1. f72633e Bump org.apache.commons:commons-collections4 from 4.5.0 to 4.6.0 (#1545) by dependabot[bot] · 14 hours ago master
  2. b878dd6 Bump org.bouncycastle:bcprov-jdk18on from 1.85 to 1.85.2 (#1544) by dependabot[bot] · 14 hours ago
  3. cf23528 Bump org.checkerframework:checker-qual from 4.2.1 to 4.2.2 (#1540) by dependabot[bot] · 14 hours ago
  4. 5a1f4f9 Bump junit.version from 6.1.2 to 6.1.3 (#1541) by dependabot[bot] · 14 hours ago
  5. 70c35ef Bump org.objenesis:objenesis from 3.5 to 3.6 (#1539) by dependabot[bot] · 5 days ago
  6. 348725c Harden XsltTransformer against XXE in the transformed document (#1537) by Nexory · 5 days ago
  7. 0c4d3a0 Bump actions/setup-java from 5.6.0 to 5.7.0 (#1538) by dependabot[bot] · 5 days ago
  8. c1f0375 Merge pull request #1535 from apache/document-security-model by Emond Papegaaij · 10 days ago
  9. e10b00f Update security reporting instructions in SECURITY.md by Emond Papegaaij · 11 days ago document-security-model
  10. 70b3d8d Bump ip-address from 10.2.0 to 10.4.0 in /testing/wicket-js-tests (#1534) by dependabot[bot] · 13 days ago
  11. 1f7aad3 Document cross-origin isolation of listener invocations by Emond Papegaaij · 13 days ago
  12. fa7ab44 Document the security model and page store crypter trust by Emond Papegaaij · 13 days ago
  13. d06be5b Bump actions/setup-java from 5 to 5.6.0 (#1526) by dependabot[bot] · 14 days ago
  14. de06bbf Bump org.hibernate.validator:hibernate-validator (#1527) by dependabot[bot] · 14 days ago
  15. e4e41dd Bump grunt from 1.6.2 to 1.6.3 in /testing/wicket-js-tests (#1528) by dependabot[bot] · 2 weeks ago
  16. 5ee46de Bump org.apache.felix:maven-bundle-plugin from 6.0.2 to 6.1.0 (#1533) by dependabot[bot] · 2 weeks ago
  17. 6f1cd0b Bump org.apache.maven.plugins:maven-toolchains-plugin (#1529) by dependabot[bot] · 2 weeks ago
  18. a1292fd Bump com.github.eirslett:frontend-maven-plugin from 2.0.1 to 2.0.2 (#1531) by dependabot[bot] · 2 weeks ago
  19. 8324654 Bump org.apache.maven.plugins:maven-jar-plugin from 3.5.0 to 3.5.1 (#1525) by dependabot[bot] · 3 weeks ago
  20. 34ef6da Bump junit.version from 6.1.1 to 6.1.2 (#1519) by dependabot[bot] · 4 weeks ago
  21. df13869 Bump org.bouncycastle:bcprov-jdk18on from 1.84 to 1.85 (#1521) by dependabot[bot] · 4 weeks ago
  22. 5e6f40b Use SecureRandom for cryptographic operations and remove SHA1PRNG dependency by jmestwa-coder · 4 months ago
  23. 2afa365 [https://github.com/apache/wicket/issues/1492] make partial page update creation pluggable. by reiern70 · 8 weeks ago
  24. 483b83c Sign file upload resource constraints by mundur · 5 weeks ago
  25. 05cce2e Bump morgan from 1.10.1 to 1.11.0 in /testing/wicket-js-tests (#1513) by dependabot[bot] · 5 weeks ago
  26. 31e2be0 Bump ws from 8.20.0 to 8.21.0 in /testing/wicket-js-tests (#1514) by dependabot[bot] · 5 weeks ago
  27. 0170ebb Bump org.hibernate.validator:hibernate-validator (#1515) by dependabot[bot] · 5 weeks ago
  28. 629c696 guard against integer overflow in write() (#1443) by jmestwa-coder · 5 weeks ago
  29. 4b8235f WICKET-7187 added type to JavaScript content header items. (#1498) by Johan Stuyts · 5 weeks ago
  30. 456bc02 WICKET-7183 fix popupsettings#setTarget regression (#1504) by pedrosans · 5 weeks ago
  31. e9a75dc Make the tests of `LastModifiedTest` work on all platforms. (#1512) by Johan Stuyts · 5 weeks ago
  32. 39001db Bump org.checkerframework:checker-qual from 4.2.0 to 4.2.1 (#1509) by dependabot[bot] · 6 weeks ago
  33. dab86e5 Bump org.apache:apache from 38 to 39 (#1507) by dependabot[bot] · 6 weeks ago
  34. dfd4194 Bump junit.version from 6.1.0 to 6.1.1 (#1506) by dependabot[bot] · 6 weeks ago
  35. a0ca838 Bump actions/checkout from 6 to 7 (#1494) by dependabot[bot] · 7 weeks ago
  36. 5a3183f Bump actions/cache from 5 to 6 (#1500) by dependabot[bot] · 7 weeks ago
  37. e897ea4 Bump org.hibernate.validator:hibernate-validator (#1502) by dependabot[bot] · 7 weeks ago
  38. a3d2312 Bump jakarta.servlet.jsp:jakarta.servlet.jsp-api from 3.1.1 to 4.0.0 (#1497) by dependabot[bot] · 8 weeks ago
  39. 23da05c Bump io.micrometer:micrometer-core from 1.16.5 to 1.17.0 (#1491) by dependabot[bot] · 9 weeks ago
  40. e715ac4 Bump com.github.eirslett:frontend-maven-plugin from 2.0.0 to 2.0.1 (#1490) by dependabot[bot] · 9 weeks ago
  41. 03097cd Bump spring.version from 7.0.7 to 7.0.8 (#1489) by dependabot[bot] · 9 weeks ago
  42. ec9b347 Bump com.google.errorprone:error_prone_annotations from 2.49.0 to 2.50.0 (#1488) by dependabot[bot] · 9 weeks ago
  43. eaab30e Harden CI workflow permissions (#1486) by alb3e3 · 9 weeks ago
  44. 36b334d WICKET-7186: correctly delegate calls to wicket cleaner (#1485) by Laurent · 9 weeks ago
  45. 139bc13 Make <wicket:header-items/> HTML spec compliant (#1458) by Andreas Svanberg · 10 weeks ago
  46. 5e101db Bump org.checkerframework:checker-qual from 4.1.0 to 4.2.0 (#1481) by dependabot[bot] · 10 weeks ago
  47. e0e3417 [WICKET-7182] wrapped the fetched element with jQuery to use the event call on the autocomplete extension (#1478) by Jacker · 2 months ago
  48. c8a86c6 Bump org.jacoco:jacoco-maven-plugin from 0.8.14 to 0.8.15 (#1482) by dependabot[bot] · 2 months ago
  49. c9ae0e4 Add discussions notification email to .asf.yaml by Andrea Del Bene · 2 months ago
  50. 5df35ba [#] Update asf.yaml to enable discussions and wiki (#1475) by Matt Pavlovich · 2 months ago
  51. 76db73e Bump maven-surefire-plugin.version from 3.5.5 to 3.5.6 (#1474) by dependabot[bot] · 3 months ago
  52. 69b3efc Bump metrics.version from 4.2.38 to 4.2.39 (#1473) by dependabot[bot] · 3 months ago
  53. 4b17170 Bump com.github.siom79.japicmp:japicmp-maven-plugin (#1472) by dependabot[bot] · 3 months ago
  54. bfe75cb Bump com.sun.xml.bind:jaxb-impl from 4.0.8 to 4.0.9 (#1471) by dependabot[bot] · 3 months ago
  55. 65e73b9 Bump com.sun.xml.bind:jaxb-core from 4.0.8 to 4.0.9 (#1470) by dependabot[bot] · 3 months ago
  56. 69bb08b Bump com.github.siom79.japicmp:japicmp-maven-plugin (#1468) by dependabot[bot] · 3 months ago
  57. 59f3ddc Bump asm.version from 9.10 to 9.10.1 (#1467) by dependabot[bot] · 3 months ago
  58. 4887299 Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.2 to 3.6.3 (#1466) by dependabot[bot] · 3 months ago
  59. 8c6151f Bump junit.version from 6.0.3 to 6.1.0 (#1465) by dependabot[bot] · 3 months ago
  60. 508a2de Bump org.apache:apache from 37 to 38 (#1463) by dependabot[bot] · 3 months ago
  61. 07bd68d Bump slf4j.version from 2.0.17 to 2.0.18 (#1462) by dependabot[bot] · 3 months ago
  62. 493e2e0 Set up default protection ruleset for default and release branches (#1459) by The Apache Software Foundation · 3 months ago
  63. 1d90d11 Bump asm.version from 9.9.1 to 9.10 (#1461) by dependabot[bot] · 3 months ago
  64. fb0700f Fix repository id extraction by Andrea Del Bene · 3 months ago
  65. 28e28b3 [WICKET-7179] fix broken focus functionality by reiern70 · 3 months ago
  66. 68cd44b updated parent pom ver.37 by Andrea Del Bene · 3 months ago
  67. ac5a493 Bump com.sun.xml.bind:jaxb-core from 4.0.7 to 4.0.8 (#1456) by dependabot[bot] · 3 months ago
  68. 7b2a70f Bump com.github.siom79.japicmp:japicmp-maven-plugin (#1454) by dependabot[bot] · 3 months ago
  69. f6fb939 Bump com.sun.xml.bind:jaxb-impl from 4.0.7 to 4.0.8 (#1452) by dependabot[bot] · 3 months ago
  70. 578645e Revert "Update parent version from 35 to 37" by Andrea Del Bene · 3 months ago
  71. 7f92972 Removing duplicated test by Pedro Santos · 3 months ago
  72. cc11018 Update parent version from 35 to 37 by Andrea Del Bene · 3 months ago
  73. 97ef32a Bump ip-address from 10.1.0 to 10.2.0 in /testing/wicket-js-tests (#1449) by dependabot[bot] · 3 months ago
  74. 96ef422 Bump org.checkerframework:checker-qual from 4.0.0 to 4.1.0 (#1446) by dependabot[bot] · 4 months ago
  75. 51f4b38 Test with JDK 26 (#1441) by Martin Grigorov · 4 months ago
  76. 067fd37 Run "npm audit fix" to update some transitive JS dependencies (#1442) by Martin Grigorov · 4 months ago
  77. 4e07eee Added JS sanitazing and and fix for PackageResource by Andrea Del Bene · 4 months ago
  78. 60fe3aa Revert "Add Java 26 to the workflow matrix" by Andrea Del Bene · 4 months ago
  79. 955458b Add Java 26 to the workflow matrix by Andrea Del Bene · 4 months ago
  80. 7362447 [WICKET-7179] add support for jQuery 4.0.0 (#1412) by Ernesto Reinaldo Barreiro · 4 months ago
  81. 7247098 Sanitize file upload data (#1432) by Ravishanker Kusuma · 4 months ago
  82. db0a3dc Bump commons-io:commons-io from 2.21.0 to 2.22.0 (#1436) by dependabot[bot] · 4 months ago
  83. e5a6ae4 Bump jakarta.el:jakarta.el-api from 5.0.1 to 6.0.0 (#1435) by dependabot[bot] · 4 months ago
  84. f258922 WICKET-7172: Extend CSP with support for script-src-attr, style-src-attr (#1341) by Kees van Dieren · 4 months ago
  85. bae9366 Bump com.github.siom79.japicmp:japicmp-maven-plugin (#1430) by dependabot[bot] · 4 months ago
  86. 784508a Bump jakarta.annotation:jakarta.annotation-api from 2.1.1 to 3.0.0 (#1429) by dependabot[bot] · 4 months ago
  87. 2988d7a Bump spring.version from 7.0.6 to 7.0.7 (#1428) by dependabot[bot] · 4 months ago
  88. 54e893c Bump io.micrometer:micrometer-core from 1.16.4 to 1.16.5 (#1431) by dependabot[bot] · 4 months ago
  89. b08a46c Bump grunt from 1.6.1 to 1.6.2 in /testing/wicket-js-tests (#1427) by dependabot[bot] · 4 months ago
  90. e4a67d8 Bump org.bouncycastle:bcprov-jdk18on from 1.83 to 1.84 (#1425) by dependabot[bot] · 4 months ago
  91. ddf0f6d WICKET-7180 Fix typos, language and links (#1424) by Martijn Dashorst · 4 months ago
  92. 6fccc83 Bump org.codelibs:jhighlight from 1.1.1 to 2.0.0 (#1421) by dependabot[bot] · 4 months ago
  93. e52d6e9 Bump org.checkerframework:checker-qual from 3.55.1 to 4.0.0 (#1423) by dependabot[bot] · 4 months ago
  94. 59e4772 Bump com.github.siom79.japicmp:japicmp-maven-plugin (#1422) by dependabot[bot] · 4 months ago
  95. b39d8d7 Bump com.google.errorprone:error_prone_annotations from 2.48.0 to 2.49.0 (#1419) by dependabot[bot] · 4 months ago
  96. a597234 Bump basic-ftp from 5.2.1 to 5.2.2 in /testing/wicket-js-tests (#1417) by dependabot[bot] · 4 months ago
  97. 5f15034 Bump basic-ftp from 5.2.0 to 5.2.1 in /testing/wicket-js-tests (#1416) by dependabot[bot] · 4 months ago
  98. b57a4ad Bump net.bytebuddy:byte-buddy from 1.18.7 to 1.18.8 (#1415) by dependabot[bot] · 4 months ago
  99. d9f1ccc Bump org.checkerframework:checker-qual from 3.54.0 to 3.55.1 (#1414) by dependabot[bot] · 4 months ago
  100. 4187642 Bump org.primefaces.extensions:resources-optimizer-maven-plugin (#1410) by dependabot[bot] · 5 months ago