- b8dabb7 Remove comment management from the AtomPub service (#215) by David M. Johnson · 5 days ago master
- 457de9c Merge pull request #154 from mraible/feature/jakarta-ee-10-migration by Matt Raible · 6 days ago
- 74bc2ee Merge master into feature/jakarta-ee-10-migration by Matt Raible · 6 days ago
- 0ceb0f3 Fix AtomPub media naming, paging and XML output, and editor menus (#213) by David M. Johnson · 6 days ago
- a7d3695 Merge pull request #214 from apache/rol-2185-comment-shared-cache by Matt Raible · 6 days ago
- 97ad41d ROL-2185: Keep comments out of EclipseLink's shared cache by Matt Raible · 7 days ago
- 987c990 Drop a comment about the removed OAuth path in the AtomPub servlet by Matt Raible · 7 days ago
- 2f89e31 Add Roller 7 upgrade notes for the Jakarta EE baseline and the OAuth 1.0a and OpenID 2.0 removals by Matt Raible · 7 days ago
- 492160a Merge master into feature/jakarta-ee-10-migration by Matt Raible · 7 days ago
- 359c480 Bring #209 and #211 into master (#212) by David M. Johnson · 7 days ago
- c2ca40e Replace ROME Propono AtomPub server with self-contained StAX implementation (#210) by David M. Johnson · 7 days ago
- 1d739ef Merge branch 'roller-6.1.x' into master by David M. Johnson · 8 days ago
- 3dc3cc9 Filter HTML-significant characters out of tag names (#208) by David M. Johnson · 8 days ago roller-6.1.x roller-6.1.7-rc2
- e25af33 Merge branch 'roller-6.1.x' into master by David M. Johnson · 9 days ago
- eb902c6 Set version to 6.1.7 by David M. Johnson · 9 days ago roller-6.1.7-rc1
- cb13c09 Leave runtime logs directories out of the source archive by David M. Johnson · 9 days ago
- ece656f Print the one-time setup token to the console as well as the log by David M. Johnson · 9 days ago
- b67a82b Update the NOTICE copyright year to 2026 by David M. Johnson · 9 days ago
- 736ab11 Serve AtomPub through a Roller servlet (#198) by David M. Johnson · 9 days ago
- e34addd Keep wrapped pojos out of the template surface (#199) by David M. Johnson · 10 days ago
- 5adadd9 Fix bugs found while testing the 6.1.7 integration build (#207) by David M. Johnson · 10 days ago
- 51c943b ROL-2184: Preserve pasted entry images when publishing (#205) by David M. Johnson · 10 days ago
- e41a1a1 Turn Planet off by default and require POST for its admin changes (#200) by David M. Johnson · 10 days ago
- c2789ab Adopt Apache Commons Secure XML for XML parsing (#201) by David M. Johnson · 13 days ago
- 6bb3210 Run CI and CodeQL on roller-6.1.x (#206) by David M. Johnson · 13 days ago
- a59d5ff No single quotes in media file insert url on mediaFileAdd!save.rol (#197) by gregh3269 · 14 days ago
- 15d4fce Add security model and SECURITY.md (#202) by David M. Johnson · 14 days ago
- 4b5600c Merge pull request #194 from apache/add-missing-license-headers by Matt Raible · 3 weeks ago
- 32f477e Merge pull request #196 from apache/upgrade-gaurav-jquery by Matt Raible · 3 weeks ago
- 9f408a2 No single quotes in media file insert url on mediaFileAdd!save.rol (#193) by gregh3269 · 3 weeks ago
- aff1a49 Start Roller 7 development: set version to 7.0.0-SNAPSHOT by David M. Johnson · 3 weeks ago
- 080043a Start 6.1.7 development: set version to 6.1.7-SNAPSHOT by David M. Johnson · 3 weeks ago
- 43f5290 Fold release and disclosure lessons into the release and security skills (#195) by David M. Johnson · 3 weeks ago
- eaca41f Update the gaurav theme's jQuery and Bootstrap, drop unused jQuery 2.1.1 by Matt Raible · 3 weeks ago
- 2a34c6d Check license headers with Apache RAT in CI by Matt Raible · 3 weeks ago
- a944dcb Change database host port in Dockerfile (#151) by Mustafa Celal GÜLER · 3 weeks ago
- 3e81b25 Bind request parameters only to @StrutsParameter-annotated members by Matt Raible · 3 weeks ago
- 62475d9 Add the ASF license header to source files that were missing it by Matt Raible · 3 weeks ago
- 6129f43 Let the setup token page share UIAction's injected request by Matt Raible · 3 weeks ago
- c5d854b Update the JDBC driver and mail jars the Docker image downloads by Matt Raible · 3 weeks ago
- fc2d819 Update dependencies to their latest compatible releases and clear known CVEs by Matt Raible · 3 weeks ago
- 14993e2 Address review feedback: drop committed logs, inject servlet objects, target Servlet 6.1 by Matt Raible · 3 weeks ago
- 067afee Merge remote-tracking branch 'upstream/master' into feature/jakarta-ee-10-migration by Matt Raible · 3 weeks ago
- 47c5cf0 Scope installer table detection to the connection's catalog by David M. Johnson · 4 weeks ago roller-6.1.6 roller-6.1.6-rc4
- 75742f1 Make sure bootstrap tables.less .table-striped > tbody > tr:nth-of-type(2n+1) is overridden (#188) by gregh3269 · 4 weeks ago
- ea63849 Secure initial Roller setup with one-time operator token (#189) by David M. Johnson · 4 weeks ago
- aa03eaa Normalize links in HTML subset formatting (#190) by David M. Johnson · 4 weeks ago
- 59aeab1 Format LDAP comment form values consistently (#191) by David M. Johnson · 4 weeks ago
- 531f6c4 Add a roller-release developer skill documenting the release procedure (#186) by David M. Johnson · 5 weeks ago
- 6e85f24 Fix blank Font Awesome icons in preset themes (CSP font-src) and document H2 VALUE workaround (#183) by David M. Johnson · 5 weeks ago roller-6.1.6-rc3
- 3bb6eda Track schema upgrades with a flag instead of a hardcoded version check (#184) by David M. Johnson · 5 weeks ago
- 610d1d0 Fix jQuery UI 404 on authoring pages by dropping the webjar +1 from the URL (#185) by David M. Johnson · 5 weeks ago
- 69fcaf7 Improve installer form initialization and preview navigation (#182) by David M. Johnson · 6 weeks ago roller-6.1.6-rc2
- 6b7e246 Use double-quoted href attributes on the comment management page (#181) by David M. Johnson · 6 weeks ago
- 3a5801f Update dependencies across project and add JDK 25 to test matrix (#180) by Michael Bien · 6 weeks ago
- f7f4049 Set version to 6.1.6 and complete the source distribution by David M. Johnson · 6 weeks ago roller-6.1.6-rc1
- 4536133 Add release notes and stop shipping third-party jars in the source release (#179) by David M. Johnson · 6 weeks ago
- 48cc24b Retire incoming Trackback support and normalize comment links (#178) by David M. Johnson · 6 weeks ago
- d76c237 Store enclosure metadata without fetching remote URLs (#175) by David M. Johnson · 6 weeks ago
- 388db86 Check weblog permission in XML-RPC Blogger/MetaWeblog handlers (#164) by David M. Johnson · 6 weeks ago
- 19fc814 Scope authoring resource lookups to the action weblog (#162) by David M. Johnson · 6 weeks ago
- 75560cd Use the current Roller session during OAuth authorization (#165) by David M. Johnson · 6 weeks ago
- 1663b41 Derive media content types from file content, not the request (#174) by David M. Johnson · 6 weeks ago
- 2bffdea Retire the WSSE AtomPub authentication mode (#166) by David M. Johnson · 6 weeks ago
- 1b3c6be Fix release signing script argument handling and checksums (#177) by David M. Johnson · 6 weeks ago
- 6bb6060 Move authoring UI inline JS handlers to data attributes (#168) by David M. Johnson · 6 weeks ago
- 862e4cb Normalize frontpage directory parameters before rendering the bundled theme (#169) by David M. Johnson · 6 weeks ago
- c83ae52 Move frontpage selection into the administrator setup workflow (#170) by David M. Johnson · 6 weeks ago
- 3b67aa9 Disable vendor extension types on the XML-RPC servlet (#171) by David M. Johnson · 6 weeks ago
- ca85e2e Resolve weblog template resources within the active theme (#172) by David M. Johnson · 6 weeks ago
- 8a15bed Separate submitted and response salts in UI filters (#167) by David M. Johnson · 6 weeks ago
- a195427 Use a shared JDOM builder for bookmark and configuration parsing (#173) by David M. Johnson · 6 weeks ago
- c353982 Remove legacy outbound trackback action (#163) by David M. Johnson · 6 weeks ago
- f1422f4 Set up default protection ruleset for default and release branches (#152) by The Apache Software Foundation · 9 weeks ago
- d4cfb98 Merge pull request #153 from mraible/update-install-guide-javamail-link by Matt Raible · 9 weeks ago
- aec70d0 Refuse stale AtomPub auth schemes and answer missing Content-Type with 415 by Matt Raible · 9 weeks ago
- b58edfd Target Jakarta EE 11 so Spring Framework 7 runs on its supported baseline by Matt Raible · 9 weeks ago
- a908293 Restore null path info handling in the forked Atom adapter and stop reusing the PostgreSQL 10 data directory by Matt Raible · 9 weeks ago
- 14937ad Run CI on pull requests that target feature branches so stacked PRs get checks by Matt Raible · 9 weeks ago
- dd2b283 Fix AtomPub basic authentication checking the wrong user's password by Matt Raible · 9 weeks ago
- 47a8cdd Test against JDK 25 and upgrade Mockito so it can mock there by Matt Raible · 9 weeks ago
- e62111e Deliver uploaded files via Struts 7's UploadedFilesAware interface by Matt Raible · 9 weeks ago
- d12aa22 Fix the it-selenium jetty harness for the Jetty 12 plugin by Matt Raible · 10 weeks ago
- b9dff98 Restore the bootstrap form theme via the Jakarta struts2-bootstrap-plugin by Matt Raible · 10 weeks ago
- 2a39596 Serve WebJar assets from META-INF/resources instead of the webjars servlet by Matt Raible · 10 weeks ago
- 7867dc1 Permit unmatched requests explicitly under Spring Security 7 by Matt Raible · 10 weeks ago
- 191ff81 Fix mvn jetty:run for the Jetty 12 plugin by Matt Raible · 10 weeks ago
- 2738254 Fix Struts 7 parameter binding, OGNL allowlist, and static content path by Matt Raible · 10 weeks ago
- 6621c85 Rename fileUpload interceptor to actionFileUpload for Struts 7 by Matt Raible · 10 weeks ago
- 33fe72e Fix Struts DTD reference: struts-7.0.dtd does not exist by Matt Raible · 10 weeks ago
- ecb194d Fix it-selenium module for Jakarta EE 10 migration by Matt Raible · 10 weeks ago
- 96f4e79 Update CI matrix to require Java 17 minimum by Matt Raible · 10 weeks ago
- 01086d6 Upgrade Jetty Maven plugin to 12, Tomcat to 10.1, and PostgreSQL to 16 by Matt Raible · 10 weeks ago
- 44e81c8 Migrate to Jakarta EE 10, Spring 7, Struts 7, and EclipseLink 5 by Matt Raible · 10 weeks ago
- a1c7377 Fork XmlRpcServlet and AtomServlet into Roller codebase by Matt Raible · 10 weeks ago
- 68e4af4 Remove OAuth 1.0a, OpenID 2.0 filter, and unused dependencies by Matt Raible · 10 weeks ago
- ff34095 Upgrade to Java 17, Derby 10.16.1.1, and fix SLF4J bridge by Matt Raible · 10 weeks ago
- dade070 Update install guide with working JavaMail download links by Matt Raible · 3 months ago
- db3915a Add warning about file-uploads by David M. Johnson · 1 year, 4 months ago
- 395cfa3 Preparing for 6.1.5 rc2 by David M. Johnson · 1 year, 7 months ago roller-6.1.5