This is an automated email from the ASF dual-hosted git repository.
ffang pushed a commit to branch 4.1.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git
The following commit(s) were added to refs/heads/4.1.x-fixes by this push:
new 2e65ae37fbc avoid using snapshot cxf.build-utils.version
2e65ae37fbc is described below
commit 2e65ae37fbc6737b7a59b84575182c45b9e41eb8
Author: Freeman Fang <[email protected]>
AuthorDate: Thu Jul 30 10:55:46 2026 -0400
avoid using snapshot cxf.build-utils.version
---
distribution/src/main/release/release_notes.txt | 19 ++++++++-----------
pom.xml | 2 +-
2 files changed, 9 insertions(+), 12 deletions(-)
diff --git a/distribution/src/main/release/release_notes.txt
b/distribution/src/main/release/release_notes.txt
index 6c6a0953b7a..94eb06b6fed 100644
--- a/distribution/src/main/release/release_notes.txt
+++ b/distribution/src/main/release/release_notes.txt
@@ -1,4 +1,4 @@
-Apache CXF 4.1.7 Release Notes
+Apache CXF 4.1.8 Release Notes
1. Overview
@@ -27,7 +27,7 @@ for further information and requirements for upgrading from
earlier
versions of CXF.
-4.1.7 fixes over 4 JIRA issues reported by users and the community.
+4.1.8 fixes over 6 JIRA issues reported by users and the community.
2. Installation Prerequisites
@@ -70,14 +70,11 @@ for caveats when upgrading.
7. Specific issues, features, and improvements fixed in this version
** Bug
- * [CXF-9129] - Chunked attachment streaming not working when using
ws-security
-
-
-
-
-** Improvement
- * [CXF-9213] - RetryStrategy is a stateful class whose objects shouldn't
be reused
- * [CXF-9214] - WSDLs and XSDs cannot be loaded from class path on GraalVM
- * [CXF-9218] - Respect configured ProxySelector instead of hard-wiring
system proxy properties
+ * [CXF-9219] - cxf-bom manages dependencies for 4.x that no longer exist
or are not published
+ * [CXF-9221] - JCache providers use inverted isExpired() logic causing
expired tokens/codes to never be evicted
+ * [CXF-9223] - completeAudienceMatch=false defaults to prefix matching for
audience validation, widening resource access
+ * [CXF-9225] - OIDC RP does not enforce nonce validation for
Implicit/Hybrid flows
+ * [CXF-9226] - Proxy authentication fails with IllegalStateException
instead of HTTPException (407)
+ * [CXF-9227] - CXF 4.1.7 regression: more SecurityManager permission
requirements
diff --git a/pom.xml b/pom.xml
index cacf18ad125..7cc6732933d 100644
--- a/pom.xml
+++ b/pom.xml
@@ -40,7 +40,7 @@
</issueManagement>
<properties>
<cxf.compiler.fork>false</cxf.compiler.fork>
- <cxf.build-utils.version>4.1.5-SNAPSHOT</cxf.build-utils.version>
+ <cxf.build-utils.version>4.1.4</cxf.build-utils.version>
<cxf.xjc-utils.version>4.1.3</cxf.xjc-utils.version>
<cxf.jdk.version>17</cxf.jdk.version>
<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
