Google Git Google Git
Sign in
apache/ofbiz-framework/HEAD
  1. eb01ea1 Bump com.fasterxml.jackson.core:jackson-databind from 2.22.3 to 2.22.4 by dependabot[bot] · 23 hours ago trunk
  2. 9f5cb34 Bump org.simplejavamail:utils-mail-dkim from 3.3.0 to 3.3.1 by dependabot[bot] · 2 days ago
  3. 7099f47 Fixed: Shopping list permission services check the wrong permission action (OFBIZ-13702) by Mridul Pathak · 30 hours ago
  4. 9de0431 Allow the Scorecard analysis to be run by hand by Jacopo Cappellato · 30 hours ago
  5. 696e14e Give each push build of the Java CI workflow its own concurrency group by Jacopo Cappellato · 30 hours ago
  6. af414fd Run lightweight workflows on ubuntu-slim runners by Jacopo Cappellato · 2 days ago
  7. 1cae5ea Run the Scorecard analysis weekly instead of on every push by Jacopo Cappellato · 2 days ago
  8. 3734acd Run the Java CI workflow only when it is useful by Jacopo Cappellato · 2 days ago
  9. b6c861c Change some of the GitHub Actions runners from ubuntu-latest to ubuntu-slim for improved efficiency by Jacopo Cappellato · 2 days ago
  10. fac9b4c Improved: Group the security fixes and security hardening in the release notes (OFBIZ-13696) by Mridul Pathak · 33 hours ago
  11. cc687ca Fixed: Check ownership of the order, payment method and shipping address used by shopping lists (OFBIZ-13701) by Mridul Pathak · 2 days ago
  12. 53a378b Bump gradle-wrapper from 8.14.5 to 8.14.6 by dependabot[bot] · 2 days ago
  13. 8b9358c Fixed: Check that the dataResourceId belongs to the contentId in SimpleContentViewHandler by Mridul Pathak · 2 days ago
  14. 35f1a66 Fixed: Check the owner of the shopping list in checkShoppingListSecurity by Mridul Pathak · 2 days ago
  15. 4afb1bc Fixed: init-gradle-wrapper installs a wrapper jar that does not match the published checksum (OFBIZ-13699) by Mridul Pathak · 2 days ago
  16. 34a0423 Remove Jainrain matches from spotbugs exclude.xml by Anahita Goljahani · 2 days ago
  17. bccb166 Improved: Prevent the datasources from being reopened during shutdown (OFBIZ-13686) by Mridul Pathak · 3 days ago
  18. 5d8d792 Fixed: Close the embedded H2 database cleanly on shutdown (OFBIZ-13686) by Mridul Pathak · 7 days ago
  19. 7dd53e8 Fix blank Redoc page after the upgrade to Redoc 3 by Jacopo Cappellato · 3 days ago
  20. 7d3c108 Bump swagger-ui-dist from 5.33.2 to 5.33.3 in /framework/rest-api by dependabot[bot] · 3 days ago
  21. f1faa87 Upgrade Redoc to 3.0.1 and remove the npm overrides by Jacopo Cappellato · 3 days ago
  22. 6294153 Fix Redoc failing to load the OpenAPI specification by Jacopo Cappellato · 3 days ago
  23. 46d7803 Fixed: Check every URL parameter value for markup in ControlFilter by Mridul Pathak · 4 days ago
  24. 5343967 Improved: Remove the parsing of query strings encoded in the request path by Mridul Pathak · 4 days ago
  25. ddccb6d Fixed: Build the sort links of list forms with an encoded query string by Mridul Pathak · 4 days ago
  26. d1665ff Fixed: CodeQL workflow fails while printing debug logs by Mridul Pathak · 4 days ago
  27. 0003431 Fixed: Encode the source URL of menu, tree and form images by Mridul Pathak · 4 days ago
  28. c2516b5 Fixed: Require the ORDERMGR_UPDATE permission in the updateTrackingNumber service by Mridul Pathak · 4 days ago
  29. a1602c5 Fixed: Enforces order-update authorization in updateShipGroupShipInfo and addItemToApprovedOrder by Mridul Pathak · 4 days ago
  30. 70788dc Fixed: Encode the source URL of screen image widgets by Mridul Pathak · 4 days ago
  31. 1a1d9c1 Fixed: Add permission checks to WebAnalyticsConfig services by Mridul Pathak · 8 days ago
  32. 503f629 Bump actions/setup-java from 6.0.1 to 6.1.0 by dependabot[bot] · 5 days ago
  33. 314eaf8 Bump github/codeql-action/upload-sarif from 4.38.3 to 4.39.0 by dependabot[bot] · 5 days ago
  34. bb78d45 Bump the codeql-action group with 2 updates by dependabot[bot] · 5 days ago
  35. 8286d1d Improved: Set the release_branch label of pull requests automatically (OFBIZ-13696) by Mridul Pathak · 5 days ago
  36. 374fdba Improved: Reject uploaded PDF files with hidden attachments or active actions (OFBIZ-13693) by Mridul Pathak · 5 days ago
  37. 4e30277 Improved: Label pull requests titled "Bump ..." as dependencies so that the release notes leave them out (OFBIZ-13696) by Mridul Pathak · 5 days ago
  38. 44102f1 Implemented: Generate release notes with GitHub and label pull requests by type from their title prefix (OFBIZ-13696) by Mridul Pathak · 5 days ago
  39. f617267 Fixed: cleanAll deletes the version-controlled package-lock.json files (OFBIZ-13695) by Mridul Pathak · 5 days ago
  40. 6473bad Fixed: Survey PDF services throw a NullPointerException when contentId matches no Content (OFBIZ-13692) by Mridul Pathak · 6 days ago
  41. 4d701c9 Bump com.auth0:java-jwt from 4.6.1 to 4.6.2 by dependabot[bot] · 6 days ago
  42. 1ff6ac5 Bump com.github.ben-manes.caffeine:caffeine from 3.3.0 to 3.3.1 by dependabot[bot] · 6 days ago
  43. 4ccdb3e Improved: The macro renderers cannot compile a string as a template anymore (OFBIZ-13682) by Mridul Pathak · 6 days ago
  44. 2c8fc6d Fixed: The tests of the text find and range find fields reference the static mock of UtilProperties (OFBIZ-13681) by Mridul Pathak · 6 days ago
  45. cc6d9d5 Improved: MacroFormRenderer builds the find, lookup, pagination, file, password, image and banner macro calls with RenderableFtlFormElementsBuilder (OFBIZ-13681) by Mridul Pathak · 6 days ago
  46. 4b0e5aa Fixed: Survey PDF services read any server file named in the pdfFileNameIn parameter (OFBIZ-13690) by Mridul Pathak · 6 days ago
  47. c126448 Fixed: Preserve Webtools theme when editing entities (OFBIZ-12072) by Rehan Khan · 13 days ago
  48. c1f4c2b3 Fixed: PDF survey services fail to store answers and throw a NullPointerException when no PDF is given (OFBIZ-13688) by Mridul Pathak · 6 days ago
  49. ab38bcd Improved: MacroFormRenderer builds the form structure and hyperlink macro calls with RenderableFtlFormElementsBuilder (OFBIZ-13680) by Mridul Pathak · 6 days ago
  50. 5611b68 Fixed: Allow the content upload directory in the default LOCAL_FILE allow-list (OFBIZ-13689) by Mridul Pathak · 6 days ago
  51. 35d68ab Improved: MacroFormRenderer builds the check, radio, submit, reset, hidden and field title macro calls with RenderableFtlFormElementsBuilder (OFBIZ-13679) by Mridul Pathak · 7 days ago
  52. 5de1b91 Improved: Replace OpenPDF with Apache PDFBox and drop the OpenPDF dependency (OFBIZ-13684) by Mridul Pathak · 7 days ago
  53. 9c0d307 Fixed: URL.getFile() used as a filesystem path breaks OFBiz when the install directory contains a space (OFBIZ-13687) by Mridul Pathak · 7 days ago
  54. 52cd10d Improved: MacroTreeRenderer passes the macro parameters as data and writes to the given writer (OFBIZ-13678) by Mridul Pathak · 7 days ago
  55. c5ac496 Improved: MacroScreenRenderer passes the macro parameters as data (OFBIZ-13677) by Mridul Pathak · 7 days ago
  56. fb6b293 Improved: MacroMenuRenderer passes the macro parameters as data (OFBIZ-13676) by Mridul Pathak · 7 days ago
  57. 7bd72c4 Bump swagger-ui-dist from 5.33.1 to 5.33.2 in /framework/rest-api by dependabot[bot] · 7 days ago
  58. 9fe2a26 Bump dompurify in /themes/common-theme/webapp/common-theme/js by dependabot[bot] · 7 days ago
  59. c0513fb Improved: FtlWriter calls every macro through one constant template (OFBIZ-13675) by Mridul Pathak · 9 days ago
  60. 5b18560 Improved: Use a single Apache Shiro version and drop shiro-core (OFBIZ-13685) by Mridul Pathak · 7 days ago
  61. 4aab182 Bump ossf/scorecard-action from 2.4.4 to 2.5.0 by dependabot[bot] · 8 days ago
  62. b8b72d5 Improved: Group Dependabot updates for codeql-action init and analyze by Mridul Pathak · 8 days ago
  63. 1953858 Improved: Pin Scorecard upload-sarif to a codeql-action release instead of a main-branch commit by Mridul Pathak · 8 days ago
  64. a68331a Bump tika from 3.3.2 to 3.3.3 by dependabot[bot] · 8 days ago
  65. 3a5cc5c Improved: Bump github/codeql-action/init and analyze from 4.38.2 to 4.38.3 by Mridul Pathak · 9 days ago
  66. 0f18dff Bump github/codeql-action/upload-sarif by dependabot[bot] · 9 days ago
  67. aef4085 Fixed: Missing permission checks on FinAccount GL-reconciliation services (OFBIZ-13683) by Mridul Pathak · 9 days ago
  68. 4da78d2 Bump actions/upload-artifact from 7.0.1 to 7.0.2 by dependabot[bot] · 9 days ago
  69. 7bb3486 Bump org.apache.cxf:cxf-rt-frontend-jaxrs from 4.2.3 to 4.2.4 by dependabot[bot] · 9 days ago
  70. 66d9f60 Bump tomcat from 10.1.60 to 10.1.61 by dependabot[bot] · 9 days ago
  71. bda0073 Bump com.twelvemonkeys.imageio:imageio-tiff from 3.15.2 to 3.15.3 by dependabot[bot] · 9 days ago
  72. 5f6705b Improved: Scope password-reset JWTs to their purpose, confined to the password-change flow by Mridul Pathak · 9 days ago
  73. 66803ec Improved: GL-posting and order-completion invoicing commit-ECAs lack run-as-user="system" (OFBIZ-13673) by Mridul Pathak · 9 days ago
  74. cd37362 Fixed: updateContactList does not enforce marketing UPDATE permission (OFBIZ-13672) by Mridul Pathak · 9 days ago
  75. bd05804 Fixed: Payment method create services accept a caller-supplied paymentMethodId without verifying it belongs to the authorized party (OFBIZ-13671) by Mridul Pathak · 10 days ago
  76. 69e3ead Improved: Validate the FTP connection target hostname in sendContentToFtp before connecting by Mridul Pathak · 9 days ago
  77. 3b5423b Elevate createAccountAndCredit's internal FinAccount writes to the system user by Mridul Pathak · 10 days ago
  78. f3207bd Add permission checks to FinAccount create/update/delete services by Mridul Pathak · 10 days ago
  79. 98e498f Fixed: createReturnItem() does not verify OrderItem ownership before attaching it to a ReturnHeader by Mridul Pathak · 9 days ago
  80. db50cbc Improved: Auto-generated indicator (Y/N) fields silently default to "Y" and overwrite a NULL value on unrelated form saves (OFBIZ-13503) (#2239) by Pranay Pandey · 10 days ago
  81. 97f7416 Correct Italian translations for various order-related labels in OrderUiLabels.xml by Anahita Goljahani · 10 days ago
  82. c667dcf Fixed: Enforces order-update authorization in updateOrderPaymentPreference by Mridul Pathak · 13 days ago
  83. 5646698 Improved: Validate the InventoryItem and the issued quantity in the issueInventoryItemToShipment service by Mridul Pathak · 2 weeks ago
  84. e95e920 Fixed: Anonymous ecommerce checkout accepts an arbitrary partyId and lets it be used to overwrite another party's name and attach caller-supplied contact and payment data to that party (OFBIZ-13669) by Mridul Pathak · 13 days ago
  85. 45506b3 Bump github/codeql-action/upload-sarif by dependabot[bot] · 13 days ago
  86. 3b63151 Fixed: Promo conditions PPIP_ORST_YEAR and PPIP_ORST_LAST_YEAR read the order sub-total from the wrong map (OFBIZ-13667) by Mridul Pathak · 13 days ago
  87. 7ab39ee Fixed: getOrderedSummaryInformation ignores explicit fromDate and thruDate (OFBIZ-13664) by Mridul Pathak · 13 days ago
  88. 7088506 Fixed: Regressions in ShoppingListServicesScript.groovy introduced by the mini-lang conversion (OFBIZ-13662) by Mridul Pathak · 13 days ago
  89. 528199b Fixed: Regressions in QuoteServicesScript.groovy introduced by the mini-lang conversion (OFBIZ-13660) by Mridul Pathak · 2 weeks ago
  90. 4a10a9f Fixed: Regressions in ShipmentServices.groovy introduced by the mini-lang conversion (OFBIZ-13661) by Mridul Pathak · 2 weeks ago
  91. a37c9c7 Bump github/codeql-action/upload-sarif by dependabot[bot] · 2 weeks ago
  92. 2cc834f Fixed: Regressions in CategoryServicesScript.groovy introduced by the mini-lang conversion (OFBIZ-13659) by Mridul Pathak · 2 weeks ago
  93. e955a14 Fixed: Regressions in OrderServicesScript.groovy introduced by the mini-lang conversion (OFBIZ-13663) by Mridul Pathak · 2 weeks ago
  94. f4a6d19 Bump github/codeql-action/upload-sarif by dependabot[bot] · 2 weeks ago
  95. df3aa3c Fixed: Hardens security by adding missing permission check in OrderServices (#2217) by Lukas-Finster · 2 weeks ago
  96. 9866d9d Fixed: Adds missing CREATE and UPDATE accounting permissions (#2212) by Lukas-Finster · 2 weeks ago
  97. 617066a Fixed: Converted Groovy scripts read configuration with UtilProperties, ignoring SystemProperty overrides the original mini-lang honoured (OFBIZ-13655) by Mridul Pathak · 2 weeks ago
  98. eaad9d2 Fixed: The phone extension entered when creating an SFA account or lead is silently dropped (OFBIZ-13657) by Mridul Pathak · 2 weeks ago
  99. 44d73d3 Fixed: Two update() DSL calls pass two arguments to EntityUpdateBuilder.where(), which only accepts a Map (OFBIZ-13656) by Mridul Pathak · 2 weeks ago
  100. bafce89 Fixed: Remove the unused viewprofile request of the accounting webapp, which fails with an error page (OFBIZ-13653) by Mridul Pathak · 2 weeks ago