)]}' { "log": [ { "commit": "a551900ff67e1ec51f086bf331b02dbeaf769dba", "tree": "413aae0fc8f0b13aafb849071884a7b94d3f97ba", "parents": [ "018d736d4836b479897a7bf3e9b1be16e4fe3324" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Thu Oct 15 12:50:05 2026 +0200" }, "committer": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Thu Oct 15 12:50:05 2026 +0200" }, "message": "releng: Skip rebuilding the release version with CI\n\nDeployment fails for this step." }, { "commit": "018d736d4836b479897a7bf3e9b1be16e4fe3324", "tree": "8b9d47123312f84d10c8646fa67ea754d17f8fb6", "parents": [ "ef197afd579a9ce89e66c5e13e40ed5d845aab77" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Thu Oct 15 12:14:19 2026 +0200" }, "committer": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Thu Oct 15 12:14:19 2026 +0200" }, "message": "[maven-release-plugin] prepare for next development iteration\n" }, { "commit": "ef197afd579a9ce89e66c5e13e40ed5d845aab77", "tree": "aaaf21e86b169ada49676d3520eb78937443cae4", "parents": [ "0acb9e567d44d7546bbed799e3248ad42311b9bb" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Thu Oct 15 12:13:05 2026 +0200" }, "committer": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Thu Oct 15 12:13:05 2026 +0200" }, "message": "[maven-release-plugin] prepare release jackrabbit-filevault-4.3.0\n" }, { "commit": "0acb9e567d44d7546bbed799e3248ad42311b9bb", "tree": "4875d56aa4aa0394a91907b72010460820a3c1ab", "parents": [ "f791669900052a6ec762b649d1ea2981a3e8fe4e" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Thu Oct 15 11:52:03 2026 +0200" }, "committer": { "name": "Konrad Windszus", "email": "konrad@windszus.net", "time": "Thu Oct 15 12:04:46 2026 +0200" }, "message": "JCRVLT-799 Allow \"check-release-notes-updated\" on SNAPSHOT versions as\nwell\n\nOnly consider major.minor.macro for the version check (disregard\nqualifier).\nMove check to the very beginning of a reactor build (by moving it to\nparent project)" }, { "commit": "f791669900052a6ec762b649d1ea2981a3e8fe4e", "tree": "eda888c040e40022c7e7178aafec783ddf4b7f6a", "parents": [ "1b634426fe909b06c1ec595aa78af0b7bdd2eb94" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Thu Oct 15 10:17:17 2026 +0200" }, "committer": { "name": "Konrad Windszus", "email": "konrad@windszus.net", "time": "Thu Oct 15 11:25:06 2026 +0200" }, "message": "Release notes for 4.3.0" }, { "commit": "1b634426fe909b06c1ec595aa78af0b7bdd2eb94", "tree": "df65a6c1ad37e41aabc88a5a056699d6278fc82c", "parents": [ "b666814558cc811b4902014b5ffea99df962868d" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Thu Oct 15 11:22:44 2026 +0200" }, "committer": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Thu Oct 15 11:22:44 2026 +0200" }, "message": "docs: fix typo" }, { "commit": "b666814558cc811b4902014b5ffea99df962868d", "tree": "70590aee695293e19effff6f44aa6fb743bb81c0", "parents": [ "7f25440e2abf86f94033ce0505ffd6d25b3bcd1b" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Thu Oct 15 11:21:59 2026 +0200" }, "committer": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Thu Oct 15 11:21:59 2026 +0200" }, "message": "docs: fix TOC" }, { "commit": "7f25440e2abf86f94033ce0505ffd6d25b3bcd1b", "tree": "75d7d5d3e11274b7c2d913fa4a195d014d749591", "parents": [ "b10ac96c871684d27648861330f68bc5cb02c6fb" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Thu Oct 15 11:17:13 2026 +0200" }, "committer": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Thu Oct 15 11:17:13 2026 +0200" }, "message": "docs: fix TOC" }, { "commit": "b10ac96c871684d27648861330f68bc5cb02c6fb", "tree": "9809a94d6f5b693535a801dd4a9b167ae10f2c56", "parents": [ "8c3fec9e068ba5594f8a1144a9c6cd449490c6f6" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Thu Oct 15 11:12:59 2026 +0200" }, "committer": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Thu Oct 15 11:12:59 2026 +0200" }, "message": "Doc: Add 3rd party AEM Clientlib validator" }, { "commit": "8c3fec9e068ba5594f8a1144a9c6cd449490c6f6", "tree": "cc5625b83633374c8a257579c203cc3eb93a21a9", "parents": [ "803405df0b927ea547d59ab394b7a1f63602b71d" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Thu Oct 15 11:10:05 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Oct 15 11:10:05 2026 +0200" }, "message": "doc: Correct capitalization of \u0027Namespaces\u0027 in documentation" }, { "commit": "803405df0b927ea547d59ab394b7a1f63602b71d", "tree": "6b0b68bce30ad28f4f68befe7b47c1f13b3980a9", "parents": [ "77ce15a860e0a418b6a38e1d56c87336940fd694" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Thu Oct 15 10:07:11 2026 +0200" }, "committer": { "name": "Konrad Windszus", "email": "konrad@windszus.net", "time": "Thu Oct 15 10:59:17 2026 +0200" }, "message": "JCRVLT-863 Bump minimum required JR2 version to 2.20.18\n\nUpdate dependency-check-m-p to 13.0.0\nRemove orphan suppressions" }, { "commit": "77ce15a860e0a418b6a38e1d56c87336940fd694", "tree": "e59e97e1c19066e6b19e7c2c59f100eae0015a31", "parents": [ "aac3c27c7899052b6a15ae04c6927719e71cea79" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Fri Aug 21 20:20:54 2026 +0200" }, "committer": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Wed Oct 14 20:42:42 2026 +0200" }, "message": "JCRVLT-862 Prevent loading arbitrary classes in config.xml\n\nAttribute \"class\" in element \"include\"/\"exclude\" was previously\ninstantiated unconditionally." }, { "commit": "aac3c27c7899052b6a15ae04c6927719e71cea79", "tree": "b0e0c3d98394c98db8d6546e2aab4ee594c5085e", "parents": [ "a9bc984f335b40c06f325ab0fec5d7d4ce4fb7e9" ], "author": { "name": "Rishabh Kumar", "email": "diam@adobe.com", "time": "Mon Sep 28 18:04:46 2026 +0530" }, "committer": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Wed Oct 14 18:47:16 2026 +0200" }, "message": "JCRVLT-859: escape sniffable/colliding raw files on export to prevent\ndocview promotion\n\nFileAggregator.createArtifacts now escapes a stored nt:file\u0027s raw bytes\ninto the\nexisting .dir/.content.xml + binary-sidecar aggregate shape whenever the\nexport\nwould otherwise write a raw archive entry that Importer#prepare\u0027s\ncontent\nsniffing (DocViewParser.isDocView) could mistake for a promoted docview\nserialization on re-import:\n\n - any file literally named .content.xml (always collides with the\ncontaining\n folder\u0027s own serialization), and\n - any *.xml file whose jcr:data sniffs as Document View XML.\n\nThis closes the export/import round-trip content-sniffing issue\n(bug_07/f007):\nan attacker-controlled inert *.xml file could previously be promoted to\nnode\nstructure, protected properties, and (acHandling permitting) ACLs when\nre-imported by a privileged session. The escaped shape carries the raw\nbytes as\nan opaque binary property value, so they are never parsed as a\nserialization on\neither side of the trust boundary. Ordinary files are unaffected.\n\nAdds SniffedFileEscapeIT, which reproduces the vulnerable round-trip\n(fails\nwithout this change) and verifies the fix (byte-identical round-trip, no\nextra node created, correct archive layout; a plain non-docview *.xml\nfile\nkeeps the previous raw layout).\n\nCo-authored-by: Copilot \u003c223556219+Copilot@users.noreply.github.com\u003e\n" }, { "commit": "a9bc984f335b40c06f325ab0fec5d7d4ce4fb7e9", "tree": "b04f68c53945a9ef9b1fe78e452eaf4a9ab5d8ab", "parents": [ "b12d1e8242ff4953b6d61a02bc4c60f286f0bc7c" ], "author": { "name": "Rishabh Kumar", "email": "diam@adobe.com", "time": "Mon Oct 05 08:50:36 2026 +0530" }, "committer": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Wed Oct 14 18:43:16 2026 +0200" }, "message": "JCRVLT-860: reject backslash and control characters in PackageId\nvalidation\n\nCo-authored-by: Copilot \u003c223556219+Copilot@users.noreply.github.com\u003e\n" }, { "commit": "b12d1e8242ff4953b6d61a02bc4c60f286f0bc7c", "tree": "a50b1fe304c56e7a3e62b7d2f4f44b089c18b076", "parents": [ "6d1c444223b0904ec4eac7ff71caf5942d40a074" ], "author": { "name": "Rishabh Kumar", "email": "diam@adobe.com", "time": "Mon Oct 05 09:03:53 2026 +0530" }, "committer": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Wed Oct 14 18:24:37 2026 +0200" }, "message": "JCRVLT-858: Prevent persistent writes during dry runs\n" }, { "commit": "6d1c444223b0904ec4eac7ff71caf5942d40a074", "tree": "5646ffdcda2cc1dbd164a718c7abab4f74a13c54", "parents": [ "9689e0441a8cef2a2b2bca5afad9692f00c6dc6d" ], "author": { "name": "Julian Reschke", "email": "julian.reschke@gmx.de", "time": "Mon Sep 14 13:49:38 2026 +0100" }, "committer": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Wed Oct 14 18:16:53 2026 +0200" }, "message": "JCRVLT-861: Reject platform names containing traversal characters" }, { "commit": "9689e0441a8cef2a2b2bca5afad9692f00c6dc6d", "tree": "7bf55ac459955a3a9b7bc8a4284cc70fc1a6b335", "parents": [ "4b6ab0f813510f073a364aa12e29cbffdc48b969" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Fri Aug 21 19:56:04 2026 +0200" }, "committer": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Wed Oct 14 18:07:43 2026 +0200" }, "message": "JCRVLT-856: Execute hook only after executing the gates" }, { "commit": "4b6ab0f813510f073a364aa12e29cbffdc48b969", "tree": "c5f0cb7fe747bdc095ed2155af1494e6a06540ca", "parents": [ "c41ca8a57e3b40a476eae1f425decfa4d435f43f" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Wed Oct 14 16:16:45 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Oct 14 16:16:45 2026 +0200" }, "message": "JCRVLT-855 Upgrade maximum Oak/JR2 version to 2.6.0/2.22.5 (#436)\n\nOptionally execute IT with minimum Oak version leveraging Maven\nToolchains.\nLeverage Toolchains with both Java 11 and Java 17 with GHA.\nRaising JR2 to 2.22.2+ requires Commons Collection 4.5 at run time due\nto JCR-5177." }, { "commit": "c41ca8a57e3b40a476eae1f425decfa4d435f43f", "tree": "5292d69401ca29d48f7b8f14a754d0d05833b4c5", "parents": [ "759b4d2d535a2082aa0035b26d5f8f510a56fa1b" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Wed Oct 14 16:15:53 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Oct 14 16:15:53 2026 +0200" }, "message": "JCRVLT-857: Update to latest Woodstox 7.3.0 and TXW 4.0.9 (#423)" }, { "commit": "759b4d2d535a2082aa0035b26d5f8f510a56fa1b", "tree": "666ca6d56b02235fd4d7c0efcacea989764962ea", "parents": [ "67e4e79104215b49bf84aaf2acdc415d3c9a495a" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Sun Oct 11 18:17:09 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sun Oct 11 18:17:09 2026 +0200" }, "message": "JCRVLT-851: Remove package tmp files through closewatcher (#434)\n\nThis also reverts \"JCRVLT-851 cleanup temp files properly (#432)\"\nThis reverts commit 67e4e79104215b49bf84aaf2acdc415d3c9a495a." }, { "commit": "67e4e79104215b49bf84aaf2acdc415d3c9a495a", "tree": "2ebd0bbbb1d4edbea9e72b0531541ac227215a6a", "parents": [ "8e4e1996f8f34f8306f082042dfd45904f02c46a" ], "author": { "name": "Jörg Hoh", "email": "joerghoh@users.noreply.github.com", "time": "Sat Sep 26 19:51:17 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat Sep 26 19:51:17 2026 +0200" }, "message": "JCRVLT-851 cleanup temp files properly (#432)" }, { "commit": "8e4e1996f8f34f8306f082042dfd45904f02c46a", "tree": "2e971816bc0ff2331fa32618f6fdaffca2013ebf", "parents": [ "b6c9d2b91432b7398c0ba1909e1b154978bf2d67" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Fri Sep 18 18:14:00 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Sep 18 18:14:00 2026 +0200" }, "message": "Update validation.md to clarify validation agnosticism\n\nAdded information about validation\u0027s agnosticism towards concrete repositories." }, { "commit": "b6c9d2b91432b7398c0ba1909e1b154978bf2d67", "tree": "63092812820514ec61b1b393a6886311b16f75a9", "parents": [ "97f9b28e27871978c16b0ff8deecf4fc72d9ef08" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Fri Sep 18 18:09:48 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Sep 18 18:09:48 2026 +0200" }, "message": "Fix typo" }, { "commit": "97f9b28e27871978c16b0ff8deecf4fc72d9ef08", "tree": "4188a3e7c613b3f4afd0dd2eb42bad84ca3fb0ca", "parents": [ "10a807d3c31ece3df664c9f750a8da3d83a66281" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Tue Sep 15 16:11:02 2026 +0200" }, "committer": { "name": "Konrad Windszus", "email": "konrad@windszus.net", "time": "Tue Sep 15 16:34:33 2026 +0200" }, "message": "Upgrade JAnsi to 3.30.17\n\nThis fixes several false positives flagged by vulnerability scanners\n1. https://nvd.nist.gov/vuln/detail/cve-2026-56740 -\u003e only affects\nunused Telnet Server module\n2. https://nvd.nist.gov/vuln/detail/cve-2026-56741 -\u003e only affects\nunused Telnet Server module" }, { "commit": "10a807d3c31ece3df664c9f750a8da3d83a66281", "tree": "ef1a1851aa549e525d21f631dff45cfe77f678dd", "parents": [ "b2b6464bc57cb38eec922e939ff92a37d8d11e77" ], "author": { "name": "Julian Reschke", "email": "julian.reschke@gmx.de", "time": "Tue Aug 25 17:53:44 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Aug 25 17:53:44 2026 +0200" }, "message": "Enable long paths for Git on Windows (#430)" }, { "commit": "b2b6464bc57cb38eec922e939ff92a37d8d11e77", "tree": "b45dcc70d3c7cfddf511782a16379d43e7d2e77d", "parents": [ "a2d8ea503cf48aef8b124ec97694eb3a09f9917c" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Fri Jul 31 10:49:55 2026 +0200" }, "committer": { "name": "Konrad Windszus", "email": "konrad@windszus.net", "time": "Fri Jul 31 12:21:33 2026 +0200" }, "message": "Add ASF license header to AGENTS.md\n\nOtherwise build breaks due to rat-maven-plugin error." }, { "commit": "a2d8ea503cf48aef8b124ec97694eb3a09f9917c", "tree": "f72fdd97e3e8192cc26d6d45a8947e2a0e077d0c", "parents": [ "b2e1a581a543d4687f13ac2398a752cf4dc715ef", "c0f6f4a8c97f78cb6b90d0f6702df3e2d0ee093f" ], "author": { "name": "Alejandro Moratinos", "email": "Amoratinos@users.noreply.github.com", "time": "Mon Jul 20 09:16:37 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jul 20 09:16:37 2026 +0200" }, "message": "Merge pull request #427 from potiuk/asf-security/threat-model-discoverability-2026-07-15\n\nWire the security threat model for agent discoverability (AGENTS.md + SECURITY.md); rename draft-THREAT-MODEL.md -\u003e THREAT_MODEL.md" }, { "commit": "c0f6f4a8c97f78cb6b90d0f6702df3e2d0ee093f", "tree": "f72fdd97e3e8192cc26d6d45a8947e2a0e077d0c", "parents": [ "b2e1a581a543d4687f13ac2398a752cf4dc715ef" ], "author": { "name": "Jarek Potiuk", "email": "jarek@potiuk.com", "time": "Wed Jul 15 12:46:08 2026 +0200" }, "committer": { "name": "Jarek Potiuk", "email": "jarek@potiuk.com", "time": "Wed Jul 15 12:46:08 2026 +0200" }, "message": "Wire threat model for agent discoverability + rename to THREAT_MODEL.md\n\nAdds AGENTS.md (## Security pointer) + SECURITY.md wiring the\nconventional AGENTS.md -\u003e SECURITY.md -\u003e THREAT_MODEL.md chain, and\nrenames the PMC-merged draft-THREAT-MODEL.md to the canonical\nTHREAT_MODEL.md (no longer a draft; matches the discoverable\nconvention). No model content changes.\n\nGenerated-by: Claude Code (Claude Opus 4.8)\n" }, { "commit": "b2e1a581a543d4687f13ac2398a752cf4dc715ef", "tree": "5149f1ddb4bc1d846bfae5efcd4b94e83acd6553", "parents": [ "a6834ba933eac7915ed7a14dbaf11ba6f4d11819", "14beedb1e93faea3c5b1e787313d3e48c7e6875f" ], "author": { "name": "anchela", "email": "angela@apache.org", "time": "Wed Jul 15 09:00:19 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 15 09:00:19 2026 +0200" }, "message": "Merge pull request #421 from potiuk/asf-security/draft-threat-model-2026-05-30\n\nAdd draft project security threat-model document" }, { "commit": "a6834ba933eac7915ed7a14dbaf11ba6f4d11819", "tree": "8cfc81702e463241ca8db7ca4ab890356b0b856f", "parents": [ "15df7da04c7db199af22ff97703798894e3a0582" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Mon Jun 29 12:54:45 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 29 12:54:45 2026 +0200" }, "message": "Add missing item to release notes for 4.0.0 (#426)\n\nSome have incorrectly been targeted for the skipped version 3.8.6.\nFix formatting" }, { "commit": "15df7da04c7db199af22ff97703798894e3a0582", "tree": "cf3c9a4715842372603ea5845dbc3e1792bcaec9", "parents": [ "cb8f264c129fac88ce779baa88dda355ab96e62d" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Sat Jun 20 13:11:09 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat Jun 20 13:11:09 2026 +0200" }, "message": "Update jackrabbit-packagetype validation details\n\nAdd link to https://issues.apache.org/jira/browse/JCRVLT-403" }, { "commit": "cb8f264c129fac88ce779baa88dda355ab96e62d", "tree": "b6837c38fd50e274dcf02d3a37533bea812d6b9e", "parents": [ "fce58214934f0193467f6a16a3dd69a964f07806" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Fri Jun 19 11:26:37 2026 +0200" }, "committer": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Fri Jun 19 11:26:37 2026 +0200" }, "message": "JCRVLT-847 Explicitly ignore spotless execution in m2e" }, { "commit": "fce58214934f0193467f6a16a3dd69a964f07806", "tree": "d13b7fddd23e5ffb0a9a3947cdba361b2efd3e27", "parents": [ "cf42c50f3885b3ffa8c98e5b76c49fb8ad3aeeb1" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Thu Jun 18 13:06:22 2026 +0200" }, "committer": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Thu Jun 18 13:06:22 2026 +0200" }, "message": "Documentation: Separate Build from Runtime Prerequisites" }, { "commit": "cf42c50f3885b3ffa8c98e5b76c49fb8ad3aeeb1", "tree": "5ecc4dcc515da6f0b69e43dec29bd21e059eddbd", "parents": [ "c97fee0f2018b76e981384aeab4e7265d57e944c" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Thu Jun 18 13:03:49 2026 +0200" }, "committer": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Thu Jun 18 13:03:49 2026 +0200" }, "message": "Auto-delete branches on merge" }, { "commit": "c97fee0f2018b76e981384aeab4e7265d57e944c", "tree": "1f14a9c181912fad2da9e097a61cb1f2207fdfb5", "parents": [ "b8cf73d75c59080250dd8f2817cc3eb429779d42" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Thu Jun 18 10:21:50 2026 +0200" }, "committer": { "name": "Konrad Windszus", "email": "konrad@windszus.net", "time": "Thu Jun 18 12:52:04 2026 +0200" }, "message": "JCRVLT-847 Move spotless execution to \"verify\" phase\n\nThis minimizes interruption of ongoing work in the IDE and with the CLI\nas one can easily leave that phase out (if not desired)." }, { "commit": "b8cf73d75c59080250dd8f2817cc3eb429779d42", "tree": "8bd3c628a33d6abb8181c0b8088165dc588b6643", "parents": [ "deaed79e3049d1fe9547b41d77b41c22061779bc" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Thu Jun 18 09:39:08 2026 +0200" }, "committer": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Thu Jun 18 09:39:22 2026 +0200" }, "message": "Remove unused old ASF logo" }, { "commit": "deaed79e3049d1fe9547b41d77b41c22061779bc", "tree": "099e716044490cbab9c1992a28d45f047407c9ef", "parents": [ "61faeef44aecf5e60f075a7857f6d06d9bb0d78c" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Fri Jun 12 14:52:07 2026 +0200" }, "committer": { "name": "Konrad Windszus", "email": "konrad@windszus.net", "time": "Fri Jun 12 15:01:37 2026 +0200" }, "message": "Upgrade to Bnd 7.3.0" }, { "commit": "61faeef44aecf5e60f075a7857f6d06d9bb0d78c", "tree": "f5642d238fc27d1bd537f606f4f65e19ac30bef7", "parents": [ "c904d0a3f5a73a0bfefa076f9af1981713406768" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Fri Jun 12 14:58:50 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jun 12 14:58:50 2026 +0200" }, "message": "Update README with prerequisites and build instructions\n\nClarified runtime vs build prerequisites" }, { "commit": "c904d0a3f5a73a0bfefa076f9af1981713406768", "tree": "cefa0fe06ccc1c0f6d77c5292404057e5d29dc2c", "parents": [ "0fa5445581ecee18060d6909e850f7fafbef502d" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Fri Jun 12 14:23:02 2026 +0200" }, "committer": { "name": "Konrad Windszus", "email": "konrad@windszus.net", "time": "Fri Jun 12 14:50:58 2026 +0200" }, "message": "Update dependency-check-m-p to 12.2.2" }, { "commit": "0fa5445581ecee18060d6909e850f7fafbef502d", "tree": "03101cf972ab1f6e90f7c5e7430d9e4e283485f8", "parents": [ "96501779f6d761b06e35ea20312f10f088479673" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Fri Jun 12 14:35:55 2026 +0200" }, "committer": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Fri Jun 12 14:35:55 2026 +0200" }, "message": "Use Build Status Badge for GHA instead of Jenkins" }, { "commit": "96501779f6d761b06e35ea20312f10f088479673", "tree": "9d64ef940a6eb448cdf361a8b13ab169b1c3b274", "parents": [ "493426606486c8ed7234127f6f05fd7185d556eb" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Fri Jun 12 14:24:20 2026 +0200" }, "committer": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Fri Jun 12 14:24:20 2026 +0200" }, "message": "Fix environment variables used for Nexus Deployment from GHA" }, { "commit": "493426606486c8ed7234127f6f05fd7185d556eb", "tree": "6b6a8eb35b691e15c75af162003ef7dad9771213", "parents": [ "41f37560271d508d20eba48d602055f887d19642" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Fri May 15 18:30:32 2026 +0200" }, "committer": { "name": "Konrad Windszus", "email": "konrad@windszus.net", "time": "Thu Jun 11 21:05:02 2026 +0200" }, "message": "Build with GHA" }, { "commit": "41f37560271d508d20eba48d602055f887d19642", "tree": "689d8a1662edba48e70763d6bd5cf3f31cce6c38", "parents": [ "3d3466df881463ed0947cfd52a2aedb6781bf242" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Thu Jun 11 18:24:19 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jun 11 18:24:19 2026 +0200" }, "message": "Update terminology for OSGi container to OSGi runtime" }, { "commit": "3d3466df881463ed0947cfd52a2aedb6781bf242", "tree": "088b8f0272f1ddddd861d982714c85706730c632", "parents": [ "b0846fbb0981811f68b0c21e8ee6b3f4c85daf77" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Sun Jun 07 18:46:23 2026 +0200" }, "committer": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Sun Jun 07 18:46:23 2026 +0200" }, "message": "Remove unnecessary null guard" }, { "commit": "14beedb1e93faea3c5b1e787313d3e48c7e6875f", "tree": "a060146554aa7b6d015bf782ce087d2ccad8840b", "parents": [ "b0846fbb0981811f68b0c21e8ee6b3f4c85daf77" ], "author": { "name": "Jarek Potiuk", "email": "jarek@potiuk.com", "time": "Sat May 30 02:11:27 2026 +0200" }, "committer": { "name": "Jarek Potiuk", "email": "jarek@potiuk.com", "time": "Sat May 30 02:11:27 2026 +0200" }, "message": "Add draft project security threat-model document\n\nAdds a draft project-level security threat-model document\n(draft-THREAT-MODEL.md) at repo root, improving discoverability\nfor automated security scanners running against this repository.\nThe file follows the rubric format used by several other ASF\nprojects piloting security-model discoverability.\n\nThe \"draft-\" prefix signals this is a proposal for the PMC to\nreview, correct, or reject — not a finalised maintainer-blessed\nmodel. Every claim carries a provenance tag (documented /\ninferred / maintainer) so reviewers can see where each claim\noriginates; §14 collects open questions for the maintainers.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) \u003cnoreply@anthropic.com\u003e\n" }, { "commit": "b0846fbb0981811f68b0c21e8ee6b3f4c85daf77", "tree": "2ae9c213df288cfa5300d1c878bd40097ab083c0", "parents": [ "0de131868bb91b31acd1e00a8db3fcb63758c0cc" ], "author": { "name": "Santiago García Pimentel", "email": "santiago@garciapimentel.com", "time": "Fri May 22 18:14:42 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri May 22 18:14:42 2026 +0200" }, "message": "Explain in more detail how filters are chosen (#420)\n\nGiving an example of filters with overlapping paths\nRecommend against overlapping roots" }, { "commit": "0de131868bb91b31acd1e00a8db3fcb63758c0cc", "tree": "f21c638c2b5a75498f86193feef707886951c05c", "parents": [ "844e41529b01207c05825a90e17cda959d515069" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Tue Apr 28 11:43:22 2026 +0200" }, "committer": { "name": "Konrad Windszus", "email": "konrad@windszus.net", "time": "Tue Apr 28 21:02:45 2026 +0200" }, "message": "JCRVLT-844 Improve logging when loading InstallHook fails\n\nAdd suppressed exceptions for every failed attempt. Log package id." }, { "commit": "844e41529b01207c05825a90e17cda959d515069", "tree": "bd78a0189849a45fda0065c573dcfcab2e1274e5", "parents": [ "08d631fb1b2688b0e2bba7b63d313ab803ce15f1" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Tue Apr 28 12:29:20 2026 +0200" }, "committer": { "name": "Konrad Windszus", "email": "konrad@windszus.net", "time": "Tue Apr 28 21:02:05 2026 +0200" }, "message": "Remove transitive unused Maven dependencies\n\nThose suffer from vulnerabilities which otherwise lead to false\npositives with dependency-checker." }, { "commit": "08d631fb1b2688b0e2bba7b63d313ab803ce15f1", "tree": "97a819c5f0d79e6d23980d2d058d9f5e0949d290", "parents": [ "f0a9c6f5d53f3801fce8ce93de9c33ef94970816" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Fri Apr 17 21:14:25 2026 +0200" }, "committer": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Fri Apr 17 21:14:25 2026 +0200" }, "message": "trivial: Fix TOCs" }, { "commit": "f0a9c6f5d53f3801fce8ce93de9c33ef94970816", "tree": "9a3eaa4af82beb94f3e3ffffaea1623efb44d67f", "parents": [ "49fe286425113bf68a2397bff9f3207924a98325" ], "author": { "name": "Julian Reschke", "email": "reschke@apache.org", "time": "Mon Feb 23 14:52:53 2026 +0100" }, "committer": { "name": "Julian Reschke", "email": "reschke@apache.org", "time": "Mon Feb 23 14:52:53 2026 +0100" }, "message": "[maven-release-plugin] prepare for next development iteration\n" }, { "commit": "49fe286425113bf68a2397bff9f3207924a98325", "tree": "4bf8047b9fe5dc7d8343ba9ba16dc2095fd71396", "parents": [ "b9f6bf4a95a910765c0047534117e39503d5dfbf" ], "author": { "name": "Julian Reschke", "email": "reschke@apache.org", "time": "Mon Feb 23 14:52:38 2026 +0100" }, "committer": { "name": "Julian Reschke", "email": "reschke@apache.org", "time": "Mon Feb 23 14:52:38 2026 +0100" }, "message": "[maven-release-plugin] prepare release jackrabbit-filevault-4.2.0\n" }, { "commit": "b9f6bf4a95a910765c0047534117e39503d5dfbf", "tree": "a509df6a24b724fb75ecd8ddce402ffb812019e8", "parents": [ "3d74b96d4cf6d953302335c9faacc7e1b09ab595" ], "author": { "name": "Julian Reschke", "email": "julian.reschke@gmx.de", "time": "Mon Feb 23 14:11:57 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Feb 23 14:11:57 2026 +0100" }, "message": "JCRVLT-842: FileVault 4.2.0 Candidate Release Notes (#415)\n\n" }, { "commit": "3d74b96d4cf6d953302335c9faacc7e1b09ab595", "tree": "91b81aae05e3eb97006276fbd27a0179dee8ad48", "parents": [ "ff98510e55c4524a296b0c0e13f7f568ded4b6e7" ], "author": { "name": "Jörg Hoh", "email": "joerghoh@users.noreply.github.com", "time": "Fri Jan 30 10:35:58 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jan 30 10:35:58 2026 +0100" }, "message": "JCRVLT-838: Fix NPE during package creation (#412)\n\n" }, { "commit": "ff98510e55c4524a296b0c0e13f7f568ded4b6e7", "tree": "7743f580581c8c402439a2bd0ff85fa09c537648", "parents": [ "1f28a42edbe92d833a5735ff892c97dbf4d5b1a9" ], "author": { "name": "Julian Reschke", "email": "julian.reschke@gmx.de", "time": "Thu Jan 29 12:38:58 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jan 29 12:38:58 2026 +0100" }, "message": " JCRVLT-839: Unconditional child node iteration in AggregateImpl.walk() (#413)\n\n" }, { "commit": "1f28a42edbe92d833a5735ff892c97dbf4d5b1a9", "tree": "436934a77ea0571114f9a1c65183caa47168ac0e", "parents": [ "0444ce6c82fc2784b8490770370f9bb4152f6dee" ], "author": { "name": "Julian Reschke", "email": "julian.reschke@gmx.de", "time": "Wed Jan 21 15:40:30 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jan 21 15:40:30 2026 +0100" }, "message": "JCRVLT-836: log durations and number of nodes in AggregateImpl node walk (#409)\n\n* JCRVLT-836: log durations and number of nodes in AggregateImpl node walk\n\n* JCRVLT-836: log durations and number of nodes in AggregateImpl node walk - avoid timinh when nit DEBUG lebel" }, { "commit": "0444ce6c82fc2784b8490770370f9bb4152f6dee", "tree": "bf70423002ce0cbae3aabc82c649ae1e765419ba", "parents": [ "68909428e148cc1e2d4302bd31b5324d4eba0874" ], "author": { "name": "Julian Reschke", "email": "julian.reschke@gmx.de", "time": "Tue Jan 20 17:49:03 2026 +0100" }, "committer": { "name": "Julian Reschke", "email": "julian.reschke@gmx.de", "time": "Tue Jan 20 17:49:03 2026 +0100" }, "message": "Revert \"JCRVLT-836: log durations and number of nodes in AggregateImpl node walk\"\n\nThis reverts commit 68909428e148cc1e2d4302bd31b5324d4eba0874.\n" }, { "commit": "68909428e148cc1e2d4302bd31b5324d4eba0874", "tree": "9b3398c0967c99237d00d83bbe4a6a30cb3c8a58", "parents": [ "6cb9fdf084595878f9ab7857ca44ca69790751f4" ], "author": { "name": "Julian Reschke", "email": "julian.reschke@gmx.de", "time": "Tue Jan 20 17:48:28 2026 +0100" }, "committer": { "name": "Julian Reschke", "email": "julian.reschke@gmx.de", "time": "Tue Jan 20 17:48:28 2026 +0100" }, "message": "JCRVLT-836: log durations and number of nodes in AggregateImpl node walk\n" }, { "commit": "6cb9fdf084595878f9ab7857ca44ca69790751f4", "tree": "bf70423002ce0cbae3aabc82c649ae1e765419ba", "parents": [ "8944d0cb554070cb4825fdca792e76a1c20dc843" ], "author": { "name": "Julian Reschke", "email": "julian.reschke@gmx.de", "time": "Thu Jan 15 15:52:13 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jan 15 15:52:13 2026 +0100" }, "message": "JCRVLT-831: For collection of namespace prefixes, avoid iterating over sibling nodes not contained in the filter(s) (#408)\n\n\n\n---------\n\nCo-authored-by: Konrad Windszus \u003ckwin@apache.org\u003e" }, { "commit": "8944d0cb554070cb4825fdca792e76a1c20dc843", "tree": "093e9436f0c24dd02cbf0593a81105e1d93da3b0", "parents": [ "35e4671ed4ee2ba6df5d920b1dc4d5af7b7309e4" ], "author": { "name": "Julian Reschke", "email": "julian.reschke@gmx.de", "time": "Thu Jan 15 14:21:27 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jan 15 14:21:27 2026 +0100" }, "message": "JCRVLT-834: add test coverage for namespace prefixes on sibling nodes in ordered collections (#407)\n\n" }, { "commit": "35e4671ed4ee2ba6df5d920b1dc4d5af7b7309e4", "tree": "f64c5f9795b9fa2cc9e6591217a334589ee51fd2", "parents": [ "52b85898bc4034f39c43b0b7b881151f82e2c632" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Thu Jan 15 13:49:24 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jan 15 13:49:24 2026 +0100" }, "message": "Update to Bnd 7.2.1 (#404)\n\n" }, { "commit": "52b85898bc4034f39c43b0b7b881151f82e2c632", "tree": "cb71ebb8f502d5a02ffa4e24ef9e504becf57ca6", "parents": [ "403670cc37a74754164e92cda803f0f29d391ebb" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Wed Jan 07 15:32:36 2026 +0100" }, "committer": { "name": "Konrad Windszus", "email": "konrad@windszus.net", "time": "Thu Jan 15 12:14:36 2026 +0100" }, "message": "Update to ASF Parent 37\n\nhttps://github.com/apache/maven-apache-parent/releases/tag/apache-37\n" }, { "commit": "403670cc37a74754164e92cda803f0f29d391ebb", "tree": "a8bf8fdd8ea30031198eb6ee81a562b3ce7d23c9", "parents": [ "ad8dd67fb6190194975f48bd8ebf96b3545437ac" ], "author": { "name": "Julian Reschke", "email": "julian.reschke@gmx.de", "time": "Wed Jan 14 12:50:02 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jan 14 12:50:02 2026 +0100" }, "message": "JCRVLT-831: undo change in 133e50f378737e33ff99ea29c7e742c4433e2f61 (restores AggregateImpl, reformatted) (#406)\n\n" }, { "commit": "ad8dd67fb6190194975f48bd8ebf96b3545437ac", "tree": "4572ad37e55eb9a388cceda5e688ff08c84dfacd", "parents": [ "288b7856fc1bfdff087f2f3a4e9bef5a36ee1c9d" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Wed Jan 07 16:15:54 2026 +0100" }, "committer": { "name": "Konrad Windszus", "email": "konrad@windszus.net", "time": "Wed Jan 07 21:45:54 2026 +0100" }, "message": "Fix warnings in POM\n\n- Don\u0027t override managed dependency versions for no reason\n- Refactor plugin configuration properties which are no longer evaluated\n- Remove duplicate plugin configuration sections" }, { "commit": "288b7856fc1bfdff087f2f3a4e9bef5a36ee1c9d", "tree": "b1f50f569724f04fc6550bf091e4e7eae5fabaa0", "parents": [ "83a7a21311c47f6b399bdd91444a870ffb5c7504" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Wed Jan 07 16:31:28 2026 +0100" }, "committer": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Wed Jan 07 16:31:28 2026 +0100" }, "message": "Fix filename of .git-blame-ignore-revs" }, { "commit": "83a7a21311c47f6b399bdd91444a870ffb5c7504", "tree": "afc6efcab8e170ffc4d5344085d65a423f30bfd6", "parents": [ "9cc4b68e04dff058bc8c54f175b15e04e0f9818b" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Wed Jan 07 15:26:21 2026 +0100" }, "committer": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Wed Jan 07 15:26:21 2026 +0100" }, "message": "JCRVLT-782 Ignore reformatting commit in git blame" }, { "commit": "9cc4b68e04dff058bc8c54f175b15e04e0f9818b", "tree": "5b5f14b21fabeb6b3b9290e4128d8d0f7c45c2e9", "parents": [ "531e716421bd0626b09c0738ef365fe35ab9ba18" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Wed Jan 07 15:24:10 2026 +0100" }, "committer": { "name": "Konrad Windszus", "email": "konrad@windszus.net", "time": "Wed Jan 07 15:24:29 2026 +0100" }, "message": "JCRVLT-782 move comments above elements in pom.xml" }, { "commit": "531e716421bd0626b09c0738ef365fe35ab9ba18", "tree": "8897e9edc21bb2cf7bafcf52a8ece37480202c4f", "parents": [ "c9a5821a13d621a20867d14856ccabf0857cb987" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Wed Jan 07 15:11:13 2026 +0100" }, "committer": { "name": "Konrad Windszus", "email": "konrad@windszus.net", "time": "Wed Jan 07 15:24:29 2026 +0100" }, "message": "JCRVLT-782 Apply formatting with spotless-m-p" }, { "commit": "c9a5821a13d621a20867d14856ccabf0857cb987", "tree": "855e7c2a5bb3f5f1905292e9873a5dec2c7c70c5", "parents": [ "c1d3aba606270a016920388e21b6e696e26700fb" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Fri Mar 14 15:58:27 2025 +0100" }, "committer": { "name": "Konrad Windszus", "email": "konrad@windszus.net", "time": "Wed Jan 07 15:24:29 2026 +0100" }, "message": "JCRVLT-782 Add spotless-m-p with palantir-java-formatter\n\nRequire Java 17+ for building" }, { "commit": "c1d3aba606270a016920388e21b6e696e26700fb", "tree": "ee053ee2a44356c966c3fc4db008862bbbe7f424", "parents": [ "133e50f378737e33ff99ea29c7e742c4433e2f61" ], "author": { "name": "Julian Reschke", "email": "julian.reschke@gmx.de", "time": "Thu Dec 18 10:11:10 2025 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Dec 18 10:11:10 2025 +0100" }, "message": "JCRVLT-831: For collection of namespace prefixes, avoid iterating over sibling nodes not contained in the filter(s) (#401)\n\n" }, { "commit": "133e50f378737e33ff99ea29c7e742c4433e2f61", "tree": "823dd591b6a495bf56c6c3efaf1254f0cfc7623b", "parents": [ "99826909dd7b8303c52e3d1bdab0ae7e800439eb" ], "author": { "name": "Julian Reschke", "email": "julian.reschke@gmx.de", "time": "Tue Dec 16 22:15:11 2025 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Dec 16 22:15:11 2025 +0100" }, "message": "JCRVLT-832: test coverage for handling namespace information in PATH typed property values (#400)\n\n" }, { "commit": "99826909dd7b8303c52e3d1bdab0ae7e800439eb", "tree": "c39501d25532d4c109cf153e53a99720ec030783", "parents": [ "8014c01b2fa6be19610775a445e3000e6d3dc3bb" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Mon Dec 15 16:35:34 2025 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Dec 15 16:35:34 2025 +0100" }, "message": "Fix typo in docview.md regarding empty elements" }, { "commit": "8014c01b2fa6be19610775a445e3000e6d3dc3bb", "tree": "b5bb5b99c4ad1dfbbcaa4d5eac012d358f93bcd4", "parents": [ "f3b356ebe3d823e4d18aa25841479ec3141f7ad3" ], "author": { "name": "Julian Reschke", "email": "julian.reschke@gmx.de", "time": "Tue Nov 25 11:21:50 2025 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Nov 25 11:21:50 2025 +0100" }, "message": "JCRVLT-828: Fix handling of target node UUID for IdConflictPolicy.LEGACY (#398)\n\n" }, { "commit": "f3b356ebe3d823e4d18aa25841479ec3141f7ad3", "tree": "af313b8b2fa2d81ff4551d24af9ff80a8a869833", "parents": [ "4dd65c925b282991f8e0cebb280fb6cfa393e8a0" ], "author": { "name": "Julian Reschke", "email": "julian.reschke@gmx.de", "time": "Thu Nov 20 10:45:47 2025 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Nov 20 10:45:47 2025 +0100" }, "message": "JCRLVT-829: Clean up ReferenceableIdentifiersImportIT and add test coverage for JCRVLT-828 (#396)\n\n* JCRLVT-829: Clean up ReferenceableIdentifiersImportIT and add test coverage for JCRVLT-828\n\n* JCRVLT-829: fix test for JCRVLT-828" }, { "commit": "4dd65c925b282991f8e0cebb280fb6cfa393e8a0", "tree": "97818993d631ed5ca8e422987ee3648611821fc9", "parents": [ "218ac0a77f481e7f2a40f798eeaca0c24e64078e" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Thu Sep 11 11:17:15 2025 +0200" }, "committer": { "name": "Konrad Windszus", "email": "konrad@windszus.net", "time": "Mon Nov 03 08:57:27 2025 +0100" }, "message": "JCRVLT-825 Remove patch file support\n\nPrevent writing to arbitrary locations in the filesystem when installing\npackages" }, { "commit": "218ac0a77f481e7f2a40f798eeaca0c24e64078e", "tree": "212f64eb0a8dd8a38c23dcabebeb617e033f59b0", "parents": [ "775bed46aaa63f8b9f87cb9aab0ec65a65846d06" ], "author": { "name": "Jörg Hoh", "email": "joerghoh@users.noreply.github.com", "time": "Fri Oct 24 12:46:25 2025 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Oct 24 12:46:25 2025 +0200" }, "message": "ignore .DS_Store files of Macs (#392)\n\n" }, { "commit": "775bed46aaa63f8b9f87cb9aab0ec65a65846d06", "tree": "8bea6396fab90ea69dafdf3350388db3744348fa", "parents": [ "e18e32b657dcf4dc0349f2bf5719da2aa399f3c4" ], "author": { "name": "Jörg Hoh", "email": "joerghoh@users.noreply.github.com", "time": "Fri Oct 24 12:46:08 2025 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Oct 24 12:46:08 2025 +0200" }, "message": "JCRVLT-824 update release docs (#393)\n\n" }, { "commit": "e18e32b657dcf4dc0349f2bf5719da2aa399f3c4", "tree": "2967f447b4d8f0b943bfe2735ef8f89baf9b088f", "parents": [ "6a07d9980d04aedb9c6b8da166c0b96110fbfe73" ], "author": { "name": "Joerg Hoh", "email": "jhoh@adobe.com", "time": "Tue Oct 21 12:22:56 2025 +0200" }, "committer": { "name": "Joerg Hoh", "email": "jhoh@adobe.com", "time": "Tue Oct 21 12:22:56 2025 +0200" }, "message": "[maven-release-plugin] prepare for next development iteration\n" }, { "commit": "6a07d9980d04aedb9c6b8da166c0b96110fbfe73", "tree": "911535af8ca7ee7ba9210c3ac5f961e65e283647", "parents": [ "bbe724cd9c299b505e81e53fb980e8d94a53b70a" ], "author": { "name": "Joerg Hoh", "email": "jhoh@adobe.com", "time": "Tue Oct 21 12:22:48 2025 +0200" }, "committer": { "name": "Joerg Hoh", "email": "jhoh@adobe.com", "time": "Tue Oct 21 12:22:48 2025 +0200" }, "message": "[maven-release-plugin] prepare release jackrabbit-filevault-4.1.4\n" }, { "commit": "bbe724cd9c299b505e81e53fb980e8d94a53b70a", "tree": "1f1e0c5bf54bccceb607a9cf80b1d9cd0048e6d3", "parents": [ "c403f5a0298185221027a844f22e903976fd3ecd" ], "author": { "name": "Joerg Hoh", "email": "jhoh@adobe.com", "time": "Tue Oct 21 12:11:31 2025 +0200" }, "committer": { "name": "Joerg Hoh", "email": "jhoh@adobe.com", "time": "Tue Oct 21 12:11:31 2025 +0200" }, "message": "[maven-release-plugin] rollback the release of jackrabbit-filevault-4.1.4\n" }, { "commit": "c403f5a0298185221027a844f22e903976fd3ecd", "tree": "a004df87008bc49e7eb98a3cb1a22a4c43bf18d8", "parents": [ "a395aeac44bf1eb4586f192acb300c84ff18d8e5" ], "author": { "name": "Joerg Hoh", "email": "jhoh@adobe.com", "time": "Tue Oct 21 11:47:41 2025 +0200" }, "committer": { "name": "Joerg Hoh", "email": "jhoh@adobe.com", "time": "Tue Oct 21 11:47:41 2025 +0200" }, "message": "[maven-release-plugin] prepare for next development iteration\n" }, { "commit": "a395aeac44bf1eb4586f192acb300c84ff18d8e5", "tree": "7a7cf2e87045dcbff80f598b439e1c3160013e9e", "parents": [ "119200d1f28d71b908fe3263629d20f50f355f4a" ], "author": { "name": "Joerg Hoh", "email": "jhoh@adobe.com", "time": "Tue Oct 21 11:47:16 2025 +0200" }, "committer": { "name": "Joerg Hoh", "email": "jhoh@adobe.com", "time": "Tue Oct 21 11:47:16 2025 +0200" }, "message": "[maven-release-plugin] prepare release jackrabbit-filevault-4.1.4\n" }, { "commit": "119200d1f28d71b908fe3263629d20f50f355f4a", "tree": "1f1e0c5bf54bccceb607a9cf80b1d9cd0048e6d3", "parents": [ "cab37686d3e2ad29ef71634c88870336c8c11f87" ], "author": { "name": "Joerg Hoh", "email": "jhoh@adobe.com", "time": "Tue Oct 21 11:30:38 2025 +0200" }, "committer": { "name": "Joerg Hoh", "email": "jhoh@adobe.com", "time": "Tue Oct 21 11:30:38 2025 +0200" }, "message": "update release notes for 4.1.4\n" }, { "commit": "cab37686d3e2ad29ef71634c88870336c8c11f87", "tree": "a07f624e9c152941330f8e42120ba809816c6862", "parents": [ "71b8ea0a8a15d12323e1c8fbb35dfa9b36dc3169" ], "author": { "name": "Joerg Hoh", "email": "jhoh@adobe.com", "time": "Tue Oct 21 11:25:41 2025 +0200" }, "committer": { "name": "Joerg Hoh", "email": "jhoh@adobe.com", "time": "Tue Oct 21 11:25:41 2025 +0200" }, "message": "remove unnecessary .DS_Store file\n" }, { "commit": "71b8ea0a8a15d12323e1c8fbb35dfa9b36dc3169", "tree": "80f3b7cb9920d64b652cbca97d1b97fd434dbd5c", "parents": [ "b497c92715f1b3565339d0fbfd638bfce7027623" ], "author": { "name": "Joerg Hoh", "email": "jhoh@adobe.com", "time": "Tue Oct 21 11:04:54 2025 +0200" }, "committer": { "name": "Joerg Hoh", "email": "jhoh@adobe.com", "time": "Tue Oct 21 11:04:54 2025 +0200" }, "message": "[maven-release-plugin] prepare for next development iteration\n" }, { "commit": "b497c92715f1b3565339d0fbfd638bfce7027623", "tree": "e843b5135cf471fdef2118e2b5f85040595739cd", "parents": [ "e1bc079ea27a5e9949e1b410914c3a61d03257e5" ], "author": { "name": "Joerg Hoh", "email": "jhoh@adobe.com", "time": "Tue Oct 21 11:04:45 2025 +0200" }, "committer": { "name": "Joerg Hoh", "email": "jhoh@adobe.com", "time": "Tue Oct 21 11:04:45 2025 +0200" }, "message": "[maven-release-plugin] prepare release jackrabbit-filevault-4.1.2\n" }, { "commit": "e1bc079ea27a5e9949e1b410914c3a61d03257e5", "tree": "08af109c6d7d389b18d79b2cc50db7731e07ead3", "parents": [ "16f1068f8b6042bf664ab56c514e83d867fad12e" ], "author": { "name": "Joerg Hoh", "email": "jhoh@adobe.com", "time": "Tue Oct 21 10:52:23 2025 +0200" }, "committer": { "name": "Joerg Hoh", "email": "jhoh@adobe.com", "time": "Tue Oct 21 10:52:23 2025 +0200" }, "message": "update release notes for 4.1.2\n" }, { "commit": "16f1068f8b6042bf664ab56c514e83d867fad12e", "tree": "0ebd6988a910d46344dcac488339c7c4b4934dc5", "parents": [ "ee17857b51bced6e99233a9c52b30cd6074fb28a" ], "author": { "name": "Jörg Hoh", "email": "joerghoh@users.noreply.github.com", "time": "Tue Oct 21 10:41:15 2025 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Oct 21 10:41:15 2025 +0200" }, "message": "JCRVLT-822 change order of checks (#391)\n\nmove a more costly check to the back of these ANDed checks to benefit from lazy evaluation" }, { "commit": "ee17857b51bced6e99233a9c52b30cd6074fb28a", "tree": "9b7493a9bc058c02f73eaa767ff6e6bb5fa1d655", "parents": [ "c30cc3928a06ba325c0a5cac463b083d690234ec" ], "author": { "name": "Joerg Hoh", "email": "jhoh@adobe.com", "time": "Mon Oct 20 13:21:35 2025 +0200" }, "committer": { "name": "Joerg Hoh", "email": "jhoh@adobe.com", "time": "Mon Oct 20 13:21:35 2025 +0200" }, "message": "[maven-release-plugin] prepare for next development iteration\n" }, { "commit": "c30cc3928a06ba325c0a5cac463b083d690234ec", "tree": "98597850d1b40e4970f26ac3f4477e747ee16b72", "parents": [ "715bb4d887fad0ad7a4eb275149d997b79abf51f" ], "author": { "name": "Joerg Hoh", "email": "jhoh@adobe.com", "time": "Mon Oct 20 13:21:26 2025 +0200" }, "committer": { "name": "Joerg Hoh", "email": "jhoh@adobe.com", "time": "Mon Oct 20 13:21:26 2025 +0200" }, "message": "[maven-release-plugin] prepare release jackrabbit-filevault-4.1.0\n" }, { "commit": "715bb4d887fad0ad7a4eb275149d997b79abf51f", "tree": "c7487323c75b929e4153d0d4017e77510c5de7b2", "parents": [ "22d8d5bb1309222087d944df87a02febaead99e5" ], "author": { "name": "Joerg Hoh", "email": "jhoh@adobe.com", "time": "Mon Oct 20 13:00:00 2025 +0200" }, "committer": { "name": "Joerg Hoh", "email": "jhoh@adobe.com", "time": "Mon Oct 20 13:00:00 2025 +0200" }, "message": "release notes for 4.1.0\n" }, { "commit": "22d8d5bb1309222087d944df87a02febaead99e5", "tree": "2d9f3dac8d3c300a6ecd93d85574c697f4af1674", "parents": [ "5104f882a2ff268f6195eda357fbee174d3b66e4" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Wed Oct 08 16:00:11 2025 +0200" }, "committer": { "name": "Konrad Windszus", "email": "konrad@windszus.net", "time": "Wed Oct 15 12:19:38 2025 +0200" }, "message": "Use new ASF logo" }, { "commit": "5104f882a2ff268f6195eda357fbee174d3b66e4", "tree": "c6ad798d8a0ac804360b4dbf15957dacaf9b06b2", "parents": [ "65c137710bf0b93402fa187168af91335bc8a12b" ], "author": { "name": "Jörg Hoh", "email": "joerghoh@users.noreply.github.com", "time": "Mon Oct 13 21:37:35 2025 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Oct 13 21:37:35 2025 +0200" }, "message": "JCRVLT-816 update dependencies (#383)\n\nupdate dependencies; for the integration tests use these dependencies:\n* min version: versions as of AEM 6.5 LTS SP1\n* max version: versions as of a current AEM CS release\n\nCo-authored-by: Konrad Windszus \u003ckwin@apache.org\u003e" }, { "commit": "65c137710bf0b93402fa187168af91335bc8a12b", "tree": "f0669a87073067f8e40267597022da9167b48edc", "parents": [ "4806680419c3b403c2a7ce8c46708eaa96a48e92" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Thu Oct 02 14:32:36 2025 +0200" }, "committer": { "name": "Konrad Windszus", "email": "konrad@windszus.net", "time": "Thu Oct 02 15:21:28 2025 +0200" }, "message": "Use JR2 minimum version for SPI dependencies\n\nOtherwise you transitively raise the runtime requirements according to\nthe maximum version, as those are embedded in OSGi bundles deployed on\nthe server side" }, { "commit": "4806680419c3b403c2a7ce8c46708eaa96a48e92", "tree": "7d706567b17676a8b62528b6bdee636e92c12af9", "parents": [ "72c139b3f31a3d77cd88f8412bdcdad2eb47a7a1" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Thu Sep 25 18:28:14 2025 +0200" }, "committer": { "name": "Konrad Windszus", "email": "konrad@windszus.net", "time": "Thu Sep 25 19:55:44 2025 +0200" }, "message": "Build with Java 25\n\nUpgrade some testing dependencies and manage their versions in parent" }, { "commit": "72c139b3f31a3d77cd88f8412bdcdad2eb47a7a1", "tree": "426fa6e88504ca81ecb71ec63610f45a0a774706", "parents": [ "d0dcdbd26cc783a44c4d98230317aa749edfb1cb" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Thu Sep 25 18:06:59 2025 +0200" }, "committer": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Thu Sep 25 18:06:59 2025 +0200" }, "message": "Fix other false positives from dependency-check\n\nUpdate dependency-check to 12.1.6 to include\nhttps://github.com/dependency-check/DependencyCheck/pull/7963." }, { "commit": "d0dcdbd26cc783a44c4d98230317aa749edfb1cb", "tree": "8ba89cf9b40df5e8baec85e409dfeacc72a42f68", "parents": [ "4e48737aa77a710a211d80cb1cdff6e5d96d0ea2" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Mon Sep 08 17:33:13 2025 +0200" }, "committer": { "name": "Konrad Windszus", "email": "konrad@windszus.net", "time": "Thu Sep 25 16:23:08 2025 +0200" }, "message": "JCRVLT-819: Upgrade to JLine 3\n\nFixes CVE-2023-50572" }, { "commit": "4e48737aa77a710a211d80cb1cdff6e5d96d0ea2", "tree": "be06fca200baac3c7d58ce81affa67a59eb4e343", "parents": [ "c78cd6a74f09fbe6c7b48366707c3136580133e4" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Thu Sep 11 18:14:33 2025 +0200" }, "committer": { "name": "Konrad Windszus", "email": "konrad@windszus.net", "time": "Thu Sep 11 18:33:59 2025 +0200" }, "message": "Suppress build failure for CVE-2025-58782\n\nFileVault is not affected as it doesn\u0027t use JNDI" }, { "commit": "c78cd6a74f09fbe6c7b48366707c3136580133e4", "tree": "91eda4fea34f8f4c139e8bd74ddf1592bff6b02e", "parents": [ "983bdec48b5772d6888d76c1b86899a90de735ef" ], "author": { "name": "Jörg Hoh", "email": "joerghoh@users.noreply.github.com", "time": "Thu Sep 11 11:17:06 2025 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Sep 11 11:17:06 2025 +0200" }, "message": "JCRVLT-817 check only once for protected properties (#384)\n\n* JCRVLT-817 check only once for protected properties" }, { "commit": "983bdec48b5772d6888d76c1b86899a90de735ef", "tree": "a15421fe8a42b0790612aa8a2e4452a39279ecb0", "parents": [ "84c912494a8efcfec5d8175a5045e4976be80ebb" ], "author": { "name": "Konrad Windszus", "email": "kwin@apache.org", "time": "Tue Aug 19 19:30:50 2025 +0200" }, "committer": { "name": "Konrad Windszus", "email": "konrad@windszus.net", "time": "Fri Sep 05 19:00:31 2025 +0200" }, "message": "JCRVLT-818 Upgrade embedded vulnerable dependencies\n\nFail build when dependency-check finds dependencies with CVSS 4 or\nhigher. This is severity MEDIUM or above\n(https://nvd.nist.gov/vuln-metrics/cvss)" }, { "commit": "84c912494a8efcfec5d8175a5045e4976be80ebb", "tree": "7ef938470b28a76d989a61f448767b0170aba961", "parents": [ "bf0dc53b1dd3ff8d50beebcb862bbe56ded3e58e" ], "author": { "name": "Jörg Hoh", "email": "joerghoh@users.noreply.github.com", "time": "Thu Sep 04 14:18:24 2025 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Sep 04 14:18:24 2025 +0200" }, "message": "JCRVLT-813 read node and property definitions lazy (#380)\n\n* JCRVLT-813 read node and property definitions lazy\n\nCo-authored-by: Konrad Windszus \u003ckwin@apache.org\u003e" } ], "next": "bf0dc53b1dd3ff8d50beebcb862bbe56ded3e58e" }