to 4.31\n\nUpdates `org.apache.xbean:xbean-bundleutils` from 4.30 to 4.31\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.xbean:xbean-spring\n dependency-version: \u00274.31\u0027\n dependency-type: direct:production\n update-type: version-update:semver-minor\n- dependency-name: org.apache.xbean:maven-xbean-plugin\n dependency-version: \u00274.31\u0027\n dependency-type: direct:production\n update-type: version-update:semver-minor\n- dependency-name: org.apache.xbean:xbean-blueprint\n dependency-version: \u00274.31\u0027\n dependency-type: direct:production\n update-type: version-update:semver-minor\n- dependency-name: org.apache.xbean:xbean-finder\n dependency-version: \u00274.31\u0027\n dependency-type: direct:development\n update-type: version-update:semver-minor\n- dependency-name: org.apache.xbean:xbean-asm-util\n dependency-version: \u00274.31\u0027\n dependency-type: direct:development\n update-type: version-update:semver-minor\n- dependency-name: org.apache.xbean:xbean-bundleutils\n dependency-version: \u00274.31\u0027\n dependency-type: direct:development\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "d1fd0aa953060c7d933def98691d90ac17da174d", "tree": "766577a2bfab1c41afe465b467a04db9cf467727", "parents": [ "3c542837539a27fcd1fd89fcf038458528bfe1ce" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Jul 08 18:58:45 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 08 18:58:45 2026 -0400" }, "message": "build(deps): bump jackson-version from 2.22.0 to 2.22.1 (#2200)\n\nBumps `jackson-version` from 2.22.0 to 2.22.1.\n\nUpdates `com.fasterxml.jackson.core:jackson-core` from 2.22.0 to 2.22.1\n- [Commits](https://github.com/FasterXML/jackson-core/compare/jackson-core-2.22.0...jackson-core-2.22.1)\n\nUpdates `com.fasterxml.jackson.core:jackson-databind` from 2.22.0 to 2.22.1\n- [Commits](https://github.com/FasterXML/jackson/commits)\n\nUpdates `com.fasterxml.jackson.dataformat:jackson-dataformat-xml` from 2.22.0 to 2.22.1\n- [Commits](https://github.com/FasterXML/jackson-dataformat-xml/compare/jackson-dataformat-xml-2.22.0...jackson-dataformat-xml-2.22.1)\n\n---\nupdated-dependencies:\n- dependency-name: com.fasterxml.jackson.core:jackson-core\n dependency-version: 2.22.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: com.fasterxml.jackson.core:jackson-databind\n dependency-version: 2.22.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: com.fasterxml.jackson.dataformat:jackson-dataformat-xml\n dependency-version: 2.22.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "3c542837539a27fcd1fd89fcf038458528bfe1ce", "tree": "deddf06281b5522458931f4d55c858c054e436a6", "parents": [ "0b6cf76ceec2ecc890545ff12d8aad937841fd42" ], "author": { "name": "Christopher L. Shannon", "email": "cshannon@apache.org", "time": "Mon Jul 06 08:47:19 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jul 06 08:47:19 2026 -0400" }, "message": "Fix Topic store/temp usage tracking (#2178)\n\nThis fixes a bug that prevented broker usage limit updates from being\napplied to topics. Previousy topics did not call start() on the usage\ntrackers for the store or temp store which means those trackers didn\u0027t\nget registered with the parent tracker. Registering with the parent is\nrequired in order to get notified of updates.\n\nQueues already properly called start/stop to register and deregister the\nusage trackers so this commit just brings Topics in line with Queues and\nadds a test to verify the trackers now correctly register themselves\nwith the broker\u0027s parent tracker and the limits are applied on updates.\nLastly, the the test verifies the trackers are cleaned up correctly on\ndestination deletion." }, { "commit": "0b6cf76ceec2ecc890545ff12d8aad937841fd42", "tree": "d0756af5aa80e8200a95bb495d68a15188b9279d", "parents": [ "4de77f15c564eff007b1a9bbd100529a5e7fde56" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Fri Jul 03 12:02:14 2026 +0100" }, "committer": { "name": "Matt Pavlovich", "email": "matt@hyte.io", "time": "Fri Jul 03 08:05:06 2026 -0500" }, "message": "chore: Update Spring to 6.2.19\n" }, { "commit": "4de77f15c564eff007b1a9bbd100529a5e7fde56", "tree": "32147c358a2aa891255dddc8272974ad65e6b7f7", "parents": [ "c0892594cb3edfab2dd42ad6a6aef9c6f0cdf11e" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Fri Jul 03 10:35:01 2026 +0000" }, "committer": { "name": "Matt Pavlovich", "email": "matt@hyte.io", "time": "Fri Jul 03 07:36:27 2026 -0500" }, "message": "build(deps): bump log4j-version from 2.26.0 to 2.26.1\n\nBumps `log4j-version` from 2.26.0 to 2.26.1.\n\nUpdates `org.apache.logging.log4j:log4j-api` from 2.26.0 to 2.26.1\n\nUpdates `org.apache.logging.log4j:log4j-core` from 2.26.0 to 2.26.1\n\nUpdates `org.apache.logging.log4j:log4j-slf4j2-impl` from 2.26.0 to 2.26.1\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.logging.log4j:log4j-api\n dependency-version: 2.26.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.apache.logging.log4j:log4j-core\n dependency-version: 2.26.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.apache.logging.log4j:log4j-slf4j2-impl\n dependency-version: 2.26.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "c0892594cb3edfab2dd42ad6a6aef9c6f0cdf11e", "tree": "3b4554fcc6400cf9defbc8a3d816f0b69a956ce1", "parents": [ "4c34a49132de68e8427ca011fbe8bccb218795e1" ], "author": { "name": "Christopher L. Shannon", "email": "cshannon@apache.org", "time": "Thu Jul 02 16:05:11 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jul 02 16:05:11 2026 -0400" }, "message": "Fire message discarded advisory on format errors (#2177)\n\nIn #2136 the broker was updated to handle corrupt messages and to send\nthem to the DLQ and discarding them. This change further improves on\nthat by sending the message discarded advisory, if it has been enabled\non the destination. By default the discard advisory will be off." }, { "commit": "4c34a49132de68e8427ca011fbe8bccb218795e1", "tree": "65699ac53d0b10f2c5f145406c838fe81fea3f16", "parents": [ "6e9dd5b0aee4cef5640fe4fde5d7736ab5b8464e" ], "author": { "name": "Christopher L. Shannon", "email": "cshannon@apache.org", "time": "Thu Jul 02 10:14:15 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jul 02 10:14:15 2026 -0400" }, "message": "Prevent cursor from using more than 100% temp store (#2165)\n\nThis fixes a bug in FilePendingMessageCursor that could cause the\ntemporary store to exceed 100% usage. The cursor now properly checks the\ntemporary usage limits when writing messages from memory to the\ntemporary store. If the store is full, messages are now discarded and\na discarded advisory will be fired (if enabled) and the messages will be\nDLQ\u0027d if the processNonPersistent flag is true. This commit also fixes\nan issue with Topic subs possibly sending expired messages to the DLQ\ntwice which was noticed while working on this fix." }, { "commit": "6e9dd5b0aee4cef5640fe4fde5d7736ab5b8464e", "tree": "72b867c3c4cf7fa9b93b1970f77b9bf2542c4956", "parents": [ "505f5a9c9924f18d3c23391bc0bb8de292e0e408" ], "author": { "name": "Christopher L. Shannon", "email": "cshannon@apache.org", "time": "Wed Jul 01 20:24:04 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 01 20:24:04 2026 -0400" }, "message": "Add better frame size validation for AMQP (#2167)\n\nAdd a negative size check for AMQP NIO transports.\nThis also adds a similar check to OpenWire. For OpenWire\nthe same IllegalArgumentException is thrown but this\nimproves the error message in the NIO transport." }, { "commit": "505f5a9c9924f18d3c23391bc0bb8de292e0e408", "tree": "29d0033a8b9b2874ec21ef3c9287da3d78477a7d", "parents": [ "acdcce2bcfa2254a470021ed7a9f25e35d2b9901" ], "author": { "name": "Christopher L. Shannon", "email": "cshannon@apache.org", "time": "Wed Jul 01 17:55:41 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 01 17:55:41 2026 -0400" }, "message": "Lower default maxFrameSize to 100 MB in xml config (#2166)\n\nThe previous default was 100 MB but 10 MB makes more sense as a default,\nespecially with maxInflatedDataSize defaulting to 100 MB." }, { "commit": "acdcce2bcfa2254a470021ed7a9f25e35d2b9901", "tree": "dd401534c3c8f2c0faae8d4967d73f1e0a06fdff", "parents": [ "aa8d766ab6ef4e356d4b038af3c556f5f67ada87" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Jun 30 07:47:59 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jun 30 07:47:59 2026 +0200" }, "message": "build(deps-dev): bump commons-logging:commons-logging (#2127)\n\nBumps [commons-logging:commons-logging](https://github.com/apache/commons-logging) from 1.3.6 to 1.4.0.\n- [Changelog](https://github.com/apache/commons-logging/blob/master/RELEASE-NOTES.txt)\n- [Commits](https://github.com/apache/commons-logging/compare/rel/commons-logging-1.3.6...rel/commons-logging-1.4.0)\n\n---\nupdated-dependencies:\n- dependency-name: commons-logging:commons-logging\n dependency-version: 1.4.0\n dependency-type: direct:development\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "aa8d766ab6ef4e356d4b038af3c556f5f67ada87", "tree": "5363e6b371468641036676e5246a14eb8f9cce90", "parents": [ "ff29ab870ba35275f7363fda8a6653a7615722eb" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Jun 30 07:47:05 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jun 30 07:47:05 2026 +0200" }, "message": "build(deps): bump org.apache:apache from 38 to 39 (#2162)\n\nBumps [org.apache:apache](https://github.com/apache/maven-apache-parent) from 38 to 39.\n- [Release notes](https://github.com/apache/maven-apache-parent/releases)\n- [Commits](https://github.com/apache/maven-apache-parent/commits)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache:apache\n dependency-version: \u002739\u0027\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "ff29ab870ba35275f7363fda8a6653a7615722eb", "tree": "f20820e3e4d0557c1fb30715ba23397c5a8fd5e8", "parents": [ "78688246e9962abe03daf62bc1c93cc92e723b2a" ], "author": { "name": "Matt Pavlovich", "email": "mattrpav@apache.org", "time": "Tue Jun 30 00:46:34 2026 -0500" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jun 30 07:46:34 2026 +0200" }, "message": "[#] GitHub DevOps: Disable GH Actions on forked repositories to reduce spam on failed test runs (#2164)" }, { "commit": "78688246e9962abe03daf62bc1c93cc92e723b2a", "tree": "968c0d5b5a704f57d499d5a01f06470065609af2", "parents": [ "1ac5eda3158d1557ed9e72ea8b9292e6467406d5" ], "author": { "name": "Christopher L. Shannon", "email": "cshannon@apache.org", "time": "Mon Jun 29 19:30:47 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 29 19:30:47 2026 -0400" }, "message": "More security.md updates (#2163)" }, { "commit": "1ac5eda3158d1557ed9e72ea8b9292e6467406d5", "tree": "9042e3b999e9584415c8cf857e00c668adef5e86", "parents": [ "89838f6d6848b022720d4ef1d35a836993dcc4b7" ], "author": { "name": "Christopher L. Shannon", "email": "cshannon@apache.org", "time": "Thu Jun 25 19:38:37 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jun 25 19:38:37 2026 -0400" }, "message": "Remove all author tags (#2159)\n\nApache discourages use of them, see: https://www.apache.org/foundation/records/minutes/2004/board_minutes_2004_09_22.txt" }, { "commit": "89838f6d6848b022720d4ef1d35a836993dcc4b7", "tree": "1beeec00bb29e08a770dfd178667ce29cd0e817e", "parents": [ "96737818ec36b63bbb6624d988c927697e8da322" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Jun 25 07:11:18 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jun 25 07:11:18 2026 +0200" }, "message": "build(deps): bump org.javassist:javassist from 3.31.0-GA to 3.32.0-GA (#2131)\n\nBumps [org.javassist:javassist](https://github.com/jboss-javassist/javassist) from 3.31.0-GA to 3.32.0-GA.\n- [Release notes](https://github.com/jboss-javassist/javassist/releases)\n- [Changelog](https://github.com/jboss-javassist/javassist/blob/master/Changes.md)\n- [Commits](https://github.com/jboss-javassist/javassist/commits)\n\n---\nupdated-dependencies:\n- dependency-name: org.javassist:javassist\n dependency-version: 3.32.0-GA\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "96737818ec36b63bbb6624d988c927697e8da322", "tree": "4e4191b05c814243388f3cc58a1736640fb14441", "parents": [ "5d9c3036b662995642b47a6ecdb4e5eb652621c9" ], "author": { "name": "JB Onofré", "email": "jbonofre@apache.org", "time": "Thu Jun 25 07:06:55 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jun 25 07:06:55 2026 +0200" }, "message": "Preserve property placeholders when removing/modifying networkConnectors (#2123)\n\nNetworkConnectorProcessor.configMatch compared raw DTO values (still\nholding ${...} placeholders) against the live NetworkConnector whose\nattributes had already been resolved by Spring. A connector declared\nwith placeholders could therefore never be matched for removal or\nmodification by the RuntimeConfigurationPlugin. Filter the DTO props\nthrough placeHolderUtil before comparing." }, { "commit": "5d9c3036b662995642b47a6ecdb4e5eb652621c9", "tree": "693076ad52088eb00cbf5cf7efbd13bad84fb210", "parents": [ "f9957d15c97b9e9e3b43f8e0e2110beb14b63be3" ], "author": { "name": "Christopher L. Shannon", "email": "cshannon@apache.org", "time": "Tue Jun 23 19:43:36 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jun 23 19:43:36 2026 -0400" }, "message": "Improve handling of partial reads and EOF in Frame size limited filter (#2154)\n\nThis update makes the following changes/improvements:\n\n* If the wrapped stream is finished and returns -1 this is now returned\n correctly and availableBytes are not decremented.\n* Partial reads now will be attempted up to the availableBytes limit\n* If 0 is passed in for the length for a partial read then no attempt to\n read is done and 0 is returned, in line with the spec." }, { "commit": "f9957d15c97b9e9e3b43f8e0e2110beb14b63be3", "tree": "9c642be6d9762d88ea20720abaa8adcd3e4f3d49", "parents": [ "cda48d5d2fa6509194202231775814d38b5bdd01" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Jun 23 19:19:38 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jun 23 19:19:38 2026 -0400" }, "message": "build(deps): bump shiro-version from 2.2.0 to 2.2.1 (#2124)\n\nBumps `shiro-version` from 2.2.0 to 2.2.1.\n\nUpdates `org.apache.shiro:shiro-core` from 2.2.0 to 2.2.1\n- [Release notes](https://github.com/apache/shiro/releases)\n- [Changelog](https://github.com/apache/shiro/blob/main/RELEASE-NOTES)\n- [Commits](https://github.com/apache/shiro/compare/shiro-root-2.2.0...shiro-root-2.2.1)\n\nUpdates `org.apache.shiro:shiro-spring` from 2.2.0 to 2.2.1\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.shiro:shiro-core\n dependency-version: 2.2.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.apache.shiro:shiro-spring\n dependency-version: 2.2.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "cda48d5d2fa6509194202231775814d38b5bdd01", "tree": "e8eee02ad7b93b7db07683bfcebe8f62a5492ddb", "parents": [ "d4c0b3c213cdfd8f6c15b3737c178440d2542f11" ], "author": { "name": "Matt Pavlovich", "email": "mattrpav@apache.org", "time": "Mon Jun 22 19:22:11 2026 -0500" }, "committer": { "name": "Matt Pavlovich", "email": "matt@hyte.io", "time": "Tue Jun 23 16:51:01 2026 -0500" }, "message": "[#2137] Fix maxUncommittedCount usage across a network of brokers\n" }, { "commit": "d4c0b3c213cdfd8f6c15b3737c178440d2542f11", "tree": "353176fad246e4c0b3ed958919cb3cc1c8c67f09", "parents": [ "f166435d31d6e9d856d8996741ca9feeaeb8ccb2" ], "author": { "name": "Christopher L. Shannon", "email": "cshannon@apache.org", "time": "Tue Jun 23 14:58:48 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jun 23 14:58:48 2026 -0400" }, "message": "Fix test by enabling allowTempDestinationStealing (#2146)" }, { "commit": "f166435d31d6e9d856d8996741ca9feeaeb8ccb2", "tree": "9d56dc21d252ca92d5a25034bbcfe5fa26ed3b0c", "parents": [ "a148e598ab065656523f87e54f77900cce44dd07" ], "author": { "name": "mwashburn", "email": "mwashburn@millenniumadvisors.com", "time": "Thu May 14 12:18:19 2026 -0400" }, "committer": { "name": "Matt Pavlovich", "email": "matt@hyte.io", "time": "Tue Jun 23 13:49:15 2026 -0500" }, "message": "[#2020] Add expiryCheckEnabled option to MessageEvictionStrategy to skip O(n) expiry scan TopicSubscription\n\nWhen a slow-consumer\u0027s pending-message buffer exceeds the high-water mark\n(default: 1000 messages), TopicSubscription.add() calls removeExpiredMessages()\non every single message add. That method iterates every pending message and\ncalls isExpired(), which is an O(n) scan over the full buffer.\nWhen messages carry no TTL (isExpired() always returns false), this scan\nprovides no benefit -- it iterates the entire buffer on every add with zero\nmessages removed. With a large pending limit (e.g. 20,000), this adds up to\nmillions of no-op iterations per second on busy topics.\nThis commit adds an expiryCheckEnabled boolean (default true) to MessageEvictionStrategy.\nSetting it to false inserts a single guard in TopicSubscription.add():\n if (expiryCheckEnabled \u0026\u0026 !matched.isEmpty() \u0026\u0026 matched.size() \u003e max) {\n removeExpiredMessages();\n }\n\nAlso adds:\n- TopicSubscriptionEnableExpiryTest: 11 correctness/propagation/integration tests\n- TopicSubscriptionEnableExpiryThroughputTest: throughput comparison test\n" }, { "commit": "a148e598ab065656523f87e54f77900cce44dd07", "tree": "d727af84223e2b36d78eef9679b6d3dc2e957031", "parents": [ "94a40565f146fa3e134085637f4f676f9cc6e16b" ], "author": { "name": "Matt Pavlovich", "email": "mattrpav@apache.org", "time": "Mon Jun 22 21:56:34 2026 -0500" }, "committer": { "name": "Matt Pavlovich", "email": "matt@hyte.io", "time": "Tue Jun 23 12:36:39 2026 -0500" }, "message": "[#2140] Improve KahaDB extensibility\n" }, { "commit": "94a40565f146fa3e134085637f4f676f9cc6e16b", "tree": "99916dd8dee1abb07e4a3a046c18d4cd8adf6c93", "parents": [ "b20e61c7ef736a04ad07a934ea8de628550c6cf2" ], "author": { "name": "Christopher L. Shannon", "email": "cshannon@apache.org", "time": "Tue Jun 23 13:16:46 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jun 23 13:16:46 2026 -0400" }, "message": "Add support for maxInflateDataSize to limit uncompressed buffers (#2139)\n\nThis change adds support for limiting the maximum inflation size of a\nmessage body when a message needs to be decompressed. This new setting\nwill help prevent OOM errors from large buffers being allocated.\n\nThe primary concern this is addressing is that compressed messages may\nbe smaller than maxFrameSize and the broker will accept them, but if an\nevent triggers a decompression a huge buffer could be created and cause\nOOM.\n\nThe broker will have a new maxInflateDataSize config that is broker wide\nbecause te value isn\u0027t tied to a protocol and it will default to 100 MB.\nClients are tied to a transport, so it makes more sense to make it as a\nratio of maxFrameSize. The default is 10x maxFrameSize if configured\nwhich should be enough of a buffer under normal circumstances. The ratio\ncan be changed using maxInflatedDataSizeRatio on a connection." }, { "commit": "b20e61c7ef736a04ad07a934ea8de628550c6cf2", "tree": "45b4ae42dbe6e1295d8ae5ed03a2ae1f55967545", "parents": [ "664774edcf36facf052948243ad55cee674fee76" ], "author": { "name": "Christopher L. Shannon", "email": "cshannon@apache.org", "time": "Mon Jun 22 20:14:14 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 22 20:14:14 2026 -0400" }, "message": "Improve the broker\u0027s handling of message corruption (#2136)\n\nThis commit improves the brokers handling of messages that are corrupt\nand can\u0027t be read, such as unmarshaling the properties or body.\nCurrently if there is an error an IOException is triggered and can lead\nto a client connection be closed. Furthermore for queues messages can be\nstuck and no new messages can be delivered.\n\nTo improve things the following changes have been made:\n\n* The MarshallingSupport utility that is used to unmarshal message\n properties and bodies has improve validation to check for errors\n such is incorrectly encoded size values.\n* The broker will now handle message format errors both when messages\n are evaluated to add to subscriptions and during dispatch to consumers\n when the messages are already on a subscription.\n* The Stomp protocol converter was fixed to not auto ack or track acks\n until the message has been converted.\n* AMQP no longer swallows message format errors and will throw so the\n erors can be handled by the TransportConnection.\n\nAll of these changes allow the broker to deal with corrupt messages and\nremove them (and possibly DLQ) vs causing the connections to close or\nthe messages to block consumers forever in the queue case." }, { "commit": "664774edcf36facf052948243ad55cee674fee76", "tree": "521897f0da695cbf1b5347d2b989d2fab420652a", "parents": [ "d8c5672e224883a16465f8550d0e6d900bfa383c" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jun 22 16:13:18 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 22 16:13:18 2026 +0200" }, "message": "build(deps): bump org.codehaus.jettison:jettison from 1.5.5 to 1.5.6 (#2128)\n\nBumps [org.codehaus.jettison:jettison](https://github.com/jettison-json/jettison) from 1.5.5 to 1.5.6.\n- [Release notes](https://github.com/jettison-json/jettison/releases)\n- [Commits](https://github.com/jettison-json/jettison/compare/jettison-1.5.5...jettison-1.5.6)\n\n---\nupdated-dependencies:\n- dependency-name: org.codehaus.jettison:jettison\n dependency-version: 1.5.6\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "d8c5672e224883a16465f8550d0e6d900bfa383c", "tree": "0c6de780b14310cf3b77ed224984893b45493f23", "parents": [ "81ab8875bef634ee33026ed180586d2d36040bfb" ], "author": { "name": "Christopher L. Shannon", "email": "cshannon@apache.org", "time": "Wed Jun 17 16:22:03 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jun 17 16:22:03 2026 -0400" }, "message": "Add flag to optionally enable temp destination stealing (#2122)\n\nThis adds a flag to allow other connections to create subscriptions on\na temp destination, the default has been set to off. Setting to true\nenables some use cases to work such as failover but most of the time it\nis not needed and should be disabled to be JMS client spec compatible.\n\nThe java client also already checked this, this now adds a broker side\ncheck as well.\n\n* Move allowTempDestinationStealing to policy" }, { "commit": "81ab8875bef634ee33026ed180586d2d36040bfb", "tree": "ae9a66779a13124344d4dea8fa500e2a777c80d9", "parents": [ "74ac6dabc4e6b2ca0c4baf1dd2f6b73094f45eda" ], "author": { "name": "Timothy Bish", "email": "tabish121@gmail.com", "time": "Mon Jun 15 16:10:47 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 15 16:10:47 2026 -0400" }, "message": "Provide a flexible filter style input stream that limits read amounts (#2118)\n\nThis commit supplies a utility type that acts as a filter input stream\nstyle stream wrapper than can be configured with an available bytes\nwindow which decreases as bytes are read from the stream. This allows\na transport or other utility to limit what can be read based on a fixed\namount such as a max frame size option." }, { "commit": "74ac6dabc4e6b2ca0c4baf1dd2f6b73094f45eda", "tree": "a7211d417cae4a6b40d94c42e86069cd77e322a4", "parents": [ "230db1fec0b4bfdb8dcf06cdceeb00585ed8f82c" ], "author": { "name": "Matt Pavlovich", "email": "mattrpav@apache.org", "time": "Sat May 02 12:28:43 2026 -0500" }, "committer": { "name": "Matt Pavlovich", "email": "matt@hyte.io", "time": "Mon Jun 15 14:06:08 2026 -0500" }, "message": "[#1984] Refactor use of deprecated StatsImpl.addStatistic to use addStatistics(Set.of(..))\n" }, { "commit": "230db1fec0b4bfdb8dcf06cdceeb00585ed8f82c", "tree": "1ec38ec6c8b79da1c62ce550233b9ab6f126041d", "parents": [ "b20a4c72d9042bb988f3cdf1479874cd573eb12d" ], "author": { "name": "Christopher L. Shannon", "email": "cshannon@apache.org", "time": "Mon Jun 15 12:29:14 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 15 12:29:14 2026 -0400" }, "message": "Refactor network connections to process after ConnectionInfo (#2112)\n\nThis refactors the setup for network connections to be processed\nafter receiving ConnectionInfo. Network bridges are established by\neach broker sending a BrokerInfo command to the other broker to provide\nremote broker information, but this is done before ConnectionInfo.\nThis commit reworks the connection to capture the BrokerInfo information,\nbut delay processing until after the connection information has been\nreceived and processed by broker.addConnection(). The future that was\npreviously added for the connection id is no longer needed and removed.\n\nThis commit also simplifies durable sync for bridges and prevents a\nrace condition on startup by making sure the initial bridge and the\nduplex side only send back the BrokerSubscriptionInfo command after\nfully initialized." }, { "commit": "b20a4c72d9042bb988f3cdf1479874cd573eb12d", "tree": "f24b6612b57485d99186c941605b4ec5437207ef", "parents": [ "403ac4f9191b6d31f6ce9247e43752b0e5a09324" ], "author": { "name": "Christopher L. Shannon", "email": "cshannon@apache.org", "time": "Mon Jun 15 10:39:11 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 15 10:39:11 2026 -0400" }, "message": "Replace active temp dests map with set (#2113)\n\nFor some reason ActiveMQConnection was using a map instead of a set to\nstore the destinations, and just stored the exact same thing as the key\nand value. Furthermore, when checking if the map contained the\ndestination a call was being made to containsValue() which requires\niterating over the entire map.\n\nThis commit replaced the Map with a Set which simplifies things and\nmakes the contains() check constant. Also, the scope of the set was\nchanged from public to package because it makes no sense to have the\nscope as public and should be limited to only classes in the same\npackage." }, { "commit": "403ac4f9191b6d31f6ce9247e43752b0e5a09324", "tree": "a25d6ee9663aa77fa473fd1f3444e3009c340b4a", "parents": [ "7cb413bc3175cc04a6d21228f049ab258b24833a" ], "author": { "name": "Christopher L. Shannon", "email": "cshannon@apache.org", "time": "Thu Jun 11 19:44:44 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jun 11 19:44:44 2026 -0400" }, "message": "Remove extra buffer copy in StompNIOSSLTransport (#2107)\n\nOptimizes the StompNIOSSLTransport by removing the unnecessary extra\nbyte array allocation and buffer copy when processing frames" }, { "commit": "7cb413bc3175cc04a6d21228f049ab258b24833a", "tree": "ee03244ed8ecc6bd47c1ccb2476068fa5f574d41", "parents": [ "83ce2bacd84edfea4282132aff64f49ecb6baefd" ], "author": { "name": "Christopher L. Shannon", "email": "cshannon@apache.org", "time": "Thu Jun 11 19:44:24 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jun 11 19:44:24 2026 -0400" }, "message": "Validate Stomp headers against max frame size (#2104)\n\nUpdates Stomp codec to check headers against max frame size during\nreading of the headers and not after when reading the body." }, { "commit": "83ce2bacd84edfea4282132aff64f49ecb6baefd", "tree": "21a9c9d88c599311d4d9706ca341aec197f9c59f", "parents": [ "c36d5ebd6a7198f7bdf44101617e4092a58df816" ], "author": { "name": "Christopher L. Shannon", "email": "cshannon@apache.org", "time": "Thu Jun 11 16:42:40 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jun 11 16:42:40 2026 -0400" }, "message": "Add back missing closing tag (#2100)\n\nFix typo introduced in #2089" }, { "commit": "c36d5ebd6a7198f7bdf44101617e4092a58df816", "tree": "694499d38fcd732c98a832f1a301ffd76e62838b", "parents": [ "ac3d06454bdf8b21db7ef419f42d17ab124a6008" ], "author": { "name": "Christopher L. Shannon", "email": "cshannon@apache.org", "time": "Thu Jun 11 10:59:45 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jun 11 10:59:45 2026 -0400" }, "message": "Update SECURITY.md with more details (#2103)\n\nThis update adds info about setting a maxFrameSize and also some\ninformation about issues that are non-security" }, { "commit": "ac3d06454bdf8b21db7ef419f42d17ab124a6008", "tree": "d2ae8a6543926a62f0df38efa280056ca1e9b731", "parents": [ "a25839ad99b9bffd40c54ab852858a4153605369" ], "author": { "name": "Christopher L. Shannon", "email": "cshannon@apache.org", "time": "Mon Jun 08 17:36:05 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 08 17:36:05 2026 -0400" }, "message": "Add validation for LDAP network connector URIs (#2077)\n\nValidate the URIs provided by LDAP searches do not contain any protocols\nfrom the denied list." }, { "commit": "a25839ad99b9bffd40c54ab852858a4153605369", "tree": "e3739376cf3cce5e38111f97a92ca044295926a4", "parents": [ "aff105a1db9d4dbd607d5731314072bce9395cb0" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jun 08 14:59:50 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 08 14:59:50 2026 -0400" }, "message": "build(deps): bump org.springframework:spring-webmvc (#2096)\n\nBumps [org.springframework:spring-webmvc](https://github.com/spring-projects/spring-framework) from 6.2.17 to 6.2.18.\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.17...v6.2.18)\n\n---\nupdated-dependencies:\n- dependency-name: org.springframework:spring-webmvc\n dependency-version: 6.2.18\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "aff105a1db9d4dbd607d5731314072bce9395cb0", "tree": "6a86c27d8557cb06b0bc43f17113ccfa35493a2a", "parents": [ "7c04e76887ca5d8f5356b0b46c4a6e7152cce1d9" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jun 08 14:58:39 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 08 14:58:39 2026 -0400" }, "message": "build(deps): bump com.fasterxml.jackson.core:jackson-annotations (#2070)\n\nBumps [com.fasterxml.jackson.core:jackson-annotations](https://github.com/FasterXML/jackson) from 2.21 to 2.22.\n- [Commits](https://github.com/FasterXML/jackson/commits)\n\n---\nupdated-dependencies:\n- dependency-name: com.fasterxml.jackson.core:jackson-annotations\n dependency-version: \u00272.22\u0027\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "7c04e76887ca5d8f5356b0b46c4a6e7152cce1d9", "tree": "f31c4fb8bba71b5096dabf6315d5e5091337c369", "parents": [ "771f2ee93bc365f95083cd4f902600d53a787c04" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jun 08 14:56:48 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 08 14:56:48 2026 -0400" }, "message": "build(deps): bump jackson-version from 2.21.3 to 2.22.0 (#2072)\n\nBumps `jackson-version` from 2.21.3 to 2.22.0.\n\nUpdates `com.fasterxml.jackson.core:jackson-core` from 2.21.3 to 2.22.0\n- [Commits](https://github.com/FasterXML/jackson-core/compare/jackson-core-2.21.3...jackson-core-2.22.0)\n\nUpdates `com.fasterxml.jackson.core:jackson-databind` from 2.21.3 to 2.22.0\n- [Commits](https://github.com/FasterXML/jackson/commits)\n\nUpdates `com.fasterxml.jackson.dataformat:jackson-dataformat-xml` from 2.21.3 to 2.22.0\n- [Commits](https://github.com/FasterXML/jackson-dataformat-xml/compare/jackson-dataformat-xml-2.21.3...jackson-dataformat-xml-2.22.0)\n\n---\nupdated-dependencies:\n- dependency-name: com.fasterxml.jackson.core:jackson-core\n dependency-version: 2.22.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n- dependency-name: com.fasterxml.jackson.core:jackson-databind\n dependency-version: 2.22.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n- dependency-name: com.fasterxml.jackson.dataformat:jackson-dataformat-xml\n dependency-version: 2.22.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "771f2ee93bc365f95083cd4f902600d53a787c04", "tree": "78bc862e06efec7963a6c6b40842568a6988a8c4", "parents": [ "4e4a8685022489b7d8628caf5113102703840616" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jun 08 14:56:16 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 08 14:56:16 2026 -0400" }, "message": "build(deps-dev): bump org.sonarsource.scanner.maven:sonar-maven-plugin (#2050)\n\nBumps [org.sonarsource.scanner.maven:sonar-maven-plugin](https://github.com/SonarSource/sonar-scanner-maven) from 5.6.0.6792 to 5.7.0.6970.\n- [Release notes](https://github.com/SonarSource/sonar-scanner-maven/releases)\n- [Commits](https://github.com/SonarSource/sonar-scanner-maven/compare/5.6.0.6792...5.7.0.6970)\n\n---\nupdated-dependencies:\n- dependency-name: org.sonarsource.scanner.maven:sonar-maven-plugin\n dependency-version: 5.7.0.6970\n dependency-type: direct:development\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "4e4a8685022489b7d8628caf5113102703840616", "tree": "84f5fb07ac7ef2ec208dfa43e44e4eb59abb8992", "parents": [ "e49e0528cf218ba8c31455758a8d04b150b55970" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jun 08 14:55:04 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 08 14:55:04 2026 -0400" }, "message": "build(deps-dev): bump org.eclipse.jdt:ecj from 3.45.0 to 3.46.0 (#2085)\n\nBumps [org.eclipse.jdt:ecj](https://github.com/eclipse-jdt/eclipse.jdt.core) from 3.45.0 to 3.46.0.\n- [Commits](https://github.com/eclipse-jdt/eclipse.jdt.core/commits)\n\n---\nupdated-dependencies:\n- dependency-name: org.eclipse.jdt:ecj\n dependency-version: 3.46.0\n dependency-type: direct:development\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "e49e0528cf218ba8c31455758a8d04b150b55970", "tree": "02a60865e9559d5f84e12cffed3c236c56c6b2a3", "parents": [ "515591884514022ea5afcdcdbbca16cf680ee198" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jun 08 14:54:11 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 08 14:54:11 2026 -0400" }, "message": "build(deps): bump org.glassfish.jaxb:jaxb-bom from 4.0.8 to 4.0.9 (#2053)\n\nBumps org.glassfish.jaxb:jaxb-bom from 4.0.8 to 4.0.9.\n\n---\nupdated-dependencies:\n- dependency-name: org.glassfish.jaxb:jaxb-bom\n dependency-version: 4.0.9\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "515591884514022ea5afcdcdbbca16cf680ee198", "tree": "653a2cd1f15017a9428995988d1f2eb5a6c96649", "parents": [ "78cc238ab239db0e85830e42fca1dd4adbb2d059" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jun 08 14:53:28 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 08 14:53:28 2026 -0400" }, "message": "build(deps-dev): bump netty-version from 4.2.14.Final to 4.2.15.Final (#2069)\n\nBumps `netty-version` from 4.2.14.Final to 4.2.15.Final.\n\nUpdates `io.netty:netty-buffer` from 4.2.14.Final to 4.2.15.Final\n- [Release notes](https://github.com/netty/netty/releases)\n- [Commits](https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final)\n\nUpdates `io.netty:netty-common` from 4.2.14.Final to 4.2.15.Final\n- [Release notes](https://github.com/netty/netty/releases)\n- [Commits](https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final)\n\nUpdates `io.netty:netty-handler` from 4.2.14.Final to 4.2.15.Final\n- [Release notes](https://github.com/netty/netty/releases)\n- [Commits](https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final)\n\nUpdates `io.netty:netty-codec-http` from 4.2.14.Final to 4.2.15.Final\n- [Release notes](https://github.com/netty/netty/releases)\n- [Commits](https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final)\n\nUpdates `io.netty:netty-transport` from 4.2.14.Final to 4.2.15.Final\n- [Release notes](https://github.com/netty/netty/releases)\n- [Commits](https://github.com/netty/netty/compare/netty-4.2.14.Final...netty-4.2.15.Final)\n\n---\nupdated-dependencies:\n- dependency-name: io.netty:netty-buffer\n dependency-version: 4.2.15.Final\n dependency-type: direct:development\n update-type: version-update:semver-patch\n- dependency-name: io.netty:netty-common\n dependency-version: 4.2.15.Final\n dependency-type: direct:development\n update-type: version-update:semver-patch\n- dependency-name: io.netty:netty-handler\n dependency-version: 4.2.15.Final\n dependency-type: direct:development\n update-type: version-update:semver-patch\n- dependency-name: io.netty:netty-codec-http\n dependency-version: 4.2.15.Final\n dependency-type: direct:development\n update-type: version-update:semver-patch\n- dependency-name: io.netty:netty-transport\n dependency-version: 4.2.15.Final\n dependency-type: direct:development\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "78cc238ab239db0e85830e42fca1dd4adbb2d059", "tree": "497b773ed996b73e51b3296f62fa437d0d536629", "parents": [ "60af38679254749195e403df6bad7d7504f0d193" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jun 08 14:52:14 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 08 14:52:14 2026 -0400" }, "message": "build(deps): bump org.jvnet.jaxb:jaxb-plugins-runtime (#2084)\n\nBumps org.jvnet.jaxb:jaxb-plugins-runtime from 4.0.14 to 4.0.16.\n\n---\nupdated-dependencies:\n- dependency-name: org.jvnet.jaxb:jaxb-plugins-runtime\n dependency-version: 4.0.16\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "60af38679254749195e403df6bad7d7504f0d193", "tree": "e43201d617fbf9363310c8f258386756ecfbbfed", "parents": [ "085efea55270aca20f2158c0a91a0f4a9fe497f4" ], "author": { "name": "Christopher L. Shannon", "email": "cshannon@apache.org", "time": "Mon Jun 08 14:39:27 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 08 14:39:27 2026 -0400" }, "message": "Limit platform details to a reasonable length (#2088)\n\nNow that #2083 limits value sizes for properties inside of\nWireFormatInfo we should add a check to make sure platform details do\nnot go past that limit. Limit has been set to 512 bytes as that should\nbe more than enough as the details are usually less than half that.\nThis is not turned of by default but if someone is using it this will\nprevent potential future problems for too large a value." }, { "commit": "085efea55270aca20f2158c0a91a0f4a9fe497f4", "tree": "4fcc7adbc81c8bc0cef32186694992a552341299", "parents": [ "ea5a33ce87a203e0c8335f46f976e0a29c90f18a" ], "author": { "name": "JB Onofré", "email": "jbonofre@apache.org", "time": "Mon Jun 08 17:50:52 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 08 11:50:52 2026 -0400" }, "message": "Restrict full web console URI to admins role (#2074)\n\nChange the admin security constraint mapping from *.action to /admin/*\nso the entire web console (including read-only pages) requires the\nadmins role, not just action endpoints. Add comments to each constraint\nmapping explaining its scope, and remove duplicate Referrer-Policy and\nPermissions-Policy rewrite rules left over from earlier edits." }, { "commit": "ea5a33ce87a203e0c8335f46f976e0a29c90f18a", "tree": "62e5ecc5625ee5a2004c6c863b289aee943c20bf", "parents": [ "80562ea8d327b7f538de1ff7672f158fe2abc4c1" ], "author": { "name": "Christopher L. Shannon", "email": "cshannon@apache.org", "time": "Mon Jun 08 11:50:26 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 08 11:50:26 2026 -0400" }, "message": "Adding missing jsp escapes (#2089)" }, { "commit": "80562ea8d327b7f538de1ff7672f158fe2abc4c1", "tree": "1bab917967717aaf7c934d0539459e2e08e4d7ea", "parents": [ "6fc46e520bac7d9763ba5762cc2de603f19ed517" ], "author": { "name": "Christopher L. Shannon", "email": "cshannon@apache.org", "time": "Mon Jun 08 09:58:09 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 08 09:58:09 2026 -0400" }, "message": "Ensure at most one BrokerInfo command is received (#2083)\n\nThere should only ever be at most one BrokerInfo command received on a\nconnection so we should throw an exception and close the connection if a\nsecond is receveived as that is a protocol error." }, { "commit": "6fc46e520bac7d9763ba5762cc2de603f19ed517", "tree": "bd29571795fd6fa0659d58a99036be5f51d9f389", "parents": [ "dfa00d04d4aae678e0eca7e43d4ebd9dea512696" ], "author": { "name": "Christopher L. Shannon", "email": "cshannon@apache.org", "time": "Fri Jun 05 18:41:51 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jun 05 18:41:51 2026 -0400" }, "message": "Add validation for WireFormatInfo (#2080)\n\nThe max number of properties in the map for the WireFormatInfo\ncommand was lowered to 64 and a new max value buffer size was\nadded to validate buffers created during unmarshalling of the properties\nmap. The max buffer allowed has been set to 512 bytes.\n\nThis also adds a maxDepth check for handling nested collections inside\nthe map. It is set to 0 which will block list/map from being used as\na value for a property." }, { "commit": "dfa00d04d4aae678e0eca7e43d4ebd9dea512696", "tree": "344dee41f9e6fe5264ec1430f92c5eddc378731a", "parents": [ "3598fc562337c467b3f6b59364b29ac2d9bdb068" ], "author": { "name": "Christopher L. Shannon", "email": "cshannon@apache.org", "time": "Fri Jun 05 13:19:05 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jun 05 13:19:05 2026 -0400" }, "message": "Add https to BrokerView restricted list (#2073)\n\nThis adds https to the denied list eventhough there is currently no\nhttps discovery protocol. This is being done just for extra defense in\ndepth in case a protocol is added in the future. There\u0027s also already\nother checks in place (we deny remote protocols by default already, etc)\nso this is just precautionary." }, { "commit": "3598fc562337c467b3f6b59364b29ac2d9bdb068", "tree": "54b3cdfa0c73e4f7d73cf46f14e8c43141727a14", "parents": [ "f84eb3968a02bb5a9698da508d66c56c72ccdaaf" ], "author": { "name": "Christopher L. Shannon", "email": "cshannon@apache.org", "time": "Thu Jun 04 18:35:10 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jun 04 18:35:10 2026 -0400" }, "message": "Send advisory messages using Broker connection context (#2071)\n\nThis updates the AdvisoryBroker to always publish advisory messages\nthat were generated by other events to use the Broker\u0027s own\nConnectionContext. Before this change the AdvisoryBroker was\nusing the original ConnectionContext that used used for the action that\ntriggered the advisory. This doesn\u0027t make sense because its actually the\nbroker itself firing the advisory message and not the original\nconnection. It also meant requiring all users to be given access to\ncreate new advisory topics that could be created on demand.\n\nAfter this update, all users no longer need permission to create\nadvisory destinations which was required previously. Users only need\nread access to the temporary destination advisories for the AMQ client\nas the broker itself will now use its own context going forward to\ncreate all the destinations on demand and for publishing.\n\nThis update also consolidates the on consumer with no messages advisory\ninto the Advisory broker so it is all managed in one location." }, { "commit": "f84eb3968a02bb5a9698da508d66c56c72ccdaaf", "tree": "d041c7fd6a5318bd5a0f7016b6b81cd865a9dfd5", "parents": [ "1493db95b5918d4f4a305fd1df8155f57c38850b" ], "author": { "name": "Christopher L. Shannon", "email": "cshannon@apache.org", "time": "Tue Jun 02 08:28:33 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jun 02 08:28:33 2026 -0400" }, "message": "Improve Stomp protocol error messages (#2067)\n\nThis adds some more detail to the error messages in StompWireFormat to\nmake it easier to debug if using the wireformat and it is configured\nincorrectly." }, { "commit": "1493db95b5918d4f4a305fd1df8155f57c38850b", "tree": "7461a5150c940d66be6362b0a4b1e7866c4d1928", "parents": [ "ba73f37574dc6949ac8171cbc907979f1ebdb4e8" ], "author": { "name": "Christopher L. Shannon", "email": "cshannon@apache.org", "time": "Mon Jun 01 17:58:03 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 01 17:58:03 2026 -0400" }, "message": "Update Stomp transports with improved validation (#2064)\n\nThis update makes the following changes to improve validation for the\nStomp transport:\n\n* Verifies that the first frame seen by the server is either a CONNECT\n (or FRAME) frame.\n* Verifies that a duplicate CONNECT (or FRAME) frame is not received.\n* Adds validation to make sure a content-length header that is set is\n not negative.\n* Adds a new server mode (default true) to the Stomp wireformat to\n handle the validation differences between clients and servers. Client\n mode is only used for testing (currently). Also adds the option to\n configure using the StompWireFormatFactory in case there is a future use\n case.\n* Centralizes the state tracking for frame size validation and for the\n new validation checks inside StompWireFormat so that it is shared by\n NIO, non-NIO and WS transports.\n* Adds tests to verify everything for the NIO transports, non-NIO\n transprots and WS transports.\n\nIf any of these new validation checks throw a protocol error then it\nis marked as a fatal exception, an error is sent to the client and\nconnection closed. Both NIO and non-NIO will stop parsing the rest of\nthe frame on error, but only NIO transport errors will stop reading\nthe frame from the socket buffer because non NIO requires reading the\nentire frame into a buffer first to validate." }, { "commit": "ba73f37574dc6949ac8171cbc907979f1ebdb4e8", "tree": "8db7c51626366284f93aaa57febf4a2b26ad4254", "parents": [ "b6f9a14e1a6ad1b9a3f1c41eb5ea2db990eaba34" ], "author": { "name": "Christopher L. Shannon", "email": "cshannon@apache.org", "time": "Fri May 29 09:32:40 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri May 29 09:32:40 2026 -0400" }, "message": "Update docs and default configs for advisory topics (#2055)" }, { "commit": "b6f9a14e1a6ad1b9a3f1c41eb5ea2db990eaba34", "tree": "2a9901044da390ff6352dee894b9fea53a53a0c1", "parents": [ "c18999bcc23451ecb89cbef352f89eba64223a4c" ], "author": { "name": "Christopher L. Shannon", "email": "cshannon@apache.org", "time": "Wed May 27 01:42:11 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed May 27 07:42:11 2026 +0200" }, "message": "Ensure connection info is processed before durable sync (#2047)\n\nThis update waits until the ConnectionInfo command is processed by the\nentire broker chain without error before sending the BrokerSubscriptionInfo\ncommand for durable sync back to a remote broker requesting it" }, { "commit": "c18999bcc23451ecb89cbef352f89eba64223a4c", "tree": "7b5de33a18b23d3fdda7f100a14d6447b03418d3", "parents": [ "fb663d180730f3a8e4b2ae03d2b824878d0c10ae" ], "author": { "name": "JB Onofré", "email": "jbonofre@apache.org", "time": "Wed May 27 07:41:06 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed May 27 07:41:06 2026 +0200" }, "message": "Add dependabot on activemq-6.2.x and activemq-5.19.x branches (#2040)" }, { "commit": "fb663d180730f3a8e4b2ae03d2b824878d0c10ae", "tree": "3b89cb649154a23a18b87bfd22edaac6d09a1c25", "parents": [ "f7d4b47bff99fa9e0b10fe3d3c5702a5d1e3a6e3" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue May 26 16:29:08 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue May 26 16:29:08 2026 +0200" }, "message": "build(deps): bump camel-version from 4.18.1 to 4.20.0 (#1970)\n\nBumps `camel-version` from 4.18.1 to 4.20.0.\n\nUpdates `org.apache.camel:camel-bom` from 4.18.1 to 4.20.0\n\nUpdates `org.apache.camel:camel-core` from 4.18.1 to 4.20.0\n\nUpdates `org.apache.camel:camel-spring` from 4.18.1 to 4.20.0\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.camel:camel-bom\n dependency-version: 4.20.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n- dependency-name: org.apache.camel:camel-core\n dependency-version: 4.20.0\n dependency-type: direct:development\n update-type: version-update:semver-minor\n- dependency-name: org.apache.camel:camel-spring\n dependency-version: 4.20.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "f7d4b47bff99fa9e0b10fe3d3c5702a5d1e3a6e3", "tree": "608862bb978ca4957712c53f1a248255d5c6a9e4", "parents": [ "3879c27d681b51f434365924a07561b087f58a61" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue May 26 16:28:26 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue May 26 16:28:26 2026 +0200" }, "message": "build(deps): bump karaf-version from 4.4.10 to 4.4.11 (#1978)\n\nBumps `karaf-version` from 4.4.10 to 4.4.11.\n\nUpdates `org.apache.karaf.shell:org.apache.karaf.shell.console` from 4.4.10 to 4.4.11\n\nUpdates `org.apache.karaf:apache-karaf` from 4.4.10 to 4.4.11\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.karaf.shell:org.apache.karaf.shell.console\n dependency-version: 4.4.11\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.apache.karaf:apache-karaf\n dependency-version: 4.4.11\n dependency-type: direct:development\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "3879c27d681b51f434365924a07561b087f58a61", "tree": "71526d9d2e7a95108c34aa58a9babe9b7a9518cd", "parents": [ "db9dd1ba31e9971125e9ae293e74906a107c7a52" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue May 26 16:26:31 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue May 26 16:26:31 2026 +0200" }, "message": "build(deps): bump org.ow2.asm:asm from 9.10 to 9.10.1 (#2043)\n\nBumps org.ow2.asm:asm from 9.10 to 9.10.1.\n\n---\nupdated-dependencies:\n- dependency-name: org.ow2.asm:asm\n dependency-version: 9.10.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" } ], "next": "db9dd1ba31e9971125e9ae293e74906a107c7a52" }