Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package apache-commons-configuration2 for openSUSE:Factory checked in at 2024-03-25 21:07:22 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/apache-commons-configuration2 (Old) and /work/SRC/openSUSE:Factory/.apache-commons-configuration2.new.1905 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "apache-commons-configuration2" Mon Mar 25 21:07:22 2024 rev:2 rq:1160677 version:2.10.1 Changes: -------- --- /work/SRC/openSUSE:Factory/apache-commons-configuration2/apache-commons-configuration2.changes 2023-09-25 20:43:46.614097532 +0200 +++ /work/SRC/openSUSE:Factory/.apache-commons-configuration2.new.1905/apache-commons-configuration2.changes 2024-03-25 21:08:59.982948769 +0100 @@ -1,0 +2,38 @@ +Fri Mar 22 11:28:25 UTC 2024 - Gus Kenion <gus.ken...@suse.com> + +- Upgrade to version 2.10.1 + * Fixed Bugs: + + java.lang.module.FindException: Module servlet.api not found. + Fixes CONFIGURATION-839. + + StackOverflowError adding property in + AbstractListDelimiterHandler.flattenIterator(). Fixes + CONFIGURATION-840. (bsc#1221797, CVE-2024-29131) + + StackOverflowError calling + ListDelimiterHandler.flatten(Object, int) with a cyclical + object tree. Fixes CONFIGURATION-841. (bsc#1221793, + CVE-2024-29133) +- Incldes changes from version 2.10.0 + * New features: + + [StepSecurity] ci: Harden GitHub Actions #307. + + ConfirgurationPropertySource doesn't supply resolved values + #309. Fixes CONFIGURATION-834. + + Take prefix delimiter into account when + SubsetConfiguration.getKeysInternal() is called #300. + + Guard ConfigurationMap against null configuration #355. + + Properties parser stack overflows on large single-key inputs + #369. Fixes CONFIGURATION-838. + + DatabaseConfiguration.AbstractJdbcOperation.execute() throws + NullPointerException when no data source is set #368. + * Fixed Bugs: + + Add AbstractConfiguration.getKeysInternal(String, String) + #300. + + Add ImmutableConfiguration.getKeys(String, String) #300. + + Add + PrefixedKeysIterator.PrefixedKeysIterator(Iterator<String%gt;, + String, String) #300. + + Add Maven property project.build.outputTimestamp for build + reproducibility. + + Guard PatternSubtreeConfigurationWrapper constructor against + null #365. + +------------------------------------------------------------------- Old: ---- commons-configuration2-2.9.0-src.tar.gz New: ---- commons-configuration2-2.10.1-src.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ apache-commons-configuration2.spec ++++++ --- /var/tmp/diff_new_pack.rdvwk2/_old 2024-03-25 21:09:02.043024408 +0100 +++ /var/tmp/diff_new_pack.rdvwk2/_new 2024-03-25 21:09:02.059024995 +0100 @@ -1,7 +1,7 @@ # # spec file for package apache-commons-configuration2 # -# Copyright (c) 2023 SUSE LLC +# Copyright (c) 2024 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -19,7 +19,7 @@ %global base_name configuration2 %global short_name commons-%{base_name} Name: apache-commons-configuration2 -Version: 2.9.0 +Version: 2.10.1 Release: 0 Summary: Java library providing a generic Configuration interface License: Apache-2.0 ++++++ apache-commons-configuration2-build.xml ++++++ --- /var/tmp/diff_new_pack.rdvwk2/_old 2024-03-25 21:09:02.367036304 +0100 +++ /var/tmp/diff_new_pack.rdvwk2/_new 2024-03-25 21:09:02.415038067 +0100 @@ -17,8 +17,8 @@ <property name="project.groupId" value="org.apache.commons"/> <property name="project.artifactId" value="commons-configuration2"/> - <property name="spec.version" value="2.9"/> - <property name="project.version" value="${spec.version}.0"/> + <property name="spec.version" value="2.10"/> + <property name="project.version" value="${spec.version}.1"/> <property name="bundle.version" value="${project.version}"/> <property name="project.name" value="Apache Commons Configuration"/> ++++++ commons-configuration2-2.9.0-src.tar.gz -> commons-configuration2-2.10.1-src.tar.gz ++++++ ++++ 11511 lines of diff (skipped)