1. bbae5ab enh: CNCF Security slam (#2954) by Lenny Primak · 34 hours ago main
  2. 99df3dd bugfix(test): flaky test core/.../DefaultSecurityManagerTest fixed (#2951) by Lenny Primak · 4 days ago
  3. 71f814a chore(deps): bump the maven-dependencies group across 1 directory with 15 updates (#2949) by dependabot[bot] · 4 days ago
  4. 7a3be9c chore(deps): bump the pre-commit-hooks group across 1 directory with 3 updates (#2946) by dependabot[bot] · 4 days ago
  5. 891ec08 chore(deps): bump the github-actions-dependencies group across 1 directory with 5 updates (#2948) by dependabot[bot] · 4 days ago
  6. a2f7ba2 Refactor Jakarta EE integration tests with Graphene page objects (#2944) by Lenny Primak · 4 days ago
  7. 5790605 Build CI artifacts on only once, and reuse the builds in the matrix (#2937) by Lenny Primak · 4 days ago
  8. 0a1740c enh: harmonized superclass / interface annotation processing (#2917) by Lenny Primak · 11 days ago
  9. 8a92a71 enh: implement strict handling for empty authorization configurations in filters and annotation handlers by lprimak · 3 weeks ago
  10. 2e3ffaf javadoc: add documentation for CORS preflight requests in HttpAuthenticationFilter by lprimak · 3 weeks ago
  11. e6c6816 feat: add options to control forwarded-proto and port filter by lprimak · 3 weeks ago
  12. 4bfa8ad bugfix: prevent usage of ThreadState with ScopedValues in JDK 25 or later by lprimak · 3 weeks ago
  13. 337b4f1 bugfix: improve resourcePath validation and clear loaded state on restart by lprimak · 3 weeks ago
  14. 960ff2d bugfix: adjust session timeout calculation to round up positive millisecond values by lprimak · 3 weeks ago
  15. ecd3aba bugfix: ensure passwordsMatch method returns false for null or empty saved credentials by lprimak · 3 weeks ago
  16. 180d480 bugfix: html-encode text in PrincipalTag by lprimak · 3 weeks ago
  17. 12d194b [#2931] - Rebuild expired Faces views during form replay without a preliminary GET (#2930) by Lenny Primak · 2 weeks ago
  18. 0671692 [#2929] Use Spring Path matcher for Spring Boot 4.2+ where Ant matching is removed (#2928) by Lenny Primak · 2 weeks ago
  19. ffc65d6 chore(deps): bump the maven-dependencies group with 18 updates (#2933) by dependabot[bot] · 2 weeks ago
  20. f358b00 chore(deps): bump the github-actions-dependencies group with 5 updates (#2932) by dependabot[bot] · 2 weeks ago
  21. 6016741 chore(deps): bump the maven-dependencies group with 9 updates (#2919) by dependabot[bot] · 2 weeks ago
  22. 27b0597 bugfix: restore deny access control in NoAccessFilter and add unit tests by lprimak · 3 weeks ago
  23. d53b95c bugfix: initialized case sentitive field to true in ShiroFilterFactoryBean by lprimak · 3 weeks ago
  24. f839b78 [#2924] - WildcardPermission and DomainPermission lower-case with the JVM default locale (#2925) by Sharang Gupta · 3 weeks ago
  25. 784a4d4 Remove stray brace from rememberMe cookie path expression (#2927) by Nexory · 3 weeks ago
  26. 039425b chore(deps): bump the github-actions-dependencies group with 4 updates (#2920) by dependabot[bot] · 3 weeks ago
  27. 561d9a1 chore(deps): bump https://github.com/zizmorcore/zizmor-pre-commit (#2918) by dependabot[bot] · 3 weeks ago
  28. 9f634a5 chore: fix CodeQL issues (#2915) by Lenny Primak · 3 weeks ago
  29. 0c5e4a6 enh: fix labeler workflow (#2916) by Lenny Primak · 3 weeks ago
  30. 446c40b chore(deps): bump the maven-dependencies group with 27 updates (#2911) by dependabot[bot] · 4 weeks ago
  31. 3d06deb chore(deps): bump the github-actions-dependencies group with 7 updates (#2912) by dependabot[bot] · 4 weeks ago
  32. 4903321 chore: added `@Override` annotations where necessary (#2913) by Lenny Primak · 4 weeks ago
  33. d6ebb1d misc: fix typos in Java code (#2914) by John Bampton · 4 weeks ago
  34. 1b7b8b5 [#2232] Resubmit without login (#2907) by Lenny Primak · 4 weeks ago
  35. 1a2456c enh: rework form resubmit via self-dispatch rather than a network-call (#2900) by Lenny Primak · 4 weeks ago
  36. 964d0cc [#2905] chore: replace labeler with the one that works like magpie and pull_r… (#2908) by Lenny Primak · 4 weeks ago
  37. 699e048 chore: change session validation log messages from INFO to DEBUG (#2910) by Lenny Primak · 4 weeks ago
  38. 54c6740 chore(deps): bump the maven-dependencies group with 9 updates (#2906) by dependabot[bot] · 5 weeks ago
  39. 11d5bd9 Improve build stability: RAT, Selenium and JavaAPI Comparison enforcer plugin (#2901) by Lenny Primak · 6 weeks ago
  40. bad0010 chore(deps): bump the github-actions-dependencies group with 3 updates (#2899) by dependabot[bot] · 6 weeks ago
  41. f0c6623 chore(deps): bump the maven-dependencies group with 13 updates (#2898) by dependabot[bot] · 6 weeks ago
  42. aad2f33 chore(deps): bump https://github.com/python-jsonschema/check-jsonschema (#2897) by dependabot[bot] · 6 weeks ago
  43. 9a7bf22 chore(deps): bump the maven-dependencies group with 8 updates (#2895) by dependabot[bot] · 7 weeks ago
  44. 0b5c1ae chore(deps): bump the github-actions-dependencies group with 4 updates (#2894) by dependabot[bot] · 7 weeks ago
  45. bd3ecdd chore: Generate SBOM files with CycloneDX and SPDX maven plugins (#2893) by Lenny Primak · 8 weeks ago
  46. ed07397 docs(README): added OpenSSF best practices badge (#2892) by Lenny Primak · 8 weeks ago
  47. fa591e8 chore(deps): bump https://github.com/zizmorcore/zizmor-pre-commit (#2888) by dependabot[bot] · 8 weeks ago
  48. 5bebadd chore(deps): bump the maven-dependencies group with 18 updates (#2889) by dependabot[bot] · 8 weeks ago
  49. d2ad171 chore(deps): bump the github-actions-dependencies group with 4 updates (#2890) by dependabot[bot] · 8 weeks ago
  50. bcd110e chore(build): removed windows profile, no longer necessary (#2891) by Lenny Primak · 8 weeks ago
  51. 8e0e4ac bugfix(jakarta-ee): form resubmit logic uses more data from the subse… (#2885) by Lenny Primak · 9 weeks ago
  52. 4ac61f7 chore: remove site override from apache release profile, is obsolete for a long time now, and it also breaks reproducible builds (#2887) by Lenny Primak · 9 weeks ago
  53. 27bf094 chore(deps): bump the pre-commit-hooks group with 2 updates (#2883) by dependabot[bot] · 9 weeks ago
  54. 9534cfb chore(deps): bump the maven-dependencies group with 27 updates (#2884) by dependabot[bot] · 9 weeks ago
  55. a830f88 chore: add scarf.sh pixel to README (#2880) by Lenny Primak · 9 weeks ago
  56. eeb7383 chore(build): add Semeru runtimes (#2879) by Lenny Primak · 9 weeks ago
  57. a98e46c bugfix(Guice): align Guice behavior regarding superclass annotation p… (#2881) by Lenny Primak · 9 weeks ago
  58. ca444c3 chore(deps): bump the maven-dependencies group with 7 updates (#2876) by dependabot[bot] · 2 months ago
  59. cb76d51 chore(deps): bump the github-actions-dependencies group with 5 updates (#2875) by dependabot[bot] · 2 months ago
  60. bf89894 chore: updated shiro.doap.rdf file for Shiro 3.0.1 (#2873) by Lenny Primak · 3 months ago
  61. a8a7c47 chore(deps): bump the github-actions-dependencies group with 4 updates (#2871) by dependabot[bot] · 3 months ago
  62. a116228 chore(deps): bump the maven-dependencies group with 22 updates (#2872) by dependabot[bot] · 3 months ago
  63. b8b883c bugfix(aop): make annotation processing consistent in all cases (method annotations override class ones, not add) by lprimak · 3 months ago
  64. 4a52195 bugfix(aspectj): added handling for annotations for class with static methods by lprimak · 3 months ago
  65. 2bfec7e bugfix: fix security context handling in JAX-RS support for methods isSecure() and getAuthenticationScheme() - was throwing stack overflow errors by lprimak · 3 months ago
  66. 9f2fb62 chore: fix line endings in mvnw.cmd by lprimak · 3 months ago
  67. c3cfcf7 bugfix: removed unnecessary setCredentialsMatcher() call in DefaultLdapRealm by lprimak · 3 months ago
  68. 4c8b6c4 bugfix: improve cookie handling in form resubmission support by lprimak · 3 months ago
  69. 752938a bugfix: set rememberMe deletion cookie up correctly by lprimak · 3 months ago
  70. da4419e bugfix: added formDataKey= in resubmit check by lprimak · 3 months ago
  71. 07be591 chore(deps): bump the pre-commit-hooks group with 3 updates (#2863) by dependabot[bot] · 3 months ago
  72. adb26e6 chore(deps): bump the maven-dependencies group with 15 updates (#2864) by dependabot[bot] · 3 months ago
  73. bb608ba chore(deps): bump the github-actions-dependencies group with 4 updates (#2865) by dependabot[bot] · 3 months ago
  74. c2a7ad3 chore: fix reproducibility of AspectJ support module by forcing USA locale (#2862) by Lenny Primak · 3 months ago
  75. 63be1a2 bugfix(jakarta-ee): missing cache entry for the check (#2861) by Lenny Primak · 3 months ago
  76. e6f5348 [#2841] Fix Active Directory DN authentication (#2854) by Abhirama · 3 months ago
  77. 85f9774 bugfix(matcher): prevent accidental matches for simulated credentials in multi-realm setup, causing errors printed on the console whene they should not be. (#2856) by Lenny Primak · 3 months ago
  78. 2140bb9 Bugfix: default case insensitive filters for programmatic and Spring / Spring Boot configurations (#2857) by Lenny Primak · 3 months ago
  79. fd1b1a5 Bugfix: improve form resubmit handling (#2858) by Lenny Primak · 3 months ago
  80. 7cb2054 Enhancement: support for remembered principals in session management, check w… (#2859) by Lenny Primak · 3 months ago
  81. 34baf83 bugfix(aop/guice): add support for retrieving annotations from superc… (#2860) by Lenny Primak · 3 months ago
  82. ec4a5fa chore(deps): bump the github-actions-dependencies group with 3 updates (#2853) by dependabot[bot] · 3 months ago
  83. ffe277b chore(deps): bump the maven-dependencies group with 22 updates (#2852) by dependabot[bot] · 3 months ago
  84. e3e8036 chore(deps): bump the pre-commit-hooks group with 2 updates (#2851) by dependabot[bot] · 3 months ago
  85. a453aca [#2837] Fail closed when getPathWithinApplication() cannot normalize the request path (#2836) by xaccefy · 3 months ago
  86. 3e4f9e1 chore(deps): bump the github-actions-dependencies group with 6 updates (#2850) by dependabot[bot] · 3 months ago
  87. 3fe4555 chore(deps): bump the maven-dependencies group with 5 updates (#2849) by dependabot[bot] · 3 months ago
  88. c2270e7 [#2831] - Add optional JEP-290 ObjectInputFilter support to DefaultSerializer, with a conservative resource-limit default on RememberMe deserialization (#2832) by Nexory · 3 months ago
  89. 1e4d1f9 chore(deps): bump the maven-dependencies group across 1 directory with 32 updates (#2844) by dependabot[bot] · 4 months ago
  90. 2a6ffaf chore(deps): bump the github-actions-dependencies group across 1 directory with 10 updates (#2843) by dependabot[bot] · 4 months ago
  91. d9c3e67 chore(deps): bump the pre-commit-hooks group across 1 directory with 4 updates (#2842) by dependabot[bot] · 4 months ago
  92. cde5990 bugfix: fix login() once again accepts null subject (#2807) by Lenny Primak · 4 months ago
  93. a3dfb8a chore(jenkins): clean up custom workspace directories (#2810) by Lenny Primak · 4 months ago
  94. fdc99b1 chore(deps): bump the github-actions-dependencies group with 3 updates (#2828) by dependabot[bot] · 4 months ago
  95. 18aef32 chore(deps): bump the maven-dependencies group with 13 updates (#2829) by dependabot[bot] · 4 months ago
  96. f566b7f enh: added new constructors to be able to set host and start timestamp (#2830) by Lenny Primak · 4 months ago
  97. 7e7df9c Update markdown-lint configuration add link to rules (#2815) by John Bampton · 4 months ago
  98. 8369c75 [CI] Add prek priority levels to allow safe parallel execution of hooks (#2816) by John Bampton · 4 months ago
  99. 890f2aa bugfix(test): fix flaky ExecutorServiceSessionValidationSchedulerTest… (#2820) by Lenny Primak · 4 months ago
  100. 1c749ac chore(deps): bump the github-actions-dependencies group across 1 directory with 3 updates (#2821) by dependabot[bot] · 4 months ago