commits  

Messages by Date

• 2026/06/29 (cxf) branch main updated: Bump org.webjars:swagger-ui from 5.32.6 to 5.32.8 (#3258) reta
• 2026/06/29 (cxf) branch dependabot/maven/org.webjars-swagger-ui-5.32.8 deleted (was c80bef2d22a) github-bot
• 2026/06/28 (cxf) branch dependabot/github_actions/actions/setup-java-5.4.0 created (now 9bf1f2985b4) github-bot
• 2026/06/28 (cxf) branch dependabot/github_actions/actions/cache-6.1.0 created (now 6456a3db39b) github-bot
• 2026/06/28 (cxf) branch dependabot/maven/org.atmosphere-atmosphere-runtime-4.0.55 deleted (was fa9b954413a) github-bot
• 2026/06/28 (cxf) branch dependabot/maven/ch.qos.logback-logback-classic-1.5.35 created (now e74cfd791e2) github-bot
• 2026/06/28 (cxf) branch dependabot/maven/org.atmosphere-atmosphere-runtime-4.0.56 created (now 9230a54da84) github-bot
• 2026/06/28 (cxf) branch dependabot/maven/org.webjars-swagger-ui-5.32.8 created (now c80bef2d22a) github-bot
• 2026/06/28 (cxf) branch dependabot/maven/org.apache.httpcomponents.core5-httpcore5-5.4.3 created (now cddd6bc46ba) github-bot
• 2026/06/28 (cxf-xjc-utils) branch main updated: Bump org.javassist:javassist from 3.31.0-GA to 3.32.0-GA (#347) reta
• 2026/06/28 (cxf-xjc-utils) branch dependabot/maven/org.javassist-javassist-3.32.0-GA deleted (was 4b32b6f) github-bot
• 2026/06/28 (cxf-xjc-utils) branch dependabot/maven/org.javassist-javassist-3.32.0-GA created (now 4b32b6f) github-bot
• 2026/06/26 (cxf) branch coheigea/CXF-9222 deleted (was a325cb43a4b) coheigea
• 2026/06/26 (cxf) branch main updated: CXF-9222 - Remove partialMatchScopeValidation for OAuth (#3254) coheigea
• 2026/06/26 (cxf) branch dependabot/maven/org.apache.commons-commons-jexl3-3.6.3 deleted (was 7b71b1ba011) github-bot
• 2026/06/26 (cxf) branch main updated: Bump org.apache.commons:commons-jexl3 from 3.6.2 to 3.6.3 (#3253) reta
• 2026/06/26 (cxf) 01/02: Updating BouncyCastle to 1.81 coheigea
• 2026/06/26 (cxf) 02/02: Updating jakarta mail to 1.6.8 coheigea
• 2026/06/26 (cxf) branch 3.6.x-fixes updated (1d1e0d8d529 -> 5df179293f1) coheigea
• 2026/06/26 (cxf) branch dependabot/maven/cxf.hibernate.em.version-7.4.2.Final deleted (was 5b9c5915ee8) github-bot
• 2026/06/26 (cxf) branch main updated: Bump cxf.hibernate.em.version from 7.4.1.Final to 7.4.2.Final (#3252) reta
• 2026/06/26 (cxf) branch 4.1.x-fixes updated: Updating BouncyCastle to 1.81 coheigea
• 2026/06/26 (cxf) 01/01: CXF-9222 - Remove partialMatchScopeValidation for OAuth coheigea
• 2026/06/26 (cxf) branch coheigea/CXF-9222 created (now 88e351cae31) coheigea
• 2026/06/26 (cxf) branch 4.1.x-fixes updated (7c21b51485d -> 3b733aff88b) coheigea
• 2026/06/26 (cxf) 01/02: Bump org.apache.kerby:kerb-simplekdc from 2.1.1 to 2.1.2 (#3251) coheigea
• 2026/06/26 (cxf) 02/02: Recording .gitmergeinfo Changes coheigea
• 2026/06/26 (cxf) branch dependabot/maven/org.apache.kerby-kerb-simplekdc-2.1.2 deleted (was 35d065bcc48) github-bot
• 2026/06/26 (cxf) branch main updated: Bump org.apache.kerby:kerb-simplekdc from 2.1.1 to 2.1.2 (#3251) coheigea
• 2026/06/25 (cxf) branch dependabot/maven/org.apache.commons-commons-jexl3-3.6.3 created (now 7b71b1ba011) github-bot
• 2026/06/25 (cxf) branch dependabot/maven/cxf.hibernate.em.version-7.4.2.Final created (now 5b9c5915ee8) github-bot
• 2026/06/25 (cxf) branch dependabot/maven/org.apache.kerby-kerb-simplekdc-2.1.2 created (now 35d065bcc48) github-bot
• 2026/06/25 (cxf) 07/20: Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.5 to 3.5.6 (#3160) reta
• 2026/06/25 (cxf) 02/20: Update ASM to 9.10 reta
• 2026/06/25 (cxf) 19/20: Bump cxf.openfeign.version from 13.12 to 13.13 (#3239) reta
• 2026/06/25 (cxf) 15/20: Bump jaxen:jaxen from 2.0.5 to 2.0.6 (#3208) reta
• 2026/06/25 (cxf) 18/20: Bump io.swagger.core.v3:swagger-jaxrs2-jakarta from 2.2.50 to 2.2.51 (#3233) reta
• 2026/06/25 (cxf) 05/20: Update Netty to 4.1.134.Final reta
• 2026/06/25 (cxf) 20/20: Update Swagger Core to 2.2.52 reta
• 2026/06/25 (cxf) 01/20: Bump cxf.maven.core.version from 3.9.15 to 3.9.16 (#3122) reta
• 2026/06/25 (cxf) 14/20: Bump org.apache.maven.plugins:maven-dependency-plugin (#3202) reta
• 2026/06/25 (cxf) 03/20: Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.2 to 3.6.3 (#3129) reta
• 2026/06/25 (cxf) 16/20: Bump com.unboundid:unboundid-ldapsdk from 7.0.4 to 7.0.5 (#3229) reta
• 2026/06/25 (cxf) 13/20: Bump org.graalvm.buildtools:native-maven-plugin from 1.1.0 to 1.1.1 (#3189) reta
• 2026/06/25 (cxf) 04/20: Bump jaxen:jaxen from 2.0.2 to 2.0.3 (#3130) reta
• 2026/06/25 (cxf) 08/20: Bump org.apache.maven.plugins:maven-surefire-report-plugin (#3163) reta
• 2026/06/25 (cxf) 17/20: Bump org.codehaus.plexus:plexus-archiver from 4.11.0 to 4.12.0 (#3228) reta
• 2026/06/25 (cxf) 06/20: Bump org.ow2.asm:asm from 9.10 to 9.10.1 (#3156) reta
• 2026/06/25 (cxf) 12/20: Update Jackson to 2.22.0 reta
• 2026/06/25 (cxf) 09/20: Update Netty to 4.1.135.Final reta
• 2026/06/25 (cxf) branch 3.6.x-fixes updated (35d62a6d4a3 -> 1d1e0d8d529) reta
• 2026/06/25 (cxf) 10/20: Bump cxf.dropwizard4.version from 4.2.38 to 4.2.39 (#3173) reta
• 2026/06/25 (cxf) 11/20: Bump org.webjars:swagger-ui from 5.32.5 to 5.32.6 (#3179) reta
• 2026/06/25 (cxf) 03/03: Add sensible default value to attachment-max-size property (#3188) reta
• 2026/06/25 (cxf) branch 3.6.x-fixes updated (8a75a4fcd81 -> 35d62a6d4a3) reta
• 2026/06/25 (cxf) 02/03: Introduce default value for maxFormParameterCount (#3177) reta
• 2026/06/25 (cxf) 01/03: Add limit to the maximum number of attachment headers to be collected (#3159) reta
• 2026/06/25 (cxf) branch 3.6.x-fixes updated: Other checkstyle fix coheigea
• 2026/06/25 (cxf) branch 3.6.x-fixes updated: Checkstyle fixup coheigea
• 2026/06/25 (cxf) 19/34: Improve JSON key parsing (#3141) coheigea
• 2026/06/25 (cxf) 18/34: Fix bug in JSON parsing relating to escaped backslashes (#3140) coheigea
• 2026/06/25 (cxf) 29/34: Make JCacheCodeDataProvider#removeCodeGrant atomic (#3224) coheigea
• 2026/06/25 (cxf) 26/34: Properly handle nested arrays in json parsing (#3168) coheigea
• 2026/06/25 (cxf) 20/34: Support unicode characters in the json parser (#3142) coheigea
• 2026/06/25 (cxf) 33/34: More SchemaFactory hardenings (#3157) coheigea
• 2026/06/25 (cxf) 32/34: Recording .gitmergeinfo Changes coheigea
• 2026/06/25 (cxf) 15/34: Synchronize access token refresh when refresh tokens aren't recycled (#3133) coheigea
• 2026/06/25 (cxf) 12/34: Marking OAuthServiceExceptionMapper as deprecated for removal coheigea
• 2026/06/25 (cxf) 08/34: Add vfs to URIResolver (#3113) coheigea
• 2026/06/25 (cxf) 31/34: Updating Jettison to 1.5.6 (#3231) coheigea
• 2026/06/25 (cxf) 14/34: Changing last commit to preserve old code verifier on 4.1 coheigea
• 2026/06/25 (cxf) 16/34: Removing control characters from OAuth2 realm and logs (#3136) coheigea
• 2026/06/25 (cxf) 05/34: Wire the STSClient through to URIResolver (#3106) coheigea
• 2026/06/25 (cxf) 07/34: Tighten up where we can download resources for Jose from (#3108) coheigea
• 2026/06/25 (cxf) 30/34: Require c_hash for the hybrid case (#3230) coheigea
• 2026/06/25 (cxf) 34/34: Fixing up backport coheigea
• 2026/06/25 (cxf) 04/34: Make sure that users can't revoke other users tokens (#3099) coheigea
• 2026/06/25 (cxf) 09/34: Properly throw exception in introspection service (#3121) coheigea
• 2026/06/25 (cxf) 27/34: Get the headers from the validated signature entry (#3171) coheigea
• 2026/06/25 (cxf) 24/34: Apply the JSON depth limit to writes as well (#3152) coheigea
• 2026/06/25 (cxf) 03/34: Marking HTTPSPStateManager as deprecated coheigea
• 2026/06/25 (cxf) 28/34: Add default constraints on the number of JSON objects/array entries that can be parsed (#3172) coheigea
• 2026/06/25 (cxf) 22/34: More JNDI validation (#3150) coheigea
• 2026/06/25 (cxf) 23/34: Add a depth limit for JSON parsing mirroring what Jettison does (#3149) coheigea
• 2026/06/25 (cxf) 02/34: Marking SQLPrintVisitor as deprecated for removal coheigea
• 2026/06/25 (cxf) 25/34: Harden JNDI for integration/jca (#3169) coheigea
• 2026/06/25 (cxf) 21/34: Escape JSON control characters (#3145) coheigea
• 2026/06/25 (cxf) 06/34: Fixup coheigea
• 2026/06/25 (cxf) branch 3.6.x-fixes updated (e02817dbcd6 -> 61bf31ed29f) coheigea
• 2026/06/25 (cxf) 10/34: Validate expiry, nbg + audience for the JwtAccessTokenValidator (#3126) coheigea
• 2026/06/25 (cxf) 13/34: CXF-9216 - Switch default OAuth2 code verifier to Digest (#3132) coheigea
• 2026/06/25 (cxf) 11/34: Fix the OAuth2 client ip address check and add a test (#3127) coheigea
• 2026/06/25 (cxf) 17/34: Handle NaN or infinite times in JSON/JWT (#3137) coheigea
• 2026/06/25 (cxf) 01/34: Restrict valid URL protocols in TLSParameterJaxBUtils and URIResolver (#3091) coheigea
• 2026/06/24 (cxf) branch 3.6.x-fixes updated: Fix JAXRS20ClientServerBookTest.testGetGenericBookManyClientsInParallel test case reta
• 2026/06/24 (cxf) branch 4.1.x-fixes updated (3be3f39627e -> 7c21b51485d) reta
• 2026/06/24 (cxf) 02/03: Update cyclonedx-maven-plugin to 2.9.2 reta
• 2026/06/24 (cxf) 01/03: Update Swagger Core to 2.2.52 reta
• 2026/06/24 (cxf) 03/03: Recording .gitmergeinfo Changes reta
• 2026/06/24 svn commit: r1093353 - in websites/production/cxf/content: . cache custom-cxf-transport.data distributed-osgi-greeter-demo-walkthrough.data dosgi-ds-demo-page.data dosgi-spring-dm-demo-page.data fediz-architecture.data fediz-websphere.data index.data s... buildbot
• 2026/06/24 (cxf) 01/02: Update Swagger Core to 2.2.52 reta
• 2026/06/24 (cxf) branch main updated (d462fe0aad5 -> b2c370cd3c9) reta
• 2026/06/24 (cxf) 02/02: Update cyclonedx-maven-plugin to 2.9.2 reta
• 2026/06/24 (cxf) branch 3.6.x-fixes updated: CXF-9221: JCache providers use inverted isExpired() logic causing expired tokens/codes to never be evicted (#3240) reta
• 2026/06/24 (cxf) 01/02: CXF-9221: JCache providers use inverted isExpired() logic causing expired tokens/codes to never be evicted (#3240) reta
• 2026/06/24 (cxf) 02/02: Recording .gitmergeinfo Changes reta
• 2026/06/24 (cxf) branch 4.1.x-fixes updated (ff33e0a5335 -> 3be3f39627e) reta
• 2026/06/24 (cxf) branch 3.6.x-fixes updated (79456665e15 -> 4636c6cda00) reta
• 2026/06/24 (cxf) 02/02: Update async-http-client to 2.16.0 reta
• 2026/06/24 (cxf) 01/02: Update Apache Tomcat to 9.0.119 reta
• 2026/06/24 (cxf) branch main updated: CXF-9221: JCache providers use inverted isExpired() logic causing expired tokens/codes to never be evicted (#3240) reta
• 2026/06/24 svn commit: r1093352 - websites/production/cxf/content buildbot
• 2026/06/24 (cxf) branch main updated: Removing 3.6.x from security support coheigea
• 2026/06/23 (cxf) 05/10: Bump org.apache.mina:mina-core from 2.2.8 to 2.2.9 (#3245) reta
• 2026/06/23 (cxf) 03/10: Bump cxf.openfeign.version from 13.12 to 13.13 (#3239) reta
• 2026/06/23 (cxf) 10/10: Update Apache Tomcat to 10.1.56 reta
• 2026/06/23 (cxf) 09/10: Recording .gitmergeinfo Changes reta
• 2026/06/23 (cxf) branch 4.1.x-fixes updated (22a89ff7fa0 -> ff33e0a5335) reta
• 2026/06/23 (cxf) 08/10: Recording .gitmergeinfo Changes reta
• 2026/06/23 (cxf) 06/10: Bump actions/checkout from 6.0.3 to 7.0.0 (#3243) reta
• 2026/06/23 (cxf) 07/10: Bump actions/setup-java from 5.2.0 to 5.3.0 (#3242) reta
• 2026/06/23 (cxf) 02/10: Recording .gitmergeinfo Changes reta
• 2026/06/23 (cxf) 04/10: Bump org.asynchttpclient:async-http-client from 3.0.10 to 3.0.11 (#3246) reta
• 2026/06/23 (cxf) 01/10: Update cxf-build-utils to 4.1.5-SNAPSHOT reta
• 2026/06/23 (cxf) branch dependabot/maven/io.opentelemetry.semconv-opentelemetry-semconv-1.42.0 deleted (was acb16e3daa9) github-bot
• 2026/06/23 (cxf) branch main updated: Bump io.opentelemetry.semconv:opentelemetry-semconv (#3249) reta
• 2026/06/23 (cxf) branch dependabot/maven/cxf.tomcat.version-11.0.23 deleted (was f8b73357790) github-bot
• 2026/06/23 (cxf) branch main updated: Bump cxf.tomcat.version from 11.0.22 to 11.0.23 (#3248) reta
• 2026/06/22 (cxf) branch dependabot/maven/io.opentelemetry.semconv-opentelemetry-semconv-1.42.0 created (now acb16e3daa9) github-bot
• 2026/06/22 (cxf) branch dependabot/maven/cxf.tomcat.version-11.0.23 created (now f8b73357790) github-bot
• 2026/06/22 (cxf) branch dependabot/maven/org.atmosphere-atmosphere-runtime-4.0.54 deleted (was 57331698d96) github-bot
• 2026/06/22 (cxf) branch dependabot/maven/org.atmosphere-atmosphere-runtime-4.0.55 created (now fa9b954413a) github-bot
• 2026/06/22 (cxf-build-utils) branch main updated: Bump actions/checkout from 6.0.3 to 7.0.0 (#240) reta
• 2026/06/22 (cxf-build-utils) branch dependabot/github_actions/actions/checkout-7.0.0 deleted (was adf32a8) github-bot
• 2026/06/22 (cxf-build-utils) branch dependabot/github_actions/actions/checkout-7.0.0 created (now adf32a8) github-bot
• 2026/06/22 (cxf) branch dependabot/github_actions/actions/setup-java-5.3.0 deleted (was 4df78737795) github-bot
• 2026/06/22 (cxf) branch main updated: Bump actions/setup-java from 5.2.0 to 5.3.0 (#3242) reta
• 2026/06/22 (cxf) branch dependabot/github_actions/actions/checkout-7.0.0 deleted (was 6b9f9363fea) github-bot
• 2026/06/22 (cxf) branch main updated: Bump actions/checkout from 6.0.3 to 7.0.0 (#3243) reta
• 2026/06/22 (cxf) branch main updated: Bump com.puppycrawl.tools:checkstyle from 13.5.0 to 13.6.0 (#3244) reta
• 2026/06/22 (cxf) branch dependabot/maven/com.puppycrawl.tools-checkstyle-13.6.0 deleted (was 11a0ee38d07) github-bot
• 2026/06/22 (cxf-fediz) branch dependabot/github_actions/actions/checkout-7.0.0 created (now 2e2fb3a1) github-bot
• 2026/06/22 (cxf-fediz) branch dependabot/github_actions/actions/setup-java-5.3.0 created (now ab89e66f) github-bot
• 2026/06/22 (cxf-fediz) branch dependabot/github_actions/actions/checkout-6.0.3 deleted (was ca12bc03) github-bot
• 2026/06/22 (cxf) branch dependabot/maven/org.apache.mina-mina-core-2.2.9 deleted (was 86ec569a663) github-bot
• 2026/06/22 (cxf) branch dependabot/maven/org.asynchttpclient-async-http-client-3.0.11 deleted (was 58e2afd826f) github-bot
• 2026/06/22 (cxf) branch main updated (cdefb0bf88a -> 3e602e82462) reta
• 2026/06/22 (cxf) branch main updated: Bump org.asynchttpclient:async-http-client from 3.0.10 to 3.0.11 (#3246) reta
• 2026/06/21 (cxf) branch dependabot/maven/org.asynchttpclient-async-http-client-3.0.11 created (now 58e2afd826f) github-bot
• 2026/06/21 (cxf) branch dependabot/maven/com.puppycrawl.tools-checkstyle-13.6.0 created (now 11a0ee38d07) github-bot
• 2026/06/21 (cxf) branch dependabot/maven/org.apache.mina-mina-core-2.2.9 created (now 86ec569a663) github-bot
• 2026/06/21 (cxf) branch dependabot/github_actions/actions/checkout-7.0.0 created (now 6b9f9363fea) github-bot
• 2026/06/21 (cxf) branch dependabot/github_actions/actions/setup-java-5.3.0 created (now 4df78737795) github-bot
• 2026/06/21 (cxf-xjc-utils) branch dependabot/maven/com.puppycrawl.tools-checkstyle-13.6.0 deleted (was adb173e) github-bot
• 2026/06/21 (cxf-xjc-utils) branch dependabot/github_actions/actions/checkout-7 deleted (was 0542376) github-bot
• 2026/06/21 (cxf-xjc-utils) branch main updated: Bump actions/checkout from 6 to 7 (#345) reta
• 2026/06/21 (cxf-xjc-utils) branch dependabot/maven/com.puppycrawl.tools-checkstyle-13.6.0 created (now adb173e) github-bot
• 2026/06/21 (cxf-xjc-utils) branch dependabot/github_actions/actions/checkout-7 created (now 0542376) github-bot
• 2026/06/19 (cxf) branch dependabot/maven/cxf.openfeign.version-13.13 deleted (was 399aab8e025) github-bot
• 2026/06/19 (cxf) branch main updated: Bump cxf.openfeign.version from 13.12 to 13.13 (#3239) reta
• 2026/06/18 (cxf) branch dependabot/maven/cxf.openfeign.version-13.13 created (now 399aab8e025) github-bot
• 2026/06/18 (cxf) branch dependabot/maven/org.atmosphere-atmosphere-runtime-4.0.54 created (now 57331698d96) github-bot
• 2026/06/18 (cxf) branch dependabot/maven/org.atmosphere-atmosphere-runtime-4.0.53 deleted (was e050bae8d47) github-bot
• 2026/06/18 (cxf) branch main updated: Update cxf-build-utils to 4.1.5-SNAPSHOT reta
• 2026/06/18 (cxf-build-utils) branch main updated: Remove deprecared JUnit5TestShouldBePackagePrivate rule (#239) reta
• 2026/06/18 (cxf) 05/06: validate hex digits when decoding quoted-printable attachments (#3223) reta
• 2026/06/18 (cxf) 06/06: Recording .gitmergeinfo Changes reta
• 2026/06/18 (cxf) branch 4.1.x-fixes updated (fcaf20fa466 -> 22a89ff7fa0) reta
• 2026/06/18 (cxf) 04/06: Bump io.swagger.core.v3:swagger-jaxrs2-jakarta from 2.2.50 to 2.2.51 (#3233) reta
• 2026/06/18 (cxf) 01/06: Bump com.fasterxml.woodstox:woodstox-core from 7.2.0 to 7.2.1 (#3225) reta
• 2026/06/18 (cxf) 03/06: Bump org.codehaus.plexus:plexus-archiver from 4.11.0 to 4.12.0 (#3228) reta
• 2026/06/18 (cxf) 02/06: Bump com.unboundid:unboundid-ldapsdk from 7.0.4 to 7.0.5 (#3229) reta
• 2026/06/18 (cxf) branch main updated: validate hex digits when decoding quoted-printable attachments (#3223) reta
• 2026/06/18 (cxf) branch dependabot/maven/commons-logging-commons-logging-1.4.0 deleted (was 71660ef63bf) github-bot
• 2026/06/18 (cxf) branch main updated: Bump commons-logging:commons-logging from 1.3.6 to 1.4.0 (#3232) reta
• 2026/06/17 (cxf) branch dependabot/maven/io.swagger.core.v3-swagger-jaxrs2-jakarta-2.2.51 deleted (was a39d0284cb4) github-bot
• 2026/06/17 (cxf) branch main updated: Bump io.swagger.core.v3:swagger-jaxrs2-jakarta from 2.2.50 to 2.2.51 (#3233) reta
• 2026/06/17 (cxf) branch dependabot/maven/org.atmosphere-atmosphere-runtime-4.0.53 created (now e050bae8d47) github-bot
• 2026/06/17 (cxf) branch dependabot/maven/org.atmosphere-atmosphere-runtime-4.0.52 deleted (was 5a18f585558) github-bot
• 2026/06/17 (cxf) branch dependabot/maven/io.swagger.core.v3-swagger-jaxrs2-jakarta-2.2.51 created (now a39d0284cb4) github-bot
• 2026/06/17 (cxf) branch dependabot/maven/commons-logging-commons-logging-1.4.0 created (now 71660ef63bf) github-bot
• 2026/06/17 (cxf) branch 4.1.x-fixes updated: Recording .gitmergeinfo Changes coheigea
• 2026/06/17 (cxf) branch 4.1.x-fixes updated: Updating Jettison to 1.5.6 (#3231) coheigea
• 2026/06/17 (cxf) branch coheigea/jettison-1.5.6 deleted (was 3fe9dedc504) coheigea
• 2026/06/17 (cxf) branch main updated (6620b799b7b -> 0513c1ffbea) reta
• 2026/06/17 (cxf) branch main updated: Updating Jettison to 1.5.6 (#3231) reta
• 2026/06/17 (cxf) branch dependabot/maven/org.codehaus.plexus-plexus-archiver-4.12.0 deleted (was b55a97c56e3) github-bot
• 2026/06/17 (cxf) branch main updated: Bump org.codehaus.plexus:plexus-archiver from 4.11.0 to 4.12.0 (#3228) reta
• 2026/06/17 (cxf) branch dependabot/maven/com.unboundid-unboundid-ldapsdk-7.0.5 deleted (was c3521c667f5) github-bot
• 2026/06/17 (cxf) branch dependabot/maven/com.fasterxml.woodstox-woodstox-core-7.2.1 deleted (was b2b7655ca01) github-bot
• 2026/06/17 (cxf) branch main updated: Bump com.fasterxml.woodstox:woodstox-core from 7.2.0 to 7.2.1 (#3225) reta
• 2026/06/17 (cxf) branch 4.1.x-fixes updated: Require c_hash for the hybrid case (#3230) coheigea
• 2026/06/17 (cxf) branch main updated: Require c_hash for the hybrid case (#3230) coheigea
• 2026/06/17 (cxf) branch coheigea/c_hash deleted (was 133eb0ee0ef) coheigea
• 2026/06/17 (cxf) 01/01: Updating Jettison to 1.5.6 coheigea
• 2026/06/17 (cxf) branch coheigea/jettison-1.5.6 created (now 3fe9dedc504) coheigea
• 2026/06/17 (cxf-fediz) 01/01: Merge pull request #457 from potiuk/asf-security/threat-model-2026-05-31 coheigea
• 2026/06/17 (cxf-fediz) branch main updated (b9098d60 -> 297bf637) coheigea
• 2026/06/17 (cxf) branch coheigea/c_hash updated (8d2db70781a -> 133eb0ee0ef) coheigea
• 2026/06/17 (cxf) 01/01: Require c_hash for the hybrid case coheigea

• Earlier messages
• Later messages