Google Git
Sign in
apache/axis-axis2-java-core/HEAD
  1. ead8483 Bump the Swagger UI console to 5.32.13 by Robert Lazarski · 26 hours ago master
  2. 2f4e2d3 Cover IPv6 response endpoints and record how the body ceilings measure by Robert Lazarski · 5 days ago
  3. dccf153 Merge pull request #1269 from apache/dependabot/maven/production-dependencies-957f099693 by Christian Ortlepp · 10 days ago
  4. 8aa4db5 build(deps): bump the production-dependencies group with 4 updates by dependabot[bot] · 10 days ago
  5. 0e02005 Merge pull request #1268 from apache/cortlepp/group-dependabot-prs by Christian Ortlepp · 10 days ago
  6. bc1e4df dependabot: enable groups, change frequency to weekly by Christian Ortlepp · 10 days ago cortlepp/group-dependabot-prs
  7. 107b8d7 Merge pull request #1267 from apache/dependabot/maven/swagger.version-2.2.53 by Christian Ortlepp · 10 days ago
  8. c292ba8 build(deps): bump swagger.version from 2.2.52 to 2.2.53 by dependabot[bot] · 11 days ago
  9. 91b9bb8 Merge pull request #1264 from apache/dependabot/github_actions/actions/setup-java-5.7.0 by Christian Ortlepp · 10 days ago
  10. 83745f3 Merge pull request #1265 from apache/dependabot/maven/groovy.version-5.0.8 by Christian Ortlepp · 10 days ago
  11. f5431ea Merge pull request #1266 from apache/dependabot/maven/xmlunit.version-2.13.0 by Christian Ortlepp · 10 days ago
  12. 91bfe95 Opt the JAX-WS integration repositories into decoupled responses by Robert Lazarski · 10 days ago
  13. 1ba2b12 Opt the transport and sample repositories into decoupled responses by Robert Lazarski · 10 days ago
  14. c201358 Document the 2.0.2 hardening in the threat model by Robert Lazarski · 10 days ago
  15. 5ec4d15 Drop third-party references from test documentation by Robert Lazarski · 11 days ago
  16. 75191f7 Do not follow redirects when sending a decoupled response by Robert Lazarski · 11 days ago
  17. 1d325f4 Permit only https as a reply scheme unless told otherwise by Robert Lazarski · 11 days ago
  18. 52c7ba3 Also gate the response endpoint where the transport is acquired by Robert Lazarski · 11 days ago
  19. 1b6856b Refuse decoupled WS-Addressing responses by default by Robert Lazarski · 11 days ago
  20. a483b5c Publish a relative OpenAPI server URL instead of following the Host by Robert Lazarski · 12 days ago
  21. cbcccb3 Bound and shut down the response-endpoint resolver pool by Robert Lazarski · 12 days ago
  22. 0e256fd Bound the response-endpoint name lookup by Robert Lazarski · 12 days ago
  23. bb87bde Merge remote-tracking branch 'origin/master' by Robert Lazarski · 12 days ago
  24. 8c783ed Harden five anonymous-reachable surfaces from a private security report by Robert Lazarski · 12 days ago
  25. cfbaf6a Cover the attack path an inbound wsa:ReplyTo actually takes by Robert Lazarski · 12 days ago
  26. 9ad5b47 Only refuse never-legitimate reply destinations by default by Robert Lazarski · 12 days ago
  27. f98c5d4 Mirror the new tuning parameters into the webapp axis2.xml by Robert Lazarski · 12 days ago
  28. 1b5b2fc Do not restrict WS-Addressing reply endpoints to HTTP by Robert Lazarski · 12 days ago
  29. 2b98e5a Delete multipart temporary files instead of accumulating them by Robert Lazarski · 12 days ago
  30. 1671a68 Harden five anonymous-reachable surfaces reported privately on 2026-07-30 by Robert Lazarski · 12 days ago
  31. 3c8227f build(deps): bump xmlunit.version from 2.12.0 to 2.13.0 by dependabot[bot] · 13 days ago
  32. 84a5bad build(deps): bump groovy.version from 5.0.7 to 5.0.8 by dependabot[bot] · 13 days ago
  33. a9fef79 build(deps): bump actions/setup-java from 5.6.0 to 5.7.0 by dependabot[bot] · 13 days ago
  34. fd93644 Merge pull request #1258 from apache/dependabot/maven/org.apache.neethi-neethi-3.2.3 by Christian Ortlepp · 14 days ago
  35. ba64212 Merge pull request #1255 from apache/dependabot/github_actions/actions/checkout-7.0.1 by Christian Ortlepp · 14 days ago
  36. 5ade3e4 Merge pull request #1257 from apache/dependabot/maven/org.apache.maven.plugins-maven-jar-plugin-3.5.1 by Christian Ortlepp · 14 days ago
  37. 18a3185 Merge pull request #1259 from apache/dependabot/maven/org.codehaus.jettison-jettison-1.5.7 by Christian Ortlepp · 14 days ago
  38. 8d94048 Merge pull request #1260 from apache/dependabot/maven/activemq.version-6.3.0 by Christian Ortlepp · 14 days ago
  39. 7668b96 Merge pull request #1261 from apache/dependabot/maven/com.squareup.okio-okio-3.18.1 by Christian Ortlepp · 14 days ago
  40. 88ffba3 Merge pull request #1262 from apache/dependabot/maven/org.apache.felix-maven-bundle-plugin-6.1.0 by Christian Ortlepp · 14 days ago
  41. 2b6a83f Merge pull request #1263 from apache/dependabot/maven/org.apache.httpcomponents.client5-httpclient5-5.6.3 by Christian Ortlepp · 14 days ago
  42. dfcdf81 build(deps): bump org.apache.httpcomponents.client5:httpclient5 by dependabot[bot] · 2 weeks ago
  43. ed0de1e build(deps-dev): bump org.apache.felix:maven-bundle-plugin by dependabot[bot] · 2 weeks ago
  44. b02e5dc build(deps): bump com.squareup.okio:okio from 3.17.0 to 3.18.1 by dependabot[bot] · 3 weeks ago
  45. 1938e0d build(deps-dev): bump activemq.version from 6.2.7 to 6.3.0 by dependabot[bot] · 3 weeks ago
  46. 173bad1 Document CVE-2026-66713 for the removed clustering deserialization issue by Robert Lazarski · 3 weeks ago
  47. 74adf1e build(deps): bump org.codehaus.jettison:jettison from 1.5.6 to 1.5.7 by dependabot[bot] · 3 weeks ago
  48. 5fe80fb build(deps): bump org.apache.neethi:neethi from 3.2.2 to 3.2.3 by dependabot[bot] · 3 weeks ago
  49. 83ccb54 build(deps): bump org.apache.maven.plugins:maven-jar-plugin by dependabot[bot] · 4 weeks ago
  50. 54de37f Document HTTP/2 client production hardening; add the defenses to the sample by Robert Lazarski · 4 weeks ago
  51. c626471 build(deps): bump actions/checkout from 7.0.0 to 7.0.1 by dependabot[bot] · 4 weeks ago
  52. 76923dc Merge pull request #1254 from apache/dependabot/github_actions/actions/setup-java-5.6.0 by Christian Ortlepp · 4 weeks ago
  53. 088e3ff build(deps): bump actions/setup-java from 5.5.0 to 5.6.0 by dependabot[bot] · 4 weeks ago
  54. e532f86 Merge pull request #1253 from apache/dependabot/maven/com.icegreen-greenmail-2.1.11 by Christian Ortlepp · 4 weeks ago
  55. 2b0e17c build(deps-dev): bump com.icegreen:greenmail from 2.1.9 to 2.1.11 by dependabot[bot] · 5 weeks ago
  56. 93e8e93 Merge pull request #1250 from apache/dependabot/maven/org.junit.jupiter-junit-jupiter-6.1.2 by Christian Ortlepp · 5 weeks ago
  57. 7464e62 Merge pull request #1251 from apache/dependabot/maven/org.bouncycastle-bcpkix-jdk18on-1.85 by Christian Ortlepp · 5 weeks ago
  58. 4d36a91 build(deps): bump org.bouncycastle:bcpkix-jdk18on from 1.84 to 1.85 by dependabot[bot] · 5 weeks ago
  59. c754c31 build(deps): bump org.junit.jupiter:junit-jupiter from 6.1.1 to 6.1.2 by dependabot[bot] · 5 weeks ago
  60. ecc8c91 Merge pull request #1247 from apache/dependabot/github_actions/actions/setup-java-5.5.0 by Christian Ortlepp · 5 weeks ago
  61. dbd46cc Merge pull request #1248 from apache/dependabot/maven/jetty.version-12.1.11 by Christian Ortlepp · 5 weeks ago
  62. 7d341f9 Merge pull request #1249 from apache/dependabot/maven/com.fasterxml.jackson.core-jackson-databind-2.22.1 by Christian Ortlepp · 5 weeks ago
  63. f45e6a2 build(deps): bump com.fasterxml.jackson.core:jackson-databind by dependabot[bot] · 6 weeks ago
  64. cdfb027 build(deps): bump jetty.version from 12.1.10 to 12.1.11 by dependabot[bot] · 6 weeks ago
  65. 956108e build(deps): bump actions/setup-java from 5.4.0 to 5.5.0 by dependabot[bot] · 6 weeks ago
  66. 580ebc8 Merge pull request #1242 from rootvector2/swagger-ui-url-escape by Christian Ortlepp · 6 weeks ago
  67. 212440b make buildOpenApiUrl return a URI by Naveed Khan · 7 weeks ago
  68. 8468a1d Merge pull request #1238 from apache/dependabot/maven/activemq.version-6.2.7 by Christian Ortlepp · 6 weeks ago
  69. 7ed16db Merge pull request #1239 from apache/dependabot/maven/org.apache-apache-39 by Christian Ortlepp · 6 weeks ago
  70. 0be596e Merge pull request #1240 from apache/dependabot/maven/org.junit.jupiter-junit-jupiter-6.1.1 by Christian Ortlepp · 6 weeks ago
  71. 858eb37 Merge pull request #1241 from apache/dependabot/maven/org.apache.httpcomponents.client5-httpclient5-5.6.2 by Christian Ortlepp · 6 weeks ago
  72. 6c977b8 Merge pull request #1243 from apache/dependabot/maven/org.apache.logging.log4j-log4j-bom-2.26.1 by Christian Ortlepp · 6 weeks ago
  73. 54fd2c1 Merge pull request #1244 from apache/dependabot/maven/org.codehaus.gmavenplus-gmavenplus-plugin-5.1.0 by Christian Ortlepp · 6 weeks ago
  74. 7a4ee93 Merge pull request #1245 from apache/dependabot/maven/net.bytebuddy-byte-buddy-1.18.11 by Christian Ortlepp · 6 weeks ago
  75. d8c9652 Merge pull request #1246 from apache/dependabot/maven/groovy.version-5.0.7 by Christian Ortlepp · 6 weeks ago
  76. 00d1912 build(deps): bump groovy.version from 5.0.6 to 5.0.7 by dependabot[bot] · 6 weeks ago
  77. 2b2888b Merge pull request #1221 from digi-scrypt/saaj-soappart-xxe by robertlazarski · 6 weeks ago
  78. d57f760 build(deps): bump net.bytebuddy:byte-buddy from 1.18.10 to 1.18.11 by dependabot[bot] · 6 weeks ago
  79. f891149 build(deps): bump org.codehaus.gmavenplus:gmavenplus-plugin by dependabot[bot] · 6 weeks ago
  80. 9f27fee build(deps): bump org.apache.logging.log4j:log4j-bom by dependabot[bot] · 7 weeks ago
  81. 2963c23 ci: harden Remove Snapshots step against silent failure by Robert Lazarski · 7 weeks ago
  82. f15d3c3 ci: least-privilege permissions + SHA-pin actions by Robert Lazarski · 7 weeks ago
  83. c2f5d68 Merge pull request #1227 from rootvector2/addaswebresources-zip-slip by robertlazarski · 7 weeks ago
  84. f1ad360 build(deps): bump org.apache.httpcomponents.client5:httpclient5 by dependabot[bot] · 7 weeks ago
  85. 0aca798 build(deps): bump org.junit.jupiter:junit-jupiter from 6.1.0 to 6.1.1 by dependabot[bot] · 7 weeks ago
  86. b5ce339 build(deps): bump org.apache:apache from 38 to 39 by dependabot[bot] · 7 weeks ago
  87. eaf2f4e build(deps-dev): bump activemq.version from 6.2.6 to 6.2.7 by dependabot[bot] · 7 weeks ago
  88. aaf1489 Merge pull request #1237 from apache/dependabot/maven/httpcore.version-5.4.3 by Christian Ortlepp · 7 weeks ago
  89. df3d446 Merge pull request #1232 from apache/dependabot/maven/commons-logging-commons-logging-1.4.0 by Christian Ortlepp · 7 weeks ago
  90. 5f8d49c Merge pull request #1233 from apache/dependabot/maven/org.codehaus.jettison-jettison-1.5.6 by Christian Ortlepp · 7 weeks ago
  91. 8421c14 Merge pull request #1234 from apache/dependabot/github_actions/actions/checkout-7 by Christian Ortlepp · 7 weeks ago
  92. b32ef44 Merge pull request #1235 from apache/dependabot/maven/swagger.version-2.2.52 by Christian Ortlepp · 7 weeks ago
  93. 9205f23 Merge pull request #1236 from apache/dependabot/github_actions/actions/cache-6 by Christian Ortlepp · 7 weeks ago
  94. 33a3801 build(deps): bump httpcore.version from 5.4.2 to 5.4.3 by dependabot[bot] · 8 weeks ago
  95. 824dbe5 build(deps): bump actions/cache from 5 to 6 by dependabot[bot] · 8 weeks ago
  96. ec9ce01 build(deps): bump swagger.version from 2.2.51 to 2.2.52 by dependabot[bot] · 8 weeks ago
  97. e32a6fe build(deps): bump actions/checkout from 6 to 7 by dependabot[bot] · 8 weeks ago
  98. b1b7a66 build(deps): bump org.codehaus.jettison:jettison from 1.5.5 to 1.5.6 by dependabot[bot] · 9 weeks ago
  99. fa8f5ee build(deps): bump commons-logging:commons-logging from 1.3.6 to 1.4.0 by dependabot[bot] · 9 weeks ago
  100. 385e846 Merge pull request #1231 from apache/dependabot/maven/com.icegreen-greenmail-2.1.9 by Christian Ortlepp · 9 weeks ago