)]}' { "log": [ { "commit": "396096f84930e1924477e5975c2e57d779527e48", "tree": "c520ce9e2979fd0a6f328eb3c4d60420723727ce", "parents": [ "61ca70fdbb73e40906093dc2ecace271fc6ff4df" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Wed Jul 29 16:28:20 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 29 16:28:20 2026 +0100" }, "message": "Add a lock when revoking tokens (#3348)\n\n* Add a lock when revoking tokens\n\n* Apply suggestion from @reta\n\nCo-authored-by: Andriy Redko \u003cdrreta@gmail.com\u003e\n\n* Fixup\n\n---------\n\nCo-authored-by: Andriy Redko \u003cdrreta@gmail.com\u003e" }, { "commit": "61ca70fdbb73e40906093dc2ecace271fc6ff4df", "tree": "45db6f28ed8f3d206cdb2fea4979e981dd4207d2", "parents": [ "c95fb6366930ce16c32481f230a5afa89489bd25" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Wed Jul 29 11:56:07 2026 +0100" }, "committer": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Wed Jul 29 11:56:07 2026 +0100" }, "message": "Fixing security versions\n" }, { "commit": "c95fb6366930ce16c32481f230a5afa89489bd25", "tree": "d8b0e4fa6ed4b1cf8d6f2cd2bb5e1b333fecf2fd", "parents": [ "df5795760b3a9d34bcbbdede1b62062ab47ec8f0" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Wed Jul 29 11:24:18 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 29 11:24:18 2026 +0100" }, "message": "Make sure the refresh token client matches that of the authenticated client (#3346)" }, { "commit": "df5795760b3a9d34bcbbdede1b62062ab47ec8f0", "tree": "02dd9cced3099bedc60373229749e8ae1d669aee", "parents": [ "e18116b94588013b236791abfadd995122fb42c8" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Wed Jul 29 11:23:49 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 29 11:23:49 2026 +0100" }, "message": "Check if tokens have been revoked first in DefaultEncryptingOAuthDataProvider (#3347)" }, { "commit": "e18116b94588013b236791abfadd995122fb42c8", "tree": "20403ef7f97f71381b4da0b624adb95ef3447fa5", "parents": [ "3df6120893d2942d98bc5c631d5aff81e7fe434e" ], "author": { "name": "Andriy Redko", "email": "drreta@gmail.com", "time": "Tue Jul 28 15:54:59 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jul 28 15:54:59 2026 -0400" }, "message": "Make sure LazyAttachmentCollection respects max attachment count in all cases (#3344)" }, { "commit": "3df6120893d2942d98bc5c631d5aff81e7fe434e", "tree": "5348a8694918e0db51299548e3566b32bdbddd31", "parents": [ "dd9af5c9ae419ac410bd308c49a3e09706232a30" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Tue Jul 28 16:36:55 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jul 28 16:36:55 2026 +0100" }, "message": "Honor the set-remove boolean in DefaultEncryptingCodeDataProvider (#3345)" }, { "commit": "dd9af5c9ae419ac410bd308c49a3e09706232a30", "tree": "67d31055f29a2226bb3ead4a3355aebd92995d76", "parents": [ "7f4cb4e3b765e632216fb7fc8acfa2c64e2179bf" ], "author": { "name": "Javid Khan", "email": "dxbjavid@gmail.com", "time": "Tue Jul 28 17:00:16 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jul 28 07:30:16 2026 -0400" }, "message": "match saml sso issuer exactly instead of by prefix (#3281)\n\n* match saml sso issuer exactly instead of by prefix\n\n* restrict saml sso issuer prefix match to same origin\n\nkeep prefix compatibility for the entityID-as-endpoint case but require\nurl-based issuer values to share the scheme, host and port of the\nconfigured issuer idp, and add an enforceStrictIssuerMatch flag for\ndeployments that want exact matching only\n\nSigned-off-by: Javid Khan \u003cdxbjavid@gmail.com\u003e\n\n---------\n\nSigned-off-by: Javid Khan \u003cdxbjavid@gmail.com\u003e" }, { "commit": "7f4cb4e3b765e632216fb7fc8acfa2c64e2179bf", "tree": "ad0d373351ac538b82dcd9de98d8b6fde53c9cd4", "parents": [ "c040fefbb36209ca472ae8cbf104153f23d99df8" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Mon Jul 27 15:34:19 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jul 27 15:34:19 2026 +0100" }, "message": "Disable JMS ObjectMessage deserialization by default (#3337)" }, { "commit": "c040fefbb36209ca472ae8cbf104153f23d99df8", "tree": "11ba7b8ce5df111ed8fd1ccea745391f3ed73a08", "parents": [ "bd9f34a61b0325a9568c5e4e680eaac8acc8acd5" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jul 27 09:45:55 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jul 27 09:45:55 2026 -0400" }, "message": "Bump github/codeql-action/upload-sarif from 4.37.0 to 4.37.3 (#3340)\n\nBumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 4.37.0 to 4.37.3.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/99df26d4f13ea111d4ec1a7dddef6063f76b97e9...e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action/upload-sarif\n dependency-version: 4.37.3\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "bd9f34a61b0325a9568c5e4e680eaac8acc8acd5", "tree": "7d670154542e42740f21e47de90f14a49d971b3b", "parents": [ "6db9f73fdf1cf9357c342afecff1bba69cb95325" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jul 27 09:45:34 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jul 27 09:45:34 2026 -0400" }, "message": "Bump github/codeql-action/init from 4.37.0 to 4.37.3 (#3339)\n\n* Bump github/codeql-action/init from 4.37.0 to 4.37.3\n\nBumps [github/codeql-action/init](https://github.com/github/codeql-action) from 4.37.0 to 4.37.3.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/99df26d4f13ea111d4ec1a7dddef6063f76b97e9...e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action/init\n dependency-version: 4.37.3\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\n\n* Apply suggestion from @reta\n\n---------\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e\nCo-authored-by: Andriy Redko \u003cdrreta@gmail.com\u003e" }, { "commit": "6db9f73fdf1cf9357c342afecff1bba69cb95325", "tree": "88a5f0fc2b1f1ccd20a9ceab085d93cbabd3a87f", "parents": [ "1695c05def5506db2c94de68f9ce835a18c1107d" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jul 27 08:33:31 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jul 27 08:33:31 2026 -0400" }, "message": "Bump actions/checkout from 7.0.0 to 7.0.1 (#3338)\n\nBumps [actions/checkout](https://github.com/actions/checkout) from 7.0.0 to 7.0.1.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0...3d3c42e5aac5ba805825da76410c181273ba90b1)\n\n---\nupdated-dependencies:\n- dependency-name: actions/checkout\n dependency-version: 7.0.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "1695c05def5506db2c94de68f9ce835a18c1107d", "tree": "56f3badfbbd364d9f586767aa4b763b48051783b", "parents": [ "4aee04cb8dd92e86e7a9b8737b2ef3539266a3cb" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Fri Jul 24 15:37:42 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jul 24 15:37:42 2026 +0100" }, "message": "Default to sending binary JMS messages as BytesMessages from now on, make it configurable (#3325)" }, { "commit": "4aee04cb8dd92e86e7a9b8737b2ef3539266a3cb", "tree": "ce54b20228a7cea6010f5b8536121b3fd7a69f2b", "parents": [ "4a3901b2d6f2805eed2d4c011cde135b50d8d5ad" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Fri Jul 24 14:42:21 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jul 24 14:42:21 2026 +0100" }, "message": "Update Neethi to 3.2.3 (#3336)" }, { "commit": "4a3901b2d6f2805eed2d4c011cde135b50d8d5ad", "tree": "26796e5ca17e64162a8a73874b7bda70ed0bd40a", "parents": [ "5ec112363bf117c842c8d4d54b6cd59c231dc704" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Fri Jul 24 14:41:43 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jul 24 14:41:43 2026 +0100" }, "message": "Update Jettison to 1.5.7 (#3335)" }, { "commit": "5ec112363bf117c842c8d4d54b6cd59c231dc704", "tree": "3cb9d5b0d41cfce3737055b8e9ba1019467cd4cc", "parents": [ "26dc065a7b6c56ebe4515bc1ff9a74304b2f5b81" ], "author": { "name": "Guillaume Nodet", "email": "gnodet@gmail.com", "time": "Fri Jul 24 11:34:38 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jul 24 10:34:38 2026 +0100" }, "message": "Fix ExecutorService leak in WS-RM oneway tests (#2963)\n\nDeliveryAssuranceOnewayTest and MessageCallbackOnewayTest create\nExecutorService instances via Executors.newSingleThreadExecutor() but\nnever shut them down. The leaked non-daemon threads prevent clean test\ncompletion, causing intermittent timeouts in CI (~95-100s for\nDeliveryAssurance, ~75s for MessageCallback).\n\nTrack the ExecutorService and shut it down in tearDown() with a\n10-second grace period before forceful termination.\n\nCo-authored-by: Claude Opus 4.6 \u003cnoreply@anthropic.com\u003e" }, { "commit": "26dc065a7b6c56ebe4515bc1ff9a74304b2f5b81", "tree": "91d3796d2b03dda0fe9d168998ea1bfd955a1b1a", "parents": [ "71ec1d3d2f7c6088e651f88038bf724c601a615d" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Thu Jul 23 15:24:41 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jul 23 15:24:41 2026 +0100" }, "message": "CXF-9223 - Disable audienceIsEndpointAddress on main only (#3332)" }, { "commit": "71ec1d3d2f7c6088e651f88038bf724c601a615d", "tree": "a19962aef7918f2f630c7f88843fb8cecc3a3b29", "parents": [ "10a34cb6e3f848d152f0a48398f27f122ee26ff1" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Thu Jul 23 13:35:03 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jul 23 13:35:03 2026 +0100" }, "message": "CXF-9223 - Improve prefix matching for OAuth audience URIs (#3331)" }, { "commit": "10a34cb6e3f848d152f0a48398f27f122ee26ff1", "tree": "c0140c10a49c9a65b49f71a37470325bdc35f2e3", "parents": [ "62623da87f0680a01f9a7add9f5dcd807b3ab3a9" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Jul 23 07:23:10 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jul 23 07:23:10 2026 -0400" }, "message": "Bump com.puppycrawl.tools:checkstyle from 13.7.0 to 13.8.0 (#3329)\n\nBumps [com.puppycrawl.tools:checkstyle](https://github.com/checkstyle/checkstyle) from 13.7.0 to 13.8.0.\n- [Release notes](https://github.com/checkstyle/checkstyle/releases)\n- [Commits](https://github.com/checkstyle/checkstyle/compare/checkstyle-13.7.0...checkstyle-13.8.0)\n\n---\nupdated-dependencies:\n- dependency-name: com.puppycrawl.tools:checkstyle\n dependency-version: 13.8.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "62623da87f0680a01f9a7add9f5dcd807b3ab3a9", "tree": "9bd0f23a3a872406045b59b7403c916bd6e269c0", "parents": [ "faf40ba0c98c1621522cf8d9c1fff64a8cdb126d" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Thu Jul 23 09:49:44 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jul 23 09:49:44 2026 +0100" }, "message": "Perform validation for OIDC self-issued tokens (#3327)" }, { "commit": "faf40ba0c98c1621522cf8d9c1fff64a8cdb126d", "tree": "050be000498afcbdc533ee7cbc5783f086aec6b2", "parents": [ "eca4abb9966e2d2eb5e987a080d059bf9e0ff47a" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Thu Jul 23 09:28:56 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jul 23 09:28:56 2026 +0100" }, "message": "CXF-9225 - Enforce nonce for the hybrid case (#3328)" }, { "commit": "eca4abb9966e2d2eb5e987a080d059bf9e0ff47a", "tree": "977fa45cb9c037e7b643d5d2d25ba84ab9349dfc", "parents": [ "4a2ec3445fb450d20817fcf98b9e0fb3ef4e9259" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Jul 22 12:48:20 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 22 12:48:20 2026 -0400" }, "message": "Bump org.graalvm.buildtools:native-maven-plugin from 1.1.4 to 1.1.5 (#3326)\n\nBumps [org.graalvm.buildtools:native-maven-plugin](https://github.com/graalvm/native-build-tools) from 1.1.4 to 1.1.5.\n- [Release notes](https://github.com/graalvm/native-build-tools/releases)\n- [Commits](https://github.com/graalvm/native-build-tools/compare/1.1.4...1.1.5)\n\n---\nupdated-dependencies:\n- dependency-name: org.graalvm.buildtools:native-maven-plugin\n dependency-version: 1.1.5\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "4a2ec3445fb450d20817fcf98b9e0fb3ef4e9259", "tree": "c616d0b4229a47065ec8134ec035d58563ebf6dd", "parents": [ "ef597b0d7215ccc23af6a51995a17e6fd43b397b" ], "author": { "name": "Andriy Redko", "email": "drreta@gmail.com", "time": "Tue Jul 21 17:08:49 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jul 21 17:08:49 2026 -0400" }, "message": "Validate redirect URIs according to OpenID Connect Dynamic Client Registration 1.0 specification (#3318)\n\n* Validate redirect URIs according to OpenID Connect Dynamic Client Registration 1.0 specification\n\n* Address code review comments" }, { "commit": "ef597b0d7215ccc23af6a51995a17e6fd43b397b", "tree": "f560b744dd767947de2bf7b2c98de26f44730452", "parents": [ "c1d7602f692d2edeaf24074d5efa93f73f4e7eaf" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Tue Jul 21 14:30:30 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jul 21 14:30:30 2026 +0100" }, "message": "Read WSDL imports through CXF\u0027s StaxUtils instead of WSDL4J (#3323)" }, { "commit": "c1d7602f692d2edeaf24074d5efa93f73f4e7eaf", "tree": "d510e5e357a67b127280bb243d67d8e2ea1d1291", "parents": [ "0008935708d0ede779164f276b0241ebe50ba125" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Jul 21 07:18:02 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jul 21 07:18:02 2026 -0400" }, "message": "Bump org.graalvm.buildtools:native-maven-plugin from 1.1.3 to 1.1.4 (#3324)\n\nBumps [org.graalvm.buildtools:native-maven-plugin](https://github.com/graalvm/native-build-tools) from 1.1.3 to 1.1.4.\n- [Release notes](https://github.com/graalvm/native-build-tools/releases)\n- [Commits](https://github.com/graalvm/native-build-tools/compare/1.1.3...1.1.4)\n\n---\nupdated-dependencies:\n- dependency-name: org.graalvm.buildtools:native-maven-plugin\n dependency-version: 1.1.4\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "0008935708d0ede779164f276b0241ebe50ba125", "tree": "1cbdb3f85614d9edc7aa3d6317bd8a511080eca4", "parents": [ "6061f356304d833715925c94b8d6792e00a40c1b" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Tue Jul 21 09:32:06 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jul 21 09:32:06 2026 +0100" }, "message": "For SAML, require that the TLS client certificate subject matches that of the SAML Assertion (#3322)" }, { "commit": "6061f356304d833715925c94b8d6792e00a40c1b", "tree": "5b62defebca9bc749c71b2b7afd6faedb46c9cc2", "parents": [ "924de9178dfdf17404ed2a34963c462787fca884" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jul 20 10:33:45 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jul 20 10:33:45 2026 -0400" }, "message": "Bump actions/setup-java from 5.5.0 to 5.6.0 (#3319)\n\nBumps [actions/setup-java](https://github.com/actions/setup-java) from 5.5.0 to 5.6.0.\n- [Release notes](https://github.com/actions/setup-java/releases)\n- [Commits](https://github.com/actions/setup-java/compare/0f481fcb613427c0f801b606911222b5b6f3083a...03ad4de0992f5dab5e18fcb136590ce7c4a0ac95)\n\n---\nupdated-dependencies:\n- dependency-name: actions/setup-java\n dependency-version: 5.6.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "924de9178dfdf17404ed2a34963c462787fca884", "tree": "6f5ae7b529459597dae9326924be65f7a2a64241", "parents": [ "fd3cc5f7d936f5f3fc796a402e10069e0d1200a4" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jul 20 06:45:43 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jul 20 06:45:43 2026 -0400" }, "message": "Bump cxf.junit6.version from 6.1.1 to 6.1.2 (#3320)\n\nBumps `cxf.junit6.version` from 6.1.1 to 6.1.2.\n\nUpdates `org.junit:junit-bom` from 6.1.1 to 6.1.2\n- [Release notes](https://github.com/junit-team/junit-framework/releases)\n- [Commits](https://github.com/junit-team/junit-framework/compare/r6.1.1...r6.1.2)\n\nUpdates `org.junit.jupiter:junit-jupiter-engine` from 6.1.1 to 6.1.2\n- [Release notes](https://github.com/junit-team/junit-framework/releases)\n- [Commits](https://github.com/junit-team/junit-framework/compare/r6.1.1...r6.1.2)\n\nUpdates `org.junit.vintage:junit-vintage-engine` from 6.1.1 to 6.1.2\n- [Release notes](https://github.com/junit-team/junit-framework/releases)\n- [Commits](https://github.com/junit-team/junit-framework/compare/r6.1.1...r6.1.2)\n\n---\nupdated-dependencies:\n- dependency-name: org.junit:junit-bom\n dependency-version: 6.1.2\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.junit.jupiter:junit-jupiter-engine\n dependency-version: 6.1.2\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.junit.vintage:junit-vintage-engine\n dependency-version: 6.1.2\n dependency-type: direct:development\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "fd3cc5f7d936f5f3fc796a402e10069e0d1200a4", "tree": "1213fe110c20dc5b1510e6cfe08c72a61f3898aa", "parents": [ "413d75ec1d9bd1b6a2b50e72bf4e7f0e53258218" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Mon Jul 20 09:12:00 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jul 20 09:12:00 2026 +0100" }, "message": "Don\u0027t perpetuate security sensitive values from the JWT (#3317)" }, { "commit": "413d75ec1d9bd1b6a2b50e72bf4e7f0e53258218", "tree": "76cc631f6f29326ff3039fa4028c8de0c3eac04b", "parents": [ "0607af83c10405e5cde10f676526254a255e321b" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Mon Jul 20 09:11:06 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jul 20 09:11:06 2026 +0100" }, "message": "Enforce TLS client certificate and store the application certificates for dynamic registration (#3316)" }, { "commit": "0607af83c10405e5cde10f676526254a255e321b", "tree": "e33e9b0d4ab3230e55ec3751b1036a98c33d1e98", "parents": [ "c409f44cd712c9d5fbdfbc24860f73445c186ae1" ], "author": { "name": "Andriy Redko", "email": "drreta@gmail.com", "time": "Fri Jul 17 18:26:15 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jul 17 18:26:15 2026 -0400" }, "message": "Make sure MessageContextImpl respects the limit to the maximum number of attachments to be collected (#3311)" }, { "commit": "c409f44cd712c9d5fbdfbc24860f73445c186ae1", "tree": "3ea56d9f676a4ba9c6060632184abbdad1e36ea0", "parents": [ "89e1fa866b9fbae78d52bc0c0e6a63bd642c08ae" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Fri Jul 17 16:18:28 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jul 17 16:18:28 2026 +0100" }, "message": "Filter claims by granted scopes for the IdToken case (#3304)" }, { "commit": "89e1fa866b9fbae78d52bc0c0e6a63bd642c08ae", "tree": "3fbc4e1f5ae4901ae0ab09ede742e1f2a4b47dca", "parents": [ "1d6be7fe57279474a917876f93943f82b58bb6a4" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Fri Jul 17 07:40:52 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jul 17 07:40:52 2026 -0400" }, "message": "Bump cxf.jackson.version from 3.2.0 to 3.2.1 (#3315)\n\n* Bump cxf.jackson.version from 3.2.0 to 3.2.1\n\nBumps `cxf.jackson.version` from 3.2.0 to 3.2.1.\n\nUpdates `tools.jackson.jakarta.rs:jackson-jakarta-rs-json-provider` from 3.2.0 to 3.2.1\n\nUpdates `tools.jackson.core:jackson-core` from 3.2.0 to 3.2.1\n- [Commits](https://github.com/FasterXML/jackson-core/compare/jackson-core-3.2.0...jackson-core-3.2.1)\n\nUpdates `tools.jackson.module:jackson-module-jsonSchema` from 3.2.0 to 3.2.1\n- [Commits](https://github.com/FasterXML/jackson-module-jsonSchema/compare/jackson-module-jsonSchema-parent-3.2.0...jackson-module-jsonSchema-parent-3.2.1)\n\nUpdates `tools.jackson.module:jackson-module-scala_2.12` from 3.2.0 to 3.2.1\n- [Changelog](https://github.com/FasterXML/jackson-module-scala/blob/3.x/release.sbt)\n- [Commits](https://github.com/FasterXML/jackson-module-scala/compare/v3.2.0...v3.2.1)\n\nUpdates `tools.jackson.jakarta.rs:jackson-jakarta-rs-xml-provider` from 3.2.0 to 3.2.1\n\nUpdates `tools.jackson.jakarta.rs:jackson-jakarta-rs-yaml-provider` from 3.2.0 to 3.2.1\n\nUpdates `tools.jackson.datatype:jackson-datatype-joda` from 3.2.0 to 3.2.1\n- [Commits](https://github.com/FasterXML/jackson-datatype-joda/compare/jackson-datatype-joda-3.2.0...jackson-datatype-joda-3.2.1)\n\nUpdates `tools.jackson.module:jackson-module-jakarta-xmlbind-annotations` from 3.2.0 to 3.2.1\n- [Commits](https://github.com/FasterXML/jackson-modules-base/compare/jackson-modules-base-3.2.0...jackson-modules-base-3.2.1)\n\n---\nupdated-dependencies:\n- dependency-name: tools.jackson.jakarta.rs:jackson-jakarta-rs-json-provider\n dependency-version: 3.2.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: tools.jackson.core:jackson-core\n dependency-version: 3.2.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: tools.jackson.module:jackson-module-jsonSchema\n dependency-version: 3.2.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: tools.jackson.module:jackson-module-scala_2.12\n dependency-version: 3.2.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: tools.jackson.jakarta.rs:jackson-jakarta-rs-xml-provider\n dependency-version: 3.2.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: tools.jackson.jakarta.rs:jackson-jakarta-rs-yaml-provider\n dependency-version: 3.2.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: tools.jackson.datatype:jackson-datatype-joda\n dependency-version: 3.2.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: tools.jackson.module:jackson-module-jakarta-xmlbind-annotations\n dependency-version: 3.2.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\n\n* Update parent/pom.xml\n\n---------\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e\nCo-authored-by: Andriy Redko \u003cdrreta@gmail.com\u003e" }, { "commit": "1d6be7fe57279474a917876f93943f82b58bb6a4", "tree": "c555c46cf1ca36e1d72111e3a6edf4da0a8b1f22", "parents": [ "45685c0971298ac43531c481cbe0a833757632cb" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Jul 16 07:54:13 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jul 16 07:54:13 2026 -0400" }, "message": "Bump cxf.opentelemetry.version from 1.63.0 to 1.64.0 (#3314)\n\nBumps `cxf.opentelemetry.version` from 1.63.0 to 1.64.0.\n\nUpdates `io.opentelemetry:opentelemetry-bom` from 1.63.0 to 1.64.0\n- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)\n- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/open-telemetry/opentelemetry-java/compare/v1.63.0...v1.64.0)\n\nUpdates `io.opentelemetry:opentelemetry-opentracing-shim` from 1.63.0 to 1.64.0\n- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)\n- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/open-telemetry/opentelemetry-java/compare/v1.63.0...v1.64.0)\n\n---\nupdated-dependencies:\n- dependency-name: io.opentelemetry:opentelemetry-bom\n dependency-version: 1.64.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n- dependency-name: io.opentelemetry:opentelemetry-opentracing-shim\n dependency-version: 1.64.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "45685c0971298ac43531c481cbe0a833757632cb", "tree": "95660d2742c7d0aebf7a9a76c7cf5d5360d6a23e", "parents": [ "dad42493b27650e6549c87912d42fd23b891bcf3" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Jul 15 07:38:20 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 15 07:38:20 2026 -0400" }, "message": "Bump ch.qos.logback:logback-classic from 1.5.37 to 1.5.38 (#3313)\n\nBumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) from 1.5.37 to 1.5.38.\n- [Release notes](https://github.com/qos-ch/logback/releases)\n- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.37...v_1.5.38)\n\n---\nupdated-dependencies:\n- dependency-name: ch.qos.logback:logback-classic\n dependency-version: 1.5.38\n dependency-type: direct:development\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "dad42493b27650e6549c87912d42fd23b891bcf3", "tree": "ae148843bb40c161a2abca6b8d7a5e56546769ac", "parents": [ "7564c7005e303dcb93246c708d9506754fb1672e" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Jul 14 06:59:35 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jul 14 06:59:35 2026 -0400" }, "message": "Bump io.opentelemetry.semconv:opentelemetry-semconv (#3312)\n\nBumps [io.opentelemetry.semconv:opentelemetry-semconv](https://github.com/open-telemetry/semantic-conventions-java) from 1.42.0 to 1.43.0.\n- [Release notes](https://github.com/open-telemetry/semantic-conventions-java/releases)\n- [Changelog](https://github.com/open-telemetry/semantic-conventions-java/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/open-telemetry/semantic-conventions-java/compare/v1.42.0...v1.43.0)\n\n---\nupdated-dependencies:\n- dependency-name: io.opentelemetry.semconv:opentelemetry-semconv\n dependency-version: 1.43.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "7564c7005e303dcb93246c708d9506754fb1672e", "tree": "16efff8c5d6847efd22ad92a744c10994e394087", "parents": [ "9ade17cb60361af470910b3620c78d517af37fe5" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jul 13 09:42:51 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jul 13 09:42:51 2026 -0400" }, "message": "Bump github/codeql-action/analyze from 4.36.2 to 4.37.0 (#3308)\n\n* Bump github/codeql-action/analyze from 4.36.2 to 4.37.0\n\nBumps [github/codeql-action/analyze](https://github.com/github/codeql-action) from 4.36.2 to 4.37.0.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/8aad20d150bbac5944a9f9d289da16a4b0d87c1e...99df26d4f13ea111d4ec1a7dddef6063f76b97e9)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action/analyze\n dependency-version: 4.37.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\n\n* Apply suggestion from @reta\n\n---------\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e\nCo-authored-by: Andriy Redko \u003cdrreta@gmail.com\u003e" }, { "commit": "9ade17cb60361af470910b3620c78d517af37fe5", "tree": "3c656e4be4699f97dcaf01c1dd06e255ed2a8b23", "parents": [ "29759b77fe7aaa11009a5f34346117c7fa8db2a9" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jul 13 09:30:16 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jul 13 09:30:16 2026 -0400" }, "message": "Bump github/codeql-action/upload-sarif from 4.36.2 to 4.37.0 (#3305)\n\nBumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 4.36.2 to 4.37.0.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/8aad20d150bbac5944a9f9d289da16a4b0d87c1e...99df26d4f13ea111d4ec1a7dddef6063f76b97e9)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action/upload-sarif\n dependency-version: 4.37.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "29759b77fe7aaa11009a5f34346117c7fa8db2a9", "tree": "dde16d65aadd6d808bc0fc15ddba2c22c4e91c42", "parents": [ "3682dd9bbdca9fe395962a765f8f5471617dfc28" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jul 13 07:57:52 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jul 13 07:57:52 2026 -0400" }, "message": "Bump actions/setup-java from 5.4.0 to 5.5.0 (#3309)\n\nBumps [actions/setup-java](https://github.com/actions/setup-java) from 5.4.0 to 5.5.0.\n- [Release notes](https://github.com/actions/setup-java/releases)\n- [Commits](https://github.com/actions/setup-java/compare/1bcf9fb12cf4aa7d266a90ae39939e61372fe520...0f481fcb613427c0f801b606911222b5b6f3083a)\n\n---\nupdated-dependencies:\n- dependency-name: actions/setup-java\n dependency-version: 5.5.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "3682dd9bbdca9fe395962a765f8f5471617dfc28", "tree": "8385ee69543cd1fb8236fbce18525d18cb9e587f", "parents": [ "da5edccdb85138bad83858f05eba10dfe5df4212" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jul 13 07:56:31 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jul 13 07:56:31 2026 -0400" }, "message": "Bump org.hibernate.validator:hibernate-validator (#3306)\n\nBumps [org.hibernate.validator:hibernate-validator](https://github.com/hibernate/hibernate-validator) from 9.1.1.Final to 9.1.2.Final.\n- [Release notes](https://github.com/hibernate/hibernate-validator/releases)\n- [Changelog](https://github.com/hibernate/hibernate-validator/blob/9.1.2.Final/changelog.md)\n- [Commits](https://github.com/hibernate/hibernate-validator/compare/9.1.1.Final...9.1.2.Final)\n\n---\nupdated-dependencies:\n- dependency-name: org.hibernate.validator:hibernate-validator\n dependency-version: 9.1.2.Final\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "da5edccdb85138bad83858f05eba10dfe5df4212", "tree": "d03c675223dd2603a81fd026ed55015e4431e0d0", "parents": [ "16ac0e403ca3cc5f97d3c93d8ccfe98d993b4a66" ], "author": { "name": "Andriy Redko", "email": "drreta@gmail.com", "time": "Sat Jul 11 11:58:23 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat Jul 11 11:58:23 2026 -0400" }, "message": "Add maxSize to BinaryDataProvider so the payload size could be constrained (to 1Gb by default) (#3301)" }, { "commit": "16ac0e403ca3cc5f97d3c93d8ccfe98d993b4a66", "tree": "32d608bb428f976ff7bc47ac5dc81276b06e199f", "parents": [ "7a12ad6adb903edb0e1952ba366e6a6da7d89474" ], "author": { "name": "Freeman(Yue) Fang", "email": "freeman.fang@gmail.com", "time": "Fri Jul 10 09:59:01 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jul 10 09:59:01 2026 -0400" }, "message": "[CXF-9229] Add PQC TLS 1.3 support via X25519MLKEM768 hybrid KEM (#3299)\n\n* [CXF-9229] Add PQC TLS 1.3 support via X25519MLKEM768 hybrid KEM\n\n- TLSParameterBase: new namedGroups API (getNamedGroups/setNamedGroups) to\n configure the ordered list of TLS named groups offered during the handshake\n- security.xsd: new NamedGroups complex type and \u003csec:namedGroups\u003e/\u003csec:namedGroup\u003e\n elements on both TLSClientParametersType and TLSServerParametersType\n- TLSClientParametersConfig / TLSServerParametersConfig: wire namedGroups from\n XML config into SSLParameters via SSLUtils.applyNamedGroups() (JDK 20+)\n- SSLUtils.applyNamedGroupsBC(): reflection-based helper to set named groups\n on BC JSSE\u0027s ProvSSLEngine without a compile-time bctls-jdk18on dependency\n- JettyHTTPServerEngine: override customize(SSLEngine) to call applyNamedGroupsBC()\n so each accepted engine gets named groups from tlsServerParameters configuration\n- BCJsseServerALPNProcessor: ALPNProcessor.Server for BC JSSE\u0027s ProvSSLEngine;\n bridges it into Jetty\u0027s ALPN negotiation (JDK9ServerALPNProcessor only accepts\n java.base engines); registered via META-INF/services; enables HTTP/2 + BC JSSE\n- BCJssePQCTest + BCJsseJettyServer: system test using BC JSSE on JDK 17-26;\n sets jdk.tls.namedGroups\u003dX25519MLKEM768 before SSLContext creation so the\n BC JSSE context-level named-group map includes the PQC group; verifies\n X25519MLKEM768 was negotiated by restricting a raw BCSSLSocket to that group only\n- PQCTLSTest: system test for SunJSSE on JDK 27+ (JEP 527); skips automatically\n when X25519MLKEM768 is absent from the configured named groups\n\n* [CXF-9229]update BC version to 1.84 for jdk25 compatibility" }, { "commit": "7a12ad6adb903edb0e1952ba366e6a6da7d89474", "tree": "28effe5e67ad7313902ae2f818ed77165ba6e7a9", "parents": [ "3fa2ffd04bc814d2fa9ab723d9b6c7f9fad35ed8" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Fri Jul 10 09:54:47 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jul 10 09:54:47 2026 -0400" }, "message": "Bump cxf.hibernate.em.version from 7.4.3.Final to 7.4.4.Final (#3302)\n\nBumps `cxf.hibernate.em.version` from 7.4.3.Final to 7.4.4.Final.\n\nUpdates `org.hibernate.orm:hibernate-core` from 7.4.3.Final to 7.4.4.Final\n- [Release notes](https://github.com/hibernate/hibernate-orm/releases)\n- [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.4.4/changelog.txt)\n- [Commits](https://github.com/hibernate/hibernate-orm/compare/7.4.3...7.4.4)\n\nUpdates `org.hibernate.orm:hibernate-jcache` from 7.4.3.Final to 7.4.4.Final\n- [Release notes](https://github.com/hibernate/hibernate-orm/releases)\n- [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.4.4/changelog.txt)\n- [Commits](https://github.com/hibernate/hibernate-orm/compare/7.4.3...7.4.4)\n\n---\nupdated-dependencies:\n- dependency-name: org.hibernate.orm:hibernate-core\n dependency-version: 7.4.4.Final\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.hibernate.orm:hibernate-jcache\n dependency-version: 7.4.4.Final\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "3fa2ffd04bc814d2fa9ab723d9b6c7f9fad35ed8", "tree": "a0fabdf0662ae40d6208150b8218d12acf2e1264", "parents": [ "2a508d5235c0b9a2de1bb96c801365ad58ff61d5" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Fri Jul 10 10:39:34 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jul 10 10:39:34 2026 +0100" }, "message": "Disallow a dynamic registration client from requesting scopes without validation (#3297)" }, { "commit": "2a508d5235c0b9a2de1bb96c801365ad58ff61d5", "tree": "d8eaf83ad02d591c85a67f15ae767e1f1f5461a8", "parents": [ "8ab0d8bc99f83fb2cae973e0202ef9176589defa" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Fri Jul 10 10:35:33 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jul 10 10:35:33 2026 +0100" }, "message": "Plug URIResolver into EndpointReferenceUtils (#3296)" }, { "commit": "8ab0d8bc99f83fb2cae973e0202ef9176589defa", "tree": "fde65ef6522c27a21d1f4efa8bf45a768053fbd0", "parents": [ "42fafe580665f7ea6ed3907ff39f6b7685535a00" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Fri Jul 10 10:34:50 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jul 10 10:34:50 2026 +0100" }, "message": "Fix bug with SAML clientAddress (#3298)" }, { "commit": "42fafe580665f7ea6ed3907ff39f6b7685535a00", "tree": "c4bc8d822687f086927be9c2a0f4683827d70dd5", "parents": [ "40bbcd8acfe0a60e4631aa69733ed33c5e2e4dd8" ], "author": { "name": "Peter Palaga", "email": "ppalaga@redhat.com", "time": "Fri Jul 10 10:03:19 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jul 10 09:03:19 2026 +0100" }, "message": "Put log messages and SOAP Fault messages to a resource bundle so that downstream intergations of CXF can hint about their own configuration parameters (#3300)" }, { "commit": "40bbcd8acfe0a60e4631aa69733ed33c5e2e4dd8", "tree": "ee9b2cf3986e386dde14ddd9115d044768be7945", "parents": [ "db945030a75eb0ac3f8889c5da2426f0f8135e84" ], "author": { "name": "Andriy Redko", "email": "drreta@gmail.com", "time": "Thu Jul 09 20:35:45 2026 -0400" }, "committer": { "name": "Andriy Redko", "email": "drreta@gmail.com", "time": "Thu Jul 09 20:36:16 2026 -0400" }, "message": "Update Jetty to 12.1.11\n" }, { "commit": "db945030a75eb0ac3f8889c5da2426f0f8135e84", "tree": "080d48a64a8cd3f41ea35bba67bd91dee14b74cd", "parents": [ "a36490434e2634bb211eb4cbad7380baebdd8862" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Jul 09 20:25:27 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jul 09 20:25:27 2026 -0400" }, "message": "Bump org.apache.camel.springboot:camel-spring-boot-dependencies (#3285)\n\nBumps org.apache.camel.springboot:camel-spring-boot-dependencies from 4.20.0 to 4.21.0.\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.camel.springboot:camel-spring-boot-dependencies\n dependency-version: 4.21.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "a36490434e2634bb211eb4cbad7380baebdd8862", "tree": "ebaa992d19c5ee9ab1f06fac06ae8bffe79411e3", "parents": [ "0cc2bcad9299f20ff994b243a0b31397fa7b3a85" ], "author": { "name": "Andriy Redko", "email": "drreta@gmail.com", "time": "Thu Jul 09 08:55:04 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jul 09 08:55:04 2026 -0400" }, "message": "CXF-9230: Update to Spring Boot 4.1 release line (#3040)" }, { "commit": "0cc2bcad9299f20ff994b243a0b31397fa7b3a85", "tree": "0a24c7256f37b1686bb43b33c6a1635d0284d217", "parents": [ "6af78b897f71724574629cfec6cb556cc896686a" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Jul 09 07:26:36 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jul 09 07:26:36 2026 -0400" }, "message": "Bump cxf.tomcat.version from 11.0.23 to 11.0.24 (#3295)\n\nBumps `cxf.tomcat.version` from 11.0.23 to 11.0.24.\n\nUpdates `org.apache.tomcat.embed:tomcat-embed-core` from 11.0.23 to 11.0.24\n\nUpdates `org.apache.tomcat:tomcat-jasper` from 11.0.23 to 11.0.24\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.tomcat.embed:tomcat-embed-core\n dependency-version: 11.0.24\n dependency-type: direct:development\n update-type: version-update:semver-patch\n- dependency-name: org.apache.tomcat:tomcat-jasper\n dependency-version: 11.0.24\n dependency-type: direct:development\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "6af78b897f71724574629cfec6cb556cc896686a", "tree": "6e467b45cfa12ca3002154f0aa8fe2f3cc2f8c3a", "parents": [ "2f715e930cf48cdb6cc7aa579a370f779f606bc6" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Thu Jul 09 10:04:22 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jul 09 10:04:22 2026 +0100" }, "message": "Enforce that Access tokens only are accepted in JwtAccessTokenValidator (#3294)" }, { "commit": "2f715e930cf48cdb6cc7aa579a370f779f606bc6", "tree": "72057e10629536cc239d9cfbb319833a2f8696df", "parents": [ "ff845cc5a7548e425ebf8a26efe60641e2d605e4" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Thu Jul 09 09:49:08 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jul 09 09:49:08 2026 +0100" }, "message": "Plug URIResolver into StaxUtils (#3293)" }, { "commit": "ff845cc5a7548e425ebf8a26efe60641e2d605e4", "tree": "91bbcc745f63c12aec008135b4f6dfa355572496", "parents": [ "d8009cd959308d0448705d3d46621758fe4b37c1" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Jul 08 07:47:37 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 08 07:47:37 2026 -0400" }, "message": "Bump org.eclipse.persistence:org.eclipse.persistence.moxy (#3286)\n\nBumps org.eclipse.persistence:org.eclipse.persistence.moxy from 5.0.0 to 5.0.1.\n\n---\nupdated-dependencies:\n- dependency-name: org.eclipse.persistence:org.eclipse.persistence.moxy\n dependency-version: 5.0.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "d8009cd959308d0448705d3d46621758fe4b37c1", "tree": "bae72e6b7d34c92fe40fc7f8981bb1b3f4aa898f", "parents": [ "64f8929e1f8032114262aa0b0004ccfb6accc451" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Wed Jul 08 09:51:53 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 08 09:51:53 2026 +0100" }, "message": "Set setReuseAddress on the test socket to try to reduce port conflicts (#3290)" }, { "commit": "64f8929e1f8032114262aa0b0004ccfb6accc451", "tree": "5aa433612a1d0a45d21988f2f041e12302afde06", "parents": [ "c2c5619b06586023cd212fbdf967a13c80b6036b" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Wed Jul 08 09:51:42 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 08 09:51:42 2026 +0100" }, "message": "Switch AbstractJwtHandler to require that the subject \u003d the client Id by default (#3291)" }, { "commit": "c2c5619b06586023cd212fbdf967a13c80b6036b", "tree": "d04684f11289b73b9d68a0ae8e030f65a6344f73", "parents": [ "50918830ece560c374387230fbcd8791e26582b9" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Tue Jul 07 17:10:30 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jul 07 17:10:30 2026 +0100" }, "message": "Encode LDAP query parameter names as well (#3288)" }, { "commit": "50918830ece560c374387230fbcd8791e26582b9", "tree": "bc717454cd33a41d44c1131fb5e7f2ac664b17d8", "parents": [ "0b1e3f5d82b174aeca925db7147d8929c2d5f8dd" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Tue Jul 07 17:10:16 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jul 07 17:10:16 2026 +0100" }, "message": "Plug URIResolver into AttachmentUtil (#3289)" }, { "commit": "0b1e3f5d82b174aeca925db7147d8929c2d5f8dd", "tree": "bb6944b640115ef506ab09d6e106bf459108f3fc", "parents": [ "12607f124ff57437508d0823533aa6ea8bef4166" ], "author": { "name": "Andriy Redko", "email": "drreta@gmail.com", "time": "Tue Jul 07 07:57:54 2026 -0400" }, "committer": { "name": "Andriy Redko", "email": "drreta@gmail.com", "time": "Tue Jul 07 07:57:54 2026 -0400" }, "message": "Update Netty to 4.2.16.Final\n" }, { "commit": "12607f124ff57437508d0823533aa6ea8bef4166", "tree": "ac348ec3aba40570a18260db87472902acecefbd", "parents": [ "f7275f82309eb6b763152fb77f1afae7dc512f5d" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Jul 07 07:22:50 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jul 07 07:22:50 2026 -0400" }, "message": "Bump com.puppycrawl.tools:checkstyle from 13.6.0 to 13.7.0 (#3287)\n\nBumps [com.puppycrawl.tools:checkstyle](https://github.com/checkstyle/checkstyle) from 13.6.0 to 13.7.0.\n- [Release notes](https://github.com/checkstyle/checkstyle/releases)\n- [Commits](https://github.com/checkstyle/checkstyle/compare/checkstyle-13.6.0...checkstyle-13.7.0)\n\n---\nupdated-dependencies:\n- dependency-name: com.puppycrawl.tools:checkstyle\n dependency-version: 13.7.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "f7275f82309eb6b763152fb77f1afae7dc512f5d", "tree": "8b5a0201e887feff31fd735d11187f9eb38af430", "parents": [ "4d64e044badb296b0de5696e29475c8b738ca624" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Tue Jul 07 10:03:16 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jul 07 10:03:16 2026 +0100" }, "message": "Switch XML Security CryptoLoader to use URIResolver (#3280)" }, { "commit": "4d64e044badb296b0de5696e29475c8b738ca624", "tree": "e1824f741264d369e4b8d340a6fbaaac06ecdf99", "parents": [ "71a342c9516d3465846ad08f3eaf2e72341d3636" ], "author": { "name": "Freeman(Yue) Fang", "email": "freeman.fang@gmail.com", "time": "Mon Jul 06 09:37:22 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jul 06 09:37:22 2026 -0400" }, "message": "CXF-9226: AsyncHTTPConduit throws ISE instead of HTTPException(407) o… (#3255)\n\n* CXF-9226: AsyncHTTPConduit throws ISE instead of HTTPException(407) on proxy auth failure\n\nWhen the HC5 async conduit receives a 407 Proxy Authentication Required\nresponse with wrong credentials and MaxRetransmits\u003e0 or AutoRedirect\u003dtrue\n(as in the JIRA), the request entity is marked repeatable so HC5 retries\nafter the first 407. A concurrent write-failure on the Connection: close\nsocket races with the retry\u0027s execute() call, causing\nInternalHttpAsyncExecRuntime.ensureValid() to find a null endpointRef and\nthrow IllegalStateException. Without MaxRetransmits/AutoRedirect the entity\nis not repeatable and HC5 intercepts the 407 internally, calling\nasyncExecCallback.completed() without signaling CXF\u0027s future and leaving\ngetHttpResponse() blocked indefinitely on wait().\n\nFix:\n- Promote HttpClientContext ctx to a field on AsyncWrappedOutputStream so\n it is accessible after HC5 calls back.\n- Replace wait() with wait(receiveTimeout) to bound the wait.\n- In both the timeout path and the RuntimeException (ISE) path, check\n ctx.getResponse() for a 407 status and throw HTTPException(407) instead\n of re-throwing the raw exception or blocking forever.\n\nTest:\n- ProxyAuthIllegalStateTest: reproduces the ISE via a raw ServerSocket\n proxy returning 407+Connection:close, with MaxRetransmits\u003d5 and\n AutoRedirect\u003dtrue matching the exact JIRA configuration.\n\n* Always configure AuthCache if proxy authorization policy is configured\n\n* Use exact proxy host and BasicAuthCache implementation\n\n---------\n\nCo-authored-by: Andriy Redko \u003cdrreta@gmail.com\u003e" }, { "commit": "71a342c9516d3465846ad08f3eaf2e72341d3636", "tree": "8c11f4cddc03323d9cba66ef2dc9b1fbb7ef7f7f", "parents": [ "280d0141516e965bca0975b1bee460812e0ec867" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jul 06 07:32:10 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jul 06 07:32:10 2026 -0400" }, "message": "Bump org.apache.groovy:groovy from 5.0.6 to 5.0.7 (#3284)\n\nBumps [org.apache.groovy:groovy](https://github.com/apache/groovy) from 5.0.6 to 5.0.7.\n- [Commits](https://github.com/apache/groovy/commits)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.groovy:groovy\n dependency-version: 5.0.7\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "280d0141516e965bca0975b1bee460812e0ec867", "tree": "1375e3d56702ad722cab7667b26d597630a1495c", "parents": [ "c9493ac452aed9bef79338d7dfad385e9e19c5dd" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jul 06 07:31:46 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jul 06 07:31:46 2026 -0400" }, "message": "Bump net.sourceforge.pmd:pmd-core from 7.25.0 to 7.26.0 (#3283)\n\nBumps [net.sourceforge.pmd:pmd-core](https://github.com/pmd/pmd) from 7.25.0 to 7.26.0.\n- [Release notes](https://github.com/pmd/pmd/releases)\n- [Commits](https://github.com/pmd/pmd/compare/pmd_releases/7.25.0...pmd_releases/7.26.0)\n\n---\nupdated-dependencies:\n- dependency-name: net.sourceforge.pmd:pmd-core\n dependency-version: 7.26.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "c9493ac452aed9bef79338d7dfad385e9e19c5dd", "tree": "c9280a280ed039877b281756cf5ae2851e13d853", "parents": [ "93165c253fa6aadab0bdf951b2166710ff2006f5" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jul 06 07:31:22 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jul 06 07:31:22 2026 -0400" }, "message": "Bump cxf.junit6.version from 6.1.0 to 6.1.1 (#3282)\n\nBumps `cxf.junit6.version` from 6.1.0 to 6.1.1.\n\nUpdates `org.junit:junit-bom` from 6.1.0 to 6.1.1\n- [Release notes](https://github.com/junit-team/junit-framework/releases)\n- [Commits](https://github.com/junit-team/junit-framework/compare/r6.1.0...r6.1.1)\n\nUpdates `org.junit.jupiter:junit-jupiter-engine` from 6.1.0 to 6.1.1\n- [Release notes](https://github.com/junit-team/junit-framework/releases)\n- [Commits](https://github.com/junit-team/junit-framework/compare/r6.1.0...r6.1.1)\n\nUpdates `org.junit.vintage:junit-vintage-engine` from 6.1.0 to 6.1.1\n- [Release notes](https://github.com/junit-team/junit-framework/releases)\n- [Commits](https://github.com/junit-team/junit-framework/compare/r6.1.0...r6.1.1)\n\n---\nupdated-dependencies:\n- dependency-name: org.junit:junit-bom\n dependency-version: 6.1.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.junit.jupiter:junit-jupiter-engine\n dependency-version: 6.1.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.junit.vintage:junit-vintage-engine\n dependency-version: 6.1.1\n dependency-type: direct:development\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "93165c253fa6aadab0bdf951b2166710ff2006f5", "tree": "e0f77f402e395d038e21aac9893c95f7c2fdec75", "parents": [ "0ac9b4c1ce9d5bb80966b9d2b6063932153309d0" ], "author": { "name": "Andriy Redko", "email": "drreta@gmail.com", "time": "Sun Jul 05 15:43:29 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sun Jul 05 15:43:29 2026 -0400" }, "message": "CXF-9161: Some of the OIDCFlowTest fail with timeout (JPA only) when HttpClient instance is shared (#3109)\n\nSigned-off-by: Andriy Redko \u003cdrreta@gmail.com\u003e" }, { "commit": "0ac9b4c1ce9d5bb80966b9d2b6063932153309d0", "tree": "75ee26da1ecd47880fc5eabe1a56a8ec76b0965e", "parents": [ "24a45ef468910d314cc05ff61e13885c1eae537f" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Fri Jul 03 18:46:51 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jul 03 18:46:51 2026 -0400" }, "message": "Bump org.apache.httpcomponents.client5:httpclient5 from 5.6.1 to 5.6.2 (#3275)\n\nBumps [org.apache.httpcomponents.client5:httpclient5](https://github.com/apache/httpcomponents-client) from 5.6.1 to 5.6.2.\n- [Changelog](https://github.com/apache/httpcomponents-client/blob/rel/v5.6.2/RELEASE_NOTES.txt)\n- [Commits](https://github.com/apache/httpcomponents-client/compare/rel/v5.6.1...rel/v5.6.2)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.httpcomponents.client5:httpclient5\n dependency-version: 5.6.2\n dependency-type: direct:development\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "24a45ef468910d314cc05ff61e13885c1eae537f", "tree": "22038251f75548d1c89e9cc7e57e00af292c0858", "parents": [ "07ed95f391dbca4b7deb11c4f946cebc6cf5dea6" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Fri Jul 03 16:29:48 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jul 03 16:29:48 2026 +0100" }, "message": "Disable decoupled destinations by default for WS-Addressing (#3279)" }, { "commit": "07ed95f391dbca4b7deb11c4f946cebc6cf5dea6", "tree": "a0bacaa8b868612bb7350542afb4c53cc9afb73b", "parents": [ "55ae305eb875e335661e940dc924f7af2bbddfca" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Fri Jul 03 09:13:50 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jul 03 09:13:50 2026 -0400" }, "message": "Bump io.github.littleproxy:littleproxy from 2.7.0 to 2.8.0 (#3276)\n\nBumps [io.github.littleproxy:littleproxy](https://github.com/LittleProxy/LittleProxy) from 2.7.0 to 2.8.0.\n- [Release notes](https://github.com/LittleProxy/LittleProxy/releases)\n- [Changelog](https://github.com/LittleProxy/LittleProxy/blob/main/RELEASE_NOTES.md)\n- [Commits](https://github.com/LittleProxy/LittleProxy/compare/v2.7.0...v2.8.0)\n\n---\nupdated-dependencies:\n- dependency-name: io.github.littleproxy:littleproxy\n dependency-version: 2.8.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "55ae305eb875e335661e940dc924f7af2bbddfca", "tree": "e67a9364dea6d5518f30370b945107828353afb3", "parents": [ "148c232485726945fae4736d7554f3ba8a123070" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Fri Jul 03 09:13:30 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jul 03 09:13:30 2026 -0400" }, "message": "Bump cxf.hibernate.em.version from 7.4.2.Final to 7.4.3.Final (#3278)\n\nBumps `cxf.hibernate.em.version` from 7.4.2.Final to 7.4.3.Final.\n\nUpdates `org.hibernate.orm:hibernate-core` from 7.4.2.Final to 7.4.3.Final\n- [Release notes](https://github.com/hibernate/hibernate-orm/releases)\n- [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.4.3/changelog.txt)\n- [Commits](https://github.com/hibernate/hibernate-orm/compare/7.4.2...7.4.3)\n\nUpdates `org.hibernate.orm:hibernate-jcache` from 7.4.2.Final to 7.4.3.Final\n- [Release notes](https://github.com/hibernate/hibernate-orm/releases)\n- [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.4.3/changelog.txt)\n- [Commits](https://github.com/hibernate/hibernate-orm/compare/7.4.2...7.4.3)\n\n---\nupdated-dependencies:\n- dependency-name: org.hibernate.orm:hibernate-core\n dependency-version: 7.4.3.Final\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.hibernate.orm:hibernate-jcache\n dependency-version: 7.4.3.Final\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "148c232485726945fae4736d7554f3ba8a123070", "tree": "074699820e8515bd3a9698d0bf8ddce26a33e47f", "parents": [ "5f0655fd67149e63a735854f71171a6201480082" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Jul 02 16:36:53 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jul 02 16:36:53 2026 -0400" }, "message": "Bump io.undertow:undertow-core from 2.4.1.Final to 2.4.2.Final (#3273)\n\nBumps [io.undertow:undertow-core](https://github.com/undertow-io/undertow) from 2.4.1.Final to 2.4.2.Final.\n- [Release notes](https://github.com/undertow-io/undertow/releases)\n- [Commits](https://github.com/undertow-io/undertow/compare/2.4.1.Final...2.4.2.Final)\n\n---\nupdated-dependencies:\n- dependency-name: io.undertow:undertow-core\n dependency-version: 2.4.2.Final\n dependency-type: direct:development\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "5f0655fd67149e63a735854f71171a6201480082", "tree": "b3edcaff082762407fa391b71f91b28795b9ba43", "parents": [ "545e1790bdcf09f029ef34838aadbfbd6d310f1c" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Jul 02 07:21:27 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jul 02 07:21:27 2026 -0400" }, "message": "Bump io.undertow.ee:undertow-servlet from 2.0.0.Final to 2.0.1.Final (#3271)\n\nBumps [io.undertow.ee:undertow-servlet](https://github.com/undertow-io/undertow-ee) from 2.0.0.Final to 2.0.1.Final.\n- [Release notes](https://github.com/undertow-io/undertow-ee/releases)\n- [Commits](https://github.com/undertow-io/undertow-ee/compare/2.0.0.Final...2.0.1.Final)\n\n---\nupdated-dependencies:\n- dependency-name: io.undertow.ee:undertow-servlet\n dependency-version: 2.0.1.Final\n dependency-type: direct:development\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "545e1790bdcf09f029ef34838aadbfbd6d310f1c", "tree": "cae3b55a407a724ab3ab15b974fbb42544b1a601", "parents": [ "2d192ac869aa864b5d52e2f543d07c0d900f2b82" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Jul 02 07:21:02 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jul 02 07:21:02 2026 -0400" }, "message": "Bump ch.qos.logback:logback-classic from 1.5.36 to 1.5.37 (#3270)\n\nBumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) from 1.5.36 to 1.5.37.\n- [Release notes](https://github.com/qos-ch/logback/releases)\n- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.36...v_1.5.37)\n\n---\nupdated-dependencies:\n- dependency-name: ch.qos.logback:logback-classic\n dependency-version: 1.5.37\n dependency-type: direct:development\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "2d192ac869aa864b5d52e2f543d07c0d900f2b82", "tree": "3969639c2fef530b6f4b232dc5c51003c3739c93", "parents": [ "d36cff46abfda921b72b15bd01116017cea4c5d7" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Thu Jul 02 09:35:15 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jul 02 09:35:15 2026 +0100" }, "message": "Enforce scheme checks for decoupled destinations (#3266)" }, { "commit": "d36cff46abfda921b72b15bd01116017cea4c5d7", "tree": "a294aac1052dbe3971184017449bdb9429479450", "parents": [ "cc648512d6a38ce648feacb3ead2ee9e9b99c8b4" ], "author": { "name": "Javid Khan", "email": "dxbjavid@gmail.com", "time": "Thu Jul 02 05:44:52 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 01 20:14:52 2026 -0400" }, "message": "validate redirect origin in oidc rp sign-in completion (#3241)\n\n* validate redirect origin in oidc rp sign-in completion\n\nSigned-off-by: dxbjavid \u003cdxbjavid@gmail.com\u003e\n\n* harden redirect state in oidc rp filter rather than completion service\n\n* derive same-origin base from request uri info instead of message context\n\n* add filter test for state with scheme but no authority\n\nSigned-off-by: Javid Khan \u003cdxbjavid@gmail.com\u003e\n\n---------\n\nSigned-off-by: dxbjavid \u003cdxbjavid@gmail.com\u003e\nSigned-off-by: Javid Khan \u003cdxbjavid@gmail.com\u003e" }, { "commit": "cc648512d6a38ce648feacb3ead2ee9e9b99c8b4", "tree": "49a236c6147f3ab30712e6c9c81408fd7bf81d5f", "parents": [ "b6df51f2d477153c12f82510c8de120688f47bdd" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Jul 01 08:05:07 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 01 08:05:07 2026 -0400" }, "message": "Bump ch.qos.logback:logback-classic from 1.5.35 to 1.5.36 (#3268)\n\nBumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) from 1.5.35 to 1.5.36.\n- [Release notes](https://github.com/qos-ch/logback/releases)\n- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.35...v_1.5.36)\n\n---\nupdated-dependencies:\n- dependency-name: ch.qos.logback:logback-classic\n dependency-version: 1.5.36\n dependency-type: direct:development\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "b6df51f2d477153c12f82510c8de120688f47bdd", "tree": "590e2e6361c9b8e264978f7ab16f6aa36dd1ee17", "parents": [ "d41a91549b3a30ff5588fe3c43feecd058b4640c" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Jul 01 00:00:57 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 01 00:00:57 2026 -0400" }, "message": "Bump org.graalvm.buildtools:native-maven-plugin from 1.1.2 to 1.1.3 (#3269)\n\nBumps [org.graalvm.buildtools:native-maven-plugin](https://github.com/graalvm/native-build-tools) from 1.1.2 to 1.1.3.\n- [Release notes](https://github.com/graalvm/native-build-tools/releases)\n- [Commits](https://github.com/graalvm/native-build-tools/compare/1.1.2...1.1.3)\n\n---\nupdated-dependencies:\n- dependency-name: org.graalvm.buildtools:native-maven-plugin\n dependency-version: 1.1.3\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "d41a91549b3a30ff5588fe3c43feecd058b4640c", "tree": "df81c453d44c86167e4745a19c64841e932a813d", "parents": [ "62e6397db21e779cc403f80a6fcb2138dd2aae6e" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Jul 01 00:00:43 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 01 00:00:43 2026 -0400" }, "message": "Bump cxf.lucene.version from 10.4.0 to 10.5.0 (#3267)\n\nBumps `cxf.lucene.version` from 10.4.0 to 10.5.0.\n\nUpdates `org.apache.lucene:lucene-core` from 10.4.0 to 10.5.0\n\nUpdates `org.apache.lucene:lucene-analysis-common` from 10.4.0 to 10.5.0\n\nUpdates `org.apache.lucene:lucene-queryparser` from 10.4.0 to 10.5.0\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.lucene:lucene-core\n dependency-version: 10.5.0\n dependency-type: direct:development\n update-type: version-update:semver-minor\n- dependency-name: org.apache.lucene:lucene-analysis-common\n dependency-version: 10.5.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n- dependency-name: org.apache.lucene:lucene-queryparser\n dependency-version: 10.5.0\n dependency-type: direct:development\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "62e6397db21e779cc403f80a6fcb2138dd2aae6e", "tree": "90994399bca6b8645b5395705676086eeadf97a3", "parents": [ "ad1094b1922d415a677dcced4398fc9a811ea430" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Jun 30 09:00:46 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jun 30 09:00:46 2026 -0400" }, "message": "Bump org.hibernate.validator:hibernate-validator (#3263)\n\nBumps [org.hibernate.validator:hibernate-validator](https://github.com/hibernate/hibernate-validator) from 9.1.0.Final to 9.1.1.Final.\n- [Release notes](https://github.com/hibernate/hibernate-validator/releases)\n- [Changelog](https://github.com/hibernate/hibernate-validator/blob/9.1.1.Final/changelog.txt)\n- [Commits](https://github.com/hibernate/hibernate-validator/compare/9.1.0.Final...9.1.1.Final)\n\n---\nupdated-dependencies:\n- dependency-name: org.hibernate.validator:hibernate-validator\n dependency-version: 9.1.1.Final\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "ad1094b1922d415a677dcced4398fc9a811ea430", "tree": "d704071713d50c5bcb7b7f9bce35a2c9a25d8c4e", "parents": [ "de097dbdb66b486c4a0757915ab286ed819a3358" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Jun 30 09:00:28 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jun 30 09:00:28 2026 -0400" }, "message": "Bump cxf.activemq.artemis.version from 2.54.0 to 2.55.0 (#3264)\n\nBumps `cxf.activemq.artemis.version` from 2.54.0 to 2.55.0.\n\nUpdates `org.apache.artemis:artemis-jakarta-server` from 2.54.0 to 2.55.0\n\nUpdates `org.apache.artemis:artemis-jakarta-client` from 2.54.0 to 2.55.0\n\nUpdates `org.apache.artemis:artemis-jakarta-ra` from 2.54.0 to 2.55.0\n\nUpdates `org.apache.artemis:artemis-junit` from 2.54.0 to 2.55.0\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.artemis:artemis-jakarta-server\n dependency-version: 2.55.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n- dependency-name: org.apache.artemis:artemis-jakarta-client\n dependency-version: 2.55.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n- dependency-name: org.apache.artemis:artemis-jakarta-ra\n dependency-version: 2.55.0\n dependency-type: direct:development\n update-type: version-update:semver-minor\n- dependency-name: org.apache.artemis:artemis-junit\n dependency-version: 2.55.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "de097dbdb66b486c4a0757915ab286ed819a3358", "tree": "e77e56599ba51bc00e736325390d3e6031d8a7c0", "parents": [ "68703ab24fd656145eb99d8d98c5f64047132ee0" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Jun 30 09:00:10 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jun 30 09:00:10 2026 -0400" }, "message": "Bump org.apache.commons:commons-jexl3 from 3.6.3 to 3.6.4 (#3265)\n\nBumps org.apache.commons:commons-jexl3 from 3.6.3 to 3.6.4.\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.commons:commons-jexl3\n dependency-version: 3.6.4\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "68703ab24fd656145eb99d8d98c5f64047132ee0", "tree": "327df35cad5931c149ac7d67cc4745e5424f16c4", "parents": [ "6f8224e23d5e1b18bed17e4d7a24522849fb6823" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jun 29 14:30:11 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 29 14:30:11 2026 -0400" }, "message": "Bump org.apache.httpcomponents.core5:httpcore5 from 5.4.2 to 5.4.3 (#3257)\n\nBumps [org.apache.httpcomponents.core5:httpcore5](https://github.com/apache/httpcomponents-core) from 5.4.2 to 5.4.3.\n- [Changelog](https://github.com/apache/httpcomponents-core/blob/rel/v5.4.3/RELEASE_NOTES.txt)\n- [Commits](https://github.com/apache/httpcomponents-core/compare/rel/v5.4.2...rel/v5.4.3)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.httpcomponents.core5:httpcore5\n dependency-version: 5.4.3\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "6f8224e23d5e1b18bed17e4d7a24522849fb6823", "tree": "239eb7725b256ceb1f5abe68103226513171f3a3", "parents": [ "316973a16e40c74f7b7e8dd98881cbb5df977bce" ], "author": { "name": "Andriy Redko", "email": "drreta@gmail.com", "time": "Mon Jun 29 09:25:25 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 29 09:25:25 2026 -0400" }, "message": "Respect the AsyncRequestProducer contract by properly implementing available() method (#3235)\n\n* Respect the AsyncRequestProducer contract by properly implementing available() method\n\n* Address code review comments" }, { "commit": "316973a16e40c74f7b7e8dd98881cbb5df977bce", "tree": "dc859c5c268ef162e58cc5dabc3f395bddd9c4ea", "parents": [ "a90163cc1e1b8958b9a6a511a15d7b2104669aad" ], "author": { "name": "Freeman(Yue) Fang", "email": "freeman.fang@gmail.com", "time": "Mon Jun 29 08:54:39 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 29 08:54:39 2026 -0400" }, "message": "[CXF-9227] Fix SecurityManager permission regressions introduced in 4.1.7 (#3256)" }, { "commit": "a90163cc1e1b8958b9a6a511a15d7b2104669aad", "tree": "08e456af693e6c803da824264385222dabeded3a", "parents": [ "de02fdf9a5de9f1808db1da2b18ce4b847597b8a" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jun 29 08:47:21 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 29 08:47:21 2026 -0400" }, "message": "Bump actions/setup-java from 5.3.0 to 5.4.0 (#3261)\n\nBumps [actions/setup-java](https://github.com/actions/setup-java) from 5.3.0 to 5.4.0.\n- [Release notes](https://github.com/actions/setup-java/releases)\n- [Commits](https://github.com/actions/setup-java/compare/ad2b38190b15e4d6bdf0c97fb4fca8412226d287...1bcf9fb12cf4aa7d266a90ae39939e61372fe520)\n\n---\nupdated-dependencies:\n- dependency-name: actions/setup-java\n dependency-version: 5.4.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "de02fdf9a5de9f1808db1da2b18ce4b847597b8a", "tree": "f665bd49f036ff2c7b598987d3029cc06883a9f9", "parents": [ "5ff8fcf1317b813955e1326afad83cce33ffa4b2" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jun 29 07:24:11 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 29 07:24:11 2026 -0400" }, "message": "Bump ch.qos.logback:logback-classic from 1.5.34 to 1.5.35 (#3259)\n\nBumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) from 1.5.34 to 1.5.35.\n- [Release notes](https://github.com/qos-ch/logback/releases)\n- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.34...v_1.5.35)\n\n---\nupdated-dependencies:\n- dependency-name: ch.qos.logback:logback-classic\n dependency-version: 1.5.35\n dependency-type: direct:development\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "5ff8fcf1317b813955e1326afad83cce33ffa4b2", "tree": "482295c5adeec32ed86dea3954bd5094a3371a4f", "parents": [ "99c2a32ac891117ac020393414cc326bdbf65bf3" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jun 29 07:23:05 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 29 07:23:05 2026 -0400" }, "message": "Bump actions/cache from 5.0.5 to 6.1.0 (#3262)\n\nBumps [actions/cache](https://github.com/actions/cache) from 5.0.5 to 6.1.0.\n- [Release notes](https://github.com/actions/cache/releases)\n- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)\n- [Commits](https://github.com/actions/cache/compare/27d5ce7f107fe9357f9df03efb73ab90386fccae...55cc8345863c7cc4c66a329aec7e433d2d1c52a9)\n\n---\nupdated-dependencies:\n- dependency-name: actions/cache\n dependency-version: 6.1.0\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "99c2a32ac891117ac020393414cc326bdbf65bf3", "tree": "edbdddb3786eca413f58000d20403a25f259e0c7", "parents": [ "d60925c1d2b270c10b6bc4638132976dd50f1589" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jun 29 07:22:38 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 29 07:22:38 2026 -0400" }, "message": "Bump org.webjars:swagger-ui from 5.32.6 to 5.32.8 (#3258)\n\nBumps [org.webjars:swagger-ui](https://github.com/swagger-api/swagger-ui) from 5.32.6 to 5.32.8.\n- [Release notes](https://github.com/swagger-api/swagger-ui/releases)\n- [Commits](https://github.com/swagger-api/swagger-ui/compare/v5.32.6...v5.32.8)\n\n---\nupdated-dependencies:\n- dependency-name: org.webjars:swagger-ui\n dependency-version: 5.32.8\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "d60925c1d2b270c10b6bc4638132976dd50f1589", "tree": "43c0e620893fd2a1b58b40c3f61c74d8799a93b1", "parents": [ "da91116fbb397828b0c5c612ff5811df5b707bd7" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Fri Jun 26 16:16:59 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jun 26 16:16:59 2026 +0100" }, "message": "CXF-9222 - Remove partialMatchScopeValidation for OAuth (#3254)" }, { "commit": "da91116fbb397828b0c5c612ff5811df5b707bd7", "tree": "0fb821d706cda65d2f0e00a9de8498806568b17b", "parents": [ "a78daaef2e6694815ca7576175b2c8ae6bb6436c" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Fri Jun 26 09:25:35 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jun 26 09:25:35 2026 -0400" }, "message": "Bump org.apache.commons:commons-jexl3 from 3.6.2 to 3.6.3 (#3253)\n\nBumps org.apache.commons:commons-jexl3 from 3.6.2 to 3.6.3.\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.commons:commons-jexl3\n dependency-version: 3.6.3\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "a78daaef2e6694815ca7576175b2c8ae6bb6436c", "tree": "ce16c1de83c4f418657fb01616b38f39cef8121b", "parents": [ "323c90f84d0246edfed4aec5cf7b4529218873c2" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Fri Jun 26 07:23:00 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jun 26 07:23:00 2026 -0400" }, "message": "Bump cxf.hibernate.em.version from 7.4.1.Final to 7.4.2.Final (#3252)\n\nBumps `cxf.hibernate.em.version` from 7.4.1.Final to 7.4.2.Final.\n\nUpdates `org.hibernate.orm:hibernate-core` from 7.4.1.Final to 7.4.2.Final\n- [Release notes](https://github.com/hibernate/hibernate-orm/releases)\n- [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.4.2/changelog.txt)\n- [Commits](https://github.com/hibernate/hibernate-orm/compare/7.4.1...7.4.2)\n\nUpdates `org.hibernate.orm:hibernate-jcache` from 7.4.1.Final to 7.4.2.Final\n- [Release notes](https://github.com/hibernate/hibernate-orm/releases)\n- [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.4.2/changelog.txt)\n- [Commits](https://github.com/hibernate/hibernate-orm/compare/7.4.1...7.4.2)\n\n---\nupdated-dependencies:\n- dependency-name: org.hibernate.orm:hibernate-core\n dependency-version: 7.4.2.Final\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.hibernate.orm:hibernate-jcache\n dependency-version: 7.4.2.Final\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "323c90f84d0246edfed4aec5cf7b4529218873c2", "tree": "c241f23bf3cc0528e57a875fa2091669db00e32e", "parents": [ "b2c370cd3c9798ee91044cc75ed857bbebc198c6" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Fri Jun 26 08:09:56 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jun 26 08:09:56 2026 +0100" }, "message": "Bump org.apache.kerby:kerb-simplekdc from 2.1.1 to 2.1.2 (#3251)\n\nBumps org.apache.kerby:kerb-simplekdc from 2.1.1 to 2.1.2.\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.kerby:kerb-simplekdc\n dependency-version: 2.1.2\n dependency-type: direct:development\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "b2c370cd3c9798ee91044cc75ed857bbebc198c6", "tree": "cbaa569f59940f1a8a0ea37bef1fb0602dde4231", "parents": [ "ef1684d398f0c8151f002e35f57c66f517a8fcb2" ], "author": { "name": "Andriy Redko", "email": "drreta@gmail.com", "time": "Wed Jun 24 10:02:56 2026 -0400" }, "committer": { "name": "Andriy Redko", "email": "drreta@gmail.com", "time": "Wed Jun 24 10:02:56 2026 -0400" }, "message": "Update cyclonedx-maven-plugin to 2.9.2\n" }, { "commit": "ef1684d398f0c8151f002e35f57c66f517a8fcb2", "tree": "639f968402b8e73cf5e16a2562b3ad03322332bf", "parents": [ "d462fe0aad51657a15bd063da1b5cc5adea59c39" ], "author": { "name": "Andriy Redko", "email": "drreta@gmail.com", "time": "Wed Jun 24 10:02:19 2026 -0400" }, "committer": { "name": "Andriy Redko", "email": "drreta@gmail.com", "time": "Wed Jun 24 10:02:19 2026 -0400" }, "message": "Update Swagger Core to 2.2.52\n" }, { "commit": "d462fe0aad51657a15bd063da1b5cc5adea59c39", "tree": "6967c2ea8d083975f59a111407b2e6d527080d72", "parents": [ "c43be0cc1b48d1741fa97a17c96fc0fc1609c52b" ], "author": { "name": "Andriy Redko", "email": "drreta@gmail.com", "time": "Wed Jun 24 09:25:41 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jun 24 09:25:41 2026 -0400" }, "message": "CXF-9221: JCache providers use inverted isExpired() logic causing expired tokens/codes to never be evicted (#3240)" }, { "commit": "c43be0cc1b48d1741fa97a17c96fc0fc1609c52b", "tree": "deb75d975b30d5b8ba000dd5ad6bbd76be8090d5", "parents": [ "c82d4af709fc04ad87d399389ae4534618c6e455" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Wed Jun 24 12:54:03 2026 +0100" }, "committer": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Wed Jun 24 12:54:03 2026 +0100" }, "message": "Removing 3.6.x from security support\n" }, { "commit": "c82d4af709fc04ad87d399389ae4534618c6e455", "tree": "c9ffc3526ac1ac4fe4aa0c01c93ab11d0ecd53ee", "parents": [ "97a0e42cd1be7b74890ce2752835af92200091f9" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Jun 23 08:56:45 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jun 23 08:56:45 2026 -0400" }, "message": "Bump io.opentelemetry.semconv:opentelemetry-semconv (#3249)\n\nBumps [io.opentelemetry.semconv:opentelemetry-semconv](https://github.com/open-telemetry/semantic-conventions-java) from 1.41.1 to 1.42.0.\n- [Release notes](https://github.com/open-telemetry/semantic-conventions-java/releases)\n- [Changelog](https://github.com/open-telemetry/semantic-conventions-java/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/open-telemetry/semantic-conventions-java/compare/v1.41.1...v1.42.0)\n\n---\nupdated-dependencies:\n- dependency-name: io.opentelemetry.semconv:opentelemetry-semconv\n dependency-version: 1.42.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "97a0e42cd1be7b74890ce2752835af92200091f9", "tree": "f32c3108a1ba5cb8d788982b560fe559f4ae16b7", "parents": [ "896b73891cc00732c9a299452aa9ffe185b65037" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Jun 23 07:38:18 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jun 23 07:38:18 2026 -0400" }, "message": "Bump cxf.tomcat.version from 11.0.22 to 11.0.23 (#3248)\n\nBumps `cxf.tomcat.version` from 11.0.22 to 11.0.23.\n\nUpdates `org.apache.tomcat.embed:tomcat-embed-core` from 11.0.22 to 11.0.23\n\nUpdates `org.apache.tomcat:tomcat-jasper` from 11.0.22 to 11.0.23\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.tomcat.embed:tomcat-embed-core\n dependency-version: 11.0.23\n dependency-type: direct:development\n update-type: version-update:semver-patch\n- dependency-name: org.apache.tomcat:tomcat-jasper\n dependency-version: 11.0.23\n dependency-type: direct:development\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "896b73891cc00732c9a299452aa9ffe185b65037", "tree": "33f7641fc0bf3fa05aad4973f559e5f9f7313ac4", "parents": [ "d90b18e446cd127bf852580cd2228ac088d95c64" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jun 22 09:58:12 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 22 09:58:12 2026 -0400" }, "message": "Bump actions/setup-java from 5.2.0 to 5.3.0 (#3242)\n\nBumps [actions/setup-java](https://github.com/actions/setup-java) from 5.2.0 to 5.3.0.\n- [Release notes](https://github.com/actions/setup-java/releases)\n- [Commits](https://github.com/actions/setup-java/compare/be666c2fcd27ec809703dec50e508c2fdc7f6654...ad2b38190b15e4d6bdf0c97fb4fca8412226d287)\n\n---\nupdated-dependencies:\n- dependency-name: actions/setup-java\n dependency-version: 5.3.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "d90b18e446cd127bf852580cd2228ac088d95c64", "tree": "057327bda5fbe91a3046f16ea0ddd6ef61552218", "parents": [ "e0a357ed7ee3dc766421fda67329c074487c6f4a" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jun 22 09:57:52 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 22 09:57:52 2026 -0400" }, "message": "Bump actions/checkout from 6.0.3 to 7.0.0 (#3243)\n\nBumps [actions/checkout](https://github.com/actions/checkout) from 6.0.3 to 7.0.0.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/df4cb1c069e1874edd31b4311f1884172cec0e10...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0)\n\n---\nupdated-dependencies:\n- dependency-name: actions/checkout\n dependency-version: 7.0.0\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "e0a357ed7ee3dc766421fda67329c074487c6f4a", "tree": "03b053a9eb07570051ea1da20f8506dcc09c8c67", "parents": [ "3e602e82462a880a7ac0844806e880a49490ffdc" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jun 22 09:57:27 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 22 09:57:27 2026 -0400" }, "message": "Bump com.puppycrawl.tools:checkstyle from 13.5.0 to 13.6.0 (#3244)\n\nBumps [com.puppycrawl.tools:checkstyle](https://github.com/checkstyle/checkstyle) from 13.5.0 to 13.6.0.\n- [Release notes](https://github.com/checkstyle/checkstyle/releases)\n- [Commits](https://github.com/checkstyle/checkstyle/compare/checkstyle-13.5.0...checkstyle-13.6.0)\n\n---\nupdated-dependencies:\n- dependency-name: com.puppycrawl.tools:checkstyle\n dependency-version: 13.6.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" } ], "next": "3e602e82462a880a7ac0844806e880a49490ffdc" }