1. 694e05f Bump cxf.tomcat.version from 11.0.24 to 11.0.25 (#3380) by dependabot[bot] · 25 hours ago main
  2. 4797b9ab Bump org.hibernate.validator:hibernate-validator (#3378) by dependabot[bot] · 2 days ago
  3. 4fdf9fe fix Invocation.Builder.property() not visible to HTTP transport (#3375) by Neena P Jacob · 2 days ago
  4. 2a90ce2 Bump org.apache.commons:commons-jexl3 from 3.6.4 to 3.7.0 (#3292) by dependabot[bot] · 2 days ago
  5. e7b86b9 Bump org.apache.maven.plugins:maven-jar-plugin from 3.5.0 to 3.5.1 (#3376) by dependabot[bot] · 3 days ago
  6. a588b3f Bump org.apache.httpcomponents.client5:httpclient5 from 5.6.2 to 5.6.4 in /parent (#3371) by dependabot[bot] · 4 days ago
  7. cefe44b Bump cxf.johnzon.version from 2.1.0 to 2.2.0 (#3374) by dependabot[bot] · 6 days ago
  8. d8f201b Bump org.webjars:swagger-ui from 5.32.8 to 5.32.11 (#3368) by dependabot[bot] · 7 days ago
  9. 58fe3d1 CXF-9240 - OAuthJSONProvider.appendJsonPair() does not escape JSON string values (#3367) by Colm O hEigeartaigh · 7 days ago
  10. a272d6c Fix SHA comments by Colm O hEigeartaigh · 8 days ago
  11. 6f3e9de Bump org.apache.groovy:groovy from 5.0.7 to 5.0.8 (#3365) by dependabot[bot] · 8 days ago
  12. c21d5d3 Porting locking fixes to revokeRefreshToken (#3364) by Colm O hEigeartaigh · 8 days ago
  13. 6a24c19 Bump versions in coverage-report and cxf-rest-tck by Andriy Redko · 9 days ago
  14. 78910f8 Bump cxf.openwebbeans.version from 4.1.0 to 4.1.1 (#3363) by dependabot[bot] · 9 days ago
  15. 90206a2 Fix some atomicity issues in removeCodeGrant (#3358) by Colm O hEigeartaigh · 9 days ago
  16. 4d814b8 Revert "Update OpenTelemetry to 1.65.0" by Andriy Redko · 9 days ago
  17. 29d3443 Update OpenTelemetry to 1.65.0 by Andriy Redko · 10 days ago
  18. 854c678 Update JUnit Jupiter to 6.1.3 by Andriy Redko · 10 days ago
  19. 32007a0 Update AsyncHttpClient to 3.0.13 by Andriy Redko · 10 days ago
  20. d1a09b3 Update cxf-build-utils to 4.1.5-SNAPSHOT by Andriy Redko · 10 days ago
  21. 3ac37bc Fixup action comments using pinact by Colm O hEigeartaigh · 10 days ago
  22. 0bf19d9 Bump github/codeql-action/init from 4.37.3 to 4.37.6 (#3362) by dependabot[bot] · 10 days ago
  23. 2cacc27 Bump github/codeql-action/upload-sarif from 4.37.3 to 4.37.6 (#3360) by dependabot[bot] · 10 days ago
  24. 4516b07 Bump cxf.bcprov.version from 1.84 to 1.85 (#3356) by dependabot[bot] · 10 days ago
  25. d2b1efb Bump actions/setup-java from 5.6.0 to 5.7.0 (#3361) by dependabot[bot] · 10 days ago
  26. 1d015b2 Fix max_age check in OidcClientCodeRequestFilter (#3357) by Colm O hEigeartaigh · 10 days ago
  27. 1acb713 Update Swagger Core to 2.2.53 by Andriy Redko · 10 days ago
  28. 04045cd Update Jetty to 12.1.12 by Andriy Redko · 10 days ago
  29. 2cdbf70 Update Netty to 4.2.17.Final by Andriy Redko · 10 days ago
  30. 24c06e0 Bump ch.qos.logback:logback-classic from 1.5.38 to 1.6.1 (#3355) by dependabot[bot] · 2 weeks ago
  31. 28da8f1 Bump cxf.tika.version from 3.3.1 to 3.3.2 (#3354) by dependabot[bot] · 2 weeks ago
  32. 457dfbe [CXF-9234]Concurrent DynamicClientFactory.createClient for the same W… (#3350) by Freeman(Yue) Fang · 2 weeks ago
  33. c37c9ae Bump org.apache.felix:maven-bundle-plugin from 6.0.2 to 6.1.0 (#3353) by dependabot[bot] · 2 weeks ago
  34. 5755d9f Bump ossf/scorecard-action from 2.4.3 to 2.4.4 (#3351) by dependabot[bot] · 2 weeks ago
  35. 8ae7149 Bump cxf.hibernate.em.version from 7.4.4.Final to 7.4.5.Final (#3352) by dependabot[bot] · 2 weeks ago
  36. 8df5c62 Bump org.bouncycastle:bc-fips from 2.1.2 to 2.1.3 (#3334) by dependabot[bot] · 3 weeks ago
  37. 7c0c411 Fix flaky SSE system tests (#3349) by Colm O hEigeartaigh · 3 weeks ago
  38. 1022175 [maven-release-plugin] prepare for next development iteration by Freeman Fang · 3 weeks ago
  39. 3325939 [maven-release-plugin] prepare release cxf-4.2.3 by Freeman Fang · 3 weeks ago cxf-4.2.3
  40. 54f2cdc avoid using snapshot cxf.build-utils.version by Freeman Fang · 3 weeks ago
  41. 6512e0a update CXF 4.2.3 release notes by Freeman Fang · 3 weeks ago
  42. 396096f Add a lock when revoking tokens (#3348) by Colm O hEigeartaigh · 3 weeks ago
  43. 61ca70f Fixing security versions by Colm O hEigeartaigh · 3 weeks ago
  44. c95fb63 Make sure the refresh token client matches that of the authenticated client (#3346) by Colm O hEigeartaigh · 3 weeks ago
  45. df57957 Check if tokens have been revoked first in DefaultEncryptingOAuthDataProvider (#3347) by Colm O hEigeartaigh · 3 weeks ago
  46. e18116b Make sure LazyAttachmentCollection respects max attachment count in all cases (#3344) by Andriy Redko · 3 weeks ago
  47. 3df6120 Honor the set-remove boolean in DefaultEncryptingCodeDataProvider (#3345) by Colm O hEigeartaigh · 3 weeks ago
  48. dd9af5c match saml sso issuer exactly instead of by prefix (#3281) by Javid Khan · 3 weeks ago
  49. 7f4cb4e Disable JMS ObjectMessage deserialization by default (#3337) by Colm O hEigeartaigh · 3 weeks ago
  50. c040fef Bump github/codeql-action/upload-sarif from 4.37.0 to 4.37.3 (#3340) by dependabot[bot] · 3 weeks ago
  51. bd9f34a Bump github/codeql-action/init from 4.37.0 to 4.37.3 (#3339) by dependabot[bot] · 3 weeks ago
  52. 6db9f73 Bump actions/checkout from 7.0.0 to 7.0.1 (#3338) by dependabot[bot] · 3 weeks ago
  53. 1695c05 Default to sending binary JMS messages as BytesMessages from now on, make it configurable (#3325) by Colm O hEigeartaigh · 4 weeks ago
  54. 4aee04c Update Neethi to 3.2.3 (#3336) by Colm O hEigeartaigh · 4 weeks ago
  55. 4a3901b Update Jettison to 1.5.7 (#3335) by Colm O hEigeartaigh · 4 weeks ago
  56. 5ec1123 Fix ExecutorService leak in WS-RM oneway tests (#2963) by Guillaume Nodet · 4 weeks ago
  57. 26dc065 CXF-9223 - Disable audienceIsEndpointAddress on main only (#3332) by Colm O hEigeartaigh · 4 weeks ago
  58. 71ec1d3 CXF-9223 - Improve prefix matching for OAuth audience URIs (#3331) by Colm O hEigeartaigh · 4 weeks ago
  59. 10a34cb Bump com.puppycrawl.tools:checkstyle from 13.7.0 to 13.8.0 (#3329) by dependabot[bot] · 4 weeks ago
  60. 62623da Perform validation for OIDC self-issued tokens (#3327) by Colm O hEigeartaigh · 4 weeks ago
  61. faf40ba CXF-9225 - Enforce nonce for the hybrid case (#3328) by Colm O hEigeartaigh · 4 weeks ago
  62. eca4abb Bump org.graalvm.buildtools:native-maven-plugin from 1.1.4 to 1.1.5 (#3326) by dependabot[bot] · 4 weeks ago
  63. 4a2ec34 Validate redirect URIs according to OpenID Connect Dynamic Client Registration 1.0 specification (#3318) by Andriy Redko · 4 weeks ago
  64. ef597b0 Read WSDL imports through CXF's StaxUtils instead of WSDL4J (#3323) by Colm O hEigeartaigh · 4 weeks ago
  65. c1d7602 Bump org.graalvm.buildtools:native-maven-plugin from 1.1.3 to 1.1.4 (#3324) by dependabot[bot] · 4 weeks ago
  66. 0008935 For SAML, require that the TLS client certificate subject matches that of the SAML Assertion (#3322) by Colm O hEigeartaigh · 4 weeks ago
  67. 6061f35 Bump actions/setup-java from 5.5.0 to 5.6.0 (#3319) by dependabot[bot] · 4 weeks ago
  68. 924de91 Bump cxf.junit6.version from 6.1.1 to 6.1.2 (#3320) by dependabot[bot] · 4 weeks ago
  69. fd3cc5f Don't perpetuate security sensitive values from the JWT (#3317) by Colm O hEigeartaigh · 4 weeks ago
  70. 413d75e Enforce TLS client certificate and store the application certificates for dynamic registration (#3316) by Colm O hEigeartaigh · 4 weeks ago
  71. 0607af8 Make sure MessageContextImpl respects the limit to the maximum number of attachments to be collected (#3311) by Andriy Redko · 5 weeks ago
  72. c409f44 Filter claims by granted scopes for the IdToken case (#3304) by Colm O hEigeartaigh · 5 weeks ago
  73. 89e1fa8 Bump cxf.jackson.version from 3.2.0 to 3.2.1 (#3315) by dependabot[bot] · 5 weeks ago
  74. 1d6be7f Bump cxf.opentelemetry.version from 1.63.0 to 1.64.0 (#3314) by dependabot[bot] · 5 weeks ago
  75. 45685c0 Bump ch.qos.logback:logback-classic from 1.5.37 to 1.5.38 (#3313) by dependabot[bot] · 5 weeks ago
  76. dad4249 Bump io.opentelemetry.semconv:opentelemetry-semconv (#3312) by dependabot[bot] · 5 weeks ago
  77. 7564c70 Bump github/codeql-action/analyze from 4.36.2 to 4.37.0 (#3308) by dependabot[bot] · 5 weeks ago
  78. 9ade17c Bump github/codeql-action/upload-sarif from 4.36.2 to 4.37.0 (#3305) by dependabot[bot] · 5 weeks ago
  79. 29759b7 Bump actions/setup-java from 5.4.0 to 5.5.0 (#3309) by dependabot[bot] · 5 weeks ago
  80. 3682dd9 Bump org.hibernate.validator:hibernate-validator (#3306) by dependabot[bot] · 5 weeks ago
  81. da5edcc Add maxSize to BinaryDataProvider so the payload size could be constrained (to 1Gb by default) (#3301) by Andriy Redko · 6 weeks ago
  82. 16ac0e4 [CXF-9229] Add PQC TLS 1.3 support via X25519MLKEM768 hybrid KEM (#3299) by Freeman(Yue) Fang · 6 weeks ago
  83. 7a12ad6 Bump cxf.hibernate.em.version from 7.4.3.Final to 7.4.4.Final (#3302) by dependabot[bot] · 6 weeks ago
  84. 3fa2ffd Disallow a dynamic registration client from requesting scopes without validation (#3297) by Colm O hEigeartaigh · 6 weeks ago
  85. 2a508d5 Plug URIResolver into EndpointReferenceUtils (#3296) by Colm O hEigeartaigh · 6 weeks ago
  86. 8ab0d8b Fix bug with SAML clientAddress (#3298) by Colm O hEigeartaigh · 6 weeks ago
  87. 42fafe5 Put log messages and SOAP Fault messages to a resource bundle so that downstream intergations of CXF can hint about their own configuration parameters (#3300) by Peter Palaga · 6 weeks ago
  88. 40bbcd8 Update Jetty to 12.1.11 by Andriy Redko · 6 weeks ago
  89. db94503 Bump org.apache.camel.springboot:camel-spring-boot-dependencies (#3285) by dependabot[bot] · 6 weeks ago
  90. a364904 CXF-9230: Update to Spring Boot 4.1 release line (#3040) by Andriy Redko · 6 weeks ago
  91. 0cc2bca Bump cxf.tomcat.version from 11.0.23 to 11.0.24 (#3295) by dependabot[bot] · 6 weeks ago
  92. 6af78b8 Enforce that Access tokens only are accepted in JwtAccessTokenValidator (#3294) by Colm O hEigeartaigh · 6 weeks ago
  93. 2f715e9 Plug URIResolver into StaxUtils (#3293) by Colm O hEigeartaigh · 6 weeks ago
  94. ff845cc Bump org.eclipse.persistence:org.eclipse.persistence.moxy (#3286) by dependabot[bot] · 6 weeks ago
  95. d8009cd Set setReuseAddress on the test socket to try to reduce port conflicts (#3290) by Colm O hEigeartaigh · 6 weeks ago
  96. 64f8929 Switch AbstractJwtHandler to require that the subject = the client Id by default (#3291) by Colm O hEigeartaigh · 6 weeks ago
  97. c2c5619 Encode LDAP query parameter names as well (#3288) by Colm O hEigeartaigh · 6 weeks ago
  98. 5091883 Plug URIResolver into AttachmentUtil (#3289) by Colm O hEigeartaigh · 6 weeks ago
  99. 0b1e3f5 Update Netty to 4.2.16.Final by Andriy Redko · 6 weeks ago
  100. 12607f1 Bump com.puppycrawl.tools:checkstyle from 13.6.0 to 13.7.0 (#3287) by dependabot[bot] · 6 weeks ago