commits  

Messages by Date

• 2026/07/05 (commons-net) branch master updated: Flip test ggregory
• 2026/07/05 (commons-xml) branch main updated (d2c64e7 -> ad5d6d0) ggregory
• 2026/07/05 (commons-xml) 01/01: Merge pull request #16 from potiuk/asf-security/agents-md-security-link-2026-07-05 ggregory
• 2026/07/05 (commons-xml) branch main updated: Better text ggregory
• 2026/07/05 (commons-text) branch master updated: Revert, wrong component ggregory
• 2026/07/05 (commons-text) branch master updated: Add threat model place holder. ggregory
• 2026/07/05 (commons-text) branch master updated: Add threat model place holder. ggregory
• 2026/07/05 (commons-xml) branch main updated: Don't use a link for root security item. ggregory
• 2026/07/05 (commons-xml) branch main updated: Update title to include "Threat Model" ggregory
• 2026/07/05 (commons-xml) branch main updated (8842381 -> fa3002c) ggregory
• 2026/07/05 (commons-xml) 01/01: Merge pull request #11 from ppkarwasz/feature/sax-feature-based-hardening ggregory
• 2026/07/05 (commons-xml) branch main updated: Remove vertical whitespace ggregory
• 2026/07/05 (commons-xml) branch main updated: Move developer section to the bottom of the file ggregory
• 2026/07/05 (commons-xml) branch main updated: Generate an HTML page for the threat model ggregory
• 2026/07/05 (commons-xml) branch main updated: Fix XML indentation ggregory
• 2026/07/05 (commons-text) branch master updated: Fix download link ggregory
• 2026/07/05 (commons-csv) branch master updated: Quote value ending with multi-character delimiter prefix (#620). ggregory
• 2026/07/05 (commons-csv) branch master updated: Quote value ending with multi-character delimiter prefix (#620). ggregory
• 2026/07/05 (commons-csv) branch master updated (4434d93b -> 47fec342) ggregory
• 2026/07/05 (commons-csv) 01/01: Merge pull request #620 from rootvector2/quote-multichar-delimiter-prefix ggregory
• 2026/07/04 (commons-xml) branch main updated: Fill in security document ggregory
• 2026/07/04 (commons-compress) branch master updated: Normalize spelling ggregory
• 2026/07/04 (commons-compress) branch master updated: Normalize spelling ggregory
• 2026/07/04 (commons-build-plugin) branch master updated: Normalize spelling ggregory
• 2026/07/04 (commons-xml) branch main updated: Normalize spelling ggregory
• 2026/07/04 (commons-vfs) branch master updated: Normalize spelling ggregory
• 2026/07/04 (commons-validator) branch master updated: Normalize spelling ggregory
• 2026/07/04 (commons-validator) branch master updated: Normalize spelling ggregory
• 2026/07/04 (commons-ognl) branch master updated: Normalize spelling ggregory
• 2026/07/04 (commons-logging) branch master updated: Normalize spelling ggregory
• 2026/07/04 (commons-jxpath) branch master updated: Normalize spelling ggregory
• 2026/07/04 (commons-jexl) branch master updated: Normalize spelling ggregory
• 2026/07/04 (commons-jelly) branch master updated: Normalize spelling ggregory
• 2026/07/04 (commons-fileupload) branch 1.x updated: Normalize spelling ggregory
• 2026/07/04 (commons-beanutils) branch 1.X updated: Normalize spelling ggregory
• 2026/07/04 (commons-beanutils) branch master updated: Normalize spelling ggregory
• 2026/07/04 (commons-dbcp) branch master updated: Normalize spelling ggregory
• 2026/07/04 (commons-digester) branch master updated: Normalize spelling ggregory
• 2026/07/04 (commons-bcel) branch master updated: Normalize spelling ggregory
• 2026/07/04 (commons-xml) branch main updated: Normalize spelling ggregory
• 2026/07/04 (commons-fileupload) branch 1.x updated: Normalize spelling ggregory
• 2026/07/04 (commons-fileupload) branch master updated: Normalize spelling ggregory
• 2026/07/04 (commons-daemon) branch master updated: Normalize spelling ggregory
• 2026/07/04 (commons-compress) branch master updated: Normalize spelling ggregory
• 2026/07/04 (commons-collections) branch master updated: Normalize spelling ggregory
• 2026/07/04 (commons-compress) branch master updated: Fix acronym case ggregory
• 2026/07/04 (commons-compress) branch master updated: Fix acronym case, grammar. ggregory
• 2026/07/04 (commons-compress) branch master updated: Fix acronym case ggregory
• 2026/07/04 (commons-compress) branch master updated: Fix Javadoc warning. ggregory
• 2026/07/04 (commons-validator) 02/02: Compare exact bound in AbstractNumberValidator range checks (#416). ggregory
• 2026/07/04 (commons-validator) branch master updated (339b5250 -> e095d696) ggregory
• 2026/07/04 (commons-validator) 01/02: Sort members ggregory
• 2026/07/04 (commons-validator) 01/01: Merge pull request #416 from sahvx655-wq/integer-range-exact-bound ggregory
• 2026/07/04 (commons-validator) branch master updated (dff72662 -> 339b5250) ggregory
• 2026/07/04 (commons-bcel) branch master updated: Deep-copy bootstrap arguments array in BootstrapMethod.copy() (#516). ggregory
• 2026/07/04 (commons-bcel) branch master updated: Deep-copy bootstrap arguments array in BootstrapMethod.copy (#516) ggregory
• 2026/07/04 (commons-collections) 02/02: Add tests as in PR #702. ggregory
• 2026/07/04 (commons-collections) 01/02: Remove stale keys in OrderedProperties compute and merge (#702). ggregory
• 2026/07/04 (commons-collections) branch master updated (751a9868c -> 3c402b4b3) ggregory
• 2026/07/04 (commons-collections) branch master updated: remove stale key from OrderedProperties on compute/merge to null (#702) ggregory
• 2026/07/04 (commons-lang) branch master updated: Keep FastDateParser numeric parse from throwing on int overflow (#1741). ggregory
• 2026/07/04 (commons-lang) branch master updated: Keep FastDateParser numeric parse from throwing on int overflow (#1741) ggregory
• 2026/07/04 (commons-xml) branch dependabot/github_actions/actions/cache/restore-6.1.0 deleted (was bd1b00b) github-bot
• 2026/07/04 (commons-xml) branch main updated (b58e8f0 -> 241b28e) ggregory
• 2026/07/04 (commons-xml) 01/01: Merge pull request #15 from apache/dependabot/github_actions/actions/cache/restore-6.1.0 ggregory
• 2026/07/04 (commons-xml) branch dependabot/github_actions/actions/cache-6.1.0 deleted (was b1caca8) github-bot
• 2026/07/04 (commons-xml) 01/01: Merge pull request #14 from apache/dependabot/github_actions/actions/cache-6.1.0 ggregory
• 2026/07/04 (commons-xml) branch main updated (253c3a2 -> b58e8f0) ggregory
• 2026/07/04 (commons-xml) branch dependabot/github_actions/actions/cache/restore-6.1.0 created (now bd1b00b) github-bot
• 2026/07/04 (commons-xml) branch dependabot/github_actions/actions/cache-6.1.0 created (now b1caca8) github-bot
• 2026/07/04 (commons-xml) branch main updated: Add placeholder for the Apache Commons XML Security model amendment. ggregory
• 2026/07/04 (commons-configuration) branch master updated: Better docs ggregory
• 2026/07/04 (commons-compress) branch master updated: DumpArchiveEntry rejects out-of-range directory header count (#781). ggregory
• 2026/07/04 (commons-compress) branch master updated: DumpArchiveEntry rejects out-of-range directory header count (#781) ggregory
• 2026/07/04 (commons-xml) branch main updated (0c4cb12 -> de31b56) ggregory
• 2026/07/04 (commons-xml) 01/01: Merge pull request #2 from apache/dependabot/github_actions/actions/dependency-review-action-5.0.0 ggregory
• 2026/07/04 (commons-xml) branch dependabot/github_actions/actions/dependency-review-action-5.0.0 deleted (was 46faf98) ggregory
• 2026/07/04 (commons-xml) branch main updated: Fix URLs ggregory
• 2026/07/04 (commons-xml) branch main updated: Fix URL ggregory
• 2026/07/04 (commons-validator) branch master updated: Reject vowels in SedolCheckDigit (#415). ggregory
• 2026/07/04 (commons-validator) 01/01: Merge pull request #415 from sahvx655-wq/sedol-reject-vowels ggregory
• 2026/07/04 (commons-validator) branch master updated (f5ce8cda -> 823fae32) ggregory
• 2026/07/03 (commons-bcel) 02/02: Add GH CI Java 26 ggregory
• 2026/07/03 (commons-bcel) 01/02: Sort members. ggregory
• 2026/07/03 (commons-bcel) branch master updated (eabadd9c -> 0398af0a) ggregory
• 2026/07/03 (commons-lang) branch master updated: Sort members. ggregory
• 2026/07/03 (commons-lang) branch master updated: Reject hex letters in NumericEntityUnescaper decimal scan (#1739). ggregory
• 2026/07/03 (commons-lang) branch master updated: reject hex letters in NumericEntityUnescaper decimal scan (#1739) ggregory
• 2026/07/03 (commons-collections) branch master updated: Stop ExtendedMessageFormat seekNonWs reading past the pattern end (#1740). ggregory
• 2026/07/03 (commons-lang) branch master updated: Stop ExtendedMessageFormat seekNonWs reading past the pattern end (#1740) ggregory
• 2026/07/03 (commons-collections) branch master updated: Fix stale size in AbstractMapMultiSet view iterator remove (#701). ggregory
• 2026/07/03 (commons-collections) branch master updated: Fix stale size in AbstractMapMultiSet view iterator remove (#701) ggregory
• 2026/07/03 (commons-codec) branch master updated: Fix action type. ggregory
• 2026/07/03 (commons-validator) 02/02: Fix swapped constant maps in Form.process for extended forms (#413). ggregory
• 2026/07/03 (commons-validator) branch master updated (96e3e00b -> f5ce8cda) ggregory
• 2026/07/03 (commons-validator) 01/02: Sort members ggregory
• 2026/07/03 (commons-validator) 01/01: Merge pull request #413 from sahvx655-wq/form-extends-constant-order ggregory
• 2026/07/03 (commons-validator) branch master updated (2b8b85b3 -> 96e3e00b) ggregory
• 2026/07/03 (commons-validator) branch master updated: Fix typo in action description. ggregory
• 2026/07/03 (commons-validator) branch master updated: Handle non-finite bounds in BigIntegerValidator range checks (#414). ggregory
• 2026/07/03 (commons-validator) 01/01: Merge pull request #414 from sahvx655-wq/bigint-nonfinite-bound ggregory
• 2026/07/03 (commons-validator) branch master updated (e066bd87 -> a53c23f8) ggregory
• 2026/07/02 (commons-compress) branch master updated: Remove unused internal method ggregory
• 2026/07/02 (commons-compress) branch master updated: Fix Javadoc ggregory
• 2026/07/02 (commons-text) branch master updated: Javadoc ggregory
• 2026/07/02 (commons-bsf) branch dependabot/maven/org.apache.commons-commons-jexl3-3.7.0 created (now 880750e) github-bot
• 2026/07/02 (commons-bsf) 01/01: Bump org.apache.commons:commons-jexl3 from 3.6.4 to 3.7.0 github-bot
• 2026/07/02 (commons-bsf) branch dependabot/maven/org.apache.commons-commons-jexl3-3.7.0 updated (880750e -> b0fbcca) github-bot
• 2026/07/02 (commons-bsf) 01/01: Bump org.apache.commons:commons-jexl3 from 3.6.4 to 3.7.0 github-bot
• 2026/07/02 (commons-bsf) branch dependabot/maven/org.apache.commons-commons-jexl3-3.7.0 updated (880750e -> b0fbcca) github-bot
• 2026/07/02 (commons-scxml) branch dependabot/maven/org.apache.commons-commons-jexl3-3.7.0 created (now 773004e6) github-bot
• 2026/07/02 (commons-bsf) branch master updated: Add GH CI Java 26. ggregory
• 2026/07/02 (commons-collections) branch master updated: Fix trailing whitespace ggregory
• 2026/07/02 (commons-collections) branch master updated: Javadoc ggregory
• 2026/07/02 (commons-bcel) branch master updated: Read unsigned bytecode operands in CodeHTML disassembler (#511). ggregory
• 2026/07/02 (commons-bcel) branch master updated: Read unsigned bytecode operands in CodeHTML disassembler (#511) ggregory
• 2026/07/02 (commons-bcel) branch master updated: Fix ConstantPoolGen dedup key collisions for names with delimiters (#510) ggregory
• 2026/07/02 (commons-bcel) branch master updated: Fix ConstantPoolGen dedup key collisions for names with delimiters (#510) ggregory
• 2026/07/02 (commons-jexl) branch master updated: Fix typos. ggregory
• 2026/07/02 (commons-jexl) branch master updated: Updates for the next release ggregory
• 2026/07/02 svn commit: r85605 - dev/commons/jexl/3.7.0-RC1 ggregory
• 2026/07/02 (commons-jexl) branch release updated (21827925 -> 5bca2ad4) ggregory
• 2026/07/02 (commons-jexl) branch master updated (f901652a -> 76594a80) ggregory
• 2026/07/02 (commons-jexl) 01/01: Merge branch 'release' ggregory
• 2026/07/02 svn commit: r1935820 - commons/cms-site/trunk/conf ggregory
• 2026/07/02 (commons-jexl) annotated tag rel/commons-jexl-3.7.0 updated (21827925 -> bfc3755f) ggregory
• 2026/07/02 svn commit: r85604 - in release/commons/jexl: binaries source ggregory
• 2026/07/02 svn commit: r85603 - release/commons/jexl ggregory
• 2026/07/02 svn commit: r85602 - dev/commons/jexl/3.7.0-RC1 dev/commons/jexl/3.7.0-RC1/binaries dev/commons/jexl/3.7.0-RC1/source release/commons/jexl release/commons/jexl/binaries release/commons/jexl/source ggregory
• 2026/07/02 (commons-text) branch master updated: Stop ExtendedMessageFormat seekNonWs reading past the pattern end (#759). ggregory
• 2026/07/02 (commons-text) branch master updated: Stop ExtendedMessageFormat seekNonWs reading past the pattern end (#759) ggregory
• 2026/07/02 (commons-parent) branch dependabot/maven/biz.aQute.bnd-biz.aQute.bndlib-7.3.0 deleted (was c6bbb09) github-bot
• 2026/07/02 (commons-beanutils) branch master updated: Javadoc ggregory
• 2026/07/02 (commons-beanutils) branch 1.X updated: Reject out-of-range values in LongLocaleConverter (1.X) (#407). ggregory
• 2026/07/02 (commons-beanutils) branch 1.X updated: Reject out-of-range values in LongLocaleConverter (1.X) (#407) ggregory
• 2026/07/02 (commons-beanutils) branch master updated: Fix sql time and timestamp locale tests on java 20+ (#410). ggregory
• 2026/07/02 (commons-beanutils) branch master updated: Fix sql time and timestamp locale tests on java 20+ (#410) ggregory
• 2026/07/02 (commons-lang) branch master updated: Keep DurationFormatUtils.lexx() from merging repeated fields split by a literal (#1738) ggregory
• 2026/07/02 (commons-lang) branch master updated: Keep DurationFormatUtils.lexx() from merging repeated fields split by a literal (#1738) ggregory
• 2026/07/02 (commons-net) 01/02: Sort members ggregory
• 2026/07/02 (commons-net) 02/02: Reject CR/LF in FTP, POP3, NNTP and SMTP command senders (#400). ggregory
• 2026/07/02 (commons-net) branch master updated (a07b6c41 -> eb50f661) ggregory
• 2026/07/02 (commons-net) branch master updated (2a3aa71b -> a07b6c41) ggregory
• 2026/07/02 (commons-net) 01/01: Merge pull request #400 from dxbjavid/reject-crlf-command-senders ggregory
• 2026/07/02 (commons-logging) branch dependabot/maven/logback.version-1.5.37 updated (127a1cd -> 7292e03) github-bot
• 2026/07/02 (commons-vfs) branch master updated: Bump log4j2.version from 2.26.0 to 2.26.1. ggregory
• 2026/07/02 (commons-jcs) branch master updated: Bump log4j2.version from 2.26.0 to 2.26.1 (#425). ggregory
• 2026/07/02 (commons-configuration) branch master updated: Bump log4j2.version from 2.26.0 to 2.26.1 (#425). ggregory
• 2026/07/02 (commons-logging) branch master updated: Bump log4j2.version from 2.26.0 to 2.26.1 (#425). ggregory
• 2026/07/02 (commons-logging) branch dependabot/maven/log4j2.version-2.26.1 deleted (was 1888901) github-bot
• 2026/07/02 (commons-logging) branch master updated: Bump log4j2.version from 2.26.0 to 2.26.1 (#425) ggregory
• 2026/07/02 (commons-logging) branch dependabot/maven/log4j2.version-2.26.1 created (now 1888901) github-bot
• 2026/07/02 (commons-parent) branch dependabot/maven/biz.aQute.bnd-biz.aQute.bndlib-7.3.0 created (now c6bbb09) github-bot
• 2026/07/02 (commons-parent) branch dependabot/maven/org.mockito-mockito-bom-5.23.0 deleted (was 52b2fb9) github-bot
• 2026/07/02 (commons-parent) branch dependabot/maven/com.puppycrawl.tools-checkstyle-13.7.0 deleted (was b588a12) github-bot
• 2026/07/02 (commons-collections) branch master updated: Do not mutate the input map in SwitchClosure.switchClosure, ClosureUtils.switchMapClosure and TransformerUtils.switchMapTransformer (#700). ggregory
• 2026/07/02 (commons-collections) branch master updated: do not mutate the input map in switch closure/transformer factories (#700) ggregory
• 2026/07/02 (commons-validator) branch master updated: Compare exact values in DoubleValidator range checks (#410). ggregory
• 2026/07/02 (commons-validator) branch master updated (2deb0a9b -> 23273bb0) ggregory
• 2026/07/02 (commons-validator) 01/01: Merge pull request #410 from sahvx655-wq/double-float-exact-bound ggregory
• 2026/07/02 (commons-beanutils) branch master updated: Javadoc ggregory
• 2026/07/02 (commons-weaver) branch master updated: Bump org.apache.commons:commons-parent from 85 to 102 (fixes spdx fail on Java11/macos) sebb
• 2026/07/02 (commons-parent) branch dependabot/github_actions/actions/checkout-7.0.0 deleted (was 8257e21) github-bot
• 2026/07/02 (commons-parent) 01/01: Merge pull request #716 from apupier/configureTriggerPushForGuithubWorkflows sebb
• 2026/07/02 (commons-parent) branch master updated (54ec6da -> e7b1ee3) sebb
• 2026/07/02 (commons-math) branch master updated: Restrict trigger push branch for GitHub Workflow (#328) aherbert
• 2026/07/01 (commons-beanutils) branch master updated: Reject out-of-range values in LongLocaleConverter (#406). ggregory
• 2026/07/01 (commons-beanutils) branch master updated: Reject out-of-range values in LongLocaleConverter (#406) ggregory
• 2026/07/01 (commons-beanutils) branch master updated: Stop narrowing BigInteger and BigDecimal in StringLocaleConverter (#408) ggregory
• 2026/07/01 (commons-beanutils) branch master updated: stop narrowing BigInteger and BigDecimal in StringLocaleConverter (#408) ggregory
• 2026/07/01 (commons-text) branch master updated: Bump graalvm.version from 25.0.3 to 25.1.3 on Java 22 and up (#760). ggregory
• 2026/07/01 (commons-text) branch dependabot/maven/graalvm.version-25.1.3 deleted (was 7beda9f0) ggregory
• 2026/07/01 (commons-text) branch master updated: Bump graalvm.version from 25.0.3 to 25.1.3 (#760) ggregory
• 2026/07/01 (commons-numbers) branch dependabot/github_actions/github/codeql-action/upload-sarif-4.36.2 deleted (was a18bc908) github-bot
• 2026/07/01 (commons-bcel) branch master updated: Bump jna.version from 5.18.1 to 5.19.1 (#514). ggregory
• 2026/07/01 (commons-bcel) branch dependabot/maven/jna.version-5.19.1 deleted (was 05586315) ggregory
• 2026/07/01 (commons-bcel) branch master updated: Bump jna.version from 5.18.1 to 5.19.1 (#514) ggregory
• 2026/07/01 (commons-exec) branch dependabot/github_actions/github/codeql-action/upload-sarif-4.36.2 deleted (was d1bf9ec2) github-bot
• 2026/07/01 (commons-numbers) branch master updated: Bump github/codeql-action/upload-sarif from 4.35.1 to 4.36.2 ggregory
• 2026/07/01 (commons-exec) branch master updated: Bump github/codeql-action/upload-sarif from 4.35.1 to 4.36.2 ggregory
• 2026/07/01 (commons-email) branch master updated: Bump org.slf4j:slf4j-jdk14 from 2.0.17 to 2.0.18 (#400). ggregory
• 2026/07/01 (commons-email) 01/01: Merge pull request #400 from apache/dependabot/maven/org.slf4j-slf4j-jdk14-2.0.18 ggregory
• 2026/07/01 (commons-email) branch dependabot/maven/org.slf4j-slf4j-jdk14-2.0.18 deleted (was 71926d1f) ggregory
• 2026/07/01 (commons-email) branch master updated (689238d7 -> ca46d697) ggregory
• 2026/07/01 (commons-email) branch dependabot/github_actions/actions/dependency-review-action-5 deleted (was 2668b4a8) github-bot
• 2026/07/01 (commons-email) branch master updated: Bump actions/dependency-review-action from 4 to 5.0.0 ggregory
• 2026/07/01 (commons-configuration) branch master updated: Bump slf4j.version from 2.0.17 to 2.0.18 (#644). ggregory
• 2026/07/01 (commons-configuration) branch dependabot/maven/slf4j.version-2.0.18 deleted (was 2db9706fa) ggregory
• 2026/07/01 (commons-configuration) branch master updated: Bump slf4j.version from 2.0.17 to 2.0.18 (#644) ggregory
• 2026/07/01 (commons-configuration) branch master updated: Bump com.fasterxml.jackson.core:jackson-databind from 2.21.4 to 2.22.0 (#641). ggregory
• 2026/07/01 (commons-configuration) branch dependabot/maven/com.fasterxml.jackson.core-jackson-databind-2.22.0 deleted (was fc493ff3f) ggregory
• 2026/07/01 (commons-configuration) branch master updated: Bump com.fasterxml.jackson.core:jackson-databind from 2.21.4 to 2.22.0 (#641) ggregory
• 2026/07/01 (commons-configuration) branch master updated: Bump org.dbunit:dbunit from 3.0.0 to 3.2.0 (#643). ggregory
• 2026/07/01 (commons-daemon) branch dependabot/github_actions/actions/checkout-7 deleted (was 70b2ffb2) github-bot
• 2026/07/01 (commons-configuration) branch dependabot/maven/org.dbunit-dbunit-3.2.0 deleted (was 025f3faa0) ggregory
• 2026/07/01 (commons-configuration) branch master updated: Bump org.dbunit:dbunit from 3.0.0 to 3.2.0 (#643) ggregory
• 2026/07/01 (commons-daemon) branch master updated: Bump actions/checkout from 6 to 7.0.0 ggregory
• 2026/07/01 (commons-email) branch dependabot/github_actions/actions/dependency-review-action-5 created (now 2668b4a8) github-bot
• 2026/07/01 (commons-email) branch dependabot/maven/org.slf4j-slf4j-jdk14-2.0.18 created (now 71926d1f) github-bot
• 2026/07/01 (commons-text) branch dependabot/maven/graalvm.version-25.1.3 created (now 7beda9f0) github-bot

• Earlier messages
• Later messages