)]}' { "log": [ { "commit": "6e1903c32d7c8f20e22b49ea9663a860593bc4e9", "tree": "1f4e3f12bc4f365afa302cebcf83efcccd99bc77", "parents": [ "54db751f5d9923c0900ac19f4b18567610523a3d" ], "author": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Tue Oct 27 10:59:26 2026 +0100" }, "committer": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Tue Oct 27 10:59:26 2026 +0100" }, "message": "missing @Stereotype\n" }, { "commit": "54db751f5d9923c0900ac19f4b18567610523a3d", "tree": "45b878e85654e920589dd7cdab5976ff640f4ab4", "parents": [ "e3795bd4eee5c193d77985460679be12a7763597" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Sat Oct 24 21:40:37 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat Oct 24 21:40:37 2026 -0400" }, "message": "build(deps-dev): bump markdown-it in /api/src/client (#1117)" }, { "commit": "e3795bd4eee5c193d77985460679be12a7763597", "tree": "7791069f1c81f6cb6e585dd5e57d1ffd0530fa75", "parents": [ "e66ffaf97b2faaa239bb85dbac4310b3563b17fb" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Sat Oct 24 21:40:28 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat Oct 24 21:40:28 2026 -0400" }, "message": "build(deps): bump github/codeql-action from 4.38.2 to 4.39.0 (#1116)" }, { "commit": "e66ffaf97b2faaa239bb85dbac4310b3563b17fb", "tree": "c797521dd4894b3f6bff874ffc64aec2642852d5", "parents": [ "f746ce0a684a3ffa4a80dfc4d4a3886d6481fb62" ], "author": { "name": "Markus Jung", "email": "jungm@apache.org", "time": "Mon Oct 12 14:16:01 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Oct 12 14:16:01 2026 +0200" }, "message": "MYFACES-4770 viewscopecdimap.put() returns the previous value (#1112)" }, { "commit": "f746ce0a684a3ffa4a80dfc4d4a3886d6481fb62", "tree": "84a6644f50834f41388f06d1ae91ec50db917df4", "parents": [ "84b64cbca2e87d6d57365c71a679b07f81fafa3f" ], "author": { "name": "Nicola Isotta", "email": "nisotta@apache.org", "time": "Mon Oct 12 14:06:32 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Oct 12 14:06:32 2026 +0200" }, "message": "[MYFACES-4768] add h:message and h:messages redisplay attribute in taglib (#1111)" }, { "commit": "84b64cbca2e87d6d57365c71a679b07f81fafa3f", "tree": "4bb151a77af60ceef81bfb87c4f9163f2b2bfb8a", "parents": [ "1123caa2a0e9dfeb6cab9885a2c266f3b0910d76" ], "author": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Fri Oct 09 08:51:42 2026 +0200" }, "committer": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Fri Oct 09 08:51:42 2026 +0200" }, "message": "typos\n" }, { "commit": "1123caa2a0e9dfeb6cab9885a2c266f3b0910d76", "tree": "ef5909ef88ddf797228a1131ca0c7d0a2b55bc8f", "parents": [ "705d0baf87445abf409bd69e39ae3e546bf0399e" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Oct 08 17:52:53 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Oct 08 17:52:53 2026 +0200" }, "message": "build(deps): bump compression from 1.8.1 to 1.8.2 in /api/src/client (#1102)\n\nBumps [compression](https://github.com/expressjs/compression) from 1.8.1 to 1.8.2.\n- [Release notes](https://github.com/expressjs/compression/releases)\n- [Changelog](https://github.com/expressjs/compression/blob/master/HISTORY.md)\n- [Commits](https://github.com/expressjs/compression/compare/v1.8.1...v1.8.2)\n\n---\nupdated-dependencies:\n- dependency-name: compression\n dependency-version: 1.8.2\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "705d0baf87445abf409bd69e39ae3e546bf0399e", "tree": "5811ca0596ba7c26e65240c2c196e3270e32a32e", "parents": [ "1f2a5710b52f4902c7b86063c8ce5afddf2662ce" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Oct 08 17:52:38 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Oct 08 17:52:38 2026 +0200" }, "message": "build(deps): bump proxy-addr from 2.0.7 to 2.0.8 in /api/src/client (#1103)\n\nBumps [proxy-addr](https://github.com/jshttp/proxy-addr) from 2.0.7 to 2.0.8.\n- [Release notes](https://github.com/jshttp/proxy-addr/releases)\n- [Changelog](https://github.com/jshttp/proxy-addr/blob/master/HISTORY.md)\n- [Commits](https://github.com/jshttp/proxy-addr/compare/v2.0.7...v2.0.8)\n\n---\nupdated-dependencies:\n- dependency-name: proxy-addr\n dependency-version: 2.0.8\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "1f2a5710b52f4902c7b86063c8ce5afddf2662ce", "tree": "acc3f63fd10d1c300cbf90c84202df214ca52423", "parents": [ "bf9114ce256f9eda434c6044b6dfd4aa5cf080cc" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Oct 08 17:52:34 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Oct 08 17:52:34 2026 +0200" }, "message": "build(deps): bump source-map-js from 1.2.1 to 1.2.2 in /api/src/client (#1104)\n\nBumps [source-map-js](https://github.com/7rulnik/source-map-js) from 1.2.1 to 1.2.2.\n- [Release notes](https://github.com/7rulnik/source-map-js/releases)\n- [Changelog](https://github.com/7rulnik/source-map-js/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/7rulnik/source-map-js/compare/v1.2.1...v1.2.2)\n\n---\nupdated-dependencies:\n- dependency-name: source-map-js\n dependency-version: 1.2.2\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "bf9114ce256f9eda434c6044b6dfd4aa5cf080cc", "tree": "8fa8ab247376aacd4b1ec6f9eb2b472c8f147311", "parents": [ "c34f98999470c989e2b598602d18fb5d45452938" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Oct 08 17:52:23 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Oct 08 17:52:23 2026 +0200" }, "message": "build(deps): bump shell-quote from 1.10.0 to 1.12.0 in /api/src/client (#1105)\n\nBumps [shell-quote](https://github.com/ljharb/shell-quote) from 1.10.0 to 1.12.0.\n- [Changelog](https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/ljharb/shell-quote/compare/v1.10.0...v1.12.0)\n\n---\nupdated-dependencies:\n- dependency-name: shell-quote\n dependency-version: 1.12.0\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "c34f98999470c989e2b598602d18fb5d45452938", "tree": "3d075b69975571a06da08791037dde34d7ed9f60", "parents": [ "0aaaf0d3eed59fb187548027153b15b37639e463" ], "author": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Thu Oct 08 17:51:12 2026 +0200" }, "committer": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Thu Oct 08 17:51:12 2026 +0200" }, "message": "fixed warnings\n" }, { "commit": "0aaaf0d3eed59fb187548027153b15b37639e463", "tree": "17f9904c774aa908993e8481e5655c3a7729891b", "parents": [ "7c4401257fda22645f79b70194be1a7a0086d931" ], "author": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Thu Oct 08 17:23:13 2026 +0200" }, "committer": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Thu Oct 08 17:23:13 2026 +0200" }, "message": "cleanup framework collections\n" }, { "commit": "7c4401257fda22645f79b70194be1a7a0086d931", "tree": "51d95402ac732cb74a1e7de04166c71cd2043933", "parents": [ "ccda6576572bf0e6d95e867d29cf09e3894a75b3" ], "author": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Thu Oct 08 16:43:19 2026 +0200" }, "committer": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Thu Oct 08 16:46:35 2026 +0200" }, "message": "fixed build warnings\n" }, { "commit": "ccda6576572bf0e6d95e867d29cf09e3894a75b3", "tree": "80f1ab7a5091a57969b4d4ef37cc1e89754e01e5", "parents": [ "239e0a96bdbaa757df5f70e62075d00bb9c444e9", "006841f3725d9b52ccee8bbc618523d78023f55b" ], "author": { "name": "Volodymyr Siedlecki", "email": "volosied@gmail.com", "time": "Thu Oct 08 10:27:23 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Oct 08 10:27:23 2026 -0400" }, "message": "Merge pull request #1100 from volosied/MYFACES-47694-main\n\n[main] MYFACES-4769: Use 356 as client ID length check" }, { "commit": "239e0a96bdbaa757df5f70e62075d00bb9c444e9", "tree": "89f377fc778ddd8f3843d8ce1ed248a921e23f7c", "parents": [ "600b7b19d585dbe65b34e233038466f0803214cd" ], "author": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Wed Oct 07 13:54:44 2026 +0200" }, "committer": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Thu Oct 08 16:19:53 2026 +0200" }, "message": "MYFACES-4767\n" }, { "commit": "006841f3725d9b52ccee8bbc618523d78023f55b", "tree": "975e73cb4cdce8b779e339aec0cb857deeaaa134", "parents": [ "600b7b19d585dbe65b34e233038466f0803214cd" ], "author": { "name": "Volodymyr Siedlecki", "email": "volosied@gmail.com", "time": "Wed Oct 07 10:45:14 2026 -0400" }, "committer": { "name": "Volodymyr Siedlecki", "email": "volosied@gmail.com", "time": "Thu Oct 08 09:27:16 2026 -0400" }, "message": "MYFACES-4769: Use 356 as client ID length check\n" }, { "commit": "600b7b19d585dbe65b34e233038466f0803214cd", "tree": "4f7a9431f6f15d7b51e79b705fb0f7a1928457cd", "parents": [ "800fbbd7e93173804a0aaa6c96f9edc39a8da567" ], "author": { "name": "Vicente Rossello Jaume", "email": "cocorossello@gmail.com", "time": "Sun Oct 04 11:57:54 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sun Oct 04 18:57:54 2026 +0900" }, "message": "MYFACES-4766: make literal property initialization thread-safe (#1089)\n\nCo-authored-by: vrossello \u003cvrossello@travelcompositor.com\u003e" }, { "commit": "800fbbd7e93173804a0aaa6c96f9edc39a8da567", "tree": "60eaa4bdf1efe4c5cd04bb5441f86cedc5b91666", "parents": [ "a22ac62cc3f781ba643df7b5f5f75ec60ae7ed16" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Oct 01 13:00:59 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Oct 01 13:00:59 2026 -0400" }, "message": "build(deps-dev): bump markdown-it in /api/src/client (#1094)\n\nBumps [markdown-it](https://github.com/markdown-it/markdown-it) from 14.3.0 to 14.3.2.\n- [Changelog](https://github.com/markdown-it/markdown-it/blob/14.3.2/CHANGELOG.md)\n- [Commits](https://github.com/markdown-it/markdown-it/compare/14.3.0...14.3.2)\n\n---\nupdated-dependencies:\n- dependency-name: markdown-it\n dependency-version: 14.3.2\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "a22ac62cc3f781ba643df7b5f5f75ec60ae7ed16", "tree": "b0eb890c6d53515e88ca77cea8ad28de80ca6a6e", "parents": [ "db23d7a64e6e3e7c12b97477f9eadb9e821017fd" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Oct 01 13:00:15 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Oct 01 13:00:15 2026 -0400" }, "message": "build(deps): bump brace-expansion in /api/src/client (#1093)\n\nBumps and [brace-expansion](https://github.com/juliangruber/brace-expansion). These dependencies needed to be updated together.\n\nUpdates `brace-expansion` from 5.0.9 to 5.0.12\n- [Release notes](https://github.com/juliangruber/brace-expansion/releases)\n- [Commits](https://github.com/juliangruber/brace-expansion/compare/v5.0.9...v5.0.12)\n\nUpdates `brace-expansion` from 2.1.4 to 2.1.7\n- [Release notes](https://github.com/juliangruber/brace-expansion/releases)\n- [Commits](https://github.com/juliangruber/brace-expansion/compare/v5.0.9...v5.0.12)\n\n---\nupdated-dependencies:\n- dependency-name: brace-expansion\n dependency-version: 5.0.12\n dependency-type: indirect\n- dependency-name: brace-expansion\n dependency-version: 2.1.7\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "db23d7a64e6e3e7c12b97477f9eadb9e821017fd", "tree": "62bd79413ad93c7d5ae54fa04fb7b77400b7d1e5", "parents": [ "814c3cb5aeec611cc485c96d2e64cad46e3a47a6" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Oct 01 12:41:32 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Oct 01 12:41:32 2026 -0400" }, "message": "build(deps): bump undici from 7.29.0 to 7.30.0 in /api/src/client (#1092)\n\nBumps [undici](https://github.com/nodejs/undici) from 7.29.0 to 7.30.0.\n- [Release notes](https://github.com/nodejs/undici/releases)\n- [Commits](https://github.com/nodejs/undici/compare/v7.29.0...v7.30.0)\n\n---\nupdated-dependencies:\n- dependency-name: undici\n dependency-version: 7.30.0\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "814c3cb5aeec611cc485c96d2e64cad46e3a47a6", "tree": "8e4c04ff06bf298583ba5341d8c86a9e519ef2a3", "parents": [ "8d96ed853ffcbedcbda48492844ddf0a18e3bf04" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Sep 29 13:17:31 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Sep 29 13:17:31 2026 -0400" }, "message": "build(deps): bump webpack-dev-middleware in /api/src/client (#1091)\n\nBumps [webpack-dev-middleware](https://github.com/webpack/webpack-dev-middleware) from 8.1.1 to 8.3.0.\n- [Release notes](https://github.com/webpack/webpack-dev-middleware/releases)\n- [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/webpack/webpack-dev-middleware/compare/v8.1.1...v8.3.0)\n\n---\nupdated-dependencies:\n- dependency-name: webpack-dev-middleware\n dependency-version: 8.3.0\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "8d96ed853ffcbedcbda48492844ddf0a18e3bf04", "tree": "d68a7eb3ab749b34943d3f88cf3bc255d355cb86", "parents": [ "5f2e912c5f7e197bf59baefd6b3a50330720a5e3" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Sep 29 13:16:58 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Sep 29 13:16:58 2026 -0400" }, "message": "build(deps): bump github/codeql-action from 4.38.1 to 4.38.2 (#1090)\n\nBumps [github/codeql-action](https://github.com/github/codeql-action) from 4.38.1 to 4.38.2.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/v4.38.1...v4.38.2)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action\n dependency-version: 4.38.2\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "5f2e912c5f7e197bf59baefd6b3a50330720a5e3", "tree": "0734e1940eebbecf08f09671216c091c313be67d", "parents": [ "fa9a6eb0c35eb5ab5af484f444087e3cdc480095" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Sep 23 11:59:04 2026 +0900" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Sep 23 11:59:04 2026 +0900" }, "message": "build(deps-dev): bump org.apache.tomcat.embed:tomcat-embed-core (#1077)\n\nBumps org.apache.tomcat.embed:tomcat-embed-core from 10.1.55 to 10.1.59.\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.tomcat.embed:tomcat-embed-core\n dependency-version: 10.1.59\n dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "fa9a6eb0c35eb5ab5af484f444087e3cdc480095", "tree": "4a4957767a71696cb42df85f123f0292ae0faef3", "parents": [ "9fb5ef86b7660bb4b75147b8144c27bb2e955164" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Sep 23 11:58:49 2026 +0900" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Sep 23 11:58:49 2026 +0900" }, "message": "build(deps-dev): bump browserslist in /api/src/client (#1079)\n\nBumps [browserslist](https://github.com/browserslist/browserslist) from 4.28.1 to 4.28.9.\n- [Release notes](https://github.com/browserslist/browserslist/releases)\n- [Changelog](https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/browserslist/browserslist/compare/4.28.1...4.28.9)\n\n---\nupdated-dependencies:\n- dependency-name: browserslist\n dependency-version: 4.28.8\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "9fb5ef86b7660bb4b75147b8144c27bb2e955164", "tree": "4c1f1af1433c847c3acdfd108e3eb6b1929fcc1f", "parents": [ "3282d7851696a2dd6c363d4637e55e0f698e8598" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Sep 23 11:58:32 2026 +0900" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Sep 23 11:58:32 2026 +0900" }, "message": "build(deps-dev): bump baseline-browser-mapping in /api/src/client (#1081)\n\nBumps [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping) from 2.10.0 to 2.11.21.\n- [Release notes](https://github.com/web-platform-dx/baseline-browser-mapping/releases)\n- [Commits](https://github.com/web-platform-dx/baseline-browser-mapping/compare/v2.10.0...v2.11.21)\n\n---\nupdated-dependencies:\n- dependency-name: baseline-browser-mapping\n dependency-version: 2.11.21\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "3282d7851696a2dd6c363d4637e55e0f698e8598", "tree": "218b87bbc26f89a5384b924f23236c047695be37", "parents": [ "39510a8a51b4bf24a9ab1fae440a88d2bfc4bda5" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Sep 23 11:58:16 2026 +0900" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Sep 23 11:58:16 2026 +0900" }, "message": "build(deps): bump github/codeql-action from 4.37.9 to 4.38.1 (#1083)\n\nBumps [github/codeql-action](https://github.com/github/codeql-action) from 4.37.9 to 4.38.1.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/v4.37.9...v4.38.1)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action\n dependency-version: 4.38.1\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "39510a8a51b4bf24a9ab1fae440a88d2bfc4bda5", "tree": "698cd8c8da4d2ba8225b08e8d17f19992bc7e4a5", "parents": [ "a2001b8ef3ad2fd84ffdf4030c3d2683bfde73be" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Sep 23 11:58:00 2026 +0900" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Sep 23 11:58:00 2026 +0900" }, "message": "build(deps): bump org.apache.tomcat:tomcat-catalina in /parent (#1078)\n\nBumps org.apache.tomcat:tomcat-catalina from 9.0.118 to 9.0.121.\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.tomcat:tomcat-catalina\n dependency-version: 9.0.121\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "a2001b8ef3ad2fd84ffdf4030c3d2683bfde73be", "tree": "eb46933a864a8db4021db23a81fd1889ad676d42", "parents": [ "9051c01d8ff025bd6de0365f60aa2b54bebebcc0" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Sep 23 11:57:45 2026 +0900" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Sep 23 11:57:45 2026 +0900" }, "message": "build(deps-dev): bump fast-uri from 3.1.5 to 3.1.7 in /api/src/client (#1076)\n\nBumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.5 to 3.1.7.\n- [Release notes](https://github.com/fastify/fast-uri/releases)\n- [Commits](https://github.com/fastify/fast-uri/compare/v3.1.5...v3.1.7)\n\n---\nupdated-dependencies:\n- dependency-name: fast-uri\n dependency-version: 3.1.7\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "9051c01d8ff025bd6de0365f60aa2b54bebebcc0", "tree": "3a99e755f45a06c30edeb9a90a7f10f2164387e6", "parents": [ "6d435d4bd5b10e503f18f01e12e1ba0cefdcad80" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Sep 10 07:58:04 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Sep 10 07:58:04 2026 -0400" }, "message": "build(deps): bump js-yaml in /api/src/client (#1080)\n\nBumps and [js-yaml](https://github.com/nodeca/js-yaml). These dependencies needed to be updated together.\n\nUpdates `js-yaml` from 3.15.1 to 3.15.2\n- [Changelog](https://github.com/nodeca/js-yaml/blob/3.15.2/CHANGELOG.md)\n- [Commits](https://github.com/nodeca/js-yaml/compare/3.15.1...3.15.2)\n\nUpdates `js-yaml` from 4.3.1 to 4.3.2\n- [Changelog](https://github.com/nodeca/js-yaml/blob/3.15.2/CHANGELOG.md)\n- [Commits](https://github.com/nodeca/js-yaml/compare/3.15.1...3.15.2)\n\n---\nupdated-dependencies:\n- dependency-name: js-yaml\n dependency-version: 3.15.2\n dependency-type: indirect\n- dependency-name: js-yaml\n dependency-version: 4.3.2\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "6d435d4bd5b10e503f18f01e12e1ba0cefdcad80", "tree": "67e80e5a79d733da39b02e672bb30a158ce6fe82", "parents": [ "a71aa6a36bcfe7c849989a1059c382b0bfbeb6a7", "22f5159aadeba006bd0bd779d3846258c428e0c6" ], "author": { "name": "Volodymyr Siedlecki", "email": "volosied@gmail.com", "time": "Tue Sep 01 10:27:30 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Sep 01 10:27:30 2026 -0400" }, "message": "Merge pull request #1073 from volosied/MYFACES-4764-child-n-main\n\n[5.0.x] Revert ChildSearchKeywordResolver.java to fix MYFACES-4764" }, { "commit": "a71aa6a36bcfe7c849989a1059c382b0bfbeb6a7", "tree": "1f91a23996e1620ed0336041c061ee1df8f483bb", "parents": [ "c326989c14f446fe0d0a419ef798b70b37f1d4ec" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Aug 31 19:24:27 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Aug 31 19:24:27 2026 -0400" }, "message": "build(deps): bump github/codeql-action from 4.37.8 to 4.37.9 (#1072)" }, { "commit": "22f5159aadeba006bd0bd779d3846258c428e0c6", "tree": "db5b594e81617ebeac63e58459d30a42f8fd96bb", "parents": [ "9c4177a5ca54e0ecc94ca2119695b2c3798a1052" ], "author": { "name": "Volodymyr Siedlecki", "email": "volosied@gmail.com", "time": "Mon Aug 31 12:56:33 2026 -0400" }, "committer": { "name": "Volodymyr Siedlecki", "email": "volosied@gmail.com", "time": "Mon Aug 31 14:14:01 2026 -0400" }, "message": "Create test for MYFACES-4764\n" }, { "commit": "9c4177a5ca54e0ecc94ca2119695b2c3798a1052", "tree": "d6e0eba0036e3a3bcf280151f80f079f4b3092b4", "parents": [ "c326989c14f446fe0d0a419ef798b70b37f1d4ec" ], "author": { "name": "Volodymyr Siedlecki", "email": "volosied@gmail.com", "time": "Thu Aug 27 13:21:28 2026 -0400" }, "committer": { "name": "Volodymyr Siedlecki", "email": "volosied@gmail.com", "time": "Mon Aug 31 14:14:01 2026 -0400" }, "message": "Revert ChildSearchKeywordResolver.java to fix MYFACES-4764\n" }, { "commit": "c326989c14f446fe0d0a419ef798b70b37f1d4ec", "tree": "f5b0d6972dfc079ca845fabcb10a343ccd1fe62f", "parents": [ "fe8dc2f5fe6529ed70ab53c396d9b2a4e3c2603e", "9460d0e2ca4c73d4dcc5940c52742fde10b370bf" ], "author": { "name": "Werner Punz", "email": "werpu@apache.org", "time": "Fri Aug 28 16:39:53 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Aug 28 16:39:53 2026 +0200" }, "message": "Merge pull request #1069 from werpu/main\n\nhttps://issues.apache.org/jira/browse/MYFACES-4763" }, { "commit": "9460d0e2ca4c73d4dcc5940c52742fde10b370bf", "tree": "f5b0d6972dfc079ca845fabcb10a343ccd1fe62f", "parents": [ "00f1f416ed95974369c2f460f5e93e9db2bef174", "fe8dc2f5fe6529ed70ab53c396d9b2a4e3c2603e" ], "author": { "name": "Werner Punz", "email": "werpu@apache.org", "time": "Fri Aug 28 16:35:40 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Aug 28 16:35:40 2026 +0200" }, "message": "Merge branch \u0027apache:main\u0027 into main\n" }, { "commit": "fe8dc2f5fe6529ed70ab53c396d9b2a4e3c2603e", "tree": "994991849cc3fd1eba350da289a936e435def936", "parents": [ "492a911cb529829d85e083ca1c1b74453ded7eab" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Aug 27 07:39:01 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Aug 27 07:39:01 2026 -0400" }, "message": "build(deps): bump actions/setup-java from 5 to 6 (#1067)\n\nBumps [actions/setup-java](https://github.com/actions/setup-java) from 5 to 6.\n- [Release notes](https://github.com/actions/setup-java/releases)\n- [Commits](https://github.com/actions/setup-java/compare/v5...v6)\n\n---\nupdated-dependencies:\n- dependency-name: actions/setup-java\n dependency-version: \u00276\u0027\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "00f1f416ed95974369c2f460f5e93e9db2bef174", "tree": "ecf8ae0e66b2fc4addf5e80e7106c91c42c3de05", "parents": [ "492a911cb529829d85e083ca1c1b74453ded7eab" ], "author": { "name": "werpu", "email": "werner.punz@gmail.com", "time": "Wed Aug 26 13:33:46 2026 +0200" }, "committer": { "name": "werpu", "email": "werner.punz@gmail.com", "time": "Wed Aug 26 18:42:35 2026 +0200" }, "message": "https://issues.apache.org/jira/browse/MYFACES-4763: remove table test\n\nremove the table test as it is now covered in a unit test, reenable the integration tests with a newer webdriver and selenium version\n\nThe new jsf_ts version has the table test included, but also includes small speed improvements and a fix for the nonce handling of evals having nonce as attribute. Also it bumps up the obligatory npm build dependencies!\n" }, { "commit": "492a911cb529829d85e083ca1c1b74453ded7eab", "tree": "8ee7048d57781df2f4481c0b83588102a967c784", "parents": [ "8dcd7c083191bab902ec93dcd9eccee5693f0cf0", "1396362d918a4d74f213749ef7dc4717cab5bbd1" ], "author": { "name": "Volodymyr Siedlecki", "email": "volosied@gmail.com", "time": "Mon Aug 24 10:24:24 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Aug 24 10:24:24 2026 -0400" }, "message": "Merge pull request #1053 from volosied/main\n\n[5.0.x] Update Partial Rendering" }, { "commit": "8dcd7c083191bab902ec93dcd9eccee5693f0cf0", "tree": "ab2e5e7b72942c0821da9a74afcc40e59b010923", "parents": [ "f4d1b3a205aadf83d9a8030c1e2dae74ef4aa9c9" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Aug 24 11:32:11 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Aug 24 11:32:11 2026 +0200" }, "message": "build(deps): bump github/codeql-action from 4.37.7 to 4.37.8 (#1056)\n\nBumps [github/codeql-action](https://github.com/github/codeql-action) from 4.37.7 to 4.37.8.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/v4.37.7...v4.37.8)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action\n dependency-version: 4.37.8\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "f4d1b3a205aadf83d9a8030c1e2dae74ef4aa9c9", "tree": "55758ac2425797fab189f8d55d5aa5c0f3e6e90c", "parents": [ "b78a3137381f1b8bcb9a37d88407d57dcb80463f" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Sat Aug 22 10:51:23 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat Aug 22 10:51:23 2026 -0400" }, "message": "build(deps): bump brace-expansion in /api/src/client (#1055)\n\nBumps and [brace-expansion](https://github.com/juliangruber/brace-expansion). These dependencies needed to be updated together.\n\nUpdates `brace-expansion` from 5.0.6 to 5.0.9\n- [Release notes](https://github.com/juliangruber/brace-expansion/releases)\n- [Commits](https://github.com/juliangruber/brace-expansion/compare/v5.0.6...v5.0.9)\n\nUpdates `brace-expansion` from 2.1.0 to 2.1.4\n- [Release notes](https://github.com/juliangruber/brace-expansion/releases)\n- [Commits](https://github.com/juliangruber/brace-expansion/compare/v5.0.6...v5.0.9)\n\n---\nupdated-dependencies:\n- dependency-name: brace-expansion\n dependency-version: 5.0.9\n dependency-type: indirect\n- dependency-name: brace-expansion\n dependency-version: 2.1.4\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "1396362d918a4d74f213749ef7dc4717cab5bbd1", "tree": "98af32b0c378c5db85fa9fb1e740f6c85ec83abe", "parents": [ "6fa5084be4f0cbd57b38e48ccc21363aa3d0720d" ], "author": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Tue Aug 18 21:16:30 2026 +0200" }, "committer": { "name": "Volodymyr Siedlecki", "email": "volosied@gmail.com", "time": "Thu Aug 20 10:17:30 2026 -0400" }, "message": "Bound the partial render/execute client-id list\n\nThe jakarta.faces.partial.render / .execute request parameters (and the\njakarta.faces.source parameter) were split into client ids without any\nlimit on the number or length of the ids. PartialVisitContext then\nretained one prefix substring per naming-container separator of each id,\nso a single very long id was expensive to process.\n\nCap the parsed list to 256 ids of at most 256 chars each, collapse\nduplicates, and bound the naming-container depth registered per id in\nPartialVisitContext so that work stays linear in the id length.\n\nUpdate Partial Context comments\n" }, { "commit": "b78a3137381f1b8bcb9a37d88407d57dcb80463f", "tree": "af5af8df12eee92f2f07ad88c310f17f85fbb205", "parents": [ "6fa5084be4f0cbd57b38e48ccc21363aa3d0720d" ], "author": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Thu Aug 20 10:59:05 2026 +0200" }, "committer": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Thu Aug 20 10:59:05 2026 +0200" }, "message": "Faces Spec #1507\n" }, { "commit": "6fa5084be4f0cbd57b38e48ccc21363aa3d0720d", "tree": "d68e4b0d26183c4fc294bed3a09e2e6e9f7cd1da", "parents": [ "3b32eff9fb07a64f45dc6e2905c4a4c7e26ee0d7" ], "author": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Tue Aug 18 20:10:45 2026 +0200" }, "committer": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Tue Aug 18 20:10:45 2026 +0200" }, "message": "Faces S0ec 1507 - Enhance UIInput events with HTML5 like oninput\n" }, { "commit": "3b32eff9fb07a64f45dc6e2905c4a4c7e26ee0d7", "tree": "d1be58a090996f5a2ac8b176c9c308fb299d8c85", "parents": [ "23fbc3867b1a6e42dd3fde84901d1c50c5cd9496", "9df06edbe699471ad9aff7b3909541654063c39e" ], "author": { "name": "Volodymyr Siedlecki", "email": "volosied@gmail.com", "time": "Mon Aug 17 14:52:01 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Aug 17 14:52:01 2026 -0400" }, "message": "Merge pull request #1044 from volosied/facelet-path-validation-main\n\n[5.0.x] Facelet path validation" }, { "commit": "9df06edbe699471ad9aff7b3909541654063c39e", "tree": "10eed1b05b613966acdc0c95ccb842ef0683bc67", "parents": [ "d56b885bb4d72abc0ecec38ad355bec44cc5a78b" ], "author": { "name": "Volodymyr Siedlecki", "email": "volosied@gmail.com", "time": "Mon Aug 17 10:51:50 2026 -0400" }, "committer": { "name": "Volodymyr Siedlecki", "email": "volosied@gmail.com", "time": "Mon Aug 17 14:44:23 2026 -0400" }, "message": "Create Facelet Path Validation Test\n\nFix up\nAI Assisted: Bob Version: 2.0.2\n" }, { "commit": "d56b885bb4d72abc0ecec38ad355bec44cc5a78b", "tree": "6cd86bb36e0fa1b70a9934292672f522a6cd5c02", "parents": [ "61bdf68a13cf5e6f2128bc94569de2845de99a7f" ], "author": { "name": "Volodymyr Siedlecki", "email": "volosied@gmail.com", "time": "Fri Aug 14 16:29:43 2026 -0400" }, "committer": { "name": "Volodymyr Siedlecki", "email": "volosied@gmail.com", "time": "Mon Aug 17 14:44:18 2026 -0400" }, "message": "Use allow list over a block list\n" }, { "commit": "61bdf68a13cf5e6f2128bc94569de2845de99a7f", "tree": "99c4f7431217db205808f5ad60f2ba77d467000d", "parents": [ "ff0c96885c9081ec1d7f90542c9ca6a51e3ae5da" ], "author": { "name": "Volodymyr Siedlecki", "email": "volosied@gmail.com", "time": "Thu Aug 13 10:45:55 2026 -0400" }, "committer": { "name": "Volodymyr Siedlecki", "email": "volosied@gmail.com", "time": "Mon Aug 17 14:44:13 2026 -0400" }, "message": "[Bug fix] Update to handle jar and wsjar resources reliably\nAI Assisted: Bob Version: 2.0.2\n" }, { "commit": "ff0c96885c9081ec1d7f90542c9ca6a51e3ae5da", "tree": "54c22f866cb19cae2dd3f692863d41f113498cfb", "parents": [ "5f2b6be79c9519bbee735c8fe5b4d8e9a5ca5307" ], "author": { "name": "Volodymyr Siedlecki", "email": "volosied@gmail.com", "time": "Thu Aug 13 09:56:55 2026 -0400" }, "committer": { "name": "Volodymyr Siedlecki", "email": "volosied@gmail.com", "time": "Mon Aug 17 14:44:05 2026 -0400" }, "message": "[code review] Reduce comments, including web-inf commented out code\n" }, { "commit": "5f2b6be79c9519bbee735c8fe5b4d8e9a5ca5307", "tree": "75a437da2089e7aa56b9a5dc5da57702a140847c", "parents": [ "5a793f7400217ab6524716a9f8b99d6a493045d7" ], "author": { "name": "Volodymyr Siedlecki", "email": "volosied@gmail.com", "time": "Wed Aug 12 23:04:26 2026 -0400" }, "committer": { "name": "Volodymyr Siedlecki", "email": "volosied@gmail.com", "time": "Mon Aug 17 14:43:59 2026 -0400" }, "message": "[refactor] Introduce InvalidFileException for Facelet path rejections\n\nAdd InvalidFileException (extends IOException) with a typed Reason enum\nto replace the generic MalformedURLException throws in resolveURL().\n\nReason values:\n DISALLOWED_SCHEME — blocked remote/network URI scheme\n PATH_TRAVERSAL — resolved URL escapes the application base\n INVALID_EXTENSION — extension not a configured Facelet suffix\n\nCallers can now catch InvalidFileException and inspect getReason() to\nprogrammatically distinguish between rejection causes without parsing\nexception messages.\n\nAI Assisted: Bob Version: 2.0.2\n" }, { "commit": "5a793f7400217ab6524716a9f8b99d6a493045d7", "tree": "ed2f10c1bda127e9900a4ac1b187a718c6cdb39a", "parents": [ "0dff42043cb5cf851bc8b07cbd56d59d57263791" ], "author": { "name": "Volodymyr Siedlecki", "email": "volosied@gmail.com", "time": "Wed Aug 12 23:03:43 2026 -0400" }, "committer": { "name": "Volodymyr Siedlecki", "email": "volosied@gmail.com", "time": "Mon Aug 17 14:41:11 2026 -0400" }, "message": "[bug fix] Add resource path validation to DefaultFaceletFactory\n\nStrengthen resolveURL() with four layered guards to prevent unsafe\nFacelet resource resolution:\n\n1. Scheme check — rejects remote/network URI schemes (http, https, ftp,\n etc.) using a fast colon-index scan; OSGi/container schemes (jar,\n wsjar, file, zip) are intentionally allowed.\n\n2. Traversal guard — for relative paths, verifies the resolved URL\n remains within the application base (WAR/EAR root) to prevent\n directory traversal attacks.\n\n3. WEB-INF XML guard (scaffolded, currently disabled) — isWebInfConfigFile()\n is in place to block XML config descriptors under WEB-INF/ if .xml is\n ever added as a Facelet suffix.\n\n4. Extension/suffix check — rejects paths whose extension is not in the\n configured Facelet suffix set (jakarta.faces.FACELETS_SUFFIX /\n jakarta.faces.FACELETS_VIEW_MAPPINGS), cached after the first call.\n\nAlso adds FINE-level logging at each rejection point and a log of the\ncomputed allowed-suffix set on first initialisation.\n\nUnitTest project stage bypasses guards 2-4 to allow tests that use\nsynthetic paths not backed by a real WAR layout.\n\nAI Assisted: Bob Version: 2.0.2\n" }, { "commit": "23fbc3867b1a6e42dd3fde84901d1c50c5cd9496", "tree": "5c33f4ac8827f30d52b641d613660b11cae5660c", "parents": [ "0dff42043cb5cf851bc8b07cbd56d59d57263791" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Aug 17 14:24:04 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Aug 17 14:24:04 2026 +0200" }, "message": "build(deps): bump github/codeql-action from 4.37.6 to 4.37.7 (#1045)\n\nBumps [github/codeql-action](https://github.com/github/codeql-action) from 4.37.6 to 4.37.7.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/v4.37.6...v4.37.7)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action\n dependency-version: 4.37.7\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "0dff42043cb5cf851bc8b07cbd56d59d57263791", "tree": "3722f2cf854c3f3261fc33f2408596e641e901fb", "parents": [ "6e1f778c474f13c990a7254575ec81df54d19fcb" ], "author": { "name": "Ulrich Becker", "email": "ub@kassapo.com", "time": "Wed Aug 12 21:41:32 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Aug 12 21:41:32 2026 +0200" }, "message": "MYFACES-4760 QuarkusApplication.getELResolver() introduces data race (#1041)\n\nQuarkusApplication.getELResolver() first sets (and exposes) the instance variable\nand only then calls the resolver builder. The builder is not thread-safe. Thus\nconcurrent requests can access an empty slot in the builder\u0027s internal array.\n\nNow using Lazy just as ApplicationImpl does.\n\nFixes:\n jakarta.el.ELException: java.lang.NullPointerException: Cannot invoke\n \"jakarta.el.ELResolver.convertToType(...)\" because \"this.elResolvers[i]\" is null\n at jakarta.el.ELContext.convertToType(ELContext.java:435)\n at org.glassfish.expressly.lang.EvaluationContext.convertToType(EvaluationContext.java:141)\n at org.glassfish.expressly.ValueExpressionImpl.getValue(ValueExpressionImpl.java:142)\n at org.apache.myfaces.application.ApplicationImpl.evaluateExpressionGet(ApplicationImpl.java:515)\n ...\n Caused by: java.lang.NullPointerException: ... \"this.elResolvers[i]\" is null\n at jakarta.el.CompositeELResolver.convertToType(CompositeELResolver.java:446)\n\nCo-authored-by: Ulrich.Becker \u003culrich.becker@adesso.de\u003e" }, { "commit": "6e1f778c474f13c990a7254575ec81df54d19fcb", "tree": "110a7136ebbd5ad2afa07d29b0cd9518f19f3365", "parents": [ "31111e4124b3f1e91543800020b8dec2215328a8" ], "author": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Tue Aug 11 22:33:16 2026 +0200" }, "committer": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Tue Aug 11 22:33:16 2026 +0200" }, "message": "Spec 2211 - Expand built-in support for missing java.time classes in \u003cf:convertDateTime\u003e\n" }, { "commit": "31111e4124b3f1e91543800020b8dec2215328a8", "tree": "3e89d9137b37fc49b2b95546feeeaf59786b5723", "parents": [ "1b0450e23cd3d48b092ff8366b74c39277a0eb65" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Aug 10 18:50:10 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Aug 10 18:50:10 2026 +0200" }, "message": "build(deps): bump undici from 7.28.0 to 7.29.0 in /api/src/client (#1037)\n\nBumps [undici](https://github.com/nodejs/undici) from 7.28.0 to 7.29.0.\n- [Release notes](https://github.com/nodejs/undici/releases)\n- [Commits](https://github.com/nodejs/undici/compare/v7.28.0...v7.29.0)\n\n---\nupdated-dependencies:\n- dependency-name: undici\n dependency-version: 7.29.0\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "1b0450e23cd3d48b092ff8366b74c39277a0eb65", "tree": "40c9cf8dbece7320d20c09fdf30f4fedf1594208", "parents": [ "4e1a3b055cd23fbfc1a28131c09169f460d37fb1" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Aug 10 18:49:59 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Aug 10 18:49:59 2026 +0200" }, "message": "build(deps-dev): bump fast-uri from 3.1.4 to 3.1.5 in /api/src/client (#1038)\n\nBumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.4 to 3.1.5.\n- [Release notes](https://github.com/fastify/fast-uri/releases)\n- [Commits](https://github.com/fastify/fast-uri/compare/v3.1.4...v3.1.5)\n\n---\nupdated-dependencies:\n- dependency-name: fast-uri\n dependency-version: 3.1.5\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "4e1a3b055cd23fbfc1a28131c09169f460d37fb1", "tree": "dbc58c982ff0eb00884d7dedeb8019934048bc71", "parents": [ "7d8fa2da388be3893d59ce55edfb5d8aef197e8b" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Aug 10 18:49:48 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Aug 10 18:49:48 2026 +0200" }, "message": "build(deps): bump github/codeql-action from 4.37.4 to 4.37.6 (#1040)\n\nBumps [github/codeql-action](https://github.com/github/codeql-action) from 4.37.4 to 4.37.6.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/v4.37.4...v4.37.6)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action\n dependency-version: 4.37.6\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "7d8fa2da388be3893d59ce55edfb5d8aef197e8b", "tree": "46d297f95ee94a9d5b0c98dca4cdc0fab8370042", "parents": [ "c65bda2e57d4423af6222cea490672ca90467727" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Aug 04 13:53:18 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Aug 04 13:53:18 2026 +0200" }, "message": "build(deps): bump github/codeql-action from 4 to 4.37.4 (#1036)\n\nBumps [github/codeql-action](https://github.com/github/codeql-action) from 4 to 4.37.4.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/v4...v4.37.4)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action\n dependency-version: 4.37.4\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "c65bda2e57d4423af6222cea490672ca90467727", "tree": "5356dc3b1ad83fe2dcc97f7cc0b4b7cf08f7b172", "parents": [ "f964a26fdb29d064a6ac74a1aba3808d9f76e96a" ], "author": { "name": "Bauke Scholtz", "email": "balusc@gmail.com", "time": "Thu Jul 30 03:23:16 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Jul 30 09:23:16 2026 +0200" }, "message": "Key UIData/UIRepeat per-row EVH state by clientId, not row index (#1034)\n\nA nested iterating component is a single instance reused across the\nenclosing component\u0027s rows, so keying its per-row EditableValueHolder\nstate by the bare row index made every enclosing row map to the same\nkey and overwrite the previous one. Only the last enclosing row\u0027s\nsubmitted values survived: the rest were dropped silently, without\nconversion, validation, model update or a message.\n\nKey on getContainerClientId() instead, which is this component\u0027s\nclientId plus its current row index and therefore carries the\nenclosing rows\u0027 indices too. That is what _rowDeltaStates and\n_rowTransientStates key on, and what _rowStates itself keyed on\nbefore 6336caf1d.\n\nThe positional EditableValueHolderState list, its deferred allocation\nand the flat iteration lists are unchanged; only the map key differs.\n\nMojarra hit the same defect and resolved it the same way, see\nhttps://github.com/eclipse-ee4j/mojarra/issues/5874\n\nCo-authored-by: Claude Opus 5 (1M context) \u003cnoreply@anthropic.com\u003e" }, { "commit": "f964a26fdb29d064a6ac74a1aba3808d9f76e96a", "tree": "1f9416e61b36bd717ba9ecdefce550473a62c616", "parents": [ "57a0dea15e41a05912d722dee631fd7903217e3a" ], "author": { "name": "Bauke Scholtz", "email": "balusc@gmail.com", "time": "Wed Jul 29 16:02:52 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 29 22:02:52 2026 +0200" }, "message": "Keep the buffered response writer usable across responseReset() (#1033)\n\nServletExternalContextImpl.getResponseOutputWriter() caches a BufferedWriter. responseReset() and responseSendError() dropped that field, but a ResponseWriter created earlier in the render phase keeps writing into the instance it obtained back then, so everything rendered after the reset — typically an error page — landed in a buffer nobody drains and the client got HTTP 200 with an empty body. AjaxExceptionHandlerImpl and ErrorPageWriter follow the same reset-then-reuse pattern and were affected as well.\n\nrelease() additionally flushed the BufferedWriter, which flushed the container writer and thereby committed the response, so a render exception on a non-ajax request could no longer be reset and forwarded to the error page.\n\nBuffer through a ResettableBufferedWriter instead: it keeps its identity across a reset, discards the buffered chars there, resolves the container writer per drain, and drains without flushing the container writer.\n\nCo-authored-by: Claude Opus 5 (1M context) \u003cnoreply@anthropic.com\u003e" }, { "commit": "57a0dea15e41a05912d722dee631fd7903217e3a", "tree": "87e204f266053b19ca6d43618b6aad6f2f9b8dd6", "parents": [ "1d1812426ea8208bf414925a76353b594069e6f2" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Jul 29 14:57:26 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 29 14:57:26 2026 +0200" }, "message": "build(deps-dev): bump linkify-it from 5.0.1 to 5.0.2 in /api/src/client (#1028)\n\nBumps [linkify-it](https://github.com/markdown-it/linkify-it) from 5.0.1 to 5.0.2.\n- [Changelog](https://github.com/markdown-it/linkify-it/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/markdown-it/linkify-it/compare/5.0.1...5.0.2)\n\n---\nupdated-dependencies:\n- dependency-name: linkify-it\n dependency-version: 5.0.2\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "1d1812426ea8208bf414925a76353b594069e6f2", "tree": "82360af918bb4696f048607a4c54074157b53d66", "parents": [ "7ffbe0e96a3129310ebdd7083c65623b2970ea6e" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Jul 29 14:57:14 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 29 14:57:14 2026 +0200" }, "message": "build(deps-dev): bump fast-uri from 3.1.2 to 3.1.4 in /api/src/client (#1029)\n\nBumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.2 to 3.1.4.\n- [Release notes](https://github.com/fastify/fast-uri/releases)\n- [Commits](https://github.com/fastify/fast-uri/compare/v3.1.2...v3.1.4)\n\n---\nupdated-dependencies:\n- dependency-name: fast-uri\n dependency-version: 3.1.4\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "7ffbe0e96a3129310ebdd7083c65623b2970ea6e", "tree": "aa9b787fd596e3c11def0186999db26e9182c958", "parents": [ "77194f159a869b566b7f1bf5f972e2f0a245aee2" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Jul 29 14:57:03 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 29 14:57:03 2026 +0200" }, "message": "build(deps): bump shell-quote from 1.8.4 to 1.10.0 in /api/src/client (#1030)\n\nBumps [shell-quote](https://github.com/ljharb/shell-quote) from 1.8.4 to 1.10.0.\n- [Changelog](https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/ljharb/shell-quote/compare/v1.8.4...v1.10.0)\n\n---\nupdated-dependencies:\n- dependency-name: shell-quote\n dependency-version: 1.10.0\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "77194f159a869b566b7f1bf5f972e2f0a245aee2", "tree": "45b432e38224396a98d89f8256f4db176317d0b6", "parents": [ "afb4233cae067234783b574dffd81082b93fc227" ], "author": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Fri Jul 24 13:48:13 2026 +0200" }, "committer": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Fri Jul 24 13:48:13 2026 +0200" }, "message": "[perf] improve standard perf\n" }, { "commit": "afb4233cae067234783b574dffd81082b93fc227", "tree": "088a7fe37a19a3b94ceaed4627ac66c10321794f", "parents": [ "90f07a3f4b448fc7ef9e862fe49c20c7b9ec8d84" ], "author": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Fri Jul 17 11:30:16 2026 +0200" }, "committer": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Fri Jul 17 11:30:16 2026 +0200" }, "message": "RAT\n" }, { "commit": "90f07a3f4b448fc7ef9e862fe49c20c7b9ec8d84", "tree": "aeed8399e78c118dfa6be734c6065f908805b520", "parents": [ "8d2b6aefaeb6f91a95dd59445ba6611ad6b665d0" ], "author": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Thu Jul 16 17:37:30 2026 +0200" }, "committer": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Thu Jul 16 17:37:30 2026 +0200" }, "message": "MYFACES-4729\n" }, { "commit": "8d2b6aefaeb6f91a95dd59445ba6611ad6b665d0", "tree": "b38e17887295ffaacbef4f4913a0e0cc708d0a87", "parents": [ "7a9a1f931677cfee7eceb3b45bd34c61d0c84973" ], "author": { "name": "Volodymyr Siedlecki", "email": "volosied@gmail.com", "time": "Tue Apr 22 16:05:32 2025 -0400" }, "committer": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Thu Jul 16 17:20:52 2026 +0200" }, "message": "MYFACES-4721: Update AUTOCOMPLETE_OFF_VIEW_STATE - \u0027one-time-code\u0027 as default\n" }, { "commit": "7a9a1f931677cfee7eceb3b45bd34c61d0c84973", "tree": "ba23f84d5348c719db5706e0068b69c3640d8b31", "parents": [ "31d2b1220572286816dbedecf5d8dca900727e99" ], "author": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Thu Jul 16 17:03:31 2026 +0200" }, "committer": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Thu Jul 16 17:03:31 2026 +0200" }, "message": "add benchmark\n" }, { "commit": "31d2b1220572286816dbedecf5d8dca900727e99", "tree": "dec4e49d64ac1b95ea9c6e88ace8f71b56f91830", "parents": [ "0e84278c5e0e03b8654531a2ed05d10c14e209b4" ], "author": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Thu Jul 16 15:00:26 2026 +0200" }, "committer": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Thu Jul 16 15:36:04 2026 +0200" }, "message": "[perf] skip non-contributing EL resolvers in convertToType and null-base getValue\n" }, { "commit": "0e84278c5e0e03b8654531a2ed05d10c14e209b4", "tree": "9e0a3cc33dfda58a73b0c2cde698f8e433036462", "parents": [ "04f519cc12b886a5246cbc2000e9e143e1850cc1" ], "author": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Thu Jul 16 14:00:56 2026 +0200" }, "committer": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Thu Jul 16 15:36:04 2026 +0200" }, "message": "[perf] add small buffering, this a big win on jetty\n" }, { "commit": "04f519cc12b886a5246cbc2000e9e143e1850cc1", "tree": "47bf689013d00fbc85cdef9694d94db978bdf25f", "parents": [ "59b439a2fe042ef02a72fa2d1e876740c649c8d8" ], "author": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Thu Jul 16 14:00:29 2026 +0200" }, "committer": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Thu Jul 16 15:36:04 2026 +0200" }, "message": "[perf] small rendering optimization\n" }, { "commit": "59b439a2fe042ef02a72fa2d1e876740c649c8d8", "tree": "4100b9590a22efddffd1c5d217b84d67290d6515", "parents": [ "d13098dd613a507c45a9b6806df4921fe12a2481" ], "author": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Thu Jul 16 13:59:24 2026 +0200" }, "committer": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Thu Jul 16 15:36:04 2026 +0200" }, "message": "[perf] use methods over attributes map\n" }, { "commit": "d13098dd613a507c45a9b6806df4921fe12a2481", "tree": "2b7d17647909e297f817b5bfb9beafbe978e2cfe", "parents": [ "b41d0d9f280a8650505daf90202351e834726d18" ], "author": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Thu Jul 16 13:59:03 2026 +0200" }, "committer": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Thu Jul 16 15:36:04 2026 +0200" }, "message": "[perf] small UIData enhancement\n" }, { "commit": "b41d0d9f280a8650505daf90202351e834726d18", "tree": "651b6bcd0c83765df99c2447b2385ee07a094f28", "parents": [ "f8e8b1a97a93bebd775a13edfaff91b046819ed9" ], "author": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Thu Jul 16 13:58:40 2026 +0200" }, "committer": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Thu Jul 16 15:36:04 2026 +0200" }, "message": "[perf] optimize ELResolver impls\n" }, { "commit": "f8e8b1a97a93bebd775a13edfaff91b046819ed9", "tree": "2831a85b8f4ce6675f98b869d7ecfe4d25f90fd5", "parents": [ "8dea567b4a0816348ec63730575365d3a61360d4" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Jul 15 21:19:13 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jul 15 21:19:13 2026 -0400" }, "message": "build(deps): bump websocket-driver in /api/src/client (#1027)" }, { "commit": "8dea567b4a0816348ec63730575365d3a61360d4", "tree": "7374450e8a751e88d204005f84507b542f1b2214", "parents": [ "a1b72cb061725ad0cb8f344fd3da6349bfedbf64" ], "author": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Wed Jul 08 14:28:59 2026 +0200" }, "committer": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Wed Jul 08 14:28:59 2026 +0200" }, "message": "[perf] conditionally check for duplicate IDs\n" }, { "commit": "a1b72cb061725ad0cb8f344fd3da6349bfedbf64", "tree": "90c138d0741f7dd4da3312962c1d40a9c617d236", "parents": [ "e7fb716922027f0edfec8e93698c072f18a2a7f4" ], "author": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Tue Jul 07 23:30:19 2026 +0200" }, "committer": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Tue Jul 07 23:30:50 2026 +0200" }, "message": "increase buffer for tests\n" }, { "commit": "e7fb716922027f0edfec8e93698c072f18a2a7f4", "tree": "7766cbe03c235c3e3443faa6cd0bcf8a5a617312", "parents": [ "6f38195d980c12051f6e4d5318bc423b3640f58e" ], "author": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Tue Jul 07 23:12:01 2026 +0200" }, "committer": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Tue Jul 07 23:12:01 2026 +0200" }, "message": "[perf] reduce array instances\n" }, { "commit": "6f38195d980c12051f6e4d5318bc423b3640f58e", "tree": "6031a612b35b9b6e829cf4ef9e0c5ea288746801", "parents": [ "06d0131a692413cf69be9198f0ffdf0a918b3999" ], "author": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Tue Jul 07 23:11:38 2026 +0200" }, "committer": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Tue Jul 07 23:11:38 2026 +0200" }, "message": "[perf] improve initial collection size\n" }, { "commit": "06d0131a692413cf69be9198f0ffdf0a918b3999", "tree": "cbc4e3e92b521b1129ea99f31512dbd6fd6acfc5", "parents": [ "91cef07d73ab069b441458033ed8e0f3a00e203d" ], "author": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Tue Jul 07 12:57:19 2026 +0200" }, "committer": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Tue Jul 07 12:57:19 2026 +0200" }, "message": "[perf] optimize APPLY_REQUEST_VALUES, PROCESS_VALIDATIONS, UPDATE_MODEL_VALUES cycles\n" }, { "commit": "91cef07d73ab069b441458033ed8e0f3a00e203d", "tree": "47ba40d6f8f9ccb30ad79749b5bccabe8b0f5822", "parents": [ "541dd02120e50e8cdcb87ab626a1944e3b64fffb" ], "author": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Thu Jul 02 18:03:08 2026 +0200" }, "committer": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Thu Jul 02 18:03:08 2026 +0200" }, "message": "fix quarkus\n" }, { "commit": "541dd02120e50e8cdcb87ab626a1944e3b64fffb", "tree": "cc68a8ce2b2cb60a0388a669c29f3bfb3e15039e", "parents": [ "5313eca4846a2a9c5cf3ba4316488fad01c12e74" ], "author": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Thu Jul 02 17:47:36 2026 +0200" }, "committer": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Thu Jul 02 17:47:36 2026 +0200" }, "message": "[perf] set collection size for StateHelper\n" }, { "commit": "5313eca4846a2a9c5cf3ba4316488fad01c12e74", "tree": "44a982d5adddef8b5aee6dede00d56b56aafa769", "parents": [ "86d575dbba6f1fc8478dbe067494586542348248" ], "author": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Thu Jul 02 17:46:17 2026 +0200" }, "committer": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Thu Jul 02 17:46:17 2026 +0200" }, "message": "[perf] avoid CDI events without @Observes\n" }, { "commit": "86d575dbba6f1fc8478dbe067494586542348248", "tree": "8c7a17b72410fdf6b3f8442f02bd21f75118e9f3", "parents": [ "c19bbd8c35ef84eb80f8b3ca21b95b382b88fcc7" ], "author": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Thu Jul 02 09:57:15 2026 +0200" }, "committer": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Thu Jul 02 09:57:15 2026 +0200" }, "message": "fixed regression reported by BalusC\n" }, { "commit": "c19bbd8c35ef84eb80f8b3ca21b95b382b88fcc7", "tree": "19d2064ba01d866ac8e86ea6f7549e57e9ad502b", "parents": [ "4847b612251f6287027182dc147e9e678712b055" ], "author": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Thu Jul 02 09:55:03 2026 +0200" }, "committer": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Thu Jul 02 09:55:27 2026 +0200" }, "message": "fixed regression reported by BalusC\n" }, { "commit": "4847b612251f6287027182dc147e9e678712b055", "tree": "0aee667ce9e08fec911c31da592d4c43ffd3ed85", "parents": [ "05fd55d7544e9058baffc443277df0cfab9dd3a1" ], "author": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Thu Jul 02 09:25:04 2026 +0200" }, "committer": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Thu Jul 02 09:25:04 2026 +0200" }, "message": "fix for https://github.com/eclipse-ee4j/mojarra/pull/5807\n" }, { "commit": "05fd55d7544e9058baffc443277df0cfab9dd3a1", "tree": "f9f43adb8f8ce5988d194b5b7791854ccc44325f", "parents": [ "7075dfbe0faa609949cede08aba5870f7aaf3b77" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Jun 24 10:20:49 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Jun 24 10:20:49 2026 -0400" }, "message": "build(deps): bump actions/cache from 5 to 6 (#1026)\n\nBumps [actions/cache](https://github.com/actions/cache) from 5 to 6.\n- [Release notes](https://github.com/actions/cache/releases)\n- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)\n- [Commits](https://github.com/actions/cache/compare/v5...v6)\n\n---\nupdated-dependencies:\n- dependency-name: actions/cache\n dependency-version: \u00276\u0027\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "7075dfbe0faa609949cede08aba5870f7aaf3b77", "tree": "076ea9b311908a02dbbf113dc5c60bec6139e460", "parents": [ "fe63fd647d254ebdfbcf9082b162551f45134e75" ], "author": { "name": "Melloware", "email": "mellowaredev@gmail.com", "time": "Mon Jun 22 08:15:15 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 22 08:15:15 2026 -0400" }, "message": "MYFACES-4757: 5.0 Fix race conditions of CopyOnWriteList (#1022)\n\n* MYFACES-4757: 5.0 Fix race conditions of CopyOnWriteList\n\n* MYFACES-4757: 5.0 Fix race conditions of CopyOnWriteList" }, { "commit": "fe63fd647d254ebdfbcf9082b162551f45134e75", "tree": "8c68aa25eb58dfbcf6b801edfaee1506b7c6921e", "parents": [ "9ba3700e000052f528566716c3ba32ace05728b1" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Sat Jun 20 09:42:39 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat Jun 20 09:42:39 2026 -0400" }, "message": "build(deps): bump actions/checkout from 6 to 7 (#1021)\n\nBumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v6...v7)\n\n---\nupdated-dependencies:\n- dependency-name: actions/checkout\n dependency-version: \u00277\u0027\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "9ba3700e000052f528566716c3ba32ace05728b1", "tree": "c6bc5c53b092047c686c7b2abf460aef0c8f7aa3", "parents": [ "1407d3c2680b0ecb743711c49a945f9d696b1692" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Sat Jun 20 09:42:20 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat Jun 20 09:42:20 2026 -0400" }, "message": "build(deps): bump undici from 7.25.0 to 7.28.0 in /api/src/client (#1020)\n\nBumps [undici](https://github.com/nodejs/undici) from 7.25.0 to 7.28.0.\n- [Release notes](https://github.com/nodejs/undici/releases)\n- [Commits](https://github.com/nodejs/undici/compare/v7.25.0...v7.28.0)\n\n---\nupdated-dependencies:\n- dependency-name: undici\n dependency-version: 7.28.0\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "1407d3c2680b0ecb743711c49a945f9d696b1692", "tree": "cd44cb32cad0c7be1a3e9e19dff0d5633045fc0e", "parents": [ "7a07dafdd53772b64d4c6c6f361492c59cbcc6c5" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Sat Jun 20 09:41:46 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat Jun 20 09:41:46 2026 -0400" }, "message": "build(deps): bump launch-editor from 2.12.0 to 2.14.1 in /api/src/client (#1019)\n\nBumps [launch-editor](https://github.com/vitejs/launch-editor) from 2.12.0 to 2.14.1.\n- [Commits](https://github.com/vitejs/launch-editor/compare/v2.12.0...v2.14.1)\n\n---\nupdated-dependencies:\n- dependency-name: launch-editor\n dependency-version: 2.14.1\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "7a07dafdd53772b64d4c6c6f361492c59cbcc6c5", "tree": "7368ee283ec6c45273b2f02ea05d0ed225dc6883", "parents": [ "f6d4101b935b76a4ee50555a3a63b6ba0dfcf9c0" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Sat Jun 20 09:41:30 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat Jun 20 09:41:30 2026 -0400" }, "message": "build(deps-dev): bump webpack-dev-server in /api/src/client (#1018)\n\nBumps [webpack-dev-server](https://github.com/webpack/webpack-dev-server) from 5.2.4 to 5.2.5.\n- [Release notes](https://github.com/webpack/webpack-dev-server/releases)\n- [Changelog](https://github.com/webpack/webpack-dev-server/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/webpack/webpack-dev-server/compare/v5.2.4...v5.2.5)\n\n---\nupdated-dependencies:\n- dependency-name: webpack-dev-server\n dependency-version: 5.2.5\n dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "f6d4101b935b76a4ee50555a3a63b6ba0dfcf9c0", "tree": "66fbdd8fc377b6f80a05728e176a077438d368dd", "parents": [ "076919f042a9c33e757af14ac7f6005e092f9693" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Sat Jun 20 09:41:19 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat Jun 20 09:41:19 2026 -0400" }, "message": "build(deps-dev): bump markdown-it in /api/src/client (#1017)\n\nBumps [markdown-it](https://github.com/markdown-it/markdown-it) from 14.1.1 to 14.2.0.\n- [Changelog](https://github.com/markdown-it/markdown-it/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/markdown-it/markdown-it/compare/14.1.1...14.2.0)\n\n---\nupdated-dependencies:\n- dependency-name: markdown-it\n dependency-version: 14.2.0\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "076919f042a9c33e757af14ac7f6005e092f9693", "tree": "dd551a34ba057417557dae68565ac11e1d6c79d9", "parents": [ "29fc7352f4b0543346338e89e7de75bc9a20eba8" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Sat Jun 20 09:41:03 2026 -0400" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Sat Jun 20 09:41:03 2026 -0400" }, "message": "build(deps-dev): bump esbuild from 0.28.0 to 0.28.1 in /api/src/client (#1016)\n\nBumps [esbuild](https://github.com/evanw/esbuild) from 0.28.0 to 0.28.1.\n- [Release notes](https://github.com/evanw/esbuild/releases)\n- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/evanw/esbuild/compare/v0.28.0...v0.28.1)\n\n---\nupdated-dependencies:\n- dependency-name: esbuild\n dependency-version: 0.28.1\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "29fc7352f4b0543346338e89e7de75bc9a20eba8", "tree": "04ddd0c00c1d139c64a1aa970a347be956d2341a", "parents": [ "39fa9661e56113728d8b05821fcc1c54d79dd624" ], "author": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Thu Jun 18 18:11:29 2026 +0200" }, "committer": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Thu Jun 18 18:11:29 2026 +0200" }, "message": "cosmetics\n" }, { "commit": "39fa9661e56113728d8b05821fcc1c54d79dd624", "tree": "462e03955873842e599c5f5eba0d2d22f54e4be2", "parents": [ "1351a2f896c75ec81f9e31776d08c4b993ebfa59" ], "author": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Thu Jun 18 16:24:36 2026 +0200" }, "committer": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Thu Jun 18 16:24:36 2026 +0200" }, "message": "CDI 4.1 compatibility\n" }, { "commit": "1351a2f896c75ec81f9e31776d08c4b993ebfa59", "tree": "0421643c802e5620e05570b4cb2882c6ba5a5af0", "parents": [ "53bff4a75dac535b0a9184cc63936dd1aba94a91" ], "author": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Thu Jun 18 15:54:41 2026 +0200" }, "committer": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Thu Jun 18 15:54:57 2026 +0200" }, "message": "refactored propertiesMarked / eventsMarked\n" }, { "commit": "53bff4a75dac535b0a9184cc63936dd1aba94a91", "tree": "b51ee6f64579a16d5318001660f7cd339a619656", "parents": [ "bcb4bf48d0637b5555a85eacd6f79232bd5bc3e1", "795b98625726bdbe35630c8406240736c34c7b07" ], "author": { "name": "Werner Punz", "email": "werpu@apache.org", "time": "Fri Jun 12 14:13:39 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Jun 12 14:13:39 2026 +0200" }, "message": "Merge pull request #1015 from werpu/main\n\nhttps://issues.apache.org/jira/browse/MYFACES-4756: fix from upstream…" }, { "commit": "795b98625726bdbe35630c8406240736c34c7b07", "tree": "b51ee6f64579a16d5318001660f7cd339a619656", "parents": [ "bcb4bf48d0637b5555a85eacd6f79232bd5bc3e1" ], "author": { "name": "werpu", "email": "werner.punz@gmail.com", "time": "Fri Jun 12 14:02:49 2026 +0200" }, "committer": { "name": "werpu", "email": "werner.punz@gmail.com", "time": "Fri Jun 12 14:02:57 2026 +0200" }, "message": "https://issues.apache.org/jira/browse/MYFACES-4756: fix from upstream project\n" }, { "commit": "bcb4bf48d0637b5555a85eacd6f79232bd5bc3e1", "tree": "f971782dc11e9f8b1ac3d4dd39d1be812d84700d", "parents": [ "89d92bc79933f13addc5e332aed622315af70e8d" ], "author": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Fri Jun 12 13:01:38 2026 +0200" }, "committer": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Fri Jun 12 13:01:54 2026 +0200" }, "message": "also check empty list/map\n" }, { "commit": "89d92bc79933f13addc5e332aed622315af70e8d", "tree": "3bbc6aa9f3ff169184089bf3675db3999e6ea8b8", "parents": [ "d2225d2d6bd3496df1f99564d51eeb48fdad4269" ], "author": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Fri Jun 12 11:27:37 2026 +0200" }, "committer": { "name": "tandraschko", "email": "tandraschko@apache.org", "time": "Fri Jun 12 11:27:57 2026 +0200" }, "message": "#995 fix broken ViewScope in AJAX requests\n" } ], "next": "d2225d2d6bd3496df1f99564d51eeb48fdad4269" }