)]}' { "log": [ { "commit": "92a7fc71e4a03098921eb27b808f93803869a571", "tree": "292d20c49bc1942438703721acb2ca02345ff8c2", "parents": [ "560cff32bd428e56ca9d5390eaab517d87b53cce" ], "author": { "name": "Gary Gregory", "email": "garydgregory@users.noreply.github.com", "time": "Tue Oct 06 07:00:15 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Oct 06 07:00:15 2026 -0400" }, "message": "Bump org.apache.commons:commons-secure-xml from 1.0.0 to 1.1.0 (#658)" }, { "commit": "560cff32bd428e56ca9d5390eaab517d87b53cce", "tree": "2c1161fcc6b474ee933a012f86f4cf370399de5c", "parents": [ "15e95e90124aefbe600e2944b6c9a41c1e951ab9" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Oct 03 09:56:26 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Oct 03 09:56:26 2026 -0400" }, "message": "Add GH CI Java 27\n\nReplace Java 26 as experimental with Java 28-ea as experimental\n" }, { "commit": "15e95e90124aefbe600e2944b6c9a41c1e951ab9", "tree": "ba8c0a1d103d8a1886d435e101fa26bf84549bc0", "parents": [ "2883435d0e7b887cf0a179cf24ecf6841e9d10a5" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Oct 03 09:55:29 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Oct 03 09:55:29 2026 -0400" }, "message": "[CONFIGURATION-858] Fix Moditect module generation on Java 26 and later\n(#657)" }, { "commit": "2883435d0e7b887cf0a179cf24ecf6841e9d10a5", "tree": "bfa4c35e149773f9bbe3d8f9c3b8ebb9407c1314", "parents": [ "db473f8f0471beecb1b6e6d94057aecbe12403c8" ], "author": { "name": "Gary Gregory", "email": "garydgregory@users.noreply.github.com", "time": "Sat Oct 03 09:53:10 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat Oct 03 09:53:10 2026 -0400" }, "message": "[CONFIGURATION-858] Make java.applet import optional (#657)\n\nFix Moditect module generation on Java 26 and later.\n\nConfigure jdeps arguments on the inherited add-module-infos execution so\n--ignore-missing-deps takes effect. This allows module generation\ndespite\nAppletCo" }, { "commit": "db473f8f0471beecb1b6e6d94057aecbe12403c8", "tree": "834c489e2779999c988bc56030dd3698fcf1dd33", "parents": [ "35c83647a6b7771bec282807d648d88c3c56e268" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Oct 01 14:01:55 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Oct 01 14:01:55 2026 -0400" }, "message": "Bump com.fasterxml.jackson.core:jackson-databind from 2.22.2 to 2.22.3\n" }, { "commit": "35c83647a6b7771bec282807d648d88c3c56e268", "tree": "07a9ca63dfa648d6c5bd595149d004b541fc9292", "parents": [ "60df0f06d379b4d4dabca93d80ca83a756a2047c" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Oct 01 14:01:31 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Oct 01 14:01:31 2026 -0400" }, "message": "Bump com.fasterxml.jackson.core:jackson-databind from 2.22.2 to 2.22.3 (#652)\n\nBumps [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson-databind) from 2.22.2 to 2.22.3.\n- [Commits](https://github.com/FasterXML/jackson-databind/compare/jackson-databind-2.22.2...jackson-databind-2.22.3)\n\n---\nupdated-dependencies:\n- dependency-name: com.fasterxml.jackson.core:jackson-databind\n dependency-version: 2.22.3\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "60df0f06d379b4d4dabca93d80ca83a756a2047c", "tree": "ef487d0a0ba5ec71dfc4ab5f48b95b0baa9059b7", "parents": [ "346de7a3e18c074dadda19ddcefd736734f2da36" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Oct 01 14:01:13 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Oct 01 14:01:13 2026 -0400" }, "message": "Bump slf4j.version from 2.0.19 to 2.0.20\\" }, { "commit": "346de7a3e18c074dadda19ddcefd736734f2da36", "tree": "3dfd6ffee37dfe9af16de29aac1759410edaa9cf", "parents": [ "81355bb64e1c865d69eb6d28b3d46b8618d13eff" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Oct 01 14:00:40 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Oct 01 14:00:40 2026 -0400" }, "message": "Bump slf4j.version from 2.0.19 to 2.0.20 (#655)\n\nBumps `slf4j.version` from 2.0.19 to 2.0.20.\n\nUpdates `org.slf4j:slf4j-api` from 2.0.19 to 2.0.20\n\nUpdates `org.slf4j:slf4j-ext` from 2.0.19 to 2.0.20\n\nUpdates `org.slf4j:slf4j-log4j12` from 2.0.19 to 2.0.20\n\nUpdates `org.slf4j:slf4j-nop` from 2.0.19 to 2.0.20\n\n---\nupdated-dependencies:\n- dependency-name: org.slf4j:slf4j-api\n dependency-version: 2.0.20\n dependency-type: direct:development\n update-type: version-update:semver-patch\n- dependency-name: org.slf4j:slf4j-ext\n dependency-version: 2.0.20\n dependency-type: direct:development\n update-type: version-update:semver-patch\n- dependency-name: org.slf4j:slf4j-log4j12\n dependency-version: 2.0.20\n dependency-type: direct:development\n update-type: version-update:semver-patch\n- dependency-name: org.slf4j:slf4j-nop\n dependency-version: 2.0.20\n dependency-type: direct:development\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "81355bb64e1c865d69eb6d28b3d46b8618d13eff", "tree": "9a441d79a227afd45c751fb2e558983892c23f44", "parents": [ "70776b2aac3f9e2486dbff606cfa73f9b1d75791" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Oct 01 14:00:25 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Oct 01 14:00:25 2026 -0400" }, "message": "Bump org.yaml:snakeyaml from 2.6 to 2.7" }, { "commit": "70776b2aac3f9e2486dbff606cfa73f9b1d75791", "tree": "fed32418331277b3c082a15b760eb443a24a4cb5", "parents": [ "aa126124e918cddd8290c8a84bf876149e012cac" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Oct 01 13:58:47 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Oct 01 13:58:47 2026 -0400" }, "message": "Bump org.yaml:snakeyaml from 2.6 to 2.7 (#656)\n\nBumps org.yaml:snakeyaml from 2.6 to 2.7.\n\n---\nupdated-dependencies:\n- dependency-name: org.yaml:snakeyaml\n dependency-version: \u00272.7\u0027\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "aa126124e918cddd8290c8a84bf876149e012cac", "tree": "d0bddd5092fb12d00838c080e009257eb9e9f9e5", "parents": [ "1d658884b9099214629c66ca46d4ee3da743bca8" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Oct 01 08:17:01 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Oct 01 08:17:01 2026 -0400" }, "message": "Bump com.fasterxml.jackson.core:jackson-databind from 2.22.1 to 2.22.2\n" }, { "commit": "1d658884b9099214629c66ca46d4ee3da743bca8", "tree": "eb66df3139954966795360321414cd164d953b29", "parents": [ "ac5ced82fd26fbbca85edd9353cf792407e4ab2a" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Oct 01 08:16:15 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Oct 01 08:16:15 2026 -0400" }, "message": "Bump com.fasterxml.jackson.core:jackson-databind from 2.22.1 to 2.22.2 (#650)\n\nBumps [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson-databind) from 2.22.1 to 2.22.2.\n- [Commits](https://github.com/FasterXML/jackson-databind/compare/jackson-databind-2.22.1...jackson-databind-2.22.2)\n\n---\nupdated-dependencies:\n- dependency-name: com.fasterxml.jackson.core:jackson-databind\n dependency-version: 2.22.2\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "ac5ced82fd26fbbca85edd9353cf792407e4ab2a", "tree": "c281f28239d77175fa6ee81d2900f9414e001d2e", "parents": [ "82e00fe8ea1ff46b5fe32e7a4fa6e370efecff5f" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Sep 29 20:29:32 2026 +0000" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Sep 29 20:29:32 2026 +0000" }, "message": "Bump org.apache.commons:commons-lang3 from 3.20.0 to 3.21.0\n" }, { "commit": "82e00fe8ea1ff46b5fe32e7a4fa6e370efecff5f", "tree": "c7f924854ce56f0a33bf74ab492102f0c20927b5", "parents": [ "166680b1068ec94122b3282ef952f39619b7b474" ], "author": { "name": "Gary Gregory", "email": "garydgregory@users.noreply.github.com", "time": "Tue Sep 29 16:28:26 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Sep 29 16:28:26 2026 -0400" }, "message": "Bump org.apache.commons:commons-lang3 from 3.20.0 to 3.21.0 (#651)\n\n* Update release date\n\n* Bump org.apache.commons:commons-lang3 from 3.20.0 to 3.21.0" }, { "commit": "166680b1068ec94122b3282ef952f39619b7b474", "tree": "9742c8a9f4879f3c76996cc0f68beb2157ae13cf", "parents": [ "bc2be7d08d2c37f09a82f9f9c5204ba32bc989a7" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Sep 26 21:39:06 2026 +0000" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Sep 26 21:39:06 2026 +0000" }, "message": "Inline single use local variable.\n" }, { "commit": "bc2be7d08d2c37f09a82f9f9c5204ba32bc989a7", "tree": "8dccfa468092a59f51acc9b7124cdc8dd829784d", "parents": [ "99fcf99ed2d0b1487852d1d16f4e6c19e1912733" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Sep 24 12:57:04 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Sep 24 12:57:04 2026 -0400" }, "message": "Bump github/codeql-action from 4.38.1 to 4.38.2\n" }, { "commit": "99fcf99ed2d0b1487852d1d16f4e6c19e1912733", "tree": "081d9502f4db2746c2921169f4450affff7b8edc", "parents": [ "dd7c7da1909a681c3791a2cd6b4d51a1faf5da03" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Sep 22 07:26:23 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Sep 22 07:26:23 2026 -0400" }, "message": "Protect main branches\n" }, { "commit": "dd7c7da1909a681c3791a2cd6b4d51a1faf5da03", "tree": "bd765b6ab57dca73c67f68c8ca3ca732c6b31fa2", "parents": [ "a28e96cc9e6e1f0a45c26921dad5f0abe92dfd86" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sun Sep 20 10:11:16 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sun Sep 20 10:11:16 2026 -0400" }, "message": "[test] Bump slf4j.version from 2.0.18 to 2.0.19\n" }, { "commit": "a28e96cc9e6e1f0a45c26921dad5f0abe92dfd86", "tree": "543012623a9889d1dd9232676fbf3d7772051c80", "parents": [ "dc2377e47cda8ced6b2a9ba9d5c5233fb4ea834c" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Sep 19 11:15:39 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Sep 19 11:15:39 2026 -0400" }, "message": "Bump github/codeql-action/* from 4.37.9 to 4.38.1\n" }, { "commit": "dc2377e47cda8ced6b2a9ba9d5c5233fb4ea834c", "tree": "eae2658c8b2756a5364c9f31c87963e9ac7203df", "parents": [ "3359f825bd48ba0c94c4e8684b80334089a793bf" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Sep 19 11:07:07 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Sep 19 11:07:07 2026 -0400" }, "message": "Bump actions/setup-java from 6.0.0 to 6.0.1\n" }, { "commit": "3359f825bd48ba0c94c4e8684b80334089a793bf", "tree": "ed277175a2ee4fde22ef0d2d52785d5e273ea8df", "parents": [ "3e84bcb091f03ba3db96379b56182b22c2436f75" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Mon Sep 07 09:29:41 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Mon Sep 07 09:29:41 2026 -0400" }, "message": "Bump org.apache.commons:commons-parent from 104 to 105.\n" }, { "commit": "3e84bcb091f03ba3db96379b56182b22c2436f75", "tree": "453b916f7f647bf64d731308b4273d7cf6075193", "parents": [ "8660301dda712033e27adacae418c23f722ac3ff" ], "author": { "name": "Piotr P. Karwasz", "email": "piotr@github.copernik.eu", "time": "Sun Sep 06 15:29:53 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sun Sep 06 09:29:53 2026 -0400" }, "message": "Harden XML parsing via commons-xml (#647)\n\n* Harden XML parsing via commons-xml\n\nReplace all direct JAXP factory instantiations (DocumentBuilderFactory,\nSAXParserFactory, TransformerFactory) with the secure factories from\norg.apache.commons:commons-xml. These factories enable\nFEATURE_SECURE_PROCESSING and install a non-removable entity-resolver\nfloor on every parser they produce: external DTD, entity, schema and\nXInclude lookups that a caller-set resolver does not resolve are\nresolved to empty content instead of being fetched, and internal entity\nexpansion is bounded, regardless of the JAXP implementation on the\nclasspath.\n\nHardening the parsing of a configuration file is admittedly not\nnecessary: configuration files are normally trusted. This limits the\nside-effects if a user (against advice) decides to parse untrusted\nconfiguration files.\n\nChanges:\n- Add the commons-xml dependency (1.0.0-SNAPSHOT until its first\n release).\n- Route factory creation through SecureDocumentBuilderFactory,\n SecureSAXParserFactory and SecureTransformerFactory in\n XMLConfiguration, XMLDocumentHelper, XMLPropertiesConfiguration and\n XMLPropertyListConfiguration, plus the affected tests.\n- No explicit hardening of the source passed to\n XMLDocumentHelper.transform is needed: transformers created by\n SecureTransformerFactory rewrite their sources on every transform\n call.\n- XMLConfiguration keeps its DefaultEntityResolver contract (return\n null for unknown entities): a null return no longer lets the parser\n fetch the external resource, because the resolver floor resolves it\n to empty content instead.\n- Keep resolver-based schema validation (for example via\n CatalogResolver) working under secure processing: disable\n EntityResolver2 handling\n (http://xml.org/sax/features/use-entity-resolver2), because the JDK\n does not mark schema documents supplied by an EntityResolver2 as\n resolver-created and its accessExternalSchema check then refuses\n them, and lift the accessExternalSchema restriction, because Java 8\n applies it even to sources supplied by a plain resolver. Lifting the\n restriction does not reopen external fetches: the secure factory\u0027s\n resolver floor still resolves every unresolved lookup to empty\n content instead of fetching it.\n- Run the CI and CodeQL builds with -Puse-apache-snapshots (inherited\n from the org.apache:apache parent POM) so the commons-xml SNAPSHOT\n resolves; CodeQL\u0027s autobuild receives the profile through MAVEN_ARGS.\n\nAssisted-By: Claude Opus 4.8 (1M context) \u003cnoreply@anthropic.com\u003e\nAssisted-By: Claude Fable 5 \u003cnoreply@anthropic.com\u003e\nClaude-Session: https://claude.ai/code/session_01NS6CoaDG2mfSNpy4Ukhvrn\n\n* Resolve schema locally in TestMultiFileConfigurationBuilder\n\nThe 2001 test configuration references its schema through an absolute\nhttps URI (xsi:noNamespaceSchemaLocation). The hardened parser does not\nfetch external resources, so testSchemaValidationError no longer reached\nthe intended schema validation error; the entity resolver refused the\nremote fetch first.\n\nRegister the local testMultiConfiguration.xsd for that system URI via an\nXML catalog (CatalogResolver pointing at the existing catalog.xml, which\nalready rewrites https://commons.apache.org/ to the local test\nresources) and set it as the builder\u0027s entity resolver. The schema now\nloads locally, so the expected SAXParseException validation error is\nraised again.\n\nAssisted-By: Claude Opus 4.8 (1M context) \u003cnoreply@anthropic.com\u003e\n\n* Simplify the secure schema validation workaround\n\nDisabling EntityResolver2 handling is unnecessary: the parser does use\na schema document supplied by an EntityResolver2 once the\naccessExternalSchema check no longer refuses it, so lifting that\nrestriction alone keeps resolver-based schema validation working on\nevery JDK version.\n\nAlso inline XMLDocumentHelper.createTransformerFactory into its only\ncaller and drop its test.\n\nAssisted-By: Claude Fable 5 \u003cnoreply@anthropic.com\u003e\nClaude-Session: https://claude.ai/code/session_01NS6CoaDG2mfSNpy4Ukhvrn\n\n* Remove unused import in TestXMLDocumentHelper\n\nAssisted-By: Claude Fable 5 \u003cnoreply@anthropic.com\u003e\nClaude-Session: https://claude.ai/code/session_01NS6CoaDG2mfSNpy4Ukhvrn\n\n* Adopt the commons-secure-xml artifact name\n\nThe org.apache.commons:commons-xml artifact was renamed to\norg.apache.commons:commons-secure-xml and its Java package moved from\norg.apache.commons.xml to org.apache.commons.xml.secure. Update the\ndependency and imports accordingly, and record the hardening in\nchanges.xml.\n\nAssisted-By: Claude Fable 5 \u003cnoreply@anthropic.com\u003e\nClaude-Session: https://claude.ai/code/session_01MHgnMnGWHQoH2zD2jFdoMT\n\n* Use the Commons Secure XML 1.0.0 release candidate\n\nBump org.apache.commons:commons-secure-xml from 1.0.0-SNAPSHOT to 1.0.0\nand add the temporary staging repository\nhttps://repository.apache.org/content/repositories/orgapachecommons-1962/\nafter Central, so the vote gets downstream CI results. Drop the\n-Puse-apache-snapshots profile from the CI workflows, which the release\nversion no longer needs. Remove the staging repository once 1.0.0 is\nreleased.\n\nAssisted-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\nClaude-Session: https://claude.ai/code/session_0167e29ScPEdfzJnEFm95imK\n\n* Bump Apache Commons Secure XML from 1.0.0-SNAPSHOT to 1.0.0\n\n---------\n\nCo-authored-by: Gary Gregory \u003cgarydgregory@gmail.com\u003e" }, { "commit": "8660301dda712033e27adacae418c23f722ac3ff", "tree": "aeee1605f4055292f779a19b5bcdb51283dd775c", "parents": [ "f01a48406c608bc1de0aafa10453b8884ad18302" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Mon Aug 31 11:18:20 2026 +0000" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Mon Aug 31 11:18:20 2026 +0000" }, "message": "Bump github/codeql-action/analyze from 4.37.8 to 4.37.9.\n" }, { "commit": "f01a48406c608bc1de0aafa10453b8884ad18302", "tree": "e4e5488c5dbd022e90c1507fe85aa7999b1ec624", "parents": [ "9e2fbbdc896fe884ba15615231e1d71988000d4f" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Aug 27 13:41:02 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Aug 27 13:41:02 2026 -0400" }, "message": "Bump actions/setup-java from 5.7.0 to 6.0.0.\n" }, { "commit": "9e2fbbdc896fe884ba15615231e1d71988000d4f", "tree": "7d5c4ce6e2c5200484dd93012c43c8891ddb1e7f", "parents": [ "6867c53b2d419156e722c745e9469bd27dc9b600" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Aug 25 14:13:31 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Aug 25 14:13:31 2026 -0400" }, "message": "Bump github/codeql-action/init from 4.37.7 to 4.37.8\n" }, { "commit": "6867c53b2d419156e722c745e9469bd27dc9b600", "tree": "819278b2905a56e0dfc149c72fc2e45bcf3db51e", "parents": [ "cd4a33f9a1c786a1f7159639449ca24329ba2cbe" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Aug 22 11:58:32 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Aug 22 11:58:32 2026 -0400" }, "message": "Bump org.apache.commons:commons-parent from 103 to 104.\n" }, { "commit": "cd4a33f9a1c786a1f7159639449ca24329ba2cbe", "tree": "99d5313916acc19add71bf900b2d3b5b58105157", "parents": [ "dc33cda1600a24fa31649a23b07a0dec94e12a48" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Aug 22 11:58:17 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Aug 22 11:58:17 2026 -0400" }, "message": "Fix SpotBugs USO_UNSAFE_ACCESSIBLE_OBJECT_SYNCHRONIZATION in\nXMLPropertyListConfiguration.\n\n[ERROR] Medium: The lock object\norg.apache.commons.configuration2.plist.XMLPropertyListConfiguration$PListNodeBuilder.FORMAT\nused in method\norg.apache.commons.configuration2.plist.XMLPropertyListConfiguration$PListNodeBuilder.addDateValue(String)\nis exposed to untrusted code outside of class\norg.apache.commons.configuration2.plist.XMLPropertyListConfiguration$PListNodeBuilder,\nthrough updating or returning its value from static\norg.apache.commons.configuration2.plist.XMLPropertyListConfiguration$PListNodeBuilder.access$2()Ljava/text/DateFormat;.\n[org.apache.commons.configuration2.plist.XMLPropertyListConfiguration$PListNodeBuilder]\nAt XMLPropertyListConfiguration.java:[lines 222-236]\nUSO_UNSAFE_ACCESSIBLE_OBJECT_SYNCHRONIZATION\n" }, { "commit": "dc33cda1600a24fa31649a23b07a0dec94e12a48", "tree": "969de25395d5885fa7ad4affb87db669e752b5cb", "parents": [ "c1695dd50bab56c52bc3cc203f7b37d9d2265674" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Aug 22 11:40:35 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Aug 22 11:40:35 2026 -0400" }, "message": "Fix SpotBugs USO_UNSAFE_METHOD_SYNCHRONIZATION in\nReloadingCombinedConfigurationBuilder.\n" }, { "commit": "c1695dd50bab56c52bc3cc203f7b37d9d2265674", "tree": "56ffba5fef99286874a0bb19ab8806c8b5196c07", "parents": [ "1f106d438951a40308fc297a5ee71b6fcebf06c7" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Aug 22 11:40:08 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Aug 22 11:40:08 2026 -0400" }, "message": "Fix SpotBugs USO_UNSAFE_METHOD_SYNCHRONIZATION in\nMultiFileConfigurationBuilder.\n" }, { "commit": "1f106d438951a40308fc297a5ee71b6fcebf06c7", "tree": "f547511f3f35789570507b91683a94a5b62a14c5", "parents": [ "e4755c92cabea479d7ad81402b97b7bc93de5aa6" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Aug 22 11:39:39 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Aug 22 11:39:39 2026 -0400" }, "message": "Fix SpotBugs USO_UNSAFE_METHOD_SYNCHRONIZATION in\nFileBasedConfigurationBuilder.\n" }, { "commit": "e4755c92cabea479d7ad81402b97b7bc93de5aa6", "tree": "7c4764d8326c1646d8ef7e7110c9eb959b4105b6", "parents": [ "7ed54d7da52b762f0cb83cbfac820b9fd4ffcb42" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Aug 22 11:39:19 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Aug 22 11:39:19 2026 -0400" }, "message": "Fix SpotBugs USO_UNSAFE_METHOD_SYNCHRONIZATION in\nCombinedConfigurationBuilder.\n" }, { "commit": "7ed54d7da52b762f0cb83cbfac820b9fd4ffcb42", "tree": "ad209b9ef5ec418ef82a51ec51d87896fde0e50e", "parents": [ "f22399d3204ac2a21c5b621bf1c553c35c90f213" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Aug 22 10:58:20 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Aug 22 10:58:20 2026 -0400" }, "message": "Fix SpotBugs USO_UNSAFE_METHOD_SYNCHRONIZATION in\nBasicConfigurationBuilder.\n" }, { "commit": "f22399d3204ac2a21c5b621bf1c553c35c90f213", "tree": "b6045ac37867ea66acfdba065d6b209880cac77b", "parents": [ "f82f1e961c237363f1dbcf7a4bb680865062474a" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Aug 22 10:51:24 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Aug 22 10:51:24 2026 -0400" }, "message": "Initialize local var on instantiation\n" }, { "commit": "f82f1e961c237363f1dbcf7a4bb680865062474a", "tree": "7da583784bd5be810d696f4a32f559e542ceb3ff", "parents": [ "630b6b4371adf09caf6292f42fa210411d8c6852" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Aug 18 16:00:47 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Aug 18 16:00:47 2026 -0400" }, "message": "Bump codeql-action from 4.37.6 to 4.37.7\n" }, { "commit": "630b6b4371adf09caf6292f42fa210411d8c6852", "tree": "7f380cf2ea42cecd8d4de9737eeea6e77229451e", "parents": [ "5de143e4620c30729a4e75fa9c779e5e77911560" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sun Aug 16 16:04:33 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sun Aug 16 16:04:33 2026 -0400" }, "message": "Javadoc\n" }, { "commit": "5de143e4620c30729a4e75fa9c779e5e77911560", "tree": "e78f25b7d95c673f2469bf07437046fe66737b5d", "parents": [ "f45055c397518d5993dde45fabf978983e55596e" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Wed Aug 05 14:13:41 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Wed Aug 05 14:13:41 2026 -0400" }, "message": "Bump actions/setup-java from 5.6.0 to 5.7.0\n" }, { "commit": "f45055c397518d5993dde45fabf978983e55596e", "tree": "979cd24bc1e737adca8fdceb9833bf491f206dae", "parents": [ "3a8a2ae751b12f35f734bbe350c6dab714a30141" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Aug 04 15:58:16 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Aug 04 15:58:16 2026 -0400" }, "message": "Bump github/codeql-action from 4.37.3 to 4.37.6.\n" }, { "commit": "3a8a2ae751b12f35f734bbe350c6dab714a30141", "tree": "9cb0337051c55720fd04546c5d8b112af0d59095", "parents": [ "8194da9fea07c5aa46caead63d265fd3a1e276a8" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sun Aug 02 15:32:43 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sun Aug 02 15:32:43 2026 -0400" }, "message": "Javadoc\n" }, { "commit": "8194da9fea07c5aa46caead63d265fd3a1e276a8", "tree": "518f32f4f807c600cced2b0bb07664d57d63f420", "parents": [ "add7fefecac1eeec1c907a83c2ff17f80aebdd8d" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Jul 30 06:03:07 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Jul 30 06:03:07 2026 -0400" }, "message": "Bump commons-codec:commons-codec from 1.22.0 to 1.22.1.\n" }, { "commit": "add7fefecac1eeec1c907a83c2ff17f80aebdd8d", "tree": "8ad9c21151acb475cd35eb712a7d480cf6875bcc", "parents": [ "357f831aa5b0d485d80511e7281b294d5bacdebe" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Wed Jul 29 08:13:53 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Wed Jul 29 08:13:53 2026 -0400" }, "message": "Bump ossf/scorecard-action from 2.4.3 to 2.4.4.\n" }, { "commit": "357f831aa5b0d485d80511e7281b294d5bacdebe", "tree": "8ae89beeb2a88d50fa63ce61e3995239e4d763bd", "parents": [ "fc0b9db9b059c42b3ddc98f57bf9a28058d5b492" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Jul 28 14:53:39 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Jul 28 14:53:39 2026 -0400" }, "message": "Bump github/codeql-action from 4.37.1 to 4.37.3\n" }, { "commit": "fc0b9db9b059c42b3ddc98f57bf9a28058d5b492", "tree": "c5a5542841a98cf484f1f83c7fd3a4f7b41e3835", "parents": [ "aad1d6ba083f6a9155174ba7969031167bf974e9" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Jul 25 09:49:12 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Jul 25 09:49:12 2026 -0400" }, "message": "Bump actions/checkout from 7.0.0 to 7.0.1\n" }, { "commit": "aad1d6ba083f6a9155174ba7969031167bf974e9", "tree": "67670700e23523d6ee1b4bbbc6f38395e7d3c155", "parents": [ "8943ba32aefe9e9f23e7d4ddb79d59ab5b2494ff" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Wed Jul 22 11:07:53 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Wed Jul 22 11:07:53 2026 -0400" }, "message": "Add messages when throwing NullPointerException.\n" }, { "commit": "8943ba32aefe9e9f23e7d4ddb79d59ab5b2494ff", "tree": "7e5c606e337f067428b64197b7e9cf84ef8f8530", "parents": [ "7daafe00cdb3af0a92969a6442a880ead90f938f" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Jul 21 15:48:29 2026 -0700" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Jul 21 15:48:29 2026 -0700" }, "message": "Bump org.apache.commons:commons-parent from 102 to 103.\n" }, { "commit": "7daafe00cdb3af0a92969a6442a880ead90f938f", "tree": "723b3ef2e504e8471c0d28604b6521da2ebf8efc", "parents": [ "cef1d2d35045ae13e0427482508645e01158cb9b" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Jul 21 13:45:12 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Jul 21 13:45:12 2026 -0400" }, "message": "Bump github/codeql-action from 4.37.0 to 4.37.1\n" }, { "commit": "cef1d2d35045ae13e0427482508645e01158cb9b", "tree": "ba988c5af7cf887f215bb91e1e4d653b7c13ef6e", "parents": [ "8192042472c60d173858e8a19aa441b60a300c16" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Jul 21 09:03:50 2026 -0700" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Jul 21 09:03:50 2026 -0700" }, "message": "Bump com.fasterxml.jackson.core:jackson-databind from 2.22.0 to 2.22.1\n(#646)." }, { "commit": "8192042472c60d173858e8a19aa441b60a300c16", "tree": "3014a8c1ab8fdcee19375090236bdcda4bdb8e53", "parents": [ "ddcd057082b38f6131d2896ac1a035dc61ec84c7" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Jul 21 12:03:05 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jul 21 12:03:05 2026 -0400" }, "message": "Bump com.fasterxml.jackson.core:jackson-databind from 2.22.0 to 2.22.1 (#646)\n\nBumps [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) from 2.22.0 to 2.22.1.\n- [Commits](https://github.com/FasterXML/jackson/commits)\n\n---\nupdated-dependencies:\n- dependency-name: com.fasterxml.jackson.core:jackson-databind\n dependency-version: 2.22.1\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "ddcd057082b38f6131d2896ac1a035dc61ec84c7", "tree": "10c59ce6f85d4151a3ea0456903668afc29b3294", "parents": [ "6eef83683e42021807ed0a30050891322ee61843" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Jul 21 11:45:19 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Jul 21 11:45:19 2026 -0400" }, "message": "Bump actions/setup-java from 5.5.0 to 5.6.0\n" }, { "commit": "6eef83683e42021807ed0a30050891322ee61843", "tree": "dd402fe8cd8165b64fb615ee1ef7ff40ea244c34", "parents": [ "d3a464c9ae931a05e437990f3357380e6d65169d" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Wed Jul 15 14:05:11 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Wed Jul 15 14:05:11 2026 -0400" }, "message": "[CONFIGURATION-857] Preserve duplicate non-String scalar values in\nflatten() (#645)." }, { "commit": "d3a464c9ae931a05e437990f3357380e6d65169d", "tree": "1d8a2e446493825ed3346e30957ae4922de6b66f", "parents": [ "d2ebbf6198ada32bd9bc2d410f2257ccf16d36fd" ], "author": { "name": "María Galbis", "email": "m.galbis.c@gmail.com", "time": "Wed Jul 15 20:02:34 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 15 14:02:34 2026 -0400" }, "message": "[CONFIGURATION-857] Preserve duplicate non-String scalar values in flatten() (#645)\n\n* Enhance flattening logic to handle duplicate scalar values in collections\n\n* Fix invalid whitespace and tabs\n\n* Restore the comment explaining why Path is treated as a scalar\n\n* Reuse the active recursion-path set when flattening array elements, centralize cycle checks for recursive containers, and keep scalar values outside cycle detection\n\n* add coverage for array and mixed-container cycles\n\n* document the expected size calculation in the cyclic list test\n\n* clarify the size calculation formula in the flattening test for scalar values" }, { "commit": "d2ebbf6198ada32bd9bc2d410f2257ccf16d36fd", "tree": "730cb6dd2322cfa93310744f388a6e1214e8369c", "parents": [ "0fb802118bd7711a25ad548201b32b85876643bf" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Mon Jul 13 13:49:20 2026 -0700" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Mon Jul 13 13:49:20 2026 -0700" }, "message": "Bump actions/setup-java from 5.4.0 to 5.5.0\n" }, { "commit": "0fb802118bd7711a25ad548201b32b85876643bf", "tree": "da7f53951424674572932261d270065440ed83d5", "parents": [ "17c458c97a4ed5ca8acd3ab478fe1d3a3fba2abf" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Jul 11 11:21:53 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Jul 11 11:21:53 2026 -0400" }, "message": "Javadoc\n" }, { "commit": "17c458c97a4ed5ca8acd3ab478fe1d3a3fba2abf", "tree": "5561ddc7981cf087654a3da1b4b738431457ef71", "parents": [ "288c40ad8188d1a91af071d680a18eae735488e9" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Jul 11 09:08:23 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Jul 11 09:08:23 2026 -0400" }, "message": "Javadoc\n" }, { "commit": "288c40ad8188d1a91af071d680a18eae735488e9", "tree": "131be3a2cb408c79d490397c9f4723df280c50db", "parents": [ "93c38fec3f1934620348e75574007556b8ae6a21" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Jul 11 08:52:02 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Jul 11 08:52:02 2026 -0400" }, "message": "Javadoc\n" }, { "commit": "93c38fec3f1934620348e75574007556b8ae6a21", "tree": "bdb68c082ebba12e230f735d84c7035f5d956741", "parents": [ "1f5aebde8a00b7ca761b85ed250a9fc714c761f5" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Jul 10 16:45:59 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Jul 10 16:45:59 2026 -0400" }, "message": "Pick up Mockito version from Parent POM\n" }, { "commit": "1f5aebde8a00b7ca761b85ed250a9fc714c761f5", "tree": "c7a3e366fc82e862c44994add4a136a3bb4e2a52", "parents": [ "7fdbd3ed546ad67e10652c760ab985e75e6861f6" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Jul 10 09:08:14 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Jul 10 09:08:14 2026 -0400" }, "message": "Bump github/codeql-action from 4.36.3 to 4.37.0\n" }, { "commit": "7fdbd3ed546ad67e10652c760ab985e75e6861f6", "tree": "ece6af9c417b6979bc60ed63cb0240aeb1557ef7", "parents": [ "fdfb30c1e8cecc4d6303ffe227f44a3ac4651444" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Wed Jul 08 17:48:31 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Wed Jul 08 17:48:31 2026 -0400" }, "message": "Add assertions in\nTestConfigurationInterpolator.testInterpolationDefaultValueNestedDefaultPrefix()\n" }, { "commit": "fdfb30c1e8cecc4d6303ffe227f44a3ac4651444", "tree": "810c38f11672d5494c541d7dc912eba0d34b043e", "parents": [ "27880dd63048c04889581ea1defeadceec4546b8" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Wed Jul 08 16:14:28 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Wed Jul 08 16:14:28 2026 -0400" }, "message": "Bump github/codeql-action from 4.36.2 to 4.36.3\n" }, { "commit": "27880dd63048c04889581ea1defeadceec4546b8", "tree": "9bb888b9fa198cfa4422c5e6863645f303a773a3", "parents": [ "aa898b534e05e05b4746ce2c3713b684f028c054" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Wed Jul 08 15:51:20 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Wed Jul 08 15:51:20 2026 -0400" }, "message": "Add TestConfigurationInterpolator.testInterpolationDefaultValueNestedDefaultPrefix()\n" }, { "commit": "aa898b534e05e05b4746ce2c3713b684f028c054", "tree": "9c6f1b8bb247308807c6e5503311dec9f4913b5c", "parents": [ "a01904bd6d2527eaf37811663a0ee63ecdcf40d8" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Wed Jul 08 15:43:23 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Wed Jul 08 15:43:23 2026 -0400" }, "message": "Add TestConfigurationInterpolator.testInterpolationDefaultValueNestedDefault()" }, { "commit": "a01904bd6d2527eaf37811663a0ee63ecdcf40d8", "tree": "a8baccdf47be89f6d6ad35db818ae6cff5816250", "parents": [ "0b85102657cad939062094c1ce7b88419827d42f" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Jul 04 08:23:22 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sat Jul 04 08:23:22 2026 -0400" }, "message": "Better docs\n" }, { "commit": "0b85102657cad939062094c1ce7b88419827d42f", "tree": "d9ede0536165747f2a6d6f6bc6318ae79c198bec", "parents": [ "bb74fc9da3c7ba71d986557bc8ccbf339363ddb0" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Jul 02 13:46:37 2026 +0000" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Jul 02 13:46:37 2026 +0000" }, "message": "Bump log4j2.version from 2.26.0 to 2.26.1 (#425)." }, { "commit": "bb74fc9da3c7ba71d986557bc8ccbf339363ddb0", "tree": "29d7e49504c4c4c228e407c0a1e478573178946d", "parents": [ "89d260a1d58ea06594b686e39ab12777da4fb777" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Wed Jul 01 23:04:30 2026 +0000" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Wed Jul 01 23:04:30 2026 +0000" }, "message": "Bump slf4j.version from 2.0.17 to 2.0.18 (#644)." }, { "commit": "89d260a1d58ea06594b686e39ab12777da4fb777", "tree": "d4026e30ce42aea69fa315f4d0598aff455bc453", "parents": [ "4ed9fe3362e0f16be9a5955bb3497ffc282cf987" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Jul 01 19:03:57 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 01 19:03:57 2026 -0400" }, "message": "Bump slf4j.version from 2.0.17 to 2.0.18 (#644)\n\nBumps `slf4j.version` from 2.0.17 to 2.0.18.\n\nUpdates `org.slf4j:slf4j-api` from 2.0.17 to 2.0.18\n\nUpdates `org.slf4j:slf4j-ext` from 2.0.17 to 2.0.18\n\nUpdates `org.slf4j:slf4j-log4j12` from 2.0.17 to 2.0.18\n\nUpdates `org.slf4j:slf4j-nop` from 2.0.17 to 2.0.18\n\n---\nupdated-dependencies:\n- dependency-name: org.slf4j:slf4j-api\n dependency-version: 2.0.18\n dependency-type: direct:development\n update-type: version-update:semver-patch\n- dependency-name: org.slf4j:slf4j-ext\n dependency-version: 2.0.18\n dependency-type: direct:development\n update-type: version-update:semver-patch\n- dependency-name: org.slf4j:slf4j-log4j12\n dependency-version: 2.0.18\n dependency-type: direct:development\n update-type: version-update:semver-patch\n- dependency-name: org.slf4j:slf4j-nop\n dependency-version: 2.0.18\n dependency-type: direct:development\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "4ed9fe3362e0f16be9a5955bb3497ffc282cf987", "tree": "0acf853869c82dae3a63b2f82b8aaa473215663a", "parents": [ "8c5a4b8951ca9f630bf3000324c11da76a1a3a62" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Wed Jul 01 23:03:41 2026 +0000" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Wed Jul 01 23:03:41 2026 +0000" }, "message": "Bump com.fasterxml.jackson.core:jackson-databind from 2.21.4 to 2.22.0\n(#641)." }, { "commit": "8c5a4b8951ca9f630bf3000324c11da76a1a3a62", "tree": "74c2055fc0861a25d6abb57879369b5c803f559d", "parents": [ "3be3d951387b4c7f91bd4edfdbdf36aa8077dc52" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Jul 01 19:02:59 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 01 19:02:59 2026 -0400" }, "message": "Bump com.fasterxml.jackson.core:jackson-databind from 2.21.4 to 2.22.0 (#641)\n\nBumps [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) from 2.21.4 to 2.22.0.\n- [Commits](https://github.com/FasterXML/jackson/commits)\n\n---\nupdated-dependencies:\n- dependency-name: com.fasterxml.jackson.core:jackson-databind\n dependency-version: 2.22.0\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "3be3d951387b4c7f91bd4edfdbdf36aa8077dc52", "tree": "53b7b52631efd9c1ed35fc09d731886f007d7ef8", "parents": [ "b34b9e28b0543c3be3eb1691ac6681504fad6be4" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Wed Jul 01 23:02:39 2026 +0000" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Wed Jul 01 23:02:39 2026 +0000" }, "message": "Bump org.dbunit:dbunit from 3.0.0 to 3.2.0 (#643)." }, { "commit": "b34b9e28b0543c3be3eb1691ac6681504fad6be4", "tree": "18b0ba5a0bca0b838be33be61bb5febc19cf37fc", "parents": [ "f9331dfac9ca7068552708b35c23a528bcaf70c8" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Jul 01 19:01:51 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 01 19:01:51 2026 -0400" }, "message": "Bump org.dbunit:dbunit from 3.0.0 to 3.2.0 (#643)\n\nBumps [org.dbunit:dbunit](https://github.com/dbunit/dbunit-extension) from 3.0.0 to 3.2.0.\n- [Commits](https://github.com/dbunit/dbunit-extension/compare/dbunit-3.0.0...dbunit-3.2.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.dbunit:dbunit\n dependency-version: 3.2.0\n dependency-type: direct:development\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "f9331dfac9ca7068552708b35c23a528bcaf70c8", "tree": "74b53bd5ff1e375df6008a400cc1bc0539c880b3", "parents": [ "ef5797e81c927bfcd10a7110373c5811434b5089" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Jun 30 20:50:09 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Jun 30 20:50:09 2026 -0400" }, "message": "Bump actions/setup-java from 5.3.0 to 5.4.0\n" }, { "commit": "ef5797e81c927bfcd10a7110373c5811434b5089", "tree": "4ab83ee54b128620ec2ec3b3f1b8e28fe36cef23", "parents": [ "3ddafe0bc1d64cd7a4b6b700a2236fb308cb3a68" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Jun 30 13:57:16 2026 +0000" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue Jun 30 13:57:16 2026 +0000" }, "message": "Javadoc\n" }, { "commit": "3ddafe0bc1d64cd7a4b6b700a2236fb308cb3a68", "tree": "69bf6ada1dc4a49790572b711738ba24029fd0cd", "parents": [ "3984bd03a2e4028c69341610b8430cc66f3dadbe" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Mon Jun 29 07:29:49 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Mon Jun 29 07:29:49 2026 -0400" }, "message": "Bump actions/cache from 6.0.0 to 6.1.0\n" }, { "commit": "3984bd03a2e4028c69341610b8430cc66f3dadbe", "tree": "556975248a1f8f2e5f3f050a8ca8df739ee4c380", "parents": [ "9589f8188988439a952c10a4cf9e85cd0b91ae54" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Jun 25 18:23:55 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Jun 25 18:23:55 2026 -0400" }, "message": "Bump actions/cache from 5.0.5 to 6.0.0.\n" }, { "commit": "9589f8188988439a952c10a4cf9e85cd0b91ae54", "tree": "f8fbae4f05627abf7407e3957a8a2a928e326ed2", "parents": [ "5b9a1133a3f1522580aa16d618065ad56257ea95" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Mon Jun 22 07:32:02 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Mon Jun 22 07:32:02 2026 -0400" }, "message": "Bump actions/setup-java from 5.2.0 to 5.3.0\n" }, { "commit": "5b9a1133a3f1522580aa16d618065ad56257ea95", "tree": "5272f44db33aee51b2061654dd90dda86a75edf7", "parents": [ "6a79fe81397058e7c2bb448a116e01d9d378e9df" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Jun 19 07:28:14 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Jun 19 07:28:14 2026 -0400" }, "message": "Bump actions/checkout from 6.0.3 to 7.0.0.\n" }, { "commit": "6a79fe81397058e7c2bb448a116e01d9d378e9df", "tree": "6506874b59734cd89e808537bafb66f50b9a2dcd", "parents": [ "8fd02ca257d77fc2e0b5fca475a898a8abe0d85a" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Wed Jun 17 20:40:50 2026 +0000" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Wed Jun 17 20:40:50 2026 +0000" }, "message": "Bump commons-logging:commons-logging from 1.3.6 to 1.4.0.\n" }, { "commit": "8fd02ca257d77fc2e0b5fca475a898a8abe0d85a", "tree": "14a3ab24a0a2d04fb1223103d7a25bef35db0a7a", "parents": [ "3bbd43b08aef4836b6cb3edc9b6983be6730e338" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Jun 11 14:23:33 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Jun 11 14:23:33 2026 -0400" }, "message": "Update legacy GitHub links in CONTRIBUTING.md\n" }, { "commit": "3bbd43b08aef4836b6cb3edc9b6983be6730e338", "tree": "c68e6d2a1de1d10dc5225d1fef191553751bfbcd", "parents": [ "f7611fe01d6341e811be11e0cde70ec707934973" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Jun 11 09:39:33 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu Jun 11 09:39:33 2026 -0400" }, "message": "Bump org.apache.commons:commons-parent from 101 to 102.\n" }, { "commit": "f7611fe01d6341e811be11e0cde70ec707934973", "tree": "2aaed6df6d96068b2922f842b847fa650c614d75", "parents": [ "39c54f25cbaab7b5db118fc0ff1623eb92497612" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sun Jun 07 10:12:51 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sun Jun 07 10:12:51 2026 -0400" }, "message": "Bump GH CI actions/dependency-review-action from 4.9.0 to 5.0.0\n" }, { "commit": "39c54f25cbaab7b5db118fc0ff1623eb92497612", "tree": "2240c4300b6ca9e59249be0e6fd13723ad59649e", "parents": [ "e31c70c8b91791e83a34e6e732d6ec617fc22821" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sun Jun 07 10:08:57 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Sun Jun 07 10:08:57 2026 -0400" }, "message": "Bump GH CI actions/checkout from 6.0.2 to 6.0.3\n" }, { "commit": "e31c70c8b91791e83a34e6e732d6ec617fc22821", "tree": "84bc5c00fa50b78402225fa152488cf69ae75e7e", "parents": [ "c169b0323a984fbbaaa6cacb28b97d314cc5d793" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Jun 05 11:43:57 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Jun 05 11:43:57 2026 -0400" }, "message": "Bump org.apache.commons:commons-parent from 100 to 101" }, { "commit": "c169b0323a984fbbaaa6cacb28b97d314cc5d793", "tree": "6b6c86b02e11bf6566c68381af0b8b1dd7120d6b", "parents": [ "7e4fbb72737a8432a4e34364eab35b21822e0a69" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Jun 05 07:28:00 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri Jun 05 07:28:00 2026 -0400" }, "message": "Bump github/codeql-action from 4.36.0 to 4.36.2\n" }, { "commit": "7e4fbb72737a8432a4e34364eab35b21822e0a69", "tree": "d1db063041ac79eb8b55649387f90e99a07eaf98", "parents": [ "0c9b8f756988ceaa5165ed3dc1586ed17902988f" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri May 29 10:16:45 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Fri May 29 10:16:45 2026 -0400" }, "message": "Bump com.fasterxml.jackson.core:jackson-databind from 2.21.3 to 2.21.4\n" }, { "commit": "0c9b8f756988ceaa5165ed3dc1586ed17902988f", "tree": "93247688cb20a40e3053bfc7a0ca441fbc111f59", "parents": [ "2d79be14be8c5c3672ac8983a8e5c89d2db7a339" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Wed May 27 16:51:44 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Wed May 27 16:51:44 2026 -0400" }, "message": "Bump github/codeql-action from 4.35.5 to 4.36.0\n" }, { "commit": "2d79be14be8c5c3672ac8983a8e5c89d2db7a339", "tree": "4c166fb46807d74883258d62bb6c2d7ca071a08c", "parents": [ "563b1f2fb86a4a43bf1eba8b865a5c88fcbd5363" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue May 26 20:15:19 2026 +0000" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue May 26 20:15:19 2026 +0000" }, "message": "Updates for the next release\n" }, { "commit": "563b1f2fb86a4a43bf1eba8b865a5c88fcbd5363", "tree": "571678ab76766e5149a46b2da4f02c6dde6388a2", "parents": [ "be7bad719ef989805d2d8bf64ccc4fdc27c9872b" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue May 26 20:03:04 2026 +0000" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue May 26 20:03:04 2026 +0000" }, "message": "Updates for the next release\n" }, { "commit": "be7bad719ef989805d2d8bf64ccc4fdc27c9872b", "tree": "3bd1c6b6d6d5ee6fe962870a3072beaa5b7ec354", "parents": [ "51f8140ab63e2904c6a5c46fecf841fd5e34c492" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue May 26 20:00:02 2026 +0000" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Tue May 26 20:00:02 2026 +0000" }, "message": "Bump to next development version\n" }, { "commit": "51f8140ab63e2904c6a5c46fecf841fd5e34c492", "tree": "1c807aef732e6cde86da70931b3d404dc4f958e7", "parents": [ "97b4975c7e8991f6f80e77e686b4b94cc0ed1a2c" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu May 21 14:16:03 2026 +0000" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu May 21 14:16:03 2026 +0000" }, "message": "Prepare for the release candidate 2.15.1 RC1\n" }, { "commit": "97b4975c7e8991f6f80e77e686b4b94cc0ed1a2c", "tree": "e66078e37e57ffd94ff163bdbec0055fbeb37b93", "parents": [ "2797aee80fca2a870d80a30c85127ca0d8aa801e" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu May 21 12:57:59 2026 +0000" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu May 21 12:57:59 2026 +0000" }, "message": "Prepare for the next release candidate\n" }, { "commit": "2797aee80fca2a870d80a30c85127ca0d8aa801e", "tree": "3d3c8309e6b2a2024ff00f314f986b04d3fe8835", "parents": [ "0295144cfafe379071d98ea5ec6d73d72f907e3e" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu May 21 08:56:50 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu May 21 08:56:50 2026 -0400" }, "message": "Avoid NPE when combined location strategy sub strategies is immutable\nlist (#639)" }, { "commit": "0295144cfafe379071d98ea5ec6d73d72f907e3e", "tree": "be7b814b77780bd7ed29244b97385b7b0f948944", "parents": [ "694c5c2ce092e44027795a1659a2cbdbb2d408a9" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu May 21 08:56:34 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu May 21 08:56:34 2026 -0400" }, "message": "Avoid NPE when combined location strategy sub strategies is immutable\nlist (#639)" }, { "commit": "694c5c2ce092e44027795a1659a2cbdbb2d408a9", "tree": "796deebf42ab3fe1789831286fa85f4d34f0af9b", "parents": [ "a5c8ed4abb8f3f9e90a82b0a9af884c4068208ff" ], "author": { "name": "Wei Huang", "email": "38430224+weih-kahoot@users.noreply.github.com", "time": "Thu May 21 14:55:52 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu May 21 08:55:52 2026 -0400" }, "message": "Avoid NPE when combined location strategy sub strategies is immutable list (#639)" }, { "commit": "a5c8ed4abb8f3f9e90a82b0a9af884c4068208ff", "tree": "b98bb1ae1efbd4b6d59d7a41a5ef087a522ac930", "parents": [ "6ef60965b273110bd83068312420c32421fef11d" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu May 21 08:55:29 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu May 21 08:55:29 2026 -0400" }, "message": "Vote canceled for incoming PR, RC2 will be next.\n" }, { "commit": "6ef60965b273110bd83068312420c32421fef11d", "tree": "d5eef453ad80738ff370814fc92980e42148c0c5", "parents": [ "118b09a75072efa8ae7ca05925ec3de864059ce9" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Wed May 20 06:43:40 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Wed May 20 06:43:40 2026 -0400" }, "message": "Bump github/codeql-action from 4.35.4 to 4.35.5\n" }, { "commit": "118b09a75072efa8ae7ca05925ec3de864059ce9", "tree": "09a17c8d16e3d1fe36d71eedba9bd34ef49863be", "parents": [ "98e866d6e341181e382c2c06b066a4cc74f94e1c" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Mon May 18 16:53:02 2026 +0000" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Mon May 18 16:53:02 2026 +0000" }, "message": "Prepare for the next release candidate\n" }, { "commit": "98e866d6e341181e382c2c06b066a4cc74f94e1c", "tree": "f664aef99ad0569bde4ba057c3e0295e176288a1", "parents": [ "0ce4133c03625d2a7a1c0ba98f656bde3cb4b620" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Mon May 18 12:42:47 2026 -0400" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Mon May 18 12:42:47 2026 -0400" }, "message": "Bump org.apache.commons:commons-parent from 99 to 100\n" }, { "commit": "0ce4133c03625d2a7a1c0ba98f656bde3cb4b620", "tree": "cb8991887968b97e19ab3c71eb49146af78e1e36", "parents": [ "e2a1fe7a9585f281a7bc652feb8620477ee02d60" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu May 14 11:26:26 2026 +0000" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu May 14 11:26:26 2026 +0000" }, "message": "Document CVE-2026-45205\n" }, { "commit": "e2a1fe7a9585f281a7bc652feb8620477ee02d60", "tree": "ac9c8897c7dc32b6e94bed887bf53bbbb0dd9c40", "parents": [ "31ed6d4b1c95df1cc3fa736a6ec1658ff89a656f" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu May 14 11:20:14 2026 +0000" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu May 14 11:20:14 2026 +0000" }, "message": "Document CVE-2026-45205\n" }, { "commit": "31ed6d4b1c95df1cc3fa736a6ec1658ff89a656f", "tree": "65b1c1dd851ae3f955a3bfa00096a33f50a23186", "parents": [ "a31df6d0ed66b6ccb519741fb16c16f99f582b4c" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu May 14 11:14:36 2026 +0000" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu May 14 11:14:36 2026 +0000" }, "message": "Document CVE-2026-45205\n" }, { "commit": "a31df6d0ed66b6ccb519741fb16c16f99f582b4c", "tree": "eedcb0066341614b18eca5b017b9331d32500cbe", "parents": [ "4d57c189b4e0219511f3d111be09cd7af3ddef6a" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu May 14 10:35:45 2026 +0000" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu May 14 10:35:45 2026 +0000" }, "message": "The artifact commons-io:commons-io is a normal dependency.\n" }, { "commit": "4d57c189b4e0219511f3d111be09cd7af3ddef6a", "tree": "87a3cddb2f882f10a9992bdcaa6af162f47d3ebf", "parents": [ "2ad1bd5f61cc2fecedf6592df4ac9f47def3581e" ], "author": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu May 14 09:58:45 2026 +0000" }, "committer": { "name": "Gary Gregory", "email": "garydgregory@gmail.com", "time": "Thu May 14 09:58:45 2026 +0000" }, "message": "[CONFIGURATION-856] commons-io is a normal dependency\n" } ], "next": "2ad1bd5f61cc2fecedf6592df4ac9f47def3581e" }