1. a221ada Downgrading scorecard to run twice weekly by Colm O hEigeartaigh · 35 hours ago main
  2. 497d3fb Only set setIsInSignedContent when we're inside the signed content, fix some NPEs (#666) by Colm O hEigeartaigh · 5 weeks ago
  3. 58afe2d Bump actions/setup-java from 5.7.0 to 6.0.1 (#662) by dependabot[bot] · 5 weeks ago
  4. a4fb879 Group codeql updates together (#665) by Colm O hEigeartaigh · 5 weeks ago
  5. 6e47752 Bump github/codeql-action/analyze from 4.37.6 to 4.38.0 (#661) by dependabot[bot] · 5 weeks ago
  6. da9eeef Bump github/codeql-action/upload-sarif from 4.37.6 to 4.38.0 (#663) by dependabot[bot] · 5 weeks ago
  7. 9f25e97 Bump github/codeql-action/init from 4.37.6 to 4.38.0 (#664) by dependabot[bot] · 5 weeks ago
  8. 6e978ee Bump actions/setup-java from 5.6.0 to 5.7.0 (#646) by dependabot[bot] · 2 months ago
  9. 87a8cbf Bump github/codeql-action/init from 4.37.3 to 4.37.6 (#650) by dependabot[bot] · 2 months ago
  10. ea43bd3 Bump github/codeql-action/analyze from 4.37.3 to 4.37.6 (#648) by dependabot[bot] · 2 months ago
  11. b81244b Bump github/codeql-action/upload-sarif from 4.37.3 to 4.37.6 (#649) by dependabot[bot] · 2 months ago
  12. ebe14b5 Pin GitHub actions by Colm O hEigeartaigh · 2 months ago
  13. 113a1a0 Bump jetty11.version from 12.0.18 to 12.1.11 (#642) by dependabot[bot] · 3 months ago
  14. 05bebec Switch to Jetty 12 for JDK17+ using profiles (#641) by Colm O hEigeartaigh · 3 months ago
  15. ab81d37 Bump ossf/scorecard-action from 2.4.3 to 2.4.4 (#639) by dependabot[bot] · 3 months ago
  16. cfcaaff Bump commons-codec:commons-codec from 1.22.0 to 1.22.1 (#640) by dependabot[bot] · 3 months ago
  17. ce80fbf Bump org.bouncycastle:bcprov-jdk18on from 1.84 to 1.85 (#632) by dependabot[bot] · 3 months ago
  18. c10ddea Bump github/codeql-action/analyze from 4.37.0 to 4.37.3 (#637) by dependabot[bot] · 3 months ago
  19. 558e3fc Bump actions/checkout from 7.0.0 to 7.0.1 (#636) by dependabot[bot] · 3 months ago
  20. 4429a4b Bump github/codeql-action/init from 4.37.0 to 4.37.3 (#635) by dependabot[bot] · 3 months ago
  21. a510404 Bump github/codeql-action/upload-sarif from 4.37.0 to 4.37.3 (#634) by dependabot[bot] · 3 months ago
  22. 13b29cc Bump actions/setup-java from 5.5.0 to 5.6.0 (#633) by dependabot[bot] · 3 months ago
  23. 1ad2500 [SANTUARIO-615] Implements Pre/Post processors XMLdSIG API for extensions. (#616) by jrihtarsic · 3 months ago
  24. 7937488 Bump github/codeql-action/init from 4.36.2 to 4.37.0 (#628) by dependabot[bot] · 3 months ago
  25. 4dd4894 Bump github/codeql-action/analyze from 4.36.2 to 4.37.0 (#630) by dependabot[bot] · 3 months ago
  26. c7f1db4 Bump github/codeql-action/upload-sarif from 4.36.2 to 4.37.0 (#629) by dependabot[bot] · 3 months ago
  27. f24aabe Bump actions/setup-java from 5.4.0 to 5.5.0 (#631) by dependabot[bot] · 3 months ago
  28. b19116d Merge pull request #627 from apache/PGPData-fixes by Sean Mullan · 3 months ago
  29. 3f4cbbe Check that cause is instanceof IAE. by Sean Mullan · 4 months ago PGPData-fixes
  30. 4252699 Add security threat model + AGENTS.md -> SECURITY.md -> THREAT_MODEL.md chain (#613) by Jarek Potiuk · 4 months ago
  31. e552b9f Bump actions/checkout from 6.0.3 to 7.0.0 (#619) by dependabot[bot] · 4 months ago
  32. 65859d9 Bump org.cyclonedx:cyclonedx-maven-plugin from 2.9.1 to 2.9.2 (#621) by dependabot[bot] · 4 months ago
  33. 08fc839 Bump actions/setup-java from 5.2.0 to 5.4.0 (#622) by dependabot[bot] · 4 months ago
  34. 1696b65 Bump actions/cache from 5.0.5 to 6.1.0 (#623) by dependabot[bot] · 4 months ago
  35. ffbf1ac Bump org.apache:apache from 38 to 39 (#624) by dependabot[bot] · 4 months ago
  36. aab6a37 Fix bit masking issue when checking. Check for invalid key packets when unmarshalling PGPData from XML. by Sean Mullan · 4 months ago
  37. 15adfaf Bump github/codeql-action from 4.36.1 to 4.36.2 (#615) by dependabot[bot] · 4 months ago
  38. 60a470d Bump xmlunit.version from 2.11.0 to 2.12.0 (#608) by dependabot[bot] · 4 months ago
  39. 5c448dd Fixing test after XMLUnit upgrade by Colm O hEigeartaigh · 4 months ago
  40. 7abb60b Bump com.fasterxml.woodstox:woodstox-core from 7.2.0 to 7.2.1 (#614) by dependabot[bot] · 4 months ago
  41. b2eac03 Bump org.jacoco:jacoco-maven-plugin from 0.8.14 to 0.8.15 (#612) by dependabot[bot] · 4 months ago
  42. 5dc7a13 Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.5 to 3.5.6 (#609) by dependabot[bot] · 5 months ago
  43. dc6e81c Bump github/codeql-action from 4.36.0 to 4.36.1 (#610) by dependabot[bot] · 5 months ago
  44. f7ad079 Bump actions/checkout from 6.0.2 to 6.0.3 (#611) by dependabot[bot] · 5 months ago
  45. 6a391df Fixing Cryptographic Edge Case test on Java 21+. by Colm O hEigeartaigh · 5 months ago
  46. c226aae Fixed exception expectation in testDeeplyNestedElements (#606) by Ihor Kuzmanenko · 5 months ago
  47. d5dd9fe Bump org.glassfish.jaxb:jaxb-runtime from 4.0.7 to 4.0.9 (#603) by dependabot[bot] · 5 months ago
  48. 6bcb7ba Bump com.fasterxml.woodstox:woodstox-core from 7.1.1 to 7.2.0 (#604) by dependabot[bot] · 5 months ago
  49. 5699db3 Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.5.5 to 3.5.6 (#605) by dependabot[bot] · 5 months ago
  50. fdf767f Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.2 to 3.6.3 (#597) by dependabot[bot] · 5 months ago
  51. cc4acce Bump org.slf4j:slf4j-jdk14 from 2.0.17 to 2.0.18 (#598) by dependabot[bot] · 5 months ago
  52. 450734f Bump org.apache:apache from 37 to 38 (#599) by dependabot[bot] · 5 months ago
  53. 2702e24 Bump github/codeql-action from 4.35.4 to 4.36.0 (#601) by dependabot[bot] · 5 months ago
  54. 5f10ef8 XMLCipher refactor (#587) by Colm O hEigeartaigh · 5 months ago
  55. be9040d Checking decryption algorithms in some of the StAX tests by Colm O hEigeartaigh · 5 months ago
  56. a3f3bf3 Added properties for base64 formatting (#504) by Ihor Kuzmanenko · 5 months ago
  57. 6b1f608 Adding empty mapping for protected branches by Colm O hEigeartaigh · 5 months ago
  58. 8aaa901 Bump org.bouncycastle:bcprov-jdk18on from 1.83 to 1.84 (#588) by dependabot[bot] · 5 months ago
  59. 051bd11 Bump commons-codec:commons-codec from 1.21.0 to 1.22.0 (#592) by dependabot[bot] · 5 months ago
  60. cc9d7af Bump junit.version from 5.14.3 to 5.14.4 (#593) by dependabot[bot] · 5 months ago
  61. 78682fd Bump actions/cache from 5.0.4 to 5.0.5 (#589) by dependabot[bot] · 5 months ago
  62. 836481b Bump actions/upload-artifact from 7.0.0 to 7.0.1 (#590) by dependabot[bot] · 5 months ago
  63. c7e6329 Bump github/codeql-action from 4.35.1 to 4.35.4 (#596) by dependabot[bot] · 5 months ago
  64. aeea8aa Set up default protection ruleset for default and release branches (#595) by The Apache Software Foundation · 5 months ago
  65. cc6c705 Removing dependency submission by Colm O hEigeartaigh · 7 months ago
  66. a476eed Bump github/codeql-action from 4.32.6 to 4.35.1 (#583) by dependabot[bot] · 7 months ago
  67. 816ebec Bump actions/cache from 5.0.3 to 5.0.4 (#582) by dependabot[bot] · 7 months ago
  68. 002dd0c Adding some AI generated tests + a small fix (#581) by Colm O hEigeartaigh · 7 months ago
  69. d22b188 Bump org.glassfish.jaxb:jaxb-runtime from 4.0.6 to 4.0.7 (#579) by dependabot[bot] · 7 months ago
  70. dd189f9 Bump github/codeql-action from 4.32.4 to 4.32.6 (#578) by dependabot[bot] · 7 months ago
  71. 8695591 Bump actions/upload-artifact from 6.0.0 to 7.0.0 (#577) by dependabot[bot] · 8 months ago
  72. 8a96421 Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.4 to 3.5.5 (#573) by dependabot[bot] · 8 months ago
  73. 344794e Bump github/codeql-action from 4.32.0 to 4.32.4 (#574) by dependabot[bot] · 8 months ago
  74. 86912e3 Manifest: fix javadoc of method `item()` (#575) by Andrei Rybak · 8 months ago
  75. c81b3bc Bump jakarta.xml.bind:jakarta.xml.bind-api from 4.0.4 to 4.0.5 (#570) by dependabot[bot] · 8 months ago
  76. 6519da6 Bump junit.version from 5.14.2 to 5.14.3 (#571) by dependabot[bot] · 8 months ago
  77. 41e2d55 Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.5.4 to 3.5.5 (#572) by dependabot[bot] · 8 months ago
  78. e0e492c Bump actions/cache from 5.0.2 to 5.0.3 (#568) by dependabot[bot] · 8 months ago
  79. b15b807 Fixing maven central badge by Colm O hEigeartaigh · 8 months ago
  80. f254957 Fixing links in doap by Colm O hEigeartaigh · 8 months ago
  81. c78e2d2 Adding doap file by Colm O hEigeartaigh · 8 months ago
  82. 3610dc5 Bump org.apache.maven.plugins:maven-compiler-plugin (#566) by dependabot[bot] · 9 months ago
  83. 0061740 Bump github/codeql-action from 4.31.10 to 4.32.0 (#567) by dependabot[bot] · 9 months ago
  84. e597d3c Bump actions/setup-java from 5.1.0 to 5.2.0 (#565) by dependabot[bot] · 9 months ago
  85. d7a240c Bump commons-codec:commons-codec from 1.20.0 to 1.21.0 (#564) by dependabot[bot] · 9 months ago
  86. e2132b3 SANTUARIO-627 - missmatch between module-info and published dependencies (#563) by Colm O hEigeartaigh · 9 months ago
  87. 32a81f0 Bump junit.version from 5.14.1 to 5.14.2 (#557) by dependabot[bot] · 9 months ago
  88. ec81bbe Bump org.apache:apache from 35 to 37 (#559) by dependabot[bot] · 9 months ago
  89. 57a122d Bump github/codeql-action from 4.31.9 to 4.31.10 (#560) by dependabot[bot] · 9 months ago
  90. 00ce203 Bump actions/checkout from 6.0.1 to 6.0.2 (#561) by dependabot[bot] · 9 months ago
  91. 61d5375 Bump actions/cache from 5.0.1 to 5.0.2 (#562) by dependabot[bot] · 9 months ago
  92. 883d987 SANTUARIO-630 - Log null input bytes as INFO rather than WARNING (#552) by Colm O hEigeartaigh · 9 months ago
  93. 3212337 Bump github/codeql-action from 4.31.4 to 4.31.9 (#555) by dependabot[bot] · 10 months ago
  94. c1dae95 Bump actions/upload-artifact from 5.0.0 to 6.0.0 (#554) by dependabot[bot] · 10 months ago
  95. 903d6f5 Bump actions/cache from 4.3.0 to 5.0.1 (#553) by dependabot[bot] · 10 months ago
  96. 0aa5c6f Bump org.apache.maven.plugins:maven-release-plugin from 3.2.0 to 3.3.1 (#551) by dependabot[bot] · 10 months ago
  97. 254b2fe Bump actions/setup-java from 5.0.0 to 5.1.0 (#550) by dependabot[bot] · 10 months ago
  98. 2f06ecd Bump actions/checkout from 6.0.0 to 6.0.1 (#548) by dependabot[bot] · 10 months ago
  99. 64f14bc Adding cooldown period by Colm O hEigeartaigh · 11 months ago
  100. 890badb Removing deprecated commons codec API calls by Colm O hEigeartaigh · 11 months ago