)]}' { "log": [ { "commit": "d98780e7a15e2323083cdc98ca1681f2b843c6c0", "tree": "97d67d4a1146f3afda5bf95dcb5a4e12fe4f3c4d", "parents": [ "8ec37faa480457311dba19fd599d48d3a7f8a794" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Nov 11 14:52:40 2026 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Nov 11 14:52:40 2026 +0000" }, "message": "Bump actions/setup-java from 6.1.0 to 6.2.0 (#780)\n\nBumps [actions/setup-java](https://github.com/actions/setup-java) from 6.1.0 to 6.2.0.\n- [Release notes](https://github.com/actions/setup-java/releases)\n- [Commits](https://github.com/actions/setup-java/compare/b843ebf9b913146b38da2eaa7aeddf76074ae1ad...77dd5b2ce225ea11469928ac317850245a74ae78)\n\n---\nupdated-dependencies:\n- dependency-name: actions/setup-java\n dependency-version: 6.2.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "8ec37faa480457311dba19fd599d48d3a7f8a794", "tree": "6371c3c5dc6e147e8f5cdb85b3fc31d9841326db", "parents": [ "6a7289fecbdada0243fd12e6b8916ff65aa3c5b0" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Nov 11 14:52:32 2026 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Nov 11 14:52:32 2026 +0000" }, "message": "Bump the codeql-action group with 3 updates (#779)\n\nBumps the codeql-action group with 3 updates: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/analyze](https://github.com/github/codeql-action) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action).\n\n\nUpdates `github/codeql-action/init` from 4.39.1 to 4.39.3\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/9b3254085494b55a0f7c4c2b3d2d52cc712ce370...33d7b85da1a04171e211befe2c739303b9a4c066)\n\nUpdates `github/codeql-action/analyze` from 4.39.1 to 4.39.3\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/9b3254085494b55a0f7c4c2b3d2d52cc712ce370...33d7b85da1a04171e211befe2c739303b9a4c066)\n\nUpdates `github/codeql-action/upload-sarif` from 4.39.1 to 4.39.3\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/9b3254085494b55a0f7c4c2b3d2d52cc712ce370...33d7b85da1a04171e211befe2c739303b9a4c066)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action/init\n dependency-version: 4.39.3\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: codeql-action\n- dependency-name: github/codeql-action/analyze\n dependency-version: 4.39.3\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: codeql-action\n- dependency-name: github/codeql-action/upload-sarif\n dependency-version: 4.39.3\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: codeql-action\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "6a7289fecbdada0243fd12e6b8916ff65aa3c5b0", "tree": "d3fd9e0fe33138581f79f441d1ff365b1ccc8bbe", "parents": [ "eb1ad2c49a781d1519c93d904d0afed24544ae58" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Tue Nov 10 13:45:10 2026 +0000" }, "committer": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Tue Nov 10 13:45:10 2026 +0000" }, "message": "[maven-release-plugin] prepare for next development iteration\n" }, { "commit": "eb1ad2c49a781d1519c93d904d0afed24544ae58", "tree": "ee2d2e3e8f9b63eecab3d4d85682401b704e79fa", "parents": [ "1e70a034a9581527c96239942dac0a209c063059" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Tue Nov 10 13:44:59 2026 +0000" }, "committer": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Tue Nov 10 13:44:59 2026 +0000" }, "message": "[maven-release-plugin] prepare release wss4j-4.0.3\n" }, { "commit": "1e70a034a9581527c96239942dac0a209c063059", "tree": "8fcf95c9fa6c6d9ec45eb6c647050200bd430cf3", "parents": [ "cc39e8605a16ca103e5f26f1101958546a02c367" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Tue Nov 10 11:35:31 2026 +0000" }, "committer": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Tue Nov 10 11:35:31 2026 +0000" }, "message": "Removing ChangeLog\n" }, { "commit": "cc39e8605a16ca103e5f26f1101958546a02c367", "tree": "e8a39b4aae0265d1e05542e4679cd260779a8a3a", "parents": [ "10d62c8ba351f74b05e32df0b875aae0edb5d6a2" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Tue Nov 10 09:15:22 2026 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Nov 10 09:15:22 2026 +0000" }, "message": "Require a processed Timestamp for IncludeTimestamp (StAX policy) (#778)" }, { "commit": "10d62c8ba351f74b05e32df0b875aae0edb5d6a2", "tree": "a1a5046fdb9a6378729452850b23be759dfbe22b", "parents": [ "e9580daf9f3f097d90c4cd6d66ec89578074f091" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Mon Nov 09 11:03:13 2026 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Nov 09 11:03:13 2026 +0000" }, "message": "Check an EncryptedKey embedded in an EncryptedData\u0027s KeyInfo (StAX) (#777)" }, { "commit": "e9580daf9f3f097d90c4cd6d66ec89578074f091", "tree": "276f5efd4eaf3c0c968dddd3f65364ecb11cb0c7", "parents": [ "5ef20dae8790c196b839956d010d606ad74f0ee9" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Nov 09 10:35:41 2026 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Nov 09 10:35:41 2026 +0000" }, "message": "Bump com.google.guava:guava from 33.7.2-jre to 33.8.0-jre (#776)\n\nBumps [com.google.guava:guava](https://github.com/google/guava) from 33.7.2-jre to 33.8.0-jre.\n- [Release notes](https://github.com/google/guava/releases)\n- [Commits](https://github.com/google/guava/commits)\n\n---\nupdated-dependencies:\n- dependency-name: com.google.guava:guava\n dependency-version: 33.8.0-jre\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "5ef20dae8790c196b839956d010d606ad74f0ee9", "tree": "bec3343c51f1a3625b4f90ae70470562b6d2501a", "parents": [ "59a0513f41879d0c3db4f0ff75eb51f16a24c2ff" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Mon Nov 09 07:51:09 2026 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Nov 09 07:51:09 2026 +0000" }, "message": "Don\u0027t key the signature replay cache on the SignatureValue (#775)" }, { "commit": "59a0513f41879d0c3db4f0ff75eb51f16a24c2ff", "tree": "cff6516cc109377d49458d4861a6bdedbe651440", "parents": [ "c021fd85be899279d094c463bf1709ed7ca18dae" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Fri Nov 06 16:27:06 2026 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Nov 06 16:27:06 2026 +0000" }, "message": "Request unmasked errors in AttachmentTest failure-path tests (#774)" }, { "commit": "c021fd85be899279d094c463bf1709ed7ca18dae", "tree": "2272510015baa33519ba6cb954085c127df41661", "parents": [ "25b31d099db6e25198118b178588b9b24e2bca78" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Fri Nov 06 07:45:35 2026 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Nov 06 07:45:35 2026 +0000" }, "message": "Enforce the required symmetric algorithm on encrypted attachments (StAX) (#773)" }, { "commit": "25b31d099db6e25198118b178588b9b24e2bca78", "tree": "45456b19bcf35db08e323f45bca9fe5c7de3f94e", "parents": [ "f93a1c0be18a1b1d22e431647a7b08d26b52aa3d" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Fri Nov 06 07:17:37 2026 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Nov 06 07:17:37 2026 +0000" }, "message": "Cache a OneTimeUse SAML Assertion ID only once the Assertion is trusted (#772)" }, { "commit": "f93a1c0be18a1b1d22e431647a7b08d26b52aa3d", "tree": "0600c557919400515730b75203f41bd5f92f89bc", "parents": [ "46c3a8f1ffa766371e0d95bdffc7ee886428cdbd" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Thu Nov 05 11:44:06 2026 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Nov 05 11:44:06 2026 +0000" }, "message": "Keep OneTimeUse identifiers cached for as long as the assertion is valid (#771)" }, { "commit": "46c3a8f1ffa766371e0d95bdffc7ee886428cdbd", "tree": "f9e5fe5cc6772e4ca813dbe5f41872cf465e7ed7", "parents": [ "70c3209fbdc63314151f8de64e9ee0021c5b09bc" ], "author": { "name": "Sharang Gupta", "email": "sharang@sharanggupta.dev", "time": "Thu Nov 05 11:23:15 2026 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Nov 05 11:23:15 2026 +0000" }, "message": "Fail negative policy tests when nothing throws (#770)\n\nSix negative tests in EncryptedPartsTest, SignedPartsTest and\nTokenProtectionTest checked the policy violation only in the catch\nblock, so they passed if the enforcer accepted the message. Add the\nfail() their sibling tests already have." }, { "commit": "70c3209fbdc63314151f8de64e9ee0021c5b09bc", "tree": "d3a4a10a40260d6903779473bf50bb4b8b7e1bb8", "parents": [ "b9616ae7f98814cc564f206b8c858d125476b2bb" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Wed Nov 04 09:36:23 2026 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Nov 04 09:36:23 2026 +0000" }, "message": "Cache nonces and signatures for as long as their token is accepted (#769)" }, { "commit": "b9616ae7f98814cc564f206b8c858d125476b2bb", "tree": "51a07673f605d1cc52fc9af4f575c40a80b00562", "parents": [ "e923119c967c4c40e19e527db21b9bd9bd7e9f06" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Tue Nov 03 07:15:31 2026 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Nov 03 07:15:31 2026 +0000" }, "message": "WSS-734 - Don\u0027t depend on SHA1PRNG for Jasypt salt and IV generation (#768)" }, { "commit": "e923119c967c4c40e19e527db21b9bd9bd7e9f06", "tree": "6134778b319f7c8442179d3d94697fc71481e07f", "parents": [ "14e0095886199b007c9a622a901c525983d4bc2c" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Tue Nov 03 07:01:13 2026 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Nov 03 07:01:13 2026 +0000" }, "message": "WSS-736 - Only remove security providers on cleanUp that WSS4J registered (#767)" }, { "commit": "14e0095886199b007c9a622a901c525983d4bc2c", "tree": "10b84d87910104bb16ea16b5fb864215e6214a25", "parents": [ "8c4821133d33f796742ac85517cc9e3739f3e98c" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Nov 02 10:53:53 2026 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Nov 02 10:53:53 2026 +0000" }, "message": "Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.3 to 3.7.0 (#766)\n\nBumps [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer) from 3.6.3 to 3.7.0.\n- [Release notes](https://github.com/apache/maven-enforcer/releases)\n- [Commits](https://github.com/apache/maven-enforcer/compare/enforcer-3.6.3...enforcer-3.7.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven.plugins:maven-enforcer-plugin\n dependency-version: 3.7.0\n dependency-type: direct:development\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "8c4821133d33f796742ac85517cc9e3739f3e98c", "tree": "03015cb17891117a00a60f5267798039a485d959", "parents": [ "b4ee62a7870079de9d695025d8f972844252645e" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Fri Oct 30 06:15:04 2026 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Oct 30 06:15:04 2026 +0000" }, "message": "WSS-697 - Don\u0027t override an existing OpenSAML configuration in OpenSAMLUtil.initSamlEngine (#765)" }, { "commit": "b4ee62a7870079de9d695025d8f972844252645e", "tree": "7f588c8beb8e949f70e3bad934f73f48770f78d4", "parents": [ "13628b8c27211373b005c91eff04b7998cbdee6c" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Oct 28 08:19:32 2026 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Oct 28 08:19:32 2026 +0000" }, "message": "Bump the codeql-action group with 3 updates (#764)\n\nBumps the codeql-action group with 3 updates: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/analyze](https://github.com/github/codeql-action) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action).\n\n\nUpdates `github/codeql-action/init` from 4.39.0 to 4.39.1\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee...9b3254085494b55a0f7c4c2b3d2d52cc712ce370)\n\nUpdates `github/codeql-action/analyze` from 4.39.0 to 4.39.1\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee...9b3254085494b55a0f7c4c2b3d2d52cc712ce370)\n\nUpdates `github/codeql-action/upload-sarif` from 4.39.0 to 4.39.1\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee...9b3254085494b55a0f7c4c2b3d2d52cc712ce370)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action/init\n dependency-version: 4.39.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: codeql-action\n- dependency-name: github/codeql-action/analyze\n dependency-version: 4.39.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: codeql-action\n- dependency-name: github/codeql-action/upload-sarif\n dependency-version: 4.39.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: codeql-action\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "13628b8c27211373b005c91eff04b7998cbdee6c", "tree": "d0e8a390b297b9fe88347bcca3abbd44c9d0b62b", "parents": [ "ebaa5751f2107daf86c44dc95b264b76a3c50b70" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Oct 28 08:19:20 2026 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Oct 28 08:19:20 2026 +0000" }, "message": "Bump org.apache.maven.plugins:maven-surefire-plugin from 3.6.0 to 3.6.1 (#763)\n\nBumps [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) from 3.6.0 to 3.6.1.\n- [Release notes](https://github.com/apache/maven-surefire/releases)\n- [Commits](https://github.com/apache/maven-surefire/compare/surefire-3.6.0...surefire-3.6.1)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven.plugins:maven-surefire-plugin\n dependency-version: 3.6.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "ebaa5751f2107daf86c44dc95b264b76a3c50b70", "tree": "454e79bba1c211a501021b24f6a4d1083e47ca02", "parents": [ "82012acfb56e9679fcd40e59f7f9482dd07ff532" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Fri Oct 23 07:20:56 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Oct 23 07:20:56 2026 +0100" }, "message": "Make ReplayCache atomic by adding addIfAbsent (#762)" }, { "commit": "82012acfb56e9679fcd40e59f7f9482dd07ff532", "tree": "a4b59ee7bf091f5e187fb49f04679a9a25de66f8", "parents": [ "651b2d9b26c173413e4bb186717bf1c527746e03" ], "author": { "name": "Sharang Gupta", "email": "sharang@sharanggupta.dev", "time": "Thu Oct 22 06:49:29 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Oct 22 06:49:29 2026 +0100" }, "message": "Rename DerivedKeyTests so Surefire runs it (#761)\n\nThe build only includes **/*Test.java, so the nine tests in\nws-security-policy-stax\u0027s DerivedKeyTests were never executed.\nRenaming the class to DerivedKeyTest brings it in line with its\nsiblings; all nine tests pass." }, { "commit": "651b2d9b26c173413e4bb186717bf1c527746e03", "tree": "2a09396f415f15a2cf2720c5d777c0df77ebe5d9", "parents": [ "a9479c1d50b8f7ebe708618ff94bfcc6418e5180" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Oct 21 13:38:40 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Oct 21 13:38:40 2026 +0100" }, "message": "Bump ossf/scorecard-action from 2.4.4 to 2.5.0 (#760)\n\nBumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.4.4 to 2.5.0.\n- [Release notes](https://github.com/ossf/scorecard-action/releases)\n- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)\n- [Commits](https://github.com/ossf/scorecard-action/compare/2d1146689b8cda280b9bc96326124645441f03bc...fa7117db83c52d787ae5a89f350999701505d78e)\n\n---\nupdated-dependencies:\n- dependency-name: ossf/scorecard-action\n dependency-version: 2.5.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "a9479c1d50b8f7ebe708618ff94bfcc6418e5180", "tree": "731c6e9fb8c7571316688edffcbafcc6eb37a659", "parents": [ "69ca76eb2e5f43da51948160839a2b8077857415" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Oct 21 13:38:29 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Oct 21 13:38:29 2026 +0100" }, "message": "Bump the codeql-action group with 3 updates (#758)\n\nBumps the codeql-action group with 3 updates: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/analyze](https://github.com/github/codeql-action) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action).\n\n\nUpdates `github/codeql-action/init` from 4.38.3 to 4.39.0\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/24c54180a607b1449ed407dd24f251e4e9147c8d...6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee)\n\nUpdates `github/codeql-action/analyze` from 4.38.3 to 4.39.0\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/24c54180a607b1449ed407dd24f251e4e9147c8d...6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee)\n\nUpdates `github/codeql-action/upload-sarif` from 4.38.3 to 4.39.0\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/24c54180a607b1449ed407dd24f251e4e9147c8d...6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action/init\n dependency-version: 4.39.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n dependency-group: codeql-action\n- dependency-name: github/codeql-action/analyze\n dependency-version: 4.39.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n dependency-group: codeql-action\n- dependency-name: github/codeql-action/upload-sarif\n dependency-version: 4.39.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n dependency-group: codeql-action\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "69ca76eb2e5f43da51948160839a2b8077857415", "tree": "38ae9c0e93f5f55aea1f419636f0e84cf641d849", "parents": [ "83015b5c8b525763f19ddf7a049cf44a141527d6" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Oct 21 13:38:14 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Oct 21 13:38:14 2026 +0100" }, "message": "Bump actions/setup-java from 6.0.1 to 6.1.0 (#759)\n\nBumps [actions/setup-java](https://github.com/actions/setup-java) from 6.0.1 to 6.1.0.\n- [Release notes](https://github.com/actions/setup-java/releases)\n- [Commits](https://github.com/actions/setup-java/compare/de7274f081f381c8f8158605e0321c36c376e2e6...b843ebf9b913146b38da2eaa7aeddf76074ae1ad)\n\n---\nupdated-dependencies:\n- dependency-name: actions/setup-java\n dependency-version: 6.1.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "83015b5c8b525763f19ddf7a049cf44a141527d6", "tree": "a893d20f18c3e9f4bf1c0096cccb37eadf931efa", "parents": [ "d27f52205bde336c30b73faeaba86b99bbb4b605" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Wed Oct 21 06:38:58 2026 +0100" }, "committer": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Wed Oct 21 06:38:58 2026 +0100" }, "message": "Downgrading scorecards to run twice weekly\n" }, { "commit": "d27f52205bde336c30b73faeaba86b99bbb4b605", "tree": "b34961a166e5ff7da19e91b01e4ef69746bc3dde", "parents": [ "e65de96abb0ecda7723739e82f8836d99d493fac" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Oct 15 09:36:10 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Oct 15 09:36:10 2026 +0100" }, "message": "Bump actions/upload-artifact from 7.0.1 to 7.0.2 (#756)\n\nBumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 7.0.1 to 7.0.2.\n- [Release notes](https://github.com/actions/upload-artifact/releases)\n- [Commits](https://github.com/actions/upload-artifact/compare/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a...cf430e030ddbb5b0abf93d22962f4752f3646cd9)\n\n---\nupdated-dependencies:\n- dependency-name: actions/upload-artifact\n dependency-version: 7.0.2\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "e65de96abb0ecda7723739e82f8836d99d493fac", "tree": "89f725a2f67730f8ddeac885dec10fbecdc818e3", "parents": [ "8c73e3c596d7f4558378cdae0955731581356e99" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Oct 15 09:36:00 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Oct 15 09:36:00 2026 +0100" }, "message": "Bump the codeql-action group with 3 updates (#757)\n\nBumps the codeql-action group with 3 updates: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/analyze](https://github.com/github/codeql-action) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action).\n\n\nUpdates `github/codeql-action/init` from 4.38.2 to 4.38.3\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...24c54180a607b1449ed407dd24f251e4e9147c8d)\n\nUpdates `github/codeql-action/analyze` from 4.38.2 to 4.38.3\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...24c54180a607b1449ed407dd24f251e4e9147c8d)\n\nUpdates `github/codeql-action/upload-sarif` from 4.38.2 to 4.38.3\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...24c54180a607b1449ed407dd24f251e4e9147c8d)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action/init\n dependency-version: 4.38.3\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: codeql-action\n- dependency-name: github/codeql-action/analyze\n dependency-version: 4.38.3\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: codeql-action\n- dependency-name: github/codeql-action/upload-sarif\n dependency-version: 4.38.3\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: codeql-action\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "8c73e3c596d7f4558378cdae0955731581356e99", "tree": "81afa318aac8a8b48018b26712286c454af20eb3", "parents": [ "fbdf0d3afb1b17871fc28c53f3342b6dbb391a05" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Wed Oct 14 16:29:54 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Oct 14 16:29:54 2026 +0100" }, "message": "Some remaining codeql fixes (#755)" }, { "commit": "fbdf0d3afb1b17871fc28c53f3342b6dbb391a05", "tree": "b0c53dd044e077d0d658968c5472c57cd984eccf", "parents": [ "158961c956beb096261a1aa07ce9bc9a2201aa35" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Wed Oct 14 09:10:02 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Oct 14 09:10:02 2026 +0100" }, "message": "More test codeql fixes (#754)" }, { "commit": "158961c956beb096261a1aa07ce9bc9a2201aa35", "tree": "9b9ad6ac9c63912898c643831dc62423340dbcbf", "parents": [ "f1d8d7c459a80e67b541e82f79883c4539964b93" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Wed Oct 14 06:40:48 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Oct 14 06:40:48 2026 +0100" }, "message": "Fix build version comment (#753)" }, { "commit": "f1d8d7c459a80e67b541e82f79883c4539964b93", "tree": "d65a3e4e8bfacb414a2e6ccf9ed7b92e9710495c", "parents": [ "042edeaeba60a282c3f6b7fae7a2508ed1957f0e" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Wed Oct 14 05:54:09 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Oct 14 05:54:09 2026 +0100" }, "message": "Fixing some useless parameter warnings in the tests (#752)" }, { "commit": "042edeaeba60a282c3f6b7fae7a2508ed1957f0e", "tree": "b510d21567257c66b9cb752ed1938b8dc804793f", "parents": [ "4cf53a0258cdb086e8c935b7166a9f2531763cb7" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Oct 13 10:49:13 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Oct 13 10:49:13 2026 +0100" }, "message": "Bump com.fasterxml.woodstox:woodstox-core from 7.2.2 to 7.3.0 (#740)\n\nBumps [com.fasterxml.woodstox:woodstox-core](https://github.com/FasterXML/woodstox) from 7.2.2 to 7.3.0.\n- [Commits](https://github.com/FasterXML/woodstox/compare/woodstox-core-7.2.2...woodstox-core-7.3.0)\n\n---\nupdated-dependencies:\n- dependency-name: com.fasterxml.woodstox:woodstox-core\n dependency-version: 7.3.0\n dependency-type: direct:development\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "4cf53a0258cdb086e8c935b7166a9f2531763cb7", "tree": "14b626edb089be16c6d8d3eec2561f6a5967fae2", "parents": [ "695d6379e7d292fdc6a5daf80757a7b57b82dffe" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Tue Oct 13 09:24:52 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Oct 13 09:24:52 2026 +0100" }, "message": "Javadoc test fixes (#751)" }, { "commit": "695d6379e7d292fdc6a5daf80757a7b57b82dffe", "tree": "c4b23260257f380b87d5fc4f042e31f0a9b88a85", "parents": [ "cc151c6a9284478700ca6a59874707b8e2875dcc" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Tue Oct 13 07:55:19 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Oct 13 07:55:19 2026 +0100" }, "message": "WSS-721 - Search the truststore before the keystore when verifying trust (#750)" }, { "commit": "cc151c6a9284478700ca6a59874707b8e2875dcc", "tree": "8f99e14792802fb6e00ea72996b612164413f51d", "parents": [ "00c53f3d2a9f67221a2a4d0dbcfc5093aacb51b5" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Tue Oct 13 06:57:39 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Oct 13 06:57:39 2026 +0100" }, "message": "WSS-712 - SignatureDigestAlgorithm of SAMLCallback not taken into account (#749)" }, { "commit": "00c53f3d2a9f67221a2a4d0dbcfc5093aacb51b5", "tree": "94c34c303973c31e3f2ec0edf83ba383906558c4", "parents": [ "2cf22b40ded84d0d61a41417f5d433c8fbee0906" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Mon Oct 12 17:14:05 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Oct 12 17:14:05 2026 +0100" }, "message": "[WSS-733] Fall back to URL/classpath lookup when the file system probe is denied (#746)" }, { "commit": "2cf22b40ded84d0d61a41417f5d433c8fbee0906", "tree": "08cbdbefa76a848fdcbd801eb6a5b9c08cd0db4f", "parents": [ "10fad7d673f66e2890c2c7c5ebb83312c04b44aa" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Mon Oct 12 15:19:12 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Oct 12 15:19:12 2026 +0100" }, "message": "WSS-688 - Signatures created with Merlin start being invalid after changing key-store a few times (#748)" }, { "commit": "10fad7d673f66e2890c2c7c5ebb83312c04b44aa", "tree": "4f7126586dcddc3867f10f545678ace18f4f910b", "parents": [ "a0994eea393ccd834460446dfde4c39f902c854f" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Mon Oct 12 15:12:41 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Oct 12 15:12:41 2026 +0100" }, "message": "WSS-713 - Support SubjectConfirmationData for SAML-SV v1 (#747)" }, { "commit": "a0994eea393ccd834460446dfde4c39f902c854f", "tree": "54c318cd5b6f73e2dd6511c88cd52f5ccd8194d4", "parents": [ "96e587b2ca31f0aca194a6b5c367251bf0edf93a" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Fri Oct 09 08:11:22 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Oct 09 08:11:22 2026 +0100" }, "message": "WSS-731 - StAX SignedElements policy rejects a SAML assertion signed through STR-Transform (#745)" }, { "commit": "96e587b2ca31f0aca194a6b5c367251bf0edf93a", "tree": "b53c136a46f2a12d8e18716b55f92f11a17f6db3", "parents": [ "cc19ac368a8eae65cc61bb983ac35b9e0ab08bd6" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Oct 08 11:16:58 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Oct 08 11:16:58 2026 +0100" }, "message": "Bump org.apache.commons:commons-secure-xml from 1.0.0 to 1.1.0 (#743)\n\nBumps org.apache.commons:commons-secure-xml from 1.0.0 to 1.1.0.\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.commons:commons-secure-xml\n dependency-version: 1.1.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "cc19ac368a8eae65cc61bb983ac35b9e0ab08bd6", "tree": "0a7498f27735e84ee766269564b0abc04e3f7020", "parents": [ "f3fe1526d5fb2f097d2dd56142a8931da949ae2c" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Oct 08 11:02:34 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Oct 08 11:02:34 2026 +0100" }, "message": "Bump com.google.guava:guava from 33.7.1-jre to 33.7.2-jre (#739)\n\nBumps [com.google.guava:guava](https://github.com/google/guava) from 33.7.1-jre to 33.7.2-jre.\n- [Release notes](https://github.com/google/guava/releases)\n- [Commits](https://github.com/google/guava/commits)\n\n---\nupdated-dependencies:\n- dependency-name: com.google.guava:guava\n dependency-version: 33.7.2-jre\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "f3fe1526d5fb2f097d2dd56142a8931da949ae2c", "tree": "c5dded6c9c6fc8083e55189475e183be88a83a51", "parents": [ "2bfa60ed13b9380e916abea27f9fe54638fa1845" ], "author": { "name": "Andreas Martens", "email": "amartens@uk.ibm.com", "time": "Thu Oct 08 10:24:38 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Oct 08 10:24:38 2026 +0100" }, "message": "IBM JRE \u003e 8 doesn\u0027t have IBM JGSS anymore (#741)\n\n* Fix Kerberos exception actions for IBM Semeru runtimes\n\n* Run the Kerberos tests on IBM JVMs\n\n* Run all tests on IBM JVMs\n\n* remove support for IBM JGSS only exists in Java 8\n\n* resolve review comments\n\n---------\n\nCo-authored-by: William Marlow \u003cwilliam.marlow@ibm.com\u003e" }, { "commit": "2bfa60ed13b9380e916abea27f9fe54638fa1845", "tree": "9473a3e51a42098f3207132ba6513624ba0f1789", "parents": [ "952c4cccd91feb4910f69337a3f302494be7b218" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Oct 07 10:23:00 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Oct 07 10:23:00 2026 +0100" }, "message": "Bump the codeql-action group with 3 updates (#742)\n\nBumps the codeql-action group with 3 updates: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/analyze](https://github.com/github/codeql-action) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action).\n\n\nUpdates `github/codeql-action/init` from 4.38.1 to 4.38.2\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2)\n\nUpdates `github/codeql-action/analyze` from 4.38.1 to 4.38.2\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2)\n\nUpdates `github/codeql-action/upload-sarif` from 4.38.1 to 4.38.2\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action/init\n dependency-version: 4.38.2\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: codeql-action\n- dependency-name: github/codeql-action/analyze\n dependency-version: 4.38.2\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: codeql-action\n- dependency-name: github/codeql-action/upload-sarif\n dependency-version: 4.38.2\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: codeql-action\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "952c4cccd91feb4910f69337a3f302494be7b218", "tree": "cf664861fbba6fcadba1d968d14006eb9ff5f46e", "parents": [ "1450557642980e66fbdf9c399c5ac85cf23fb2bc" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Wed Sep 30 11:18:57 2026 +0100" }, "committer": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Wed Sep 30 11:18:57 2026 +0100" }, "message": "Updating website for release\n" }, { "commit": "1450557642980e66fbdf9c399c5ac85cf23fb2bc", "tree": "d01eedb59f60e3bfa0223c8825bd795e45ec78d1", "parents": [ "f6b69549a32dbdf298a2b1398d583001d4cfe3d6" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Sep 30 09:35:20 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Sep 30 09:35:20 2026 +0100" }, "message": "Bump org.apache:apache from 39 to 40 (#732)\n\nBumps [org.apache:apache](https://github.com/apache/maven-apache-parent) from 39 to 40.\n- [Release notes](https://github.com/apache/maven-apache-parent/releases)\n- [Commits](https://github.com/apache/maven-apache-parent/commits)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache:apache\n dependency-version: \u002740\u0027\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "f6b69549a32dbdf298a2b1398d583001d4cfe3d6", "tree": "ed92793d9c63349e9143f627a96f49269c3f7535", "parents": [ "1e1a0b05a652332525cfa86aeadd123519c2dc8c" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Sep 30 09:34:08 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Sep 30 09:34:08 2026 +0100" }, "message": "Bump slf4j.version from 2.0.19 to 2.0.20 (#737)\n\nBumps `slf4j.version` from 2.0.19 to 2.0.20.\n\nUpdates `org.slf4j:slf4j-api` from 2.0.19 to 2.0.20\n\nUpdates `org.slf4j:slf4j-reload4j` from 2.0.19 to 2.0.20\n\n---\nupdated-dependencies:\n- dependency-name: org.slf4j:slf4j-api\n dependency-version: 2.0.20\n dependency-type: direct:production\n update-type: version-update:semver-patch\n- dependency-name: org.slf4j:slf4j-reload4j\n dependency-version: 2.0.20\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "1e1a0b05a652332525cfa86aeadd123519c2dc8c", "tree": "d213d4108a7f90e211a938c890e1c609eb9ca5db", "parents": [ "dd6a549eed60dd8dff67436d9ecff94698874849" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Sep 30 09:33:55 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Sep 30 09:33:55 2026 +0100" }, "message": "Bump xmlunit.version from 2.13.0 to 2.14.0 (#734)\n\nBumps `xmlunit.version` from 2.13.0 to 2.14.0.\n\nUpdates `org.xmlunit:xmlunit-core` from 2.13.0 to 2.14.0\n- [Release notes](https://github.com/xmlunit/xmlunit/releases)\n- [Changelog](https://github.com/xmlunit/xmlunit/blob/main/RELEASE_NOTES.md)\n- [Commits](https://github.com/xmlunit/xmlunit/compare/v2.13.0...v2.14.0)\n\nUpdates `org.xmlunit:xmlunit-matchers` from 2.13.0 to 2.14.0\n- [Release notes](https://github.com/xmlunit/xmlunit/releases)\n- [Changelog](https://github.com/xmlunit/xmlunit/blob/main/RELEASE_NOTES.md)\n- [Commits](https://github.com/xmlunit/xmlunit/compare/v2.13.0...v2.14.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.xmlunit:xmlunit-core\n dependency-version: 2.14.0\n dependency-type: direct:development\n update-type: version-update:semver-minor\n- dependency-name: org.xmlunit:xmlunit-matchers\n dependency-version: 2.14.0\n dependency-type: direct:development\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "dd6a549eed60dd8dff67436d9ecff94698874849", "tree": "5bc2110e389d572f6631fde9f68dde6d52bb0022", "parents": [ "ea22fc043f1bdc1e048c63224be9309a8f328f25" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Wed Sep 30 09:33:44 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Sep 30 09:33:44 2026 +0100" }, "message": "Bump the codeql-action group with 3 updates (#733)\n\nBumps the codeql-action group with 3 updates: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/analyze](https://github.com/github/codeql-action) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action).\n\n\nUpdates `github/codeql-action/init` from 4.38.0 to 4.38.1\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/b96794f015dfd88f77b49b1c93e0fa7110f94c63...1c5b675653bb5c22dbe9b12b556ec555138e09fd)\n\nUpdates `github/codeql-action/analyze` from 4.38.0 to 4.38.1\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/b96794f015dfd88f77b49b1c93e0fa7110f94c63...1c5b675653bb5c22dbe9b12b556ec555138e09fd)\n\nUpdates `github/codeql-action/upload-sarif` from 4.38.0 to 4.38.1\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/b96794f015dfd88f77b49b1c93e0fa7110f94c63...1c5b675653bb5c22dbe9b12b556ec555138e09fd)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action/init\n dependency-version: 4.38.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: codeql-action\n- dependency-name: github/codeql-action/analyze\n dependency-version: 4.38.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: codeql-action\n- dependency-name: github/codeql-action/upload-sarif\n dependency-version: 4.38.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: codeql-action\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "ea22fc043f1bdc1e048c63224be9309a8f328f25", "tree": "e0ede79283ea5ae457d9a1113ec2370065ad5b6e", "parents": [ "f3aa317b10397373685bd567b4de094b0f307d03" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Wed Sep 23 08:08:13 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Wed Sep 23 08:08:13 2026 +0100" }, "message": "WSS4J messages now render correctly even if Santuario is never initialised at all. (#731)" }, { "commit": "f3aa317b10397373685bd567b4de094b0f307d03", "tree": "f5300ee49c2c59c18876292c82e3ad4eaceddccf", "parents": [ "9d5d7b35634a98fea881c3e0030ee3ff411ac51d" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Tue Sep 22 16:42:42 2026 +0100" }, "committer": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Tue Sep 22 16:42:42 2026 +0100" }, "message": "[maven-release-plugin] prepare for next development iteration\n" }, { "commit": "9d5d7b35634a98fea881c3e0030ee3ff411ac51d", "tree": "3e80f75303831c74a2b40efb89fc6d592b2915ae", "parents": [ "57b4294994e77a37997521ef66d079fbceb73cc1" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Tue Sep 22 16:42:31 2026 +0100" }, "committer": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Tue Sep 22 16:42:31 2026 +0100" }, "message": "[maven-release-plugin] prepare release wss4j-4.0.2\n" }, { "commit": "57b4294994e77a37997521ef66d079fbceb73cc1", "tree": "4c6fd9e4b5318a68181e7286d8fe0d68068d78f3", "parents": [ "3a31b65b4f4b286545aa94005ba3142c5d1064ae" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Tue Sep 22 16:00:10 2026 +0100" }, "committer": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Tue Sep 22 16:00:10 2026 +0100" }, "message": "Fix regression with KeyUtils\n" }, { "commit": "3a31b65b4f4b286545aa94005ba3142c5d1064ae", "tree": "55dabf8699af9b12bb4e994a1f2282aa09a8a78b", "parents": [ "8053e7133e3d26d6ff98e9b122dad23648cee933" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Tue Sep 22 15:57:38 2026 +0100" }, "committer": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Tue Sep 22 15:57:38 2026 +0100" }, "message": "Revert \"[maven-release-plugin] prepare release wss4j-4.0.2\"\n\nThis reverts commit e2546cd4341ead5ee41ad8e6a3ddccac51dc77c7.\n" }, { "commit": "8053e7133e3d26d6ff98e9b122dad23648cee933", "tree": "2c33c03502afaf450ed3d4e82760f5e3aadaabb0", "parents": [ "a14046a1aea5ca75b17dd5667dece70c38bb59fb" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Tue Sep 22 15:57:26 2026 +0100" }, "committer": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Tue Sep 22 15:57:26 2026 +0100" }, "message": "Revert \"[maven-release-plugin] prepare for next development iteration\"\n\nThis reverts commit a14046a1aea5ca75b17dd5667dece70c38bb59fb.\n" }, { "commit": "a14046a1aea5ca75b17dd5667dece70c38bb59fb", "tree": "d75e0ddeac2b5da4b55b524957a4a5d14f248e73", "parents": [ "e2546cd4341ead5ee41ad8e6a3ddccac51dc77c7" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Tue Sep 22 14:14:49 2026 +0100" }, "committer": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Tue Sep 22 14:14:49 2026 +0100" }, "message": "[maven-release-plugin] prepare for next development iteration\n" }, { "commit": "e2546cd4341ead5ee41ad8e6a3ddccac51dc77c7", "tree": "2c33c03502afaf450ed3d4e82760f5e3aadaabb0", "parents": [ "fa77967c731d304a22976ba83d7cd9342427c563" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Tue Sep 22 14:14:38 2026 +0100" }, "committer": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Tue Sep 22 14:14:38 2026 +0100" }, "message": "[maven-release-plugin] prepare release wss4j-4.0.2\n" }, { "commit": "fa77967c731d304a22976ba83d7cd9342427c563", "tree": "55dabf8699af9b12bb4e994a1f2282aa09a8a78b", "parents": [ "96a9a914e32ece32e58d77fc8a98ced5a9fed605" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Tue Sep 22 14:12:11 2026 +0100" }, "committer": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Tue Sep 22 14:12:11 2026 +0100" }, "message": "Updating NOTICE year\n" }, { "commit": "96a9a914e32ece32e58d77fc8a98ced5a9fed605", "tree": "1099d17717d3d5aeca2db65a3671c52422d0dd02", "parents": [ "1e2ec393edee12d1fb18f8cc7c9b324e5575aad8" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Tue Sep 22 14:00:32 2026 +0100" }, "committer": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Tue Sep 22 14:00:32 2026 +0100" }, "message": "Using AttachmentUtil as well for attachment signature transform\n" }, { "commit": "1e2ec393edee12d1fb18f8cc7c9b324e5575aad8", "tree": "1393bf8a0f5b920727fbbe48934447470bec87e4", "parents": [ "75a28f642595b49b933c99e5cf45c5c1eeb479ce" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Tue Sep 22 13:33:55 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Sep 22 13:33:55 2026 +0100" }, "message": "WSS-727 - Minor cleanup (#730)" }, { "commit": "75a28f642595b49b933c99e5cf45c5c1eeb479ce", "tree": "335eff44a414fe6a2c507c7fddf61fea21bac32d", "parents": [ "6726da983f26550c6452e1eccab59e8b08f3ddeb" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Tue Sep 22 12:15:22 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Sep 22 12:15:22 2026 +0100" }, "message": "Fixing AKI bug (#729)" }, { "commit": "6726da983f26550c6452e1eccab59e8b08f3ddeb", "tree": "19a64997889ee74e84ae79dec45f8bb46f789443", "parents": [ "3b402c9ea2625698a53838a4274c8dd1887ab7b7" ], "author": { "name": "shunkica", "email": "shunkica.dev@gmail.com", "time": "Tue Sep 22 13:12:18 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Sep 22 12:12:18 2026 +0100" }, "message": "WSS-727 Do not cache SwA attachment References when verifying a Signature (#640)\n\n* WSS-727 Do not cache SwA attachment References when verifying a Signature\n\nSignatureProcessor sets javax.xml.crypto.dsig.cacheReference\u003dTRUE on the\nDOMValidateContext. In Santuario that single property enables two caches in\nDOMReference: the dereferenced Data, and the pre-digested input bytes. The\nsecond one makes DigesterOutputStream retain every octet fed to the digest, so\nfor a signed SwA attachment the whole attachment is held in an\nUnsyncByteArrayOutputStream that grows by doubling - roughly 2.3x the\nattachment size in heap, no matter how the attachment is backed. Signing the\nsame message is streaming. The only consumer of the cached digest input is\nReference.getDigestInputStream(), which WSS4J never calls.\n\nReplace XMLSignature.validate(context) with the equivalent explicit loop -\nSignatureValue check plus per-Reference Reference.validate() - and turn\ncacheReference off for attachment References only. buildProtectedRefs then\nrecognises attachment References by their Transform algorithm instead of by\ntheir dereferenced Data, producing the same WSDataRef as before.\nNon-attachment References keep cacheReference\u003dTRUE, so element recovery, STR\ndereferencing and the checks that depend on them are unaffected.\n\nThe debug block that logs per-Reference status after a failed verification\napplies the same rule. Reference.validate() caches its result, so References\nthe loop already validated are only re-logged, but the ones it never reached\nare validated there for the first time - and on a SignatureValue mismatch, the\nusual failure, that is all of them. Otherwise enabling debug logging to\ndiagnose a failing signature would buffer every signed attachment on the\nmessage that just failed.\n\n* WSS-727 Clarify validateSignature and attachment DataRef test Javadoc\n\nvalidateSignature is not equivalent to XMLSignature.validate(context):\nit does not validate ds:Manifest References and does not memoise the\nresult. The DataRef test derives the attachment WSDataRef from the\nTransform algorithm and therefore does not verify non-caching." }, { "commit": "3b402c9ea2625698a53838a4274c8dd1887ab7b7", "tree": "cb4dfa527ecb619b2bde7569ed1feb243c8653e6", "parents": [ "347cead366e516710281d1c2a7b58a1513c28ec5" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Tue Sep 22 11:47:18 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Sep 22 11:47:18 2026 +0100" }, "message": "Xop hardening fix (#728)" }, { "commit": "347cead366e516710281d1c2a7b58a1513c28ec5", "tree": "b3972b552cb4ab97fb5080b07353a0e2a02ca181", "parents": [ "add6d92eabf6541c6b977c988428267c732ce877" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Tue Sep 22 11:11:35 2026 +0100" }, "committer": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Tue Sep 22 11:11:35 2026 +0100" }, "message": "Backwards compatibly sig-conf fix\n" }, { "commit": "add6d92eabf6541c6b977c988428267c732ce877", "tree": "decbadf34cb83e759b9481abdc0a55c2a0a24476", "parents": [ "32887ed02b276f797ad2e5bac8c1bc287d4eec13" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Tue Sep 22 10:01:43 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Sep 22 10:01:43 2026 +0100" }, "message": "Finishing DER work (#727)" }, { "commit": "32887ed02b276f797ad2e5bac8c1bc287d4eec13", "tree": "2d9ee03f6ae7d5ce97c1023c9b0c8a8a55c76561", "parents": [ "2d4a0e7da15be3e97d83b20b739886cea724b5b4" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Tue Sep 22 09:28:40 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Sep 22 09:28:40 2026 +0100" }, "message": "Follow-on from last DER patch (#726)" }, { "commit": "2d4a0e7da15be3e97d83b20b739886cea724b5b4", "tree": "e11f9affc6c7374c3a375dd878ecae85c83e2808", "parents": [ "291c7238e062d04cc42188ca831d0f246a2f0ab1" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Mon Sep 21 15:46:41 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Sep 21 15:46:41 2026 +0100" }, "message": "Switch to use BASE-64 encoding rather than 32 bit hash values for signature confirmation (#725)" }, { "commit": "291c7238e062d04cc42188ca831d0f246a2f0ab1", "tree": "bb47a23a9e6193483e8b684414172abbe1c3d84d", "parents": [ "2816faf7b272ffbb2cc71e42072fe1b66c5f2ef4" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Mon Sep 21 15:42:33 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Sep 21 15:42:33 2026 +0100" }, "message": "StAX SAML subject confirmation skipped for an empty SOAP Body (#724)" }, { "commit": "2816faf7b272ffbb2cc71e42072fe1b66c5f2ef4", "tree": "51a7943c1db9772e85337aa3ec4a941cf91e6e7a", "parents": [ "e12589ecd3c7052b5b2d0d85066898015c73d863" ], "author": { "name": "araiprof", "email": "118666308+araiprof@users.noreply.github.com", "time": "Mon Sep 21 16:29:17 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Sep 21 15:29:17 2026 +0100" }, "message": "Remove Bouncy Castle from key identifier parsing (#647)" }, { "commit": "e12589ecd3c7052b5b2d0d85066898015c73d863", "tree": "d5dd18d778f8d3a420943c19437a0c5ed3c4620b", "parents": [ "48ca3636d04906f970beaaef0ba97f1a9092d54f" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Mon Sep 21 14:05:51 2026 +0100" }, "committer": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Mon Sep 21 14:05:51 2026 +0100" }, "message": "Check CertificateStore for validity\n" }, { "commit": "48ca3636d04906f970beaaef0ba97f1a9092d54f", "tree": "aaab9c7fdf08bcc6a50aae738f0c1d0ba55df11b", "parents": [ "9629b626a7349c5c8b332b80a11e0d45b12d9efc" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Sep 21 13:58:31 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Sep 21 13:58:31 2026 +0100" }, "message": "Bump bcprov.version from 1.84 to 1.86 (#694)\n\nBumps `bcprov.version` from 1.84 to 1.86.\n\nUpdates `org.bouncycastle:bcprov-jdk18on` from 1.84 to 1.86\n- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.md)\n- [Commits](https://github.com/bcgit/bc-java/commits)\n\nUpdates `org.bouncycastle:bcpkix-jdk18on` from 1.84 to 1.86\n- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.md)\n- [Commits](https://github.com/bcgit/bc-java/commits)\n\n---\nupdated-dependencies:\n- dependency-name: org.bouncycastle:bcpkix-jdk18on\n dependency-version: \u00271.86\u0027\n dependency-type: direct:development\n update-type: version-update:semver-minor\n- dependency-name: org.bouncycastle:bcprov-jdk18on\n dependency-version: \u00271.86\u0027\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "9629b626a7349c5c8b332b80a11e0d45b12d9efc", "tree": "68e4aa21956955e9fe8db750fe8dbc9b8e03e07b", "parents": [ "11bd6938c437a4ab8db37e698cb0a59ca0eda586" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Mon Sep 21 13:04:39 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Sep 21 13:04:39 2026 +0100" }, "message": "Update certs that are failing with the Bouncycastle update (#723)" }, { "commit": "11bd6938c437a4ab8db37e698cb0a59ca0eda586", "tree": "75e9a573bd63e6479ec204c18baf57c6bdebece1", "parents": [ "c7284e74ead7560b30f4369a5751d7272aa28ca6" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Mon Sep 21 12:52:49 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Sep 21 12:52:49 2026 +0100" }, "message": "Fix timestamp parsing (#722)" }, { "commit": "c7284e74ead7560b30f4369a5751d7272aa28ca6", "tree": "d91c879ff409f7553858a43ed5efe02a6ea87c79", "parents": [ "d84b48267aea8ad099d7dd57d749ebf52652b7ae" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Sep 21 12:52:14 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Sep 21 12:52:14 2026 +0100" }, "message": "Bump org.apache.felix:maven-bundle-plugin from 6.1.2 to 6.2.0 (#716)\n\nBumps org.apache.felix:maven-bundle-plugin from 6.1.2 to 6.2.0.\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.felix:maven-bundle-plugin\n dependency-version: 6.2.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "d84b48267aea8ad099d7dd57d749ebf52652b7ae", "tree": "446d5e5c07937d885b007441345789c8d90b20e1", "parents": [ "6de1f273ae7134950f2d98526cb4bae81b731b42" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Mon Sep 21 12:16:34 2026 +0100" }, "committer": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Mon Sep 21 12:16:34 2026 +0100" }, "message": "Revert \"Align StaX sender vouches with DOM layer (#720)\"\n\nThis reverts commit 20441869868e54a38bb68a5534085aa74ba747ce.\n" }, { "commit": "6de1f273ae7134950f2d98526cb4bae81b731b42", "tree": "cd89d43816b7bc0f64b915bfe18b8191a7e6b1ab", "parents": [ "6b4ebdf34f779b48cd09fcbcfda705a31535b2cd" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Mon Sep 21 12:16:11 2026 +0100" }, "committer": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Mon Sep 21 12:16:11 2026 +0100" }, "message": "Revert \"Fix SenderVouches EncryptedKey case (#718)\"\n\nThis reverts commit 4050df2a0798b7871b0f4b1932f2b7f27006d689.\n" }, { "commit": "6b4ebdf34f779b48cd09fcbcfda705a31535b2cd", "tree": "60964cace5f732aa2fc4aed0e26df3f2f37a3a94", "parents": [ "d656ae46353b1e389b13b3c023d9d7dc3d6fa671" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Mon Sep 21 11:46:08 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Sep 21 11:46:08 2026 +0100" }, "message": "Fix SAML Conditions parsing (#721)" }, { "commit": "d656ae46353b1e389b13b3c023d9d7dc3d6fa671", "tree": "65fe151e0dfd83402b151fa0b5765aaa3d895fa8", "parents": [ "20441869868e54a38bb68a5534085aa74ba747ce" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Mon Sep 21 11:16:52 2026 +0100" }, "committer": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Mon Sep 21 11:16:52 2026 +0100" }, "message": "Docs update for SAML audience\n" }, { "commit": "20441869868e54a38bb68a5534085aa74ba747ce", "tree": "56442cfaf1bba61093dc8a0cebb8d28715c2d9f4", "parents": [ "79cc522f0dd23e720b0b85d2396245c3ba908ddd" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Mon Sep 21 11:07:53 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Sep 21 11:07:53 2026 +0100" }, "message": "Align StaX sender vouches with DOM layer (#720)" }, { "commit": "79cc522f0dd23e720b0b85d2396245c3ba908ddd", "tree": "1e0b188b35a8800c7a9da318009a0b1caed89349", "parents": [ "4fc06f524047b800a910e7361fb7fc0f610521bc" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Mon Sep 21 10:42:31 2026 +0100" }, "committer": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Mon Sep 21 10:42:31 2026 +0100" }, "message": "More docs updates\n" }, { "commit": "4fc06f524047b800a910e7361fb7fc0f610521bc", "tree": "69a356c59c0f80bf6e220c55c6da4324def43109", "parents": [ "4050df2a0798b7871b0f4b1932f2b7f27006d689" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Mon Sep 21 10:11:46 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Sep 21 10:11:46 2026 +0100" }, "message": "Extend the EncryptedKey random-key fallback beyond decryptDataRef (#719)" }, { "commit": "4050df2a0798b7871b0f4b1932f2b7f27006d689", "tree": "60e987a5b72f52adf68f4ed943d26297d3cd0bce", "parents": [ "240c68a6c374126245707785a7bbbb1fc7372fa2" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Mon Sep 21 09:57:32 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Sep 21 09:57:32 2026 +0100" }, "message": "Fix SenderVouches EncryptedKey case (#718)" }, { "commit": "240c68a6c374126245707785a7bbbb1fc7372fa2", "tree": "12b93e71d70150b7ab43a1c321fe46a7f0010c45", "parents": [ "2a67fc398cbe7cb4b9315773bf73b008ed6d9e95" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Mon Sep 21 09:35:19 2026 +0100" }, "committer": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Mon Sep 21 09:35:19 2026 +0100" }, "message": "Improving kerberos docs\n" }, { "commit": "2a67fc398cbe7cb4b9315773bf73b008ed6d9e95", "tree": "22083f8b05d8b6737c7a57e1510ebaf066e40e97", "parents": [ "a8fb5fe7a830c9606cabc04b1f1e743dc73f53cc" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Mon Sep 21 09:29:11 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Sep 21 09:29:11 2026 +0100" }, "message": "Properly wire UsernameToken + RSA15 flags for the streaming layer (#717)" }, { "commit": "a8fb5fe7a830c9606cabc04b1f1e743dc73f53cc", "tree": "53222005339496afdd8731fc7f3309d5df78ffae", "parents": [ "623bfb8887088c2f99894202e2025b2d6364674d" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Mon Sep 21 09:10:57 2026 +0100" }, "committer": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Mon Sep 21 09:10:57 2026 +0100" }, "message": "Better document REQUIRE_SIGNED_ENCRYPTED_DATA_ELEMENTS\n" }, { "commit": "623bfb8887088c2f99894202e2025b2d6364674d", "tree": "17227d9cf5e33cc5c102daea96fd9d7ed2e5de5c", "parents": [ "d2a7450e83bd61cd2ac9cb5550df9caa31aa4c46" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Mon Sep 21 08:02:31 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Sep 21 08:02:31 2026 +0100" }, "message": "Stricter policy enforcement (#715)" }, { "commit": "d2a7450e83bd61cd2ac9cb5550df9caa31aa4c46", "tree": "6c6d1e2659dbdfa7ead19ef14959c7fb26da37ec", "parents": [ "c9cdddaceeef9a4f8eb3ba9651823170baf4ac66" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Mon Sep 21 07:33:40 2026 +0100" }, "committer": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Mon Sep 21 07:33:40 2026 +0100" }, "message": "Updating threat model with bounds\n" }, { "commit": "c9cdddaceeef9a4f8eb3ba9651823170baf4ac66", "tree": "1b689446e9bfe7a81be1314d008a7185233c0721", "parents": [ "efbcbfc37f6aeba2aba95c81bafda9e06ab85bf8" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Mon Sep 21 07:33:11 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Sep 21 07:33:11 2026 +0100" }, "message": "Document streaming policy enforcement (#714)" }, { "commit": "efbcbfc37f6aeba2aba95c81bafda9e06ab85bf8", "tree": "b7648424ad73e1cc45d15dba4f7304e830f5ec04", "parents": [ "77d665e53e4779d8ba44b6d5414009c21a716626" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Mon Sep 21 07:29:30 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Sep 21 07:29:30 2026 +0100" }, "message": "Bound the encrypted data nesting depth (#713)" }, { "commit": "77d665e53e4779d8ba44b6d5414009c21a716626", "tree": "8886eb7cf4163d8847a043ac07463a705bf9c470", "parents": [ "d7d6fb0e2557786454fcf8835704fd7bed144b9f" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Fri Sep 18 17:41:56 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Sep 18 17:41:56 2026 +0100" }, "message": "Redact passwords from UsernameToken toString (#711)" }, { "commit": "d7d6fb0e2557786454fcf8835704fd7bed144b9f", "tree": "8eabdfded46b54c55fb5e975560d77ce66504239", "parents": [ "277e5548183f3a2e9df56f5ef9c8463ea4f03ac5" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Fri Sep 18 17:17:14 2026 +0100" }, "committer": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Fri Sep 18 17:17:14 2026 +0100" }, "message": "Javadoc updates\n" }, { "commit": "277e5548183f3a2e9df56f5ef9c8463ea4f03ac5", "tree": "ca6e733bf5e993fddfc11ddcd66640baf2516191", "parents": [ "720a401c28e144a1064359e7918f6d65f71352f2" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Fri Sep 18 16:14:16 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Sep 18 16:14:16 2026 +0100" }, "message": "Updating Neethi to 3.2.4 (#710)" }, { "commit": "720a401c28e144a1064359e7918f6d65f71352f2", "tree": "1319487b9c6ea1827be062b02ab8344a1ad50ee8", "parents": [ "3ae19b522de40c6ee053173df0cebc40ca47a46e" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Fri Sep 18 15:27:26 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Sep 18 15:27:26 2026 +0100" }, "message": "Additional Bleichenbacher fix (#709)" }, { "commit": "3ae19b522de40c6ee053173df0cebc40ca47a46e", "tree": "d21df52a565fa4b79527d2668f5e07139b137e89", "parents": [ "d6323f3e82738d91a687d8abc47e79c946a6d682" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Fri Sep 18 14:47:22 2026 +0100" }, "committer": { "name": "Colm O hEigeartaigh", "email": "coheigea@apache.org", "time": "Fri Sep 18 14:47:22 2026 +0100" }, "message": "Adding some derived key tests\n" }, { "commit": "d6323f3e82738d91a687d8abc47e79c946a6d682", "tree": "08e05c13fba5548601b28c4f406d9f71b76e6cd0", "parents": [ "a52aaee7c7368e0489656176c2e03e9aa7387d70" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Fri Sep 18 12:10:29 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Sep 18 12:10:29 2026 +0100" }, "message": "Set trust when there is no KeyInfo and the certificate comes from a local keystore (#708)" }, { "commit": "a52aaee7c7368e0489656176c2e03e9aa7387d70", "tree": "69b81efe9d389f6e9f089d586a0a3a0a8a6b1acf", "parents": [ "d2939c88ed22436f2e11d82a89e4b696a173fc4e" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Fri Sep 18 11:38:13 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Sep 18 11:38:13 2026 +0100" }, "message": "Putting max on UsernameToken stax iterations (#707)" }, { "commit": "d2939c88ed22436f2e11d82a89e4b696a173fc4e", "tree": "919eed4b851b51c47a31b4292fe9c19800c5cb5b", "parents": [ "aa028e6afee96c50d38ad047d3e4bca3d8c20c25" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Fri Sep 18 10:52:59 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Sep 18 10:52:59 2026 +0100" }, "message": "Adding docs about trust credentials for BST (#706)" }, { "commit": "aa028e6afee96c50d38ad047d3e4bca3d8c20c25", "tree": "1527c132a3ca7a60024f5712b18cf427ff6a77f1", "parents": [ "e2fdad67ffaf43fe3bab6689f28722173fe88cb4" ], "author": { "name": "Colm O hEigeartaigh", "email": "coheigea@users.noreply.github.com", "time": "Fri Sep 18 09:53:42 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Fri Sep 18 09:53:42 2026 +0100" }, "message": "Only set trust validation for Signature when we have a trusted source (#705)" }, { "commit": "e2fdad67ffaf43fe3bab6689f28722173fe88cb4", "tree": "303539f1e7455745a1a9cd7df5949a35aa24fea6", "parents": [ "b838b11e99ec8fddbc8dfecba0e6631d1c9ed71e" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Thu Sep 17 13:56:07 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Sep 17 13:56:07 2026 +0100" }, "message": "Bump org.cyclonedx:cyclonedx-maven-plugin from 2.9.2 to 2.9.3 (#700)\n\nBumps [org.cyclonedx:cyclonedx-maven-plugin](https://github.com/CycloneDX/cyclonedx-maven-plugin) from 2.9.2 to 2.9.3.\n- [Release notes](https://github.com/CycloneDX/cyclonedx-maven-plugin/releases)\n- [Commits](https://github.com/CycloneDX/cyclonedx-maven-plugin/compare/cyclonedx-maven-plugin-2.9.2...cyclonedx-maven-plugin-2.9.3)\n\n---\nupdated-dependencies:\n- dependency-name: org.cyclonedx:cyclonedx-maven-plugin\n dependency-version: 2.9.3\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" } ], "next": "b838b11e99ec8fddbc8dfecba0e6631d1c9ed71e" }