Google Git
Sign in
apache/shiro/HEAD
  1. cde5990 bugfix: fix login() once again accepts null subject (#2807) by Lenny Primak · 3 weeks ago main
  2. a3dfb8a chore(jenkins): clean up custom workspace directories (#2810) by Lenny Primak · 3 weeks ago
  3. fdc99b1 chore(deps): bump the github-actions-dependencies group with 3 updates (#2828) by dependabot[bot] · 3 weeks ago
  4. 18aef32 chore(deps): bump the maven-dependencies group with 13 updates (#2829) by dependabot[bot] · 3 weeks ago
  5. f566b7f enh: added new constructors to be able to set host and start timestamp (#2830) by Lenny Primak · 3 weeks ago
  6. 7e7df9c Update markdown-lint configuration add link to rules (#2815) by John Bampton · 3 weeks ago
  7. 8369c75 [CI] Add prek priority levels to allow safe parallel execution of hooks (#2816) by John Bampton · 3 weeks ago
  8. 890f2aa bugfix(test): fix flaky ExecutorServiceSessionValidationSchedulerTest… (#2820) by Lenny Primak · 3 weeks ago
  9. 1c749ac chore(deps): bump the github-actions-dependencies group across 1 directory with 3 updates (#2821) by dependabot[bot] · 3 weeks ago
  10. 7664590 chore(deps): bump the pre-commit-hooks group across 1 directory with 2 updates (#2822) by dependabot[bot] · 3 weeks ago
  11. f698ce4 chore(deps): bump the maven-dependencies group across 1 directory with 18 updates (#2823) by dependabot[bot] · 3 weeks ago
  12. 76ccdeb enh: added replay whitelist and blacklist check before resubmitting a form after relogin (#2826) by Lenny Primak · 3 weeks ago
  13. a0940f4 chore: re-enable API compatibility checks post 3.0 release (#2814) by Lenny Primak · 4 weeks ago
  14. 638d011 Discard Jenkins build workspace after 30 days (#2806) by Aurélien Pupier · 5 weeks ago
  15. ffba65f chore(deps): bump the maven-dependencies group with 2 updates (#2803) by dependabot[bot] · 6 weeks ago
  16. 63ebb6c chore(deps): bump actions/checkout (#2802) by dependabot[bot] · 6 weeks ago
  17. e441ea3 enh(web): rememberMe cookie expiration is checked on the server by lprimak · 6 weeks ago
  18. 42aa344 bugfix(guice-web): now matching paths with trailing slash stripped by lprimak · 6 weeks ago
  19. 8856874 chore: update Payara version and refactor port property names in configuration, and make dependabot see payara for updates by lprimak · 6 weeks ago
  20. c7dc2a4 enh: warn if realm authentication fails due to system exceptions in multi-realm environment, and send an event by lprimak · 6 weeks ago
  21. d08a84c chore(deps-dev): bump com.flowlogix.depchain:integration-test (#2796) by dependabot[bot] · 6 weeks ago
  22. e45268b chore(dependabot): fix htmlunit major version pinning by lprimak · 6 weeks ago
  23. da75880 chore(deps): bump the maven-dependencies group across 1 directory with 2 updates (#2791) by dependabot[bot] · 6 weeks ago
  24. ea87916 chore(guice, README): update deployment instructions to remove Heroku examples (#2790) by Lenny Primak · 6 weeks ago
  25. 0ce3a1d chore(deps, 2.x): add major version update exclusions for various dependencies (#2789) by Lenny Primak · 6 weeks ago
  26. 8ce52d3 chore(deps): bump https://github.com/igorshubovych/markdownlint-cli (#2784) by dependabot[bot] · 6 weeks ago
  27. 7dd2292 chore(deps): bump actions/setup-java (#2776) by dependabot[bot] · 6 weeks ago
  28. b381172 chore: additional and supporting updates by lprimak · 6 weeks ago
  29. 592f9b0 [#1585] Jakarta namespace and java 17 for 3x (#2017) by Patrick (Gus) Heck · 6 months ago
  30. 43cedf2 [#1585] Migrate to Jakarta EE 10 (3.x) (#2018) by Rui Ventura · 6 months ago
  31. 2e83661 chore(3.x): Migrate to jakarta EE 10 using OpenRewrite (#2224) by Rui Ventura · 6 months ago
  32. ea59e27 [project] Add 3.X change guidelines by francois papon · 2 years ago
  33. 2b75a3b Set pom version to 3.0.0-SNAPSHOT by francois papon · 2 years ago
  34. 4aaa3ce Refactor: AssertJ best practices by @timtebeek by Tim Te Beek · 6 weeks ago
  35. b06d2b4 GitHub issue #1548. Declare PrincipalCollection interface to be intended to be immutable; provide an immutable implementation including a builder class; deprecate the mutable implementation; use the immutable one in SimpleAuthenticationInfo for merging. by Martin Geisse · 2 years, 1 month ago
  36. 4207abc chore(asf.yaml): correct merge buttons are now enabled (squash, rebase) and merge by lprimak · 6 weeks ago
  37. 744128d Deprecate RandomSessionIdGenerator due to insufficient entropy (#2770) by Lenny Primak · 7 weeks ago
  38. e384e9d chore(jacoco): added exclusion for weld client proxy (#2769) by Lenny Primak · 7 weeks ago
  39. eed8ab0 chore: update shiro.doap file with more recent versions and maintainers (#2768) by Lenny Primak · 7 weeks ago
  40. 0499524 chore(deps): bump bytebuddy.version from 1.18.8 to 1.18.10 (#2752) by dependabot[bot] · 7 weeks ago
  41. bc928d0 Update and expand the CITATION file (#2766) by John Bampton · 7 weeks ago
  42. dd5d096 Configure EditorConfig for more file types (#2747) by John Bampton · 7 weeks ago
  43. 3b54e71 [CI] Pin to sha all pre-commit hooks and clean up (#2730) by John Bampton · 7 weeks ago
  44. 5da6b13 chore(deps): bump com.github.siom79.japicmp:japicmp-maven-plugin (#2751) by dependabot[bot] · 7 weeks ago
  45. 169f55a chore(deps): bump org.jboss.shrinkwrap.resolver:shrinkwrap-resolver-bom (#2750) by dependabot[bot] · 7 weeks ago
  46. 6c02db9 chore(deps): bump org.codehaus.gmavenplus:gmavenplus-plugin (#2753) by dependabot[bot] · 7 weeks ago
  47. 3875232 chore(deps): bump the github-actions-dependencies group across 1 directory with 2 updates (#2756) by dependabot[bot] · 7 weeks ago
  48. 670fde6 chore(deps): bump org.jacoco:jacoco-maven-plugin from 0.8.14 to 0.8.15 (#2765) by dependabot[bot] · 7 weeks ago
  49. 250b982 chore(deps): bump ch.qos.logback:logback-core from 1.5.32 to 1.5.34 (#2749) by dependabot[bot] · 7 weeks ago
  50. 67e8d7d chore(deps): bump ch.qos.logback:logback-classic from 1.5.32 to 1.5.34 (#2748) by dependabot[bot] · 7 weeks ago
  51. 3d8e517 chore(asf.yaml): remove bypass_teams by lprimak · 7 weeks ago
  52. 4997ed3 chore(asf): properly format branch protection rule by lprimak · 8 weeks ago
  53. a1c4c27 Merge pull request #2701 from lprimak/add-branch-protection by Steinar Bang · 8 weeks ago
  54. 0c20f0d [CI] Add hook to validate dependabot.yml with pre-commit (#2716) by John Bampton · 8 weeks ago
  55. 59306da [CI] Add pre-commit hook to validate the CITATION file (#2717) by John Bampton · 8 weeks ago
  56. 092afb0 chore(deps-dev): bump org.apache.cxf:cxf-rt-frontend-jaxrs (#2721) by dependabot[bot] · 8 weeks ago
  57. 85cd5c4 chore(deps-dev): bump arquillian.core.version (#2722) by dependabot[bot] · 8 weeks ago
  58. 3aafcab chore(deps): bump the github-actions-dependencies group with 3 updates (#2723) by dependabot[bot] · 8 weeks ago
  59. dfd2930 chore(deps): bump org.apache.commons:commons-configuration2 (#2724) by dependabot[bot] · 8 weeks ago
  60. 772f17f chore(deps): bump org.omnifaces:omnifaces from 3.14.20 to 3.14.21 (#2725) by dependabot[bot] · 8 weeks ago
  61. e1a4128 chore(deps): bump com.github.siom79.japicmp:japicmp-maven-plugin (#2727) by dependabot[bot] · 8 weeks ago
  62. 0aed6ee chore(deps): bump org.apache.cxf:cxf-bom from 3.6.10 to 3.6.11 (#2728) by dependabot[bot] · 8 weeks ago
  63. c9ee120 chore(deps): bump org.apache.cxf:cxf-rt-rs-client from 3.6.10 to 3.6.11 (#2729) by dependabot[bot] · 8 weeks ago
  64. 9063406 Using Rdn.escapeValues() by lprimak · 9 weeks ago
  65. 31fbdb8 Merge pull request #2698 from apache/dependabot/maven/org.apache.johnzon-johnzon-jsonb-1.3.0 by François Papon · 9 weeks ago
  66. dbad41a Merge pull request #2696 from apache/dependabot/github_actions/github-actions-dependencies-10fd86e523 by François Papon · 9 weeks ago
  67. 91a69dc Merge pull request #2697 from apache/dependabot/maven/log4j.version-2.26.0 by François Papon · 9 weeks ago
  68. 164cb1e Merge pull request #2702 from potiuk/asf-security/agents-md-security-link-2026-05-14 by François Papon · 9 weeks ago
  69. 9f35283 chore(deps): bump log4j.version from 2.25.4 to 2.26.0 by dependabot[bot] · 9 weeks ago
  70. be67698 Merge pull request #2694 from apache/dependabot/maven/slf4j.version-2.0.18 by François Papon · 9 weeks ago
  71. c589bb1 Merge pull request #2699 from apache/dependabot/maven/com.github.siom79.japicmp-japicmp-maven-plugin-0.25.7 by François Papon · 9 weeks ago
  72. eda4022 Merge pull request #2700 from apache/dependabot/maven/org.apache-apache-38 by François Papon · 9 weeks ago
  73. 2a1c4da chore: removed branch protection from main, update github ruleset to include additional branches by lprimak · 9 weeks ago
  74. b3c84a6 Update .asf.yaml by Lenny Primak · 9 weeks ago
  75. 9371115 [#2704] [#2710] Fixed Session fixation-related regressions (#2711) by Lenny Primak · 10 weeks ago
  76. a7265a1 chore(deps): bump org.apache.commons:commons-configuration2 (#2706) by dependabot[bot] · 10 weeks ago
  77. bd278bc enh(jakarta-ee): strip out the host part of the referer header by lprimak · 10 weeks ago
  78. c6af28c chore(deps): bump https://github.com/zizmorcore/zizmor-pre-commit (#2709) by dependabot[bot] · 10 weeks ago
  79. d7500f2 Switch pre-commit to ASF approved prek-action (#2705) by John Bampton · 10 weeks ago
  80. 2b9e8e0 minor fixes for SECURITY.md to reflect the true state of the docs by lprimak · 3 months ago
  81. a890040 Add AGENTS.md + SECURITY.md linking the project's security model by Jarek Potiuk · 3 months ago
  82. 5eda682 chore: add branch protection rules by lprimak · 3 months ago
  83. 4fb4cbb chore(deps): bump org.apache:apache from 37 to 38 by dependabot[bot] · 3 months ago
  84. 5f13983 chore(deps): bump com.github.siom79.japicmp:japicmp-maven-plugin by dependabot[bot] · 3 months ago
  85. 36aa076 chore(deps): bump org.apache.johnzon:johnzon-jsonb from 1.2.22 to 1.3.0 by dependabot[bot] · 3 months ago
  86. ebb1d2f chore(deps): bump the github-actions-dependencies group with 3 updates by dependabot[bot] · 3 months ago
  87. 7cd0b1c chore(deps): bump slf4j.version from 2.0.17 to 2.0.18 by dependabot[bot] · 3 months ago
  88. 0819229 chore: remove extra newline by lprimak · 3 months ago
  89. a46600f improvement: implemented session key rotation via changeSessionId() in Web-Container mode only by lprimak · 3 months ago
  90. be31c13 enh(jakarta-ee): encrypt SAVED_REQUEST_KEY cookie by lprimak · 3 months ago
  91. 97218c0 Merge pull request #2689 from apache/dependabot/github_actions/github-actions-dependencies-937d73b4db by François Papon · 3 months ago
  92. d6246a0 Merge pull request #2691 from apache/dependabot/maven/org.apache.karaf.features-framework-4.4.11 by François Papon · 3 months ago
  93. 5ab9e46 Merge pull request #2692 from apache/dependabot/maven/org.owasp-dependency-check-maven-12.2.2 by François Papon · 3 months ago
  94. 4cb75d9 chore(deps): bump org.owasp:dependency-check-maven from 12.2.1 to 12.2.2 by dependabot[bot] · 3 months ago
  95. 05a915f chore(deps): bump org.apache.karaf.features:framework by dependabot[bot] · 3 months ago
  96. 0cc8c1a chore(deps): bump github/codeql-action by dependabot[bot] · 3 months ago
  97. c95a185 enh: reverted secureInDevMode addition and added native session management secure cookie by lprimak · 3 months ago
  98. 2148939 [CI] Add ASF Allowlist Check workflow (#2687) by John Bampton · 3 months ago
  99. 80f635c enh(jakarta-ee): added secure configuration for session cookies automatically by lprimak · 3 months ago
  100. 8f98ac8 chore(deps): bump https://github.com/oxipng/oxipng (#2676) by dependabot[bot] · 3 months ago