1. e06f8de Bump the codeql-action group with 2 updates (#192) by dependabot[bot] · 3 days ago master
  2. 94e6492 Bump actions/setup-java from 6.0.1 to 6.1.0 (#191) by dependabot[bot] · 4 days ago
  3. 56dfd7a Bump com.google.guava:guava-testlib from 33.7.1-jre to 33.7.2-jre (#189) by dependabot[bot] · 10 days ago
  4. a7f13fd Bump the codeql-action group with 2 updates (#190) by dependabot[bot] · 10 days ago
  5. 3154d0d Bump the codeql-action group with 2 updates (#188) by dependabot[bot] · 3 weeks ago
  6. f9fb9e3 Updating website for 2.3.3 release by Colm O hEigeartaigh · 3 weeks ago
  7. e7737e8 Bump slf4j.version from 2.0.19 to 2.0.20 (#187) by dependabot[bot] · 4 weeks ago
  8. 592fff4 [maven-release-plugin] prepare for next development iteration by Colm O hEigeartaigh · 4 weeks ago
  9. abc808e [maven-release-plugin] prepare release xmlschema-2.3.3 by Colm O hEigeartaigh · 4 weeks ago xmlschema-2.3.3
  10. d91d470 Fix test on JDK8 (#186) by Colm O hEigeartaigh · 4 weeks ago
  11. 76a61a9 Close the connection when a remote fetch is refused before its body (#185) by Colm O hEigeartaigh · 4 weeks ago
  12. 0b8d274 Check a file: location relative to the working directory as a regular file (#184) by Colm O hEigeartaigh · 4 weeks ago
  13. 882a59a Limit entity expansion (#183) by Colm O hEigeartaigh · 4 weeks ago
  14. b63715c Fix walker NPEs by Colm O hEigeartaigh · 4 weeks ago
  15. 5870e7f The walker changes the schema model (#182) by Colm O hEigeartaigh · 4 weeks ago
  16. 1e5ae6c Refuse an element declaration with no name and no ref in the walker (#181) by Colm O hEigeartaigh · 4 weeks ago
  17. dd06ffb Fixup DefaultURIResolver wording by Colm O hEigeartaigh · 4 weeks ago
  18. 681897c Misc fixes (#180) by Colm O hEigeartaigh · 4 weeks ago
  19. 74e892b Bound the element depth of the schema parse (#179) by Colm O hEigeartaigh · 4 weeks ago
  20. b04d9ba Count a cached base type's whole derivation chain against the walk depth (#178) by Colm O hEigeartaigh · 4 weeks ago
  21. c36f124 Do not build a wire name for an element or attribute with no name (#177) by Colm O hEigeartaigh · 4 weeks ago
  22. 9b504c3 Adding missing test by Colm O hEigeartaigh · 4 weeks ago
  23. c5d996e Read "1" and surrounding whitespace as true for xs:boolean attributes (#176) by Colm O hEigeartaigh · 4 weeks ago
  24. b4f79d3 Updating Security document with latest DefaultURIResolver changes by Colm O hEigeartaigh · 4 weeks ago
  25. 68a4708 Check the file the parser opens for a relative schema location (#175) by Colm O hEigeartaigh · 4 weeks ago
  26. 69446f0 Keep complexType block, union members and keyref refer through read and write (#174) by Colm O hEigeartaigh · 4 weeks ago
  27. e01e393 Do not declare an empty prefix for an unhandled attribute value (#173) by Colm O hEigeartaigh · 4 weeks ago
  28. df755e5 Fix the path finder refusing or failing on common valid documents (#172) by Colm O hEigeartaigh · 4 weeks ago
  29. 3634e4f Allow an xs:all alongside an empty particle in a complex content extension (#171) by Colm O hEigeartaigh · 4 weeks ago
  30. a9aa9d8 Misc fixes (#170) by Colm O hEigeartaigh · 4 weeks ago
  31. c3c458f Collect ancestor prefix declarations without recursion (#169) by Colm O hEigeartaigh · 4 weeks ago
  32. 647f77b Check that a relative schema location is a regular file (#168) by Colm O hEigeartaigh · 4 weeks ago
  33. e623a26 Bound the nesting depth of annotation markup (#167) by Colm O hEigeartaigh · 4 weeks ago
  34. 7d42a2d Make sure file references are to actual files (#166) by Colm O hEigeartaigh · 4 weeks ago
  35. 84bcdb1 Adding new org.apache.ws.commons.schema.remote.checkAddresses property (#165) by Colm O hEigeartaigh · 4 weeks ago
  36. e13dd50 Add a bound on the number of redirects the DefaultURIResolver can do (#164) by Colm O hEigeartaigh · 4 weeks ago
  37. 53219e5 Walker: bound the depth of an acyclic schema walk (#163) by Colm O hEigeartaigh · 4 weeks ago
  38. 13d201b inherit the substitution group head's type for untyped elements (#162) by Colm O hEigeartaigh · 4 weeks ago
  39. 925af76 Bump org.apache:apache from 39 to 40 (#160) by dependabot[bot] · 4 weeks ago
  40. f895096 Bump the codeql-action group with 2 updates (#161) by dependabot[bot] · 4 weeks ago
  41. 34ec6d9 Add a new property to disable reading local files (#159) by Colm O hEigeartaigh · 5 weeks ago
  42. 4da2458 Add a switch to allow network resolution to be turned off (#158) by Colm O hEigeartaigh · 5 weeks ago
  43. 7c41ddd Allow redirects again for the DefaultURIResolver by Colm O hEigeartaigh · 5 weeks ago
  44. 01f25f0 Stop capturing foreign children of the document element (#157) by Colm O hEigeartaigh · 5 weeks ago
  45. 0ca48b6 Serialize notation as well and fix some NPEs (#156) by Colm O hEigeartaigh · 5 weeks ago
  46. c5d8f56 Documenting threat-safety concerns by Colm O hEigeartaigh · 5 weeks ago
  47. b72abb9 Report unresolvable and complex-where-simple type references as XmlSchemaException (#155) by Colm O hEigeartaigh · 5 weeks ago
  48. 6a1b2ca Keep document-walk failures distinguishable (#154) by Colm O hEigeartaigh · 5 weeks ago
  49. fa78335 Fix scchema resolution budget bug (#153) by Colm O hEigeartaigh · 5 weeks ago
  50. af61c6f Place default limits on read timeouts + size on remote schemas (#152) by Colm O hEigeartaigh · 5 weeks ago
  51. dff5741 Fix some potential NPEs (#151) by Colm O hEigeartaigh · 5 weeks ago
  52. 5c9ad53 More DefaultURIResolver hardening by Colm O hEigeartaigh · 5 weeks ago
  53. 9a0cbdb Fixing one more DefaultURIResolver case by Colm O hEigeartaigh · 5 weeks ago
  54. 0c8f883 Exclude a few other things by default in DefaultURIResolver (#150) by Colm O hEigeartaigh · 5 weeks ago
  55. 40da15a Updating docs for remote URI dereferencing (#149) by Colm O hEigeartaigh · 5 weeks ago
  56. 12ca3b7 Restrict default protocols allowed by the DefaultURIResolver (#148) by Colm O hEigeartaigh · 5 weeks ago
  57. b74922a Fix up DTD handling (#147) by Colm O hEigeartaigh · 5 weeks ago
  58. f596b37 Bump the codeql-action group with 2 updates (#145) by dependabot[bot] · 6 weeks ago
  59. 0100eb4 Bump actions/setup-java from 6.0.0 to 6.0.1 (#146) by dependabot[bot] · 6 weeks ago
  60. 97180ce Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.6 to 3.6.0 (#143) by dependabot[bot] · 6 weeks ago
  61. ef94d59 Bump slf4j.version from 2.0.18 to 2.0.19 (#144) by dependabot[bot] · 6 weeks ago
  62. 45d215f Group codeql updates (#142) by Colm O hEigeartaigh · 8 weeks ago
  63. 5edee09 Bump github/codeql-action/init from 4.37.8 to 4.37.9 (#141) by dependabot[bot] · 8 weeks ago
  64. 0799aac Bump github/codeql-action/analyze from 4.37.8 to 4.37.9 (#140) by dependabot[bot] · 8 weeks ago
  65. cc33df7 Bump actions/setup-java from 5.7.0 to 6.0.0 (#139) by dependabot[bot] · 8 weeks ago
  66. 6255190 Fix DOMSource correctness bug (#138) by Colm O hEigeartaigh · 8 weeks ago
  67. 289a959 Harden internal parser against DTDs (#137) by Colm O hEigeartaigh · 8 weeks ago
  68. 490bb69 Tighten Max/Min Occurs parsing (#136) by Colm O hEigeartaigh · 8 weeks ago
  69. 4423f79 Harden default resolver (#135) by Colm O hEigeartaigh · 8 weeks ago
  70. 744ed2e Bump github/codeql-action/init from 4.37.7 to 4.37.8 (#133) by dependabot[bot] · 8 weeks ago
  71. 913653b Bump github/codeql-action/analyze from 4.37.7 to 4.37.8 (#134) by dependabot[bot] · 8 weeks ago
  72. cefaabb Properly throw XMLSchemaException in some places (#132) by Colm O hEigeartaigh · 8 weeks ago
  73. a80a109 Add max nesting depth (#131) by Colm O hEigeartaigh · 8 weeks ago
  74. 260848b Bump github/codeql-action/analyze from 4.37.6 to 4.37.7 (#121) by dependabot[bot] · 8 weeks ago
  75. ec0e516 Bump github/codeql-action/init from 4.37.6 to 4.37.7 (#122) by dependabot[bot] · 8 weeks ago
  76. 28d8517 Bump com.google.guava:guava-testlib from 33.6.0-jre to 33.7.1-jre (#128) by dependabot[bot] · 8 weeks ago
  77. bd75027 Impose an import depth limit (#130) by Colm O hEigeartaigh · 8 weeks ago
  78. 6cc9c10 Fix resolved schema cache key collisions and validate cache hits (#129) by Colm O hEigeartaigh · 8 weeks ago
  79. be55147 Improve cycle detection in the schema walker (#127) by Colm O hEigeartaigh · 9 weeks ago
  80. 4d5e204 Fix state machine generation for shared schema types (#126) by Colm O hEigeartaigh · 9 weeks ago
  81. 95e3f64 Add maxDecisionPoints and maxReplayedEvents to the path walker (#125) by Colm O hEigeartaigh · 9 weeks ago
  82. 7a3e24d Use an explicit heap stack in SaxWalkerOverDom (#124) by Colm O hEigeartaigh · 9 weeks ago
  83. 711a776 Explicitly catch NumberFormatException in XmlSchemaElementValidator (#123) by Colm O hEigeartaigh · 9 weeks ago
  84. be746c4 Bump github/codeql-action/analyze from 4.37.4 to 4.37.6 (#120) by dependabot[bot] · 2 months ago
  85. 24d7e9f Bump github/codeql-action/init from 4.37.4 to 4.37.6 (#119) by dependabot[bot] · 2 months ago
  86. fcccafd Switch to pin github actions by Colm O hEigeartaigh · 2 months ago
  87. f2d27a4 Bump github/codeql-action from 4.37.3 to 4.37.4 (#117) by dependabot[bot] · 3 months ago
  88. a1dceb6 Bump actions/setup-java from 5.6.0 to 5.7.0 (#118) by dependabot[bot] · 3 months ago
  89. 6b9b5a6 Bump github/codeql-action from 4.37.1 to 4.37.3 (#116) by dependabot[bot] · 3 months ago
  90. c073324 Bump github/codeql-action from 4.37.0 to 4.37.1 (#115) by dependabot[bot] · 3 months ago
  91. 94ac844 Bump github/codeql-action from 4.36.3 to 4.37.0 (#111) by dependabot[bot] · 3 months ago
  92. 7a872c9 Bump actions/setup-java from 5.4.0 to 5.6.0 (#114) by dependabot[bot] · 3 months ago
  93. e4fcca8 Wire the security threat model for agent discoverability (AGENTS.md + SECURITY.md) (#113) by Jarek Potiuk · 3 months ago
  94. 62236c5 Reviewed threat model, removed draft (#110) by Colm O hEigeartaigh · 4 months ago
  95. 5c95e51 Add draft project security threat-model document (#95) by Jarek Potiuk · 4 months ago
  96. 2321c21 Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.5 to 3.5.6 (#96) by dependabot[bot] · 4 months ago
  97. 37cba78 Bump github/codeql-action from 4.35.5 to 4.36.3 (#108) by dependabot[bot] · 4 months ago
  98. d817dbb Bump actions/setup-java from 5 to 5.4.0 (#109) by dependabot[bot] · 4 months ago
  99. e25412f Bump actions/checkout from 6 to 7 by dependabot[bot] · 4 months ago
  100. b5b30cf Bump org.apache:apache from 38 to 39 by dependabot[bot] · 4 months ago