)]}' { "log": [ { "commit": "e36c741f12a7f3ea60cfab2bdd08d0f1659a5378", "tree": "046bab559a14ff9b5df9301710f5fba78b23ed67", "parents": [ "3c17268760ca9f70f6484b11641f56828279be48" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Oct 20 20:11:47 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Oct 20 20:11:47 2026 -0400" }, "message": "Bump github/codeql-action from 4.38.3 to 4.39.0\n" }, { "commit": "3c17268760ca9f70f6484b11641f56828279be48", "tree": "8f50744d5da99bb7f97642547a8056a5b29b7fc6", "parents": [ "b05195cc683c2ab2bf8462b6e1245b1db0aa6ce3" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sun Oct 18 09:06:09 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sun Oct 18 09:06:09 2026 -0400" }, "message": "Bump org.jetbrains.kotlin:kotlin-stdlib from 2.4.0 to 2.4.21 (#532)" }, { "commit": "b05195cc683c2ab2bf8462b6e1245b1db0aa6ce3", "tree": "7c962f684fa35bb3e4c990e6470f1bb890e4280d", "parents": [ "47e3654815b1f26f9f89f1617cf1d6572031ab83" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Sun Oct 18 09:04:58 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sun Oct 18 09:04:58 2026 -0400" }, "message": "Bump org.jetbrains.kotlin:kotlin-stdlib from 2.4.0 to 2.4.21 (#532)\n\nBumps [org.jetbrains.kotlin:kotlin-stdlib](https://github.com/JetBrains/kotlin) from 2.4.0 to 2.4.21.\n- [Release notes](https://github.com/JetBrains/kotlin/releases)\n- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)\n- [Commits](https://github.com/JetBrains/kotlin/compare/v2.4.0...v2.4.21)\n\n---\nupdated-dependencies:\n- dependency-name: org.jetbrains.kotlin:kotlin-stdlib\n dependency-version: 2.4.20\n dependency-type: direct:development\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "47e3654815b1f26f9f89f1617cf1d6572031ab83", "tree": "ce7ad15213ebf17c1ab332b47033ce314d71fc91", "parents": [ "32214443f0a890bde33b0c7886637b48db197fcc" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sun Oct 18 09:04:28 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sun Oct 18 09:04:28 2026 -0400" }, "message": "Update ECJ versions and generate the SWAP fixture with BCEL (#537)\n\nUpdate changes.xml with detailed entries.\n" }, { "commit": "32214443f0a890bde33b0c7886637b48db197fcc", "tree": "4eb27cdd92102dfc6b74913de5ebdac00dbca622", "parents": [ "a0e0d06e660394ed2002c8cbe60e1093d2638f6e" ], "author": { "name": "Gary Gregory", "email": "garydgregory@users.noreply.github.com", "time": "Sun Oct 18 08:54:58 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sun Oct 18 08:54:58 2026 -0400" }, "message": "```text (#537)\n\nUpdate ECJ versions and generate the SWAP fixture with BCEL\n\nDefault ecj.version to 3.46.100. Add property-only Maven profiles\nselecting 3.33.0 on Java 11 and below and 3.26.0 on Java 8 and below,\nwith the Java 8 profile taking precedence when both activate.\n\nReplace Java 1.4 compilation in VerifierMainTest with BCEL-generated\nbytecode containing a SWAP instruction. Current ECJ releases reject\nthe old source level, leaving the expected class file missing.\nRemove the unused SWAP.java fixture.\n\nRun the verifier subprocess with the current Java runtime and prepend\nthe temporary fixture directory to its classpath. Retain assertions\nfor successful verification and exactly one SWAP instruction, and\ndispose of instruction lists after use." }, { "commit": "a0e0d06e660394ed2002c8cbe60e1093d2638f6e", "tree": "5e6c82f20be124ec37190838e07222dc7cc589dc", "parents": [ "7f7b022017bc2ae13410ef3d146e59c543b3b168" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sun Oct 18 08:15:35 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sun Oct 18 08:15:35 2026 -0400" }, "message": "Fix Checkstyle\n" }, { "commit": "7f7b022017bc2ae13410ef3d146e59c543b3b168", "tree": "a296c246a2e9f8a81b11b32c8cd7552a932c2997", "parents": [ "7fc6cd4fa73e6b1da0da1dfb163cc2cd988c873f" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sun Oct 18 08:02:55 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sun Oct 18 08:02:55 2026 -0400" }, "message": "Sort members\n" }, { "commit": "7fc6cd4fa73e6b1da0da1dfb163cc2cd988c873f", "tree": "542d154405c3ad90725b98617e524d5a17cb951c", "parents": [ "781fab3247c5908c82ad3ed11b7c5d35fb6c8226" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sun Oct 18 08:02:42 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sun Oct 18 08:02:42 2026 -0400" }, "message": "[BCEL-379] Preserve boolean constants in BCELifier round trips\n\nEmit boolean literals so generated creators call\nFieldGen.setInitValue(boolean)\nand avoid the type mismatch caused by the int overload.\n\nImprove on PR #536 by preserving explicit false ConstantValue\nattributes,\nwhich the PR loses during reconstruction. This keeps regenerated fields\nusable\nas compile-time constants. Also allow false to replace a previous true\nvalue.\n\nUse the low bit for noncanonical integer encodings to match HotSpot\nbehavior.\nDocument the fixture\u0027s indirect use and generated creator workflow.\n\nExtend tests to cover initializer replacement and cancellation,\nnoncanonical\nencodings, and preservation of boolean ConstantValue attributes. The\nPR\u0027s\njavap comparison alone does not detect missing constant attributes.\n" }, { "commit": "781fab3247c5908c82ad3ed11b7c5d35fb6c8226", "tree": "6a53d8f694f60290b9861b1c533e83344ea2cbb0", "parents": [ "8bac455ddc6557a64b9f335e4eb1ecfc5c89cd4a" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Oct 17 15:53:16 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Oct 17 15:53:16 2026 -0400" }, "message": "Bump actions/setup-java from 6.0.1 to 6.1.0\n" }, { "commit": "8bac455ddc6557a64b9f335e4eb1ecfc5c89cd4a", "tree": "714590b097b525642b4abb7b51260d72da09e803", "parents": [ "e7e25ef5b3b95317d9a0227c973511c0745af7b2" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Oct 17 12:46:16 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Oct 17 12:46:16 2026 -0400" }, "message": "Bump org.apache.commons:commons-parent from 105 to 106\n" }, { "commit": "e7e25ef5b3b95317d9a0227c973511c0745af7b2", "tree": "a6997a13171cb509b2bd40ca67544d2644e85be9", "parents": [ "29a9fb136869f4d95ea8f31bbd11449f64a8a86f" ], "author": { "name": "Gary Gregory", "email": "garydgregory@users.noreply.github.com", "time": "Sat Oct 17 12:45:41 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat Oct 17 12:45:41 2026 -0400" }, "message": "Bump Apache Commons Parent from 105 to 106 (#535)" }, { "commit": "29a9fb136869f4d95ea8f31bbd11449f64a8a86f", "tree": "5c8b47977fc61bf4db6e417c47b3b2067e1b86ca", "parents": [ "f75588bcc5acfebb1877b7145e2cceca8608f625" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Oct 15 09:19:32 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Oct 15 09:19:32 2026 -0400" }, "message": "Bump github/codeql-action/analyze from 4.37.5 to 4.38.3\n" }, { "commit": "f75588bcc5acfebb1877b7145e2cceca8608f625", "tree": "9957bb28c80416ddcf05cd2fdaeae2a65761d4f6", "parents": [ "27780460a2af14f30aeafeca545f49c470415c6f" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Oct 15 08:29:02 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Oct 15 08:29:02 2026 -0400" }, "message": "Revert \"Bump github/codeql-action/analyze from 4.37.5 to 4.38.3\"\n\nThis reverts commit 27780460a2af14f30aeafeca545f49c470415c6f.\n" }, { "commit": "27780460a2af14f30aeafeca545f49c470415c6f", "tree": "075da21bf897e7152329d4a1e623d21d7a7f4d6a", "parents": [ "c776628a595d14c16d6cf358cd353e975e1771fa" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Oct 15 06:32:36 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Oct 15 06:32:36 2026 -0400" }, "message": "Bump github/codeql-action/analyze from 4.37.5 to 4.38.3\n" }, { "commit": "c776628a595d14c16d6cf358cd353e975e1771fa", "tree": "9957bb28c80416ddcf05cd2fdaeae2a65761d4f6", "parents": [ "f99ec3ee988ce2485018e2a54debab7a6395059b" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Oct 15 06:24:12 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Oct 15 06:24:12 2026 -0400" }, "message": "Bump actions/upload-artifact from 7.0.1 to 7.0.2\n" }, { "commit": "f99ec3ee988ce2485018e2a54debab7a6395059b", "tree": "3e723a7a37f8b19eb51c4e7bed06f3f62f6df4ba", "parents": [ "273600e688e8abed786fea80d27be207c31be54e" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Oct 10 09:20:04 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Oct 10 09:20:04 2026 -0400" }, "message": "Fix typo in changes.xml\n" }, { "commit": "273600e688e8abed786fea80d27be207c31be54e", "tree": "46df5b94fce76f70a26b3c0661f08822902cdec4", "parents": [ "f44a01c8d13d16b2952def0d1fbc4d9e63ac43fe" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Oct 10 09:17:30 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Oct 10 09:17:30 2026 -0400" }, "message": "Add entries for CVEs fixed in 6.13.0\n\n- CVE-2026-105111\n- CVE-2026-94114\n" }, { "commit": "f44a01c8d13d16b2952def0d1fbc4d9e63ac43fe", "tree": "e4e5d6530c6ee3e1fbf4334b074d2bc8d6363da9", "parents": [ "9145c750dbc07d33ead421e557bd05b90762d682" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Oct 10 09:08:51 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Oct 10 09:08:51 2026 -0400" }, "message": "Convert security page to Markdown\n" }, { "commit": "9145c750dbc07d33ead421e557bd05b90762d682", "tree": "214de19a77736b4f61505c0262d7ee9b0cb1c6a3", "parents": [ "119d0b1f1f7daa44b8821f71cb26bb8caeadd39a" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Oct 10 08:00:43 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Oct 10 08:00:43 2026 -0400" }, "message": "Add github.autolink_jira\n" }, { "commit": "119d0b1f1f7daa44b8821f71cb26bb8caeadd39a", "tree": "372d13f5847a8018f3c71d6ebc97d108db44b592", "parents": [ "d912a392fcbf869d968a06b4d73c42f96cdf32aa" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Oct 03 09:11:30 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Oct 03 09:11:30 2026 -0400" }, "message": "Update GH CI from Java 26 to 27\n\nUpdate Java 27-ea to 28-ea.\n" }, { "commit": "d912a392fcbf869d968a06b4d73c42f96cdf32aa", "tree": "d36bdc2719b3194d0d0aa17d09c08ef40f46fa81", "parents": [ "a89bd87f5b1c926719c9ef239663bb07682dff3e" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Oct 03 09:10:34 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Oct 03 09:10:34 2026 -0400" }, "message": "Fix constant pool module access test on java 27 (#534)" }, { "commit": "a89bd87f5b1c926719c9ef239663bb07682dff3e", "tree": "c1f9b972a52f4d88d0e0c60bb041e61119dd22fc", "parents": [ "1c57b38eaba33a568cfcea1aefdbfdbf00aa8a66" ], "author": { "name": "Gary Gregory", "email": "garydgregory@users.noreply.github.com", "time": "Sat Oct 03 09:09:45 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat Oct 03 09:09:45 2026 -0400" }, "message": "Fix constant pool module access test on java 27 (#534)\n\n* Fix ConstantPoolModuleAccessTest on Java 27\n\n* Make ConstantPoolModuleAccessTest more reliable\n\nCompare module service uses without depending on order.\n\nUse TreeSet comparisons for expected service names and assert the array\nlength separately to detect duplicates." }, { "commit": "1c57b38eaba33a568cfcea1aefdbfdbf00aa8a66", "tree": "d00e9f761461c532d88ce21826a0c2c86c6855c7", "parents": [ "b222cb3c9a5fbca949e323a9927fcfff84f80286" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Oct 02 09:03:10 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Oct 02 09:03:10 2026 -0400" }, "message": "Bump org.apache.commons:commons-lang3 from 3.20.0 to 3.21.0 #531\n" }, { "commit": "b222cb3c9a5fbca949e323a9927fcfff84f80286", "tree": "4b2af854a6a34cff724b1c029c17cf06c0d7b29b", "parents": [ "3d91792575685aacbba6ab9cdd2ec0fc632e7ebb" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Fri Oct 02 09:02:11 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Oct 02 09:02:11 2026 -0400" }, "message": "Bump org.apache.commons:commons-lang3 from 3.20.0 to 3.21.0 (#531)\n\nBumps org.apache.commons:commons-lang3 from 3.20.0 to 3.21.0.\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.commons:commons-lang3\n dependency-version: 3.21.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "3d91792575685aacbba6ab9cdd2ec0fc632e7ebb", "tree": "6d658407f520e91977668df8846b17ebd462a3e2", "parents": [ "a12dee4aa1e891b325dff954562d442fa46e9dc9" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Sep 26 11:10:08 2026 +0000" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Sep 26 11:10:08 2026 +0000" }, "message": "Remove obsolete file src/examples/Mini/MiniParser$JJCalls\n" }, { "commit": "a12dee4aa1e891b325dff954562d442fa46e9dc9", "tree": "b517e5f5914ba1527ceff48830b4763f2bba6ff4", "parents": [ "04e39f7d8fc93ef49ac73d92663b7025bb5aa0e6" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Sep 26 11:03:40 2026 +0000" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Sep 26 11:03:40 2026 +0000" }, "message": "Fix action types.\n" }, { "commit": "04e39f7d8fc93ef49ac73d92663b7025bb5aa0e6", "tree": "658a67ea74f2e1821c6aab70be6ca3421e30f89e", "parents": [ "e114e702e3eb44ae922583820a05efa81ce91d8a" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 25 22:48:53 2026 +0000" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 25 22:48:53 2026 +0000" }, "message": "[BCEL-280] MethodGen.setMaxLocals() should account for\nLocalVariableTable entries (#529)\n" }, { "commit": "e114e702e3eb44ae922583820a05efa81ce91d8a", "tree": "37309d9590382b7e73ff1e153680fc0997216451", "parents": [ "103a7519efc70cfe34717a016afaf8703d10d8e4" ], "author": { "name": "akashchamp", "email": "116457960+akashchamp@users.noreply.github.com", "time": "Sat Sep 26 04:15:58 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Sep 25 18:45:58 2026 -0400" }, "message": "[BCEL-280] MethodGen.setMaxLocals() should account for LocalVariableTable entries (#529)\n\nsetMaxLocals() only scanned the InstructionList for\nLocalVariableInstruction/RET/IINC operands, ignoring any\nLocalVariableGen entries registered via addLocalVariable(). Some\ncompilers (e.g. kotlinc) emit LocalVariableTable entries for local\nslots that no instruction in the method body ever touches, such as\nunused loop variables. When code later calls setMaxLocals() (for\nexample after instrumentation), it silently shrinks maxLocals below\nwhat the local variable table requires, producing a class file that\nfails verification with \"Invalid index ... in LocalVariableTable\".\n\nsetMaxLocals() now also considers each registered LocalVariableGen\u0027s\nindex + type size, mirroring the bound addLocalVariable() already\nenforces when a variable is added directly.\n\nAdded MethodGenTest.testSetMaxLocalsAccountsForLocalVariableTable(),\nwhich fails on unpatched code (maxLocals drops from 7 to 1) and\npasses with the fix.\n\nGenerated-by: Claude (claude-sonnet-5)\n\nCo-authored-by: Claude Sonnet 5 \u003cnoreply@anthropic.com\u003e" }, { "commit": "103a7519efc70cfe34717a016afaf8703d10d8e4", "tree": "4dc74cf32117ade12ac01a59054a24ed6911d09d", "parents": [ "dcd1eba2e274f5ca2954abf9b29f374289b26016" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Sep 24 12:56:45 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Sep 24 12:56:45 2026 -0400" }, "message": "Bump github/codeql-action from 4.38.1 to 4.38.2\n" }, { "commit": "dcd1eba2e274f5ca2954abf9b29f374289b26016", "tree": "d4e63e14211f8fe73e3703757ef668c08e20760f", "parents": [ "6b4ad754502a394571c9ddee56a2fb5da4de0dad" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Sep 22 07:15:52 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Sep 22 07:15:52 2026 -0400" }, "message": "Protect Main Branches\n" }, { "commit": "6b4ad754502a394571c9ddee56a2fb5da4de0dad", "tree": "869a7a0fe790b0c4e8a42a20f375121a05898f98", "parents": [ "b5c0e99aaddcae05d729e9068222a710ffe5547b" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Mon Sep 21 14:37:00 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Mon Sep 21 14:37:00 2026 -0400" }, "message": "Use modern Mockito on Java 11+ (#528)" }, { "commit": "b5c0e99aaddcae05d729e9068222a710ffe5547b", "tree": "10893347fcc15a8fb3cd2c20689a81d44e29b6ff", "parents": [ "8caa2bf908d7f0b745c059e90f8149e29f29aa40" ], "author": { "name": "Gary Gregory", "email": "garydgregory@users.noreply.github.com", "time": "Mon Sep 21 14:36:05 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Sep 21 14:36:05 2026 -0400" }, "message": "Use modern Mockito on Java 11+ (#528)\n\nPrepares for the next Commons Lang." }, { "commit": "8caa2bf908d7f0b745c059e90f8149e29f29aa40", "tree": "7d4f56866b2f447cc303c132ba420dd9193b2bb7", "parents": [ "4ea6c51f611801b2a7ddff230b77f0b9817a3f9b" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Mon Sep 21 13:51:11 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Mon Sep 21 13:51:11 2026 -0400" }, "message": "Bump org.apache.commons:commons-parent from 104 to 105\n" }, { "commit": "4ea6c51f611801b2a7ddff230b77f0b9817a3f9b", "tree": "877a5bfe48e5fac2ea8b20cfde107fa58ab99425", "parents": [ "a18185cca45da142c6e9074f9dce0c3f5f16264a" ], "author": { "name": "Gary Gregory", "email": "garydgregory@users.noreply.github.com", "time": "Mon Sep 21 13:41:03 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Sep 21 13:41:03 2026 -0400" }, "message": "Bump org.apache.commons:commons-parent from 104 to 105. (#527)" }, { "commit": "a18185cca45da142c6e9074f9dce0c3f5f16264a", "tree": "9230a68d7bef556e77d906561d2a42db538e6b58", "parents": [ "471cc5a6f93da0238193955d65b067e1efd3d3d0" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Sep 19 11:15:24 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Sep 19 11:15:24 2026 -0400" }, "message": "Bump github/codeql-action/* from 4.37.9 to 4.38.1\n" }, { "commit": "471cc5a6f93da0238193955d65b067e1efd3d3d0", "tree": "139259f5c45dfb9624c85b34f67ea4f540043864", "parents": [ "f4587a662ceb8215a59a6df7f47b9bdd7950abaf" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Sep 19 11:06:49 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Sep 19 11:06:49 2026 -0400" }, "message": "Bump actions/setup-java from 6.0.0 to 6.0.1\n" }, { "commit": "f4587a662ceb8215a59a6df7f47b9bdd7950abaf", "tree": "874fb2983971c41e2a8638ad01c20e0c6fa8fdf7", "parents": [ "11550c2b534c1ee60bbb3749721853e9091a5151" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Sep 17 15:15:10 2026 -0700" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Sep 17 15:15:10 2026 -0700" }, "message": "Javadoc and comments\n\n- Grammar\n- Spelling\n- Fix text documentation\n- Add missing descriptions\n- Normalize wording\n- Typos\n" }, { "commit": "11550c2b534c1ee60bbb3749721853e9091a5151", "tree": "5979778c09d0adbb4457000910f5659fdd13378f", "parents": [ "e2fb2ab23ebf182577754ec2a4aff8d2c2dd8528" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Sep 17 09:14:26 2026 -0700" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Sep 17 09:14:26 2026 -0700" }, "message": "Bump next version to feature level." }, { "commit": "e2fb2ab23ebf182577754ec2a4aff8d2c2dd8528", "tree": "7c5b5c2d2dfea018d546625ec35dff627be6a64b", "parents": [ "f14e6c2477f4d3580252d36f831c9b933316a696" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Sep 17 09:12:26 2026 -0700" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Sep 17 09:12:26 2026 -0700" }, "message": "Add and use ClassFormatException.ClassFormatException(String,\nObject...).\n" }, { "commit": "f14e6c2477f4d3580252d36f831c9b933316a696", "tree": "3b87f092c73cb0fdf7820dfa2cbb5a8f20d75aab", "parents": [ "87b913ae1d95a325361818324847ce7ad050d7ae" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Sep 10 06:08:19 2026 +0000" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Sep 10 06:08:19 2026 +0000" }, "message": "Updates for the next release\n" }, { "commit": "87b913ae1d95a325361818324847ce7ad050d7ae", "tree": "e6a3fa8c6af735b96e796156d5bbc8aff4a1865d", "parents": [ "f346ced7e3291be26bcc1e7c68c970d1b686483f" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Sep 10 05:22:55 2026 +0000" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Sep 10 05:22:55 2026 +0000" }, "message": "Updates for the next release\n" }, { "commit": "f346ced7e3291be26bcc1e7c68c970d1b686483f", "tree": "4050c27e528997f54d4bdfdd415803f38668b513", "parents": [ "be4bc45e5ee623b4d074a0b0888da828822dd9b3" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Sep 10 05:21:17 2026 +0000" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Sep 10 05:21:17 2026 +0000" }, "message": "Bump to next development version\n" }, { "commit": "be4bc45e5ee623b4d074a0b0888da828822dd9b3", "tree": "0e5daf71670b4312be37317c7cb4acd0b650d0cc", "parents": [ "13fe5d9142a43250f33e7f636cb44e3e18f974e6" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sun Sep 06 18:29:28 2026 +0000" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sun Sep 06 18:29:28 2026 +0000" }, "message": "Prepare for the release candidate 6.13.0 RC1\n" }, { "commit": "13fe5d9142a43250f33e7f636cb44e3e18f974e6", "tree": "f9955bd80591337c83cf4cdf8c3c568607aacf76", "parents": [ "a6d4655d0e39a2aff7e7bb78eb5161e53696911e" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sun Sep 06 18:25:51 2026 +0000" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sun Sep 06 18:25:51 2026 +0000" }, "message": "Prepare for the release candidate\n" }, { "commit": "a6d4655d0e39a2aff7e7bb78eb5161e53696911e", "tree": "f34bb77fb1c42470676173b217d6b2cc4d3ea36b", "parents": [ "279ec2300c1d9757061454c200d5e19090bee39e" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Sep 05 07:11:36 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Sep 05 07:11:36 2026 -0400" }, "message": "Javadoc\n" }, { "commit": "279ec2300c1d9757061454c200d5e19090bee39e", "tree": "c1d59294667612531c057cdf9ad225db641c0c94", "parents": [ "bdaca417da39c49ae98c85c6a0a46831fd24aa24" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 20:19:11 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 20:19:11 2026 -0400" }, "message": "Sort members\n" }, { "commit": "bdaca417da39c49ae98c85c6a0a46831fd24aa24", "tree": "8d249afafe50b143909ad47eff9184b9451c23ee", "parents": [ "972dfb6c4706ff4f102657a261d77af019c63f96" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 19:02:02 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 19:02:02 2026 -0400" }, "message": "Utility.JavaReader escape decoding: OOB table index, bad-hex crash,\nsilent non-canonical aliasing (f026).\n" }, { "commit": "972dfb6c4706ff4f102657a261d77af019c63f96", "tree": "246c3244eb034e06b552bca604c1ad76ec594584", "parents": [ "4a4b7577a1bc9f871f2c31ea8113656264127165" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 18:35:49 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 18:35:49 2026 -0400" }, "message": "Static WIDE ThreadLocal survives exceptions, corrupting the next class\u0027s\ndisassembly on the same thread (f025).\n" }, { "commit": "4a4b7577a1bc9f871f2c31ea8113656264127165", "tree": "37eefc30ff5907e9aa8c9625065bbd4865505fee", "parents": [ "0d86e866ff0bffa701ff1dae54f0fdd014abcc2c" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 18:32:08 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 18:32:08 2026 -0400" }, "message": "org.apache.bcel.verifier.VerifierFactory.DEFAULT_MAX_CACHE_SIZE doesn\u0027t\nneed to be public.\n" }, { "commit": "0d86e866ff0bffa701ff1dae54f0fdd014abcc2c", "tree": "61979933d82790522a9ba7f95169d921fa93ea8c", "parents": [ "b0c3e6a11bc32be316eadcd16a24c3811259e78b" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 18:30:35 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 18:30:35 2026 -0400" }, "message": "Verifier cache grows unboundedly with attacker-chosen class names\n(f024).\n" }, { "commit": "b0c3e6a11bc32be316eadcd16a24c3811259e78b", "tree": "c0289ad969f6a5a75961854bc32ff971e0a70d89", "parents": [ "7fe29408bd6e04705f02edbec1ffbd6bd50d938f" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 18:23:28 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 18:23:28 2026 -0400" }, "message": "Verifier pass 3a delayed checks are quadratic in attribute and code size\n(f023)." }, { "commit": "7fe29408bd6e04705f02edbec1ffbd6bd50d938f", "tree": "b1a4a890f4820dd6771a098b6e9ebd985c744226", "parents": [ "53c52fa4220049325f4d619d1d4373e33106b1cc" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 18:19:54 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 18:19:54 2026 -0400" }, "message": "BCELifier interpolates attacker class/package names into generated Java\nsource unescaped (f022).\n" }, { "commit": "53c52fa4220049325f4d619d1d4373e33106b1cc", "tree": "08e1ab5e88403b3d71a7cedfd0604ed5de241158", "parents": [ "ae0a0c5fedd307ada0eadc87cc22085f3c291d9b" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 18:16:39 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 18:16:39 2026 -0400" }, "message": "Utility.decode fixed 3x buffer breaks the encode/decode round trip and\nthrows unchecked AIOOBE (f021)." }, { "commit": "ae0a0c5fedd307ada0eadc87cc22085f3c291d9b", "tree": "c04ac707efc442a2f13c537015ca00ae805e3072", "parents": [ "2c8e5fa5a565da8cb8bdbbb9dd4d24437974fe7e" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 17:56:41 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 17:56:41 2026 -0400" }, "message": "Signature.matchGJIdent recurses unboundedly on nested generic signatures\n(Signature.translate) (f020)." }, { "commit": "2c8e5fa5a565da8cb8bdbbb9dd4d24437974fe7e", "tree": "4d4d8a179a7e6454d3b3a9e5230e6024fb6c137e", "parents": [ "135b39283751a542e391ce40499bb874d6ff484d" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 17:52:30 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 17:52:30 2026 -0400" }, "message": "PMG attribute ignores declared length, enabling BCEL-vs-JVM parse\ndivergence (f019).\n" }, { "commit": "135b39283751a542e391ce40499bb874d6ff484d", "tree": "a5d1ed430966b80daf0c11a2ad8a41bd8655aa6f", "parents": [ "1d7760f302a0dfe089030acbe2b55fceab1980c5" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 17:31:04 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 17:31:04 2026 -0400" }, "message": "ClassPath.getBytes() sizes its buffer from the forged ZIP\nuncompressed-size field (f016).\n" }, { "commit": "1d7760f302a0dfe089030acbe2b55fceab1980c5", "tree": "b46c1fdd314bd06d4ad8b440288fafed2795e1b5", "parents": [ "fb72c225cbc6ec3d94060ed6edb269f07428d504" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 17:24:14 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 17:24:14 2026 -0400" }, "message": "Class2HTML builds output file paths from the unvalidated class name\n(f015).\n" }, { "commit": "fb72c225cbc6ec3d94060ed6edb269f07428d504", "tree": "d44393a493e8ec7403e498bcb819cfda2acca778", "parents": [ "a19a081ba93b534e85e622faa5e6b2b0afe31777" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 17:19:41 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 17:19:41 2026 -0400" }, "message": "Class2HTML emitters write attacker class-file strings into HTML\nunescaped (stored XSS in reports) (f014).\n" }, { "commit": "a19a081ba93b534e85e622faa5e6b2b0afe31777", "tree": "f39f4c07c010028b133695c3d97908069e4d021f", "parents": [ "cf5afeaf9653bb8c2748f0d3471c1b1050d37dc0" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 17:19:12 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 17:19:12 2026 -0400" }, "message": "Silent u2/u1 count truncation across dump paths corrupts emitted\nbytecode. (f013).\n" }, { "commit": "cf5afeaf9653bb8c2748f0d3471c1b1050d37dc0", "tree": "ef064f9ec4a1b70ca5d4a75de060da7ba5007c76", "parents": [ "512a70bb882c27d201e07f1645bd3679f51ab3b3" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 17:18:38 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 17:18:38 2026 -0400" }, "message": "Repositories cache classes under the input-defined this_class name;\nglobal static Repository/VerifierFactory make the poisoning\nClassLoader-wide. (f012).\n" }, { "commit": "512a70bb882c27d201e07f1645bd3679f51ab3b3", "tree": "54fbfc28101970920e34fa872f78d15a21bee63c", "parents": [ "14890bf2b9014df25f9b4de86f29b5e917e5656b" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 17:12:42 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 17:12:42 2026 -0400" }, "message": "Silent u2/u1 count truncation across dump paths corrupts emitted\nbytecode (f013).\n" }, { "commit": "14890bf2b9014df25f9b4de86f29b5e917e5656b", "tree": "15f3f8fb5d6c0b446f73605dbd4cbf51f6ac6bbe", "parents": [ "262ad94d1bba2bd7f003e2d4aa3255178c32902d" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 17:06:23 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 17:06:23 2026 -0400" }, "message": "Repositories cache classes under the input-defined this_class name;\nglobal static Repository/VerifierFactory make the poisoning\nClassLoader-wide (f012).\n" }, { "commit": "262ad94d1bba2bd7f003e2d4aa3255178c32902d", "tree": "619238abff5d5b1060f52330a69396eb9ffa03e3", "parents": [ "04f1eae50e54f99d580af4c060c7f9f9ae1cd4b2" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 16:28:02 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 16:28:02 2026 -0400" }, "message": "f011: typeSignatureToString recurses per generic-nesting level,\nunbounded, with quadratic substring copies" }, { "commit": "04f1eae50e54f99d580af4c060c7f9f9ae1cd4b2", "tree": "d3e696bd5b7adf4570812c6d97a767b1a4d52870", "parents": [ "e60d2affd5f934b2c5c7410b7699be288adcea85" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 16:13:36 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 16:13:36 2026 -0400" }, "message": "ConstantPool.constantToString recurses forever on self-referencing\nCONSTANT_MethodHandle (f010).\n" }, { "commit": "e60d2affd5f934b2c5c7410b7699be288adcea85", "tree": "d4e0dcf4862309e46cd4506096ac63ddf159c97c", "parents": [ "38434609d1873d5230f6817bc843799cae10aa36" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 16:10:21 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 16:10:21 2026 -0400" }, "message": "Disassembler and Class2HTML re-implement the unchecked switch-table\nallocation (f009).\n" }, { "commit": "38434609d1873d5230f6817bc843799cae10aa36", "tree": "dee95a831475f4e38e7f83f70909d461947d8237", "parents": [ "3c8957a48d2f3595930c199f71adc0a3c99f9b49" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 16:04:51 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 16:04:51 2026 -0400" }, "message": "Subroutines.noRecursiveCalls enumerates exponentially many JSR call\npaths (f008)." }, { "commit": "3c8957a48d2f3595930c199f71adc0a3c99f9b49", "tree": "55f08790abaaed5c0533b97695f7744cf7d3cccd", "parents": [ "3cdf5d1f5ff06fec3834e7820b5a7c812b9f4ffe" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 16:03:00 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 16:03:00 2026 -0400" }, "message": "Cubic handlers × range × subroutines scan in Subroutines constructor\nhangs JustIce Pass 3b (f007).\n" }, { "commit": "3cdf5d1f5ff06fec3834e7820b5a7c812b9f4ffe", "tree": "eff8efdda36453c14af5103e3ff6068950da8176", "parents": [ "2970b4c9ef2e6ea9265ab4d758c81961ae0fcbb4" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 15:54:40 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 15:54:40 2026 -0400" }, "message": "Pass 3b dataflow stores frames per instruction and clones ever-growing\nexecution chains (f006).\n" }, { "commit": "2970b4c9ef2e6ea9265ab4d758c81961ae0fcbb4", "tree": "d25d7a116b3c6b655818af46620c1ecacf4d8838", "parents": [ "dc3e8989a2e6ce614a36e633a9f404eeba6c7e2f" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 15:45:30 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 15:45:30 2026 -0400" }, "message": "JustIce Pass 2 LVT check amplifies each 10-byte entry into ~131k\nhashtable operations (f005).\n" }, { "commit": "dc3e8989a2e6ce614a36e633a9f404eeba6c7e2f", "tree": "f824de21014d0de8e2fdbbd8faf26867f8b40d5d", "parents": [ "49a8bcb631c1d0858813b12e0a2c94d8adee66d8" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 15:39:59 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 15:39:59 2026 -0400" }, "message": "JustIce Pass 2 hangs on cyclic superclass chain of a referenced\nexception class (f004)." }, { "commit": "49a8bcb631c1d0858813b12e0a2c94d8adee66d8", "tree": "448308f837276c328424225fa6ca5b757780f785", "parents": [ "ad48367df4b73b140f90c936ccd0d7a46544e7af" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 15:35:11 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 15:35:11 2026 -0400" }, "message": "Opcodes tableswitch and lookupswitch add boundary checks (f003).\n" }, { "commit": "ad48367df4b73b140f90c936ccd0d7a46544e7af", "tree": "6b11255a7d492270af94b30fe921ca8b0b8e010a", "parents": [ "b04a6b7e74528d1edab6b83509c9fbe693c800bb" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 15:26:52 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 15:26:52 2026 -0400" }, "message": "Nested annotation element values recurse unboundedly;\nMAX_ARRAY_DIMENSIONS cap bypassed (f002)." }, { "commit": "b04a6b7e74528d1edab6b83509c9fbe693c800bb", "tree": "1bfd4bd31f7f265ea2dafa98bd489fc6985a401f", "parents": [ "b27feadfce6dcc6755b6123499ddfd2b12aebfc8" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 10:29:38 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 10:29:38 2026 -0400" }, "message": "Sort members\n" }, { "commit": "b27feadfce6dcc6755b6123499ddfd2b12aebfc8", "tree": "c463c625eb51608876317961bf67262bc380a358", "parents": [ "66f5a115212451c9953a1fd7450c39e153c1f74f" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 10:28:58 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 10:28:58 2026 -0400" }, "message": "f001 Nested Code/Record attributes drive unbounded parse-time recursion\nin ClassParser.\n\n- Checkstylle\n- Sort members\n" }, { "commit": "66f5a115212451c9953a1fd7450c39e153c1f74f", "tree": "fea44b6995447906303b61148c7dcd7e242e3433", "parents": [ "e0873985896479176cc22d3927bcb51651d18daf" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 10:26:17 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Sep 04 10:26:17 2026 -0400" }, "message": "Nested Code/Record attributes drive unbounded parse-time recursion in\nClassParser (f001).\n\nClass files with attributes nested deeper than 64 levels are now\nrejected with ClassFormatException; raise\norg.apache.bcel.classfile.Attribute.maxNestingDepth if legitimate deeper\nnesting is required.\n" }, { "commit": "e0873985896479176cc22d3927bcb51651d18daf", "tree": "2831c19e066597eda11f912bb656ad9b51e30454", "parents": [ "9e519e6a41aab4d313668e215f512897576bfd08" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Mon Aug 31 11:18:00 2026 +0000" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Mon Aug 31 11:18:00 2026 +0000" }, "message": "Bump github/codeql-action/analyze from 4.37.8 to 4.37.9.\n" }, { "commit": "9e519e6a41aab4d313668e215f512897576bfd08", "tree": "59827ef9d0d4bb26ef9e66ce34bb6cb21bc77c24", "parents": [ "0904065ef774604b8f81c235b24026bfd671589e" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Aug 27 13:40:47 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Aug 27 13:40:47 2026 -0400" }, "message": "Bump actions/setup-java from 5.7.0 to 6.0.0.\n" }, { "commit": "0904065ef774604b8f81c235b24026bfd671589e", "tree": "0762093ad9ffc069d7e2be97fb4d32f1f59b3621", "parents": [ "8cc1024e515331d40c73cbdd65d1e0082cdee614" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Aug 25 14:13:14 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Aug 25 14:13:14 2026 -0400" }, "message": "Bump github/codeql-action/init from 4.37.7 to 4.37.8\n" }, { "commit": "8cc1024e515331d40c73cbdd65d1e0082cdee614", "tree": "e128d2a8793c237a0290350ec0702e49f2e92e76", "parents": [ "2925ec539ed84ba678118e9ec6b738a8e6854587" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Aug 22 08:20:32 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Aug 22 08:20:32 2026 -0400" }, "message": "Bump org.apache.commons:commons-parent from 103 to 104.\n" }, { "commit": "2925ec539ed84ba678118e9ec6b738a8e6854587", "tree": "8e05c50a2b275f712d29a3cc39a6f0153a1088b7", "parents": [ "5ac1c2b0cfce2d9e8590570be0a87950a2da49b9" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Aug 22 08:19:28 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Aug 22 08:19:28 2026 -0400" }, "message": "Fix SpotBugs USO_UNSAFE_METHOD_SYNCHRONIZATION in ConstantUtf8.\n" }, { "commit": "5ac1c2b0cfce2d9e8590570be0a87950a2da49b9", "tree": "e46cb07347327093d2e3faf2e353e7247acd526b", "parents": [ "c84cdc834f2c220a771cc341b571ef8327ab40b6" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Aug 22 08:04:56 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Aug 22 08:04:56 2026 -0400" }, "message": "Add Const.MAJOR_28.\n\nAdd Const.MINOR_2.8\n" }, { "commit": "c84cdc834f2c220a771cc341b571ef8327ab40b6", "tree": "292c5c08215808318d1abbe6a5f7e3273a32c84e", "parents": [ "bc97a91a91e32c7e5d84cab872e814c55e87c962" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Aug 18 16:00:31 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Aug 18 16:00:31 2026 -0400" }, "message": "Bump codeql-action from 4.37.6 to 4.37.7\n" }, { "commit": "bc97a91a91e32c7e5d84cab872e814c55e87c962", "tree": "986ccb90b36f416b622eefe6a05bfc1fc29cdbb7", "parents": [ "ced1d90dba35843cc4f2bd66e67f339bed19b2d1" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Mon Aug 10 08:05:55 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Mon Aug 10 08:05:55 2026 -0400" }, "message": "Bump org.apache.commons:commons-collections4 from 4.5.0 to 4.6.0.\n" }, { "commit": "ced1d90dba35843cc4f2bd66e67f339bed19b2d1", "tree": "0bb3d9a6050ff5c3ab3ce0d5216805a69483fe49", "parents": [ "9e3bcb5529bd74d69377c34a3bf81425ef6223f2" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Wed Aug 05 14:13:26 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Wed Aug 05 14:13:26 2026 -0400" }, "message": "Bump actions/setup-java from 5.6.0 to 5.7.0\n" }, { "commit": "9e3bcb5529bd74d69377c34a3bf81425ef6223f2", "tree": "30ce677c09333a9cf3c20a8b62d182e119c15ff6", "parents": [ "6a739a7d01622ab509f03dc6d30f20cf34f7245d" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Aug 04 15:57:58 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Aug 04 15:57:58 2026 -0400" }, "message": "Bump github/codeql-action from 4.37.3 to 4.37.6.\n" }, { "commit": "6a739a7d01622ab509f03dc6d30f20cf34f7245d", "tree": "53571ab9988ff80dd48c0213d5424369b31ec579", "parents": [ "98cf530fafb9a60faf3d13c9711768ce453f63c6" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sun Aug 02 15:26:43 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sun Aug 02 15:26:43 2026 -0400" }, "message": "Javadoc\n" }, { "commit": "98cf530fafb9a60faf3d13c9711768ce453f63c6", "tree": "9742b087363d7f0e5605585c4e842e44e08d0997", "parents": [ "17f25ccc96ffbf8223fb70928ff9dd51be306709" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sun Aug 02 15:22:27 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sun Aug 02 15:22:27 2026 -0400" }, "message": "Javadoc\n" }, { "commit": "17f25ccc96ffbf8223fb70928ff9dd51be306709", "tree": "730200e9e998a947b12e3a6410c5101be78a2d3a", "parents": [ "e25a4b955b5725b51668a4e5bddea462e7c86413" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Wed Jul 29 08:13:38 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Wed Jul 29 08:13:38 2026 -0400" }, "message": "Bump ossf/scorecard-action from 2.4.3 to 2.4.4.\n" }, { "commit": "e25a4b955b5725b51668a4e5bddea462e7c86413", "tree": "221070a759af99f75c3e18e28850310b7f4026a9", "parents": [ "ecf28d68ddf83d22b5f279356c02b8eb5baddd68" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Jul 28 14:53:22 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Jul 28 14:53:22 2026 -0400" }, "message": "Bump github/codeql-action from 4.37.1 to 4.37.3\n" }, { "commit": "ecf28d68ddf83d22b5f279356c02b8eb5baddd68", "tree": "1472e18cdff2d20da6c3235f860c0b40841c3c9f", "parents": [ "984bbb035a4e547e0880bcb30640ee94d936a59c" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Jul 25 09:48:57 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Jul 25 09:48:57 2026 -0400" }, "message": "Bump actions/checkout from 7.0.0 to 7.0.1\n" }, { "commit": "984bbb035a4e547e0880bcb30640ee94d936a59c", "tree": "0a1209ae563f765e552ad63d2dc2c59a54c45b4e", "parents": [ "60444ad17cb1e3e38927e5a2c2732e18aabf52a1" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Jul 21 15:36:56 2026 -0700" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Jul 21 15:36:56 2026 -0700" }, "message": "Bump org.apache.commons:commons-parent from 102 to 103.\n" }, { "commit": "60444ad17cb1e3e38927e5a2c2732e18aabf52a1", "tree": "e0225624fff1c162ae77fb6766523528721a0d47", "parents": [ "65ab3558e85e3c4acf872487d63df0a7ac148ee5", "68698bbd87096b9c6836e2cc13501b5d990a3516" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Jul 21 13:01:44 2026 -0700" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Jul 21 13:01:44 2026 -0700" }, "message": "Merge branch \u0027master\u0027 of https://github.com/apache/commons-bcel.git" }, { "commit": "65ab3558e85e3c4acf872487d63df0a7ac148ee5", "tree": "e7bf9ddeb1b9b2e5e06a9cca722299a6670538f1", "parents": [ "dbcfda160bfab5ad5e4d06c1c02b627a581657c3" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Jul 21 13:01:39 2026 -0700" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Jul 21 13:01:39 2026 -0700" }, "message": "Bound IINC increment to signed short (#526)." }, { "commit": "68698bbd87096b9c6836e2cc13501b5d990a3516", "tree": "a06a97fa8eada4732dc85a931af37780800f0d21", "parents": [ "dbcfda160bfab5ad5e4d06c1c02b627a581657c3" ], "author": { "name": "Naveed Khan", "email": "164054284+rootvector2@users.noreply.github.com", "time": "Tue Jul 21 20:00:34 2026 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jul 21 16:00:34 2026 -0400" }, "message": "bound iinc increment to signed short (#526)\n\n`IINC.setIncrement` stored the increment without checking its range, but `dump` writes the wide-form increment with `writeShort`. A value outside the signed-short range was accepted and then truncated to a different value on dump. Reject it in `setIncrement`, which the constructor routes through too." }, { "commit": "dbcfda160bfab5ad5e4d06c1c02b627a581657c3", "tree": "9973d27327509cc5f25d0bc6f8e3863dfdecb39c", "parents": [ "fed3c45753d169c087d11c74aa8e969d2b370862" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Jul 21 13:44:58 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Jul 21 13:44:58 2026 -0400" }, "message": "Bump github/codeql-action from 4.37.0 to 4.37.1\n" }, { "commit": "fed3c45753d169c087d11c74aa8e969d2b370862", "tree": "cc93b17a1ce0f54dfe463c6f571d29cace745805", "parents": [ "d1fbe478f9bdfb40f5820c29f9a7659e04f9053e" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Jul 21 11:45:05 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Jul 21 11:45:05 2026 -0400" }, "message": "Bump actions/setup-java from 5.5.0 to 5.6.0\n" }, { "commit": "d1fbe478f9bdfb40f5820c29f9a7659e04f9053e", "tree": "7c4413ed7f22b9d70d3fad0de74dcc5d1d77364a", "parents": [ "d0d3c299c1bbffc088e5b011b8e26f8fb5c8a2d2" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Jul 21 08:25:24 2026 -0700" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Jul 21 08:25:24 2026 -0700" }, "message": "Internal refactoring\n" }, { "commit": "d0d3c299c1bbffc088e5b011b8e26f8fb5c8a2d2", "tree": "74d04ca7cfaf2a2334d1bf5f38cd7b6e6b7f10c7", "parents": [ "3785212afe9483e1a182a8ec8decfb930652231a" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Mon Jul 20 07:35:58 2026 -0700" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Mon Jul 20 07:35:58 2026 -0700" }, "message": "Use import.\n" }, { "commit": "3785212afe9483e1a182a8ec8decfb930652231a", "tree": "0a7089a92d491a8611fe98271e6fc26f950c644e", "parents": [ "87e8bf860327a3e345b406416acc4aa4b7088dfc" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Jul 18 07:55:08 2026 -0700" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Jul 18 07:55:08 2026 -0700" }, "message": "Internal refactoring\n" }, { "commit": "87e8bf860327a3e345b406416acc4aa4b7088dfc", "tree": "3e19cdb7c93f655d5a702cd39fab2f661b4782b0", "parents": [ "88916beeb3aeb2501017646d3affbb2ede18f473" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Jul 18 07:30:18 2026 -0700" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Jul 18 07:30:18 2026 -0700" }, "message": "Match wide local variable instruction length to dumped bytes (#525)." } ], "next": "88916beeb3aeb2501017646d3affbb2ede18f473" }