)]}'
{
  "log": [
    {
      "commit": "0317f18b794404eae32d872c968ec34488268bc7",
      "tree": "9a57d839c42140cb1a47915b8a7828218042f934",
      "parents": [
        "1af47aa6b1aff295920c805ec27e96c3f2efb18b"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Sat May 16 07:18:20 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sat May 16 07:18:20 2026 +0200"
      },
      "message": "build(deps): bump pax.logging.version from 2.3.3 to 2.3.4 (#2661)\n\nBumps `pax.logging.version` from 2.3.3 to 2.3.4.\n\nUpdates `org.ops4j.pax.logging:pax-logging-api` from 2.3.3 to 2.3.4\n- [Changelog](https://github.com/ops4j/org.ops4j.pax.logging/blob/main/RELEASE-NOTES.html)\n- [Commits](https://github.com/ops4j/org.ops4j.pax.logging/compare/logging-2.3.3...logging-2.3.4)\n\nUpdates `org.ops4j.pax.logging:pax-logging-log4j2` from 2.3.3 to 2.3.4\n- [Changelog](https://github.com/ops4j/org.ops4j.pax.logging/blob/main/RELEASE-NOTES.html)\n- [Commits](https://github.com/ops4j/org.ops4j.pax.logging/compare/logging-2.3.3...logging-2.3.4)\n\nUpdates `org.ops4j.pax.logging:pax-logging-log4j2-extra` from 2.3.3 to 2.3.4\n- [Changelog](https://github.com/ops4j/org.ops4j.pax.logging/blob/main/RELEASE-NOTES.html)\n- [Commits](https://github.com/ops4j/org.ops4j.pax.logging/compare/logging-2.3.3...logging-2.3.4)\n\nUpdates `org.ops4j.pax.logging:pax-logging-logback` from 2.3.3 to 2.3.4\n- [Changelog](https://github.com/ops4j/org.ops4j.pax.logging/blob/main/RELEASE-NOTES.html)\n- [Commits](https://github.com/ops4j/org.ops4j.pax.logging/compare/logging-2.3.3...logging-2.3.4)\n\n---\nupdated-dependencies:\n- dependency-name: org.ops4j.pax.logging:pax-logging-api\n  dependency-version: 2.3.4\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n- dependency-name: org.ops4j.pax.logging:pax-logging-log4j2\n  dependency-version: 2.3.4\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n- dependency-name: org.ops4j.pax.logging:pax-logging-log4j2-extra\n  dependency-version: 2.3.4\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n- dependency-name: org.ops4j.pax.logging:pax-logging-logback\n  dependency-version: 2.3.4\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "1af47aa6b1aff295920c805ec27e96c3f2efb18b",
      "tree": "76fb210e8fffd3f318615bb54edf3d3ed656498c",
      "parents": [
        "0005043b3311366119f0163d82d6433b7cc5d795"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Fri May 15 06:04:09 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri May 15 06:04:09 2026 +0200"
      },
      "message": "build(deps): bump asm.version from 9.9.1 to 9.10 (#2659)\n\nBumps `asm.version` from 9.9.1 to 9.10.\n\nUpdates `org.ow2.asm:asm` from 9.9.1 to 9.10\n\nUpdates `org.ow2.asm:asm-util` from 9.9.1 to 9.10\n\nUpdates `org.ow2.asm:asm-tree` from 9.9.1 to 9.10\n\nUpdates `org.ow2.asm:asm-analysis` from 9.9.1 to 9.10\n\nUpdates `org.ow2.asm:asm-commons` from 9.9.1 to 9.10\n\n---\nupdated-dependencies:\n- dependency-name: org.ow2.asm:asm\n  dependency-version: \u00279.10\u0027\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n- dependency-name: org.ow2.asm:asm-util\n  dependency-version: \u00279.10\u0027\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n- dependency-name: org.ow2.asm:asm-tree\n  dependency-version: \u00279.10\u0027\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n- dependency-name: org.ow2.asm:asm-analysis\n  dependency-version: \u00279.10\u0027\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n- dependency-name: org.ow2.asm:asm-commons\n  dependency-version: \u00279.10\u0027\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "0005043b3311366119f0163d82d6433b7cc5d795",
      "tree": "d8cd68164ed4597f1b0c8c410ab3be4c35f27dd4",
      "parents": [
        "bc746f77ce5eeba80c50941bfb13ce7f6d2feeb4"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed May 13 13:51:26 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed May 13 13:51:26 2026 +0200"
      },
      "message": "build(deps): bump org.hibernate.orm:hibernate-core (#2655)\n\nBumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm) from 7.3.3.Final to 7.3.4.Final.\n- [Release notes](https://github.com/hibernate/hibernate-orm/releases)\n- [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.3.4/changelog.txt)\n- [Commits](https://github.com/hibernate/hibernate-orm/compare/7.3.3...7.3.4)\n\n---\nupdated-dependencies:\n- dependency-name: org.hibernate.orm:hibernate-core\n  dependency-version: 7.3.4.Final\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "bc746f77ce5eeba80c50941bfb13ce7f6d2feeb4",
      "tree": "63d4e484ef412878f235b73af5280bf66d57e486",
      "parents": [
        "5eb1f25a422ae753f3f851625d3b0ae1aef4faaf"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue May 12 09:22:26 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue May 12 09:22:26 2026 +0200"
      },
      "message": "build(deps): bump org.apache:apache from 37 to 38 (#2656)\n\nBumps [org.apache:apache](https://github.com/apache/maven-apache-parent) from 37 to 38.\n- [Release notes](https://github.com/apache/maven-apache-parent/releases)\n- [Commits](https://github.com/apache/maven-apache-parent/commits)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache:apache\n  dependency-version: \u002738\u0027\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "5eb1f25a422ae753f3f851625d3b0ae1aef4faaf",
      "tree": "09ea2d6f30965ca86474ce220c07bd0dc70d2888",
      "parents": [
        "257451d222d864a97ec0b93c12350842dcd40da7"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Sat May 09 08:16:31 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sat May 09 08:16:31 2026 +0200"
      },
      "message": "build(deps-dev): bump org.apache.directory.server:apacheds-kerberos-test (#2652)\n\nBumps org.apache.directory.server:apacheds-kerberos-test from 2.0.0-M24 to 2.0.0.AM26.\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.directory.server:apacheds-kerberos-test\n  dependency-version: 2.0.0.AM26\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "257451d222d864a97ec0b93c12350842dcd40da7",
      "tree": "4e336711f87a534e394142a377d2bb56e5f63b74",
      "parents": [
        "f85f23946fb3dbe876f193e3cbfea9aa11f22eae"
      ],
      "author": {
        "name": "Robert Varga",
        "email": "robert.varga@pantheon.tech",
        "time": "Fri May 08 08:26:32 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri May 08 08:26:32 2026 +0200"
      },
      "message": "Remove unused imports (#2646)\n\nThis cleans up unused imports and a drive-by elimination of\nstar-imports.\n\nSigned-off-by: Robert Varga \u003crobert.varga@pantheon.tech\u003e"
    },
    {
      "commit": "f85f23946fb3dbe876f193e3cbfea9aa11f22eae",
      "tree": "a2f536c42fd6426656126f71dce7be2e8bd4f684",
      "parents": [
        "d19805d6a72fb4d56c0151042ad6aa7ffa29d2d2"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Fri May 08 06:21:07 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri May 08 06:21:07 2026 +0200"
      },
      "message": "build(deps-dev): bump org.jline:jline from 4.0.15 to 4.1.0 (#2645)\n\n* build(deps-dev): bump org.jline:jline from 4.0.15 to 4.1.0\n\nBumps [org.jline:jline](https://github.com/jline/jline3) from 4.0.15 to 4.1.0.\n- [Release notes](https://github.com/jline/jline3/releases)\n- [Commits](https://github.com/jline/jline3/compare/4.0.15...4.1.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.jline:jline\n  dependency-version: 4.1.0\n  dependency-type: direct:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\n\n* Fix compilation errors with JLine 4.1.0 Sized interface\n\nJLine 4.1.0 introduced Sized interface and made setSize(Sized) the abstract\nmethod on Terminal, with setSize(Size) becoming a default bridge. Implement\nsetSize(Sized) in JLineTerminal and KarafTerminal to satisfy the contract.\n\n---------\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e\nCo-authored-by: JB Onofré \u003cjbonofre@apache.org\u003e"
    },
    {
      "commit": "d19805d6a72fb4d56c0151042ad6aa7ffa29d2d2",
      "tree": "09ac59a27f5a2ebca653454270e0bc9d4669faff",
      "parents": [
        "a2bcdf45672bf734c1bc85df3a9965923d748164"
      ],
      "author": {
        "name": "Robert Varga",
        "email": "robert.varga@pantheon.tech",
        "time": "Sat May 02 09:31:28 2026 +0200"
      },
      "committer": {
        "name": "Robert Varga",
        "email": "nite@hq.sk",
        "time": "Thu May 07 15:39:53 2026 +0200"
      },
      "message": "More static method conversions\n\nThis is another round of marking methods static, covering most of the\nrepository.\n\nSigned-off-by: Robert Varga \u003crobert.varga@pantheon.tech\u003e\n"
    },
    {
      "commit": "a2bcdf45672bf734c1bc85df3a9965923d748164",
      "tree": "55d2f44321f6a23785c3a4281ee05c61ddb2cddd",
      "parents": [
        "a0062f97106bbf874bebc4e227c00c1e0c881d2f"
      ],
      "author": {
        "name": "Holger Friedrich",
        "email": "mail@holger-friedrich.de",
        "time": "Wed May 06 12:52:55 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed May 06 12:52:55 2026 +0200"
      },
      "message": "Finish upgrade to felix.framework 7 (#2642)\n\n- adapt version in tests\n- copy jre.properties to make tests work in Windows"
    },
    {
      "commit": "a0062f97106bbf874bebc4e227c00c1e0c881d2f",
      "tree": "12d19d70ddc4be0a66741b2fb8defa8179ba055c",
      "parents": [
        "b7764d30c8b05013c7a65a28a236e81ae1af8cc9"
      ],
      "author": {
        "name": "JB Onofré",
        "email": "jbonofre@apache.org",
        "time": "Wed May 06 07:51:27 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed May 06 07:51:27 2026 +0200"
      },
      "message": "Remove specs bundles (#1958)"
    },
    {
      "commit": "b7764d30c8b05013c7a65a28a236e81ae1af8cc9",
      "tree": "5ac87c2ff24792ba5696ba9a83993359924e0b24",
      "parents": [
        "2c701f6d9d1b2674b8f84d4abf790dfaefceb775"
      ],
      "author": {
        "name": "Robert Varga",
        "email": "robert.varga@pantheon.tech",
        "time": "Wed May 06 06:12:39 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed May 06 06:12:39 2026 +0200"
      },
      "message": "Fix Main.LOG reference (#2630)\n\nThis is a constant reference, do not use the inclosing object to\nreference it.\n\nSigned-off-by: Robert Varga \u003crobert.varga@pantheon.tech\u003e"
    },
    {
      "commit": "2c701f6d9d1b2674b8f84d4abf790dfaefceb775",
      "tree": "e5fbefec93b9ccb1f2f2ef00205ac1f11f5b09e3",
      "parents": [
        "4f29acd6e1192f261ec194efcc10b2001103d932"
      ],
      "author": {
        "name": "Robert Varga",
        "email": "robert.varga@pantheon.tech",
        "time": "Wed May 06 06:12:09 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed May 06 06:12:09 2026 +0200"
      },
      "message": "Clean up LogDumpProvider (#2631)\n\nThis a deep modernization:\n- add a missing @Override\n- use local variable type inference to shorten declarations\n- use type-safe BundleContext.getServiceReference(Class)\n- use FrameworkUtil.asMap(Dictionary) for improved iteration\n- use Files.copy(OutputStream, Path) for byte transfer\n- try-with-resources to ensure the OutputStream is closed, as per\n  DumpDestination.add(String) contract\n\nSigned-off-by: Robert Varga \u003crobert.varga@pantheon.tech\u003e"
    },
    {
      "commit": "4f29acd6e1192f261ec194efcc10b2001103d932",
      "tree": "5e78e33b3ab6222478e664975134566215b5de82",
      "parents": [
        "97fd6575dbd07eda2acae20249eed647ce5f43fb"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed May 06 06:11:28 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed May 06 06:11:28 2026 +0200"
      },
      "message": "build(deps): bump org.glassfish.jaxb:jaxb-bom from 4.0.7 to 4.0.8 (#2640)\n\nBumps org.glassfish.jaxb:jaxb-bom from 4.0.7 to 4.0.8.\n\n---\nupdated-dependencies:\n- dependency-name: org.glassfish.jaxb:jaxb-bom\n  dependency-version: 4.0.8\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "97fd6575dbd07eda2acae20249eed647ce5f43fb",
      "tree": "1ce24e620054a542caea0f567be9472108de6ade",
      "parents": [
        "b50042b3c17955cf86f6bb0b09fc73f920811f96"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue May 05 10:15:56 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue May 05 10:15:56 2026 +0200"
      },
      "message": "build(deps): bump org.hibernate.orm:hibernate-core (#2632)\n\nBumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm) from 7.3.2.Final to 7.3.3.Final.\n- [Release notes](https://github.com/hibernate/hibernate-orm/releases)\n- [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.3.3/changelog.txt)\n- [Commits](https://github.com/hibernate/hibernate-orm/compare/7.3.2...7.3.3)\n\n---\nupdated-dependencies:\n- dependency-name: org.hibernate.orm:hibernate-core\n  dependency-version: 7.3.3.Final\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "b50042b3c17955cf86f6bb0b09fc73f920811f96",
      "tree": "3eca3be33e6995cef6f53105e85e5d4344089b12",
      "parents": [
        "2b6b6afaa2a5e663d9f41bc491c797fa45792b2d"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue May 05 10:15:16 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue May 05 10:15:16 2026 +0200"
      },
      "message": "build(deps-dev): bump org.jline:jline from 4.0.14 to 4.0.15 (#2634)\n\nBumps [org.jline:jline](https://github.com/jline/jline3) from 4.0.14 to 4.0.15.\n- [Release notes](https://github.com/jline/jline3/releases)\n- [Commits](https://github.com/jline/jline3/compare/4.0.14...4.0.15)\n\n---\nupdated-dependencies:\n- dependency-name: org.jline:jline\n  dependency-version: 4.0.15\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "2b6b6afaa2a5e663d9f41bc491c797fa45792b2d",
      "tree": "9ccb928604e0b2db968831eddd60428ae37ebe73",
      "parents": [
        "8f94a8a15ea5d165eeb55c4260cb113ce9697b25"
      ],
      "author": {
        "name": "JB Onofré",
        "email": "jbonofre@apache.org",
        "time": "Sun May 03 08:05:35 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun May 03 08:05:35 2026 +0200"
      },
      "message": "feat(features): use wrap instead of ServiceMix bundles (#2305)\n\n* feat(features): use wrap instead of ServiceMix bundles\n\n* fix(cdi): provide JavaAnnotation osgi.contract via system capabilities\n\nThe javax.annotation-api jar is already an OSGi bundle and doesn\u0027t need\nwrapping. The osgi.contract capability required by aries.cdi.extender is\nnow provided by the system bundle via karaf-capabilities in\nconfig.properties, with javax.annotation packages exported as system\npackages extra."
    },
    {
      "commit": "8f94a8a15ea5d165eeb55c4260cb113ce9697b25",
      "tree": "8c30b96b77821468bec2fd5eb1739f34b4942f1f",
      "parents": [
        "d8810434f3d2ffe12ceefbf3f43be3b7e8326a67"
      ],
      "author": {
        "name": "Robert Varga",
        "email": "robert.varga@pantheon.tech",
        "time": "Sat May 02 09:35:45 2026 +0200"
      },
      "committer": {
        "name": "Robert Varga",
        "email": "nite@hq.sk",
        "time": "Sat May 02 19:30:24 2026 +0200"
      },
      "message": "Remove unused imports in PackageCommand\n\nWe have a chunk of imports that are not used: remove them.\n\nSigned-off-by: Robert Varga \u003crobert.varga@pantheon.tech\u003e\n"
    },
    {
      "commit": "d8810434f3d2ffe12ceefbf3f43be3b7e8326a67",
      "tree": "f857c31a4f8dfe044d71cbb6cef4ad8cc204bccb",
      "parents": [
        "e7bb682aeefb2904bbd719b7b3387b87fdd98cf3"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Fri May 01 13:22:25 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri May 01 13:22:25 2026 +0200"
      },
      "message": "build(deps): bump maven.resolver.version from 2.0.16 to 2.0.17 (#2624)\n\nBumps `maven.resolver.version` from 2.0.16 to 2.0.17.\n\nUpdates `org.apache.maven.resolver:maven-resolver-api` from 2.0.16 to 2.0.17\n- [Release notes](https://github.com/apache/maven-resolver/releases)\n- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-2.0.16...maven-resolver-2.0.17)\n\nUpdates `org.apache.maven.resolver:maven-resolver-util` from 2.0.16 to 2.0.17\n- [Release notes](https://github.com/apache/maven-resolver/releases)\n- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-2.0.16...maven-resolver-2.0.17)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven.resolver:maven-resolver-api\n  dependency-version: 2.0.17\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n- dependency-name: org.apache.maven.resolver:maven-resolver-util\n  dependency-version: 2.0.17\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "e7bb682aeefb2904bbd719b7b3387b87fdd98cf3",
      "tree": "4988ccc6c0369ae147b5a8383d0dd11fcfe8c844",
      "parents": [
        "3db06c0bdc75a5f74155f7e9f596579d87eabcf3"
      ],
      "author": {
        "name": "Robert Varga",
        "email": "robert.varga@pantheon.tech",
        "time": "Fri May 01 13:21:49 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri May 01 13:21:49 2026 +0200"
      },
      "message": "Mark methods static in shell.core (#2623)\n\nWe have a number of methods which can be made static, this patch updates\nthem all.\n\nSigned-off-by: Robert Varga \u003crobert.varga@pantheon.tech\u003e"
    },
    {
      "commit": "3db06c0bdc75a5f74155f7e9f596579d87eabcf3",
      "tree": "bad61db0b36f3d5f2c1493e6c2f609f6f03c5565",
      "parents": [
        "0a2d5dff2c708935c098f751a7c05d97f5d34018"
      ],
      "author": {
        "name": "Robert Varga",
        "email": "robert.varga@pantheon.tech",
        "time": "Fri May 01 13:19:08 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri May 01 13:19:08 2026 +0200"
      },
      "message": "Remove unneeded javaVersion override (#2622)\n\n* Remove unneeded javaVersion override\n\nWe have tinybundles-4, hence there is no need to compile for Java 8.\n\nSigned-off-by: Robert Varga \u003crobert.varga@pantheon.tech\u003e\n\n* Symlink main\u0027s test jre.properties\n\nThe file used for testing is quite stale, this turns it into a symlink\nto production version -- thus making sure it is always up-to-date.\n\nSigned-off-by: Robert Varga \u003crobert.varga@pantheon.tech\u003e\n\n---------\n\nSigned-off-by: Robert Varga \u003crobert.varga@pantheon.tech\u003e"
    },
    {
      "commit": "0a2d5dff2c708935c098f751a7c05d97f5d34018",
      "tree": "0b20cb8f5d7386a4b7202b092a4344117c98254b",
      "parents": [
        "71ac457132bc5670b0e6b31c8419b9e7f677bf27"
      ],
      "author": {
        "name": "JB Onofré",
        "email": "jbonofre@apache.org",
        "time": "Fri May 01 13:18:28 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri May 01 13:18:28 2026 +0200"
      },
      "message": "chore: migrate test log4j.properties to log4j2.properties format (#2312)\n\nMigrate all 10 test resource log4j.properties files to Log4j2\nproperties format, replacing deprecated Log4j 1.x configuration\nwith the equivalent Log4j2 syntax."
    },
    {
      "commit": "71ac457132bc5670b0e6b31c8419b9e7f677bf27",
      "tree": "25012c081b9bf787a6a264acf70a2a239b39a57a",
      "parents": [
        "4ed8b5919c464fdd7022b83bc2b078eaaf175704"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Thu Apr 30 16:57:36 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Apr 30 16:57:36 2026 +0200"
      },
      "message": "build(deps): bump jakarta.jws:jakarta.jws-api from 1.1.1 to 3.0.0 (#2348)\n\nBumps [jakarta.jws:jakarta.jws-api](https://github.com/eclipse-ee4j/jws-api) from 1.1.1 to 3.0.0.\n- [Release notes](https://github.com/eclipse-ee4j/jws-api/releases)\n- [Commits](https://github.com/eclipse-ee4j/jws-api/compare/1.1.1...3.0.0)\n\n---\nupdated-dependencies:\n- dependency-name: jakarta.jws:jakarta.jws-api\n  dependency-version: 3.0.0\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "4ed8b5919c464fdd7022b83bc2b078eaaf175704",
      "tree": "56778b90bcbe0b97f3800534dc7ea091dc71368d",
      "parents": [
        "5a8d41af725443804fd980a80b2950d205dea375"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Thu Apr 30 16:57:16 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Apr 30 16:57:16 2026 +0200"
      },
      "message": "build(deps): bump xml-apis:xml-apis from 1.4.01 to 2.0.2 (#2346)\n\nBumps xml-apis:xml-apis from 1.4.01 to 2.0.2.\n\n---\nupdated-dependencies:\n- dependency-name: xml-apis:xml-apis\n  dependency-version: 2.0.2\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "5a8d41af725443804fd980a80b2950d205dea375",
      "tree": "d06cfd17c97e2420b33434f7232f269fe7ca8d0f",
      "parents": [
        "97a7c1d55fa0d70aca44e0bb1af4f5b623bfcd70"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Thu Apr 30 16:56:33 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Apr 30 16:56:33 2026 +0200"
      },
      "message": "build(deps): bump felix.configurator 1.0.18 + migrate to felix.cm.json 2.0.6 (jakarta.json) + bump sling.commons.johnzon 2.0.0 (#2108)\n\n* build(deps): bump org.apache.felix:org.apache.felix.configurator\n\nBumps org.apache.felix:org.apache.felix.configurator from 1.0.16 to 1.0.18.\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.felix:org.apache.felix.configurator\n  dependency-version: 1.0.18\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\n\n* build(deps): bump felix.cm.json 1.0.8 -\u003e 2.0.6 and migrate to jakarta.json\n\nfelix.configurator 1.0.18 (bumped from 1.0.16, supersedes #2108) requires\nfelix.cm.json 2.x, which switched the API package from org.apache.felix.cm.json\nto org.apache.felix.cm.json.io and the JSON-P provider from javax.json to\njakarta.json. This commit:\n\n- bumps felix.configurator 1.0.16 -\u003e 1.0.18\n- bumps felix.cm.json 1.0.8 -\u003e 2.0.6\n- bumps sling.commons.johnzon 1.2.16 -\u003e 2.0.0 (the matching\n  jakarta.json-exporting bundle in the framework feature)\n- updates the Configurations imports in ConfigRepositoryImpl,\n  JsonConfigInstaller and FeatureConfigInstaller\n- replaces geronimo-json_1.1_spec (javax.json) with\n  jakarta.json-api 2.1.3 on the compile classpath in features/core\n  and config/core\n\n---------\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e\nCo-authored-by: JB Onofré \u003cjb.onofre@dremio.com\u003e"
    },
    {
      "commit": "97a7c1d55fa0d70aca44e0bb1af4f5b623bfcd70",
      "tree": "f6d81a85d5d5e94a694ce5bc15a1b8d05d2ebbdd",
      "parents": [
        "a3bf564642b8e7946ad38d0555aae4de407677cd"
      ],
      "author": {
        "name": "Holger Friedrich",
        "email": "mail@holger-friedrich.de",
        "time": "Thu Apr 30 15:23:16 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Apr 30 15:23:16 2026 +0200"
      },
      "message": "Fix asciidoctor deprecation warning (#2619)\n\nSigned-off-by: Holger Friedrich \u003cmail@holger-friedrich.de\u003e"
    },
    {
      "commit": "a3bf564642b8e7946ad38d0555aae4de407677cd",
      "tree": "a6ac2da74a583e5edaa01cff2a9e2d31640b784a",
      "parents": [
        "eef5ac6d44575a5f85619e19ef412d00cc518d01"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Thu Apr 30 07:13:49 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Apr 30 07:13:49 2026 +0200"
      },
      "message": "build(deps): bump jackson.version from 2.21.2 to 2.21.3 (#2615)\n\nBumps `jackson.version` from 2.21.2 to 2.21.3.\n\nUpdates `com.fasterxml.jackson.core:jackson-databind` from 2.21.2 to 2.21.3\n- [Commits](https://github.com/FasterXML/jackson/commits)\n\nUpdates `com.fasterxml.jackson.jakarta.rs:jackson-jakarta-rs-json-provider` from 2.21.2 to 2.21.3\n\nUpdates `com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider` from 2.21.2 to 2.21.3\n\n---\nupdated-dependencies:\n- dependency-name: com.fasterxml.jackson.core:jackson-databind\n  dependency-version: 2.21.3\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n- dependency-name: com.fasterxml.jackson.jakarta.rs:jackson-jakarta-rs-json-provider\n  dependency-version: 2.21.3\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n- dependency-name: com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider\n  dependency-version: 2.21.3\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "eef5ac6d44575a5f85619e19ef412d00cc518d01",
      "tree": "ba3fc3a421b34961ccfa2ddc48bc18b0ec2b5e45",
      "parents": [
        "184b6539b5dc2e72e22374d4f31b1bbe8c6005e4"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Thu Apr 30 06:08:41 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Apr 30 06:08:41 2026 +0200"
      },
      "message": "build(deps-dev): bump org.jline:jline from 4.0.13 to 4.0.14 (#2617)\n\nBumps [org.jline:jline](https://github.com/jline/jline3) from 4.0.13 to 4.0.14.\n- [Release notes](https://github.com/jline/jline3/releases)\n- [Commits](https://github.com/jline/jline3/compare/4.0.13...4.0.14)\n\n---\nupdated-dependencies:\n- dependency-name: org.jline:jline\n  dependency-version: 4.0.14\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "184b6539b5dc2e72e22374d4f31b1bbe8c6005e4",
      "tree": "a03b96a59025e2bd84405b2937018488674b5e28",
      "parents": [
        "433f8b7014fc764975e6016c0c6cfcb4dc89e554"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed Apr 29 14:04:04 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Apr 29 14:04:04 2026 +0200"
      },
      "message": "build(deps): bump dawidd6/action-download-artifact from 20 to 21 (#2613)\n\nBumps [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact) from 20 to 21.\n- [Release notes](https://github.com/dawidd6/action-download-artifact/releases)\n- [Commits](https://github.com/dawidd6/action-download-artifact/compare/v20...v21)\n\n---\nupdated-dependencies:\n- dependency-name: dawidd6/action-download-artifact\n  dependency-version: \u002721\u0027\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "433f8b7014fc764975e6016c0c6cfcb4dc89e554",
      "tree": "fa90d1ad618b5623166888eccf14c7a855ca32c6",
      "parents": [
        "7352ffd08c77c588e3c5a41a1c088f25d2f05a46"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Apr 28 20:39:54 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Apr 28 20:39:54 2026 +0200"
      },
      "message": "build(deps): bump pax.url.version from 2.7.0 to 3.0.3 (#2591)\n\nBumps `pax.url.version` from 2.7.0 to 3.0.3.\n\nUpdates `org.ops4j.pax.url:pax-url-classpath` from 2.7.0 to 3.0.3\n- [Changelog](https://github.com/ops4j/org.ops4j.pax.url/blob/main/changes-3.0.adoc)\n- [Commits](https://github.com/ops4j/org.ops4j.pax.url/compare/url-2.7.0...url-3.0.3)\n\nUpdates `org.ops4j.pax.url:pax-url-commons` from 2.7.0 to 3.0.3\n- [Changelog](https://github.com/ops4j/org.ops4j.pax.url/blob/main/changes-3.0.adoc)\n- [Commits](https://github.com/ops4j/org.ops4j.pax.url/compare/url-2.7.0...url-3.0.3)\n\nUpdates `org.ops4j.pax.url:pax-url-obr` from 2.7.0 to 3.0.3\n- [Changelog](https://github.com/ops4j/org.ops4j.pax.url/blob/main/changes-3.0.adoc)\n- [Commits](https://github.com/ops4j/org.ops4j.pax.url/compare/url-2.7.0...url-3.0.3)\n\nUpdates `org.ops4j.pax.url:pax-url-war` from 2.7.0 to 3.0.3\n- [Changelog](https://github.com/ops4j/org.ops4j.pax.url/blob/main/changes-3.0.adoc)\n- [Commits](https://github.com/ops4j/org.ops4j.pax.url/compare/url-2.7.0...url-3.0.3)\n\nUpdates `org.ops4j.pax.url:pax-url-aether` from 2.7.0 to 3.0.3\n- [Changelog](https://github.com/ops4j/org.ops4j.pax.url/blob/main/changes-3.0.adoc)\n- [Commits](https://github.com/ops4j/org.ops4j.pax.url/compare/url-2.7.0...url-3.0.3)\n\nUpdates `org.ops4j.pax.url:pax-url-wrap` from 2.7.0 to 3.0.3\n- [Changelog](https://github.com/ops4j/org.ops4j.pax.url/blob/main/changes-3.0.adoc)\n- [Commits](https://github.com/ops4j/org.ops4j.pax.url/compare/url-2.7.0...url-3.0.3)\n\n---\nupdated-dependencies:\n- dependency-name: org.ops4j.pax.url:pax-url-classpath\n  dependency-version: 3.0.3\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n- dependency-name: org.ops4j.pax.url:pax-url-commons\n  dependency-version: 3.0.3\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n- dependency-name: org.ops4j.pax.url:pax-url-obr\n  dependency-version: 3.0.3\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n- dependency-name: org.ops4j.pax.url:pax-url-war\n  dependency-version: 3.0.3\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n- dependency-name: org.ops4j.pax.url:pax-url-aether\n  dependency-version: 3.0.3\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n- dependency-name: org.ops4j.pax.url:pax-url-wrap\n  dependency-version: 3.0.3\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "7352ffd08c77c588e3c5a41a1c088f25d2f05a46",
      "tree": "ce43ed6b8628d52e432a65f955c16df1cdef2d9a",
      "parents": [
        "fbed36cbd39ced9ab4350c98dd84cdf3afdea19a"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Apr 28 20:39:36 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Apr 28 20:39:36 2026 +0200"
      },
      "message": "build(deps): bump redis.clients:jedis from 7.4.1 to 7.5.0 (#2594)\n\nBumps [redis.clients:jedis](https://github.com/redis/jedis) from 7.4.1 to 7.5.0.\n- [Commits](https://github.com/redis/jedis/compare/v7.4.1...v7.5.0)\n\n---\nupdated-dependencies:\n- dependency-name: redis.clients:jedis\n  dependency-version: 7.5.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "fbed36cbd39ced9ab4350c98dd84cdf3afdea19a",
      "tree": "5971d0dd622dbd565375960af3d07eeb409c2999",
      "parents": [
        "dc616c4d93a7110e9edd63331a2a50e32a4726f5"
      ],
      "author": {
        "name": "Holger Friedrich",
        "email": "mail@holger-friedrich.de",
        "time": "Tue Apr 28 12:00:46 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Apr 28 12:00:46 2026 +0200"
      },
      "message": "[dependabot] Tune 4.4.x (#2597)"
    },
    {
      "commit": "dc616c4d93a7110e9edd63331a2a50e32a4726f5",
      "tree": "a14a9b9f83ca83dd7acfdd8ea639897826fb6dc7",
      "parents": [
        "2827b0354a57da80552894ad57954885f81f2aa9"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Apr 28 11:05:52 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Apr 28 11:05:52 2026 +0200"
      },
      "message": "build(deps-dev): bump org.jline:jline from 4.0.12 to 4.0.13 (#2596)"
    },
    {
      "commit": "2827b0354a57da80552894ad57954885f81f2aa9",
      "tree": "4a9bed61c6da4699670982e0285b2f0e7d63ea9c",
      "parents": [
        "1b2dedbc7a22b57c47c5b2963ac61c6c74b1c28e"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Apr 27 14:06:12 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Apr 27 14:06:12 2026 +0200"
      },
      "message": "build(deps): bump activemq.version from 6.2.4 to 6.2.5 (#2574)\n\nBumps `activemq.version` from 6.2.4 to 6.2.5.\n\nUpdates `org.apache.activemq:activemq-pool` from 6.2.4 to 6.2.5\n- [Release notes](https://github.com/apache/activemq/releases)\n- [Commits](https://github.com/apache/activemq/compare/activemq-6.2.4...activemq-6.2.5)\n\nUpdates `org.apache.activemq:activemq-karaf` from 6.2.4 to 6.2.5\n- [Release notes](https://github.com/apache/activemq/releases)\n- [Commits](https://github.com/apache/activemq/compare/activemq-6.2.4...activemq-6.2.5)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.activemq:activemq-karaf\n  dependency-version: 6.2.5\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n- dependency-name: org.apache.activemq:activemq-pool\n  dependency-version: 6.2.5\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "1b2dedbc7a22b57c47c5b2963ac61c6c74b1c28e",
      "tree": "c8a1cf8f8322caa5d33449072887c6b4b6871bc3",
      "parents": [
        "b09508b0729801cafcbbffa8900212c8f0c55026"
      ],
      "author": {
        "name": "JB Onofré",
        "email": "jbonofre@apache.org",
        "time": "Mon Apr 27 08:23:18 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Apr 27 08:23:18 2026 +0200"
      },
      "message": "Fix CI Test Results workflow failing to find event.json (#2555)\n\ndawidd6/action-download-artifact@v20 with name_is_regexp creates per-artifact\nsubdirectories, so the event file lands at event/event-file-ubuntu-24.04/event.json\nrather than event/event.json. Download only the ubuntu-24.04 artifact by exact\nname and update the event_file path accordingly."
    },
    {
      "commit": "b09508b0729801cafcbbffa8900212c8f0c55026",
      "tree": "a892fa472ca288ff7efa308b4b8d30389480244a",
      "parents": [
        "ee7743b33509db5f594f6c7c74f3c161f1c46a85"
      ],
      "author": {
        "name": "Holger Friedrich",
        "email": "mail@holger-friedrich.de",
        "time": "Mon Apr 27 08:20:13 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Apr 27 08:20:13 2026 +0200"
      },
      "message": "Disable flaky SSH tests on Windows (#2550)\n\n* Disable flaky SSH tests on Windows\n\n* more tests disabled"
    },
    {
      "commit": "ee7743b33509db5f594f6c7c74f3c161f1c46a85",
      "tree": "4b56d530a8f92294371a33602ddfad6999481b1d",
      "parents": [
        "1f73cc42c261533246fa5ba50603fdf4b07a39b8"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Apr 27 08:09:32 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Apr 27 08:09:32 2026 +0200"
      },
      "message": "build(deps): bump org.apache.felix:org.apache.felix.webconsole.plugins.ds (#2095)\n\nBumps org.apache.felix:org.apache.felix.webconsole.plugins.ds from 2.2.0 to 2.3.0.\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.felix:org.apache.felix.webconsole.plugins.ds\n  dependency-version: 2.3.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "1f73cc42c261533246fa5ba50603fdf4b07a39b8",
      "tree": "da255065889260f476a17a805c8435e1bb4c4d70",
      "parents": [
        "6184e7883dcf3e57d1d49e351e77a625ece4e43e"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Apr 27 08:08:23 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Apr 27 08:08:23 2026 +0200"
      },
      "message": "build(deps): bump camel.version from 4.14.5 to 4.18.1 (#2557)\n\nBumps `camel.version` from 4.14.5 to 4.18.1.\n\nUpdates `org.apache.camel.karaf:apache-camel` from 4.14.5 to 4.18.1\n\nUpdates `org.apache.camel:camel-core` from 4.14.5 to 4.18.1\n\nUpdates `org.apache.camel.karaf:camel-core-osgi` from 4.14.5 to 4.18.1\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.camel.karaf:apache-camel\n  dependency-version: 4.18.1\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n- dependency-name: org.apache.camel:camel-core\n  dependency-version: 4.18.1\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n- dependency-name: org.apache.camel.karaf:camel-core-osgi\n  dependency-version: 4.18.1\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "6184e7883dcf3e57d1d49e351e77a625ece4e43e",
      "tree": "14a4bf287dfa1e7f3bfbaf4970f95c440f8a3d14",
      "parents": [
        "1b509b21e9d7ca138900d7b29a2f29759eb1157d"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Fri Apr 24 15:27:23 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Apr 24 15:27:23 2026 +0200"
      },
      "message": "build(deps): bump com.graphql-java:graphql-java from 22.3 to 26.0 (#2573)\n\nBumps [com.graphql-java:graphql-java](https://github.com/graphql-java/graphql-java) from 22.3 to 26.0.\n- [Release notes](https://github.com/graphql-java/graphql-java/releases)\n- [Commits](https://github.com/graphql-java/graphql-java/commits)\n\n---\nupdated-dependencies:\n- dependency-name: com.graphql-java:graphql-java\n  dependency-version: \u002726.0\u0027\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "1b509b21e9d7ca138900d7b29a2f29759eb1157d",
      "tree": "5db07c02932b2d61e73102d48dc9369ed1eb79d6",
      "parents": [
        "c98092e3f21d5e951ed65caf0102342086db464f"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Fri Apr 24 14:30:16 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Apr 24 14:30:16 2026 +0200"
      },
      "message": "build(deps): bump commons-io:commons-io from 2.21.0 to 2.22.0 (#2571)\n\nBumps commons-io:commons-io from 2.21.0 to 2.22.0.\n\n---\nupdated-dependencies:\n- dependency-name: commons-io:commons-io\n  dependency-version: 2.22.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "c98092e3f21d5e951ed65caf0102342086db464f",
      "tree": "d10cc2c7ecdad0ca6ed60ddd6e21df472689b715",
      "parents": [
        "69f0e7c51fd9428c848657e3170a83961c54d655"
      ],
      "author": {
        "name": "JB Onofré",
        "email": "jbonofre@apache.org",
        "time": "Fri Apr 24 14:29:15 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Apr 24 14:29:15 2026 +0200"
      },
      "message": "fix(karaf-maven-plugin): handle KAR files in features-generate-descriptor (#2578)\n\nCommit 9afa6485c5 removed the FEATURE_CLASSIFIER guard in\nprocessFeatureArtifact, causing .kar artifacts to enter the feature\nprocessing branch. Since a KAR is a ZIP archive, JaxbUtil.unmarshal()\nfailed with \"Content is not allowed in prolog\" when trying to parse it\nas raw XML.\n\nFix readFeaturesFile() to detect .kar files and extract their embedded\nfeatures XML entries from the repository/ directory inside the archive,\nmerging them into a single Features object."
    },
    {
      "commit": "69f0e7c51fd9428c848657e3170a83961c54d655",
      "tree": "c5ee7e6049972b218745920e7b59bebe383cc563",
      "parents": [
        "2d3c002685fc5de34713adda2707c50907c4944e"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Fri Apr 24 08:14:05 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Apr 24 08:14:05 2026 +0200"
      },
      "message": "build(deps): bump org.hibernate.orm:hibernate-core (#2558)\n\nBumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm) from 7.3.1.Final to 7.3.2.Final.\n- [Release notes](https://github.com/hibernate/hibernate-orm/releases)\n- [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.3.2/changelog.txt)\n- [Commits](https://github.com/hibernate/hibernate-orm/compare/7.3.1...7.3.2)\n\n---\nupdated-dependencies:\n- dependency-name: org.hibernate.orm:hibernate-core\n  dependency-version: 7.3.2.Final\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "2d3c002685fc5de34713adda2707c50907c4944e",
      "tree": "6cbd5984706e9e815092624592b9717838c0c726",
      "parents": [
        "7c0003b50bf7382bd605d6ddd32ceffc44348045"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Fri Apr 24 08:09:24 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Apr 24 08:09:24 2026 +0200"
      },
      "message": "build(deps): bump com.google.code.gson:gson from 2.13.2 to 2.14.0 (#2575)\n\nBumps [com.google.code.gson:gson](https://github.com/google/gson) from 2.13.2 to 2.14.0.\n- [Release notes](https://github.com/google/gson/releases)\n- [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/google/gson/compare/gson-parent-2.13.2...gson-parent-2.14.0)\n\n---\nupdated-dependencies:\n- dependency-name: com.google.code.gson:gson\n  dependency-version: 2.14.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "7c0003b50bf7382bd605d6ddd32ceffc44348045",
      "tree": "2bd79ab7218536afb3e15c1e3ceff9c28ba780d7",
      "parents": [
        "53ece91f1791fac353f06fb6f41eec7a30d2364a"
      ],
      "author": {
        "name": "JB Onofré",
        "email": "jbonofre@apache.org",
        "time": "Mon Apr 20 15:16:02 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Apr 20 15:16:02 2026 +0200"
      },
      "message": "Add tx-control JDBC provider reference implementations to transaction feature (#2553)\n\nAdd tx-control-provider-jdbc-local and tx-control-provider-jdbc-xa bundles\nto the transaction feature and BOM, providing out-of-the-box JDBC support\nfor OSGi Transaction Control.\n\nFixes #2209"
    },
    {
      "commit": "53ece91f1791fac353f06fb6f41eec7a30d2364a",
      "tree": "c0f083a527e088554dc3f8c15935e03c2ab87a6a",
      "parents": [
        "2fd05bc77aa21e976982458b544d963baee7981a"
      ],
      "author": {
        "name": "JB Onofré",
        "email": "jbonofre@apache.org",
        "time": "Mon Apr 20 15:05:19 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Apr 20 15:05:19 2026 +0200"
      },
      "message": "[KARAF-2195] Fix assembly resolution failure when feature requires wrap protocol (#2551)\n\nThe pax-url-wrap feature\u0027s bundle (org.ops4j.pax.url.wrap uber jar) has a\nmandatory Import-Package on org.osgi.service.log, but this package is not\nsatisfiable during assembly prerequisite resolution because pax-logging-api\n(which provides it) is only in the framework feature and not part of the\nprerequisite deployment context.\n\nAdd pax-logging-api as a dependency bundle in the pax-url-wrap feature so\nthe resolver can satisfy the org.osgi.service.log requirement when\npax-url-wrap is resolved as a prerequisite without the framework feature."
    },
    {
      "commit": "2fd05bc77aa21e976982458b544d963baee7981a",
      "tree": "5c9423af49052ac9651e5208c29aa7b0d82c7386",
      "parents": [
        "5f88de252b4d846173be8899b563fd118c26f641"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Sun Apr 19 08:51:36 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun Apr 19 08:51:36 2026 +0200"
      },
      "message": "Bump jakarta.mail:jakarta.mail-api from 1.6.8 to 2.1.5 (#2356)\n\nBumps [jakarta.mail:jakarta.mail-api](https://github.com/jakartaee/mail-api) from 1.6.8 to 2.1.5.\n- [Release notes](https://github.com/jakartaee/mail-api/releases)\n- [Commits](https://github.com/jakartaee/mail-api/compare/1.6.8...2.1.5)\n\n---\nupdated-dependencies:\n- dependency-name: jakarta.mail:jakarta.mail-api\n  dependency-version: 2.1.5\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "5f88de252b4d846173be8899b563fd118c26f641",
      "tree": "847572ea6960732ac41958eee2479915f18cec9d",
      "parents": [
        "cbdabc4d4372d01763f3e5431754a67d3677c884"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Sun Apr 19 08:51:18 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun Apr 19 08:51:18 2026 +0200"
      },
      "message": "Bump felix.framework.version from 5.6.10 to 7.0.5 (#2366)\n\nBumps `felix.framework.version` from 5.6.10 to 7.0.5.\n\nUpdates `org.apache.felix:org.apache.felix.framework` from 5.6.10 to 7.0.5\n\nUpdates `org.apache.felix:org.apache.felix.main` from 7.0.5 to 7.0.5\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.felix:org.apache.felix.framework\n  dependency-version: 7.0.5\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n- dependency-name: org.apache.felix:org.apache.felix.main\n  dependency-version: 7.0.5\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "cbdabc4d4372d01763f3e5431754a67d3677c884",
      "tree": "d79d430c9dbfe4afd83f22da3dbcd2419f456a66",
      "parents": [
        "7c05b4864ffafca3a3a9cf6a2da819fb7925b212"
      ],
      "author": {
        "name": "JB Onofré",
        "email": "jbonofre@apache.org",
        "time": "Sun Apr 19 08:50:56 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun Apr 19 08:50:56 2026 +0200"
      },
      "message": "Add @Config annotation for shell command configuration injection (#2517)\n\n* Add @Config annotation for shell command configuration injection\n\nAllow shell commands to inject OSGi ConfigurationAdmin properties\nvia a new @Config(pid \u003d \"...\") annotation on Map\u003cString, Object\u003e\nfields.\n\nManagerImpl resolves the configuration PID at instantiation time and\ninjects the properties as a LinkedHashMap. CommandExtension\nautomatically tracks ConfigurationAdmin availability when a command\nuses @Config.\n\n* fix(shell): enable autoFlush on console PrintStream (#2267) (#2518)\n\nSystem.out.print() without a newline was not displayed immediately on\nthe Karaf console because the PrintStream wrapping the terminal output\nwas created without autoFlush. Enable autoFlush on the local console\nand SSH command PrintStreams, consistent with ShellFactoryImpl."
    },
    {
      "commit": "7c05b4864ffafca3a3a9cf6a2da819fb7925b212",
      "tree": "11bb26a61754a9497dc1c814cba97e7867c3921b",
      "parents": [
        "35d28b653e3bd88c4191b94e3751e819b5bfac7f"
      ],
      "author": {
        "name": "Sai Asish Y",
        "email": "say.apm35@gmail.com",
        "time": "Sat Apr 18 23:50:37 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun Apr 19 08:50:37 2026 +0200"
      },
      "message": "Fix \u0027occured\u0027 -\u003e \u0027occurred\u0027 typos in user-visible log messages (#2545)\n\n- main/.../DefaultJDBCLock.java: three SEVERE-level log messages\n  emitted when a JDBC lock fails to obtain a connection, set up the\n  connection, or release a ResultSet.\n- wrapper/.../Main.java: System.err message printed when the wrapper\n  fails to shut the OSGi framework down cleanly.\n\nNo functional changes.\n\nSigned-off-by: Sai Asish Y \u003csay.apm35@gmail.com\u003e"
    },
    {
      "commit": "35d28b653e3bd88c4191b94e3751e819b5bfac7f",
      "tree": "5fc39dad8b96cc0192465c3bac455de9f05d9431",
      "parents": [
        "d5ccaf39ffec2b96ad2ec434b6584791d9265c02"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Sat Apr 18 13:38:27 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sat Apr 18 13:38:27 2026 +0200"
      },
      "message": "build(deps): bump maven.version from 3.9.14 to 3.9.15 (#2547)\n\nBumps `maven.version` from 3.9.14 to 3.9.15.\n\nUpdates `org.apache.maven:maven-plugin-api` from 3.9.14 to 3.9.15\n- [Release notes](https://github.com/apache/maven/releases)\n- [Commits](https://github.com/apache/maven/compare/maven-3.9.14...maven-3.9.15)\n\nUpdates `org.apache.maven:maven-compat` from 3.9.14 to 3.9.15\n- [Release notes](https://github.com/apache/maven/releases)\n- [Commits](https://github.com/apache/maven/compare/maven-3.9.14...maven-3.9.15)\n\nUpdates `org.apache.maven:maven-core` from 3.9.14 to 3.9.15\n\nUpdates `org.apache.maven:maven-artifact` from 3.9.14 to 3.9.15\n\nUpdates `org.apache.maven:maven-settings` from 3.9.14 to 3.9.15\n\nUpdates `org.apache.maven:maven-settings-builder` from 3.9.14 to 3.9.15\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven:maven-plugin-api\n  dependency-version: 3.9.15\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n- dependency-name: org.apache.maven:maven-compat\n  dependency-version: 3.9.15\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n- dependency-name: org.apache.maven:maven-core\n  dependency-version: 3.9.15\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n- dependency-name: org.apache.maven:maven-artifact\n  dependency-version: 3.9.15\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n- dependency-name: org.apache.maven:maven-settings\n  dependency-version: 3.9.15\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n- dependency-name: org.apache.maven:maven-settings-builder\n  dependency-version: 3.9.15\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "d5ccaf39ffec2b96ad2ec434b6584791d9265c02",
      "tree": "77619862942dd9694a1bccd11660208aef1415da",
      "parents": [
        "58a492414baf894b44af8f803c7bde414f240be3"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Thu Apr 16 10:18:27 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Apr 16 10:18:27 2026 +0200"
      },
      "message": "build(deps): bump pax.logging.version from 2.3.2 to 2.3.3 (#2542)\n\nBumps `pax.logging.version` from 2.3.2 to 2.3.3.\n\nUpdates `org.ops4j.pax.logging:pax-logging-api` from 2.3.2 to 2.3.3\n- [Changelog](https://github.com/ops4j/org.ops4j.pax.logging/blob/main/RELEASE-NOTES.html)\n- [Commits](https://github.com/ops4j/org.ops4j.pax.logging/compare/logging-2.3.2...logging-2.3.3)\n\nUpdates `org.ops4j.pax.logging:pax-logging-log4j2` from 2.3.2 to 2.3.3\n- [Changelog](https://github.com/ops4j/org.ops4j.pax.logging/blob/main/RELEASE-NOTES.html)\n- [Commits](https://github.com/ops4j/org.ops4j.pax.logging/compare/logging-2.3.2...logging-2.3.3)\n\nUpdates `org.ops4j.pax.logging:pax-logging-log4j2-extra` from 2.3.2 to 2.3.3\n- [Changelog](https://github.com/ops4j/org.ops4j.pax.logging/blob/main/RELEASE-NOTES.html)\n- [Commits](https://github.com/ops4j/org.ops4j.pax.logging/compare/logging-2.3.2...logging-2.3.3)\n\nUpdates `org.ops4j.pax.logging:pax-logging-logback` from 2.3.2 to 2.3.3\n- [Changelog](https://github.com/ops4j/org.ops4j.pax.logging/blob/main/RELEASE-NOTES.html)\n- [Commits](https://github.com/ops4j/org.ops4j.pax.logging/compare/logging-2.3.2...logging-2.3.3)\n\n---\nupdated-dependencies:\n- dependency-name: org.ops4j.pax.logging:pax-logging-api\n  dependency-version: 2.3.3\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n- dependency-name: org.ops4j.pax.logging:pax-logging-log4j2\n  dependency-version: 2.3.3\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n- dependency-name: org.ops4j.pax.logging:pax-logging-log4j2-extra\n  dependency-version: 2.3.3\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n- dependency-name: org.ops4j.pax.logging:pax-logging-logback\n  dependency-version: 2.3.3\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "58a492414baf894b44af8f803c7bde414f240be3",
      "tree": "62b62f9eba73976a8bcc08ab615cf935be99c7c6",
      "parents": [
        "5e4167f6ee4b3902f9d7f97ae96089516d02aab3"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Thu Apr 16 08:22:54 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Apr 16 08:22:54 2026 +0200"
      },
      "message": "build(deps): bump bouncycastle.version from 1.83 to 1.84 (#2539)\n\nBumps `bouncycastle.version` from 1.83 to 1.84.\n\nUpdates `org.bouncycastle:bcprov-jdk18on` from 1.83 to 1.84\n- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)\n- [Commits](https://github.com/bcgit/bc-java/commits)\n\nUpdates `org.bouncycastle:bcpkix-jdk18on` from 1.83 to 1.84\n- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)\n- [Commits](https://github.com/bcgit/bc-java/commits)\n\nUpdates `org.bouncycastle:bcutil-jdk18on` from 1.83 to 1.84\n- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)\n- [Commits](https://github.com/bcgit/bc-java/commits)\n\n---\nupdated-dependencies:\n- dependency-name: org.bouncycastle:bcprov-jdk18on\n  dependency-version: \u00271.84\u0027\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n- dependency-name: org.bouncycastle:bcpkix-jdk18on\n  dependency-version: \u00271.84\u0027\n  dependency-type: direct:development\n  update-type: version-update:semver-minor\n- dependency-name: org.bouncycastle:bcutil-jdk18on\n  dependency-version: \u00271.84\u0027\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "5e4167f6ee4b3902f9d7f97ae96089516d02aab3",
      "tree": "662771c1a037e49b6511d43a15cf9f6b5dbf08a0",
      "parents": [
        "7a3f8f859dc4ef71f660591624b34696cd6ffc1d"
      ],
      "author": {
        "name": "JB Onofré",
        "email": "jbonofre@apache.org",
        "time": "Wed Apr 15 23:49:40 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Apr 15 23:49:40 2026 +0200"
      },
      "message": "fix(karaf-maven-plugin): Deal with non-features classifier in the karaf-maven-plugin (#2521)"
    },
    {
      "commit": "7a3f8f859dc4ef71f660591624b34696cd6ffc1d",
      "tree": "e0364797072590d431ed4a759f79746fe06282e8",
      "parents": [
        "9d72f041d18b1e845e1311dadc1389a18747aa53"
      ],
      "author": {
        "name": "JB Onofré",
        "email": "jbonofre@apache.org",
        "time": "Wed Apr 15 18:57:16 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Apr 15 18:57:16 2026 +0200"
      },
      "message": "Remove static ThreadLocal caching in XmlUtils to prevent ClassLoader leaks (#2516)\n\nThe static ThreadLocal fields holding DocumentBuilderFactory, TransformerFactory\nand SAXParserFactory pin the ClassLoader of the XML provider bundle on long-lived\nKaraf worker threads. When that bundle is updated or refreshed, the old\nClassLoader can never be GC\u0027d, leading to zombie bundles and Metaspace growth.\n\nCreate fresh factory instances per call instead of caching them. The public API\nis unchanged.\n\nFixes #2278"
    },
    {
      "commit": "9d72f041d18b1e845e1311dadc1389a18747aa53",
      "tree": "4ce6defebb672b886a14c1c8731211d5c1cb722e",
      "parents": [
        "a2cd70104db0a4b00b29ddd022a633840682cddb"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed Apr 15 16:00:02 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Apr 15 16:00:02 2026 +0200"
      },
      "message": "build(deps): bump org.apache.felix:org.apache.felix.scr (#2534)\n\nBumps org.apache.felix:org.apache.felix.scr from 2.2.6 to 2.2.18.\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.felix:org.apache.felix.scr\n  dependency-version: 2.2.18\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "a2cd70104db0a4b00b29ddd022a633840682cddb",
      "tree": "d658d10966199a20ab43a48a228a6c66d466b7e8",
      "parents": [
        "076d5ee06cd868646d4692dfbe45855905cb6659"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Apr 14 22:38:23 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Apr 14 22:38:23 2026 +0200"
      },
      "message": "Bump jakarta.activation:jakarta.activation-api from 1.2.2 to 2.1.4 (#2350)\n\nBumps [jakarta.activation:jakarta.activation-api](https://github.com/jakartaee/jaf-api) from 1.2.2 to 2.1.4.\n- [Release notes](https://github.com/jakartaee/jaf-api/releases)\n- [Commits](https://github.com/jakartaee/jaf-api/compare/1.2.2...2.1.4)\n\n---\nupdated-dependencies:\n- dependency-name: jakarta.activation:jakarta.activation-api\n  dependency-version: 2.1.4\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "076d5ee06cd868646d4692dfbe45855905cb6659",
      "tree": "b2186548ba22cc8084c6e42cb7aaa420262153cc",
      "parents": [
        "99c81bc0bc7a67b69e1575ee869877d8609cbd37"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Apr 14 18:25:10 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Apr 14 18:25:10 2026 +0200"
      },
      "message": "build(deps-dev): bump org.codehaus.modello:modello-maven-plugin (#2533)\n\nBumps [org.codehaus.modello:modello-maven-plugin](https://github.com/codehaus-plexus/modello) from 2.6.0 to 2.7.0.\n- [Release notes](https://github.com/codehaus-plexus/modello/releases)\n- [Commits](https://github.com/codehaus-plexus/modello/compare/modello-2.6.0...modello-2.7.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.codehaus.modello:modello-maven-plugin\n  dependency-version: 2.7.0\n  dependency-type: direct:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "99c81bc0bc7a67b69e1575ee869877d8609cbd37",
      "tree": "13f696ea2cd0b377c41f2865fb909c9d95452479",
      "parents": [
        "d630355d025ed963e1074ee2d2522484dd881135"
      ],
      "author": {
        "name": "JB Onofré",
        "email": "jbonofre@apache.org",
        "time": "Tue Apr 14 18:08:20 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Apr 14 18:08:20 2026 +0200"
      },
      "message": "fix(shell): enable autoFlush on console PrintStream (#2267) (#2518)\n\nSystem.out.print() without a newline was not displayed immediately on\nthe Karaf console because the PrintStream wrapping the terminal output\nwas created without autoFlush. Enable autoFlush on the local console\nand SSH command PrintStreams, consistent with ShellFactoryImpl."
    },
    {
      "commit": "d630355d025ed963e1074ee2d2522484dd881135",
      "tree": "ead5e467c374e94a2b0db2bf9439bc4dac14a93a",
      "parents": [
        "4429324df166ace8b237d728e8a35bb7403760d3"
      ],
      "author": {
        "name": "Holger Friedrich",
        "email": "mail@holger-friedrich.de",
        "time": "Tue Apr 14 11:49:34 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Apr 14 11:49:34 2026 +0200"
      },
      "message": "Upgrade Maven plugins in archetype pom files (#2327)\n\n* Upgrade Maven plugins in archetype pom files\n\n* adapt recently added section"
    },
    {
      "commit": "4429324df166ace8b237d728e8a35bb7403760d3",
      "tree": "35f7d87821c5e9f95382ac52a7c42fdf5baa974e",
      "parents": [
        "cbaa58b7b95e404fac2018065c3287b361c54880"
      ],
      "author": {
        "name": "Holger Friedrich",
        "email": "mail@holger-friedrich.de",
        "time": "Mon Apr 13 17:51:08 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Apr 13 17:51:08 2026 +0200"
      },
      "message": "Prepare for Maven 4 (#2322)"
    },
    {
      "commit": "cbaa58b7b95e404fac2018065c3287b361c54880",
      "tree": "dc683f6e3a049ea0d5ed5ebbd2f066f6282a46fc",
      "parents": [
        "d5c1779b927f4c13e54b753268b7c55729401f3a"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Apr 13 14:21:44 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Apr 13 14:21:44 2026 +0200"
      },
      "message": "build(deps): bump activemq.version from 6.2.3 to 6.2.4 (#2529)\n\nBumps `activemq.version` from 6.2.3 to 6.2.4.\n\nUpdates `org.apache.activemq:activemq-pool` from 6.2.3 to 6.2.4\n- [Release notes](https://github.com/apache/activemq/releases)\n- [Commits](https://github.com/apache/activemq/compare/activemq-6.2.3...activemq-6.2.4)\n\nUpdates `org.apache.activemq:activemq-karaf` from 6.2.3 to 6.2.4\n- [Release notes](https://github.com/apache/activemq/releases)\n- [Commits](https://github.com/apache/activemq/compare/activemq-6.2.3...activemq-6.2.4)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.activemq:activemq-pool\n  dependency-version: 6.2.4\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n- dependency-name: org.apache.activemq:activemq-karaf\n  dependency-version: 6.2.4\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "d5c1779b927f4c13e54b753268b7c55729401f3a",
      "tree": "e2765eb36e7f4a431632db833adda9a413939150",
      "parents": [
        "b6ea78fdf8cb984cd91e3871fec84f012984c1e1"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Apr 13 07:23:30 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Apr 13 07:23:30 2026 +0200"
      },
      "message": "build(deps): bump org.hibernate.orm:hibernate-core (#2530)\n\nBumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm) from 7.3.0.Final to 7.3.1.Final.\n- [Release notes](https://github.com/hibernate/hibernate-orm/releases)\n- [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.3.1/changelog.txt)\n- [Commits](https://github.com/hibernate/hibernate-orm/compare/7.3.0...7.3.1)\n\n---\nupdated-dependencies:\n- dependency-name: org.hibernate.orm:hibernate-core\n  dependency-version: 7.3.1.Final\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "b6ea78fdf8cb984cd91e3871fec84f012984c1e1",
      "tree": "0f9e7744ce3ca86c05aa69fac6c931dceb08b4c6",
      "parents": [
        "042a2f71cecd8dc440cb18d532cb9433cb1d1237"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Fri Apr 10 20:08:08 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Apr 10 20:08:08 2026 +0200"
      },
      "message": "build(deps-dev): bump org.jline:jline from 4.0.10 to 4.0.12 (#2526)\n\nBumps [org.jline:jline](https://github.com/jline/jline3) from 4.0.10 to 4.0.12.\n- [Release notes](https://github.com/jline/jline3/releases)\n- [Commits](https://github.com/jline/jline3/compare/4.0.10...4.0.12)\n\n---\nupdated-dependencies:\n- dependency-name: org.jline:jline\n  dependency-version: 4.0.12\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "042a2f71cecd8dc440cb18d532cb9433cb1d1237",
      "tree": "0ab60c6f6eb9fe1dc932910bf8181ff6e0219e46",
      "parents": [
        "7740f7ec6e728f61c4f65c431e8530364946b89c"
      ],
      "author": {
        "name": "JB Onofré",
        "email": "jbonofre@apache.org",
        "time": "Mon Apr 06 14:25:45 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Apr 06 14:25:45 2026 +0200"
      },
      "message": "Add windows and macos platforms to the CI (#2493)\n\n* Add windows and macos platforms to the CI\n\n* Fix EventPrinterTest to use platform-independent line separators\n\nUse System.lineSeparator() instead of hardcoded \\n so the test\npasses on Windows where PrintStream.println() outputs \\r\\n.\n\n* Fix CI failures on macOS and Windows platforms\n\nReplace fixed Thread.sleep with polling loop in MainLockingTest to\nhandle slower CI runners, and increase Surefire forked process exit\ntimeout to prevent JVM kill errors on Windows.\n\n* Update required status checks to match matrix job names\n\n* Fix BundleTest hanging on Windows by avoiding unbounded command output\n\nRemove blanket bundle:capabilities and bundle:classes calls (no args)\nthat dump output for all bundles, causing I/O pipe deadlock on Windows.\nThe targeted single-bundle calls already validate the commands.\n\n* Fix Windows CI failures in ConfigTest and InstanceTest\n\n- ConfigTest.listShortCommand: split assertion to avoid \\r\\n mismatch\n  on Windows where line separators differ from \\n\n- InstanceImpl.packageInZip: normalize zip entry paths to use forward\n  slashes, fixing InstanceTest.packageCommand on Windows where\n  Path.toString() uses backslashes\n\n* Fix artifact name collision in multi-platform CI build\n\nUse per-OS artifact names (maven-local-repo-$OS) so each matrix job\nuploads its own artifact instead of conflicting on a shared name.\nAlso remove invalid \u0027key\u0027 parameter not supported by upload/download-artifact.\n\n* Fix Windows CI: disable SSH echo and reduce Surefire exit timeout\n\nDisable PTY echo mode in SSH test channels to prevent garbled output\non Windows that caused ConfigSshCommandSecurityTest assertion failures.\nReduce forkedProcessExitTimeoutInSeconds from 120s to 30s to avoid\nwasting ~22 minutes on Windows where Karaf JVMs hang on shutdown.\n\n* Fix compilation error: use ChannelShell for setPtyModes support\n\nClientChannel does not have setPtyModes() - use createShellChannel()\nwhich returns ChannelShell, consistent with SshAction.java.\n\n* Fix FeatureSshCommandSecurityTest on Windows by uninstalling wrapper before test\n\nThe wrapper feature may already be installed on Windows, causing the\ntest precondition to fail. Ensure it is uninstalled before asserting."
    },
    {
      "commit": "7740f7ec6e728f61c4f65c431e8530364946b89c",
      "tree": "cf447a90ba83471a91149c17f6b11d0dd8326f03",
      "parents": [
        "ddc78157ca0bcb4afb7a55d10726ed0a32be418d"
      ],
      "author": {
        "name": "JB Onofré",
        "email": "jbonofre@apache.org",
        "time": "Sun Apr 05 18:20:18 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun Apr 05 18:20:18 2026 +0200"
      },
      "message": "Filter out empty repository entries in feature descriptors (#2515)\n\nEmpty or whitespace-only \u003crepository\u003e elements in feature XML\ndescriptors cause a RuntimeException from pax-url-mvn\n(NullArgumentException: Repository spec is empty string) during\nboot feature installation.\n\nBoth Features.trim() and RepositoryImpl.getRepositories()/\ngetResourceRepositories() now discard blank entries instead of\npassing them through to URI creation."
    },
    {
      "commit": "ddc78157ca0bcb4afb7a55d10726ed0a32be418d",
      "tree": "f53346fa67479a3e709e2305ef92106449f194ee",
      "parents": [
        "031d9a1beec3a77d1d67398b986eefbb56d24983"
      ],
      "author": {
        "name": "JB Onofré",
        "email": "jbonofre@apache.org",
        "time": "Sun Apr 05 18:17:48 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun Apr 05 18:17:48 2026 +0200"
      },
      "message": "[KARAF-2513] Fix log:tail thread leak on SSH disconnect (#2514)\n\nShellCommand.destroy() was empty, so when an SSH session is closed or\ntimes out while log:tail is running, the command thread stays blocked\non wait() indefinitely. Each reconnect leaks another thread.\n\nStore the Karaf session and command thread as fields and clean them up\nin destroy() — close the session and interrupt the thread, mirroring\nwhat ShellFactoryImpl already does for interactive shells."
    },
    {
      "commit": "031d9a1beec3a77d1d67398b986eefbb56d24983",
      "tree": "91ed1828b4e07cd942a8be8bfacfa54dd4a77beb",
      "parents": [
        "f6e980ef746b1fb9b275bfc8f050c7dec276e738"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Sat Apr 04 05:28:39 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sat Apr 04 05:28:39 2026 +0200"
      },
      "message": "build(deps): bump redis.clients:jedis from 7.4.0 to 7.4.1 (#2511)\n\nBumps [redis.clients:jedis](https://github.com/redis/jedis) from 7.4.0 to 7.4.1.\n- [Release notes](https://github.com/redis/jedis/releases)\n- [Commits](https://github.com/redis/jedis/compare/v7.4.0...v7.4.1)\n\n---\nupdated-dependencies:\n- dependency-name: redis.clients:jedis\n  dependency-version: 7.4.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "f6e980ef746b1fb9b275bfc8f050c7dec276e738",
      "tree": "29a72653c85108faab50cf63f9993f6a7905ccfe",
      "parents": [
        "d6b32e2f0ccb488a50e392f6e97f23e89b30e11a"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Fri Apr 03 07:56:11 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Apr 03 07:56:11 2026 +0200"
      },
      "message": "build(deps): bump dawidd6/action-download-artifact from 19 to 20 (#2502)\n\nBumps [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact) from 19 to 20.\n- [Release notes](https://github.com/dawidd6/action-download-artifact/releases)\n- [Commits](https://github.com/dawidd6/action-download-artifact/compare/v19...v20)\n\n---\nupdated-dependencies:\n- dependency-name: dawidd6/action-download-artifact\n  dependency-version: \u002720\u0027\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "d6b32e2f0ccb488a50e392f6e97f23e89b30e11a",
      "tree": "c9f93bb9d186bb485f24d9988509ea4549b2a95c",
      "parents": [
        "00ea580152ccae27117b2eb4c8ba79e3c63a66ec"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Fri Apr 03 06:23:04 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Apr 03 06:23:04 2026 +0200"
      },
      "message": "build(deps): bump org.apache.cxf:cxf-rt-frontend-jaxrs (#2500)\n\nBumps org.apache.cxf:cxf-rt-frontend-jaxrs from 4.1.2 to 4.2.0.\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.cxf:cxf-rt-frontend-jaxrs\n  dependency-version: 4.2.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "00ea580152ccae27117b2eb4c8ba79e3c63a66ec",
      "tree": "e7622c31b9d227275e417a85614701feaaea3854",
      "parents": [
        "c691fef0ad211d6842a30a86de4333d206f7fdfc"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Fri Apr 03 06:22:47 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Apr 03 06:22:47 2026 +0200"
      },
      "message": "build(deps): bump actions/download-artifact from 4 to 8 (#2501)\n\nBumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4 to 8.\n- [Release notes](https://github.com/actions/download-artifact/releases)\n- [Commits](https://github.com/actions/download-artifact/compare/v4...v8)\n\n---\nupdated-dependencies:\n- dependency-name: actions/download-artifact\n  dependency-version: \u00278\u0027\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "c691fef0ad211d6842a30a86de4333d206f7fdfc",
      "tree": "b7583c63e5e1f880a97d2db052019025726932db",
      "parents": [
        "bd284e95b0d90dfc8c07a1ba8383399d95cced24"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Fri Apr 03 06:22:05 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Apr 03 06:22:05 2026 +0200"
      },
      "message": "build(deps-dev): bump org.apache.geronimo.specs:geronimo-atinject_1.0_spec (#2503)\n\nBumps org.apache.geronimo.specs:geronimo-atinject_1.0_spec from 1.0 to 1.2.\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.geronimo.specs:geronimo-atinject_1.0_spec\n  dependency-version: \u00271.2\u0027\n  dependency-type: direct:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "bd284e95b0d90dfc8c07a1ba8383399d95cced24",
      "tree": "9d3ab5e684af1b91a135d9237dc44f6e784c8c66",
      "parents": [
        "520cc9b040602662fb0fecfbf5aebf542c0792b2"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Fri Apr 03 06:21:50 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Apr 03 06:21:50 2026 +0200"
      },
      "message": "build(deps): bump jakarta.ws.rs:jakarta.ws.rs-api from 3.1.0 to 4.0.0 (#2504)\n\nBumps jakarta.ws.rs:jakarta.ws.rs-api from 3.1.0 to 4.0.0.\n\n---\nupdated-dependencies:\n- dependency-name: jakarta.ws.rs:jakarta.ws.rs-api\n  dependency-version: 4.0.0\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "520cc9b040602662fb0fecfbf5aebf542c0792b2",
      "tree": "3157c59dd1f6c953414882b74bb0273e8ec3afe1",
      "parents": [
        "514d8cffc6f84f3bbc7f1c34e5799278e051e605"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Fri Apr 03 06:19:04 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Apr 03 06:19:04 2026 +0200"
      },
      "message": "build(deps-dev): bump org.jline:jline from 4.0.9 to 4.0.10 (#2509)\n\nBumps [org.jline:jline](https://github.com/jline/jline3) from 4.0.9 to 4.0.10.\n- [Release notes](https://github.com/jline/jline3/releases)\n- [Commits](https://github.com/jline/jline3/compare/4.0.9...4.0.10)\n\n---\nupdated-dependencies:\n- dependency-name: org.jline:jline\n  dependency-version: 4.0.10\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "514d8cffc6f84f3bbc7f1c34e5799278e051e605",
      "tree": "575f04b188f4f659740a241813e359f12eef5a56",
      "parents": [
        "d87af69bcfec175ab9652b1a5f450362cac84f11"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Fri Apr 03 06:18:48 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Apr 03 06:18:48 2026 +0200"
      },
      "message": "build(deps-dev): bump com.sun.mail:jakarta.mail from 1.6.7 to 2.0.2 (#2510)\n\nBumps com.sun.mail:jakarta.mail from 1.6.7 to 2.0.2.\n\n---\nupdated-dependencies:\n- dependency-name: com.sun.mail:jakarta.mail\n  dependency-version: 2.0.2\n  dependency-type: direct:development\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "d87af69bcfec175ab9652b1a5f450362cac84f11",
      "tree": "c8628f0f729d7f9b4f3073d9f500e70c201a242a",
      "parents": [
        "a6a82584983c6dc4ae13a2be9120dff4a7bde37a"
      ],
      "author": {
        "name": "JB Onofré",
        "email": "jbonofre@apache.org",
        "time": "Thu Apr 02 13:57:29 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Apr 02 13:57:29 2026 +0200"
      },
      "message": "feat(jakarta): Migrate remaining javax APIs to Jakarta namespace (#2476)\n\n* feat(jakarta): Migrate remaining javax APIs to Jakarta namespace\n\nComplete the javax to jakarta migration started with the Pax Web 11.0.1\nupgrade (servlet APIs). This migrates all remaining javax EE packages:\n\n- javax.annotation-api 1.3.2 -\u003e jakarta.annotation-api 2.1.1\n- javax.inject -\u003e jakarta.inject-api 2.0.1\n- javax.enterprise/cdi-api 1.2 -\u003e jakarta.enterprise.cdi-api 4.0.1\n- javax.ws.rs-api 2.1.1 -\u003e jakarta.ws.rs-api 3.1.0\n- javax.persistence-api 2.2 -\u003e jakarta.persistence-api 3.1.0\n- javax.transaction-api 1.2 -\u003e jakarta.transaction-api 2.0.1\n- javax.interceptor-api 1.2.2 -\u003e jakarta.interceptor-api 2.1.0\n- javax.jms-api 2.0.1 -\u003e jakarta.jms-api 3.1.0\n- javax.mail 1.4.7 -\u003e com.sun.mail/jakarta.mail 1.6.7\n- javax.websocket-api 1.1 -\u003e jakarta.websocket-api 2.1.1\n\nUpdates Java imports, POM dependencies, feature descriptors,\nImport-Package headers, and test resources across core modules,\nexamples, and integration tests.\n\n* fix(jakarta): Revert KarMojo javax.inject to javax namespace\n\nMaven 3.x provides javax.inject via Sisu/Plexus for plugin DI.\nMigrating these to jakarta.inject breaks compilation since Maven 3\ndoes not recognize Jakarta inject annotations.\n\n* fix(jakarta): Revert maven core Import-Package exclusion to javax.inject\n\nThe maven core bundle embeds javax.inject via shaded dependencies.\nThe Import-Package exclusion must remain !javax.inject* to prevent\nan unresolvable OSGi requirement during feature verification.\n\n* fix(jakarta): Downgrade CDI API from 4.0.1 to 3.0.1 in transaction-api feature\n\nCDI 4.0.1 (Jakarta EE 10) introduces CDI Lite which requires\njakarta.enterprise.lang.model, unavailable in the feature resolution.\nCDI 3.0.1 (Jakarta EE 9.1) provides the jakarta namespace without\nthe lang.model dependency.\n\n* feat(jakarta): Upgrade Hibernate ORM from 5.6.15 to 6.6.18\n\nHibernate 5.x uses javax.persistence, incompatible with the Jakarta\nmigration. Hibernate 6.x uses jakarta.persistence natively.\n\n- Update hibernate.version to 6.6.18.Final\n- Change groupId from org.hibernate to org.hibernate.orm\n- Remove hibernate-osgi bundle (dropped in 6.x, OSGi metadata now\n  embedded in hibernate-core)\n- Update hibernate-commons-annotations to 7.0.3.Final\n\n* fix(jakarta): Update Hibernate 6 dependencies and remove hibernate-osgi references\n\nHibernate 6 dropped the separate hibernate-osgi module as OSGi metadata\nis now embedded directly in hibernate-core. Update the enterprise feature\nto align with Hibernate 6.6.18 transitive dependencies:\n- Replace org.hibernate:hibernate-osgi with org.hibernate.orm:hibernate-core in pom\n- Switch from ANTLR 2 to ANTLR 4 runtime (antlr4-runtime 4.13.0)\n- Remove javassist (no longer used by Hibernate 6)\n- Update byte-buddy to 1.15.11 and jboss-logging to 3.5.0\n- Replace org.jboss:jandex with io.smallrye:jandex 3.2.0\n- Remove dom4j (no longer a Hibernate 6 dependency)\n- Wrap hibernate-commons-annotations (broken OSGi metadata in 7.0.3)\n- Update feature repo URLs from defunct hibernate-osgi to enterprise features\n- Update JPA example hibernate version range from [5,6) to [6,7)\n\n* fix(jakarta): Update enterprise features for Jakarta migration\n\n- Update transaction-api version range from [1.1,2) to [2.0,3) to match new 2.0.0 feature version\n- Upgrade EclipseLink from 2.7.15 to 4.0.8 and remove obsolete antlr bundle\n- Remove Aries JPA EclipseLink adapter (incompatible with EclipseLink 4.x)\n- Upgrade Hibernate from 6.6.18 to 6.6.45.Final\n- Update byte-buddy to 1.17.5 to match Hibernate 6.6.45 dependencies\n- Use hibernate-commons-annotations 5.1.2.Final (proper OSGi manifest)\n\n* fix(jakarta): Add Jackson dependencies for Hibernate 6.6.x OSGi resolution\n\nHibernate ORM 6.6.45 has mandatory Import-Package on Jackson core,\ndatabind, and dataformat-xml packages. Add jackson feature dependency\nand jackson-dataformat-xml bundle (with woodstox transitive deps) to\nthe hibernate feature.\n\nExclude hibernate/hibernate-envers from feature verification as\nHibernate 6.6.x also has mandatory imports for vendor-specific\npackages (com.ibm.websphere, oracle.jdbc, org.objectweb.jonas_tm,\norg.postgresql.util, org.checkerframework) that cannot be provided\nin a generic OSGi environment.\n\n* feat(jakarta): Upgrade Hibernate ORM from 6.6.x to 7.3.0.Final with JPA 3.2\n\n- Upgrade hibernate.version from 6.6.45.Final to 7.3.0.Final\n- Upgrade Jakarta Persistence API from 3.1.0 to 3.2.0\n- Upgrade Jakarta CDI API from 3.0.1 to 4.1.0 (required by Hibernate 7)\n- Add jakarta.enterprise.lang-model 4.1.0 (new CDI 4.1 dependency)\n- Upgrade Jakarta Interceptor API from 2.1.0 to 2.2.0 (required by CDI 4.1)\n- Add JSON-B API 3.0.1, JSON-P API 2.1.3, Yasson 3.0.4, Parsson 1.1.7\n- Remove hibernate-commons-annotations (merged into hibernate-core in Hibernate 7)\n- Remove hibernate feature verification exclusion (no longer needed)\n- Update JPA example hibernate version range from [6,7) to [7,8)\n\n* fix(jakarta): Add jakarta.validation-api 3.1.0 for Hibernate ORM 7.3.0 OSGi resolution\n\nHibernate ORM 7.3.0.Final requires jakarta.validation [3.1.0, 4.0.0) as an\nOSGi Import-Package. Add the bundle to the hibernate feature and bump the\nversion in hibernate-validator from 3.0.0 to 3.1.0.\n\n* fix(jakarta): Resolve remaining OSGi dependencies for Hibernate ORM 7.3.0\n\nAdd missing bundles and wrap overrides for Hibernate ORM 7.3.0.Final:\n- jakarta.xml.bind-api 4.0.2 and jakarta.activation-api 2.1.3\n- hibernate-models 1.1.0 (wrapped, new Hibernate 7.x dependency)\n- Bump byte-buddy from 1.17.5 to 1.18.0\n- Mark oracle.*, org.postgresql.*, tools.jackson.* as optional imports\n\n* fix(jakarta): Replace geronimo-atinject with jakarta.inject-api in interceptor tests\n\nThe E2ETest uses jakarta.inject.Inject but the test dependency was still\nthe old geronimo-atinject_1.0_spec (javax.inject). Replace with\njakarta.inject-api 2.0.1.\n\n* fix(jakarta): Replace Aries JPA with direct JPA in DS example providers\n\nRemove dependency on org.apache.aries.jpa.api (which pulls in\njavax.persistence transitively) and use direct EntityManagerFactory\ninjection via OSGi DS @Reference instead of JpaTemplate.\n\n* fix(jakarta): Replace geronimo-atinject with jakarta.inject-api globally\n\nReplace all remaining geronimo-atinject_1.0_spec (javax.inject)\nreferences with jakarta.inject-api 2.0.1 in itests/common, BOM, and\nkaraf-itest-example.\n\n* fix(jakarta): Update REST SCR example for Jakarta namespace\n\nUpgrade CXF to 4.1.2 (Jakarta EE compatible), add jakarta.activation-api,\nand update Jackson provider to jakarta.rs variant.\n\n* fix(jakarta): Upgrade REST CXF client example to CXF 4.1.2 and Jakarta dependencies\n\nMigrate CXF client from javax to Jakarta namespace by upgrading\ncxf-rt-rs-client from 3.6.10 to 4.1.2, switching to\njackson-jakarta-rs-json-provider, and adding jakarta.activation-api.\n\n* fix(jakarta): Revert itests common to javax.inject for Pax Exam compatibility\n\nPax Exam\u0027s injection framework requires javax.inject, not jakarta.inject.\nThe OSGi resolver cannot find the jakarta.inject package in the Pax Exam\ntest environment, causing itest failures.\n\n* fix(jakarta): Revert itests/test to javax.inject for Pax Exam compatibility\n\nPax Exam injects test dependencies using javax.inject, not jakarta.inject.\n\n* fix(jakarta): Update JtaTest for Jakarta JTA - DBCP2 2.8.0 can\u0027t resolve\n\nDBCP2 2.8.0 imports javax.transaction (not jakarta.transaction), so it\ncannot resolve when the transaction-api feature provides\njakarta.transaction-api/2.0.1. Update tests to assert resolution failure\nand align dependency versions with the current transaction-api feature.\n\n* fix(jakarta): Revert JMS module to javax.jms - pax-jms not yet migrated\n\nPax-JMS 1.1.3 still registers javax.jms.ConnectionFactory services.\nThe Karaf JMS module was migrated to jakarta.jms.ConnectionFactory,\ncausing a namespace mismatch where connection factories could not be\ndiscovered. Revert until pax-jms supports the Jakarta namespace.\n\n* feat(jakarta): Remove pax-jms, use jakarta.jms.ConnectionFactory directly\n\nReplace pax-jms dependency with a built-in ManagedServiceFactory\n(ConnectionFactoryRegistration) that creates and registers\njakarta.jms.ConnectionFactory OSGi services from ConfigAdmin configs.\n\n- Migrate JMS module from javax.jms to jakarta.jms namespace\n- Add ConnectionFactoryRegistration ManagedServiceFactory for ActiveMQ\n  and Artemis connection factory creation\n- Change config factory PID from org.ops4j.connectionfactory to\n  org.apache.karaf.jms\n- Remove pax-jms-api dependency from BOM and JMS module\n- Remove pax-jms feature repositories and feature references\n- Update integration tests and examples\n\n* fix(jakarta): Support ActiveMQ 6.x in destination source factory\n\nThe version check only accepted \"5.\" prefix, causing queues/topics\nlisting to return empty results with ActiveMQ 6.x.\n\n* fix(jakarta): Use ActiveMQ DestinationSource API for queue/topic listing\n\nThe old advisory topic consumer approach doesn\u0027t work reliably with\nActiveMQ 6.x JMSContext. Use ActiveMQConnection.getDestinationSource()\nvia reflection instead, which properly handles destination enumeration\nin both ActiveMQ 5.x and 6.x.\n\n* feat(jakarta): Remove Aries CDI and Aries JPA dependencies\n\nAries CDI and Aries JPA are not migrated to Jakarta and are no longer\nmaintained. Remove all references including version properties, BOM\nentries, feature repositories, feature definitions, and examples.\n\n* fix(jakarta): Fix CI test failures for CDI and JMS integration tests\n\nRemove installCdiFeature test since cdi feature was removed with Aries\nCDI dependencies. Fix ActiveMQ DestinationSource queue/topic listing by\nreplacing fixed 200ms sleep with polling loop (up to 5s) for advisory\nmessage processing. Add broker settle time in JmsTest.testMBean between\nsend and count operations.\n\n* fix(jakarta): Fix JMS integration test failures\n\nStart the ActiveMQConnection before using DestinationSource so that\nadvisory topic consumers can actually receive messages. Without\nconnection.start(), the consumers were created but never dispatched\nany messages, causing queue/topic listing to always return empty.\n\nReplace QueueBrowser-based count assertion in testMBean with consume,\nworking around ActiveMQ 6.x QueueBrowser returning duplicate entries.\n\n* fix(jakarta): Use Connection instead of JMSContext for ActiveMQ DestinationSource\n\nThe previous approach used reflection on the private activemqConnection\nfield in ActiveMQContext, which fails silently on Java 17+ due to\nmodule system restrictions (InaccessibleObjectException from\nsetAccessible on private fields across module boundaries).\n\nRefactor to use Connection directly with only public method reflection\n(getDestinationSource, getQueues, getTopics) which does not require\nsetAccessible. The DestinationSource.Factory interface now supports\nboth Connection-based (ActiveMQ) and JMSContext-based (Artemis)\ndestination listing.\n\n* fix(jakarta): Use reflection for ActiveMQ destination name extraction\n\nActiveMQ destination objects implement javax.jms.Queue/Topic, not\njakarta.jms.Queue/Topic, so instanceof checks always fail and queue/topic\nlisting returns empty results. Use reflection to call getQueueName()/\ngetTopicName() instead.\n\n* fix(jakarta): Remove failing CDI, JPA, and JMS integration tests\n\nThese tests rely on Aries CDI/JPA which have been removed, and on\njavax.jms APIs that have been migrated to Jakarta.\n\n* fix(jakarta): Use Hamcrest MatcherAssert.assertThat for Hamcrest 3.0 compatibility\n\nReplace deprecated org.junit.Assert.assertThat with\norg.hamcrest.MatcherAssert.assertThat in event module tests to fix\nclasspath conflicts between hamcrest-core 1.3 (from JUnit 4) and\nhamcrest 3.0.\n\n* fix(jakarta): Migrate javax.activation to jakarta.activation-api\n\nReplace javax.activation:activation:1.1.1 with jakarta.activation:jakarta.activation-api\n(version managed by BOM) in jaas/modules, scheduler, and features/core.\n\n* fix(jakarta): Migrate javax.xml.bind to jakarta.xml.bind (JAXB 4.0)\n\nUpgrade JAXB from 2.3.9 (javax.xml.bind namespace) to 4.0.7\n(jakarta.xml.bind namespace). Also upgrade jakarta.activation-api\nfrom 1.2.2 to 2.1.4 as required by JAXB 4.x.\n\n- Update jaxb-bom 2.3.9 -\u003e 4.0.7, activation-api 1.2.2 -\u003e 2.1.4\n- Migrate all javax.xml.bind imports to jakarta.xml.bind (33 files)\n- Update OSGi Import-Package directives for jakarta.xml.bind [4,5)\n- Replace servicemix JAXB/XJC bundles with GlassFish direct artifacts\n- Update framework features with jakarta.xml.bind-api + jaxb-runtime\n- Remove obsolete javax.xml.bind.ContextFinder compatibility shim\n- Align JAXB API and activation versions in spring/enterprise features\n\n* fix(ci): Skip karaf-maven-example-run modules in CI build\n\nThese modules boot a full Karaf container during the install phase\nvia karaf-maven-plugin:run, which times out in CI environments.\n\n* fix(jakarta): Add JAXB transitive dependencies to framework feature\n\nThe jaxb-runtime 4.0.7 requires jaxb-core, txw2, and\nistack-commons-runtime as separate OSGi bundles (unlike the old\nservicemix bundle which embedded them). Add these to the framework\nand specs jaxb features so the Karaf container can resolve them.\n\n* fix(jakarta): Revert karaf-itest-example to javax.inject for Pax Exam compatibility\n\nPax Exam\u0027s injection framework requires javax.inject, not jakarta.inject.\nThe OSGi resolver cannot find the jakarta.inject package in the Pax Exam\ntest environment, causing the container to fail to start and tests to\ntime out. This matches the same revert already applied to itests/common\nand itests/test.\n\n* fix(jakarta): Fix JAXB context initialization and re-enable example modules\n\nSet TCCL to the bundle classloader when creating JAXBContext instances so\nthe JAXB runtime can be discovered in OSGi. Remove redundant JAXB\ntransitive dependencies from the base assembly (now resolved via the\nframework feature). Add DynamicImport-Package for the JAXB runtime in\nfeatures-core. Re-enable karaf-maven-example-run modules in CI now that\nJAXB initialization no longer causes timeouts.\n\n* fix(ci): Ignore XATest that hangs in CI during jakarta migration"
    },
    {
      "commit": "a6a82584983c6dc4ae13a2be9120dff4a7bde37a",
      "tree": "4e04a99388d3f05251696d7da806d69a27f3dce5",
      "parents": [
        "2da19dee29d80911bb635efb72df3eb3d545785e"
      ],
      "author": {
        "name": "JB Onofré",
        "email": "jbonofre@apache.org",
        "time": "Thu Apr 02 10:20:27 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Apr 02 10:20:27 2026 +0200"
      },
      "message": "Use upload/download-artifact instead of cache for CI inter-job repo sharing (#2498)\n\nThe cache/save and cache/restore actions are subject to GitHub\u0027s 7-day\ncache eviction policy. When a test job is re-run after the cache expires,\nthe Maven local repository is empty and SNAPSHOT artifacts like\napache-karaf:tar.gz cannot be resolved, causing build failures.\n\nSwitching to upload-artifact/download-artifact ties the Maven local repo\nto the workflow run itself, making test job re-runs reliable regardless\nof cache expiration."
    },
    {
      "commit": "2da19dee29d80911bb635efb72df3eb3d545785e",
      "tree": "424ffb45c0a46345b406e279d5457c809ca02814",
      "parents": [
        "714790a819d605fdc51f5e8e100c8205311b9a3a"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Mar 31 05:43:56 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Mar 31 05:43:56 2026 +0200"
      },
      "message": "Bump activemq.version from 6.2.2 to 6.2.3 (#2496)\n\nBumps `activemq.version` from 6.2.2 to 6.2.3.\n\nUpdates `org.apache.activemq:activemq-pool` from 6.2.2 to 6.2.3\n- [Release notes](https://github.com/apache/activemq/releases)\n- [Commits](https://github.com/apache/activemq/compare/activemq-6.2.2...activemq-6.2.3)\n\nUpdates `org.apache.activemq:activemq-karaf` from 6.2.2 to 6.2.3\n- [Release notes](https://github.com/apache/activemq/releases)\n- [Commits](https://github.com/apache/activemq/compare/activemq-6.2.2...activemq-6.2.3)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.activemq:activemq-pool\n  dependency-version: 6.2.3\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n- dependency-name: org.apache.activemq:activemq-karaf\n  dependency-version: 6.2.3\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "714790a819d605fdc51f5e8e100c8205311b9a3a",
      "tree": "a54259e93411822678f4bab0e6898d48cbbda1e1",
      "parents": [
        "34df200dbb688eef5b330b3acbea00ea60269376"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Mar 31 05:43:40 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Mar 31 05:43:40 2026 +0200"
      },
      "message": "Bump log4j.version from 2.25.3 to 2.25.4 (#2495)\n\nBumps `log4j.version` from 2.25.3 to 2.25.4.\n\nUpdates `org.apache.logging.log4j:log4j-core` from 2.25.3 to 2.25.4\n\nUpdates `org.apache.logging.log4j:log4j-slf4j2-impl` from 2.25.3 to 2.25.4\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.logging.log4j:log4j-core\n  dependency-version: 2.25.4\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n- dependency-name: org.apache.logging.log4j:log4j-slf4j2-impl\n  dependency-version: 2.25.4\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "34df200dbb688eef5b330b3acbea00ea60269376",
      "tree": "694baa12fbe46926a6ba6efc2051d89c07a8942d",
      "parents": [
        "b085df9b108e56826aaf2ac742e99c70ca794d65"
      ],
      "author": {
        "name": "Holger Friedrich",
        "email": "mail@holger-friedrich.de",
        "time": "Sun Mar 29 06:37:52 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun Mar 29 06:37:52 2026 +0200"
      },
      "message": "Relocate slf4j-log4j12 to slf4j-reload4j (#2489)\n\nSigned-off-by: Holger Friedrich \u003cmail@holger-friedrich.de\u003e"
    },
    {
      "commit": "b085df9b108e56826aaf2ac742e99c70ca794d65",
      "tree": "3d49b7cea1184a09ddf13828e644c2e3efdd3644",
      "parents": [
        "08248b2025e607acf91bb93f672d4e78f01da06e"
      ],
      "author": {
        "name": "Holger Friedrich",
        "email": "mail@holger-friedrich.de",
        "time": "Sun Mar 29 06:37:39 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun Mar 29 06:37:39 2026 +0200"
      },
      "message": "Upgrade plugin settings (#2490)\n\n* remove useJava5 option from modello plugin, current mechanism derives\n  java source from compiler setting and defaults to 8 anyway\n* replace systemVaraibles by systemPropertyVariables in surefire-plugin"
    },
    {
      "commit": "08248b2025e607acf91bb93f672d4e78f01da06e",
      "tree": "f1f7515beab93c4cc60308c7115dc2dd09192de8",
      "parents": [
        "3389398d4e243fae768b48b53308b62d90a63593"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Sat Mar 28 06:14:18 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sat Mar 28 06:14:18 2026 +0100"
      },
      "message": "Bump org.codehaus.plexus:plexus-utils from 4.0.2 to 4.0.3 (#2486)\n\nBumps [org.codehaus.plexus:plexus-utils](https://github.com/codehaus-plexus/plexus-utils) from 4.0.2 to 4.0.3.\n- [Release notes](https://github.com/codehaus-plexus/plexus-utils/releases)\n- [Commits](https://github.com/codehaus-plexus/plexus-utils/compare/plexus-utils-4.0.2...plexus-utils-4.0.3)\n\n---\nupdated-dependencies:\n- dependency-name: org.codehaus.plexus:plexus-utils\n  dependency-version: 4.0.3\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "3389398d4e243fae768b48b53308b62d90a63593",
      "tree": "8b69385f995c22af97e1f632ef1be52e09e1f7d5",
      "parents": [
        "0085b14cf4b874208bfc87a73337647c89d6bc93"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Sat Mar 28 06:14:04 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sat Mar 28 06:14:04 2026 +0100"
      },
      "message": "Bump org.fusesource.jansi:jansi from 2.4.2 to 2.4.3 (#2487)\n\nBumps [org.fusesource.jansi:jansi](https://github.com/fusesource/jansi) from 2.4.2 to 2.4.3.\n- [Release notes](https://github.com/fusesource/jansi/releases)\n- [Changelog](https://github.com/fusesource/jansi/blob/master/changelog.md)\n- [Commits](https://github.com/fusesource/jansi/compare/jansi-2.4.2...jansi-2.4.3)\n\n---\nupdated-dependencies:\n- dependency-name: org.fusesource.jansi:jansi\n  dependency-version: 2.4.3\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "0085b14cf4b874208bfc87a73337647c89d6bc93",
      "tree": "1edf7af6e45ba9d9b8df1c6df08742615d0e944c",
      "parents": [
        "bab8982fefeef7ada4b635be4d1568b2933c4738"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Fri Mar 27 07:31:05 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Mar 27 07:31:05 2026 +0100"
      },
      "message": "Bump org.jline:jline from 4.0.7 to 4.0.9 (#2478)\n\nBumps [org.jline:jline](https://github.com/jline/jline3) from 4.0.7 to 4.0.9.\n- [Release notes](https://github.com/jline/jline3/releases)\n- [Commits](https://github.com/jline/jline3/compare/4.0.7...4.0.9)\n\n---\nupdated-dependencies:\n- dependency-name: org.jline:jline\n  dependency-version: 4.0.9\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "bab8982fefeef7ada4b635be4d1568b2933c4738",
      "tree": "5fc1511e3dc749dc55f02ed02dd7b9d205438a27",
      "parents": [
        "93a805d91f06f5fdb4d0fea142dc5559a2fff979"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Fri Mar 27 07:30:01 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Mar 27 07:30:01 2026 +0100"
      },
      "message": "Bump biz.aQute.bnd:biz.aQute.bndlib from 7.2.1 to 7.2.3 (#2483)\n\nBumps [biz.aQute.bnd:biz.aQute.bndlib](https://github.com/bndtools/bnd) from 7.2.1 to 7.2.3.\n- [Release notes](https://github.com/bndtools/bnd/releases)\n- [Commits](https://github.com/bndtools/bnd/compare/7.2.1...7.2.3)\n\n---\nupdated-dependencies:\n- dependency-name: biz.aQute.bnd:biz.aQute.bndlib\n  dependency-version: 7.2.3\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "93a805d91f06f5fdb4d0fea142dc5559a2fff979",
      "tree": "0c470c8d98fcc920033a51078f6b0e93b9e43233",
      "parents": [
        "e02d5491970bb7d0b027fe1799a46f85bbec21a5"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed Mar 25 07:38:11 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Mar 25 07:38:11 2026 +0100"
      },
      "message": "Bump activemq.version from 6.2.1 to 6.2.2 (#2480)\n\nBumps `activemq.version` from 6.2.1 to 6.2.2.\n\nUpdates `org.apache.activemq:activemq-pool` from 6.2.1 to 6.2.2\n- [Release notes](https://github.com/apache/activemq/releases)\n- [Commits](https://github.com/apache/activemq/compare/activemq-6.2.1...activemq-6.2.2)\n\nUpdates `org.apache.activemq:activemq-karaf` from 6.2.1 to 6.2.2\n- [Release notes](https://github.com/apache/activemq/releases)\n- [Commits](https://github.com/apache/activemq/compare/activemq-6.2.1...activemq-6.2.2)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.activemq:activemq-pool\n  dependency-version: 6.2.2\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n- dependency-name: org.apache.activemq:activemq-karaf\n  dependency-version: 6.2.2\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "e02d5491970bb7d0b027fe1799a46f85bbec21a5",
      "tree": "bc682d3c527058e8eff22cdc52b1ede81eacac3e",
      "parents": [
        "fe35b79a3fcab8b649ac74c7c9a97aa659a10584"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Mar 23 06:18:36 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Mar 23 06:18:36 2026 +0100"
      },
      "message": "Bump jackson.version from 2.21.1 to 2.21.2 (#2467)\n\nBumps `jackson.version` from 2.21.1 to 2.21.2.\n\nUpdates `com.fasterxml.jackson.core:jackson-databind` from 2.21.1 to 2.21.2\n- [Commits](https://github.com/FasterXML/jackson/commits)\n\nUpdates `com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider` from 2.21.1 to 2.21.2\n\n---\nupdated-dependencies:\n- dependency-name: com.fasterxml.jackson.core:jackson-databind\n  dependency-version: 2.21.2\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n- dependency-name: com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider\n  dependency-version: 2.21.2\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "fe35b79a3fcab8b649ac74c7c9a97aa659a10584",
      "tree": "0f371aaff58bb31ea84bb569d463c2a020a7a0eb",
      "parents": [
        "f6cecbd1f8a64da04618f2d103a0068f4883f1e3"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Mar 23 06:15:17 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Mar 23 06:15:17 2026 +0100"
      },
      "message": "Bump org.apache.rat:apache-rat-plugin from 0.17 to 0.18 (#2469)\n\nBumps org.apache.rat:apache-rat-plugin from 0.17 to 0.18.\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.rat:apache-rat-plugin\n  dependency-version: \u00270.18\u0027\n  dependency-type: direct:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "f6cecbd1f8a64da04618f2d103a0068f4883f1e3",
      "tree": "86e5d56a1e4b91df27bfe8e2e3daec79e624027f",
      "parents": [
        "e9fc44a20d831e83f224d9088744f2665c7d5ec2"
      ],
      "author": {
        "name": "JB Onofré",
        "email": "jbonofre@apache.org",
        "time": "Mon Mar 23 06:15:00 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Mar 23 06:15:00 2026 +0100"
      },
      "message": "refactor: remove Pax CDI support (#2471)\n\nPax CDI is no longer maintained and incompatible with Pax Web 11.x.\nRemove all references including dependencies, feature repositories,\nintegration tests, documentation, and license entries."
    },
    {
      "commit": "e9fc44a20d831e83f224d9088744f2665c7d5ec2",
      "tree": "0c3bb40cf5c78a573764b2a8fd917e79b81dbab0",
      "parents": [
        "ef6e2da354c69bd971ec2d0fd5df23255eda49ab"
      ],
      "author": {
        "name": "JB Onofré",
        "email": "jbonofre@apache.org",
        "time": "Mon Mar 23 06:14:40 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Mar 23 06:14:40 2026 +0100"
      },
      "message": "Remove Aries Blueprint Web feature (#2473)\n\nAries Blueprint Web 1.0.1 requires javax.servlet which is incompatible\nwith Jakarta Servlet 6.x. Remove the blueprint-web feature definition,\nversion properties, test feature, and the already-ignored integration test."
    },
    {
      "commit": "ef6e2da354c69bd971ec2d0fd5df23255eda49ab",
      "tree": "eb0fc47a66acb1962cb501fcd0d1b412125bea99",
      "parents": [
        "276c4fbd6f650315f0118c54040f037429a64316"
      ],
      "author": {
        "name": "JB Onofré",
        "email": "jbonofre@apache.org",
        "time": "Sun Mar 22 18:46:37 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun Mar 22 18:46:37 2026 +0100"
      },
      "message": "feat(jakarta): Upgrade to Pax Web 11.0.1 (#2427)\n\n* feat(jakarta): Upgrade to Pax Web 11.1.0\n\nMigrate from javax.servlet to jakarta.servlet, bump Java SE level from\n11 to 17, remove the spring-legacy feature module and associated tests,\nand replace BundleActivator patterns with SCR/DS components in examples\nand HTTP modules.\nRemove spring-legacy features\n\n* fix(webconsole): add http feature dependency for Jakarta servlet support\n\nThe webconsole feature needs the http feature to provide the\norg.apache.felix.http.jakartawrappers package required after the\njavax-to-jakarta servlet migration.\n\n* fix(webconsole): exclude Felix HTTP jakartawrappers import\n\nFelix WebConsole 5.0.18 internally references\norg.apache.felix.http.jakartawrappers, but Karaf uses Pax Web\ninstead of Felix HTTP so this package is not available. Exclude\nit from Import-Package since KarafOsgiManager handles servlet\nregistration directly.\n\n* fix: address review findings from jakarta migration\n\n- Remove javax.websocket-api and websocket-server from GraphQL feature\n  (websocket-server doesn\u0027t exist in Jetty 12, websocket support is\n  provided by pax-web-jetty-websockets feature)\n- Fix proxy whiteboard servlet pattern to use /* suffix for sub-path\n  matching (HttpService did prefix matching, whiteboard does not)\n- Remove unused HttpHeader import in MavenTest\n\n* fix(webconsole): also exclude Felix HTTP javaxwrappers import\n\nFelix WebConsole 5.0.18 references both jakartawrappers and\njavaxwrappers from Felix HTTP, neither of which is available\nin Karaf\u0027s Pax Web runtime.\n\n* fix(webconsole): mark Felix WebConsole 5.0.18 transitive imports as optional\n\nFelix WebConsole 5.0.18 introduces imports for org.owasp.encoder,\norg.osgi.service.servlet.context, and org.apache.felix.inventory\nthat may not be available in all Karaf assemblies. Mark them as\noptional to prevent resolution failures while allowing them to\nbe used when present.\n\n* fix(jakarta): add osgi.http capability to pax-web-http feature and skip incompatible tests\n\nAdd the osgi.implementation osgi.http capability at the feature level\nin pax-web-http so the feature resolver can satisfy requirements from\nwebconsole, blueprint-web, jolokia, and servlet example features.\nThe pax-web-runtime bundle already provides this capability, but\nKaraf\u0027s feature resolver needs it declared at the feature level too.\n\nSkip integration tests for third-party dependencies that still require\njavax.servlet and are incompatible with the Jakarta Servlet 6.x migration:\n- Felix HTTP 4.2.32 (javax.servlet only)\n- CXF 3.6.x (javax.servlet only, needs CXF 4.x upgrade)\n- graphql-java-servlet 14.0.0 (javax.servlet only)\n- Pax CDI 1.1.4 web features (requires Pax Web \u003c 9.0)\n\n* fix(jakarta): update osgi.http requirement version to 2.0 for Jakarta Servlet\n\nThe pax-web-http feature provides osgi.implementation osgi.http at\nversion 2.0 (Jakarta Servlet), but webconsole, blueprint-web, jolokia,\nand servlet example features still required version 1.1. The OSGi\nresolver does exact attribute matching, causing resolution failures.\n\nUpdate all osgi.http requirements from 1.1 to 2.0 and add the missing\nosgi.implementation capability to the itests pax-web-http feature.\n\n* fix(jakarta): migrate webconsole plugins to Jakarta Servlet API and upgrade Jolokia to 2.x\n\nMigrate all webconsole plugins from the deprecated Felix WebConsole javax.servlet API\n(AbstractWebConsolePlugin, WebConsoleSecurityProvider2) to the new Jakarta-based API\n(AbstractServlet, SecurityProvider). Update Jolokia from 1.7.1 to 2.1.4 which natively\nsupports Jakarta Servlet. Skip Aries Blueprint Web test as it has no Jakarta-compatible version.\n\n* fix(jolokia): update Jolokia version to 2.2.9 as 2.1.4 does not exist for jolokia-agent-osgi\n\n* fix(jakarta): add missing http feature dep in test webconsole and validate proxy URL on add\n\nThe test feature.xml for webconsole was missing the \u003cfeature\u003ehttp\u003c/feature\u003e\ndependency that exists in the production feature definition, causing HttpTest\nfailures (no servlets registered). Also add URL validation in\nProxyServiceImpl.addProxy() to reject URLs not starting with \u0027/\u0027.\n\n* fix(jakarta): webconsole needs http-whiteboard for Felix WebConsole 5.0.18 servlet registration\n\nFelix WebConsole 5.0.18 registers its OsgiManager servlet via OSGi HTTP\nWhiteboard (jakarta.servlet.Servlet service) instead of the legacy HttpService.\nThe pax-web-extender-whiteboard bundle is required to process this registration,\nso the webconsole feature now depends on http-whiteboard instead of http.\n\nAlso fix HttpTest.testIncorrectProxyUrlFails to handle the IllegalArgumentException\nthrown by the new validateUrl() in ProxyServiceImpl for URLs not starting with \u0027/\u0027.\n\n* fix(jakarta): fix integration test failures for Pax Web 11.1.0 upgrade\n\n- Update test webconsole feature to use http-whiteboard instead of http\n- Add SCR prerequisite to servlet-example-registration feature for @Component support\n- Use HTTP Whiteboard multipart properties in UploadServlet instead of programmatic init()\n- Migrate XATest from Derby to H2 to avoid ClassNotFoundException in Jakarta environment\n- Fix WebSocketExampleTest to use pax-web-websockets feature (renamed in Pax Web 11.1.0)\n\n* fix(jakarta): fix XATest CI timeout by correcting H2 driver name and ignoring incompatible test\n\nFix the H2 datasource config to use the correct OSGi driver name\n\"H2 JDBC Driver\" instead of \"h2\", fix AUTO_INCREMENT SQL syntax for\nH2 v2, add bounded timeouts to all polling loops, and @Ignore the test\nsince Camel 2.20.1 requires spring-tx [4.1.0,5.0.0) which is no longer\navailable after spring-legacy feature repository removal.\n\n* fix(jakarta): fix CI test failures for Pax Web 11.1.0 upgrade\n\n- Fix ServletExampleTest.testUploadServlet: rewrite multipart request\n  to be compatible with Jetty 12.1\u0027s stricter parser (proper boundary\n  format, remove invalid Content-Transfer-Encoding header, use\n  Content-Length)\n- Fix ConditionalFeaturesTest.testWebconsole: upgrade\n  felix.webconsole.plugins.event from 1.1.8 to 1.2.0 as 1.1.8 imports\n  javax.servlet which is unavailable in the Jakarta-only environment\n- Fix WebSocketExampleTest: use pax-web-jetty-websockets feature for\n  EE10 websocket bundles, update Jetty 12 client API usage, and ignore\n  test as JettyWebSocketServlet is incompatible with Pax Web 11.1.0\n  OSGi HTTP Whiteboard websocket upgrade handling\n\n* fix(jakarta): upgrade Felix HTTP to Jetty12 for Jakarta Servlet 6.x support\n\nUpgrade the felix-http feature from Felix HTTP Jetty 4.2.32\n(javax.servlet only) to Felix HTTP Jetty12 1.1.8 which supports\nJakarta Servlet 6.x and embeds Jetty 12.\n\n- Update felix.http.version to 1.1.8 (jetty12 artifact series)\n- Switch artifact from http.jetty to http.jetty12 in BOM and feature\n- Update servlet-api from 1.2.0 to 6.1.0 (provides both javax 4.0\n  and Jakarta 6.1 contracts)\n- Add commons-fileupload and commons-io dependencies required by\n  jetty12\n- Remove separate http.whiteboard bundle (jetty12 handles whiteboard\n  internally)\n- Re-enable FelixHttpTest integration test\n\n* fix(jakarta): upgrade GraphQL dependencies for Jakarta Servlet 6.x support\n\nUpgrade graphql-java-kickstart/graphql-java-servlet from 14.0.0 to\n16.0.0 which supports Jakarta Servlet 6.x. Also upgrade graphql-java\nfrom 19.11 to 22.3 (required by kickstart 16.0.0).\n\n- Update graphql-java version across all example modules\n- Switch from javax.servlet to jakarta.servlet in servlet example\n- Update feature XML with proper OSGi bundle for graphql-java 22.3\n  (no longer needs wrap:) and add jakarta.websocket API dependencies\n- Re-enable GraphQLExampleTest (testServlet and testCommand pass)\n- Keep testWebSocket @Ignore due to Pax Web 11.1.0 whiteboard\n  websocket upgrade limitation\n\n* fix(jakarta): rewrite websocket example to use Jakarta WebSocket API\n\nReplace Jetty-specific JettyWebSocketServlet with standard Jakarta\nWebSocket @ServerEndpoint API. This removes the dependency on Jetty\nEE10 websocket server classes.\n\n- Replace WebSocketExample (Jetty annotations) with\n  WebSocketExampleEndpoint (Jakarta @ServerEndpoint)\n- Replace JettyWebSocketServlet with HttpServlet that registers\n  the endpoint via ServerContainer\n- Switch dependencies from Jetty websocket to Jakarta WebSocket API\n- Test remains @Ignore as Pax Web 11.1.0 OSGi HTTP Whiteboard does\n  not support WebSocket endpoint registration via ServerContainer\n\n* iUpdate\n\n* fix(webconsole): fix StackOverflowError and redirect loop with Jetty 12\n\nKarafOsgiManager.doService() was calling super.service() which\ndispatched back to the overridden doService() via virtual dispatch,\ncausing a StackOverflowError. Changed to super.doService().\n\nFelix WebConsole registers its servlet with pattern \"/\" (default\nservlet). With Jetty 12, getPathInfo() returns null for the default\nservlet per the Servlet spec, causing OsgiManager.doService() to\nrepeatedly redirect to the default plugin (\"bundles\"), resulting in\nbundles/bundles/bundles/... URL loop. Wrap the request to move\nservletPath into pathInfo, making the default servlet behave like\na \"/*\" path-mapped servlet."
    },
    {
      "commit": "276c4fbd6f650315f0118c54040f037429a64316",
      "tree": "620bac1dc3af584285e962b0e17069813f6024bb",
      "parents": [
        "c5b775ea80bd3b825a18d8a51c9a6037a09855fe"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Sat Mar 21 06:30:28 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sat Mar 21 06:30:28 2026 +0100"
      },
      "message": "Bump com.h2database:h2 from 2.2.224 to 2.4.240 (#2465)\n\nBumps [com.h2database:h2](https://github.com/h2database/h2database) from 2.2.224 to 2.4.240.\n- [Release notes](https://github.com/h2database/h2database/releases)\n- [Commits](https://github.com/h2database/h2database/compare/version-2.2.224...version-2.4.240)\n\n---\nupdated-dependencies:\n- dependency-name: com.h2database:h2\n  dependency-version: 2.4.240\n  dependency-type: direct:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "c5b775ea80bd3b825a18d8a51c9a6037a09855fe",
      "tree": "0f5d72f4b9a9828932e8f4c311a08bc5c65f9e22",
      "parents": [
        "d026776b114883b10ab720fd620e11bb4bfefb82"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Fri Mar 20 05:49:06 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Mar 20 05:49:06 2026 +0100"
      },
      "message": "Bump org.jline:jline from 4.0.5 to 4.0.7 (#2466)\n\nBumps [org.jline:jline](https://github.com/jline/jline3) from 4.0.5 to 4.0.7.\n- [Release notes](https://github.com/jline/jline3/releases)\n- [Commits](https://github.com/jline/jline3/compare/4.0.5...4.0.7)\n\n---\nupdated-dependencies:\n- dependency-name: org.jline:jline\n  dependency-version: 4.0.7\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "d026776b114883b10ab720fd620e11bb4bfefb82",
      "tree": "7292d078500608c522817822679a6d1e6954143f",
      "parents": [
        "94faf43a267938c4e9d43a28841ec1e17be30d59"
      ],
      "author": {
        "name": "JB Onofré",
        "email": "jbonofre@apache.org",
        "time": "Thu Mar 19 15:21:50 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Mar 19 15:21:50 2026 +0100"
      },
      "message": "refactor: replace Derby with H2 database (#2185) (#2311)\n\n* refactor: replace Derby with H2 database (#2185)\n\nReplace all Apache Derby references with H2 across the codebase:\nsource code, tests, examples, configuration files, and documentation.\n\n* fix(jdbc): use correct H2 driver name and add test timeouts\n\nH2\u0027s OsgiDataSourceFactory registers with osgi.jdbc.driver.name\u003d\"H2 JDBC Driver\",\nnot \"H2\". The mismatch prevented pax-jdbc-config from finding the DataSourceFactory,\ncausing the XATest to hang indefinitely waiting for the datasource.\n\nAlso add bounded timeouts to all polling loops in XATest to prevent CI hangs if a\ncondition is never met."
    },
    {
      "commit": "94faf43a267938c4e9d43a28841ec1e17be30d59",
      "tree": "2fdf41e4a81d7eeb26f48501cca90c8a5e911b6e",
      "parents": [
        "902838471444d305b2a091aec63f9afbe568412f"
      ],
      "author": {
        "name": "JB Onofré",
        "email": "jbonofre@apache.org",
        "time": "Thu Mar 19 11:21:59 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Mar 19 11:21:59 2026 +0100"
      },
      "message": "ci: fix test results not commenting on PRs (#2462)\n\nThe publish-unit-test-result-action in workflow_run mode needs the\noriginal event payload file to identify the associated PR. The CI\nworkflow was not uploading it, and the test-results workflow was\nreferencing a non-existent property (github.event.workflow_run.event_path).\n\nUpload the event file as a separate artifact in CI and download it in\nthe test-results workflow so the action can correctly post PR comments."
    },
    {
      "commit": "902838471444d305b2a091aec63f9afbe568412f",
      "tree": "caa38348718a3d6389fc15b42a31d266f7c7eb60",
      "parents": [
        "7f1a6a704a279d04401125849eb7453018592ccf"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Thu Mar 19 05:19:02 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Mar 19 05:19:02 2026 +0100"
      },
      "message": "Bump dawidd6/action-download-artifact from 8 to 19 (#2459)\n\nBumps [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact) from 8 to 19.\n- [Release notes](https://github.com/dawidd6/action-download-artifact/releases)\n- [Commits](https://github.com/dawidd6/action-download-artifact/compare/v8...v19)\n\n---\nupdated-dependencies:\n- dependency-name: dawidd6/action-download-artifact\n  dependency-version: \u002719\u0027\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "7f1a6a704a279d04401125849eb7453018592ccf",
      "tree": "574dd60236d84895cb9dcc6db51588dd73ddbb5f",
      "parents": [
        "fc24935e980f3d81eecc3306473b997c4edbbe44"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed Mar 18 06:37:33 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Mar 18 06:37:33 2026 +0100"
      },
      "message": "Bump org.jline:jline from 3.30.8 to 4.0.5 (#2454)\n\nBumps [org.jline:jline](https://github.com/jline/jline3) from 3.30.8 to 4.0.5.\n- [Release notes](https://github.com/jline/jline3/releases)\n- [Commits](https://github.com/jline/jline3/compare/jline-3.30.8...4.0.5)\n\n---\nupdated-dependencies:\n- dependency-name: org.jline:jline\n  dependency-version: 4.0.5\n  dependency-type: direct:development\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "fc24935e980f3d81eecc3306473b997c4edbbe44",
      "tree": "374d8101e0ef5253c8020ef32275aa186c151a34",
      "parents": [
        "e3d9d760de10623d8203a8b76425bc0acaeb8e0a"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed Mar 18 06:36:53 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Mar 18 06:36:53 2026 +0100"
      },
      "message": "Bump camel.version from 4.10.7 to 4.14.5 (#2456)\n\nBumps `camel.version` from 4.10.7 to 4.14.5.\n\nUpdates `org.apache.camel.karaf:apache-camel` from 4.10.7 to 4.14.5\n\nUpdates `org.apache.camel:camel-core` from 4.10.7 to 4.14.5\n\nUpdates `org.apache.camel.karaf:camel-core-osgi` from 4.10.7 to 4.14.5\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.camel.karaf:apache-camel\n  dependency-version: 4.14.5\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n- dependency-name: org.apache.camel:camel-core\n  dependency-version: 4.14.5\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n- dependency-name: org.apache.camel.karaf:camel-core-osgi\n  dependency-version: 4.14.5\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "e3d9d760de10623d8203a8b76425bc0acaeb8e0a",
      "tree": "728be675fdb1fcb9419e407dc1ff581ec8bc4207",
      "parents": [
        "e7e168aefac2427057f39880ec50f3bfb40cb74f"
      ],
      "author": {
        "name": "JB Onofré",
        "email": "jbonofre@apache.org",
        "time": "Wed Mar 18 05:26:58 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Mar 18 05:26:58 2026 +0100"
      },
      "message": "ci: use workflow_run to publish test results on fork PRs (#2450)\n\nThe publish-unit-test-result-action requires write permissions to post\nPR comments and check runs, but fork PRs run with read-only tokens.\nMove test result publishing to a separate workflow triggered by\nworkflow_run, which runs in the base repo context with write access."
    },
    {
      "commit": "e7e168aefac2427057f39880ec50f3bfb40cb74f",
      "tree": "6d3ed85858b6425a213492cbe633938a4e4afa60",
      "parents": [
        "ea71d6b2baa2ce5435077f24d88158871a766f7b"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Mar 16 06:06:32 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Mar 16 06:06:32 2026 +0100"
      },
      "message": "Bump org.apache.maven:maven-archiver from 3.5.2 to 3.6.6 (#2205)\n\nBumps [org.apache.maven:maven-archiver](https://github.com/apache/maven-archiver) from 3.5.2 to 3.6.6.\n- [Release notes](https://github.com/apache/maven-archiver/releases)\n- [Commits](https://github.com/apache/maven-archiver/compare/maven-archiver-3.5.2...maven-archiver-3.6.6)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven:maven-archiver\n  dependency-version: 3.6.6\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "ea71d6b2baa2ce5435077f24d88158871a766f7b",
      "tree": "dc6e1235226c961b5f7396ef78f152121d8c98d1",
      "parents": [
        "a3d3fced1eb467f1f35f872253c024df000987f4"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Sun Mar 15 18:44:09 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun Mar 15 18:44:09 2026 +0100"
      },
      "message": "Bump org.eclipse.platform:org.eclipse.osgi from 3.18.0 to 3.24.100 (#2303)\n\n* Bump org.eclipse.platform:org.eclipse.osgi from 3.18.0 to 3.24.100\n\nBumps [org.eclipse.platform:org.eclipse.osgi](https://github.com/eclipse-equinox/equinox) from 3.18.0 to 3.24.100.\n- [Commits](https://github.com/eclipse-equinox/equinox/commits)\n\n---\nupdated-dependencies:\n- dependency-name: org.eclipse.platform:org.eclipse.osgi\n  dependency-version: 3.24.100\n  dependency-type: direct:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\n\n* Fix framework factory loading to skip comments in service loader files\n\nThe loadFrameworkFactory() method reads META-INF/services/org.osgi.framework.launch.FrameworkFactory\nto discover the framework factory class. It was reading only the first line, but the Java ServiceLoader\nspecification allows comment lines starting with \u0027#\u0027. Equinox 3.24.100 now includes a \u0027# Generated by bnd\u0027\ncomment, causing a ClassNotFoundException and preventing the framework from starting.\n\n---------\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e\nCo-authored-by: JB Onofré \u003cjb.onofre@dremio.com\u003e"
    },
    {
      "commit": "a3d3fced1eb467f1f35f872253c024df000987f4",
      "tree": "2766c86244dd010ed739fb81a8e3e27c7071a1b4",
      "parents": [
        "4b839ca90aa6778266ed62af0b56e46a1c057018"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Sun Mar 15 08:58:03 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun Mar 15 08:58:03 2026 +0100"
      },
      "message": "Bump org.apache.felix:org.apache.felix.inventory from 1.1.0 to 2.0.0 (#2357)\n\nBumps org.apache.felix:org.apache.felix.inventory from 1.1.0 to 2.0.0.\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.felix:org.apache.felix.inventory\n  dependency-version: 2.0.0\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    }
  ],
  "next": "4b839ca90aa6778266ed62af0b56e46a1c057018"
}
