1. b8dabb7 Remove comment management from the AtomPub service (#215) by David M. Johnson · 5 days ago master
  2. 457de9c Merge pull request #154 from mraible/feature/jakarta-ee-10-migration by Matt Raible · 6 days ago
  3. 74bc2ee Merge master into feature/jakarta-ee-10-migration by Matt Raible · 6 days ago
  4. 0ceb0f3 Fix AtomPub media naming, paging and XML output, and editor menus (#213) by David M. Johnson · 6 days ago
  5. a7d3695 Merge pull request #214 from apache/rol-2185-comment-shared-cache by Matt Raible · 6 days ago
  6. 97ad41d ROL-2185: Keep comments out of EclipseLink's shared cache by Matt Raible · 7 days ago
  7. 987c990 Drop a comment about the removed OAuth path in the AtomPub servlet by Matt Raible · 7 days ago
  8. 2f89e31 Add Roller 7 upgrade notes for the Jakarta EE baseline and the OAuth 1.0a and OpenID 2.0 removals by Matt Raible · 7 days ago
  9. 492160a Merge master into feature/jakarta-ee-10-migration by Matt Raible · 7 days ago
  10. 359c480 Bring #209 and #211 into master (#212) by David M. Johnson · 7 days ago
  11. c2ca40e Replace ROME Propono AtomPub server with self-contained StAX implementation (#210) by David M. Johnson · 7 days ago
  12. 1d739ef Merge branch 'roller-6.1.x' into master by David M. Johnson · 8 days ago
  13. 3dc3cc9 Filter HTML-significant characters out of tag names (#208) by David M. Johnson · 8 days ago roller-6.1.x roller-6.1.7-rc2
  14. e25af33 Merge branch 'roller-6.1.x' into master by David M. Johnson · 9 days ago
  15. eb902c6 Set version to 6.1.7 by David M. Johnson · 9 days ago roller-6.1.7-rc1
  16. cb13c09 Leave runtime logs directories out of the source archive by David M. Johnson · 9 days ago
  17. ece656f Print the one-time setup token to the console as well as the log by David M. Johnson · 9 days ago
  18. b67a82b Update the NOTICE copyright year to 2026 by David M. Johnson · 9 days ago
  19. 736ab11 Serve AtomPub through a Roller servlet (#198) by David M. Johnson · 9 days ago
  20. e34addd Keep wrapped pojos out of the template surface (#199) by David M. Johnson · 10 days ago
  21. 5adadd9 Fix bugs found while testing the 6.1.7 integration build (#207) by David M. Johnson · 10 days ago
  22. 51c943b ROL-2184: Preserve pasted entry images when publishing (#205) by David M. Johnson · 10 days ago
  23. e41a1a1 Turn Planet off by default and require POST for its admin changes (#200) by David M. Johnson · 10 days ago
  24. c2789ab Adopt Apache Commons Secure XML for XML parsing (#201) by David M. Johnson · 13 days ago
  25. 6bb3210 Run CI and CodeQL on roller-6.1.x (#206) by David M. Johnson · 13 days ago
  26. a59d5ff No single quotes in media file insert url on mediaFileAdd!save.rol (#197) by gregh3269 · 14 days ago
  27. 15d4fce Add security model and SECURITY.md (#202) by David M. Johnson · 14 days ago
  28. 4b5600c Merge pull request #194 from apache/add-missing-license-headers by Matt Raible · 3 weeks ago
  29. 32f477e Merge pull request #196 from apache/upgrade-gaurav-jquery by Matt Raible · 3 weeks ago
  30. 9f408a2 No single quotes in media file insert url on mediaFileAdd!save.rol (#193) by gregh3269 · 3 weeks ago
  31. aff1a49 Start Roller 7 development: set version to 7.0.0-SNAPSHOT by David M. Johnson · 3 weeks ago
  32. 080043a Start 6.1.7 development: set version to 6.1.7-SNAPSHOT by David M. Johnson · 3 weeks ago
  33. 43f5290 Fold release and disclosure lessons into the release and security skills (#195) by David M. Johnson · 3 weeks ago
  34. eaca41f Update the gaurav theme's jQuery and Bootstrap, drop unused jQuery 2.1.1 by Matt Raible · 3 weeks ago
  35. 2a34c6d Check license headers with Apache RAT in CI by Matt Raible · 3 weeks ago
  36. a944dcb Change database host port in Dockerfile (#151) by Mustafa Celal GÜLER · 3 weeks ago
  37. 3e81b25 Bind request parameters only to @StrutsParameter-annotated members by Matt Raible · 3 weeks ago
  38. 62475d9 Add the ASF license header to source files that were missing it by Matt Raible · 3 weeks ago
  39. 6129f43 Let the setup token page share UIAction's injected request by Matt Raible · 3 weeks ago
  40. c5d854b Update the JDBC driver and mail jars the Docker image downloads by Matt Raible · 3 weeks ago
  41. fc2d819 Update dependencies to their latest compatible releases and clear known CVEs by Matt Raible · 3 weeks ago
  42. 14993e2 Address review feedback: drop committed logs, inject servlet objects, target Servlet 6.1 by Matt Raible · 3 weeks ago
  43. 067afee Merge remote-tracking branch 'upstream/master' into feature/jakarta-ee-10-migration by Matt Raible · 3 weeks ago
  44. 47c5cf0 Scope installer table detection to the connection's catalog by David M. Johnson · 4 weeks ago roller-6.1.6 roller-6.1.6-rc4
  45. 75742f1 Make sure bootstrap tables.less .table-striped > tbody > tr:nth-of-type(2n+1) is overridden (#188) by gregh3269 · 4 weeks ago
  46. ea63849 Secure initial Roller setup with one-time operator token (#189) by David M. Johnson · 4 weeks ago
  47. aa03eaa Normalize links in HTML subset formatting (#190) by David M. Johnson · 4 weeks ago
  48. 59aeab1 Format LDAP comment form values consistently (#191) by David M. Johnson · 4 weeks ago
  49. 531f6c4 Add a roller-release developer skill documenting the release procedure (#186) by David M. Johnson · 5 weeks ago
  50. 6e85f24 Fix blank Font Awesome icons in preset themes (CSP font-src) and document H2 VALUE workaround (#183) by David M. Johnson · 5 weeks ago roller-6.1.6-rc3
  51. 3bb6eda Track schema upgrades with a flag instead of a hardcoded version check (#184) by David M. Johnson · 5 weeks ago
  52. 610d1d0 Fix jQuery UI 404 on authoring pages by dropping the webjar +1 from the URL (#185) by David M. Johnson · 5 weeks ago
  53. 69fcaf7 Improve installer form initialization and preview navigation (#182) by David M. Johnson · 6 weeks ago roller-6.1.6-rc2
  54. 6b7e246 Use double-quoted href attributes on the comment management page (#181) by David M. Johnson · 6 weeks ago
  55. 3a5801f Update dependencies across project and add JDK 25 to test matrix (#180) by Michael Bien · 6 weeks ago
  56. f7f4049 Set version to 6.1.6 and complete the source distribution by David M. Johnson · 6 weeks ago roller-6.1.6-rc1
  57. 4536133 Add release notes and stop shipping third-party jars in the source release (#179) by David M. Johnson · 6 weeks ago
  58. 48cc24b Retire incoming Trackback support and normalize comment links (#178) by David M. Johnson · 6 weeks ago
  59. d76c237 Store enclosure metadata without fetching remote URLs (#175) by David M. Johnson · 6 weeks ago
  60. 388db86 Check weblog permission in XML-RPC Blogger/MetaWeblog handlers (#164) by David M. Johnson · 6 weeks ago
  61. 19fc814 Scope authoring resource lookups to the action weblog (#162) by David M. Johnson · 6 weeks ago
  62. 75560cd Use the current Roller session during OAuth authorization (#165) by David M. Johnson · 6 weeks ago
  63. 1663b41 Derive media content types from file content, not the request (#174) by David M. Johnson · 6 weeks ago
  64. 2bffdea Retire the WSSE AtomPub authentication mode (#166) by David M. Johnson · 6 weeks ago
  65. 1b3c6be Fix release signing script argument handling and checksums (#177) by David M. Johnson · 6 weeks ago
  66. 6bb6060 Move authoring UI inline JS handlers to data attributes (#168) by David M. Johnson · 6 weeks ago
  67. 862e4cb Normalize frontpage directory parameters before rendering the bundled theme (#169) by David M. Johnson · 6 weeks ago
  68. c83ae52 Move frontpage selection into the administrator setup workflow (#170) by David M. Johnson · 6 weeks ago
  69. 3b67aa9 Disable vendor extension types on the XML-RPC servlet (#171) by David M. Johnson · 6 weeks ago
  70. ca85e2e Resolve weblog template resources within the active theme (#172) by David M. Johnson · 6 weeks ago
  71. 8a15bed Separate submitted and response salts in UI filters (#167) by David M. Johnson · 6 weeks ago
  72. a195427 Use a shared JDOM builder for bookmark and configuration parsing (#173) by David M. Johnson · 6 weeks ago
  73. c353982 Remove legacy outbound trackback action (#163) by David M. Johnson · 6 weeks ago
  74. f1422f4 Set up default protection ruleset for default and release branches (#152) by The Apache Software Foundation · 9 weeks ago
  75. d4cfb98 Merge pull request #153 from mraible/update-install-guide-javamail-link by Matt Raible · 9 weeks ago
  76. aec70d0 Refuse stale AtomPub auth schemes and answer missing Content-Type with 415 by Matt Raible · 9 weeks ago
  77. b58edfd Target Jakarta EE 11 so Spring Framework 7 runs on its supported baseline by Matt Raible · 9 weeks ago
  78. a908293 Restore null path info handling in the forked Atom adapter and stop reusing the PostgreSQL 10 data directory by Matt Raible · 9 weeks ago
  79. 14937ad Run CI on pull requests that target feature branches so stacked PRs get checks by Matt Raible · 9 weeks ago
  80. dd2b283 Fix AtomPub basic authentication checking the wrong user's password by Matt Raible · 9 weeks ago
  81. 47a8cdd Test against JDK 25 and upgrade Mockito so it can mock there by Matt Raible · 9 weeks ago
  82. e62111e Deliver uploaded files via Struts 7's UploadedFilesAware interface by Matt Raible · 9 weeks ago
  83. d12aa22 Fix the it-selenium jetty harness for the Jetty 12 plugin by Matt Raible · 10 weeks ago
  84. b9dff98 Restore the bootstrap form theme via the Jakarta struts2-bootstrap-plugin by Matt Raible · 10 weeks ago
  85. 2a39596 Serve WebJar assets from META-INF/resources instead of the webjars servlet by Matt Raible · 10 weeks ago
  86. 7867dc1 Permit unmatched requests explicitly under Spring Security 7 by Matt Raible · 10 weeks ago
  87. 191ff81 Fix mvn jetty:run for the Jetty 12 plugin by Matt Raible · 10 weeks ago
  88. 2738254 Fix Struts 7 parameter binding, OGNL allowlist, and static content path by Matt Raible · 10 weeks ago
  89. 6621c85 Rename fileUpload interceptor to actionFileUpload for Struts 7 by Matt Raible · 10 weeks ago
  90. 33fe72e Fix Struts DTD reference: struts-7.0.dtd does not exist by Matt Raible · 10 weeks ago
  91. ecb194d Fix it-selenium module for Jakarta EE 10 migration by Matt Raible · 10 weeks ago
  92. 96f4e79 Update CI matrix to require Java 17 minimum by Matt Raible · 10 weeks ago
  93. 01086d6 Upgrade Jetty Maven plugin to 12, Tomcat to 10.1, and PostgreSQL to 16 by Matt Raible · 10 weeks ago
  94. 44e81c8 Migrate to Jakarta EE 10, Spring 7, Struts 7, and EclipseLink 5 by Matt Raible · 10 weeks ago
  95. a1c7377 Fork XmlRpcServlet and AtomServlet into Roller codebase by Matt Raible · 10 weeks ago
  96. 68e4af4 Remove OAuth 1.0a, OpenID 2.0 filter, and unused dependencies by Matt Raible · 10 weeks ago
  97. ff34095 Upgrade to Java 17, Derby 10.16.1.1, and fix SLF4J bridge by Matt Raible · 10 weeks ago
  98. dade070 Update install guide with working JavaMail download links by Matt Raible · 3 months ago
  99. db3915a Add warning about file-uploads by David M. Johnson · 1 year, 4 months ago
  100. 395cfa3 Preparing for 6.1.5 rc2 by David M. Johnson · 1 year, 7 months ago roller-6.1.5