)]}' { "log": [ { "commit": "426ce58811576484b3ada3c6dea52468d5c8ab1b", "tree": "058b3493b5c0eed9c795d44f68b4985ac5b0f948", "parents": [ "09c944ad9e80e99726d9011e95738798b048db85" ], "author": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Tue Oct 27 22:34:02 2026 +0100" }, "committer": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Tue Oct 27 23:26:11 2026 +0100" }, "message": "Update ATR metadata\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n" }, { "commit": "09c944ad9e80e99726d9011e95738798b048db85", "tree": "d8282ec363880e29dbb6855ca168f36806491f88", "parents": [ "29875424117d87a996398880ab2d0456748f3940" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sat Oct 24 16:38:37 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sat Oct 24 22:45:48 2026 +0200" }, "message": "Ignore SLF4J 2.x in Dependabot\n\nMaven 3 exports slf4j-api 1.7.x to plugins, so this component stays on\nSLF4J 1.7.x. See apache/maven-parent#623." }, { "commit": "29875424117d87a996398880ab2d0456748f3940", "tree": "a79b6781063e88a5e662f209822a87d2ca21cc65", "parents": [ "25e87e8749fa0e1e6b79dddefde3ba4b2e075d8f" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Oct 22 07:44:51 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Oct 22 07:44:51 2026 +0200" }, "message": "Bump org.apache.mina:mina-core from 2.2.9 to 2.2.10 (#1004)\n\nBumps [org.apache.mina:mina-core](https://github.com/apache/mina) from 2.2.9 to 2.2.10.\n- [Commits](https://github.com/apache/mina/compare/2.2.9...2.2.10)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.mina:mina-core\n dependency-version: 2.2.10\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "25e87e8749fa0e1e6b79dddefde3ba4b2e075d8f", "tree": "bd55b1aa540af995d66e1d0eb31ddfe1f41baec3", "parents": [ "481d161383db54a9cdebe5b8f9991997e72a7883" ], "author": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Mon Oct 19 22:13:52 2026 +0200" }, "committer": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Mon Oct 19 22:33:20 2026 +0200" }, "message": "Use push for PR Automation and add PR Check\n\n[ci skip]\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n" }, { "commit": "481d161383db54a9cdebe5b8f9991997e72a7883", "tree": "035f51fe1976acd26a235e9c1d75331e9a94b26a", "parents": [ "7435fea2728bc9a67e9afb17e15e72ed26731853" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Sun Oct 18 07:44:36 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sun Oct 18 07:44:36 2026 +0200" }, "message": "Bump com.github.mwiede:jsch from 2.28.7 to 2.28.8 (#1002)\n\nBumps [com.github.mwiede:jsch](https://github.com/mwiede/jsch) from 2.28.7 to 2.28.8.\n- [Release notes](https://github.com/mwiede/jsch/releases)\n- [Changelog](https://github.com/mwiede/jsch/blob/master/ChangeLog)\n- [Commits](https://github.com/mwiede/jsch/compare/jsch-2.28.7...jsch-2.28.8)\n\n---\nupdated-dependencies:\n- dependency-name: com.github.mwiede:jsch\n dependency-version: 2.28.8\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "7435fea2728bc9a67e9afb17e15e72ed26731853", "tree": "142d324a5f2b1a1e0997abe633ba72dc60133c1c", "parents": [ "53e941e516cec5cd66ae8b2939c590c569d11d3a" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Mon Oct 05 15:58:07 2026 +0000" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Wed Oct 07 14:21:06 2026 +0200" }, "message": "Test the ftps, ftph, dav+http and dav+https lookups\n\nNo WagonTestCase covers these protocols, so check that each hint finds its\nwagon class and returns a new instance on every lookup.\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n" }, { "commit": "53e941e516cec5cd66ae8b2939c590c569d11d3a", "tree": "4059976b305cb08a410156f91f6a734eeaf35ffa", "parents": [ "850c13adb78d156e5331a1db8be7f148ff758496" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Mon Oct 05 15:58:07 2026 +0000" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Wed Oct 07 14:21:06 2026 +0200" }, "message": "Test that every wagon lookup returns a new instance\n\nA wagon keeps its connection and listeners. Plexus declared every wagon\nper-lookup; since the move to JSR-330 that only holds while no wagon is\nannotated @Singleton, so check it once in WagonTestCase for every provider.\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n" }, { "commit": "850c13adb78d156e5331a1db8be7f148ff758496", "tree": "3e14512a2b768cadad2d756ad5327eeee19b65a1", "parents": [ "5ff662334ef6e81a985f003b2727824dba421b2f" ], "author": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Fri Oct 02 20:20:42 2026 +0200" }, "committer": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Fri Oct 02 20:20:42 2026 +0200" }, "message": "Simplify GH PR template boilerplate\n\n[ci skip]\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e" }, { "commit": "5ff662334ef6e81a985f003b2727824dba421b2f", "tree": "597b9fb2ddd0d0f5d0953c070fedf9af56f4fdcf", "parents": [ "53f9c0f59ebf75c0c1520e51b35bf112d5fa79cc" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Sep 29 17:28:59 2026 +0000" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Tue Sep 29 20:34:36 2026 +0200" }, "message": "Bump sshdVersion from 2.19.0 to 2.20.0\n\nBumps `sshdVersion` from 2.19.0 to 2.20.0.\n\nUpdates `org.apache.sshd:sshd-core` from 2.19.0 to 2.20.0\n- [Release notes](https://github.com/apache/mina-sshd/releases)\n- [Changelog](https://github.com/apache/mina-sshd/blob/master/CHANGES.md)\n- [Commits](https://github.com/apache/mina-sshd/compare/sshd-2.19.0...sshd-2.20.0)\n\nUpdates `org.apache.sshd:sshd-scp` from 2.19.0 to 2.20.0\n- [Release notes](https://github.com/apache/mina-sshd/releases)\n- [Changelog](https://github.com/apache/mina-sshd/blob/master/CHANGES.md)\n- [Commits](https://github.com/apache/mina-sshd/compare/sshd-2.19.0...sshd-2.20.0)\n\nUpdates `org.apache.sshd:sshd-sftp` from 2.19.0 to 2.20.0\n- [Release notes](https://github.com/apache/mina-sshd/releases)\n- [Changelog](https://github.com/apache/mina-sshd/blob/master/CHANGES.md)\n- [Commits](https://github.com/apache/mina-sshd/compare/sshd-2.19.0...sshd-2.20.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.sshd:sshd-core\n dependency-version: 2.20.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n- dependency-name: org.apache.sshd:sshd-scp\n dependency-version: 2.20.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n- dependency-name: org.apache.sshd:sshd-sftp\n dependency-version: 2.20.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "53f9c0f59ebf75c0c1520e51b35bf112d5fa79cc", "tree": "1636c794047fffd948076e74de3a004371b12291", "parents": [ "1f42eb7e969e5fef6f34a5c2c5e9ce9f8b4e0f95" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Tue Sep 29 18:36:00 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Tue Sep 29 19:27:52 2026 +0200" }, "message": "Keep Dependabot off Mockito 5 (also wagon-3.x)\n\nMockito 5 requires Java 11, and CI still builds on JDK 8.\n" }, { "commit": "1f42eb7e969e5fef6f34a5c2c5e9ce9f8b4e0f95", "tree": "10bb3bc58ff9ee26d0cba9866ed9b253a854ac42", "parents": [ "c563215639bfa378744c2b8de12306bf534eee9d" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Fri Sep 25 12:19:31 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Fri Sep 25 23:16:29 2026 +0200" }, "message": "Use inputExcludes for apache-rat 0.18\n\nKeep the rat configuration in pluginManagement; the check itself is\nactivated by the parent\u0027s java17+ profile on JDK 17+.\n\nSigned-off-by: Sylwester Lachiewicz \u003cslachiewicz@apache.org\u003e\n" }, { "commit": "c563215639bfa378744c2b8de12306bf534eee9d", "tree": "1062b889595b20d038c53768abe1d0c8c49ffc5e", "parents": [ "60400a82f8a98fd8b0b2d305f287941ca149e805" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Sep 22 08:26:09 2026 +0000" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Fri Sep 25 23:16:29 2026 +0200" }, "message": "Bump org.apache.maven:maven-parent from 49 to 50\n\nBumps [org.apache.maven:maven-parent](https://github.com/apache/maven-parent) from 49 to 50.\n- [Release notes](https://github.com/apache/maven-parent/releases)\n- [Commits](https://github.com/apache/maven-parent/commits)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven:maven-parent\n dependency-version: \u002750\u0027\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "60400a82f8a98fd8b0b2d305f287941ca149e805", "tree": "f04ea318222107509a7e183e964fe1bde7774ab3", "parents": [ "a04b17c576be3850a2c4f7fead3c37ceea1d097f" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sun Sep 20 15:55:18 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sun Sep 20 16:26:00 2026 +0200" }, "message": "Verify with Maven 4 too\n\nAdds the Maven 4 line to the shared verify matrix, as most of the estate\nalready does, so incompatibilities show in CI rather than at a user. The\nshared workflow\u0027s default goals select a run-its profile this project\ndoes not have; Maven 3 warned, Maven 4 fails, so the goals drop it.\n" }, { "commit": "a04b17c576be3850a2c4f7fead3c37ceea1d097f", "tree": "0e8529e749eb4ba63e21b525966277bdf0d14d65", "parents": [ "22b84b8a630c255e997dee14aaffb72d93599eb0" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sun Sep 20 12:06:07 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sun Sep 20 12:11:52 2026 +0200" }, "message": "Drop the JXR reports from the reporting profile\n\nSource cross-reference pages are what GitHub provides; the report re-parses\nthe whole tree on every site build for it. Follows maven-parent 48 (MPOM-462).\n" }, { "commit": "22b84b8a630c255e997dee14aaffb72d93599eb0", "tree": "d124552050dc921362fac5e73d99eb0d961c278c", "parents": [ "d3f3c36d4b13ef96ec391a678c6a0ef3851ad54a" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Thu Sep 10 12:58:14 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Thu Sep 10 13:18:02 2026 +0200" }, "message": "Migrate the site descriptor to the v2 model\n\nDoxia Sitetools warns that the pre-2.0.0 site model will break in a future version.\n" }, { "commit": "d3f3c36d4b13ef96ec391a678c6a0ef3851ad54a", "tree": "2172cc61e0914b49025a75b0b399d957dbd3c699", "parents": [ "2c625b060af2be9a616b48b0ee1c62e90a181146" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Fri Sep 04 01:22:52 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sun Sep 06 21:09:01 2026 +0200" }, "message": "Negotiate the FTPS data channel protection level\n\nAn FTPS session encrypted only on the control channel is refused by any\nserver that requires protection, with \"425 Server requires protected data\nconnection\". PROT can only be sent once authenticated, hence the post-login\nhook rather than more work in createClient. The default is P because a\ncaller asking for FTPS is asking for a protected transfer; set\ndataChannelProtection to C, or empty to send no PROT at all, for the\nprevious behaviour.\n" }, { "commit": "2c625b060af2be9a616b48b0ee1c62e90a181146", "tree": "af1193804741b17f39d3c2e236371f8b7d9d6e5c", "parents": [ "578fe1f57cbc6829558d2415dd2413991367f2f8" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Sat Sep 05 15:33:34 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat Sep 05 15:33:34 2026 +0200" }, "message": "Bump com.github.mwiede:jsch from 2.28.6 to 2.28.7 (#981)\n\nBumps [com.github.mwiede:jsch](https://github.com/mwiede/jsch) from 2.28.6 to 2.28.7.\n- [Release notes](https://github.com/mwiede/jsch/releases)\n- [Changelog](https://github.com/mwiede/jsch/blob/master/ChangeLog)\n- [Commits](https://github.com/mwiede/jsch/compare/jsch-2.28.6...jsch-2.28.7)\n\n---\nupdated-dependencies:\n- dependency-name: com.github.mwiede:jsch\n dependency-version: 2.28.7\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "578fe1f57cbc6829558d2415dd2413991367f2f8", "tree": "8286985007d79659fd760924bbbaf985b2807276", "parents": [ "c0a7f2553c7fdcafbcacf03bf45db1db7a234560" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Fri Sep 04 12:23:59 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Fri Sep 04 15:55:34 2026 +0200" }, "message": "Keep the JSR-330 annotations off the wagon transitive classpath\n\njavax.inject and org.eclipse.sisu.inject arrived as compile dependencies with the\nJSR-330 migration, so every consumer of a provider now inherits them. Any container\nthat can load a wagon already supplies both, and wagon pins sisu through maven-parent\n49 (1.0.1) while Maven ships 1.1.0, so the inherited copy is only ever a version to\nresolve away. Do not restore compile scope: provided still covers compilation, the\ntest classpath and sisu-maven-plugin\u0027s indexing.\n" }, { "commit": "c0a7f2553c7fdcafbcacf03bf45db1db7a234560", "tree": "f797b9bbf0c5f808bcb87f734804123a1dc64eb9", "parents": [ "067dae1e5486ce67c85f2bfa644199ef79e18a32" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Fri Sep 04 11:49:18 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Fri Sep 04 13:33:11 2026 +0200" }, "message": "Give MKCOL the status vocabulary RFC 4918 defines\n\nOnly 409 means an ancestor is missing, so only 409 should send the walk\nfurther back; treating every other answer that way turned a 403 or an\nauthentication failure into a confusing error about the top of the path.\nOn the way down, 405 means the collection is already there, which is as\ngood as having created it -- rejecting it failed uploads whenever a\ncollection appeared underneath us. Do not narrow either set back to\n201-only; the walk is not atomic and the server is entitled to both.\n" }, { "commit": "067dae1e5486ce67c85f2bfa644199ef79e18a32", "tree": "5bd550eb587612332f0b7210f8200bd29dc2d6a9", "parents": [ "cea31ce811fdf944b94011fbd3f5c6245e158dea" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Fri Sep 04 12:43:31 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Fri Sep 04 13:32:00 2026 +0200" }, "message": "Publish the HTTP and WebDAV wagons as JSR-330 beans\n\nThese two providers kept handwritten Plexus descriptors because each maps one\nimplementation onto several role hints, which a single @Named cannot express. Give\neach hint its own empty subclass, the way wagon-ftp and wagon-http-lightweight\nalready do, so all ten providers now resolve from the Sisu index alone.\n\nDo not restore the descriptors to add a hint: a component named there is invisible\nto any consumer that scans for @Named beans without the Plexus shim.\n" }, { "commit": "cea31ce811fdf944b94011fbd3f5c6245e158dea", "tree": "27acad9709385a1eb726a4a2a9ea7e1fb71576ac", "parents": [ "339ea980ee38b0f29d50573e3ea0c70692aac39d" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Fri Sep 04 01:31:38 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Fri Sep 04 01:31:59 2026 +0200" }, "message": "Remove wagon-1.x from protected_branches in .asf.yaml\n" }, { "commit": "339ea980ee38b0f29d50573e3ea0c70692aac39d", "tree": "69da3298cad223bf8f308b5fd98148a78407ee43", "parents": [ "6a05763fcc050bc0902b11e311c8c6e8d99a5feb" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Fri Sep 04 00:03:51 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Fri Sep 04 01:01:34 2026 +0200" }, "message": "Stop wagon-http from publishing a dependency-reduced POM\n\nThe shaded jar is attached under a classifier, so the main jar keeps\nneeding wagon-http-shared and httpclient; reducing the POM stripped them\nand left HttpWagon unloadable. Do not restore dependencyReducedPomLocation\nto fix WAGON-636 / #750 -- disabling the reduced POM outright means none\nis written to the basedir either.\n" }, { "commit": "6a05763fcc050bc0902b11e311c8c6e8d99a5feb", "tree": "0cc88f77abd3db9228c2d3f72fa52d1ec4151b58", "parents": [ "4e743d220893f90a654755256b06e991dbd7d1eb" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Fri Sep 04 00:14:02 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Fri Sep 04 01:00:35 2026 +0200" }, "message": "Replace the deprecated plexus-utils APIs in provider code\n\nStringOutputStream and IOUtil are deprecated, and plexus-utils Base64 is\nsuperseded by java.util.Base64 now the line requires Java 8. The Basic\ncredentials keep using String.getBytes() with the platform default\ncharset -- that is WAGON-627 territory and deliberately not changed here.\n" }, { "commit": "4e743d220893f90a654755256b06e991dbd7d1eb", "tree": "093667c4af8bee11dbf5e03d9318443e52e7e373", "parents": [ "05d457e572a7b68ba573c1e5cacf05d56cf86b09" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Thu Sep 03 22:49:25 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Thu Sep 03 23:24:26 2026 +0200" }, "message": "Upgrade Jetty to 9.4.58.v20250814 and de-aggregate jetty-all (#943)\n\n(cherry picked from commit f9cbb8e528226e8b38a09b6669a3c141e4ec6c9f)\n" }, { "commit": "05d457e572a7b68ba573c1e5cacf05d56cf86b09", "tree": "42e5ba22c2d518a36a3add6a9b47112e052846b2", "parents": [ "ed7dcba3cf9d523d3ec144e56c72741980d9da04" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Thu Sep 03 22:15:30 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Thu Sep 03 22:55:10 2026 +0200" }, "message": "Fix NPE in ScpExternalWagon when localFile has no parent directory\n\nWhen localFile is specified as a bare relative filename (e.g. via\nmvn gpg:sign-and-deploy-file -Dfiles\u003dartifact-sources.jar),\nlocalFile.getParentFile() returns null, causing a NullPointerException\nwhen calling getAbsolutePath().\n\nSafely resolve the working directory to localFile.getAbsoluteFile().getParentFile()\nwhen localFile.getParentFile() is null, and add offline unit tests in\nExternalScpWagonTest covering both relative and parented files.\n\nCo-authored-by: Sven Göthel \u003csgothel@jausoft.com\u003e\n" }, { "commit": "ed7dcba3cf9d523d3ec144e56c72741980d9da04", "tree": "c617310bc010257692604540eb04255f5a9977b4", "parents": [ "8fa1fe2075e9e076ecf0af131737068844a3b0e4" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Thu Sep 03 22:25:27 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Thu Sep 03 22:49:44 2026 +0200" }, "message": "Introduce automatic module names for Wagon components (#853)\n\nConfigure maven-jar-plugin in pluginManagement to write\nAutomatic-Module-Name manifest entry and define the module name\nfor each published Wagon component.\n" }, { "commit": "8fa1fe2075e9e076ecf0af131737068844a3b0e4", "tree": "eef384fa92dbf24b36a2ae761561ea199014a103", "parents": [ "d83cdc0700eb5ac772c5c84930c38e03f43cb8ee" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Thu Sep 03 20:38:58 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Thu Sep 03 21:55:00 2026 +0200" }, "message": "Migrate ScpHelperTest to JUnit 5\n" }, { "commit": "d83cdc0700eb5ac772c5c84930c38e03f43cb8ee", "tree": "d62708566110f5ee8304e2aa65e40a779fa1d567", "parents": [ "38560830a28886c54f2d3c2e1f5389d05aa96726" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sat Aug 08 19:17:52 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Thu Sep 03 21:55:00 2026 +0200" }, "message": "Address the review on the agent guard and the key preference\n\nTwo problems, both real.\n\nThe agent connectors were handed to the guard as constructor references. A\nconstructor reference resolves its class when the reference is evaluated, which\nhappens at the call site -- outside the guard it was meant to be protected by --\nso a missing connector class threw NoClassDefFoundError past the catch instead of\nskipping that agent. Verified with a cut-down case: the constructor-reference form\nescapes the guard where a lambda body is caught by it. Written as lambda bodies the\nclass is not mentioned until the body runs, which is inside the try.\n\nPreferring id_ed25519 could also fail a connection outright. The JDK grew EdDSA in\nJava 15 and this branch still targets Java 8, where JSch can only do Ed25519 through\na provider such as Bouncy Castle, which is not a dependency here -- the base\nSignatureEdDSA in the JSch jar says as much: \"SignatureEdDSA requires Java15+\". So\non Java 8 a stray id_ed25519 would be chosen and fail even with a usable id_rsa next\nto it. Ed25519 is now demoted rather than dropped when the runtime cannot use it, so\na key that works wins, while an id_ed25519 that is the only key present is still\nfound -- which is what wagon-ssh-external needs, since the host\u0027s own scp does the\ncryptography there and the JVM\u0027s capabilities say nothing about it.\n" }, { "commit": "38560830a28886c54f2d3c2e1f5389d05aa96726", "tree": "b539d5068d44c57004dfb9c2e81aec97c905c1c0", "parents": [ "e81e5db48e0c863a6facf1b116629ad144fe532e" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sat Aug 08 13:02:18 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Thu Sep 03 21:55:00 2026 +0200" }, "message": "Stop a stray key file in ~/.ssh from shadowing the SSH agent\n\nAuthentication preferred a key file over the agent whenever one existed:\nthe agent was consulted only in the else branch, and getPrivateKey()\nfalls back to a default key file whenever no password is configured. On\nany machine with a key in ~/.ssh the agent was therefore never reached,\nwhich is most machines, and pointing wagon.privateKeyDirectory at an\nempty directory was the only way to reach it.\n\nOrder the methods by how deliberate they are instead: a key named in\nsettings.xml first, then the agent, and a key file that merely happens\nto be in ~/.ssh only after that. Naming a key keeps the behaviour it\nhas today.\n\nThis does mean a reachable agent holding identities now takes precedence\nover a discovered key file. Someone whose agent holds unrelated keys\nwhile the key the server wants sits unloaded in ~/.ssh will need to load\nit, or to name it in settings.xml. Combining the two is not open to us:\nadding a file identity on top of an agent repository makes JSch push\nthat key into the user\u0027s agent, which is not ours to do.\n\nWhile here, look for the key types ssh-keygen actually produces --\nid_ed25519, id_ecdsa, id_rsa -- rather than id_dsa followed by id_rsa.\nTrying id_dsa first reached for the one type OpenSSH has refused by\ndefault for years, and the fork disables ssh-dss too. This part is in\nScpHelper, so it also changes which key wagon-ssh-external passes to\nssh with -i.\n\nThis fixes WAGON-446, on runtimes where the agent can be reached.\n" }, { "commit": "e81e5db48e0c863a6facf1b116629ad144fe532e", "tree": "7201e71bcbf1554b240ecd2f8929a57eedbb3728", "parents": [ "6eb9355791eb5cadc019cef5de02feceba84ad1a" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sat Aug 08 13:01:55 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Thu Sep 03 21:55:00 2026 +0200" }, "message": "Move wagon-ssh onto the maintained JSch fork\n\ncom.jcraft:jsch was last released in 2018 and never gained what current\nservers and current keys need. It has no rsa-sha2-256 or rsa-sha2-512,\nso RSA public key authentication fails against OpenSSH 8.8 and later,\nwhich stopped accepting SHA-1 signatures by default in 2021. It also\ncannot read the OpenSSH-v1 private key format, which ssh-keygen has\nproduced by default since OpenSSH 7.8. A key generated today is rejected\noutright, encrypted or not.\n\ncom.github.mwiede:jsch is a maintained fork of the same code under the\nsame com.jcraft.jsch package, so the provider keeps its API.\n\nThe fork carries the agent itself, so the two jsch.agentproxy artifacts\ngo. Their ConnectorFactory picked between agent kinds for us; the fork\nhas no equivalent, so the choice is now explicit, and all three kinds\nthe old stack could reach are still tried: the OpenSSH agent named by\nSSH_AUTH_SOCK, the Win32 OpenSSH agent, and Pageant. One difference is\nworth knowing: reaching the SSH_AUTH_SOCK agent needs a Unix domain\nsocket, which the JDK provides only from Java 16, and the fork declares\nno dependencies, so on Java 8 to 15 that agent is out of reach unless a\nhelper library is on the class path. The other two do not need one.\nAn agent holding no identities is now also skipped rather than being\ninstalled as an empty repository.\n\nPassing a passphrase needs care with the fork. getPrivateKey()\nsubstitutes an empty passphrase when the settings name none, which the\nold JSch quietly ignored, leaving an encrypted key to be unlocked later.\nThe fork rejects it instead, which would have failed every encrypted\nkey. Empty is therefore translated back to none before the key is added.\n" }, { "commit": "6eb9355791eb5cadc019cef5de02feceba84ad1a", "tree": "244602708c5fd66e166b9891de99cdfccca5cb19", "parents": [ "97a91772782fb06ab46400934225486a48857d55" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Thu Sep 03 18:27:36 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Thu Sep 03 18:32:43 2026 +0200" }, "message": "Honor usePreemptive for PUT requests in AbstractHttpClientWagon\n\nRemove unguarded preemptive auth priming in AbstractHttpClientWagon.put()\nso that PUT requests only authenticate preemptively when configured.\nUpdate HttpWagonTest accordingly.\n\nFixes #909.\n\n(cherry picked from commit 562cf5cfbad440cdd7767c862e6979d9b145c014)\n" }, { "commit": "97a91772782fb06ab46400934225486a48857d55", "tree": "b6d5ed9eeb3d88f2898234bb53aa18dd639cf030", "parents": [ "4166fe8dfd4320b136ac55b1532ca55ebc4eaf2c" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Thu Sep 03 18:27:34 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Thu Sep 03 18:32:43 2026 +0200" }, "message": "Preserve usePreemptive and timeouts across httpConfiguration copy and merge\n\nMake usePreemptive a Boolean so copy() and merge() preserve it when\nmerging method-level blocks with \u003call\u003e.\n\nMake connectionTimeout and readTimeout nullable in HttpMethodConfiguration\nand check isConnectionTimeoutSet()/isReadTimeoutSet() so copyConfig() does\nnot overwrite timeouts set on Wagon with defaults, and merge() allows\nsetting values back to defaults.\n\nFixes #906, fixes #908.\n\n(cherry picked from commit 0c90d4300846048b17eb820b050a6f45cdddaceb)\n" }, { "commit": "4166fe8dfd4320b136ac55b1532ca55ebc4eaf2c", "tree": "d2130dfa0ce59ea516431564794d0bb0439d3124", "parents": [ "71313d14e17e3074a31629a8293c6d4872d59649" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Thu Sep 03 18:27:30 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Thu Sep 03 18:32:43 2026 +0200" }, "message": "BasicAuthScope: map realm\u003dANY to AuthScope.ANY_REALM\n\nWhen realm is configured as \"ANY\", map to AuthScope.ANY_REALM instead of\nthe literal string \"ANY\", consistent with host and port handling.\n\nFixes #910.\n\n(cherry picked from commit cbfd3236e582560db0bc872295e7964004787a02)\n" }, { "commit": "71313d14e17e3074a31629a8293c6d4872d59649", "tree": "31287cbb81f41edcbc19e75b3c89757e303973dd", "parents": [ "5111b3198ac2d2586d5c4e218f8da4361533e1c4" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Thu Sep 03 18:27:28 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Thu Sep 03 18:32:43 2026 +0200" }, "message": "Correct test instructions in README.md\n\nREADME referenced a nonexistent run-its profile. Update to use \u0027mvn verify\u0027\nand document -Dssh-tests -Dssh-embedded\u003dtrue for running SSH provider tests.\n\nFixes #907.\n\n(cherry picked from commit a5eeb0c2afe1718dcfcd772652402c315b1d5240)\n" }, { "commit": "5111b3198ac2d2586d5c4e218f8da4361533e1c4", "tree": "fd06517152d725f3706e84ae6b0418b3508f0992", "parents": [ "a49f303ed52654d932a5e51f9bd431617f736f6d" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Wed Sep 02 01:30:13 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Thu Sep 03 18:10:13 2026 +0200" }, "message": "Keep configured HTTP headers on the repository origin across redirects\n\nFixes #956. HttpClient copies the headers of the original request onto\nevery redirected request, so headers configured for a repository through\nsetHttpHeaders or the method configuration followed redirects to other\nhosts. The wagon now records the repository origin and the configured\nheader names in the request context, and an interceptor on the shared\nclient removes those headers from any request whose target differs from\nthe origin in scheme, host or effective port. User-Agent is exempt.\nSetting -Dmaven.wagon.http.originScopedHeaders\u003dfalse restores the\nprevious behaviour.\n" }, { "commit": "a49f303ed52654d932a5e51f9bd431617f736f6d", "tree": "bf1712686ab3c56d81c0337512766d778a7edce6", "parents": [ "671f434af48a583a65ebabb41ee34f9570295072" ], "author": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Mon Aug 24 22:45:26 2026 +0200" }, "committer": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Tue Aug 25 21:17:55 2026 +0200" }, "message": "Update release-drafter config to use shared template with custom tag format\n" }, { "commit": "671f434af48a583a65ebabb41ee34f9570295072", "tree": "6c10c825f0f929a110b2d3fe2c8ab92a6b1de2f5", "parents": [ "14aaf3a79a493de2cf71b8346d424c6aa57713fe" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Aug 24 06:33:51 2026 +0000" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Mon Aug 24 13:25:56 2026 +0200" }, "message": "Bump org.codehaus.plexus:plexus-interactivity-api from 1.5.1 to 1.6.0\n\nBumps [org.codehaus.plexus:plexus-interactivity-api](https://github.com/codehaus-plexus/plexus-interactivity) from 1.5.1 to 1.6.0.\n- [Release notes](https://github.com/codehaus-plexus/plexus-interactivity/releases)\n- [Commits](https://github.com/codehaus-plexus/plexus-interactivity/compare/plexus-interactivity-1.5.1...plexus-interactivity-1.6.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.codehaus.plexus:plexus-interactivity-api\n dependency-version: 1.6.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "14aaf3a79a493de2cf71b8346d424c6aa57713fe", "tree": "1e2465918eca4440d08affa3999cd06f7eaa3bcd", "parents": [ "b212dfb95c3f02964c9a684f2f0f8bc2fd6f7a1f" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Aug 24 06:34:02 2026 +0000" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Mon Aug 24 13:25:50 2026 +0200" }, "message": "Bump org.codehaus.plexus:plexus-testing from 2.1.0 to 2.2.0\n\nBumps [org.codehaus.plexus:plexus-testing](https://github.com/codehaus-plexus/plexus-testing) from 2.1.0 to 2.2.0.\n- [Release notes](https://github.com/codehaus-plexus/plexus-testing/releases)\n- [Commits](https://github.com/codehaus-plexus/plexus-testing/compare/plexus-testing-2.1.0...plexus-testing-2.2.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.codehaus.plexus:plexus-testing\n dependency-version: 2.2.0\n dependency-type: direct:development\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "b212dfb95c3f02964c9a684f2f0f8bc2fd6f7a1f", "tree": "ed3dfad1c21956c9ec6367332ed48f156017bf88", "parents": [ "f8638c0625e23dec8f9320385f7b9ed8220ba9f9" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Aug 24 06:34:19 2026 +0000" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Mon Aug 24 13:25:32 2026 +0200" }, "message": "Bump org.codehaus.plexus:plexus-classworlds from 2.12.0 to 2.12.1\n\nBumps [org.codehaus.plexus:plexus-classworlds](https://github.com/codehaus-plexus/plexus-classworlds) from 2.12.0 to 2.12.1.\n- [Release notes](https://github.com/codehaus-plexus/plexus-classworlds/releases)\n- [Commits](https://github.com/codehaus-plexus/plexus-classworlds/compare/plexus-classworlds-2.12.0...plexus-classworlds-2.12.1)\n\n---\nupdated-dependencies:\n- dependency-name: org.codehaus.plexus:plexus-classworlds\n dependency-version: 2.12.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "f8638c0625e23dec8f9320385f7b9ed8220ba9f9", "tree": "aa2a2563c3727ca4f1987e719fb44cde774d7243", "parents": [ "2c101bcc0e9d07e67f73512c4c776ad464d68c08" ], "author": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Sun Aug 23 22:23:43 2026 +0200" }, "committer": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Mon Aug 24 08:30:12 2026 +0200" }, "message": "Update Dependabot config: add GitHub Actions for 3.x\n" }, { "commit": "2c101bcc0e9d07e67f73512c4c776ad464d68c08", "tree": "abf13e9b0154e8d424cefd1dfbc83d4e304f4309", "parents": [ "20a3a19066a03931f2affcc6f1a1140e562b11b9" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Wed Aug 19 08:15:18 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Thu Aug 20 14:14:15 2026 +0200" }, "message": "Replace the CVS examples with Git in the SCM wagon site\n\nmaven-scm has had no CVS provider since 2.0.0-M1, so the CVS deployment\nexample described a setup nobody can assemble. The section becomes the\ngeneric Git-server example; the gh-pages section stays as the GitHub\nvariant that adds the branch configuration.\n\n(cherry picked from commit 9dc97ef9a5fb90eeed766f671aea38469a745ef6)\n" }, { "commit": "20a3a19066a03931f2affcc6f1a1140e562b11b9", "tree": "5832f2e2d7830f6e878e3ffbc08655e1558e4cd2", "parents": [ "688c4a410ba4f8929b0838fadf2d14a7ebfa76f6" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Wed Aug 19 07:02:23 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Thu Aug 20 14:14:15 2026 +0200" }, "message": "Upgrade maven-scm to 2.2.1\n\n2.x dropped plexus-container-default from maven-scm-manager-plexus, so the\nexclusion no longer belongs on that dependency. It moves to\nmaven-scm-provider-gittest, where maven-scm-test still pulls the old\ncontainer in through maven-plugin-testing-harness. That path is tracked as\napache/maven-scm#1394 and is already fixed for maven-scm 2.2.2.\n\nGitScmTestUtils.setDefaultUser became setDefaultGitConfig and now throws\nIOException.\n\n(cherry picked from commit ee8532c7f05704f6b43b7194cceeead97212f02f)\n" }, { "commit": "688c4a410ba4f8929b0838fadf2d14a7ebfa76f6", "tree": "2e48f331b5e1220a8a2eb1a6e1196e63e8305bce", "parents": [ "4c4b84f7f25da0f121a960c9a57e383f56184ea1" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Wed Aug 19 06:57:54 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Thu Aug 20 14:14:15 2026 +0200" }, "message": "Drop the CVS tests from the SCM wagon\n\nmaven-scm removed every CVS provider in 2.0.0-M1, so the suite has no\nfuture once wagon-scm moves off maven-scm 1.x. It already covered less\nthan the git suite, which drives the same ScmWagon code: three cases were\nstubbed out and getIfNewer was unsupported.\n\n(cherry picked from commit 2f17732e2320c1dd7447c6b94f91dec0b2725be5)\n" }, { "commit": "4c4b84f7f25da0f121a960c9a57e383f56184ea1", "tree": "ad816f6018fab4cfbaae32486e036e8847d08ffa", "parents": [ "75501bfb4b8f62fafee04e5bc62a6c63395b3694" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Tue Aug 18 22:43:10 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Wed Aug 19 06:25:36 2026 +0200" }, "message": "Remove the dead JUnit 4 build configuration and stale references\n\nThe four junit:junit exclusions no longer exclude anything: wagon-provider-test\nstopped declaring junit, and stripping all four leaves junit:junit absent from\nevery resolved tree. Do not restore them with the managed version.\n" }, { "commit": "75501bfb4b8f62fafee04e5bc62a6c63395b3694", "tree": "1d14c4bee99dba8667a61d19e516ed361d276e55", "parents": [ "0962d3e6576bc061759888fcef2a9d6c5ed851c4" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Tue Aug 18 22:12:41 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Wed Aug 19 06:25:36 2026 +0200" }, "message": "Correct the TCK documentation and remove the unbuilt sample consumer\n\nThe sample consumer is not a reactor module and nothing references it, so it has\nnever been compiled against the TCK it demonstrates.\n" }, { "commit": "0962d3e6576bc061759888fcef2a9d6c5ed851c4", "tree": "8e15eb0f6defec6aaaf68e450797542e34198c34", "parents": [ "f289bdd5282eecb61671461b4a6d2c6d964f7966" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Tue Aug 18 15:55:30 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Tue Aug 18 21:46:13 2026 +0200" }, "message": "Migrate the published test base classes off PlexusTestCase\n\nTests needing an external cvs binary now use assumeTrue and report as skipped;\nrunTest() reported them as passing. Do not restore that to quieten CI.\n" }, { "commit": "f289bdd5282eecb61671461b4a6d2c6d964f7966", "tree": "43d1a0cc912db1ee436221572cee6d7845feca91", "parents": [ "bbaf0d3677baadba28967ee989d1460d59dcf802" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Tue Aug 18 11:27:10 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Tue Aug 18 12:28:56 2026 +0200" }, "message": "Migrate ScpWagonWithProxyTest off PlexusTestCase\n\nThis one needs a real container, unlike the other providers: AbstractJschWagon\ndeclares knownHostsProvider, interactiveUserInfo and uIKeyboardInteractive with\n@Inject, so constructing the wagon directly would leave them null and the test\nwould keep passing while exercising something else. Hence plexus-testing and\n@Inject @Named(\"scp\"), with PlexusTestConfiguration carrying over the\nSCANNING_INDEX setting the sisu-annotated providers need.\n\nwagon-ssh also gains junit-vintage-engine: five tests here still inherit their\nmethods from the published WagonTestCase, and surefire provisions the jupiter\nengine but not the vintage one.\n" }, { "commit": "bbaf0d3677baadba28967ee989d1460d59dcf802", "tree": "3289512808611ceed55fc39ca8b9559d8607984f", "parents": [ "a206db0af3e6b5d3e51bc3ca6f996af7ceede1fa" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Tue Aug 18 12:10:33 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Tue Aug 18 12:27:33 2026 +0200" }, "message": "Halve the file HugeFileDownloadTest transfers\n\nThe point of the test is a byte count that overflows an int, so the size\nonly has to exceed Integer.MAX_VALUE. It was twice that, which doubled\nthe transfer without widening what the test checks.\n\nDedicated runs of the class: 29.98s before, 5.47s and 5.50s after.\n" }, { "commit": "a206db0af3e6b5d3e51bc3ca6f996af7ceede1fa", "tree": "a9ec24dba9bc66d0fa5ff90cf11f3193c24c1cc9", "parents": [ "eddedf14affc10b86c04909c4f2fb122b306f36c" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Tue Aug 18 10:51:40 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Tue Aug 18 12:14:36 2026 +0200" }, "message": "Migrate HttpWagonHttpServerTestCase and its subclasses off PlexusTestCase\n\nThe container was only supplying Wagon.ROLE, which is HttpWagon, and\nAbstractHttpClientWagon declares no injected collaborators, so a plain\nconstructor is equivalent.\n\nThe base lifecycle method is renamed startTestServer so a subclass\n@BeforeEach cannot override it: with the same signature JUnit 5 would run\nonly the override and the server would never be created. The subclasses\ntherefore drop their super.setUp() call, since JUnit 5 runs a superclass\n@BeforeEach first on its own.\n\ngetName() came from junit.framework.TestCase and is used to build unique\ntemp file names; it now comes from an injected TestInfo, leaving the six\ncall sites unchanged.\n" }, { "commit": "eddedf14affc10b86c04909c4f2fb122b306f36c", "tree": "18f9ae0a12ed9281835844448ccb528ac613dd66", "parents": [ "b2c093dd5fbf1660e0d92f301add5576f349214c" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Mon Aug 17 21:46:15 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Mon Aug 17 23:55:56 2026 +0200" }, "message": "Migrate HugeFileDownloadTest off PlexusTestCase\n\nThe container was only supplying Wagon.ROLE \"http\", which is HttpWagon,\nand AbstractHttpClientWagon declares no injected collaborators, so a\nplain constructor is equivalent. getBasedir() becomes a local method\nwith the same semantics PlexusTestCase gave it.\n\nScpWagonWithProxyTest is deliberately left alone: AbstractJschWagon has\nthree @Inject fields, so instantiating it directly would leave them null\nand quietly test something else.\n" }, { "commit": "b2c093dd5fbf1660e0d92f301add5576f349214c", "tree": "c14170638814b4dca328105a3bd92e5a1ca12482", "parents": [ "39ce096c3e9b87b9467c9d3fcbe6a6cfd4589d24" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Mon Aug 17 20:41:07 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Mon Aug 17 23:55:56 2026 +0200" }, "message": "Migrate the standalone wagon-http tests to JUnit 5\n\nContinues a8cafa27 with the three tests in wagon-http that do not extend\nthe published bases in wagon-provider-test. Those bases stay on\nPlexusTestCase.\n\nwagon-http keeps junit and gains junit-vintage-engine: HttpWagonTest,\nHttpsWagonTest and both Preemptive variants inherit their test methods\nfrom the published HttpWagonTestCase by the testXxx() convention, and\nsurefire provisions the jupiter engine but not the vintage one.\n" }, { "commit": "39ce096c3e9b87b9467c9d3fcbe6a6cfd4589d24", "tree": "4887cdc85b5dbb43788192c88412963367f27e54", "parents": [ "c0d516c6d21d32af48707c5254e0d2542e204f6b" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Mon Aug 10 01:40:08 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Mon Aug 10 22:48:22 2026 +0200" }, "message": "Modernise the download page\n\nThis page was last touched in 2018 and still carried the ASF mirror-selection\nform. The mirror network was retired in favour of a single CDN, so that form\nnow renders a \"choose a mirror\" dropdown offering exactly one entry,\ndlcdn.apache.org. The checksum, signature and KEYS links still pointed at\nwww.apache.org/dist, which has been a 301 to downloads.apache.org for years.\n\nThe page now matches the form the rest of the Maven estate already uses,\nfinishing for this repository the sweep started in 2023:\n\n - the artifact from dlcdn.apache.org\n - the .sha512, .asc and KEYS from downloads.apache.org\n - older releases from archive.apache.org\n\nTwo things go with the mirror section, both worth a reviewer\u0027s attention:\n\n - its in-page anchors, #mirror and the version-numbered subsection anchor,\n which becomes the stable #Files. In-page only; no URL changes.\n - the paragraph linking to /guides/mini/guide-mirror-settings.html. That\n page is still live, but it is advice about configuring a repository\n mirror in settings.xml rather than about downloading a source release,\n and none of the ~43 repositories already on the current form carry it.\n Dropping it is what converges this page with the rest of the estate; say\n so on the PR if you would rather keep it here.\n\ndownload.cgi is left in place. The ASF licence header is left exactly as it\nwas.\n\nGenerated-by: Claude Opus 5 (1M context)\n" }, { "commit": "c0d516c6d21d32af48707c5254e0d2542e204f6b", "tree": "659e5851c06127fa151891609eda6c11cea128a9", "parents": [ "8ae842df017aaac4a8af5e4cbe1ed32fc16897e9" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Mon Aug 10 01:06:46 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Mon Aug 10 21:55:32 2026 +0200" }, "message": "Convert the SSH provider configuration page from xdoc to Markdown\n\nThe page is one table whose cells hold nested lists and paragraphs, which\na Markdown table cannot express -- doxia-converter emits cells broken\nacross lines and the table falls apart. The table is therefore carried\nover as inline HTML. Doxia parses it back into the same table events the\nxdoc parser produced, so the rendered markup is unchanged, striped row\nclasses included.\n\nThe page also carried the same \"Configuration\" section twice, an old\ncopy-paste that has been in the file since the site was first fixed up.\nOnly one copy is kept. Doxia had been numbering the second one, so an\nexplicit \u003ca name\u003d\"Configuration_1\"\u003e\u003c/a\u003e keeps that anchor resolving.\n\nVerified by rendering the site before and after: the page title, the\nauthor metadata, the visible text, every link target and the full set of\nanchor ids are identical, apart from the removed duplicate section.\n\nGenerated-by: Claude Opus 5 (1M context)\n" }, { "commit": "8ae842df017aaac4a8af5e4cbe1ed32fc16897e9", "tree": "06377876d6f15f48bb197bf685f7f484bbf0bf04", "parents": [ "a8cafa27ea1ffc53dcbc19b62802cab4cee71cc2" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Mon Aug 10 01:06:27 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Mon Aug 10 21:55:32 2026 +0200" }, "message": "Rename the site document ahead of converting it\n\nGit\u0027s rename detection is similarity-based, so a rename and a rewrite in\none commit is recorded as a delete plus an add and git log --follow stops\nthere. Please merge or rebase rather than squash.\n\nGenerated-by: Claude Opus 5 (1M context)\n" }, { "commit": "a8cafa27ea1ffc53dcbc19b62802cab4cee71cc2", "tree": "68276659be0c2b7920e026ce98756657a55a90b2", "parents": [ "70dba165be29ed701d1b0a67744f3b4977233026" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Mon Aug 10 02:54:13 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Mon Aug 10 11:25:38 2026 +0200" }, "message": "Migrate the standalone provider tests to JUnit 5\n\nSix tests across three provider modules extended junit.framework.TestCase\nor imported org.junit directly without depending on anything else, so they\nmove to JUnit 5 on their own.\n\nwagon-http-shared and wagon-ssh-common have nothing else on JUnit 4 and\ndrop junit:junit outright.\n\nwagon-webdav-jackrabbit keeps it. WebDavWagonTest and its three subclasses\ninherit their tests from HttpWagonTestCase, which lives in wagon-provider-\ntest\u0027s published API and still extends PlexusTestCase, so they cannot move\nuntil that does. junit-vintage-engine is added to keep them discoverable\nnow that surefire selects the JUnit Platform provider for the module.\n\nNothing that a third party can extend is touched, so this needs no decision\nabout the published test-support artifacts.\n\nGenerated-by: Claude Opus 5 (1M context)\n" }, { "commit": "70dba165be29ed701d1b0a67744f3b4977233026", "tree": "31f3f51da06e61e638d0c0cb3c78a066d680de92", "parents": [ "1f8a49bfe20267c196d5bd79f6282055d01e3834" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sun Aug 09 17:36:29 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sun Aug 09 19:17:09 2026 +0200" }, "message": "Convert the index page from xdoc to Markdown\n\nConverted with doxia-converter. The YAML front matter is kept: it carries\nthe page\u0027s title and author, which the skin turns into \u003ctitle\u003e and\n\u003cmeta name\u003d\"author\"\u003e.\n\nThe dependency diagram\u0027s image map is written back as inline HTML. The\nconverter drops it -- \"Unknown Sink event \u0027map\u0027, ignoring!\" -- which would\nhave silently turned a diagram with 19 clickable module links into a plain\npicture. Doxia passes the raw block through unchanged.\n\nVerified by rendering the site before and after and comparing the two on\ntitle, author, visible text and every link target.\n\nGenerated-by: Claude Opus 5 (1M context)\n" }, { "commit": "1f8a49bfe20267c196d5bd79f6282055d01e3834", "tree": "51fb5a4765d020d3f5d85404fed84bc32c4e61bb", "parents": [ "d3ba3463677e9f6fdcf68b562e989587c34dfb70" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sun Aug 09 17:34:48 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sun Aug 09 19:17:09 2026 +0200" }, "message": "Rename the site document ahead of converting it\n\nGit\u0027s rename detection is similarity-based, so a rename and a rewrite in\none commit is recorded as a delete plus an add and git log --follow stops\nthere. Please merge or rebase rather than squash.\n\nGenerated-by: Claude Opus 5 (1M context)\n" }, { "commit": "d3ba3463677e9f6fdcf68b562e989587c34dfb70", "tree": "cd046eb37ef9ed2489656730f3ab81117b353731", "parents": [ "629f0f5d68995033dd2b9c14e5ee4538fcd94341" ], "author": { "name": "Claude", "email": "noreply@anthropic.com", "time": "Sat Aug 08 13:26:46 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sat Aug 08 19:15:49 2026 +0200" }, "message": "Revive the embedded ssh server tests and run them in CI\n\nThe -Dssh-tests suite has been dead for years. Three faults kept the tests that\nuse the embedded Apache MINA sshd from passing:\n\n* ShellCommand flushed the channel\u0027s output stream after calling\n ExitCallback.onExit, which closes it. The resulting SshChannelClosedException\n tore down the session, so the command after every executeCommand failed with\n \"session is down\".\n* The expected modification time on a get was compared at millisecond precision,\n but the scp \"T\" header carries whole seconds.\n* The SFTP subsystem was not registered on the embedded server. OpenSSH 9 and\n later drive scp over SFTP, so wagon-ssh-external\u0027s tests, which shell out to\n the host\u0027s scp, could not connect at all.\n\nScpWagon now maps a missing file to ResourceDoesNotExistException when the server\nreports it with the scp fatal-error code (2) and says so in the message, not only\nwith the warning code (1) that OpenSSH uses.\n\nCI passes -Dssh-tests -Dssh-embedded\u003dtrue, which runs the 42 embedded jsch tests.\n\nThis is the 3.x change from #904 without its fourth part. There, a TestPrompter\nand a test component descriptor had to be supplied by hand, because\nplexus-interactivity-api stopped shipping META-INF/plexus/components.xml in 1.3\nand plexus-container-default could see neither the sisu index nor DefaultPrompter\u0027s\nconstructor injection. Since #911 the tests run on the Sisu shim, which reads that\nindex and satisfies the constructor, so the real DefaultPrompter resolves and the\nworkaround is not needed here. Verified: 42 tests, 0 failures without it.\n" }, { "commit": "629f0f5d68995033dd2b9c14e5ee4538fcd94341", "tree": "a52197106d7a048db54a030a5b870ef33a53c74e", "parents": [ "4af0905a1ac803123d2d3f63af38243fcd5c7af0" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sat Aug 08 18:46:14 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sat Aug 08 19:00:49 2026 +0200" }, "message": "Add the user, development and HTTP configuration guides\n\nForward-port of #905 and 20c10e64, which landed on wagon-3.x. master had no\nprose documentation at all beyond the index page.\n\nThe guides are rewritten where 3.x and master have since diverged, so they\ndescribe this branch rather than that one:\n\n* Providers are registered with JSR-330 @Named and indexed by sisu-maven-plugin,\n not with @plexus.component javadoc tags processed by plexus-component-metadata.\n The section now covers @Typed, which 3.x needs no equivalent of, and says why\n a Wagon must not be @Singleton.\n* Configurable properties are plain fields with setters and an initialiser for\n the default; there is no @plexus.configuration tag any more.\n* The TCK takes \u003cuseCaseConfigsResource\u003e pointing at a classpath resource rather\n than an inline \u003cuseCaseConfigs\u003e tree.\n* The note about the long-form header syntax being needed by\n plexus-container-default is dropped, since the tests no longer run on it.\n* The extension example uses 4.0.0-M1.\n\nThe embedding section needed more than a touch-up. It told callers to build a\nbare DefaultPlexusContainer and said descriptors are picked up automatically,\nwhich stopped being true here: with classpath scanning off, such a container\nreads only components.xml and so finds wagon-http and wagon-webdav-jackrabbit,\nwhich keep hand-written descriptors for their several hints, and no other\nprovider. It now shows SCANNING_INDEX and names the partial failure, since a\nlookup that silently stops resolving is easy to misread.\n" }, { "commit": "4af0905a1ac803123d2d3f63af38243fcd5c7af0", "tree": "40e46205ddcc57f9ed067a3e6519b34739dccb12", "parents": [ "c620795d7e58bbc32ad261e5f9b6e722837cdb55" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sat Aug 08 17:00:44 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sat Aug 08 18:21:15 2026 +0200" }, "message": "Replace the Plexus javadoc tags with JSR-330 annotations\n\nThe @plexus.component / @plexus.requirement / @plexus.configuration javadoc tags\npredate even the Plexus annotations, and needed plexus-component-metadata to turn\nthem into descriptors at build time. Replace them with @Named and @Inject, and let\nsisu-maven-plugin index the beans instead.\n\nNotes on the less mechanical parts:\n\n- Plexus defaults to singleton, JSR-330 to per-lookup. Eighteen components declared\n instantiation-strategy\u003d\"per-lookup\" and so need nothing, but\n LightweightHttpWagonAuthenticator and PrompterUIKeyboardInteractive did not, and\n are marked @Singleton to keep the scope they have today. That matters for the\n authenticator, which registers itself with Authenticator.setDefault and keys\n wagons by ThreadLocal: one instance per wagon would let concurrent wagons\n overwrite the JVM-wide authenticator.\n\n- Sisu publishes a bean under every interface it implements, whereas Plexus\n published it under the single declared role. AbstractJschWagon implements both\n SshWagon and CommandExecutor, and ScpExternalWagon implements CommandExecutor, so\n ScpWagon, SftpWagon and ScpExternalWagon would gain CommandExecutor bindings they\n do not have today -- and ScpCommandExecutor and ScpExternalCommandExecutor, which\n extend them, would collide with their parents on the same hint. @Typed pins each\n one back to its Plexus role.\n\n- The @plexus.configuration defaults are dropped rather than translated. Six of them\n restate a value the field already initialises, and the other four never set a\n default at all. Per-server configuration keeps arriving through the resolver\u0027s\n wagon configurator, which works on the instance.\n\n- wagon-http and wagon-webdav-jackrabbit map one implementation onto several hints,\n which a single @Named cannot express, so they keep their handwritten descriptors.\n The Plexus shim reads those regardless of scanning.\n\nThe test containers now need SCANNING_INDEX, since the beans they look up are no\nlonger in a descriptor.\n" }, { "commit": "c620795d7e58bbc32ad261e5f9b6e722837cdb55", "tree": "5b426847105f1616d6a0e982c5c27ab3c93392fd", "parents": [ "3f282b4cbe65ef0db7632956245f3a7b4015c0aa" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sat Aug 08 16:34:34 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sat Aug 08 17:05:31 2026 +0200" }, "message": "Give the SCM tests a provider map they can write to\n\nThe container injects AbstractScmManager\u0027s provider map as an immutable map, so\nsetScmProvider throws UnsupportedOperationException and every wagon-scm test that\nforces a particular provider implementation fails in setUp.\n\nSwap in a mutable copy first. It has to be done reflectively: the field is private\nwith only a protected setter, and DefaultScmManager declares a field of the same\nname for the providers it has injected, so the copy has to target the field\nAbstractScmManager itself writes to.\n" }, { "commit": "3f282b4cbe65ef0db7632956245f3a7b4015c0aa", "tree": "63b4300105c104e58b069b6884b875ba33956de7", "parents": [ "918dd3e10b7dd9feccc5594348ee9ae50ca0276c" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sat Aug 08 16:15:34 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sat Aug 08 17:05:31 2026 +0200" }, "message": "Keep the old Plexus container off the wagon-scm test classpath\n\nmaven-scm-manager-plexus brings plexus-container-default 1.0-alpha-9, which\nputs a second copy of PlexusContainer and PlexusTestCase on the test classpath\nalongside the shim. The alpha-9 copy won, and its tearDown is not null-guarded,\nso every test failed with a NullPointerException that hid the real cause.\n" }, { "commit": "918dd3e10b7dd9feccc5594348ee9ae50ca0276c", "tree": "88291698dc3b85c2d00eb1e424c994121b467513", "parents": [ "fa1cbe87c9e46a3126645bdef91aa1341e59f68d" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sat Aug 08 16:15:34 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sat Aug 08 17:05:31 2026 +0200" }, "message": "Load the TCK use-case configuration from its own resource\n\nWagonTestCaseConfigurator took its per-use-case configuration as a nested\n\u003cuseCaseConfigs\u003e tree inside the component descriptor. The Sisu shim cannot\ninject that: asking for a PlexusConfiguration fails to convert, and asking for\na String yields only the element\u0027s text content, which is empty.\n\nPoint the descriptor at a classpath resource instead and parse it on demand.\nA plain string injects cleanly, and the configuration itself is unchanged.\n" }, { "commit": "fa1cbe87c9e46a3126645bdef91aa1341e59f68d", "tree": "b150cdda83cf7efdb43c6cd988b1fbd025f36479", "parents": [ "1a604b5e9b9a66b11d3d98cfe3219ab89ca05182" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sat Aug 08 16:15:25 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sat Aug 08 17:05:31 2026 +0200" }, "message": "Replace the Plexus container with the Sisu Plexus shim\n\nplexus-container-default is the original Plexus container and cannot read\nMETA-INF/sisu indexes, so it blocks any move to JSR-330 annotations. Swap it\nfor org.eclipse.sisu.plexus, which supplies PlexusContainer and PlexusTestCase\nand reads both component descriptors and annotated beans. Guice is \"provided\"\nin the Sisu POM, so it has to be declared explicitly.\n\nNothing else changes yet: the shim reads META-INF/plexus/components.xml with\nclasspath scanning off, so the existing descriptors keep working untouched.\n\nDrop version.sisu-maven-plugin, which pinned the managed Sisu artifacts to\n0.9.0.M3 and was otherwise unused; maven-parent supplies 1.0.1, which is\nJava 8 bytecode just like 0.9.0.M3.\n\nWagonTestCase.customizeContext() went with it. The no-argument signature never\noverrode PlexusTestCase.customizeContext(Context) -- not in the Sisu shim and\nnot in plexus-container-default either -- so the method has never been called\nand the \"test.repository\" value it set is read nowhere.\n" }, { "commit": "1a604b5e9b9a66b11d3d98cfe3219ab89ca05182", "tree": "487d707733863f0b78b6a27c9b2b9543819b2d58", "parents": [ "185ca9d63bdc1c9917a235daa3053ec994298805" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Fri Aug 07 23:28:04 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sat Aug 08 11:16:08 2026 +0200" }, "message": "Reject malformed multistatus responses instead of reading past them\n\nA DAV:response carrying no href was being skipped. That moves the next\nresponse into its place, and both callers read meaning into position:\nisDirectory inspects the first entry, and getFileList takes the first\nentry to be the collection it asked about. A server omitting an href\ncould therefore have had a child directory silently dropped from a\nlisting and another one classified from the wrong resource. Such a\nresponse is now a parse error, as it was before.\n\nStop reading a propstat that carries no status as successful, too. RFC\n4918 requires the element, so a propstat without one reports success for\nnothing, and treating it as 200 contradicted the rule stated on\nResponse.isCollection that only propstats reporting 200 are consulted.\nIt also went beyond porting the behaviour, on the strength of a lenient\nserver nobody has actually met.\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n" }, { "commit": "185ca9d63bdc1c9917a235daa3053ec994298805", "tree": "0023ef79fdec76ce26a0fc76dad36158e41b3b7c", "parents": [ "041c6eed26be947e0ef4fde4273f0c9319fb02b6" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Fri Aug 07 23:02:31 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sat Aug 08 11:16:08 2026 +0200" }, "message": "Refuse to parse rather than fall back to an unsecured XML parser\n\nWhere disallow-doctype-decl is unavailable the parser falls back to\nrefusing external entities, but those two calls were allowed to fail as\nquietly as the first. A parser supporting none of the three would then\nhave read remote input with only secure processing in force, which\nbounds resource use and says nothing about what the document may reach.\nThe fallback now insists on both entity features and reports a parser it\ncannot secure as a configuration error.\n\nAlso deny the external DTD subset, which the entity features do not\ngovern, tolerating parsers that do not recognise the property.\n\nThe branch only runs on a JAXP implementation other than the platform\none, so it cannot be reached from a test; it was exercised by\nconfiguring a factory the same way by hand, where a DOCTYPE parses, as\nit did under Jackrabbit, and an external entity yields empty text.\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n" }, { "commit": "041c6eed26be947e0ef4fde4273f0c9319fb02b6", "tree": "3e8e74c14139c524b9c8c0776f852cb2c9675a76", "parents": [ "9655e5b08b5766cb2262cd2ccb562b8c80673ae0" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Fri Aug 07 22:58:55 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sat Aug 08 11:16:08 2026 +0200" }, "message": "Correct two claims the new WebDAV code made about its own behaviour\n\nThe multistatus javadoc cited RFC 4918 section 9.1 as mandating that a\nserver list the request URI first. It mandates no ordering at all. The\nassumption is an observed server behaviour and predates this class,\nwhich the comment it replaced described accurately; getFileList still\nskips the first entry as before, but the reason is now stated honestly.\n\nHttpStatus.SC_MULTI_STATUS does exist in HttpCore, so the local constant\nclaiming otherwise is gone.\n\nAlso drop the local-name fallback in isDavElement, which a namespace\naware parser can never reach, and send the PROPFIND body as\napplication/xml to match what Jackrabbit put on the wire. Tolerating an\nabsent namespace is kept and now noted as a deliberate relaxation.\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n" }, { "commit": "9655e5b08b5766cb2262cd2ccb562b8c80673ae0", "tree": "5d42b90ed717bdee78525ecb82c47b0d4ef62d18", "parents": [ "02cf3cf4575e4d57f49cafcdcdda1f6026b53cba" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Fri Aug 07 22:45:46 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sat Aug 08 11:16:08 2026 +0200" }, "message": "Address review feedback on the WebDAV request handling\n\nDo not let parser hardening break the transport. disallow-doctype-decl\nis a Xerces feature and setFeature rejects features a parser does not\nknow, so a JAXP implementation other than the platform one would have\nmade every PROPFIND fail. It is now applied only if supported, falling\nback to refusing external entities, and a configuration failure is\nreported as such instead of being blamed on the response body.\n\nInstall an ErrorHandler on the DocumentBuilder. Without one the parser\nwrites its own diagnostics to stderr before throwing, so a server\nanswering 207 with a broken body would have littered the build output.\nFatal errors still surface as an exception.\n\nKeep a 207 carrying no body a transport failure. It was being read as\n\"not a collection\", which surfaced as ResourceDoesNotExistException and\ntold the resolver the artifact was simply absent.\n\nAlso correct the comment about repeated hrefs, which described dropping\nlater duplicates when the last one in fact wins, and record why a\npropstat without a status is read as successful.\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n" }, { "commit": "02cf3cf4575e4d57f49cafcdcdda1f6026b53cba", "tree": "cccdf222ef97054e9ca36791f648e4d84a8f16ed", "parents": [ "b425de00017bf99561490139b57745b1c5021345" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Fri Aug 07 22:25:07 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sat Aug 08 11:16:08 2026 +0200" }, "message": "Replace the jackrabbit-webdav dependency with the requests actually used\n\nThis Wagon speaks a very small subset of WebDAV: MKCOL to create a\ncollection, PROPFIND Depth:0 on resourcetype to tell a collection from a\nplain resource, and PROPFIND Depth:1 to list a collection. The Depth:1\nrequest nominally asks for displayname but never reads it, deriving\nevery entry from the response href instead.\n\njackrabbit-webdav models all of WebDAV -- locking, observation,\nordering, versioning, search, transactions -- so those three requests\nwere pulling in a dependency whose scope far exceeds what is needed. The\nrequests and the multistatus parsing now live in this module, in Wagon\u0027s\nown package rather than squatting Jackrabbit\u0027s.\n\nThe parser keeps the behaviour the callers rely on: responses stay in\ndocument order, because getFileList expects the requested collection\nfirst per RFC 4918 section 9.1, and hrefs are deduplicated the way\nJackrabbit\u0027s href-keyed map did. Only propstat elements reporting 200\nare consulted for resourcetype. Since a multistatus body is remote\ninput, the parser also refuses DOCTYPE declarations.\n\nBehaviour changes in two spots, both in the safe direction: a PROPFIND\nanswering something other than 207 Multi-Status is no longer parsed for\na body, and an empty multistatus no longer raises\nArrayIndexOutOfBoundsException from isDirectory.\n\nThe artifactId keeps the jackrabbit name so that consumers do not break.\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n" }, { "commit": "b425de00017bf99561490139b57745b1c5021345", "tree": "8f3a7858fd076f79b7accd3dbf51540fe6feee75", "parents": [ "44514d824ea4f797a27d92df1976080576db0e54" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Fri Aug 07 22:22:44 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sat Aug 08 11:16:08 2026 +0200" }, "message": "Remove the vendored copies of two Jackrabbit classes\n\nMultiStatus was forked here so that responses would keep their document\norder, which getFileList depends on. Jackrabbit\u0027s own MultiStatus has\nsince been changed to a LinkedHashMap, so the fork no longer differs\nfrom the class it shadows.\n\nShadowing is the problem: the released jar carried\norg/apache/jackrabbit/webdav/MultiStatus.class, which also exists in\njackrabbit-webdav, so which of the two won depended on classpath order.\n\nXmlRequestEntity is left over from Jackrabbit 2.14, which no longer\nships or references it, and nothing in this module ever used it.\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n" }, { "commit": "44514d824ea4f797a27d92df1976080576db0e54", "tree": "a71a001c62f6aaf05f080fdebd23e375359d5374", "parents": [ "b249e5f0e1427d4b26f30a425d4b82918892d94c" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Fri Aug 07 21:10:38 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Fri Aug 07 21:52:07 2026 +0200" }, "message": "Bump org.apache.jackrabbit:jackrabbit-webdav from 2.14.4 to 2.20.17\n\n2.20.17 is the last release of the 2.20.x line, which is the newest\nJackrabbit line still targeting Java 8. From 2.21.23 onwards the jars\nare compiled for Java 11 (jackrabbit-parent switched java.version 1.8\nto javaTargetVersion 11), so 2.22.x cannot be used while Wagon builds\nfor Java 8.\n\nThis also drops the commons-httpclient exclusion: 2.14.4 still declared\na dependency on the long-retired commons-httpclient 3.1, while 2.20.x\ndepends only on httpclient 4.5.14 / httpcore 4.4.16. The exclusion is\nnow dead configuration.\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n" }, { "commit": "b249e5f0e1427d4b26f30a425d4b82918892d94c", "tree": "d2a9630a9c2cdba8cab2d6be0f08bb67ec4f3cf1", "parents": [ "d626c4f826dd458e6558284039775b6f0f7a3a0d" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Fri Aug 07 11:41:08 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Fri Aug 07 15:58:14 2026 +0200" }, "message": "Restore the document metadata dropped when the pages were ported\n\nAn APT document opens with a header block giving its title, authors and date, and\ndoxia-converter turns that into YAML front matter. The port removed the front\nmatter along with the converter\u0027s per-line licence comments, so the generated\npages lost their author and date meta tags, and took their title from the first\nheading rather than from the document title.\n\nThe front matter has to come first in the file: the Markdown parser only looks for\nit when the source begins with \"---\". A licence header ahead of it would hide it,\nand RAT is happy either way.\n" }, { "commit": "d626c4f826dd458e6558284039775b6f0f7a3a0d", "tree": "8323b769fbda494ff5657724e98431aeac2cb694", "parents": [ "21df876181b67f447a296a9e0a5a00d61fb69aa5" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Thu Aug 06 13:53:05 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Thu Aug 06 19:21:37 2026 +0200" }, "message": "Port the site documentation from APT to Markdown\n\n12 page(s) converted with doxia-converter and then cleaned up by hand:\n\n- \u003c\u003c\u003ccode\u003e\u003e\u003e becomes backticks, \u003c\u003cbold\u003e\u003e becomes **bold**, {{{url}text}}\n becomes [text](url)\n- the ASF license header becomes a single block HTML comment\n- a page whose only Velocity reference was ${project.name} is now a plain\n .md with the title spelled out\n- a page that keeps a reference stays a .vm. Velocity reads ## as a line\n comment and would silently swallow every ATX heading below level one, so\n subsections use setext underlines and anything deeper is wrapped in\n #[[ ... ]]#\n- a reference APT rendered literally is escaped with ${esc.d}, which always\n yields a literal dollar; a backslash only works when the reference itself\n resolves\n\nVerified by building the site before and after and comparing every generated\npage: the visible text and the link targets are unchanged apart from\n\u003cb\u003e/\u003ci\u003e becoming \u003cstrong\u003e/\u003cem\u003e and quotes and ellipses in prose picking up\nthe Markdown module\u0027s typographic substitution.\n" }, { "commit": "21df876181b67f447a296a9e0a5a00d61fb69aa5", "tree": "9df64d545c3cfd0074f6cad9190dcf89326f429e", "parents": [ "70b05f33a640c3fcaa79de7ff598739179a1d5e3" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Thu Aug 06 13:53:05 2026 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Thu Aug 06 19:21:37 2026 +0200" }, "message": "Rename the site documents ahead of converting them\n\nA pure rename, so that git records it and `git log --follow` and `git blame` still\nreach the history of each page after the conversion that follows. The content is\nstill APT at this point and the site does not build between the two commits.\n" }, { "commit": "70b05f33a640c3fcaa79de7ff598739179a1d5e3", "tree": "d095a70785072cec814f345d35dfbd5b9fc2024a", "parents": [ "2ac8e5c4e2837f665b7e29aee42706ba43618919" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Jul 14 08:36:36 2026 +0000" }, "committer": { "name": "Slawomir Jaranowski", "email": "s.jaranowski@gmail.com", "time": "Sun Aug 02 16:42:51 2026 +0200" }, "message": "Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml\n\nBumps [apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml](https://github.com/apache/maven-gh-actions-shared) from 4 to 5.\n- [Commits](https://github.com/apache/maven-gh-actions-shared/compare/v4...v5)\n\n---\nupdated-dependencies:\n- dependency-name: apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml\n dependency-version: \u00275\u0027\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "2ac8e5c4e2837f665b7e29aee42706ba43618919", "tree": "f5a7086e152b31aedfcce97e3cfe9a2272957185", "parents": [ "567bde7d0f70acfe5dd966ce05ba5910b3b3ad4a" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Jul 14 20:59:41 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jul 14 20:59:41 2026 +0200" }, "message": "Bump apache/maven-gh-actions-shared/.github/workflows/stale.yml (#892)\n\nBumps [apache/maven-gh-actions-shared/.github/workflows/stale.yml](https://github.com/apache/maven-gh-actions-shared) from 4 to 5.\n- [Commits](https://github.com/apache/maven-gh-actions-shared/compare/v4...v5)\n\n---\nupdated-dependencies:\n- dependency-name: apache/maven-gh-actions-shared/.github/workflows/stale.yml\n dependency-version: \u00275\u0027\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "567bde7d0f70acfe5dd966ce05ba5910b3b3ad4a", "tree": "5d3ada861faf3513791aeab21a8a543c45a236b7", "parents": [ "28bc438cf4c9feb91ac90bd60d83d897fcab23f6" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Jul 14 20:59:09 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jul 14 20:59:09 2026 +0200" }, "message": "Bump apache/maven-gh-actions-shared/.github/workflows/pr-automation.yml (#894)\n\nBumps [apache/maven-gh-actions-shared/.github/workflows/pr-automation.yml](https://github.com/apache/maven-gh-actions-shared) from 4 to 5.\n- [Commits](https://github.com/apache/maven-gh-actions-shared/compare/v4...v5)\n\n---\nupdated-dependencies:\n- dependency-name: apache/maven-gh-actions-shared/.github/workflows/pr-automation.yml\n dependency-version: \u00275\u0027\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "28bc438cf4c9feb91ac90bd60d83d897fcab23f6", "tree": "c44af854e183abd104ee1d7d3b3ae9f68d37a98a", "parents": [ "f428ec30b91c0c25daffaa4a835ec5c93b71edfb" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Jul 14 20:58:50 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jul 14 20:58:50 2026 +0200" }, "message": "Bump apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml (#891)\n\nBumps [apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml](https://github.com/apache/maven-gh-actions-shared) from 4 to 5.\n- [Commits](https://github.com/apache/maven-gh-actions-shared/compare/v4...v5)\n\n---\nupdated-dependencies:\n- dependency-name: apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml\n dependency-version: \u00275\u0027\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "f428ec30b91c0c25daffaa4a835ec5c93b71edfb", "tree": "b6411a283f10e45bb604dbac9322bf7597dae481", "parents": [ "39b8a5be6101043f6108ffec0161cb77cc3396ea" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Fri Jul 10 08:24:43 2026 +0000" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sat Jul 11 20:01:18 2026 +0200" }, "message": "Bump sshdVersion from 2.18.0 to 2.19.0\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.sshd:sshd-core\n dependency-version: 2.19.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n- dependency-name: org.apache.sshd:sshd-scp\n dependency-version: 2.19.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n- dependency-name: org.apache.sshd:sshd-sftp\n dependency-version: 2.19.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "39b8a5be6101043f6108ffec0161cb77cc3396ea", "tree": "ad1ae65f29330375ed71bc7f4d9c092b2c150717", "parents": [ "0a7dc6da60ccb3dfba4f0ef9cd857795b5aa4846" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jun 29 17:22:37 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 29 17:22:37 2026 +0200" }, "message": "Bump org.apache.maven:maven-parent from 48 to 49 (#888)\n\nBumps [org.apache.maven:maven-parent](https://github.com/apache/maven-parent) from 48 to 49.\n- [Release notes](https://github.com/apache/maven-parent/releases)\n- [Commits](https://github.com/apache/maven-parent/commits)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven:maven-parent\n dependency-version: \u002749\u0027\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "0a7dc6da60ccb3dfba4f0ef9cd857795b5aa4846", "tree": "5b5047896b725aefa752045e33452f43cab8ebd5", "parents": [ "cde73919f63bb30c6b80d1dc696967e1d2a567d9" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Fri Jun 19 08:12:39 2026 +0000" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Fri Jun 19 22:11:40 2026 +0200" }, "message": "Bump org.apache.mina:mina-core from 2.2.8 to 2.2.9\n\nBumps [org.apache.mina:mina-core](https://github.com/apache/mina) from 2.2.8 to 2.2.9.\n- [Commits](https://github.com/apache/mina/compare/2.2.8...2.2.9)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.mina:mina-core\n dependency-version: 2.2.9\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "cde73919f63bb30c6b80d1dc696967e1d2a567d9", "tree": "620325cb36cfab8c7d398124fb016667d3e4f670", "parents": [ "6c36b4655033c559925244e582fa11c03044f0cd" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Jun 04 07:36:50 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jun 04 07:36:50 2026 +0200" }, "message": "Bump org.apache.mina:mina-core from 2.2.7 to 2.2.8 (#883)\n\nBumps [org.apache.mina:mina-core](https://github.com/apache/mina) from 2.2.7 to 2.2.8.\n- [Commits](https://github.com/apache/mina/compare/2.2.7...2.2.8)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.mina:mina-core\n dependency-version: 2.2.8\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "6c36b4655033c559925244e582fa11c03044f0cd", "tree": "a11a9c8a769f0c7f60d79612de886d14cf29c411", "parents": [ "a12f1f7e1b57e4dee3d8018fe7ddd881bbb95098" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu May 28 21:20:53 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu May 28 21:20:53 2026 +0200" }, "message": "Bump sshdVersion from 2.17.1 to 2.18.0 (#881)\n\nBumps `sshdVersion` from 2.17.1 to 2.18.0.\n\nUpdates `org.apache.sshd:sshd-core` from 2.17.1 to 2.18.0\n- [Release notes](https://github.com/apache/mina-sshd/releases)\n- [Changelog](https://github.com/apache/mina-sshd/blob/master/CHANGES.md)\n- [Commits](https://github.com/apache/mina-sshd/compare/sshd-2.17.1...sshd-2.18.0)\n\nUpdates `org.apache.sshd:sshd-scp` from 2.17.1 to 2.18.0\n- [Release notes](https://github.com/apache/mina-sshd/releases)\n- [Changelog](https://github.com/apache/mina-sshd/blob/master/CHANGES.md)\n- [Commits](https://github.com/apache/mina-sshd/compare/sshd-2.17.1...sshd-2.18.0)\n\nUpdates `org.apache.sshd:sshd-sftp` from 2.17.1 to 2.18.0\n- [Release notes](https://github.com/apache/mina-sshd/releases)\n- [Changelog](https://github.com/apache/mina-sshd/blob/master/CHANGES.md)\n- [Commits](https://github.com/apache/mina-sshd/compare/sshd-2.17.1...sshd-2.18.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.sshd:sshd-core\n dependency-version: 2.18.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n- dependency-name: org.apache.sshd:sshd-scp\n dependency-version: 2.18.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n- dependency-name: org.apache.sshd:sshd-sftp\n dependency-version: 2.18.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "a12f1f7e1b57e4dee3d8018fe7ddd881bbb95098", "tree": "0f9e84c3654cecdd585c2f198dadf577d93c463a", "parents": [ "5e3ef1a0d10273c7d30106d88a1ad20b2fcb25da" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue May 19 21:17:46 2026 +0000" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Wed May 20 16:01:58 2026 +0200" }, "message": "Bump org.codehaus.plexus:plexus-classworlds from 2.11.0 to 2.12.0\n\nBumps [org.codehaus.plexus:plexus-classworlds](https://github.com/codehaus-plexus/plexus-classworlds) from 2.11.0 to 2.12.0.\n- [Release notes](https://github.com/codehaus-plexus/plexus-classworlds/releases)\n- [Commits](https://github.com/codehaus-plexus/plexus-classworlds/compare/plexus-classworlds-2.11.0...plexus-classworlds-2.12.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.codehaus.plexus:plexus-classworlds\n dependency-version: 2.12.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "5e3ef1a0d10273c7d30106d88a1ad20b2fcb25da", "tree": "907fb5f56beddeea05c38415941bd3c6bc632496", "parents": [ "92286d0925bb2f7c8e8be0a74680c16db33f2945" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon May 11 11:24:12 2026 +0000" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sat May 16 17:58:23 2026 +0200" }, "message": "Bump org.apache.maven:maven-parent from 47 to 48\n\nBumps [org.apache.maven:maven-parent](https://github.com/apache/maven-parent) from 47 to 48.\n- [Release notes](https://github.com/apache/maven-parent/releases)\n- [Commits](https://github.com/apache/maven-parent/commits)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven:maven-parent\n dependency-version: \u002748\u0027\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "92286d0925bb2f7c8e8be0a74680c16db33f2945", "tree": "5aad162a6a143aadb5a600fbd5a50ab046c59e90", "parents": [ "a237c370e51d8565d43805060500c7ad12d4d82f" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue May 12 13:15:05 2026 +0000" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Tue May 12 18:47:41 2026 +0200" }, "message": "Bump org.codehaus.plexus:plexus-classworlds from 2.9.0 to 2.11.0\n\nBumps [org.codehaus.plexus:plexus-classworlds](https://github.com/codehaus-plexus/plexus-classworlds) from 2.9.0 to 2.11.0.\n- [Release notes](https://github.com/codehaus-plexus/plexus-classworlds/releases)\n- [Commits](https://github.com/codehaus-plexus/plexus-classworlds/compare/plexus-classworlds-2.9.0...plexus-classworlds-2.11.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.codehaus.plexus:plexus-classworlds\n dependency-version: 2.11.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "a237c370e51d8565d43805060500c7ad12d4d82f", "tree": "c29c3f36799c510d68d04f8cacffa46a9c5a563c", "parents": [ "1dcccbdc430f6bf75ee5f03fae3544b97d0c958e" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon May 04 16:47:55 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon May 04 16:47:55 2026 +0200" }, "message": "Bump org.apache.mina:mina-core from 2.2.6 to 2.2.7 (#873)\n\nBumps [org.apache.mina:mina-core](https://github.com/apache/mina) from 2.2.6 to 2.2.7.\n- [Commits](https://github.com/apache/mina/compare/2.2.6...2.2.7)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.mina:mina-core\n dependency-version: 2.2.7\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "1dcccbdc430f6bf75ee5f03fae3544b97d0c958e", "tree": "1232aea37fc65c5b2c7f3b45e826a82432a10557", "parents": [ "cf5846ee685d2f3cd52e28d3e3e9da8ab0a259e2" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Apr 28 10:04:35 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Apr 28 10:04:35 2026 +0200" }, "message": "Bump mavenScmVersion from 1.11.1 to 1.13.0 (#868)\n\nBumps `mavenScmVersion` from 1.11.1 to 1.13.0.\n\nUpdates `org.apache.maven.scm:maven-scm-api` from 1.11.1 to 1.13.0\n- [Release notes](https://github.com/apache/maven-scm/releases)\n- [Commits](https://github.com/apache/maven-scm/compare/maven-scm-1.11.1...maven-scm-1.13.0)\n\nUpdates `org.apache.maven.scm:maven-scm-manager-plexus` from 1.11.1 to 1.13.0\n\nUpdates `org.apache.maven.scm:maven-scm-provider-cvsexe` from 1.11.1 to 1.13.0\n\nUpdates `org.apache.maven.scm:maven-scm-provider-gitexe` from 1.11.1 to 1.13.0\n\nUpdates `org.apache.maven.scm:maven-scm-provider-gittest` from 1.11.1 to 1.13.0\n\nUpdates `org.apache.maven.scm:maven-scm-provider-svnexe` from 1.11.1 to 1.13.0\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven.scm:maven-scm-api\n dependency-version: 1.13.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n- dependency-name: org.apache.maven.scm:maven-scm-manager-plexus\n dependency-version: 1.13.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n- dependency-name: org.apache.maven.scm:maven-scm-provider-cvsexe\n dependency-version: 1.13.0\n dependency-type: direct:development\n update-type: version-update:semver-minor\n- dependency-name: org.apache.maven.scm:maven-scm-provider-gitexe\n dependency-version: 1.13.0\n dependency-type: direct:development\n update-type: version-update:semver-minor\n- dependency-name: org.apache.maven.scm:maven-scm-provider-gittest\n dependency-version: 1.13.0\n dependency-type: direct:development\n update-type: version-update:semver-minor\n- dependency-name: org.apache.maven.scm:maven-scm-provider-svnexe\n dependency-version: 1.13.0\n dependency-type: direct:development\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "cf5846ee685d2f3cd52e28d3e3e9da8ab0a259e2", "tree": "6f724c8ffeefb5db8d6e839f7e658c79a815224f", "parents": [ "a0eb6966ab9a57126b06922f394ba88a1dc12dee" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Apr 28 10:04:21 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Apr 28 10:04:21 2026 +0200" }, "message": "Bump commons-io:commons-io from 2.21.0 to 2.22.0 (#869)\n\nBumps commons-io:commons-io from 2.21.0 to 2.22.0.\n\n---\nupdated-dependencies:\n- dependency-name: commons-io:commons-io\n dependency-version: 2.22.0\n dependency-type: direct:development\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "a0eb6966ab9a57126b06922f394ba88a1dc12dee", "tree": "d17bc152ac640e137c08ac9c883443ca99a1fb2c", "parents": [ "30ba749985b1eb3b4a44838a2f45c884a413e636" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Apr 28 10:04:09 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Apr 28 10:04:09 2026 +0200" }, "message": "Bump org.apache.mina:mina-core from 2.2.5 to 2.2.6 (#871)\n\nBumps [org.apache.mina:mina-core](https://github.com/apache/mina) from 2.2.5 to 2.2.6.\n- [Commits](https://github.com/apache/mina/compare/2.2.5...2.2.6)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.mina:mina-core\n dependency-version: 2.2.6\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "30ba749985b1eb3b4a44838a2f45c884a413e636", "tree": "682f2328d0e017d0f9a51a590135300068beae32", "parents": [ "f25b76730f822169b64523c37f63a95ebabc777a" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Mar 19 08:14:33 2026 +0000" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sun Mar 22 23:18:16 2026 +0100" }, "message": "Bump commons-net:commons-net from 3.12.0 to 3.13.0\n\nBumps [commons-net:commons-net](https://github.com/apache/commons-net) from 3.12.0 to 3.13.0.\n- [Changelog](https://github.com/apache/commons-net/blob/master/RELEASE-NOTES.txt)\n- [Commits](https://github.com/apache/commons-net/compare/rel/commons-net-3.12.0...rel/commons-net-3.13.0)\n\n---\nupdated-dependencies:\n- dependency-name: commons-net:commons-net\n dependency-version: 3.13.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "f25b76730f822169b64523c37f63a95ebabc777a", "tree": "055f4d86f4910cbe7c37eb155782851fbdf09a78", "parents": [ "9461411d7416075ef2c837abafe0dbb284b911e9" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Sun Feb 01 16:47:57 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sun Feb 01 16:47:57 2026 +0100" }, "message": "Bump org.apache.maven:maven-parent from 45 to 47 (#854)\n\n* Bump org.apache.maven:maven-parent from 45 to 47\n\nBumps [org.apache.maven:maven-parent](https://github.com/apache/maven-parent) from 45 to 47.\n- [Release notes](https://github.com/apache/maven-parent/releases)\n- [Commits](https://github.com/apache/maven-parent/commits)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven:maven-parent\n dependency-version: \u002747\u0027\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\n---------\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e\nCo-authored-by: Sylwester Lachiewicz \u003cslachiewicz@apache.org\u003e" }, { "commit": "9461411d7416075ef2c837abafe0dbb284b911e9", "tree": "6f1e7d911074e32ca05922fe25935b30c49cc85a", "parents": [ "49b5033c3ade5ac7cdaea4e27e7e15895c46f85f" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Jan 28 15:20:10 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jan 28 15:20:10 2026 +0100" }, "message": "Bump sshdVersion from 2.16.0 to 2.17.1 (#859)\n\nBumps `sshdVersion` from 2.16.0 to 2.17.1.\n\nUpdates `org.apache.sshd:sshd-core` from 2.16.0 to 2.17.1\n- [Release notes](https://github.com/apache/mina-sshd/releases)\n- [Changelog](https://github.com/apache/mina-sshd/blob/master/CHANGES.md)\n- [Commits](https://github.com/apache/mina-sshd/compare/sshd-2.16.0...sshd-2.17.1)\n\nUpdates `org.apache.sshd:sshd-scp` from 2.16.0 to 2.17.1\n- [Release notes](https://github.com/apache/mina-sshd/releases)\n- [Changelog](https://github.com/apache/mina-sshd/blob/master/CHANGES.md)\n- [Commits](https://github.com/apache/mina-sshd/compare/sshd-2.16.0...sshd-2.17.1)\n\nUpdates `org.apache.sshd:sshd-sftp` from 2.16.0 to 2.17.1\n- [Release notes](https://github.com/apache/mina-sshd/releases)\n- [Changelog](https://github.com/apache/mina-sshd/blob/master/CHANGES.md)\n- [Commits](https://github.com/apache/mina-sshd/compare/sshd-2.16.0...sshd-2.17.1)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.sshd:sshd-core\n dependency-version: 2.17.1\n dependency-type: direct:production\n update-type: version-update:semver-minor\n- dependency-name: org.apache.sshd:sshd-scp\n dependency-version: 2.17.1\n dependency-type: direct:production\n update-type: version-update:semver-minor\n- dependency-name: org.apache.sshd:sshd-sftp\n dependency-version: 2.17.1\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "49b5033c3ade5ac7cdaea4e27e7e15895c46f85f", "tree": "80c4fa8952095098f42af5d88baeea73d1ebaafe", "parents": [ "0e081d149642af8a518aee2ed7b029c5ce1c08d0" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Wed Dec 31 16:52:27 2025 +0100" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Thu Jan 01 22:02:29 2026 +0100" }, "message": "Refactor tests to use Mockito for mocking and assertions\n" }, { "commit": "0e081d149642af8a518aee2ed7b029c5ce1c08d0", "tree": "dd7cd224f7185b72a61bd01cc05329fbb9dac0e1", "parents": [ "e8d96a0b8db8e79ab6ece067c406358d72840f9f" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sat Dec 13 23:26:41 2025 +0100" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Thu Jan 01 21:24:26 2026 +0100" }, "message": "Cleanup wagon-provider-api dependencies and code\n\nDrop dependency to plexus-utils\nMigrate to JUnit5\nMigrate to Mockito from Easymock\n" }, { "commit": "e8d96a0b8db8e79ab6ece067c406358d72840f9f", "tree": "23184f78fbc2f418eca1e394170bc091b43b8e16", "parents": [ "2aa1bf5b0ab97b804ba03810950ceeded99d9ec5" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Dec 31 08:04:50 2025 +0000" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Wed Dec 31 17:47:05 2025 +0100" }, "message": "Bump sshdVersion from 2.13.2 to 2.16.0\n\nBumps `sshdVersion` from 2.13.2 to 2.16.0.\n\nUpdates `org.apache.sshd:sshd-core` from 2.13.2 to 2.16.0\n- [Release notes](https://github.com/apache/mina-sshd/releases)\n- [Changelog](https://github.com/apache/mina-sshd/blob/master/CHANGES.md)\n- [Commits](https://github.com/apache/mina-sshd/compare/sshd-2.13.2...sshd-2.16.0)\n\nUpdates `org.apache.sshd:sshd-scp` from 2.13.2 to 2.16.0\n- [Release notes](https://github.com/apache/mina-sshd/releases)\n- [Changelog](https://github.com/apache/mina-sshd/blob/master/CHANGES.md)\n- [Commits](https://github.com/apache/mina-sshd/compare/sshd-2.13.2...sshd-2.16.0)\n\nUpdates `org.apache.sshd:sshd-sftp` from 2.13.2 to 2.16.0\n- [Release notes](https://github.com/apache/mina-sshd/releases)\n- [Changelog](https://github.com/apache/mina-sshd/blob/master/CHANGES.md)\n- [Commits](https://github.com/apache/mina-sshd/compare/sshd-2.13.2...sshd-2.16.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.sshd:sshd-core\n dependency-version: 2.16.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n- dependency-name: org.apache.sshd:sshd-scp\n dependency-version: 2.16.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n- dependency-name: org.apache.sshd:sshd-sftp\n dependency-version: 2.16.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "2aa1bf5b0ab97b804ba03810950ceeded99d9ec5", "tree": "a5f68f550b3fdbd6a1ec152c51344240fc4a53de", "parents": [ "ecdc6342839d68dc74d876ca26dc7e2a49891893" ], "author": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Mon Oct 20 07:58:18 2025 +0200" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Tue Dec 30 17:34:04 2025 +0100" }, "message": "Update code to work with SSHD 2.13.2 API\n\n---------\nCo-authored-by: copilot-swe-agent[bot] \u003c198982749+Copilot@users.noreply.github.com\u003e\nCo-authored-by: slachiewicz \u003c6705942+slachiewicz@users.noreply.github.com\u003e\n" }, { "commit": "ecdc6342839d68dc74d876ca26dc7e2a49891893", "tree": "cecda53a36c9c12bad50b68ea4fb98146e239136", "parents": [ "542b23263a56134e387be8c4bb7952f5c1745087" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Sun Dec 14 19:25:19 2025 +0000" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Mon Dec 29 21:28:26 2025 +0100" }, "message": "Bump org.codehaus.plexus:plexus-interactivity-api from 1.4 to 1.5.1\n\nBumps [org.codehaus.plexus:plexus-interactivity-api](https://github.com/codehaus-plexus/plexus-interactivity) from 1.4 to 1.5.1.\n- [Release notes](https://github.com/codehaus-plexus/plexus-interactivity/releases)\n- [Commits](https://github.com/codehaus-plexus/plexus-interactivity/compare/plexus-interactivity-1.4...plexus-interactivity-1.5.1)\n\n---\nupdated-dependencies:\n- dependency-name: org.codehaus.plexus:plexus-interactivity-api\n dependency-version: 1.5.1\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "542b23263a56134e387be8c4bb7952f5c1745087", "tree": "3994669df2ea4bfd01ed5eb9822f9ef4b5ca5216", "parents": [ "c98578b0325187d075ce39ade99d95d1b95a8d07" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Dec 01 16:46:47 2025 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Dec 01 16:46:47 2025 +0100" }, "message": "Bump org.apache.mina:mina-core from 2.0.22 to 2.2.5 (#835)\n\nBumps [org.apache.mina:mina-core](https://github.com/apache/mina) from 2.0.22 to 2.2.5.\n- [Commits](https://github.com/apache/mina/compare/2.0.22...2.2.5)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.mina:mina-core\n dependency-version: 2.2.5\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "c98578b0325187d075ce39ade99d95d1b95a8d07", "tree": "c586567f382145fb51448d041278d38d4e471c46", "parents": [ "f3c80705adc06f91c4a98043f4e3048cbde1a5d6" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Sun Nov 16 01:29:41 2025 +0000" }, "committer": { "name": "Sylwester Lachiewicz", "email": "slachiewicz@apache.org", "time": "Sun Nov 16 12:04:53 2025 +0100" }, "message": "Bump commons-io:commons-io from 2.20.0 to 2.21.0\n\nBumps [commons-io:commons-io](https://github.com/apache/commons-io) from 2.20.0 to 2.21.0.\n- [Changelog](https://github.com/apache/commons-io/blob/master/RELEASE-NOTES.txt)\n- [Commits](https://github.com/apache/commons-io/compare/rel/commons-io-2.20.0...rel/commons-io-2.21.0)\n\n---\nupdated-dependencies:\n- dependency-name: commons-io:commons-io\n dependency-version: 2.21.0\n dependency-type: direct:development\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" } ], "next": "f3c80705adc06f91c4a98043f4e3048cbde1a5d6" }