Google Git Google Git
Sign in
apache/santuario-xml-security-java/HEAD
  1. 6eb5594 Bump the codeql-action group with 3 updates (#700) by dependabot[bot] · 7 hours ago main
  2. 39f0469 Bump actions/setup-java from 6.1.0 to 6.2.0 (#701) by dependabot[bot] · 7 hours ago
  3. 032dda8 Always use the configured StAX signature verification key (#699) by Colm O hEigeartaigh · 29 hours ago
  4. 39cc487 Run StAX inbound final checks when END_DOCUMENT is reached (#698) by Colm O hEigeartaigh · 3 days ago
  5. fd63417 Updating threat model for StAX Secure Validation by Colm O hEigeartaigh · 6 days ago
  6. 31211c1 Harden XMLReader used for xi:include content in StAX config loading (#695) by Colm O hEigeartaigh · 6 days ago
  7. e2905aa Revert "Bump com.google.errorprone:error_prone_core from 2.42.0 to 2.51.0 (#693)" by Colm O hEigeartaigh · 6 days ago
  8. 8646c78 Bump org.codehaus.mojo:clirr-maven-plugin from 2.8 to 2.9 (#685) by dependabot[bot] · 6 days ago
  9. 6d3eeda Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.3 to 3.7.0 (#692) by dependabot[bot] · 6 days ago
  10. 5b7b0cf Bump com.google.errorprone:error_prone_core from 2.42.0 to 2.51.0 (#693) by dependabot[bot] · 6 days ago
  11. 55f6729 Bump org.apache.maven.plugins:maven-compiler-plugin (#694) by dependabot[bot] · 6 days ago
  12. 8ce4593 Reject DTDs in the StAX inbound path from DTD-enabled readers (#691) by Colm O hEigeartaigh · 7 days ago
  13. 765a475 Bump the codeql-action group with 3 updates (#689) by dependabot[bot] · 7 days ago
  14. debbf39 Bump com.fasterxml.woodstox:woodstox-core from 7.2.2 to 7.3.0 (#687) by dependabot[bot] · 7 days ago
  15. d5e2ff8 Bump org.apache:apache from 39 to 40 (#686) by dependabot[bot] · 7 days ago
  16. 471dcdf Bump org.bouncycastle:bcprov-jdk18on from 1.85 to 1.86 (#688) by dependabot[bot] · 7 days ago
  17. 6a64b1d Report malformed signature and KeyInfo input as checked exceptions (#684) by Colm O hEigeartaigh · 7 days ago
  18. f874624 Fail tests when the expected exception is missing (#679) by Sharang Gupta · 8 days ago
  19. cedfc7a Report malformed EncryptedData/EncryptedKey input as XMLEncryptionException instead of unchecked exceptions (#677) by Colm O hEigeartaigh · 8 days ago
  20. d1ed8fa Bump jetty11.version from 12.1.11 to 12.1.14 (#682) by dependabot[bot] · 8 days ago
  21. c7df003 Bump commons-codec:commons-codec from 1.22.1 to 1.23.0 (#680) by dependabot[bot] · 8 days ago
  22. fe6b235 Bump org.jacoco:jacoco-maven-plugin from 0.8.15 to 0.8.16 (#681) by dependabot[bot] · 8 days ago
  23. 92715d0 Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.5.6 to 3.6.1 (#683) by dependabot[bot] · 8 days ago
  24. c1f99bf Modernize exception assertion in StorageResolverTest and KeyStoreResolverTest with assertThrows (#678) by Mohd Irshad · 9 days ago
  25. 9e90702 Revert "Bump com.google.errorprone:error_prone_core from 2.42.0 to 2.51.0 (#676)" by Colm O hEigeartaigh · 9 days ago
  26. d7a9459 Bump com.google.errorprone:error_prone_core from 2.42.0 to 2.51.0 (#676) by dependabot[bot] · 9 days ago
  27. a0adb92 Bump xmlunit.version from 2.13.0 to 2.14.0 (#673) by dependabot[bot] · 9 days ago
  28. f84bf7e Reject non-hex input in XMLCipherUtil.hexStringToByteArray (#672) by Colm O hEigeartaigh · 9 days ago
  29. 316c51e Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.6 to 3.6.1 (#674) by dependabot[bot] · 9 days ago
  30. 79b7910 Bump org.slf4j:slf4j-jdk14 from 2.0.18 to 2.0.20 (#675) by dependabot[bot] · 9 days ago
  31. b626a43 SANTUARIO-636 - Export the JAXB binding packages from the module (#671) by Colm O hEigeartaigh · 10 days ago
  32. 80d572e Reject malformed HKDF Salt and Info with XMLEncryptionException (#653) by Arpan Sharma · 10 days ago
  33. a7f9e2c Bump actions/upload-artifact from 7.0.1 to 7.0.2 (#668) by dependabot[bot] · 10 days ago
  34. ff92322 Bump com.fasterxml.woodstox:woodstox-core from 7.2.1 to 7.2.2 (#647) by dependabot[bot] · 10 days ago
  35. 4e580d7 Bump org.cyclonedx:cyclonedx-maven-plugin from 2.9.2 to 2.9.3 (#643) by dependabot[bot] · 10 days ago
  36. 338a5dc Bump xmlunit.version from 2.12.0 to 2.13.0 (#644) by dependabot[bot] · 10 days ago
  37. 7279381 Bump the codeql-action group across 1 directory with 3 updates (#667) by dependabot[bot] · 10 days ago
  38. f2fe1f8 Bump ossf/scorecard-action from 2.4.4 to 2.5.0 (#669) by dependabot[bot] · 10 days ago
  39. 57a3815 Bump actions/setup-java from 6.0.1 to 6.1.0 (#670) by dependabot[bot] · 10 days ago
  40. a221ada Downgrading scorecard to run twice weekly by Colm O hEigeartaigh · 3 weeks ago
  41. 497d3fb Only set setIsInSignedContent when we're inside the signed content, fix some NPEs (#666) by Colm O hEigeartaigh · 8 weeks ago
  42. 58afe2d Bump actions/setup-java from 5.7.0 to 6.0.1 (#662) by dependabot[bot] · 8 weeks ago
  43. a4fb879 Group codeql updates together (#665) by Colm O hEigeartaigh · 8 weeks ago
  44. 6e47752 Bump github/codeql-action/analyze from 4.37.6 to 4.38.0 (#661) by dependabot[bot] · 8 weeks ago
  45. da9eeef Bump github/codeql-action/upload-sarif from 4.37.6 to 4.38.0 (#663) by dependabot[bot] · 8 weeks ago
  46. 9f25e97 Bump github/codeql-action/init from 4.37.6 to 4.38.0 (#664) by dependabot[bot] · 8 weeks ago
  47. 6e978ee Bump actions/setup-java from 5.6.0 to 5.7.0 (#646) by dependabot[bot] · 3 months ago
  48. 87a8cbf Bump github/codeql-action/init from 4.37.3 to 4.37.6 (#650) by dependabot[bot] · 3 months ago
  49. ea43bd3 Bump github/codeql-action/analyze from 4.37.3 to 4.37.6 (#648) by dependabot[bot] · 3 months ago
  50. b81244b Bump github/codeql-action/upload-sarif from 4.37.3 to 4.37.6 (#649) by dependabot[bot] · 3 months ago
  51. ebe14b5 Pin GitHub actions by Colm O hEigeartaigh · 3 months ago
  52. 113a1a0 Bump jetty11.version from 12.0.18 to 12.1.11 (#642) by dependabot[bot] · 3 months ago
  53. 05bebec Switch to Jetty 12 for JDK17+ using profiles (#641) by Colm O hEigeartaigh · 3 months ago
  54. ab81d37 Bump ossf/scorecard-action from 2.4.3 to 2.4.4 (#639) by dependabot[bot] · 3 months ago
  55. cfcaaff Bump commons-codec:commons-codec from 1.22.0 to 1.22.1 (#640) by dependabot[bot] · 3 months ago
  56. ce80fbf Bump org.bouncycastle:bcprov-jdk18on from 1.84 to 1.85 (#632) by dependabot[bot] · 4 months ago
  57. c10ddea Bump github/codeql-action/analyze from 4.37.0 to 4.37.3 (#637) by dependabot[bot] · 4 months ago
  58. 558e3fc Bump actions/checkout from 7.0.0 to 7.0.1 (#636) by dependabot[bot] · 4 months ago
  59. 4429a4b Bump github/codeql-action/init from 4.37.0 to 4.37.3 (#635) by dependabot[bot] · 4 months ago
  60. a510404 Bump github/codeql-action/upload-sarif from 4.37.0 to 4.37.3 (#634) by dependabot[bot] · 4 months ago
  61. 13b29cc Bump actions/setup-java from 5.5.0 to 5.6.0 (#633) by dependabot[bot] · 4 months ago
  62. 1ad2500 [SANTUARIO-615] Implements Pre/Post processors XMLdSIG API for extensions. (#616) by jrihtarsic · 4 months ago
  63. 7937488 Bump github/codeql-action/init from 4.36.2 to 4.37.0 (#628) by dependabot[bot] · 4 months ago
  64. 4dd4894 Bump github/codeql-action/analyze from 4.36.2 to 4.37.0 (#630) by dependabot[bot] · 4 months ago
  65. c7f1db4 Bump github/codeql-action/upload-sarif from 4.36.2 to 4.37.0 (#629) by dependabot[bot] · 4 months ago
  66. f24aabe Bump actions/setup-java from 5.4.0 to 5.5.0 (#631) by dependabot[bot] · 4 months ago
  67. b19116d Merge pull request #627 from apache/PGPData-fixes by Sean Mullan · 4 months ago
  68. 3f4cbbe Check that cause is instanceof IAE. by Sean Mullan · 4 months ago PGPData-fixes
  69. 4252699 Add security threat model + AGENTS.md -> SECURITY.md -> THREAT_MODEL.md chain (#613) by Jarek Potiuk · 4 months ago
  70. e552b9f Bump actions/checkout from 6.0.3 to 7.0.0 (#619) by dependabot[bot] · 4 months ago
  71. 65859d9 Bump org.cyclonedx:cyclonedx-maven-plugin from 2.9.1 to 2.9.2 (#621) by dependabot[bot] · 4 months ago
  72. 08fc839 Bump actions/setup-java from 5.2.0 to 5.4.0 (#622) by dependabot[bot] · 4 months ago
  73. 1696b65 Bump actions/cache from 5.0.5 to 6.1.0 (#623) by dependabot[bot] · 4 months ago
  74. ffbf1ac Bump org.apache:apache from 38 to 39 (#624) by dependabot[bot] · 4 months ago
  75. aab6a37 Fix bit masking issue when checking. Check for invalid key packets when unmarshalling PGPData from XML. by Sean Mullan · 4 months ago
  76. 15adfaf Bump github/codeql-action from 4.36.1 to 4.36.2 (#615) by dependabot[bot] · 5 months ago
  77. 60a470d Bump xmlunit.version from 2.11.0 to 2.12.0 (#608) by dependabot[bot] · 5 months ago
  78. 5c448dd Fixing test after XMLUnit upgrade by Colm O hEigeartaigh · 5 months ago
  79. 7abb60b Bump com.fasterxml.woodstox:woodstox-core from 7.2.0 to 7.2.1 (#614) by dependabot[bot] · 5 months ago
  80. b2eac03 Bump org.jacoco:jacoco-maven-plugin from 0.8.14 to 0.8.15 (#612) by dependabot[bot] · 5 months ago
  81. 5dc7a13 Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.5 to 3.5.6 (#609) by dependabot[bot] · 5 months ago
  82. dc6e81c Bump github/codeql-action from 4.36.0 to 4.36.1 (#610) by dependabot[bot] · 5 months ago
  83. f7ad079 Bump actions/checkout from 6.0.2 to 6.0.3 (#611) by dependabot[bot] · 5 months ago
  84. 6a391df Fixing Cryptographic Edge Case test on Java 21+. by Colm O hEigeartaigh · 5 months ago
  85. c226aae Fixed exception expectation in testDeeplyNestedElements (#606) by Ihor Kuzmanenko · 5 months ago
  86. d5dd9fe Bump org.glassfish.jaxb:jaxb-runtime from 4.0.7 to 4.0.9 (#603) by dependabot[bot] · 5 months ago
  87. 6bcb7ba Bump com.fasterxml.woodstox:woodstox-core from 7.1.1 to 7.2.0 (#604) by dependabot[bot] · 5 months ago
  88. 5699db3 Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.5.5 to 3.5.6 (#605) by dependabot[bot] · 5 months ago
  89. fdf767f Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.2 to 3.6.3 (#597) by dependabot[bot] · 5 months ago
  90. cc4acce Bump org.slf4j:slf4j-jdk14 from 2.0.17 to 2.0.18 (#598) by dependabot[bot] · 5 months ago
  91. 450734f Bump org.apache:apache from 37 to 38 (#599) by dependabot[bot] · 5 months ago
  92. 2702e24 Bump github/codeql-action from 4.35.4 to 4.36.0 (#601) by dependabot[bot] · 5 months ago
  93. 5f10ef8 XMLCipher refactor (#587) by Colm O hEigeartaigh · 6 months ago
  94. be9040d Checking decryption algorithms in some of the StAX tests by Colm O hEigeartaigh · 6 months ago
  95. a3f3bf3 Added properties for base64 formatting (#504) by Ihor Kuzmanenko · 6 months ago
  96. 6b1f608 Adding empty mapping for protected branches by Colm O hEigeartaigh · 6 months ago
  97. 8aaa901 Bump org.bouncycastle:bcprov-jdk18on from 1.83 to 1.84 (#588) by dependabot[bot] · 6 months ago
  98. 051bd11 Bump commons-codec:commons-codec from 1.21.0 to 1.22.0 (#592) by dependabot[bot] · 6 months ago
  99. cc9d7af Bump junit.version from 5.14.3 to 5.14.4 (#593) by dependabot[bot] · 6 months ago
  100. 78682fd Bump actions/cache from 5.0.4 to 5.0.5 (#589) by dependabot[bot] · 6 months ago