)]}' { "log": [ { "commit": "204d97bf3d4eb5368de3153583773d1d9598cb5c", "tree": "62756d74e0f4bef382cbf8ec78d66598586042d7", "parents": [ "6bdf64cdfd3cd10a0dc806d182171631d566a218" ], "author": { "name": "Sandor Molnar", "email": "smolnar@apache.org", "time": "Mon Jul 27 11:55:10 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jul 27 11:55:10 2026 +0200" }, "message": "KNOX-3397: Add preauth.auth.header.actor.groups to set actor groups header name explicitly (#1329)" }, { "commit": "6bdf64cdfd3cd10a0dc806d182171631d566a218", "tree": "e48b4b8bbed1ae3388930a19717d841378a8cbfc", "parents": [ "2beb45b33c09d5957fc47dd8a1e7a9e951391967" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Fri Jul 24 08:05:57 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jul 24 08:05:57 2026 +0200" }, "message": "Bump org.postgresql:postgresql from 42.7.11 to 42.7.12 (#1323)\n\nBumps [org.postgresql:postgresql](https://github.com/pgjdbc/pgjdbc) from 42.7.11 to 42.7.12.\n- [Release notes](https://github.com/pgjdbc/pgjdbc/releases)\n- [Changelog](https://github.com/pgjdbc/pgjdbc/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/pgjdbc/pgjdbc/compare/REL42.7.11...REL42.7.12)\n\n---\nupdated-dependencies:\n- dependency-name: org.postgresql:postgresql\n dependency-version: 42.7.12\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "2beb45b33c09d5957fc47dd8a1e7a9e951391967", "tree": "9406eb94c2a0c398fe7cab00bb10fda0042a0243", "parents": [ "aea0def984aee32ffb05505b1778fd530648e11a" ], "author": { "name": "hanicz", "email": "hanicz@users.noreply.github.com", "time": "Thu Jul 23 19:21:11 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jul 23 19:21:11 2026 +0200" }, "message": "KNOX-3041: Eliminate load-balancing race condition in HA dispatch (#1317)" }, { "commit": "aea0def984aee32ffb05505b1778fd530648e11a", "tree": "51f149acc8cc831cfe948360bdbce1540e035379", "parents": [ "76fa85b5c08c1869e9db2e021536a2696841d748" ], "author": { "name": "Sandeep Moré", "email": "moresandeep@gmail.com", "time": "Thu Jul 23 07:02:33 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jul 23 07:02:33 2026 -0400" }, "message": "KNOX-3333 - Update Letsencrypt staging certs (#1244)\n\n* KNOX-3333 - Update Letsencrypt staging certs\n\n* Put staging certs behind a flag (default false) + secure truststore password from getting exposed\n\n* KNOX-3333 - Review changes\n\n* Review comments" }, { "commit": "76fa85b5c08c1869e9db2e021536a2696841d748", "tree": "5c81ffe9662af86c94d084cd434ddbd5d4832ebd", "parents": [ "9f4b8e7fbe9c4c09f79d27c58448c704fca8288d" ], "author": { "name": "Sandor Molnar", "email": "smolnar@apache.org", "time": "Wed Jul 22 20:15:09 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 22 20:15:09 2026 +0200" }, "message": "KNOX-3389: Embedded LDAP getUserGroups drops roles-lookup roles that have no backing group (#1318)" }, { "commit": "9f4b8e7fbe9c4c09f79d27c58448c704fca8288d", "tree": "46b683c82aa942acc5a36eeadddacc7a5efdabb4", "parents": [ "fcab7e2f8a2ce77172923368a3d585871c4b0580" ], "author": { "name": "Sandor Molnar", "email": "smolnar@apache.org", "time": "Wed Jul 22 10:26:20 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 22 10:26:20 2026 +0200" }, "message": "KNOX-3388: Improve alias creation during EKU mode testing (#1316)" }, { "commit": "fcab7e2f8a2ce77172923368a3d585871c4b0580", "tree": "c54d277a4c4593580548e74ada53b31962c7eb8e", "parents": [ "b438768cd87b96d0bcc677745e3c39acb5e4d72d" ], "author": { "name": "David Han", "email": "handavid@users.noreply.github.com", "time": "Wed Jul 22 03:06:14 2026 -0500" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 22 10:06:14 2026 +0200" }, "message": "KNOX-3385: Ldap Proxy accepts search using either proxy or remote base dn (#1314)" }, { "commit": "b438768cd87b96d0bcc677745e3c39acb5e4d72d", "tree": "540ddffb30e8eadeed52b2806eb44b6ba449cc49", "parents": [ "94f394a735df106c4bfdf80a7696ece05c29fbdf" ], "author": { "name": "hanicz", "email": "hanicz@users.noreply.github.com", "time": "Mon Jul 20 08:09:24 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jul 20 08:09:24 2026 +0200" }, "message": "KNOX-3381: Fix HaDispatch unnecessary failover due to IOException during writeOutboundResponse (#1308)" }, { "commit": "94f394a735df106c4bfdf80a7696ece05c29fbdf", "tree": "f99f3da014b317e794823cb5fa75b02fe3bcf48c", "parents": [ "a5dfbcaca614e1f9ed3e32d8f07fdea5f96dbb16" ], "author": { "name": "lmccay", "email": "lmccay@apache.org", "time": "Sat Jul 18 11:05:34 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat Jul 18 11:05:34 2026 -0400" }, "message": "Add Project Security Threat Model Document (#1312)\n\nCo-authored-by: Jarek Potiuk \u003cjarek@potiuk.com\u003e" }, { "commit": "a5dfbcaca614e1f9ed3e32d8f07fdea5f96dbb16", "tree": "c26d00b41917292581fcdb6d8e2bdfc72e80107b", "parents": [ "08b1f90b5a566bbdd09cdf6440863a36d48b83d6" ], "author": { "name": "Sandor Molnar", "email": "smolnar@apache.org", "time": "Fri Jul 17 15:48:17 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jul 17 15:48:17 2026 +0200" }, "message": "KNOX-3382: Bump Netty to 1.135.Final due to CVEs (#1309)" }, { "commit": "08b1f90b5a566bbdd09cdf6440863a36d48b83d6", "tree": "e0611c9072f436c852108e3d6d8e4af608b23581", "parents": [ "34ba1272412b3ed38422b4e0e5dab784bc518289" ], "author": { "name": "Sandor Molnar", "email": "smolnar@apache.org", "time": "Fri Jul 17 15:48:08 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jul 17 15:48:08 2026 +0200" }, "message": "KNOX-3383: Bump Jackson to 2.18.9 due to CVEs (#1310)" }, { "commit": "34ba1272412b3ed38422b4e0e5dab784bc518289", "tree": "50721ffa78867b295a8c7ef91d71f1374141d350", "parents": [ "8d70ff44dd13a7a96a7c97b5df005d9d0e1e9657" ], "author": { "name": "hanicz", "email": "hanicz@users.noreply.github.com", "time": "Thu Jul 16 06:45:06 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jul 16 06:45:06 2026 +0200" }, "message": "KNOX-3361: Route OpenSAML off BouncyCastle in FIPS mode (#1299)\n\n* KNOX-3361: Route OpenSAML off BouncyCastle in FIPS mode\n\n* KNOX-3361: Update pac4j docs" }, { "commit": "8d70ff44dd13a7a96a7c97b5df005d9d0e1e9657", "tree": "fa907e5daab291372853e277c496b3904f5a6528", "parents": [ "6110aea6251b06eb563b6919192671f6913bb7c7" ], "author": { "name": "Sandor Molnar", "email": "smolnar@apache.org", "time": "Wed Jul 15 18:45:38 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 15 18:45:38 2026 +0200" }, "message": "KNOX-3380: hive_metastore_enable_ssl config should be used to determin if SSL is enabled on HMS (#1307)" }, { "commit": "6110aea6251b06eb563b6919192671f6913bb7c7", "tree": "4f4825be19874dcdd031e275808bea77eae48a23", "parents": [ "ad6c15958ba2ba3e78a5fd5225a43327003fa288" ], "author": { "name": "Sandor Molnar", "email": "smolnar@apache.org", "time": "Wed Jul 15 17:36:50 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 15 17:36:50 2026 +0200" }, "message": "KNOX-3374: Skip redundant roles lookup in PreAuth/ExtAuthz when the identity-assertion layer already resolved roles (#1306)" }, { "commit": "ad6c15958ba2ba3e78a5fd5225a43327003fa288", "tree": "1956855087b08a60704aa9aa0c73e43d58d2aa6e", "parents": [ "c24781a1ab5842ed49317df76ac4dcc3943312e1" ], "author": { "name": "Sandor Molnar", "email": "smolnar@apache.org", "time": "Wed Jul 15 10:47:35 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 15 10:47:35 2026 +0200" }, "message": "KNOX-3377: KNOX-3378: KNOX-3379: Support secure LDAP (LDAPS) for the Knox embedded LDAP service (#1305)" }, { "commit": "c24781a1ab5842ed49317df76ac4dcc3943312e1", "tree": "e14e1ad8e2666f9ec096bb1772c4b19a3d5f5f2e", "parents": [ "3f2ed2e5930b19629284e9fe01fa871e8787bc7e" ], "author": { "name": "Sandor Molnar", "email": "smolnar@apache.org", "time": "Mon Jul 13 14:04:07 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jul 13 14:04:07 2026 +0200" }, "message": "KNOX-3376: Use DeafultAliasService in Knox OOTB (#1304)" }, { "commit": "3f2ed2e5930b19629284e9fe01fa871e8787bc7e", "tree": "22ef1a5a58de201af7a97b186b9b502c1bbee9c6", "parents": [ "6dbdc9486e4111ad0101bcd616dca9ead8325c6f" ], "author": { "name": "hanicz", "email": "hanicz@users.noreply.github.com", "time": "Mon Jul 13 12:36:22 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jul 13 12:36:22 2026 +0200" }, "message": "KNOX-3375: Wire in gatewayservices for LDAPRolesLookupInterceptorFactory so KnoxCLI is able to load it (#1303)" }, { "commit": "6dbdc9486e4111ad0101bcd616dca9ead8325c6f", "tree": "717fbe68bcfe4c85e16e7d2497e1843ad1b00315", "parents": [ "7b34b7c9861da895af8f178082ed750039c0c889" ], "author": { "name": "Sandeep Moré", "email": "moresandeep@gmail.com", "time": "Thu Jul 09 14:54:14 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jul 09 14:54:14 2026 -0400" }, "message": "KNOX-3359 - Support Single-Purpose EKU Certificates (#1291)" }, { "commit": "7b34b7c9861da895af8f178082ed750039c0c889", "tree": "0faced144537468fdde9f734c02206caa2c6e72e", "parents": [ "1427c8858bae7d7c6fbd3749fef2804c1a12d509" ], "author": { "name": "hanicz", "email": "hanicz@users.noreply.github.com", "time": "Wed Jul 08 15:45:04 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 08 15:45:04 2026 +0200" }, "message": "KNOX-3374: Fix inherited roles missing from auth headers when LDAP roles-lookup interceptor is active (#1300)" }, { "commit": "1427c8858bae7d7c6fbd3749fef2804c1a12d509", "tree": "f12858ef373b61f9cd237f7acb94632589cd8c75", "parents": [ "bea0469325891afc273a36046f13fca790379b3e" ], "author": { "name": "bonampak", "email": "14160522+bonampak@users.noreply.github.com", "time": "Mon Jul 06 13:44:28 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jul 06 13:44:28 2026 +0200" }, "message": "KNOX-3344: Upgrade pac4j to 6.5.3 (#1278)" }, { "commit": "bea0469325891afc273a36046f13fca790379b3e", "tree": "fa474efe611bedb375405ffaa4698eea2ead5e39", "parents": [ "9c000de3747fd9db626b6a930ac0fac6450cab05" ], "author": { "name": "hanicz", "email": "hanicz@users.noreply.github.com", "time": "Sun Jul 05 19:31:57 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sun Jul 05 19:31:57 2026 +0200" }, "message": "KNOX-3372: Add gateway-reloadable documentation (#1297)" }, { "commit": "9c000de3747fd9db626b6a930ac0fac6450cab05", "tree": "d3072067281182d55201ae405a1212be47356b94", "parents": [ "39a168a95793093862fca77ad449523b8f4cdba6" ], "author": { "name": "hanicz", "email": "hanicz@users.noreply.github.com", "time": "Thu Jul 02 10:56:31 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jul 02 10:56:31 2026 +0200" }, "message": "KNOX-3316: Change downloaded keystore format based on FIPS (#1292)" }, { "commit": "39a168a95793093862fca77ad449523b8f4cdba6", "tree": "01559fc0765a7571d276f7c9e9084563c763b67d", "parents": [ "67fb0778c6e375319aa4023b03a2bf0656d639b1" ], "author": { "name": "hanicz", "email": "hanicz@users.noreply.github.com", "time": "Wed Jul 01 21:40:41 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 01 21:40:41 2026 +0200" }, "message": "KNOX-3371: Fix broken error message on login page (#1290)" }, { "commit": "67fb0778c6e375319aa4023b03a2bf0656d639b1", "tree": "86c23b12f27bf485ea3db2f92901ae5f76c2a15b", "parents": [ "8f65731a5be596fbdd80217f25b69d04fd395902" ], "author": { "name": "Arun", "email": "87828015+arunk-kumar@users.noreply.github.com", "time": "Thu Jul 02 00:47:01 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 01 21:17:01 2026 +0200" }, "message": "KNOX-1608: Remove gateway-adapter module (#1263)" }, { "commit": "8f65731a5be596fbdd80217f25b69d04fd395902", "tree": "8c4375810d3b8d4a276ad607699cbf23ca64fcac", "parents": [ "de9d91c5d50131cb5a0cd6b8e8828763b3448d1c" ], "author": { "name": "Sandor Molnar", "email": "smolnar@apache.org", "time": "Wed Jul 01 21:13:37 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 01 21:13:37 2026 +0200" }, "message": "KNOX-3370: Eliminate deprecated TokenStateService implementations (#1289)" }, { "commit": "de9d91c5d50131cb5a0cd6b8e8828763b3448d1c", "tree": "1addabd962493bb8dc27cbc47428d3a6f8751dce", "parents": [ "51f40e751225fe4327d6ab1fda5eaa88833d3b21" ], "author": { "name": "Devaspati", "email": "krishnatridevaspati@gmail.com", "time": "Wed Jul 01 20:15:39 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 01 10:45:39 2026 -0400" }, "message": "KNOX-3366 - Upgrade Mina-core to 2.2.8 (#1285) via devaspati.krishnatri " }, { "commit": "51f40e751225fe4327d6ab1fda5eaa88833d3b21", "tree": "bee51bf62c83eefa23d67442d1e164047b1aaed9", "parents": [ "3da2d97e3b7927ed74ecf46a24ab0571b157da10" ], "author": { "name": "hanicz", "email": "hanicz@users.noreply.github.com", "time": "Wed Jul 01 11:29:39 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 01 11:29:39 2026 +0200" }, "message": "KNOX-3367: Update Token State Service DB documentation (#1287)\n\n* KNOX-3367: Update Token State Service DB documentation\n\n* KNOX-3367: Removed deprecated Token State Services" }, { "commit": "3da2d97e3b7927ed74ecf46a24ab0571b157da10", "tree": "32006af5b46538b2e664599662d3c4fff0e75018", "parents": [ "1e257783be8e8b2186bf05dad6cb65c573d63031" ], "author": { "name": "Sandor Molnar", "email": "smolnar@apache.org", "time": "Wed Jul 01 11:20:44 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 01 11:20:44 2026 +0200" }, "message": "KNOX-3369: Bump requests from 2.32.4 to 2.33.0 and pytest from 8.3.4 to 9.0.3 in /.github/workflows/tests (#1288)" }, { "commit": "1e257783be8e8b2186bf05dad6cb65c573d63031", "tree": "65464bb682f82a00fbac5272e3221d6ac8d2b741", "parents": [ "d9283aa2a48698c1c9ad8be60e1203c53d624e6a" ], "author": { "name": "Sandor Molnar", "email": "smolnar@apache.org", "time": "Wed Jul 01 09:21:26 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 01 09:21:26 2026 +0200" }, "message": "KNOX-3341: LDAP proxy general search - review fixes and hardening (#1284)" }, { "commit": "d9283aa2a48698c1c9ad8be60e1203c53d624e6a", "tree": "ae211dcbf3ed9f1d44e79ab0342e88c0ce7c40c0", "parents": [ "2fdbda09d970522cd46cba8d36ccdc439246b611" ], "author": { "name": "hanicz", "email": "hanicz@users.noreply.github.com", "time": "Mon Jun 29 11:35:27 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 29 11:35:27 2026 +0200" }, "message": "KNOX-3365: New docs for k8s ServiceAccount validator (#1283)" }, { "commit": "2fdbda09d970522cd46cba8d36ccdc439246b611", "tree": "fef6ce691137d6dc12641e9069be65dbf0941d82", "parents": [ "51a168f52ee412bf0374717a8a0fc2a12a6fbaab" ], "author": { "name": "hanicz", "email": "hanicz@users.noreply.github.com", "time": "Mon Jun 29 09:31:25 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 29 09:31:25 2026 +0200" }, "message": "KNOX-3364: New loadAliasesFromK8sSecrets method in entrypoint.sh to load aliases from k8s secrets. Install jq in the container as well. (#1282)" }, { "commit": "51a168f52ee412bf0374717a8a0fc2a12a6fbaab", "tree": "f433c1b8e87d742f032ab76b6e22b213d356a9f1", "parents": [ "f6c9adf7912e8baa027a5b8c101cb9ab729c1149" ], "author": { "name": "hanicz", "email": "hanicz@users.noreply.github.com", "time": "Fri Jun 26 15:57:28 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jun 26 15:57:28 2026 +0200" }, "message": "KNOX-3363: Document create-k8s-alias, create-list-aliases and update export-cert and list-alias KnoxCLI commands (#1281)" }, { "commit": "f6c9adf7912e8baa027a5b8c101cb9ab729c1149", "tree": "e6fd795c0b1bd7e49a42e9190e95e1905604f04a", "parents": [ "8a1332bdfdaaa75a1fa084262b020c9247a31a95" ], "author": { "name": "hanicz", "email": "hanicz@users.noreply.github.com", "time": "Fri Jun 26 12:22:38 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jun 26 12:22:38 2026 +0200" }, "message": "KNOX-3360: create-k8s-alias command to save aliases from k8s secrets (#1279)\n\n* KNOX-3360: create-k8s-alias command to save aliases from k8s secrets\n\n* KNOX-3360: Check all secrets for validity before alias creation" }, { "commit": "8a1332bdfdaaa75a1fa084262b020c9247a31a95", "tree": "2f6f79ed968d7f6860b781c9ec16dba3c6965b2f", "parents": [ "d9978443c041add98d386655d5069f6e99bbf4b5" ], "author": { "name": "David Han", "email": "handavid@users.noreply.github.com", "time": "Thu Jun 25 04:56:36 2026 -0500" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jun 25 11:56:36 2026 +0200" }, "message": "KNOX-3341: LDAP proxy backend handles general searches (#1274)\n\nThis commit improves the behavior of the LdapProxyBackend to handle broader search requests\nsuch as retrieving all users, all groups, or filtering by attributes other than uid.\n\nA \"search\" method was added to the LdapBackend interface to support broader search requests.\n\nLdapProxyBackend implements this method by converting the search base, objectclass, and user\nidentifier attribute from proxy values to values recognized by the remote LDAP backend.\nLdapProxyBackend.createProxyEntry was factored out into a new RemoteSchemaConverter class. This class\nalso contains methods for converting the search filter and DNs. The conversions in the search filter\nare further supported by a new FilterMappingVisitor class which will traverse the ExprNode tree and replace\nvalues as needed.\nResult entries are likewise converted from the remote values to the proxy values. As part of the mapping,\nthe AD \u0027userAccountControl\u0027 attribute type is mapped into the \u0027nsAccountLock\u0027 attribute type. A new\nDisabledUserInterceptor is implemented to perform this conversion. This interceptor can also be\nconfigured to remove disabled entries from the results.\n\nGroup membership retrieval is modified to use \u0027getUserGroupEntries\u0027 as a common starting point\nthen branch into separate codepaths for using \u0027memberOf\u0027 or not.\n\nFileBackend simply maps the filter back into user search." }, { "commit": "d9978443c041add98d386655d5069f6e99bbf4b5", "tree": "6e220e919bf511b5854d98cae46369ad6d0c26c8", "parents": [ "aca611f1c603f77ee0a73997d4a9eee2409fd795" ], "author": { "name": "hanicz", "email": "hanicz@users.noreply.github.com", "time": "Tue Jun 23 14:13:52 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jun 23 14:13:52 2026 +0200" }, "message": "KNOX-3357: Upgrade Webshell UI frameworks/libraries (#1276)" }, { "commit": "aca611f1c603f77ee0a73997d4a9eee2409fd795", "tree": "2b641b5b6cdeaf4901358d8f2736b149d362b025", "parents": [ "9f945f8bd379396eb3fb49c85030fe0244fe4b19" ], "author": { "name": "hanicz", "email": "hanicz@users.noreply.github.com", "time": "Tue Jun 23 14:08:40 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jun 23 14:08:40 2026 +0200" }, "message": "KNOX-3234: Upgrade Admin UI Angular to 21+, bootstrap to 5+ (#1249)\n\n* KNOX-3234: Upgrade Admin UI Angular to 21+, bootstrap to 5+\n\n* KNOX-3234: Fixed editor scroll, separated components into ts,html and css" }, { "commit": "9f945f8bd379396eb3fb49c85030fe0244fe4b19", "tree": "cc84097b2baac9dcc37162f17c38217aeab538f1", "parents": [ "24dccd701813c370b766f9fd3a9ed1ebef26bbd4" ], "author": { "name": "Sandor Molnar", "email": "smolnar@apache.org", "time": "Tue Jun 23 11:58:54 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jun 23 11:58:54 2026 +0200" }, "message": "KNOX-3358: Support configurable bind credentials for the embedded Knox LDAP service (#1275)" }, { "commit": "24dccd701813c370b766f9fd3a9ed1ebef26bbd4", "tree": "12221e15649aa920a86b8ee9d4ed0f7b8a92e0df", "parents": [ "c3f55243fba023261ae91b80b5534aaa460ed114" ], "author": { "name": "Sandor Molnar", "email": "smolnar@apache.org", "time": "Sun Jun 21 10:04:13 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sun Jun 21 10:04:13 2026 +0200" }, "message": "KNOX:3353: Add Docker-based integration tests for k8s ServiceAccountValidator (#1271)" }, { "commit": "c3f55243fba023261ae91b80b5534aaa460ed114", "tree": "f96a8efd02dc3d7612b4d908474ef4528e46ab15", "parents": [ "01fbedc790f3b35a7070f61eda84af396c9e15cf" ], "author": { "name": "Sandor Molnar", "email": "smolnar@apache.org", "time": "Fri Jun 19 17:46:10 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jun 19 17:46:10 2026 +0200" }, "message": "KNOX-3356: Allow Cloudera Manager service discovery over cleartext HTTP (#1272)" }, { "commit": "01fbedc790f3b35a7070f61eda84af396c9e15cf", "tree": "c7dffb6263fbebda6b62ab55a7fa8a748a9780db", "parents": [ "755c4bc1f2c97a16d2f8d79f16a4db089f1ca075" ], "author": { "name": "Sandor Molnar", "email": "smolnar@apache.org", "time": "Fri Jun 19 09:20:14 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jun 19 09:20:14 2026 +0200" }, "message": "KNOX-3353: Eliminate K8sPreAuthFederationFilter and consolidate logic in ServiceAccountValidator (#1269)\n\n* KNOX-3353: Refactor PreAuthService to use lazy, instance-based validator discovery\n\nThis change replaces the static initializer in PreAuthService with lazy, instance-based loading to ensure ServiceLoader respects the Thread Context ClassLoader of the specific filter instance. This resolves discovery issues where providers in separate JARs (like the K8s validator) were missed due to premature static initialization." }, { "commit": "755c4bc1f2c97a16d2f8d79f16a4db089f1ca075", "tree": "48910ea70b3b5fb2011b449ae5e9cfe731bd5f47", "parents": [ "f5fce559eea14a7f71580c0cb506f728c7a2aa27" ], "author": { "name": "hanicz", "email": "hanicz@users.noreply.github.com", "time": "Thu Jun 18 13:47:58 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jun 18 13:47:58 2026 +0200" }, "message": "KNOX-3352: k8s pre-auth validator for service account annotation (#1268)\n\n* KNOX-3353: New K8s pre-auth provider\n\n* KNOX-3353: Fix k8s deps" }, { "commit": "f5fce559eea14a7f71580c0cb506f728c7a2aa27", "tree": "3564071c1661cc1725031574143c8c81efba7422", "parents": [ "5d410895d452a6fe8b270a59ffce8d3a48237160" ], "author": { "name": "Sandor Molnar", "email": "smolnar@apache.org", "time": "Thu Jun 18 11:53:46 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jun 18 11:53:46 2026 +0200" }, "message": "KNOX-3354: Remove index suffix from actor groups header for roles in AbstractAuthResource (#1267)" }, { "commit": "5d410895d452a6fe8b270a59ffce8d3a48237160", "tree": "e3abbd626f7286aa14331fb75c8161b1f914d0b5", "parents": [ "9812cec2eb01889456e48db2aa9005ddc2fc1912" ], "author": { "name": "lmccay", "email": "lmccay@apache.org", "time": "Tue Jun 16 11:12:59 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jun 16 11:12:59 2026 -0400" }, "message": "KNOX-3347 - Introduce TokenExchangePrincipal for extending Act claim … (#1262)\n\n* KNOX-3347 - Introduce TokenExchangePrincipal for extending Act claim for token_exchange" }, { "commit": "9812cec2eb01889456e48db2aa9005ddc2fc1912", "tree": "dfba09ed78e28ebc542ec7df2c7d2ef6c97c385f", "parents": [ "13d2f1f34b3b5a274e7591afaa5d72eac01dee82" ], "author": { "name": "Sandor Molnar", "email": "smolnar@apache.org", "time": "Tue Jun 16 11:17:30 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jun 16 11:17:30 2026 +0200" }, "message": "KNOX-3351: Resolve LDAP roles for users with no groups (#1266)" }, { "commit": "13d2f1f34b3b5a274e7591afaa5d72eac01dee82", "tree": "516df6c2cc9fef91a75ec58713066a5c3adfa263", "parents": [ "644246b12564e40915dbc44d6eeddfb4c92ade3a" ], "author": { "name": "hanicz", "email": "hanicz@users.noreply.github.com", "time": "Tue Jun 16 09:39:49 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jun 16 09:39:49 2026 +0200" }, "message": "KNOX-3352: Set scheme for Iceberg REST catalog based on ssl enabled c… (#1265)\n\n* KNOX-3352: Set scheme for Iceberg REST catalog based on ssl enabled config\n\n* KNOX-3352: Fix unit test" }, { "commit": "644246b12564e40915dbc44d6eeddfb4c92ade3a", "tree": "d9b617b9aa986b4b588046573c0d206d3556925f", "parents": [ "0c8838511f2918b6b13b8293f4db04febe2f5fa0" ], "author": { "name": "David Han", "email": "handavid@users.noreply.github.com", "time": "Mon Jun 15 05:13:08 2026 -0500" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 15 12:13:08 2026 +0200" }, "message": "KNOX-3340: Add Control for LDAPRolesLookupInterceptor (#1258)\n\nThis commit adds a RolesLookupBypassControl for use with the LDAPRolesLookupInterceptor.\nThe LDAPRolesLookupInterceptor will skip role mapping if this control is present and true\nin the request." }, { "commit": "0c8838511f2918b6b13b8293f4db04febe2f5fa0", "tree": "4711d3a42438afc6ade12b36641be0172280c25a", "parents": [ "10eedcc34a8bfd8d09c946ad95f6801d9ada6c35" ], "author": { "name": "lmccay", "email": "lmccay@apache.org", "time": "Fri Jun 12 14:43:20 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jun 12 14:43:20 2026 -0400" }, "message": "KNOX-3334 - Introduce ActorChainPrincipal for RFC 8693 instead of ImpersonatedPrincipal (#1257)\n\n* KNOX-3334 - Introduce ActorChainPrincipal for RFC 8693 instead of ImpersonatedPrincipal" }, { "commit": "10eedcc34a8bfd8d09c946ad95f6801d9ada6c35", "tree": "3453730e7e798823e1a9728f356791190dd1dc77", "parents": [ "fe0786de6709e72dc9ba5ed8be27ec5ba19f37cf" ], "author": { "name": "Raghav Maheshwari", "email": "168407455+Raghav-Mah3shwari@users.noreply.github.com", "time": "Fri Jun 12 20:43:31 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jun 12 17:13:31 2026 +0200" }, "message": "KNOX-3335: Add pylint pre-push linting for .github/workflows/tests Python integration tests (#1260)" }, { "commit": "fe0786de6709e72dc9ba5ed8be27ec5ba19f37cf", "tree": "218ef8a9110387de2688878710a93a211f48fbaa", "parents": [ "7e74d43e520f2db215fea0470e259151bb7f67ed" ], "author": { "name": "hanicz", "email": "hanicz@users.noreply.github.com", "time": "Fri Jun 12 16:23:36 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jun 12 16:23:36 2026 +0200" }, "message": "KNOX-3348: Upgrade BouncyCastle to 1.84 (#1261)" }, { "commit": "7e74d43e520f2db215fea0470e259151bb7f67ed", "tree": "5165e6057e44a762962cc88cc5bf4d986468642d", "parents": [ "7c94926b1cc967212ed12beb8aa36054677548d8" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Fri Jun 12 10:57:22 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jun 12 10:57:22 2026 +0200" }, "message": "Bump org.apache.commons:commons-configuration2 from 2.10.1 to 2.15.0 (#1238)\n\nBumps org.apache.commons:commons-configuration2 from 2.10.1 to 2.15.0.\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.commons:commons-configuration2\n dependency-version: 2.15.0\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "7c94926b1cc967212ed12beb8aa36054677548d8", "tree": "95577852d98b77a9b19a65cdf9cb244aaaefb51b", "parents": [ "ccdb3fc2b9e9ea19bd0ed4a778fb3f9c921db2e6" ], "author": { "name": "hanicz", "email": "hanicz@users.noreply.github.com", "time": "Thu Jun 11 12:11:31 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jun 11 12:11:31 2026 +0200" }, "message": "KNOX-3345: Fix intermittent testRefreshGatewayConfig test issue (#1259)" }, { "commit": "ccdb3fc2b9e9ea19bd0ed4a778fb3f9c921db2e6", "tree": "2b0f82bd6c1986ba0a8de81d82d5f654c513a958", "parents": [ "aae8f98482da039b15555cbbe686d4a9b1dbd7c0" ], "author": { "name": "Sandor Molnar", "email": "smolnar@apache.org", "time": "Wed Jun 10 15:16:43 2026 +0200" }, "committer": { "name": "Sandor Molnar", "email": "smolnar@apache.org", "time": "Wed Jun 10 17:23:48 2026 +0200" }, "message": "KNOX-3345: ignore GatewayServerTest.testRefreshGatewayConfig temporarily (#1255)\n" }, { "commit": "aae8f98482da039b15555cbbe686d4a9b1dbd7c0", "tree": "30deda3af8de3b86686679e554ab9634a90f012d", "parents": [ "344c393efe5e77814a685b346737c86dc41d494c" ], "author": { "name": "hanicz", "email": "hanicz@users.noreply.github.com", "time": "Wed Jun 10 12:47:29 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jun 10 12:47:29 2026 +0200" }, "message": "KNOX-3294: Upgrade bootstrap to 5+ on login,logout and redirecting pages (#1252)" }, { "commit": "344c393efe5e77814a685b346737c86dc41d494c", "tree": "45075de5d0478f8f7a974de109ff89b5b6062900", "parents": [ "8342af3d3186d536504fd64c2c3af4865a78e795" ], "author": { "name": "Sandor Molnar", "email": "smolnar@apache.org", "time": "Wed Jun 10 11:26:30 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jun 10 11:26:30 2026 +0200" }, "message": "KNOX-3343: Fix NPE when cacheKeyHeader is not found in the request (#1254)" }, { "commit": "8342af3d3186d536504fd64c2c3af4865a78e795", "tree": "25aaf2b85085d641c8e7858ca1ca056c613c4a2e", "parents": [ "9c6647e5f53902647906ac92bf15b9041691c110" ], "author": { "name": "Sandor Molnar", "email": "smolnar@apache.org", "time": "Wed Jun 10 10:21:53 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jun 10 10:21:53 2026 +0200" }, "message": "KNOX-3342: Fixed NPE in HadoopGroupFilter when hadoopGroups instance wasn\u0027t set (#1253)" }, { "commit": "9c6647e5f53902647906ac92bf15b9041691c110", "tree": "86eec55f2954cd2eacce54b15e2b324f32885ae7", "parents": [ "fc2987e73bcacf2b49b3683b6f823fccbb497c74" ], "author": { "name": "Sandor Molnar", "email": "smolnar@apache.org", "time": "Tue Jun 09 18:07:10 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jun 09 18:07:10 2026 +0200" }, "message": "KNOX-3337: Add optional LDAP role lookup support (#1247)" }, { "commit": "fc2987e73bcacf2b49b3683b6f823fccbb497c74", "tree": "5937b1af4c43277a6a3a8d62b142a5011f683e99", "parents": [ "fafd793d74d061e4ad61a567dfb006873c8fccf1" ], "author": { "name": "David Han", "email": "handavid@users.noreply.github.com", "time": "Tue Jun 09 02:00:12 2026 -0500" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jun 09 09:00:12 2026 +0200" }, "message": "KNOX-3330: Handle interceptor name collisions (#1251)\n\nPartition IDs are taken from the interceptor names with whitespace removed.\nThis could lead to potential collisions in the Partition IDs. This change\nadds a numerical suffix in the case of collision to ensure that the Partition\nIDs are unique. " }, { "commit": "fafd793d74d061e4ad61a567dfb006873c8fccf1", "tree": "f4a895bd7a37d2b99d2a18c3843bbfc34a4859a4", "parents": [ "33df7d5da5faf02728a587953fbddaec494ef220" ], "author": { "name": "hanicz", "email": "hanicz@users.noreply.github.com", "time": "Tue Jun 09 07:54:35 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jun 09 07:54:35 2026 +0200" }, "message": "KNOX-3336: New LDAP Service Factory (#1250)" }, { "commit": "33df7d5da5faf02728a587953fbddaec494ef220", "tree": "693d98244d9c79c63ebd1ce4fb7a0c4e3785dfaf", "parents": [ "d1c3046cc0e38cfddabe8c5576fa3c8bce131034" ], "author": { "name": "David Han", "email": "handavid@users.noreply.github.com", "time": "Mon Jun 08 05:30:24 2026 -0500" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 08 12:30:24 2026 +0200" }, "message": "KNOX-3330: Refactor LDAP Proxy configuration to support multiple backends (#1240)" }, { "commit": "d1c3046cc0e38cfddabe8c5576fa3c8bce131034", "tree": "90de5e93baa8908cd280fcc7783a1ff6dc05aaa5", "parents": [ "ea3a6e0668c40fe4bcc5f225a7ef8275b0b41a3f" ], "author": { "name": "Sandor Molnar", "email": "smolnar@apache.org", "time": "Thu Jun 04 12:27:48 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jun 04 12:27:48 2026 +0200" }, "message": "KNOX-3318: document LDAP service (#1227)" }, { "commit": "ea3a6e0668c40fe4bcc5f225a7ef8275b0b41a3f", "tree": "f6059ec9c279393035199d970b0764c0913034b5", "parents": [ "edbe02436f9677a9a52898a80fb86509334b3982" ], "author": { "name": "hanicz", "email": "hanicz@users.noreply.github.com", "time": "Wed Jun 03 19:47:50 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jun 03 19:47:50 2026 +0200" }, "message": "KNOX-3339: Upgrade log4j2 to 2.26.0 (#1248)" }, { "commit": "edbe02436f9677a9a52898a80fb86509334b3982", "tree": "484f8f199feb32f7f95c35d00bd136b2dde7a9fd", "parents": [ "810abcd046ddb04b5f936b3708df6c9e63ff4a37" ], "author": { "name": "Sandor Molnar", "email": "smolnar@apache.org", "time": "Wed Jun 03 06:39:48 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jun 03 06:39:48 2026 +0200" }, "message": "KNOX-3328: Implement recursive group resolution for LDAP proxy (#1236)" }, { "commit": "810abcd046ddb04b5f936b3708df6c9e63ff4a37", "tree": "52b30ffb3acf505c77889db5bdbcb832d6cc59ca", "parents": [ "be8679c17915c2733b3e5d42f6458a1badc0ea41" ], "author": { "name": "hanicz", "email": "hanicz@users.noreply.github.com", "time": "Tue Jun 02 15:19:26 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jun 02 15:19:26 2026 +0200" }, "message": "KNOX-3329: New database truststore type config (#1246)" }, { "commit": "be8679c17915c2733b3e5d42f6458a1badc0ea41", "tree": "bedf8c5b3921fa94640c0dacc49d21b6c0899811", "parents": [ "e5ff30067f98c1de8b0d91a8bdcaf91e1b82964f" ], "author": { "name": "hanicz", "email": "hanicz@users.noreply.github.com", "time": "Mon Jun 01 12:35:41 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 01 12:35:41 2026 +0200" }, "message": "KNOX-3332: Add listeners on gateway config changes (#1243)\n\n* KNOX-3332: New gatewayconfig change listener\n\n* KNOX-3332: Improve testOnGatewayConfigChanged test\n\n* KNOX-3332: Moved the listener into KnoxLDAPService\n\n* KNOX-3332: Simplify restart logic" }, { "commit": "e5ff30067f98c1de8b0d91a8bdcaf91e1b82964f", "tree": "4f1932c76c3a74833013198f5bb6aca71ada1d17", "parents": [ "e738c080f631f5b63568502d2b761c9d5d099bf8" ], "author": { "name": "Sandor Molnar", "email": "smolnar@apache.org", "time": "Thu May 28 16:11:00 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu May 28 16:11:00 2026 +0200" }, "message": "KNOX-3331: Add Maven option to skip Angular UI modules (#1241)" }, { "commit": "e738c080f631f5b63568502d2b761c9d5d099bf8", "tree": "640525450f8a53f43ff0bad7c400f1142c39feb1", "parents": [ "6549f4ee732eb8ad13d99bf191ba768dbecca688" ], "author": { "name": "Sandor Molnar", "email": "smolnar@apache.org", "time": "Thu May 28 15:14:58 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu May 28 15:14:58 2026 +0200" }, "message": "KNOX-3328: Add Docker-based integration tests for Knox LDAP service (#1242)" }, { "commit": "6549f4ee732eb8ad13d99bf191ba768dbecca688", "tree": "d00d0884942adf5d4cff450e60b122c13fe91474", "parents": [ "488e94a361ce84e90666bee1a3741be545f74f1a" ], "author": { "name": "Sandor Molnar", "email": "smolnar@apache.org", "time": "Mon May 25 21:11:44 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon May 25 21:11:44 2026 +0200" }, "message": "KNOX-3256: Refactor Docker build to use local Maven artifacts and unify CI/Dev workflows (#1239)" }, { "commit": "488e94a361ce84e90666bee1a3741be545f74f1a", "tree": "518c4419191f10e088ab0e26a02dac3041c2d6c9", "parents": [ "d4eecad43e74d6c31ce7d56bf6421a4d1bf745ae" ], "author": { "name": "hanicz", "email": "hanicz@users.noreply.github.com", "time": "Wed May 20 16:53:24 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed May 20 16:53:24 2026 +0200" }, "message": "KNOX-3326: Add TCPS support for Oracle DB (#1237)" }, { "commit": "d4eecad43e74d6c31ce7d56bf6421a4d1bf745ae", "tree": "19a82cdb4a524c3f091d8e27e3c6db11c96ed5ec", "parents": [ "8d59c6c4593fde0e619669024fce8ef8f1fc486b" ], "author": { "name": "Sandor Molnar", "email": "smolnar@apache.org", "time": "Wed May 20 14:51:40 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed May 20 14:51:40 2026 +0200" }, "message": "KNOX-3327: Support periodic refresh of gateway configuration (#1235)" }, { "commit": "8d59c6c4593fde0e619669024fce8ef8f1fc486b", "tree": "e5e94a1da4fa52ec8be03ef20c9cad99e041281e", "parents": [ "0cc10cbcb7cc4a4ac9a1d4a92e94714f798b755e" ], "author": { "name": "Sandeep Moré", "email": "moresandeep@gmail.com", "time": "Mon May 18 16:46:47 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon May 18 16:46:47 2026 -0400" }, "message": "KNOX-3325 - Bump maven enforcer version (#1234)" }, { "commit": "0cc10cbcb7cc4a4ac9a1d4a92e94714f798b755e", "tree": "76a3e9ec721294a8de89610c3719fe677e9f0688", "parents": [ "0610fd9e3f73afbb5fdb92b50ab9a7e7e0df6c01" ], "author": { "name": "Sandor Molnar", "email": "smolnar@apache.org", "time": "Mon May 18 11:50:15 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon May 18 11:50:15 2026 +0200" }, "message": "KNOX-3320: Document logout flows in Knox (#1228)" }, { "commit": "0610fd9e3f73afbb5fdb92b50ab9a7e7e0df6c01", "tree": "ab92405feda1d0b587867afc81da757ef9615629", "parents": [ "cb4114151b8fb355e545e6ce9cf0170741355f36" ], "author": { "name": "Keshav Katkar", "email": "lawlie8@pm.me", "time": "Mon May 18 12:29:57 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon May 18 08:59:57 2026 +0200" }, "message": "KNOX-3322: Upgrade Postgresql to 42.7.11 to Fix CVE\u0027s (#1231)" }, { "commit": "cb4114151b8fb355e545e6ce9cf0170741355f36", "tree": "f1983eb592f63afb6c9f0ff0f74b2b1963268600", "parents": [ "f79717bf80b592e719913abea910c9423f418e74" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon May 18 08:41:41 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon May 18 08:41:41 2026 +0200" }, "message": "Bump org.apache.mina:mina-core from 2.2.4 to 2.2.7 (#1226)\n\nBumps [org.apache.mina:mina-core](https://github.com/apache/mina) from 2.2.4 to 2.2.7.\n- [Commits](https://github.com/apache/mina/compare/2.2.4...2.2.7)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.mina:mina-core\n dependency-version: 2.2.7\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "f79717bf80b592e719913abea910c9423f418e74", "tree": "e0be1371c844d072d24c87c76e33d5c5790df563", "parents": [ "96cd8f66f77ea3c57896ac18849890e4c26a6ee7" ], "author": { "name": "Sandeep Moré", "email": "moresandeep@gmail.com", "time": "Sat May 16 06:30:09 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat May 16 06:30:09 2026 -0400" }, "message": "KNOX-3323 - Upgrade dompurify version (#1232)" }, { "commit": "96cd8f66f77ea3c57896ac18849890e4c26a6ee7", "tree": "9b5c35db2270c4f6d862e5ce7f9a96226a8f5bcb", "parents": [ "f54608484dac74bc76863a3651cc9f0c8be55c40" ], "author": { "name": "Sandeep Moré", "email": "moresandeep@gmail.com", "time": "Wed May 13 22:41:02 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed May 13 22:41:02 2026 -0400" }, "message": "KNOX-3319 : Ranger REST API not fully implemented in cdp-proxy-api (Dineshkumar Yadav \u003cdineshkumar.yadav@outlook.com\u003e) (#1230)" }, { "commit": "f54608484dac74bc76863a3651cc9f0c8be55c40", "tree": "55df9bd18dfe38cf7dc16a8799d02194274664b3", "parents": [ "7b5e5186e67bdad34de1a1783c7729b2887cc92d" ], "author": { "name": "lmccay", "email": "lmccay@apache.org", "time": "Wed May 13 09:25:48 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed May 13 09:25:48 2026 -0400" }, "message": "KNOX-3321 - KnoxToken Support for RFC 8693 Token Exchange act Claim (#1229)" }, { "commit": "7b5e5186e67bdad34de1a1783c7729b2887cc92d", "tree": "2ad9166216a23277f014352e5e2183ae5787645d", "parents": [ "fb707882a29260a19a17f0cce6168e0ec3e318e8" ], "author": { "name": "Sandor Molnar", "email": "smolnar@apache.org", "time": "Fri May 08 12:04:46 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri May 08 12:04:46 2026 +0200" }, "message": "KNOX-3317: Fixed NPE when no token-metadata-headers are declared for ICEBERG-REST (#1225)" }, { "commit": "fb707882a29260a19a17f0cce6168e0ec3e318e8", "tree": "3336e695b4f9f41cdab67ff22bc419ae8b54ca5f", "parents": [ "df175163e76403ec984ee9740429c9e4fd9222c8" ], "author": { "name": "lmccay", "email": "lmccay@apache.org", "time": "Wed May 06 09:58:50 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed May 06 09:58:50 2026 -0400" }, "message": "KNOX-3312 - Client Credentials Flow with HTTP Basic needs Unwrapped S… (#1219)\n\nKNOX-3312 - Client Credentials Flow with HTTP Basic needs Unwrapped Servlet Request" }, { "commit": "df175163e76403ec984ee9740429c9e4fd9222c8", "tree": "38e8a05f784917d84f3ce818d545ba0a1e0f4b20", "parents": [ "37fbbde37763cf39a00ba63d4d55277c5e61c710" ], "author": { "name": "hanicz", "email": "hanicz@users.noreply.github.com", "time": "Wed May 06 13:51:16 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed May 06 13:51:16 2026 +0200" }, "message": "KNOX-3315: Adds BCFKS as an option cert export (#1221)\n\n* KNOX-3315: Adds BCFKS as an option cert export\n\n* KNOX-3315: Address review comments" }, { "commit": "37fbbde37763cf39a00ba63d4d55277c5e61c710", "tree": "ebd36d31da481332eebe9f00fe4653c26bb4798c", "parents": [ "4f94d957c8f2da9a2a8e3efedfa1ca9fc2b482bc" ], "author": { "name": "hanicz", "email": "hanicz@users.noreply.github.com", "time": "Tue May 05 15:45:31 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue May 05 15:45:31 2026 +0200" }, "message": "KNOX-3314: Ensure secure length for encryptQueryString generated by descriptors (#1220)" }, { "commit": "4f94d957c8f2da9a2a8e3efedfa1ca9fc2b482bc", "tree": "c272b1bf79c612aab7cbe7cdcf9f715ab25d0f1f", "parents": [ "762593a265865b8bcb98f65d6d7ed2b7bdf31d14" ], "author": { "name": "hanicz", "email": "hanicz@users.noreply.github.com", "time": "Wed Apr 29 13:00:06 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Apr 29 13:00:06 2026 +0200" }, "message": "KNOX-3311: Fix X509CertificateUtil.fetchPublicCertsFromServer issue w… (#1217)\n\n* KNOX-3311: Fix X509CertificateUtil.fetchPublicCertsFromServer issue where default truststore can\u0027t be loaded due to invalid/missing password\n\n* KNOX-3311: Added unit tests" }, { "commit": "762593a265865b8bcb98f65d6d7ed2b7bdf31d14", "tree": "a2fdefc764b9e40c7cd5a2885e252a979cb8eddd", "parents": [ "a8d2016e16d7132ecad5a2d5d6bf7bd867963b98" ], "author": { "name": "Sandor Molnar", "email": "smolnar@apache.org", "time": "Tue Apr 28 11:50:20 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Apr 28 11:50:20 2026 +0200" }, "message": "KNOX-3310: Fix redundant ALIAS_PASSPHRASE assignment and improve logging (#1216)" }, { "commit": "a8d2016e16d7132ecad5a2d5d6bf7bd867963b98", "tree": "9ef5a93a8697e26293ba866e9f4484d7cbe1607e", "parents": [ "e39a318ae895c6ffdfbe089bad5b8b76286d62d5" ], "author": { "name": "Sandor Molnar", "email": "smolnar@apache.org", "time": "Fri Apr 24 16:45:53 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Apr 24 16:45:53 2026 +0200" }, "message": "KNOX-3303: Subject created during identity assertion should include TokenIdPrincipal, if any (#1214)" }, { "commit": "e39a318ae895c6ffdfbe089bad5b8b76286d62d5", "tree": "3bea66328b5bf81cfb205358e45638b0dd6393c7", "parents": [ "dced0376dbaed7e5cc3f0c3513b90a841fe7b9cd" ], "author": { "name": "lmccay", "email": "lmccay@apache.org", "time": "Fri Apr 24 04:06:15 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Apr 24 10:06:15 2026 +0200" }, "message": "KNOX-3308 - Token Exchange Flow using wrong param name (#1211)" }, { "commit": "dced0376dbaed7e5cc3f0c3513b90a841fe7b9cd", "tree": "df5e32b56e29c6907f94ce7c42f3c527277628c2", "parents": [ "4988a16a022b5cc030864906ce1ade7e1c213620" ], "author": { "name": "Sandeep Moré", "email": "moresandeep@gmail.com", "time": "Thu Apr 23 14:55:07 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Apr 23 14:55:07 2026 -0400" }, "message": "KNOX-3304 - Support for Openshift/SCC + Make docker entrypoint idempotent (#1209) + Docker build issue fix (contributed by @sneethiraj)" }, { "commit": "4988a16a022b5cc030864906ce1ade7e1c213620", "tree": "6b5742dca90db135a12afdcbc5333a89beecfaa4", "parents": [ "bad8a3e7295a6026e4b32b7478ff3d2e76de6eaf" ], "author": { "name": "Sandor Molnar", "email": "smolnar@apache.org", "time": "Thu Apr 23 20:47:03 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Apr 23 20:47:03 2026 +0200" }, "message": "KNOX-3303: Support configurable \u0027sub\u0027 claim reconciliation and client_id claim in Client Credentials flow (#1208)\n\nImplement thirdPartyApp topology config to toggle \u0027sub\u0027 claim between client_id and userName.\nAdd client_id claim to access tokens issued during client credentials token exchange." }, { "commit": "bad8a3e7295a6026e4b32b7478ff3d2e76de6eaf", "tree": "addc52014a7cb6920195869b38812058eacd3364", "parents": [ "7646fea76da77f82c39907311f99e572faa685e1" ], "author": { "name": "hanicz", "email": "hanicz@users.noreply.github.com", "time": "Thu Apr 23 12:15:05 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Apr 23 12:15:05 2026 +0200" }, "message": "KNOX-3306: Make server startup fail if a forbidden security algorithm… (#1212)\n\n* KNOX-3306: Make server startup fail if a forbidden security algorithm is configured for Knox in a FIPS environment\n\n* KNOX-3306: Address review\n\n* KNOX-3306: Fix ForbiddenAPI call" }, { "commit": "7646fea76da77f82c39907311f99e572faa685e1", "tree": "fea5c7c4c517a3bf04285444a8be44940c3c0b80", "parents": [ "5e873023f88e13d5876f4a5c6d014bb0c3ea7581" ], "author": { "name": "Phil Zampino", "email": "pzampino@apache.org", "time": "Wed Apr 22 12:13:55 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Apr 22 12:13:55 2026 -0400" }, "message": "KNOX-3307: Upgrade jackson-core to 2.18.6 (#1210)" }, { "commit": "5e873023f88e13d5876f4a5c6d014bb0c3ea7581", "tree": "2873bd9bcf47469640248d918d56512804479d70", "parents": [ "72cc4ce4ecad12aaecea42d114639306d7d75b56" ], "author": { "name": "Sandor Molnar", "email": "smolnar@apache.org", "time": "Tue Apr 21 16:27:57 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Apr 21 16:27:57 2026 +0200" }, "message": "KNOX-3302: Falling back to gateway-level credential store while looking up LDAP system password (#1207)" }, { "commit": "72cc4ce4ecad12aaecea42d114639306d7d75b56", "tree": "9e2385fe8f63e33f5f2a61502185034f1cd7bef0", "parents": [ "dd021c3599e5261a9f57b3841d47441813e20855" ], "author": { "name": "Sandor Molnar", "email": "smolnar@apache.org", "time": "Tue Apr 21 11:24:36 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Apr 21 11:24:36 2026 +0200" }, "message": "KNOX-3301: Added missing API_KEY icon on Token Management page (#1206)" }, { "commit": "dd021c3599e5261a9f57b3841d47441813e20855", "tree": "f5cfe0a3718bde240247f92e2688f4936ee7076d", "parents": [ "16fc47b579876fd80ed9bb4d0d9646029e3fcd38" ], "author": { "name": "Selvamohan Neethiraj", "email": "sneethir@apache.org", "time": "Thu Apr 16 00:55:10 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Apr 16 06:55:10 2026 +0200" }, "message": "KNOX-3299: adding inline documentation for usage of env. var: TRUSTSTORE_IMPORTS (#1201)" }, { "commit": "16fc47b579876fd80ed9bb4d0d9646029e3fcd38", "tree": "cd0cf12e1e5fa80d45574ca9a7b070b83ea711b9", "parents": [ "a38c9f6366bdc05d3872cef18b3432dce42e11c6" ], "author": { "name": "hanicz", "email": "hanicz@users.noreply.github.com", "time": "Wed Apr 15 14:55:23 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Apr 15 14:55:23 2026 +0200" }, "message": "KNOX-3298: Change ApiClientFactory password check to isNotBlank (#1200)" }, { "commit": "a38c9f6366bdc05d3872cef18b3432dce42e11c6", "tree": "66a4b0afd4a21e1174f57a6ac455d75ee7f0b9e2", "parents": [ "e52a16953d5e67826919925cf368f44e041486cc" ], "author": { "name": "Selvamohan Neethiraj", "email": "sneethir@infotekies.com", "time": "Wed Apr 15 03:55:58 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Apr 15 09:55:58 2026 +0200" }, "message": "KNOX-3297: Docker entrypoint script has issues that prevents this image being run as docker container and as a pod in k8s (#1197)" }, { "commit": "e52a16953d5e67826919925cf368f44e041486cc", "tree": "208d905c788d5f17cc3a5f6cc47a2b6c04cca275", "parents": [ "3bca5f10bb2f3e7214f25626fe203791121fd7ce" ], "author": { "name": "Raghav Maheshwari", "email": "168407455+Raghav-Mah3shwari@users.noreply.github.com", "time": "Fri Apr 10 20:34:06 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Apr 10 17:04:06 2026 +0200" }, "message": "KNOX-3296: Expand CI integration tests: health metrics, HSTS, and KnoxLDAP auth paths (#1196)\n\n* KNOX-3296: Expand CI integration tests: health metrics, HSTS, and KnoxLDAP auth paths\n\n* KNOX-3296: Added test descriptions\n\n* Address review feedback on workflow integration tests" }, { "commit": "3bca5f10bb2f3e7214f25626fe203791121fd7ce", "tree": "01228bf272806d8f38bbdddb568980123222ed8f", "parents": [ "fa75d218dc706b3f7f96c2567fa0c8a2a2a692ba" ], "author": { "name": "Raghav Maheshwari", "email": "168407455+Raghav-Mah3shwari@users.noreply.github.com", "time": "Thu Apr 09 20:21:06 2026 +0530" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Apr 09 16:51:06 2026 +0200" }, "message": "KNOX-3293: Add integration tests: health metrics JSON, KnoxLDAP preauth/extauthz paths, RemoteAuth extauthz (#1194)\n\n* KNOX-3293: Add integration tests: health metrics JSON, KnoxLDAP preauth/extauthz paths, RemoteAuth extauthz\n\n* Refactoered tests and made a common util file" }, { "commit": "fa75d218dc706b3f7f96c2567fa0c8a2a2a692ba", "tree": "031c422617c14bdc67e79e439279376f47ae653c", "parents": [ "2fed77ba60b0cc626e0421508e18b42e8b9f296f" ], "author": { "name": "hanicz", "email": "hanicz@users.noreply.github.com", "time": "Thu Apr 09 15:59:28 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Apr 09 15:59:28 2026 +0200" }, "message": "KNOX-3295: Set default type to JWT in issued knox token headers (#1195)\n\n* KNOX-3295: Set default type to JWT in issued knox token headers\n\n* KNOX-3295: Simplify new unit tests" }, { "commit": "2fed77ba60b0cc626e0421508e18b42e8b9f296f", "tree": "0845763b81daf34aef8c3b8ba688086209320a6a", "parents": [ "72a48456e6a7e224d3bc7996c828257c7e4f3711" ], "author": { "name": "Sandeep Moré", "email": "moresandeep@gmail.com", "time": "Wed Apr 01 09:37:55 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Apr 01 09:37:55 2026 -0400" }, "message": "KNOX-3292 - Fix github workflow that pushes knox docker image to apache docker hub (#1193)" }, { "commit": "72a48456e6a7e224d3bc7996c828257c7e4f3711", "tree": "c38b47ddfa4cb5f0e2ce0067356c95c059cf254d", "parents": [ "47e8e7a4a37b81c00f66120ca42f8428f503ab1c" ], "author": { "name": "Sandor Molnar", "email": "smolnar@apache.org", "time": "Tue Mar 31 23:22:04 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Mar 31 17:22:04 2026 -0400" }, "message": "KNOX-3287: RAP truststore password alias improvements (#1190)\n\n* KNOX-3287: RAP truststore password alias improvements\n\n* KNOX-3287 - Fix build failures\n\n---------\n\nCo-authored-by: Sandeep Moré \u003cmoresandeep@gmail.com\u003e" }, { "commit": "47e8e7a4a37b81c00f66120ca42f8428f503ab1c", "tree": "d94e9974a372d84580371ca75cc77d77683cbc98", "parents": [ "0c1415f0795ce5532b2437578bd93b955d6734ad" ], "author": { "name": "Hean Chhinling", "email": "92643868+Hean-Chhinling@users.noreply.github.com", "time": "Tue Mar 31 18:47:54 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Mar 31 12:47:54 2026 -0400" }, "message": "KNOX-3286: update rewrite rule to put behind knox-proxy when navigate to scheduler-ui (#1185)\n\n* KNOX-3286: update rewrite rule to put behind knox-proxy when navigate to scheduler-ui\n\n* KNOX-3286: add the slash to match the scheduler-ui path" }, { "commit": "0c1415f0795ce5532b2437578bd93b955d6734ad", "tree": "d94e9974a372d84580371ca75cc77d77683cbc98", "parents": [ "811e7edaeffe9493d91c3009f018ca2895dcdbfb" ], "author": { "name": "Hean Chhinling", "email": "92643868+Hean-Chhinling@users.noreply.github.com", "time": "Tue Mar 31 16:51:59 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Mar 31 10:51:59 2026 -0400" }, "message": "KNOX-3286: update rewrite rule to put behind knox-proxy when navigate to scheduler-ui (#1185)\n\n* KNOX-3286: update rewrite rule to put behind knox-proxy when navigate to scheduler-ui\n\n* KNOX-3286: add the slash to match the scheduler-ui path" } ], "next": "811e7edaeffe9493d91c3009f018ca2895dcdbfb" }