)]}'
{
  "log": [
    {
      "commit": "13b82c0c87be7e83a30ee4668ab2a8f4b73a8918",
      "tree": "18b5560e6a0618225c1d8a155ef283589f425d04",
      "parents": [
        "279e976061c00e35adef31730086e9154d2526af"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Thu Jul 16 17:12:41 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Thu Jul 16 15:31:23 2026 -0400"
      },
      "message": "Bump github/codeql-action/upload-sarif from 4.37.0 to 4.37.1\n\nBumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 4.37.0 to 4.37.1.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/99df26d4f13ea111d4ec1a7dddef6063f76b97e9...7188fc363630916deb702c7fdcf4e481b751f97a)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action/upload-sarif\n  dependency-version: 4.37.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "279e976061c00e35adef31730086e9154d2526af",
      "tree": "ca69d0a33c677a9dff75394b3af6f5b959761e73",
      "parents": [
        "144833d7e9bd2ec562255d8ffa70c5c2302b0d92"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Thu Jul 16 17:12:56 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Thu Jul 16 15:31:06 2026 -0400"
      },
      "message": "Bump actions/setup-java from 5.5.0 to 5.6.0\n\nBumps [actions/setup-java](https://github.com/actions/setup-java) from 5.5.0 to 5.6.0.\n- [Release notes](https://github.com/actions/setup-java/releases)\n- [Commits](https://github.com/actions/setup-java/compare/0f481fcb613427c0f801b606911222b5b6f3083a...03ad4de0992f5dab5e18fcb136590ce7c4a0ac95)\n\n---\nupdated-dependencies:\n- dependency-name: actions/setup-java\n  dependency-version: 5.6.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "144833d7e9bd2ec562255d8ffa70c5c2302b0d92",
      "tree": "66a9dd1e8b5b320379e8f76c97af2bdda401d220",
      "parents": [
        "625cb67269532b65a5d3e84d8cd5fec841e5aa81"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed Jun 03 00:58:28 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Wed Jul 15 17:29:59 2026 -0400"
      },
      "message": "Bump org.wildfly.plugins:wildfly-maven-plugin\n\nBumps [org.wildfly.plugins:wildfly-maven-plugin](https://github.com/wildfly/wildfly-maven-plugin) from 5.1.5.Final to 6.0.0.Final.\n- [Release notes](https://github.com/wildfly/wildfly-maven-plugin/releases)\n- [Commits](https://github.com/wildfly/wildfly-maven-plugin/compare/v5.1.5.Final...v6.0.0.Final)\n\n---\nupdated-dependencies:\n- dependency-name: org.wildfly.plugins:wildfly-maven-plugin\n  dependency-version: 6.0.0.Final\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "625cb67269532b65a5d3e84d8cd5fec841e5aa81",
      "tree": "8dadb728d75bd491afe2f0c8f0559d76ba1e0230",
      "parents": [
        "b925654acb9aaef16d9ab1bb542b830bb5e859d7"
      ],
      "author": {
        "name": "Brian Demers",
        "email": "bdemers@apache.org",
        "time": "Wed Jul 15 15:30:06 2026 -0400"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Wed Jul 15 15:38:15 2026 -0400"
      },
      "message": "Bump codeql-action/init to 4.37.0 to match analyze/upload-sarif\n\nAll github/codeql-action steps must run the same version; init was\nleft at 4.36.2 while analyze and upload-sarif are at 4.37.0, causing\nthe \u0027Loaded a configuration file for version 4.36.2, but running\nversion 4.37.0\u0027 failure.\n"
    },
    {
      "commit": "b925654acb9aaef16d9ab1bb542b830bb5e859d7",
      "tree": "36830073f5719a8808e7c7c38f1420f99b921c1d",
      "parents": [
        "c0795ac1af77253901a355d0a3b94dc3c6df9b21"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Jul 14 22:05:30 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Wed Jul 15 15:38:15 2026 -0400"
      },
      "message": "Bump github/codeql-action/analyze from 4.36.2 to 4.37.0\n\nBumps [github/codeql-action/analyze](https://github.com/github/codeql-action) from 4.36.2 to 4.37.0.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/8aad20d150bbac5944a9f9d289da16a4b0d87c1e...99df26d4f13ea111d4ec1a7dddef6063f76b97e9)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action/analyze\n  dependency-version: 4.37.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "c0795ac1af77253901a355d0a3b94dc3c6df9b21",
      "tree": "338717804c484b26cc7ca683420bdaac8808f18f",
      "parents": [
        "3d9329ed8fe4fc220cc2f57a6223671b1db97b65"
      ],
      "author": {
        "name": "Brian Demers",
        "email": "bdemers@apache.org",
        "time": "Wed Jul 15 13:37:38 2026 -0400"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Wed Jul 15 15:25:56 2026 -0400"
      },
      "message": "Bump Spring Boot to 3.5.16 and 4.1.0\n"
    },
    {
      "commit": "3d9329ed8fe4fc220cc2f57a6223671b1db97b65",
      "tree": "6c6d6c412c24af93eb518bdedeecf7e403c526c4",
      "parents": [
        "b001a7b7ec5e08fa8d156b2d3f5833d10dc2162f"
      ],
      "author": {
        "name": "Brian Demers",
        "email": "bdemers@apache.org",
        "time": "Wed Jul 15 11:34:52 2026 -0400"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Wed Jul 15 11:46:59 2026 -0400"
      },
      "message": "Fix SpotBugs synchronization warning\n"
    },
    {
      "commit": "b001a7b7ec5e08fa8d156b2d3f5833d10dc2162f",
      "tree": "b8470986c273839b6176cc780d9e955202ffb187",
      "parents": [
        "f8875d2e6dfa4d8164f0f33ea9c9ce74a65e9ce5"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Jul 14 22:05:12 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Wed Jul 15 11:46:59 2026 -0400"
      },
      "message": "Bump com.github.spotbugs:spotbugs-maven-plugin from 4.9.8.3 to 4.10.3.0\n\nBumps [com.github.spotbugs:spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin) from 4.9.8.3 to 4.10.3.0.\n- [Release notes](https://github.com/spotbugs/spotbugs-maven-plugin/releases)\n- [Commits](https://github.com/spotbugs/spotbugs-maven-plugin/compare/spotbugs-maven-plugin-4.9.8.3...spotbugs-maven-plugin-4.10.3.0)\n\n---\nupdated-dependencies:\n- dependency-name: com.github.spotbugs:spotbugs-maven-plugin\n  dependency-version: 4.10.2.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "f8875d2e6dfa4d8164f0f33ea9c9ce74a65e9ce5",
      "tree": "79dff148aebcd6c2322acdec84279892034266c9",
      "parents": [
        "975f8568f3530a0f1a4e6a0d0631f3972f4fafed"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Jul 14 22:05:11 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Wed Jul 15 11:23:28 2026 -0400"
      },
      "message": "Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.5.5 to 3.5.6\n\nBumps [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) from 3.5.5 to 3.5.6.\n- [Release notes](https://github.com/apache/maven-surefire/releases)\n- [Commits](https://github.com/apache/maven-surefire/compare/surefire-3.5.5...surefire-3.5.6)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven.plugins:maven-failsafe-plugin\n  dependency-version: 3.5.6\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "975f8568f3530a0f1a4e6a0d0631f3972f4fafed",
      "tree": "1a7a9c8e67a377c67d42fa086794d36b5ce75d6c",
      "parents": [
        "e38c223315884a063b15056d8a44f7658b84b71c"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Jul 14 22:05:08 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Wed Jul 15 11:23:19 2026 -0400"
      },
      "message": "Bump org.jreleaser:jreleaser-maven-plugin from 1.23.0 to 1.25.0\n\nBumps [org.jreleaser:jreleaser-maven-plugin](https://github.com/jreleaser/jreleaser) from 1.23.0 to 1.25.0.\n- [Release notes](https://github.com/jreleaser/jreleaser/releases)\n- [Commits](https://github.com/jreleaser/jreleaser/compare/v1.23.0...v1.25.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.jreleaser:jreleaser-maven-plugin\n  dependency-version: 1.24.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "e38c223315884a063b15056d8a44f7658b84b71c",
      "tree": "1022255eac3c93ca89866e6c00aa7ce1d528a23f",
      "parents": [
        "a37a4bb8cc9ac7cdcb0dfd11f1b512fa8e06dda8"
      ],
      "author": {
        "name": "Mend Renovate",
        "email": "bot@renovateapp.com",
        "time": "Wed Jun 24 09:11:14 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Tue Jul 14 14:06:03 2026 -0400"
      },
      "message": "Update payara/micro Docker tag to v7.2026.6\n"
    },
    {
      "commit": "a37a4bb8cc9ac7cdcb0dfd11f1b512fa8e06dda8",
      "tree": "29e4ea9e208861b344399fefb2460d0757d5e9dc",
      "parents": [
        "d70105ac8b7957270b06281e33e7925dd7674672"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Jul 14 15:23:05 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Tue Jul 14 13:38:12 2026 -0400"
      },
      "message": "Bump version.quarkus from 3.34.6 to 3.37.2\n\nBumps `version.quarkus` from 3.34.6 to 3.37.2.\n\nUpdates `io.quarkus.platform:quarkus-bom` from 3.34.6 to 3.37.2\n- [Commits](https://github.com/quarkusio/quarkus-platform/compare/3.34.6...3.37.2)\n\nUpdates `io.quarkus.platform:quarkus-maven-plugin` from 3.34.6 to 3.37.2\n- [Commits](https://github.com/quarkusio/quarkus-platform/compare/3.34.6...3.37.2)\n\n---\nupdated-dependencies:\n- dependency-name: io.quarkus.platform:quarkus-bom\n  dependency-version: 3.36.1\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n- dependency-name: io.quarkus.platform:quarkus-maven-plugin\n  dependency-version: 3.36.1\n  dependency-type: direct:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "d70105ac8b7957270b06281e33e7925dd7674672",
      "tree": "6f114cc0b3f678963af951c357ea11a1e29e2465",
      "parents": [
        "3b52e944ae811cea2b750d578d5fa0d218c133c9"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jun 08 17:23:28 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Tue Jul 14 11:17:18 2026 -0400"
      },
      "message": "Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.5 to 3.5.6\n\nBumps [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) from 3.5.5 to 3.5.6.\n- [Release notes](https://github.com/apache/maven-surefire/releases)\n- [Commits](https://github.com/apache/maven-surefire/compare/surefire-3.5.5...surefire-3.5.6)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven.plugins:maven-surefire-plugin\n  dependency-version: 3.5.6\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "3b52e944ae811cea2b750d578d5fa0d218c133c9",
      "tree": "1b7694ec4fffe80796cd92fcfe6ae04f12358f89",
      "parents": [
        "aef82cd8e234af282c13acf7464ecd6f63265f6c"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jun 08 17:23:46 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Tue Jul 14 11:16:54 2026 -0400"
      },
      "message": "Bump org.jacoco:jacoco-maven-plugin from 0.8.14 to 0.8.15\n\nBumps [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) from 0.8.14 to 0.8.15.\n- [Release notes](https://github.com/jacoco/jacoco/releases)\n- [Commits](https://github.com/jacoco/jacoco/compare/v0.8.14...v0.8.15)\n\n---\nupdated-dependencies:\n- dependency-name: org.jacoco:jacoco-maven-plugin\n  dependency-version: 0.8.15\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "aef82cd8e234af282c13acf7464ecd6f63265f6c",
      "tree": "dff9a3327ca2ed7538aea5794c0a0363af01c95b",
      "parents": [
        "363bec443fe88f5543d357d24288acf6bb0f95df"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jun 08 17:24:21 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Tue Jul 14 11:16:20 2026 -0400"
      },
      "message": "Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.2 to 3.6.3\n\nBumps [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer) from 3.6.2 to 3.6.3.\n- [Release notes](https://github.com/apache/maven-enforcer/releases)\n- [Commits](https://github.com/apache/maven-enforcer/compare/enforcer-3.6.2...enforcer-3.6.3)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven.plugins:maven-enforcer-plugin\n  dependency-version: 3.6.3\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "363bec443fe88f5543d357d24288acf6bb0f95df",
      "tree": "bf5af983356399cb6d6863338c70734278770299",
      "parents": [
        "5ff9482b0c3fe43b6588ec0790b6155ab9800211"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jun 08 17:24:31 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Tue Jul 14 11:15:20 2026 -0400"
      },
      "message": "Bump io.smallrye:jandex-maven-plugin from 3.5.3 to 3.6.0\n\nBumps [io.smallrye:jandex-maven-plugin](https://github.com/smallrye/jandex) from 3.5.3 to 3.6.0.\n- [Release notes](https://github.com/smallrye/jandex/releases)\n- [Changelog](https://github.com/smallrye/jandex/blob/main/RELEASE_PROCEDURE.md)\n- [Commits](https://github.com/smallrye/jandex/compare/3.5.3...3.6.0)\n\n---\nupdated-dependencies:\n- dependency-name: io.smallrye:jandex-maven-plugin\n  dependency-version: 3.6.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "5ff9482b0c3fe43b6588ec0790b6155ab9800211",
      "tree": "0b3b63d5c138351b2cb0fe954034a9d3226caea5",
      "parents": [
        "53ec0eb6dd0891b5e525243de697cc24a642614c"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Thu Jun 18 17:12:49 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Tue Jul 14 11:15:00 2026 -0400"
      },
      "message": "Bump actions/checkout from 6.0.3 to 7.0.0\n\nBumps [actions/checkout](https://github.com/actions/checkout) from 6.0.3 to 7.0.0.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/df4cb1c069e1874edd31b4311f1884172cec0e10...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0)\n\n---\nupdated-dependencies:\n- dependency-name: actions/checkout\n  dependency-version: 7.0.0\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "53ec0eb6dd0891b5e525243de697cc24a642614c",
      "tree": "356a0443f2b3a24cef8b639ad7c8971bb55f60d7",
      "parents": [
        "a8d8d9931ce8d89090da12195b2bd2a1dbb1d067"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed Jul 08 17:12:43 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Tue Jul 14 11:14:08 2026 -0400"
      },
      "message": "Bump actions/setup-java from 5.2.0 to 5.5.0\n\nBumps [actions/setup-java](https://github.com/actions/setup-java) from 5.2.0 to 5.5.0.\n- [Release notes](https://github.com/actions/setup-java/releases)\n- [Commits](https://github.com/actions/setup-java/compare/be666c2fcd27ec809703dec50e508c2fdc7f6654...0f481fcb613427c0f801b606911222b5b6f3083a)\n\n---\nupdated-dependencies:\n- dependency-name: actions/setup-java\n  dependency-version: 5.5.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "a8d8d9931ce8d89090da12195b2bd2a1dbb1d067",
      "tree": "7dea0c2412c7e4681ab8b9e94514270b4639e273",
      "parents": [
        "68b78453bde7e8888c85f746f6811e7878d524e1"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed Jul 08 17:13:06 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Tue Jul 14 11:13:40 2026 -0400"
      },
      "message": "Bump github/codeql-action/upload-sarif from 4.36.2 to 4.37.0\n\nBumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 4.36.2 to 4.37.0.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/8aad20d150bbac5944a9f9d289da16a4b0d87c1e...99df26d4f13ea111d4ec1a7dddef6063f76b97e9)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action/upload-sarif\n  dependency-version: 4.37.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "68b78453bde7e8888c85f746f6811e7878d524e1",
      "tree": "cc7ef6cbb5fc5764ddfdb2ecd425ba400cce15a3",
      "parents": [
        "25e7646641717e42e29c477ff3dd5b391a52c7d8"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Fri Jul 10 15:19:29 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Tue Jul 14 11:10:16 2026 -0400"
      },
      "message": "Bump ch.qos.logback:logback-core from 1.5.34 to 1.5.35\n\nBumps [ch.qos.logback:logback-core](https://github.com/qos-ch/logback) from 1.5.34 to 1.5.35.\n- [Release notes](https://github.com/qos-ch/logback/releases)\n- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.34...v_1.5.35)\n\n---\nupdated-dependencies:\n- dependency-name: ch.qos.logback:logback-core\n  dependency-version: 1.5.35\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "25e7646641717e42e29c477ff3dd5b391a52c7d8",
      "tree": "aafee220ee97026a2c64406ddaab5b3ca6e732e1",
      "parents": [
        "a4da0d56b39113a90fabb0d8e43d93f4d5c2996e"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Fri Jun 05 17:26:53 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Fri Jun 05 15:01:14 2026 -0400"
      },
      "message": "Bump com.fasterxml.jackson:jackson-bom from 2.21.3 to 2.22.0\n\nBumps [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) from 2.21.3 to 2.22.0.\n- [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.21.3...jackson-bom-2.22.0)\n\n---\nupdated-dependencies:\n- dependency-name: com.fasterxml.jackson:jackson-bom\n  dependency-version: 2.22.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "a4da0d56b39113a90fabb0d8e43d93f4d5c2996e",
      "tree": "bf717b43bfec38db475fbefbe9a35fbca91ab3f6",
      "parents": [
        "bba3935e257df156f5203f914ffb053d788d68de"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Thu Jun 04 17:12:37 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Fri Jun 05 13:26:14 2026 -0400"
      },
      "message": "Bump github/codeql-action from 4.36.0 to 4.36.2\n\nBumps [github/codeql-action](https://github.com/github/codeql-action) from 4.36.0 to 4.36.2.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/7211b7c8077ea37d8641b6271f6a365a22a5fbfa...8aad20d150bbac5944a9f9d289da16a4b0d87c1e)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action\n  dependency-version: 4.36.2\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "bba3935e257df156f5203f914ffb053d788d68de",
      "tree": "eb50d6703530ad4ccb3b7d1aaca8f705ae06162e",
      "parents": [
        "de12812774c890228f56bec1e2ccd4bcb9dc890a"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed Jun 03 00:58:49 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Fri Jun 05 13:25:56 2026 -0400"
      },
      "message": "Bump com.github.siom79.japicmp:japicmp-maven-plugin\n\nBumps [com.github.siom79.japicmp:japicmp-maven-plugin](https://github.com/siom79/japicmp) from 0.25.7 to 0.26.1.\n- [Release notes](https://github.com/siom79/japicmp/releases)\n- [Changelog](https://github.com/siom79/japicmp/blob/master/release.py)\n- [Commits](https://github.com/siom79/japicmp/compare/japicmp-base-0.25.7...japicmp-base-0.26.1)\n\n---\nupdated-dependencies:\n- dependency-name: com.github.siom79.japicmp:japicmp-maven-plugin\n  dependency-version: 0.26.1\n  dependency-type: direct:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "de12812774c890228f56bec1e2ccd4bcb9dc890a",
      "tree": "03456f92f1c940aaaa8b440bb45f04423852619d",
      "parents": [
        "2ff87f4f80037bbb4b1d3c6875db68b42c3a5656"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed Jun 03 00:58:43 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Fri Jun 05 13:25:38 2026 -0400"
      },
      "message": "Bump org.junit:junit-bom from 6.0.3 to 6.1.0\n\nBumps [org.junit:junit-bom](https://github.com/junit-team/junit-framework) from 6.0.3 to 6.1.0.\n- [Release notes](https://github.com/junit-team/junit-framework/releases)\n- [Commits](https://github.com/junit-team/junit-framework/compare/r6.0.3...r6.1.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.junit:junit-bom\n  dependency-version: 6.1.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "2ff87f4f80037bbb4b1d3c6875db68b42c3a5656",
      "tree": "438c790372ebceb32695143b0ca8e352a3851fd0",
      "parents": [
        "f6cb8e181699bbeb30d764c9e70a206782d25582"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed Jun 03 00:58:35 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Fri Jun 05 13:25:29 2026 -0400"
      },
      "message": "Bump io.swagger.core.v3:swagger-annotations from 2.2.49 to 2.2.50\n\nBumps io.swagger.core.v3:swagger-annotations from 2.2.49 to 2.2.50.\n\n---\nupdated-dependencies:\n- dependency-name: io.swagger.core.v3:swagger-annotations\n  dependency-version: 2.2.50\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "f6cb8e181699bbeb30d764c9e70a206782d25582",
      "tree": "ccfcf72819b932cbe15b0bc17156ea891d00ac1b",
      "parents": [
        "cdfcd29ea968b5578da0c16e7d03447e1b3786f8"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed Jun 03 00:58:15 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Fri Jun 05 13:25:13 2026 -0400"
      },
      "message": "Bump org.apache.directory.project:project from 50 to 51\n\nBumps [org.apache.directory.project:project](https://github.com/apache/directory-project) from 50 to 51.\n- [Commits](https://github.com/apache/directory-project/commits)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.directory.project:project\n  dependency-version: \u002751\u0027\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "cdfcd29ea968b5578da0c16e7d03447e1b3786f8",
      "tree": "aa6b91b15f62781ebd2d4c3128f8758fa38f1d68",
      "parents": [
        "8953cf24e3418cbeb6faed3c3af190ceffb86581"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed Jun 03 00:58:12 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Fri Jun 05 13:25:04 2026 -0400"
      },
      "message": "Bump version.logback from 1.5.32 to 1.5.34\n\nBumps `version.logback` from 1.5.32 to 1.5.34.\n\nUpdates `ch.qos.logback:logback-core` from 1.5.32 to 1.5.34\n- [Release notes](https://github.com/qos-ch/logback/releases)\n- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.32...v_1.5.34)\n\nUpdates `ch.qos.logback:logback-classic` from 1.5.32 to 1.5.34\n- [Release notes](https://github.com/qos-ch/logback/releases)\n- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.32...v_1.5.34)\n\n---\nupdated-dependencies:\n- dependency-name: ch.qos.logback:logback-core\n  dependency-version: 1.5.34\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n- dependency-name: ch.qos.logback:logback-classic\n  dependency-version: 1.5.34\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "8953cf24e3418cbeb6faed3c3af190ceffb86581",
      "tree": "92b6202829f114a3dc1c95023508c0e4575b78c1",
      "parents": [
        "313b68e1a6ab8b76d3cf31ee1cd81a1b78dab91b"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed Jun 03 00:58:11 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Fri Jun 05 13:24:56 2026 -0400"
      },
      "message": "Bump actions/checkout from 6.0.2 to 6.0.3\n\nBumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 6.0.3.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...df4cb1c069e1874edd31b4311f1884172cec0e10)\n\n---\nupdated-dependencies:\n- dependency-name: actions/checkout\n  dependency-version: 6.0.3\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "313b68e1a6ab8b76d3cf31ee1cd81a1b78dab91b",
      "tree": "6bfcf06d3f3f631e50eca6179bd79d3f25de3898",
      "parents": [
        "cc8db0f7e128441044519e2c2f6b2dc00c29504a"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed Jun 03 00:57:58 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Fri Jun 05 13:24:45 2026 -0400"
      },
      "message": "Bump com.gradle:develocity-maven-extension from 2.4.0 to 2.4.1\n\nBumps com.gradle:develocity-maven-extension from 2.4.0 to 2.4.1.\n\n---\nupdated-dependencies:\n- dependency-name: com.gradle:develocity-maven-extension\n  dependency-version: 2.4.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "cc8db0f7e128441044519e2c2f6b2dc00c29504a",
      "tree": "06bcc506f9bf8469b3d75528ef42447f566517e8",
      "parents": [
        "fde3e5139277def46905b6d40c35fa02c67f35ce"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed Jun 03 00:57:53 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Fri Jun 05 13:24:35 2026 -0400"
      },
      "message": "Bump org.owasp:dependency-check-maven from 12.2.1 to 12.2.2\n\nBumps [org.owasp:dependency-check-maven](https://github.com/dependency-check/DependencyCheck) from 12.2.1 to 12.2.2.\n- [Release notes](https://github.com/dependency-check/DependencyCheck/releases)\n- [Changelog](https://github.com/dependency-check/DependencyCheck/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/dependency-check/DependencyCheck/compare/v12.2.1...v12.2.2)\n\n---\nupdated-dependencies:\n- dependency-name: org.owasp:dependency-check-maven\n  dependency-version: 12.2.2\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "fde3e5139277def46905b6d40c35fa02c67f35ce",
      "tree": "2aa0a23bf7c989474b853a5633ddbd428c713ba9",
      "parents": [
        "e7c62204fbbeb98f5f0f3ab1d752af5240944a49"
      ],
      "author": {
        "name": "Brian Demers",
        "email": "bdemers@apache.org",
        "time": "Fri Jun 05 12:40:43 2026 -0400"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Fri Jun 05 13:23:58 2026 -0400"
      },
      "message": "Run GlassFish integration tests against 7.x and 8.x\n\nSplit the single GlassFish container entry into per-major-version matrix\nentries, glassfish-v7 (7.1.0) and glassfish-v8 (8.0.2), so both supported\nmajor versions run in a single CI execution instead of one replacing the\nother. Each image line keeps its own \u0027# renovate:\u0027 comment so Renovate\ntracks the two majors independently; the per-version enabled/timeout\nproperties fall out of the existing \u0027\u003cname\u003e.enabled\u0027 / \u0027\u003cname\u003e.timeout\u0027\nconvention (glassfish-v7.enabled, glassfish-v8.enabled, both default true).\n\nAdd a Renovate packageRule that constrains the 7.x line to the 7 series\n(allowedVersions \u003c 8.0.0) while leaving the 8.x line open to major bumps,\nso a GlassFish 9 release still surfaces a PR and a glassfish-v9 entry can\nbe added the same way v8 was added alongside v7.\n\nFixes: #1059\n"
    },
    {
      "commit": "e7c62204fbbeb98f5f0f3ab1d752af5240944a49",
      "tree": "65404b1fc4ab9526f1052e2f8be8f0a1b9efcb54",
      "parents": [
        "1a6a362f4735ae3279ba19969c21074c3699e404"
      ],
      "author": {
        "name": "Brian Demers",
        "email": "bdemers@apache.org",
        "time": "Sun May 31 15:08:46 2026 -0400"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "bdemers@apache.org",
        "time": "Sun May 31 15:08:46 2026 -0400"
      },
      "message": "Add AGENTS.md and point issue tracking at GitHub Issues\n\nAdd contributor/agent guidance (AGENTS.md); update README to reference GitHub Issues instead of the stale ASF Jira link.\n"
    },
    {
      "commit": "1a6a362f4735ae3279ba19969c21074c3699e404",
      "tree": "4583ccf73b51a3e6f281fd92af98ac1026bb634a",
      "parents": [
        "c4fac41693b2e7460107bb82dd34d11fa30ea555"
      ],
      "author": {
        "name": "Brian Demers",
        "email": "bdemers@apache.org",
        "time": "Sun May 31 15:08:45 2026 -0400"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "bdemers@apache.org",
        "time": "Sun May 31 15:08:45 2026 -0400"
      },
      "message": "Note example modules are demo-only, not production-hardened\n\nEach scim-server-examples README warns the example is for demonstration only (in-memory storage, plaintext passwords, no authn/authz or TLS) and is not a published artifact.\n"
    },
    {
      "commit": "c4fac41693b2e7460107bb82dd34d11fa30ea555",
      "tree": "8072ac49b2d5403846c53fe2dc48098ca5c5f69d",
      "parents": [
        "7da77c703410c0d37c30318398914245989d6315"
      ],
      "author": {
        "name": "Brian Demers",
        "email": "bdemers@apache.org",
        "time": "Sun May 31 15:08:44 2026 -0400"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "bdemers@apache.org",
        "time": "Sun May 31 15:08:44 2026 -0400"
      },
      "message": "Add security policy and threat model\n\nSECURITY.md (private disclosure via security@apache.org), THREAT_MODEL.md (scope, security properties, and triage dispositions), and threat-model.yaml (machine-readable sidecar).\n"
    },
    {
      "commit": "7da77c703410c0d37c30318398914245989d6315",
      "tree": "4b8747f88738a934eea7926872859270857844d2",
      "parents": [
        "3fc91e8d920bf81c4caa3c5c6c63c25a91f3f1ec"
      ],
      "author": {
        "name": "Brian Demers",
        "email": "bdemers@apache.org",
        "time": "Sun May 31 14:38:35 2026 -0400"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Sun May 31 14:51:15 2026 -0400"
      },
      "message": "Remove unused ApiOriginFilter\n\nDead code: the CORS filter carries no @Provider and is referenced nowhere; leftover from the project\u0027s initial import to Apache.\n"
    },
    {
      "commit": "3fc91e8d920bf81c4caa3c5c6c63c25a91f3f1ec",
      "tree": "8fa0bc855ee5b8e49e80edac085d1419f64dbb8d",
      "parents": [
        "1dc926d52eecfe66fc405b69ebc5205b6e86cfdd"
      ],
      "author": {
        "name": "Brian Demers",
        "email": "bdemers@apache.org",
        "time": "Sun May 31 13:51:42 2026 -0400"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Sun May 31 13:58:35 2026 -0400"
      },
      "message": "Bump version.spring-boot3 to 3.5.14 and version.spring-boot4 to 4.0.6\n"
    },
    {
      "commit": "1dc926d52eecfe66fc405b69ebc5205b6e86cfdd",
      "tree": "006a1af94ad1738fce28e5252becca4b7edfeede",
      "parents": [
        "f7fcb1635b1205b4f28adcf382c9d7208bf9eda0"
      ],
      "author": {
        "name": "Brian Demers",
        "email": "bdemers@apache.org",
        "time": "Sat May 30 23:30:23 2026 -0400"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Sun May 31 13:50:25 2026 -0400"
      },
      "message": "Prevent example modules from being published to Maven Central\n\nThe scim-server-examples/* demos are intentionally not production-hardened\n(cleartext passwords, no auth/TLS) and must never appear as consumable\nartifacts. Previously nothing in the build prevented a full reactor deploy\nfrom staging them.\n\nIntroduce an intermediate parent POM at scim-server-examples/pom.xml\n(groupId org.apache.directory.scimple.examples, packaging pom) that sets\nmaven.deploy.skip and skipNexusStagingDeployMojo once, plus pluginManagement\noverrides that skip the source, gpg, and javadoc plugins for the examples. The\nsix example modules inherit from it, so future examples are non-publishing by\ndefault. The root reactor now references the single scim-server-examples\naggregator.\n\nThe skip behavior lives in pluginManagement rather than build/plugins and an\napache-release profile: the plugins are already bound elsewhere (nexus-staging\nin the root reactor\u0027s build, source/gpg/javadoc by the ASF apache-release\nprofile), so management-only config overrides them uniformly across every\nexample module without forcing new plugin bindings.\n\nscim-coverage is deliberately left untouched: it is the last reactor module\nand is where nexus-staging triggers the deferred batch upload, so skipping it\nwould suppress publishing of the real libraries. A comment marks it as\nrequired-last.\n"
    },
    {
      "commit": "f7fcb1635b1205b4f28adcf382c9d7208bf9eda0",
      "tree": "98972f70eba95aa4e74f6b3918f11decc0ff1e16",
      "parents": [
        "e14b79efbe7aaf2704906407864d30d78d96cc88"
      ],
      "author": {
        "name": "Brian Demers",
        "email": "bdemers@apache.org",
        "time": "Sat May 30 23:32:45 2026 -0400"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Sun May 31 13:12:28 2026 -0400"
      },
      "message": "Guard Returned.NEVER attributes from leaking via toString() and responses\n\nReturned.NEVER attributes (in the core schema, only ScimUser.password) must\nnever appear in a serialized SCIM response (RFC 7643 section 2.2 / 8.7.1) nor in\na resource\u0027s toString() output, which scim-server logs at DEBUG. Both held in\ncode but were not guarded by tests, so a future change (e.g. regenerating\ntoString(), or adding a new NEVER attribute) could silently reintroduce a leak.\n\nscim-spec-schema (ScimUserTest, new): guards the toString() / logging channel.\n- VALUE-channel guard: the password value (a sentinel) must not appear.\n- SCHEMA/NAME-channel guard: schema-driven over every Returned.NEVER attribute,\n  asserting its \"name\u003d\" token is absent, so a future NEVER field is covered too.\n- null-password case: \"password\u003d\" must be absent even when password is null.\n- sanity check: password is annotated Returned.NEVER in the schema.\n\nscim-server (AttributeUtilTest, +3 tests): guards the response channel through\nAttributeUtil.setAttributesForDisplay() — password stripped on display and even\nwhen explicitly requested, absent from the serialized JSON (with a present-in-raw\nbaseline proving stripping is causal), and the original resource is not mutated.\n\nscim-test (ExampleObjectExtension): omit the Returned.NEVER valueNever field from\ntoString(), mirroring ScimUser.toString() omitting password, so the example does\nnot model a leak for implementers who copy it.\n\nTests use JUnit 5 + AssertJ and a distinctive sentinel value.\n"
    },
    {
      "commit": "e14b79efbe7aaf2704906407864d30d78d96cc88",
      "tree": "35137b5a8cd891685e4c5ed6e938bfae098be145",
      "parents": [
        "895ee055da9cf2aff0ae23042733382abc0af7f7"
      ],
      "author": {
        "name": "Brian Demers",
        "email": "bdemers@apache.org",
        "time": "Sat May 30 21:53:52 2026 -0400"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Sat May 30 22:06:40 2026 -0400"
      },
      "message": "Enforce ServerConfiguration bulk and filter limits in the request path\n\nThe bulkMaxOperations, bulkMaxPayloadSize, and filterMaxResults values from\nServerConfiguration were advertised in /ServiceProviderConfig but never applied\nto incoming requests. They are now enforced:\n\n- bulkMaxOperations: BulkResourceImpl.doBulk rejects a request that contains\n  more operations than the configured limit with HTTP 413 before any operation\n  runs (and before the dependency graph is built).\n\n- bulkMaxPayloadSize: BulkPayloadSizeFilter, bound to POST /Bulk by\n  BulkPayloadSizeDynamicFeature, wraps the request entity stream in a\n  LimitingInputStream that counts bytes as the parser reads them and raises\n  BulkPayloadTooLargeException once the limit is exceeded, without buffering the\n  body. The default is raised from 1024 to 2097152 bytes.\n\n- filterMaxResults: BaseResourceTypeResourceImpl.find clamps the page request\n  count to the configured ceiling before querying the repository, covering both\n  the GET query and POST .search paths. totalResults still reports the real\n  match count.\n\n413 responses carry scimType \"tooMany\" and state the maximum, per RFC 7644\nsection 3.7.4. The new providers are registered in ScimResourceHelper, and unit\ntests cover each limit, the streaming payload check, and the error mapper.\n"
    },
    {
      "commit": "895ee055da9cf2aff0ae23042733382abc0af7f7",
      "tree": "2f59826cacb898700015a35460887e7c9cb55ad8",
      "parents": [
        "ee3bae73bc343909a570e5bf232da224aeec7641"
      ],
      "author": {
        "name": "Brian Demers",
        "email": "bdemers@apache.org",
        "time": "Sat May 30 21:56:08 2026 -0400"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Sat May 30 22:06:30 2026 -0400"
      },
      "message": "Cap recursion depth in the SCIM filter and PATCH path parser\n\nA small, deeply nested filter or PATCH path (for example \"(((((…)))))\") recursed until the request thread threw StackOverflowError. Introduce FilterParsers, a single hardened parse facade shared by Filter and PatchOperationPath, which rejects input nested beyond FilterParsers.MAX_NESTING_DEPTH (40) with a FilterParseException thrown during parsing, before the recursive-descent parser can overflow the stack.\n\nAlso stop echoing raw input back in the parse-error messages from both entry points.\n"
    },
    {
      "commit": "ee3bae73bc343909a570e5bf232da224aeec7641",
      "tree": "e9e806818b76f0a58f41c45602b20f1742dcdf09",
      "parents": [
        "1eea1839e627d093b9b32f9c70f556de5de79fdb"
      ],
      "author": {
        "name": "Mend Renovate",
        "email": "bot@renovateapp.com",
        "time": "Sun May 17 20:29:41 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Sat May 30 13:16:48 2026 -0400"
      },
      "message": "Update dependency maven to v3.9.16\n"
    },
    {
      "commit": "1eea1839e627d093b9b32f9c70f556de5de79fdb",
      "tree": "177d5214f806a3f0b6efb9c4ef3f68ea43f2151e",
      "parents": [
        "56966734cf4a431f593be9a7f89222e497299fe0"
      ],
      "author": {
        "name": "Mend Renovate",
        "email": "bot@renovateapp.com",
        "time": "Wed May 13 09:32:44 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Sat May 30 13:16:32 2026 -0400"
      },
      "message": "Update payara/micro Docker tag to v7.2026.5\n"
    },
    {
      "commit": "56966734cf4a431f593be9a7f89222e497299fe0",
      "tree": "51e2b15ec14e481e6b1fe54c49d19150bcee08c0",
      "parents": [
        "e55a1b4787f39d915d08d4b5a2bf3254f111ecfc"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Apr 20 19:39:08 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Thu May 28 14:10:51 2026 -0400"
      },
      "message": "Bump org.testcontainers:testcontainers from 2.0.4 to 2.0.5\n\nBumps [org.testcontainers:testcontainers](https://github.com/testcontainers/testcontainers-java) from 2.0.4 to 2.0.5.\n- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)\n- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/testcontainers/testcontainers-java/compare/2.0.4...2.0.5)\n\n---\nupdated-dependencies:\n- dependency-name: org.testcontainers:testcontainers\n  dependency-version: 2.0.5\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "e55a1b4787f39d915d08d4b5a2bf3254f111ecfc",
      "tree": "c48e27ef7bb9c6db486b2572c08875f44f86d3e3",
      "parents": [
        "de66bdc6e3654e995a9edcfba2a7b05ce8ef6f9f"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Apr 20 19:37:31 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Thu May 28 14:10:44 2026 -0400"
      },
      "message": "Bump com.google.guava:guava from 33.5.0-android to 33.6.0-android\n\nBumps [com.google.guava:guava](https://github.com/google/guava) from 33.5.0-android to 33.6.0-android.\n- [Release notes](https://github.com/google/guava/releases)\n- [Commits](https://github.com/google/guava/commits)\n\n---\nupdated-dependencies:\n- dependency-name: com.google.guava:guava\n  dependency-version: 33.6.0-android\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "de66bdc6e3654e995a9edcfba2a7b05ce8ef6f9f",
      "tree": "966e18d9016b3faef92b4cc7a96efd931f0d09ec",
      "parents": [
        "08a938b853a823ae1518e429c833bc0674d0f818"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Apr 20 19:37:39 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Thu May 28 14:10:33 2026 -0400"
      },
      "message": "Bump version.resteasy from 7.0.1.Final to 7.0.2.Final\n\nBumps `version.resteasy` from 7.0.1.Final to 7.0.2.Final.\n\nUpdates `org.jboss.resteasy:resteasy-client` from 7.0.1.Final to 7.0.2.Final\n- [Release notes](https://github.com/resteasy/resteasy/releases)\n- [Commits](https://github.com/resteasy/resteasy/compare/v7.0.1.Final...v7.0.2.Final)\n\nUpdates `org.jboss.resteasy:resteasy-jackson2-provider` from 7.0.1.Final to 7.0.2.Final\n\n---\nupdated-dependencies:\n- dependency-name: org.jboss.resteasy:resteasy-client\n  dependency-version: 7.0.2.Final\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n- dependency-name: org.jboss.resteasy:resteasy-jackson2-provider\n  dependency-version: 7.0.2.Final\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "08a938b853a823ae1518e429c833bc0674d0f818",
      "tree": "852c9ff54d2d74acfc38dd15ba2fd36127e01213",
      "parents": [
        "364be7bc6c614e49fe3fc594f89cce81122fe88d"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Apr 27 21:12:14 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Thu May 28 14:09:57 2026 -0400"
      },
      "message": "Bump version.quarkus from 3.34.3 to 3.34.6\n\nBumps `version.quarkus` from 3.34.3 to 3.34.6.\n\nUpdates `io.quarkus.platform:quarkus-bom` from 3.34.3 to 3.34.6\n- [Commits](https://github.com/quarkusio/quarkus-platform/compare/3.34.3...3.34.6)\n\nUpdates `io.quarkus.platform:quarkus-maven-plugin` from 3.34.3 to 3.34.6\n- [Commits](https://github.com/quarkusio/quarkus-platform/compare/3.34.3...3.34.6)\n\n---\nupdated-dependencies:\n- dependency-name: io.quarkus.platform:quarkus-bom\n  dependency-version: 3.34.6\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n- dependency-name: io.quarkus.platform:quarkus-maven-plugin\n  dependency-version: 3.34.6\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "364be7bc6c614e49fe3fc594f89cce81122fe88d",
      "tree": "36a922c88bf47d7684c24564864edc70d6d76fce",
      "parents": [
        "09a752a4dbb21c2b5cbb4a2a1f83b5170909d601"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Apr 27 21:12:26 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Thu May 28 14:09:48 2026 -0400"
      },
      "message": "Bump com.gradle:common-custom-user-data-maven-extension\n\nBumps [com.gradle:common-custom-user-data-maven-extension](https://github.com/gradle/common-custom-user-data-maven-extension) from 2.1.0 to 2.2.0.\n- [Commits](https://github.com/gradle/common-custom-user-data-maven-extension/compare/v2.1.0...v2.2.0)\n\n---\nupdated-dependencies:\n- dependency-name: com.gradle:common-custom-user-data-maven-extension\n  dependency-version: 2.2.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "09a752a4dbb21c2b5cbb4a2a1f83b5170909d601",
      "tree": "1a3cf939637d9b2fbebc2b3137d4ac2ee77215e3",
      "parents": [
        "632b1688547f758c818489e4f3d401602a5f01e7"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Apr 27 21:12:58 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Thu May 28 14:09:27 2026 -0400"
      },
      "message": "Bump commons-codec:commons-codec from 1.21.0 to 1.22.0\n\nBumps [commons-codec:commons-codec](https://github.com/apache/commons-codec) from 1.21.0 to 1.22.0.\n- [Changelog](https://github.com/apache/commons-codec/blob/master/RELEASE-NOTES.txt)\n- [Commits](https://github.com/apache/commons-codec/compare/rel/commons-codec-1.21.0...rel/commons-codec-1.22.0)\n\n---\nupdated-dependencies:\n- dependency-name: commons-codec:commons-codec\n  dependency-version: 1.22.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "632b1688547f758c818489e4f3d401602a5f01e7",
      "tree": "50c27199805299ca1189a0d78b05c6443d7d5cb4",
      "parents": [
        "962f1620ccc5d3072e4d911218366977f9cef7b7"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue May 12 00:33:00 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Thu May 28 14:09:17 2026 -0400"
      },
      "message": "Bump io.swagger.core.v3:swagger-annotations from 2.2.45 to 2.2.49\n\nBumps io.swagger.core.v3:swagger-annotations from 2.2.45 to 2.2.49.\n\n---\nupdated-dependencies:\n- dependency-name: io.swagger.core.v3:swagger-annotations\n  dependency-version: 2.2.49\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "962f1620ccc5d3072e4d911218366977f9cef7b7",
      "tree": "ae35e6089aeb9ddb86df91a601e88c7930170f15",
      "parents": [
        "421f34a5f2b2a831f703fd0d0ff7ea6bf3ef8494"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue May 12 00:33:06 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Thu May 28 14:09:07 2026 -0400"
      },
      "message": "Bump com.fasterxml.jackson:jackson-bom from 2.21.2 to 2.21.3\n\nBumps [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) from 2.21.2 to 2.21.3.\n- [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.21.2...jackson-bom-2.21.3)\n\n---\nupdated-dependencies:\n- dependency-name: com.fasterxml.jackson:jackson-bom\n  dependency-version: 2.21.3\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "421f34a5f2b2a831f703fd0d0ff7ea6bf3ef8494",
      "tree": "0187ecf99ba0c1d728341a68865869153a130c00",
      "parents": [
        "c3645693321925cb32beb0758d5b30b601e21ce1"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue May 12 00:33:43 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Thu May 28 14:09:01 2026 -0400"
      },
      "message": "Bump com.github.siom79.japicmp:japicmp-maven-plugin\n\nBumps [com.github.siom79.japicmp:japicmp-maven-plugin](https://github.com/siom79/japicmp) from 0.25.5 to 0.25.7.\n- [Release notes](https://github.com/siom79/japicmp/releases)\n- [Changelog](https://github.com/siom79/japicmp/blob/master/release.py)\n- [Commits](https://github.com/siom79/japicmp/compare/japicmp-base-0.25.5...japicmp-base-0.25.7)\n\n---\nupdated-dependencies:\n- dependency-name: com.github.siom79.japicmp:japicmp-maven-plugin\n  dependency-version: 0.25.7\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "c3645693321925cb32beb0758d5b30b601e21ce1",
      "tree": "98add0402840dadc6909460d38cfa602482a2a4d",
      "parents": [
        "84ce09939df9050aa6068d0b0ef95d7a3bdf92fe"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon May 25 23:07:51 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Thu May 28 14:08:22 2026 -0400"
      },
      "message": "Bump github/codeql-action from 4.35.2 to 4.36.0\n\nBumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.2 to 4.36.0.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/95e58e9a2cdfd71adc6e0353d5c52f41a045d225...7211b7c8077ea37d8641b6271f6a365a22a5fbfa)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action\n  dependency-version: 4.36.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "84ce09939df9050aa6068d0b0ef95d7a3bdf92fe",
      "tree": "73590639e2494bcb0d18a46f7fc7cc0833d50397",
      "parents": [
        "fd2134844cf6517eec15ad2c741130e871be38d7"
      ],
      "author": {
        "name": "The Apache Software Foundation",
        "email": "root-asf-gitbox-commits@apache.org",
        "time": "Fri May 15 15:27:39 2026 -0500"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Thu May 28 14:05:22 2026 -0400"
      },
      "message": "Set up default protection ruleset for default and release branches"
    },
    {
      "commit": "fd2134844cf6517eec15ad2c741130e871be38d7",
      "tree": "54eb55efb64ba92f73c38577a9c4eb1a86c64350",
      "parents": [
        "7835ba037d4e44d97bba8950795ed24dadc3173a"
      ],
      "author": {
        "name": "Mend Renovate",
        "email": "bot@renovateapp.com",
        "time": "Thu Apr 16 02:48:26 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Sun Apr 19 16:50:25 2026 -0400"
      },
      "message": "Update payara/micro Docker tag to v7.2026.4\n"
    },
    {
      "commit": "7835ba037d4e44d97bba8950795ed24dadc3173a",
      "tree": "c02fe7e8a89c76b62d45120a1af34957c54391cf",
      "parents": [
        "34c9bfcdfbaeff2f089aa4e89d026d2c8c3c21fa"
      ],
      "author": {
        "name": "Mend Renovate",
        "email": "bot@renovateapp.com",
        "time": "Fri Apr 17 12:04:04 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Sun Apr 19 16:50:17 2026 -0400"
      },
      "message": "Update dependency maven to v3.9.15\n"
    },
    {
      "commit": "34c9bfcdfbaeff2f089aa4e89d026d2c8c3c21fa",
      "tree": "cef8f2aca2b165d49e3ec641dd9f05fd01a85c1a",
      "parents": [
        "693507db89a2a318f94bddce61df187789736133"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Apr 13 18:27:44 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Sat Apr 18 15:37:13 2026 -0400"
      },
      "message": "Bump actions/upload-artifact from 7.0.0 to 7.0.1\n\nBumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 7.0.0 to 7.0.1.\n- [Release notes](https://github.com/actions/upload-artifact/releases)\n- [Commits](https://github.com/actions/upload-artifact/compare/bbbca2ddaa5d8feaa63e36b76fdaad77386f024f...043fb46d1a93c77aae656e7c1c64a875d1fc6a0a)\n\n---\nupdated-dependencies:\n- dependency-name: actions/upload-artifact\n  dependency-version: 7.0.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "693507db89a2a318f94bddce61df187789736133",
      "tree": "a319639c244f6fb21311c3a839f156d338ff4465",
      "parents": [
        "fdd9dc9d59c6f0b5b9dad11308860c1356049641"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Apr 13 18:27:45 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Sat Apr 18 15:37:03 2026 -0400"
      },
      "message": "Bump org.owasp:dependency-check-maven from 12.2.0 to 12.2.1\n\nBumps [org.owasp:dependency-check-maven](https://github.com/dependency-check/DependencyCheck) from 12.2.0 to 12.2.1.\n- [Release notes](https://github.com/dependency-check/DependencyCheck/releases)\n- [Changelog](https://github.com/dependency-check/DependencyCheck/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/dependency-check/DependencyCheck/compare/v12.2.0...v12.2.1)\n\n---\nupdated-dependencies:\n- dependency-name: org.owasp:dependency-check-maven\n  dependency-version: 12.2.1\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "fdd9dc9d59c6f0b5b9dad11308860c1356049641",
      "tree": "6c9056130673b11295e37f50aab64d5acabdc753",
      "parents": [
        "3311dbe92e49fb4d583a5e8d6dd7af9b5b3e437c"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed Apr 15 17:12:57 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Sat Apr 18 15:36:22 2026 -0400"
      },
      "message": "Bump github/codeql-action from 4.35.1 to 4.35.2\n\nBumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.1 to 4.35.2.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/c10b8064de6f491fea524254123dbe5e09572f13...95e58e9a2cdfd71adc6e0353d5c52f41a045d225)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action\n  dependency-version: 4.35.2\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "3311dbe92e49fb4d583a5e8d6dd7af9b5b3e437c",
      "tree": "ae5c881b5a51493f65569b1ee1cd38121fe3c188",
      "parents": [
        "07f7d6d30ea742f4c0ac2b1f4d628df4f19923f5"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Apr 13 18:28:56 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Sat Apr 18 15:35:56 2026 -0400"
      },
      "message": "Bump com.github.siom79.japicmp:japicmp-maven-plugin\n\nBumps [com.github.siom79.japicmp:japicmp-maven-plugin](https://github.com/siom79/japicmp) from 0.25.4 to 0.25.5.\n- [Release notes](https://github.com/siom79/japicmp/releases)\n- [Changelog](https://github.com/siom79/japicmp/blob/master/release.py)\n- [Commits](https://github.com/siom79/japicmp/compare/japicmp-base-0.25.4...japicmp-base-0.25.5)\n\n---\nupdated-dependencies:\n- dependency-name: com.github.siom79.japicmp:japicmp-maven-plugin\n  dependency-version: 0.25.5\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "07f7d6d30ea742f4c0ac2b1f4d628df4f19923f5",
      "tree": "e651a32f14abc3d8ed80bcaad575d55c0fc02026",
      "parents": [
        "e26e19438d42e0b720fd8f3c2be9c92bbd8bff7f"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Apr 13 18:27:37 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Sat Apr 18 15:35:45 2026 -0400"
      },
      "message": "Bump version.quarkus from 3.34.1 to 3.34.3\n\nBumps `version.quarkus` from 3.34.1 to 3.34.3.\n\nUpdates `io.quarkus.platform:quarkus-bom` from 3.34.1 to 3.34.3\n- [Commits](https://github.com/quarkusio/quarkus-platform/compare/3.34.1...3.34.3)\n\nUpdates `io.quarkus.platform:quarkus-maven-plugin` from 3.34.1 to 3.34.3\n- [Commits](https://github.com/quarkusio/quarkus-platform/compare/3.34.1...3.34.3)\n\n---\nupdated-dependencies:\n- dependency-name: io.quarkus.platform:quarkus-bom\n  dependency-version: 3.34.3\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n- dependency-name: io.quarkus.platform:quarkus-maven-plugin\n  dependency-version: 3.34.3\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "e26e19438d42e0b720fd8f3c2be9c92bbd8bff7f",
      "tree": "4aff974de8514b4e2cabcb50dfffcfe7ac2edf7a",
      "parents": [
        "c09e6556cc862a88cb617fbe5f9d6c158ef03bbd"
      ],
      "author": {
        "name": "Brian Demers",
        "email": "bdemers@apache.org",
        "time": "Sun Mar 22 22:25:36 2026 -0400"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Fri Apr 03 17:50:36 2026 -0400"
      },
      "message": "Add FilterExpressionVisitor SPI with accept() on FilterExpression\n\nIntroduces a visitor interface for traversing the sealed FilterExpression\nhierarchy. Since FilterExpression permits exactly 5 subtypes, visitor\nimplementations are compile-time complete — all expression types must\nbe handled.\n\nAdds accept(FilterExpressionVisitor\u003cR\u003e) default method on\nFilterExpression that dispatches to the appropriate visit() method.\nThis replaces the instanceof chain pattern needed by non-in-memory\nbackends (LDAP, SQL, etc.) for filter-to-query translation.\n\nGenerated-by: Claude Opus 4.6 (1M context) \u003cnoreply@anthropic.com\u003e\n"
    },
    {
      "commit": "c09e6556cc862a88cb617fbe5f9d6c158ef03bbd",
      "tree": "f4d3446254735869561d8992c6aa2873a8f73aee",
      "parents": [
        "f4b5fa19217919e32da9316e6eb18c36b973591a"
      ],
      "author": {
        "name": "Brian Demers",
        "email": "bdemers@apache.org",
        "time": "Fri Apr 03 15:02:13 2026 -0400"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Fri Apr 03 17:36:06 2026 -0400"
      },
      "message": "Add sorting and pagination helpers for in-memory SCIM repositories\n\nCo-Authored-By: Claude Opus 4.6 (1M context) \u003cnoreply@anthropic.com\u003e\n"
    },
    {
      "commit": "f4b5fa19217919e32da9316e6eb18c36b973591a",
      "tree": "ff6b35ebf4eca0152736410f84e48aff7e1dc7dd",
      "parents": [
        "5f38a83df5854ae5b7a3281fa7952649bf1a0228"
      ],
      "author": {
        "name": "Mend Renovate",
        "email": "bot@renovateapp.com",
        "time": "Wed Mar 18 13:38:48 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Thu Apr 02 22:48:50 2026 -0400"
      },
      "message": "Update payara/micro Docker tag to v7.2026.3\n"
    },
    {
      "commit": "5f38a83df5854ae5b7a3281fa7952649bf1a0228",
      "tree": "53d5f004eea743fb97732946cdc29cddcc940883",
      "parents": [
        "0370336bdcb5cf1ec20bac1e97d363c539e1ba97"
      ],
      "author": {
        "name": "Brian Demers",
        "email": "bdemers@apache.org",
        "time": "Sun Mar 22 22:25:20 2026 -0400"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Thu Apr 02 22:39:39 2026 -0400"
      },
      "message": "Normalize attribute references and add projection helpers\n\nAdd AttributeReference.isFullyQualified() and deprecate hasUrn().\nNormalize unqualified AttributeReference objects to fully qualified\nform in BaseResourceTypeResourceImpl before creating ScimRequestContext,\nsearching base and extension schemas for the resource type.\n\nAdd getIncludedAttributeNames() and getExcludedAttributeNames() on\nScimRequestContext — returns fully qualified strings since the server\nlayer pre-qualifies all references.\n\nGenerated-by: Claude Opus 4.6 (1M context) \u003cnoreply@anthropic.com\u003e\n"
    },
    {
      "commit": "0370336bdcb5cf1ec20bac1e97d363c539e1ba97",
      "tree": "f1985c075e88e2188e06ce08bc55b70cbbf52894",
      "parents": [
        "dce1073c441cb368c77d0c4e6ea80c68ccaa0d06"
      ],
      "author": {
        "name": "Brian Demers",
        "email": "bdemers@apache.org",
        "time": "Thu Apr 02 22:21:56 2026 -0400"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Thu Apr 02 22:29:00 2026 -0400"
      },
      "message": "Only run compilation in CodeQL CI job\n\nA full build is run in other jobs, this will speed up the slow CodeQL process\n"
    },
    {
      "commit": "dce1073c441cb368c77d0c4e6ea80c68ccaa0d06",
      "tree": "d70b8d70f34d1bb33c71baa0a1f3350a2c4d71a3",
      "parents": [
        "db775369caf9dc68d4910783021839e5c7386b39"
      ],
      "author": {
        "name": "Brian Demers",
        "email": "bdemers@apache.org",
        "time": "Thu Apr 02 22:05:44 2026 -0400"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Thu Apr 02 22:15:29 2026 -0400"
      },
      "message": "Add pagination helpers to PageRequest and use in all InMemory services\n\nAdd PageRequest.paginate(List) to apply offset/limit as a page slice,\nand ScimRequestContext.getPageRequestOrDefault() to avoid null-checking.\nRefactor all InMemory*Service.find() to filter BEFORE paginating,\nfixing a bug where skip/limit was applied before the filter predicate.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) \u003cnoreply@anthropic.com\u003e\n"
    },
    {
      "commit": "db775369caf9dc68d4910783021839e5c7386b39",
      "tree": "ccef6285a2d2946be0f3bb78d683e9e8f6d92e87",
      "parents": [
        "cbf59e7d03413e35671bdcd640d4e63eda7555e8"
      ],
      "author": {
        "name": "Brian Demers",
        "email": "bdemers@apache.org",
        "time": "Sun Mar 22 22:24:57 2026 -0400"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Mon Mar 30 17:57:03 2026 -0400"
      },
      "message": "Add BaseRepository abstract class for Repository implementations\n\nProvides default implementations for getResourceClass() and patch(),\neliminating boilerplate that every Repository implementation must\nrepeat. The patch() default uses the standard get-apply-update pattern\nwith PatchHandler. Subclasses only need to implement create, update,\nget, find, and delete.\n\nGenerated-by: Claude Opus 4.6 (1M context) \u003cnoreply@anthropic.com\u003e\n"
    },
    {
      "commit": "cbf59e7d03413e35671bdcd640d4e63eda7555e8",
      "tree": "7d8defa751778fa033dc08b31e453709b6fd19e5",
      "parents": [
        "abb9f6db7e1efdb30b836120a6b029e44f21f068"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Mar 23 17:42:41 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Mon Mar 30 17:55:34 2026 -0400"
      },
      "message": "Bump com.fasterxml.jackson:jackson-bom from 2.21.1 to 2.21.2\n\nBumps [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) from 2.21.1 to 2.21.2.\n- [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.21.1...jackson-bom-2.21.2)\n\n---\nupdated-dependencies:\n- dependency-name: com.fasterxml.jackson:jackson-bom\n  dependency-version: 2.21.2\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "abb9f6db7e1efdb30b836120a6b029e44f21f068",
      "tree": "c7df85b7f398f6ee83b889fa105fdb445c0c47cc",
      "parents": [
        "25b70139970d20eda1cba8888f8070a23a13f5c5"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Mar 23 17:43:48 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Mon Mar 30 17:55:24 2026 -0400"
      },
      "message": "Bump org.testcontainers:testcontainers from 2.0.3 to 2.0.4\n\nBumps [org.testcontainers:testcontainers](https://github.com/testcontainers/testcontainers-java) from 2.0.3 to 2.0.4.\n- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)\n- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/testcontainers/testcontainers-java/compare/2.0.3...2.0.4)\n\n---\nupdated-dependencies:\n- dependency-name: org.testcontainers:testcontainers\n  dependency-version: 2.0.4\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "25b70139970d20eda1cba8888f8070a23a13f5c5",
      "tree": "ef04df7950d3af51bec7a0443da95723d5e8d372",
      "parents": [
        "9ac36052ff79fc5f29e3c98288f1d2396b998980"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Fri Mar 27 17:12:46 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Mon Mar 30 17:55:10 2026 -0400"
      },
      "message": "Bump github/codeql-action from 4.33.0 to 4.35.1\n\nBumps [github/codeql-action](https://github.com/github/codeql-action) from 4.33.0 to 4.35.1.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/b1bff81932f5cdfc8695c7752dcee935dcd061c8...c10b8064de6f491fea524254123dbe5e09572f13)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action\n  dependency-version: 4.35.1\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "9ac36052ff79fc5f29e3c98288f1d2396b998980",
      "tree": "a6797f4780f9e90e51b61b51718bf86185f41d26",
      "parents": [
        "ae80d60b8eeb3d8a12ded7c84b5bdc081e35d136"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Mar 30 18:46:16 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Mon Mar 30 17:54:57 2026 -0400"
      },
      "message": "Bump com.github.spotbugs:spotbugs-maven-plugin from 4.9.8.2 to 4.9.8.3\n\nBumps [com.github.spotbugs:spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin) from 4.9.8.2 to 4.9.8.3.\n- [Release notes](https://github.com/spotbugs/spotbugs-maven-plugin/releases)\n- [Commits](https://github.com/spotbugs/spotbugs-maven-plugin/compare/spotbugs-maven-plugin-4.9.8.2...spotbugs-maven-plugin-4.9.8.3)\n\n---\nupdated-dependencies:\n- dependency-name: com.github.spotbugs:spotbugs-maven-plugin\n  dependency-version: 4.9.8.3\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "ae80d60b8eeb3d8a12ded7c84b5bdc081e35d136",
      "tree": "032182a48fe45202e21b81eab40a6a8bf1f69c7d",
      "parents": [
        "5896fa88b3bffac713825e3c76fb44b6788f1c5e"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Mar 30 18:47:31 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Mon Mar 30 17:54:47 2026 -0400"
      },
      "message": "Bump version.quarkus from 3.32.3 to 3.34.1\n\nBumps `version.quarkus` from 3.32.3 to 3.34.1.\n\nUpdates `io.quarkus.platform:quarkus-bom` from 3.32.3 to 3.34.1\n- [Commits](https://github.com/quarkusio/quarkus-platform/compare/3.32.3...3.34.1)\n\nUpdates `io.quarkus.platform:quarkus-maven-plugin` from 3.32.3 to 3.34.1\n- [Commits](https://github.com/quarkusio/quarkus-platform/compare/3.32.3...3.34.1)\n\n---\nupdated-dependencies:\n- dependency-name: io.quarkus.platform:quarkus-bom\n  dependency-version: 3.34.1\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n- dependency-name: io.quarkus.platform:quarkus-maven-plugin\n  dependency-version: 3.34.1\n  dependency-type: direct:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "5896fa88b3bffac713825e3c76fb44b6788f1c5e",
      "tree": "e28aa5594199adffffafdf34306921772dc2fcbb",
      "parents": [
        "afa3a0d259ea09574e210e0fd6159ebf6122cd3a"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Mar 30 18:46:58 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Mon Mar 30 17:54:35 2026 -0400"
      },
      "message": "Bump com.gradle:develocity-maven-extension from 2.3.4 to 2.4.0\n\nBumps com.gradle:develocity-maven-extension from 2.3.4 to 2.4.0.\n\n---\nupdated-dependencies:\n- dependency-name: com.gradle:develocity-maven-extension\n  dependency-version: 2.4.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "afa3a0d259ea09574e210e0fd6159ebf6122cd3a",
      "tree": "3f83ac89f5a2b72f6d3439b1f398f3e9852eb711",
      "parents": [
        "2a5eaad5f334f1af9270d5418f51d13f5fd9404f"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Mar 23 17:42:29 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Mon Mar 30 17:54:05 2026 -0400"
      },
      "message": "Bump org.apache.rat:apache-rat-plugin from 0.17 to 0.18\n\nBumps org.apache.rat:apache-rat-plugin from 0.17 to 0.18.\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.rat:apache-rat-plugin\n  dependency-version: \u00270.18\u0027\n  dependency-type: direct:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "2a5eaad5f334f1af9270d5418f51d13f5fd9404f",
      "tree": "4a4d5bebf74a0cfec594cc479f0970a0e6ca5b5b",
      "parents": [
        "1aad28b3898eefaafd707f4e8a2950a63dea239f"
      ],
      "author": {
        "name": "Brian Demers",
        "email": "bdemers@apache.org",
        "time": "Mon Mar 16 20:07:57 2026 -0400"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Tue Mar 17 10:14:55 2026 -0400"
      },
      "message": "MutabilityException throws 500\n\nThe MutabilityExceptionMapper was configured for the wrong exception type\n\nAdds suite of tests to verify other exception mappers\n"
    },
    {
      "commit": "1aad28b3898eefaafd707f4e8a2950a63dea239f",
      "tree": "7e2da378c0f32a7f46837463dce372b0ff5f0636",
      "parents": [
        "3c71cb1c1655dea4f4c550ebe4b17999bec4f0ca"
      ],
      "author": {
        "name": "Brian Demers",
        "email": "bdemers@apache.org",
        "time": "Tue Mar 03 15:44:22 2026 -0500"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Mon Mar 16 20:11:56 2026 -0400"
      },
      "message": "Cleaning up examples to be consistent.\n\n- javadoc tweaks\n- formatting\n- header formatting\n"
    },
    {
      "commit": "3c71cb1c1655dea4f4c550ebe4b17999bec4f0ca",
      "tree": "cf59e96fe8ca0ad171a075daa8ad246914d3cbf8",
      "parents": [
        "2c77438484741f6015357df003ad5a4dac9b147f"
      ],
      "author": {
        "name": "Brian Demers",
        "email": "bdemers@apache.org",
        "time": "Tue Mar 03 15:08:40 2026 -0500"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Mon Mar 16 20:11:56 2026 -0400"
      },
      "message": "Removing InMemorySelfResolverImpl, default implementation provides the same functionality\n"
    },
    {
      "commit": "2c77438484741f6015357df003ad5a4dac9b147f",
      "tree": "a95bda99e29309105dd56de1f5911dfec78fe113",
      "parents": [
        "1ec9ad183b01b7fd8b54ddb97785c3b4b05389f0"
      ],
      "author": {
        "name": "Mend Renovate",
        "email": "bot@renovateapp.com",
        "time": "Thu Mar 12 13:10:29 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Mon Mar 16 18:48:57 2026 -0400"
      },
      "message": "Update dependency maven to v3.9.14\n"
    },
    {
      "commit": "1ec9ad183b01b7fd8b54ddb97785c3b4b05389f0",
      "tree": "0b2dfabbb71215c8887ce1d5508fc02756663996",
      "parents": [
        "de38e51839fb4bf6e00b95e79bc5585a17403ffb"
      ],
      "author": {
        "name": "Brian Demers",
        "email": "bdemers@apache.org",
        "time": "Mon Mar 02 17:34:48 2026 -0500"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Mon Mar 16 18:41:20 2026 -0400"
      },
      "message": "Use text block and String.join() in Schemas.java\n\nReplace StringBuilder with manual \\n appending with a text block for\nthe static message portion and String.join() for the dynamic list,\nmaking the error message construction more readable.\n"
    },
    {
      "commit": "de38e51839fb4bf6e00b95e79bc5585a17403ffb",
      "tree": "03219d8671d520fb01eaae39e59edd0be4053950",
      "parents": [
        "e1bdb873ade90013122606e2fc2aca8e63a63d2c"
      ],
      "author": {
        "name": "Brian Demers",
        "email": "bdemers@apache.org",
        "time": "Mon Mar 02 17:33:20 2026 -0500"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Mon Mar 16 18:41:20 2026 -0400"
      },
      "message": "Use switch arrow syntax in BulkResourceImpl\n\nConvert two traditional switch statements (case:/break) to use arrow\nsyntax (case -\u003e) in BulkResourceImpl. This eliminates the risk of\nfall-through bugs and makes the control flow more explicit.\n"
    },
    {
      "commit": "e1bdb873ade90013122606e2fc2aca8e63a63d2c",
      "tree": "fd6f7a81b9f9bf98804dede481790878bdd76e9c",
      "parents": [
        "c8cad2f6e3d5c214fbbd29c5c96c2a05ca62aaee"
      ],
      "author": {
        "name": "Brian Demers",
        "email": "bdemers@apache.org",
        "time": "Mon Mar 02 17:31:33 2026 -0500"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Mon Mar 16 18:41:20 2026 -0400"
      },
      "message": "Seal FilterExpression, ValueFilterExpression, and UnresolvedTopLevel\n\nUse Java 17 sealed interfaces/classes to restrict the type hierarchies:\n\n- FilterExpression is now sealed, permitting only the 5 known\n  implementation classes. This enables compile-time exhaustiveness\n  checking when pattern matching on filter expressions.\n- ValueFilterExpression is sealed with its 4 implementations.\n- UnresolvedTopLevel is sealed with its 2 private subclasses.\n\nAll implementation classes are now marked final.\n"
    },
    {
      "commit": "c8cad2f6e3d5c214fbbd29c5c96c2a05ca62aaee",
      "tree": "43351cbc7b296b7682233a7fe23d13883de6b013",
      "parents": [
        "b5183cddddbeed9510f08ff4d98cf8c38c345c89"
      ],
      "author": {
        "name": "Brian Demers",
        "email": "bdemers@apache.org",
        "time": "Mon Mar 02 17:26:08 2026 -0500"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Mon Mar 16 18:41:20 2026 -0400"
      },
      "message": "Use pattern matching for instanceof (Java 16+)\n\nReplace instanceof checks followed by explicit casts with pattern\nmatching for instanceof across the codebase. This eliminates redundant\ncasts and makes the code more concise.\n\nCovers equals() methods (~57 sites), filter expression dispatch in\nBaseFilterExpressionMapper, type checks in DefaultPatchHandler,\nObjectMapperFactory, BaseResourceTypeResourceImpl, and others.\n"
    },
    {
      "commit": "b5183cddddbeed9510f08ff4d98cf8c38c345c89",
      "tree": "05ba9d91c6c5c20ce1d08b19dc2a20dfa0a8731c",
      "parents": [
        "b53f6738eb104bf9038098006ef50157d16e38d1"
      ],
      "author": {
        "name": "Brian Demers",
        "email": "bdemers@apache.org",
        "time": "Mon Mar 02 17:17:28 2026 -0500"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Mon Mar 16 18:41:20 2026 -0400"
      },
      "message": "Replace .collect(Collectors.toList()) with .toList()\n\nUse Stream.toList() (Java 16+) instead of .collect(Collectors.toList())\nacross the codebase. This simplifies the code and removes unnecessary\nCollectors imports.\n\nWhere the returned list needs to be mutable (PatchGeneratorTest.createUser),\nuse new ArrayList\u003c\u003e(List.of(...)) instead.\n\nUpdated DefaultPatchHandler variable type from Collection\u003cObject\u003e to\nList\u003cMap\u003cString, Object\u003e\u003e to match the stricter type inference of\nStream.toList().\n"
    },
    {
      "commit": "b53f6738eb104bf9038098006ef50157d16e38d1",
      "tree": "dccbf07f2a84cd1358bcda8e8a8a8c8b2b633eb1",
      "parents": [
        "959765ba190146c4eacd8eb0ac4d7fe54e5106ae"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Mar 16 17:56:38 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Mon Mar 16 18:40:59 2026 -0400"
      },
      "message": "Bump org.mockito:mockito-core from 5.22.0 to 5.23.0\n\nBumps [org.mockito:mockito-core](https://github.com/mockito/mockito) from 5.22.0 to 5.23.0.\n- [Release notes](https://github.com/mockito/mockito/releases)\n- [Commits](https://github.com/mockito/mockito/compare/v5.22.0...v5.23.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.mockito:mockito-core\n  dependency-version: 5.23.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "959765ba190146c4eacd8eb0ac4d7fe54e5106ae",
      "tree": "3f3a1dea4c7412da53ee902f8e8184e0f448f456",
      "parents": [
        "c06b47a5617c384b7f2698291abcb5f237343b74"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Mar 16 17:56:15 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Mon Mar 16 18:40:29 2026 -0400"
      },
      "message": "Bump io.swagger.core.v3:swagger-annotations from 2.2.43 to 2.2.45\n\nBumps io.swagger.core.v3:swagger-annotations from 2.2.43 to 2.2.45.\n\n---\nupdated-dependencies:\n- dependency-name: io.swagger.core.v3:swagger-annotations\n  dependency-version: 2.2.45\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "c06b47a5617c384b7f2698291abcb5f237343b74",
      "tree": "7cd6fb30f9dd4be75cb3d805fc0cac022f631761",
      "parents": [
        "1b874c67232b3a2dd12fb3dc95db3bf0183d8379"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Mar 16 17:56:02 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Mon Mar 16 18:40:15 2026 -0400"
      },
      "message": "Bump org.mockito:mockito-junit-jupiter from 5.22.0 to 5.23.0\n\nBumps [org.mockito:mockito-junit-jupiter](https://github.com/mockito/mockito) from 5.22.0 to 5.23.0.\n- [Release notes](https://github.com/mockito/mockito/releases)\n- [Commits](https://github.com/mockito/mockito/compare/v5.22.0...v5.23.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.mockito:mockito-junit-jupiter\n  dependency-version: 5.23.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "1b874c67232b3a2dd12fb3dc95db3bf0183d8379",
      "tree": "cab3a84871b1859fc9591c328ef61fb3f59e2dd8",
      "parents": [
        "f0ad8da82faa3190c9c6b3672a90de18c38c2ca6"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Mar 16 17:55:30 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Mon Mar 16 18:39:58 2026 -0400"
      },
      "message": "Bump org.codehaus.mojo:extra-enforcer-rules from 1.11.0 to 1.12.0\n\nBumps [org.codehaus.mojo:extra-enforcer-rules](https://github.com/mojohaus/extra-enforcer-rules) from 1.11.0 to 1.12.0.\n- [Release notes](https://github.com/mojohaus/extra-enforcer-rules/releases)\n- [Commits](https://github.com/mojohaus/extra-enforcer-rules/compare/1.11.0...1.12.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.codehaus.mojo:extra-enforcer-rules\n  dependency-version: 1.12.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "f0ad8da82faa3190c9c6b3672a90de18c38c2ca6",
      "tree": "a928b0074eaf00b97efd54610a57d99ef5f89e2d",
      "parents": [
        "bcaef4f3392873137324957923e80ef81afdb357"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Mar 16 17:55:17 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Mon Mar 16 18:39:50 2026 -0400"
      },
      "message": "Bump version.quarkus from 3.32.1 to 3.32.3\n\nBumps `version.quarkus` from 3.32.1 to 3.32.3.\n\nUpdates `io.quarkus.platform:quarkus-bom` from 3.32.1 to 3.32.3\n- [Commits](https://github.com/quarkusio/quarkus-platform/compare/3.32.1...3.32.3)\n\nUpdates `io.quarkus.platform:quarkus-maven-plugin` from 3.32.1 to 3.32.3\n- [Commits](https://github.com/quarkusio/quarkus-platform/compare/3.32.1...3.32.3)\n\n---\nupdated-dependencies:\n- dependency-name: io.quarkus.platform:quarkus-bom\n  dependency-version: 3.32.3\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n- dependency-name: io.quarkus.platform:quarkus-maven-plugin\n  dependency-version: 3.32.3\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "bcaef4f3392873137324957923e80ef81afdb357",
      "tree": "d4e69af2ce86e58ffa841ceaf806ac02c5187232",
      "parents": [
        "46a2dbe9b2f4785ac5a66be8f164d07cc56b0f3f"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Mar 16 17:54:51 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Mon Mar 16 18:39:38 2026 -0400"
      },
      "message": "Bump github/codeql-action from 4.32.5 to 4.33.0\n\nBumps [github/codeql-action](https://github.com/github/codeql-action) from 4.32.5 to 4.33.0.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/c793b717bc78562f491db7b0e93a3a178b099162...b1bff81932f5cdfc8695c7752dcee935dcd061c8)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action\n  dependency-version: 4.33.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "46a2dbe9b2f4785ac5a66be8f164d07cc56b0f3f",
      "tree": "98ce39a7590760b9a7ba859f1678ade58b655502",
      "parents": [
        "32051fd17112d36f63128fe188e3c8d2496a0084"
      ],
      "author": {
        "name": "Brian Demers",
        "email": "bdemers@apache.org",
        "time": "Mon Mar 02 17:46:39 2026 -0500"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Mon Mar 02 19:13:12 2026 -0500"
      },
      "message": "Update project to Java 17 using OpenRewrite\n"
    },
    {
      "commit": "32051fd17112d36f63128fe188e3c8d2496a0084",
      "tree": "b3ac129e487f638313455166791f648de0140577",
      "parents": [
        "30ae7e9f126b88ea1ed903f0405707ef3f5322d7"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Fri Feb 27 17:14:06 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Mon Mar 02 18:23:06 2026 -0500"
      },
      "message": "Bump actions/upload-artifact from 6.0.0 to 7.0.0\n\nBumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6.0.0 to 7.0.0.\n- [Release notes](https://github.com/actions/upload-artifact/releases)\n- [Commits](https://github.com/actions/upload-artifact/compare/b7c566a772e6b6bfb58ed0dc250532a479d7789f...bbbca2ddaa5d8feaa63e36b76fdaad77386f024f)\n\n---\nupdated-dependencies:\n- dependency-name: actions/upload-artifact\n  dependency-version: 7.0.0\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "30ae7e9f126b88ea1ed903f0405707ef3f5322d7",
      "tree": "8279ffecb49f6ac2e699e2660a8791c14572e2de",
      "parents": [
        "7e45f52363cf2e3f4ee85a421e3e97f8227ae60b"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Mar 02 19:03:56 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Mon Mar 02 18:22:45 2026 -0500"
      },
      "message": "Bump org.mockito:mockito-junit-jupiter from 5.21.0 to 5.22.0\n\nBumps [org.mockito:mockito-junit-jupiter](https://github.com/mockito/mockito) from 5.21.0 to 5.22.0.\n- [Release notes](https://github.com/mockito/mockito/releases)\n- [Commits](https://github.com/mockito/mockito/compare/v5.21.0...v5.22.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.mockito:mockito-junit-jupiter\n  dependency-version: 5.22.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "7e45f52363cf2e3f4ee85a421e3e97f8227ae60b",
      "tree": "a1cf3573ce3cceb545fbbb5994d9891399b61f41",
      "parents": [
        "5f78d502b5d4f460369c8b312cc83555f522b2f8"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Mar 02 19:04:03 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Mon Mar 02 18:22:36 2026 -0500"
      },
      "message": "Bump org.mockito:mockito-core from 5.21.0 to 5.22.0\n\nBumps [org.mockito:mockito-core](https://github.com/mockito/mockito) from 5.21.0 to 5.22.0.\n- [Release notes](https://github.com/mockito/mockito/releases)\n- [Commits](https://github.com/mockito/mockito/compare/v5.21.0...v5.22.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.mockito:mockito-core\n  dependency-version: 5.22.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "5f78d502b5d4f460369c8b312cc83555f522b2f8",
      "tree": "0ad242e93fd17228f2df4d2c5352cb10424ea80e",
      "parents": [
        "0f9bdcbd93bcb469ed72e87ed1e49df897344cd6"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Mar 02 19:04:03 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Mon Mar 02 18:22:23 2026 -0500"
      },
      "message": "Bump github/codeql-action from 4.32.4 to 4.32.5\n\nBumps [github/codeql-action](https://github.com/github/codeql-action) from 4.32.4 to 4.32.5.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/89a39a4e59826350b863aa6b6252a07ad50cf83e...c793b717bc78562f491db7b0e93a3a178b099162)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action\n  dependency-version: 4.32.5\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "0f9bdcbd93bcb469ed72e87ed1e49df897344cd6",
      "tree": "60e7f8b49ee70eaa029236153b2de5785fb3435e",
      "parents": [
        "8e6173714722b56e7f8c1e0371d83a01421c41dc"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Mar 02 19:04:21 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Mon Mar 02 18:22:12 2026 -0500"
      },
      "message": "Bump org.jreleaser:jreleaser-maven-plugin from 1.22.0 to 1.23.0\n\nBumps [org.jreleaser:jreleaser-maven-plugin](https://github.com/jreleaser/jreleaser) from 1.22.0 to 1.23.0.\n- [Release notes](https://github.com/jreleaser/jreleaser/releases)\n- [Commits](https://github.com/jreleaser/jreleaser/compare/v1.22.0...v1.23.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.jreleaser:jreleaser-maven-plugin\n  dependency-version: 1.23.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "8e6173714722b56e7f8c1e0371d83a01421c41dc",
      "tree": "30cf64f994d6b827e4704894bd3935479a1cedee",
      "parents": [
        "407b1925322fa9028c6af7fea3c0782573a692f8"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Mar 02 19:04:54 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Mon Mar 02 18:21:56 2026 -0500"
      },
      "message": "Bump version.quarkus from 3.31.4 to 3.32.1\n\nBumps `version.quarkus` from 3.31.4 to 3.32.1.\n\nUpdates `io.quarkus.platform:quarkus-bom` from 3.31.4 to 3.32.1\n- [Commits](https://github.com/quarkusio/quarkus-platform/compare/3.31.4...3.32.1)\n\nUpdates `io.quarkus.platform:quarkus-maven-plugin` from 3.31.4 to 3.32.1\n- [Commits](https://github.com/quarkusio/quarkus-platform/compare/3.31.4...3.32.1)\n\n---\nupdated-dependencies:\n- dependency-name: io.quarkus.platform:quarkus-bom\n  dependency-version: 3.32.1\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n- dependency-name: io.quarkus.platform:quarkus-maven-plugin\n  dependency-version: 3.32.1\n  dependency-type: direct:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "407b1925322fa9028c6af7fea3c0782573a692f8",
      "tree": "5aaed28dc486a3d4b4cc56162a806516c7576e14",
      "parents": [
        "c7f600190282dcf0721cf22800f34914f60be07d"
      ],
      "author": {
        "name": "Mend Renovate",
        "email": "bot@renovateapp.com",
        "time": "Mon Feb 23 10:40:05 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Mon Feb 23 18:00:46 2026 -0500"
      },
      "message": "Update payara/micro Docker tag to v7.2026.2\n"
    },
    {
      "commit": "c7f600190282dcf0721cf22800f34914f60be07d",
      "tree": "a0dd1a90bfd08522586ca3d30fdae1a89d5440f9",
      "parents": [
        "641535c01db1a262229a6ddec4da70878ec19e36"
      ],
      "author": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Mon Feb 23 17:46:30 2026 -0500"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Mon Feb 23 18:00:32 2026 -0500"
      },
      "message": "Add license header back to maven wrapper config"
    },
    {
      "commit": "641535c01db1a262229a6ddec4da70878ec19e36",
      "tree": "e178c07e9c9b66e0c2ed8ca28e4097f776159dc5",
      "parents": [
        "682fe32367026ba28cecb7a882411e9a77d4debd"
      ],
      "author": {
        "name": "Mend Renovate",
        "email": "bot@renovateapp.com",
        "time": "Mon Feb 23 10:40:01 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Mon Feb 23 18:00:32 2026 -0500"
      },
      "message": "Update dependency maven-wrapper to v3.3.4\n"
    },
    {
      "commit": "682fe32367026ba28cecb7a882411e9a77d4debd",
      "tree": "694f52f65a3415a574a2dc8b8effb42cb6c4db2d",
      "parents": [
        "b9a6b333a02bf734481f48d5120a2dbc9062c8ce"
      ],
      "author": {
        "name": "Mend Renovate",
        "email": "bot@renovateapp.com",
        "time": "Mon Feb 23 10:37:11 2026 +0000"
      },
      "committer": {
        "name": "Brian Demers",
        "email": "brian.demers@gmail.com",
        "time": "Mon Feb 23 18:00:08 2026 -0500"
      },
      "message": "Update dependency maven to v3.9.12\n"
    }
  ],
  "next": "b9a6b333a02bf734481f48d5120a2dbc9062c8ce"
}