This is an automated email from the ASF dual-hosted git repository.
garydgregory pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/commons-secure-xml.git
The following commit(s) were added to refs/heads/main by this push:
new 123b72b Prepare for the release candidate
123b72b is described below
commit 123b72b9ab8c8d102529cf46801619d3c7a3caeb
Author: Gary Gregory <[email protected]>
AuthorDate: Mon Aug 31 21:46:12 2026 +0000
Prepare for the release candidate
---
README.md | 2 +-
RELEASE-NOTES.txt | 1 +
pom.xml | 1 +
src/changes/changes.xml | 2 +-
src/site/xdoc/download_secure-xml.xml | 158 ++++++++++++++++++++++++++++++++++
src/site/xdoc/mail-lists.xml | 8 +-
6 files changed, 166 insertions(+), 6 deletions(-)
diff --git a/README.md b/README.md
index d7911ef..3536f0a 100644
--- a/README.md
+++ b/README.md
@@ -62,7 +62,7 @@ Questions related to the usage of Apache Commons Secure XML
should be posted to
Getting the latest release
--------------------------
-You can download source and binaries from our [download
page](https://commons.apache.org/proper/commons-secure-xml/download_xml.cgi).
+You can download source and binaries from our [download
page](https://commons.apache.org/proper/commons-secure-xml/download_secure-xml.cgi).
Alternatively, you can pull it from the central Maven repositories:
diff --git a/RELEASE-NOTES.txt b/RELEASE-NOTES.txt
index 9e0102a..05a9326 100644
--- a/RELEASE-NOTES.txt
+++ b/RELEASE-NOTES.txt
@@ -53,6 +53,7 @@ Changes
* COMMONSXML-1,COMMONSXML-5,COMMONSXML-6,COMMONSXML-7,COMMONSXML-8: Recognize
XML implementations by the JAXP features and properties they support instead of
by their implementation class name, extending the securing to any compliant
implementation. Thanks to Piotr P. Karwasz, Gary Gregory.
* COMMONSXML-4: Define a consistent contract for denied external fetches:
unresolved external references resolve to empty content on every
implementation, unless the org.apache.commons.xml.secure.throwOnUnresolved
system property requests rejection. Thanks to Piotr P. Karwasz, Gary Gregory.
* COMMONSXML-3: Reduce the shaded footprint by splitting the secure classes
and resolver floors into independent entry points. Thanks to Piotr P. Karwasz,
Gary Gregory.
+* Allow the JAXP 1.5 accessExternal properties to be modified
on secured factories. Thanks to Piotr P. Karwasz, Gary Gregory.
Removed
-------
diff --git a/pom.xml b/pom.xml
index 276aa2f..ed0fcf1 100644
--- a/pom.xml
+++ b/pom.xml
@@ -39,6 +39,7 @@ limitations under the License.
</scm>
<properties>
<!-- Release-related properties -->
+ <commons.main.branch>main</commons.main.branch>
<commons.release.version>1.0.0</commons.release.version>
<commons.release.desc>(Java 8+)</commons.release.desc>
<commons.rc.version>RC1</commons.rc.version>
diff --git a/src/changes/changes.xml b/src/changes/changes.xml
index 1031f5a..3f7a1c0 100644
--- a/src/changes/changes.xml
+++ b/src/changes/changes.xml
@@ -31,7 +31,7 @@ The <action> type attribute can be add, update, fix, or
remove.
<title>Apache Commons Secure XML Changes</title>
</properties>
<body>
- <release version="1.0.0" date="YYYY-MM-DD" description="First release,
requires Java 8 or above.">
+ <release version="1.0.0" date="2026-08-31" description="First release,
requires Java 8 or above.">
<!-- SPECIAL -->
<action type="add" dev="ggregory" due-to="Piotr P. Karwasz, Gary
Gregory">This is the first release of Apache Commons Secure XML.</action>
<!-- ADD -->
diff --git a/src/site/xdoc/download_secure-xml.xml
b/src/site/xdoc/download_secure-xml.xml
new file mode 100644
index 0000000..3fbad80
--- /dev/null
+++ b/src/site/xdoc/download_secure-xml.xml
@@ -0,0 +1,158 @@
+<?xml version="1.0"?>
+<!--
+Licensed to the Apache Software Foundation (ASF) under one or more
+contributor license agreements. See the NOTICE file distributed with
+this work for additional information regarding copyright ownership.
+The ASF licenses this file to You under the Apache License, Version 2.0
+(the "License"); you may not use this file except in compliance with
+the License. You may obtain a copy of the License at
+
+ https://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+-->
+<!--
+ +======================================================================+
+ |**** ****|
+ |**** THIS FILE IS GENERATED BY THE COMMONS BUILD PLUGIN ****|
+ |**** DO NOT EDIT DIRECTLY ****|
+ |**** ****|
+ +======================================================================+
+ | TEMPLATE FILE: download-page-template.xml |
+ | commons-build-plugin/trunk/src/main/resources/commons-xdoc-templates |
+ +======================================================================+
+ | |
+ | 1) Re-generate using: mvn commons-build:download-page |
+ | |
+ | 2) Set the following properties in the component's pom: |
+ | - commons.componentid (required, alphabetic, lower case) |
+ | - commons.release.version (required) |
+ | - commons.release.name (required) |
+ | - commons.binary.suffix (optional) |
+ | (defaults to "-bin", set to "" for pre-maven2 releases) |
+ | - commons.release.desc (optional) |
+ | - commons.release.subdir (optional) |
+ | - commons.release.hash (optional, lowercase, default sha512) |
+ | |
+ | - commons.release.[234].version (conditional) |
+ | - commons.release.[234].name (conditional) |
+ | - commons.release.[234].binary.suffix (optional) |
+ | - commons.release.[234].desc (optional) |
+ | - commons.release.[234].subdir (optional) |
+ | - commons.release.[234].hash (optional, lowercase, [sha512])|
+ | |
+ | 3) Example Properties |
+ | (commons.release.name inherited by parent: |
+ | ${project.artifactId}-${commons.release.version} |
+ | |
+ | <properties> |
+ | <commons.componentid>math</commons.componentid> |
+ | <commons.release.version>1.2</commons.release.version> |
+ | </properties> |
+ | |
+ +======================================================================+
+-->
+<document xmlns="http://maven.apache.org/XDOC/2.0";
+ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";
+ xsi:schemaLocation="http://maven.apache.org/XDOC/2.0
https://maven.apache.org/xsd/xdoc-2.0.xsd";>
+ <properties>
+ <title>Download Apache Commons Secure XML</title>
+ <author email="[email protected]">Apache Commons Team</author>
+ </properties>
+ <body>
+ <section name="Download Apache Commons Secure XML">
+ <subsection name="Using a Mirror">
+ <p>
+ We recommend you use a mirror to download our release
+ builds, but you <strong>must</strong> <a
href="https://www.apache.org/info/verification.html";>verify the integrity</a> of
+ the downloaded files using signatures downloaded from our main
+ distribution directories. Recent releases (48 hours) may not yet
+ be available from all the mirrors.
+ </p>
+
+ <p>
+ You are currently using <b>[preferred]</b>. If you
+ encounter a problem with this mirror, please select another
+ mirror. If all mirrors are failing, there are <i>backup</i>
+ mirrors (at the end of the mirrors list) that should be
+ available.
+ <br></br>
+ [if-any logo]<a href="[link]"><img align="right" src="[logo]"
border="0" alt="Logo"></img></a>[end]
+ </p>
+
+ <form action="[location]" method="get" id="SelectMirror">
+ <p>
+ Other mirrors:
+ <select name="Preferred">
+ [if-any http]
+ [for http]<option value="[http]">[http]</option>[end]
+ [end]
+ [if-any ftp]
+ [for ftp]<option value="[ftp]">[ftp]</option>[end]
+ [end]
+ [if-any backup]
+ [for backup]<option value="[backup]">[backup]
(backup)</option>[end]
+ [end]
+ </select>
+ <input type="submit" value="Change"></input>
+ </p>
+ </form>
+
+ <p>
+ It is essential that you
+ <a href="https://www.apache.org/info/verification.html";>verify the
integrity</a>
+ of downloaded files, preferably using the <code>PGP</code> signature
(<code>*.asc</code> files);
+ failing that using the <code>SHA512</code> hash (<code>*.sha512</code>
checksum files).
+ </p>
+ <p>
+ The <a href="https://downloads.apache.org/commons/KEYS";>KEYS</a>
+ file contains the public PGP keys used by Apache Commons developers
+ to sign releases.
+ </p>
+ </subsection>
+ </section>
+ <section name="Apache Commons Secure XML 1.0.0 (Java 8+)">
+ <subsection name="Binaries">
+ <table>
+ <tr>
+ <td><a
href="[preferred]/commons/secure-xml/binaries/commons-secure-xml-1.0.0-bin.tar.gz">commons-secure-xml-1.0.0-bin.tar.gz</a></td>
+ <td><a
href="https://downloads.apache.org/commons/secure-xml/binaries/commons-secure-xml-1.0.0-bin.tar.gz.sha512";>sha512</a></td>
+ <td><a
href="https://downloads.apache.org/commons/secure-xml/binaries/commons-secure-xml-1.0.0-bin.tar.gz.asc";>pgp</a></td>
+ </tr>
+ <tr>
+ <td><a
href="[preferred]/commons/secure-xml/binaries/commons-secure-xml-1.0.0-bin.zip">commons-secure-xml-1.0.0-bin.zip</a></td>
+ <td><a
href="https://downloads.apache.org/commons/secure-xml/binaries/commons-secure-xml-1.0.0-bin.zip.sha512";>sha512</a></td>
+ <td><a
href="https://downloads.apache.org/commons/secure-xml/binaries/commons-secure-xml-1.0.0-bin.zip.asc";>pgp</a></td>
+ </tr>
+ </table>
+ </subsection>
+ <subsection name="Source">
+ <table>
+ <tr>
+ <td><a
href="[preferred]/commons/secure-xml/source/commons-secure-xml-1.0.0-src.tar.gz">commons-secure-xml-1.0.0-src.tar.gz</a></td>
+ <td><a
href="https://downloads.apache.org/commons/secure-xml/source/commons-secure-xml-1.0.0-src.tar.gz.sha512";>sha512</a></td>
+ <td><a
href="https://downloads.apache.org/commons/secure-xml/source/commons-secure-xml-1.0.0-src.tar.gz.asc";>pgp</a></td>
+ </tr>
+ <tr>
+ <td><a
href="[preferred]/commons/secure-xml/source/commons-secure-xml-1.0.0-src.zip">commons-secure-xml-1.0.0-src.zip</a></td>
+ <td><a
href="https://downloads.apache.org/commons/secure-xml/source/commons-secure-xml-1.0.0-src.zip.sha512";>sha512</a></td>
+ <td><a
href="https://downloads.apache.org/commons/secure-xml/source/commons-secure-xml-1.0.0-src.zip.asc";>pgp</a></td>
+ </tr>
+ </table>
+ </subsection>
+ </section>
+ <section name="Archives">
+ <p>
+ Older releases can be obtained from the archives.
+ </p>
+ <ul>
+ <li class="download"><a
href="[preferred]/commons/secure-xml/">browse download area</a></li>
+ <li><a
href="https://archive.apache.org/dist/commons/secure-xml/";>archives...</a></li>
+ </ul>
+ </section>
+ </body>
+</document>
diff --git a/src/site/xdoc/mail-lists.xml b/src/site/xdoc/mail-lists.xml
index 24d9d9b..36f9eff 100644
--- a/src/site/xdoc/mail-lists.xml
+++ b/src/site/xdoc/mail-lists.xml
@@ -57,7 +57,7 @@ limitations under the License.
for example:
</p>
<ul>
- <li>[xml] Problem with the ...</li>
+ <li>[secure-xml] Problem with the ...</li>
</ul>
<p>
Questions related to the usage of Apache Commons Secure XML should be
posted to the
@@ -83,7 +83,7 @@ limitations under the License.
<section name="Apache Commons Secure XML Mailing Lists">
<p>
<strong>Please prefix the subject line of any messages for <a
href="index.html">Apache Commons Secure XML</a>
- with <i>[xml]</i></strong> - <i>thanks!</i>
+ with <i>[secure-xml]</i></strong> - <i>thanks!</i>
<br />
<br />
</p>
@@ -108,7 +108,7 @@ limitations under the License.
</td>
<td><a
href="mailto:[email protected]";>Subscribe</a></td>
<td><a
href="mailto:[email protected]";>Unsubscribe</a></td>
- <td><a
href="mailto:[email protected]?subject=[xml]";>Post</a></td>
+ <td><a
href="mailto:[email protected]?subject=[secure-xml]";>Post</a></td>
<td>
<a
href="https://lists.apache.org/[email protected]";>lists.apache.org</a>
</td>
@@ -127,7 +127,7 @@ limitations under the License.
</td>
<td><a
href="mailto:[email protected]";>Subscribe</a></td>
<td><a
href="mailto:[email protected]";>Unsubscribe</a></td>
- <td><a
href="mailto:[email protected]?subject=[xml]";>Post</a></td>
+ <td><a
href="mailto:[email protected]?subject=[secure-xml]";>Post</a></td>
<td>
<a
href="https://lists.apache.org/[email protected]";>lists.apache.org</a>
</td>
