This is an automated email from the ASF dual-hosted git repository.
reta pushed a change to branch
dependabot/maven/org.apache.httpcomponents.core5-httpcore5-5.4.4
in repository https://gitbox.apache.org/repos/asf/cxf.git
omit ab70d6cf7a3 Decrease HTTP/1.1 buffer size for 32kb to 16kb
omit 72a4e3af3d0 Bump org.apache.httpcomponents.core5:httpcore5 from 5.4.3
to 5.4.4
add b33aa1c7d12 [CXF-9250] Stop HttpClientHTTPConduit from endlessly
resending failed bodyless requests (#3514)
add 45c0f92f4f0 Don't have a test failure on one JDK cancel the other runs
(#3520)
add 27fa5a47ef5 Updating XML Schema to 2.3.3 (#3517)
add 0583c9ab833 Bump org.jruby:jruby from 10.1.1.0 to 10.1.2.0 (#3515)
add a2bacf9cd24 Bump org.hibernate.validator:hibernate-validator (#3516)
add 8b616ab64e3 Harden JWT issuer and audience validation (#3518)
add b6033517039 Updating WSS4J to 4.0.2 (#3527)
add c043e9ec95b Bump org.asynchttpclient:async-http-client from 3.0.13 to
3.0.14 (#3526)
add 4c89caadcce Bump org.eclipse.persistence:org.eclipse.persistence.moxy
(#3524)
add 9cbf257c44f Bump the codeql-action group with 3 updates (#3525)
add 5d3864f1c8c Store the whole Signature value for SignatureConfirmation
(#3529)
add dd13fab9095 Bump ch.qos.logback:logback-classic from 1.6.3 to 1.6.4
(#3522)
add 996e1191217 Adding a flag to require an audience in
JwtAccessTokenValidator (#3530)
add e2ff6c9c2a4 CXF-9032 - Fix JWS verification with a "jwk" key store
(#3531)
add 4e23f0f0961 Update cxf-build-utils to 4.1.5
add 27e15770c0c update CXF 4.2.4 release notes
add 5e324f12110 [maven-release-plugin] prepare release cxf-4.2.4
add 3d2180abb2f [maven-release-plugin] prepare for next development
iteration
add 907d8981baf Update cxf-build-utils to 4.1.6-SNAPSHOT
add c55bef4d1e3 Update missed versions
add 9c2e509c76a Bump net.sourceforge.pmd:pmd-java from 7.27.0 to 7.28.0
(#3534)
add 3651807b070 Bump org.apache.httpcomponents.core5:httpcore5 from 5.4.3
to 5.4.4
add 7d2d1c2e67a Decrease HTTP/1.1 buffer size for 32kb to 16kb
This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version. This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:
* -- * -- B -- O -- O -- O (ab70d6cf7a3)
\
N -- N -- N
refs/heads/dependabot/maven/org.apache.httpcomponents.core5-httpcore5-5.4.4
(7d2d1c2e67a)
You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.
Any revisions marked "omit" are not gone; other references still
refer to them. Any revisions marked "discard" are gone forever.
No new revisions were added by this update.
Summary of changes:
.github/workflows/codeql-analysis.yml | 4 +-
.github/workflows/pull-request-build.yml | 1 +
.github/workflows/scorecards.yml | 2 +-
bom/pom.xml | 2 +-
core/pom.xml | 2 +-
.../main/java/org/apache/cxf/version/Version.java | 5 +-
.../cxf/common/util/PropertiesLoaderUtilsTest.java | 2 +-
.../apache/cxf/staxutils/StaxStreamFilterTest.java | 2 +-
coverage/pom.xml | 2 +-
distribution/javadoc/pom.xml | 46 +++----
distribution/manifest/pom.xml | 94 ++++++-------
distribution/pom.xml | 122 ++++++++---------
distribution/src/main/release/release_notes.txt | 29 ++--
.../src/main/release/samples/aegis/pom.xml | 10 +-
.../main/release/samples/aegis_standalone/pom.xml | 4 +-
.../src/main/release/samples/callback/pom.xml | 10 +-
.../samples/configuration_interceptor/pom.xml | 10 +-
.../src/main/release/samples/corba/bank/pom.xml | 4 +-
.../samples/corba/bank_ws_addressing/pom.xml | 4 +-
.../main/release/samples/corba/hello_world/pom.xml | 10 +-
.../release/samples/groovy_spring_support/pom.xml | 8 +-
.../main/release/samples/in_jvm_transport/pom.xml | 10 +-
.../main/release/samples/java_first_jaxws/pom.xml | 8 +-
.../samples/java_first_jaxws_factory_bean/pom.xml | 8 +-
.../main/release/samples/java_first_jms/pom.xml | 6 +-
.../main/release/samples/java_first_pojo/pom.xml | 8 +-
.../samples/java_first_spring_support/pom.xml | 8 +-
.../src/main/release/samples/jax_rs/basic/pom.xml | 8 +-
.../samples/jax_rs/basic_http2_jetty/pom.xml | 6 +-
.../samples/jax_rs/basic_http2_netty/pom.xml | 6 +-
.../samples/jax_rs/basic_http2_undertow/pom.xml | 6 +-
.../release/samples/jax_rs/basic_https/pom.xml | 8 +-
.../main/release/samples/jax_rs/basic_oidc/pom.xml | 10 +-
.../main/release/samples/jax_rs/big_query/pom.xml | 14 +-
.../samples/jax_rs/content_negotiation/pom.xml | 10 +-
.../pom.xml | 2 +-
.../samples/jax_rs/description_openapi_v3/pom.xml | 2 +-
.../jax_rs/description_openapi_v3_spring/pom.xml | 2 +-
.../jax_rs/description_openapi_v3_web/pom.xml | 2 +-
.../release/samples/jax_rs/graalvm_basic/pom.xml | 2 +-
.../src/main/release/samples/jax_rs/odata/pom.xml | 6 +-
.../src/main/release/samples/jax_rs/search/pom.xml | 14 +-
.../release/samples/jax_rs/spring_boot/pom.xml | 8 +-
.../jax_rs/spring_boot_scan/application/pom.xml | 6 +-
.../samples/jax_rs/spring_boot_scan/client/pom.xml | 6 +-
.../spring_boot_scan/eureka-registry/pom.xml | 2 +-
.../release/samples/jax_rs/spring_security/pom.xml | 8 +-
.../main/release/samples/jax_rs/sse_cdi/pom.xml | 8 +-
.../main/release/samples/jax_rs/sse_client/pom.xml | 8 +-
.../main/release/samples/jax_rs/sse_spring/pom.xml | 6 +-
.../main/release/samples/jax_rs/sse_tomcat/pom.xml | 6 +-
.../release/samples/jax_rs/tracing_brave/pom.xml | 4 +-
.../samples/jax_rs/tracing_micrometer/pom.xml | 14 +-
.../samples/jax_rs/tracing_opentelemetry/pom.xml | 14 +-
.../jax_rs/tracing_opentelemetry_camel/pom.xml | 2 +-
.../samples/jax_rs/tracing_opentracing/pom.xml | 14 +-
.../main/release/samples/jax_rs/websocket/pom.xml | 10 +-
.../release/samples/jax_rs/websocket_web/pom.xml | 2 +-
.../samples/jax_server_aegis_client/pom.xml | 10 +-
.../src/main/release/samples/jaxws_async/pom.xml | 14 +-
.../samples/jaxws_dispatch_provider/pom.xml | 10 +-
.../src/main/release/samples/jaxws_graalvm/pom.xml | 4 +-
.../samples/jaxws_graalvm_dynamic/client/pom.xml | 2 +-
.../samples/jaxws_graalvm_dynamic/server/pom.xml | 4 +-
.../main/release/samples/jaxws_handlers/pom.xml | 10 +-
.../main/release/samples/jaxws_spring_boot/pom.xml | 6 +-
.../src/main/release/samples/jms_pubsub/pom.xml | 4 +-
.../src/main/release/samples/jms_queue/pom.xml | 8 +-
.../src/main/release/samples/jms_spec_demo/pom.xml | 8 +-
.../main/release/samples/jms_spring_config/pom.xml | 4 +-
.../samples/js_browser_client_java_first/pom.xml | 10 +-
.../samples/js_browser_client_simple/pom.xml | 12 +-
.../src/main/release/samples/js_client/pom.xml | 12 +-
.../src/main/release/samples/js_provider/pom.xml | 10 +-
distribution/src/main/release/samples/mtom/pom.xml | 10 +-
.../main/release/samples/performance/base/pom.xml | 2 +-
.../main/release/samples/performance/jaxrs/pom.xml | 2 +-
.../samples/performance/soap_http_doc_lit/pom.xml | 2 +-
distribution/src/main/release/samples/pom.xml | 6 +-
.../main/release/samples/restful_dispatch/pom.xml | 10 +-
.../release/samples/ruby_spring_support/pom.xml | 10 +-
.../src/main/release/samples/soap_header/pom.xml | 10 +-
distribution/src/main/release/samples/sts/pom.xml | 20 +--
.../src/main/release/samples/throttling/pom.xml | 16 +--
.../src/main/release/samples/ws_addressing/pom.xml | 10 +-
.../src/main/release/samples/ws_discovery/pom.xml | 14 +-
.../src/main/release/samples/ws_eventing/pom.xml | 12 +-
.../main/release/samples/ws_notification/pom.xml | 2 +-
.../src/main/release/samples/ws_policy/pom.xml | 10 +-
.../src/main/release/samples/ws_rm/pom.xml | 12 +-
.../release/samples/ws_security/sign_enc/pom.xml | 20 +--
.../samples/ws_security/sign_enc_policy/pom.xml | 16 +--
.../main/release/samples/ws_security/ut/pom.xml | 12 +-
.../release/samples/ws_security/ut_policy/pom.xml | 16 +--
.../release/samples/ws_transaction/client/pom.xml | 2 +-
.../main/release/samples/ws_transaction/pom.xml | 6 +-
.../samples/ws_transaction/ws_first/pom.xml | 2 +-
.../samples/ws_transaction/ws_second/pom.xml | 2 +-
.../src/main/release/samples/wsdl_first/pom.xml | 20 +--
.../samples/wsdl_first_dynamic_client/pom.xml | 10 +-
.../main/release/samples/wsdl_first_https/pom.xml | 12 +-
.../release/samples/wsdl_first_pure_xml/pom.xml | 10 +-
.../main/release/samples/wsdl_first_rpclit/pom.xml | 10 +-
.../main/release/samples/wsdl_first_soap12/pom.xml | 10 +-
.../release/samples/wsdl_first_xml_wrapped/pom.xml | 10 +-
integration/cdi/pom.xml | 2 +-
integration/jca/pom.xml | 2 +-
.../core/classloader/PlugInClassLoaderHelper.java | 7 +-
.../AbstractManagedConnectionImpl.java | 5 +-
.../jca/core/resourceadapter/UriHandlerInit.java | 2 +-
integration/pom.xml | 2 +-
integration/spring-boot/autoconfigure/pom.xml | 2 +-
integration/spring-boot/pom.xml | 2 +-
integration/spring-boot/starter-jaxrs/pom.xml | 2 +-
integration/spring-boot/starter-jaxws/pom.xml | 2 +-
integration/tracing/tracing-brave/pom.xml | 2 +-
integration/tracing/tracing-micrometer/pom.xml | 2 +-
integration/tracing/tracing-opentelemetry/pom.xml | 2 +-
integration/tracing/tracing-opentracing/pom.xml | 2 +-
maven-plugins/archetypes/cxf-jaxrs-service/pom.xml | 2 +-
.../archetypes/cxf-jaxws-javafirst/pom.xml | 4 +-
.../archetypes/cxf-jaxws-wsdlfirst/pom.xml | 2 +-
maven-plugins/archetypes/pom.xml | 2 +-
maven-plugins/codegen-plugin/pom.xml | 2 +-
maven-plugins/corba/pom.xml | 2 +-
maven-plugins/java2wadl-plugin/pom.xml | 4 +-
maven-plugins/java2ws-plugin/pom.xml | 2 +-
maven-plugins/pom.xml | 2 +-
maven-plugins/wadl2java-plugin/pom.xml | 2 +-
maven-plugins/wsdl-validator-plugin/pom.xml | 2 +-
parent/pom.xml | 18 +--
pom.xml | 4 +-
rt/bindings/coloc/pom.xml | 2 +-
rt/bindings/corba/pom.xml | 2 +-
rt/bindings/pom.xml | 2 +-
rt/bindings/soap/pom.xml | 2 +-
rt/bindings/xml/pom.xml | 2 +-
rt/databinding/aegis/pom.xml | 2 +-
rt/databinding/jaxb/pom.xml | 2 +-
rt/databinding/pom.xml | 2 +-
rt/features/clustering/pom.xml | 2 +-
rt/features/logging/pom.xml | 2 +-
rt/features/metrics/pom.xml | 2 +-
rt/features/pom.xml | 2 +-
rt/features/throttling/pom.xml | 2 +-
rt/frontend/jaxrs/pom.xml | 2 +-
rt/frontend/jaxws/pom.xml | 2 +-
rt/frontend/js/pom.xml | 2 +-
rt/frontend/pom.xml | 2 +-
rt/frontend/simple/pom.xml | 2 +-
rt/javascript/javascript-rt/pom.xml | 2 +-
rt/javascript/javascript-tests/pom.xml | 2 +-
rt/javascript/pom.xml | 2 +-
rt/management/pom.xml | 2 +-
rt/pom.xml | 2 +-
rt/rs/client/pom.xml | 2 +-
rt/rs/description-common-openapi/pom.xml | 2 +-
rt/rs/description-microprofile-openapi/pom.xml | 2 +-
rt/rs/description-openapi-v3/pom.xml | 2 +-
rt/rs/description-swagger-ui/pom.xml | 2 +-
rt/rs/description/pom.xml | 2 +-
rt/rs/extensions/json-basic/pom.xml | 2 +-
.../json/basic/JsonMapObjectReaderWriter.java | 11 +-
rt/rs/extensions/providers/pom.xml | 2 +-
rt/rs/extensions/reactivestreams/pom.xml | 2 +-
rt/rs/extensions/reactor/pom.xml | 2 +-
rt/rs/extensions/rx/pom.xml | 2 +-
rt/rs/extensions/rx2/pom.xml | 2 +-
rt/rs/extensions/rx3/pom.xml | 2 +-
rt/rs/extensions/search/pom.xml | 2 +-
rt/rs/http-sci/pom.xml | 2 +-
rt/rs/microprofile-client/pom.xml | 2 +-
rt/rs/pom.xml | 2 +-
rt/rs/security/cors/pom.xml | 2 +-
rt/rs/security/http-signature/pom.xml | 2 +-
.../rs/security/httpsignature/DigestVerifier.java | 5 +-
.../rs/security/httpsignature/MessageVerifier.java | 6 +-
.../filters/CreateSignatureInterceptor.java | 3 +-
.../filters/VerifySignatureFilter.java | 2 +-
.../httpsignature/utils/SignatureHeaderUtils.java | 9 +-
.../security/httpsignature/SpecExamplesTest.java | 15 ++-
rt/rs/security/jose-parent/jose-jaxrs/pom.xml | 2 +-
.../jaxrs/AbstractJwtAuthenticationFilter.java | 36 ++++-
.../jose/jaxrs/JwtAuthenticationFilterTest.java | 148 +++++++++++++++++++++
rt/rs/security/jose-parent/jose/pom.xml | 2 +-
.../apache/cxf/rs/security/jose/jwk/JwkUtils.java | 37 +++++-
.../apache/cxf/rs/security/jose/jws/JwsUtils.java | 9 +-
.../apache/cxf/rs/security/jose/jwt/JwtUtils.java | 18 ++-
.../cxf/rs/security/jose/jws/JwsUtilsTest.java | 112 ++++++++++++++++
rt/rs/security/jose-parent/pom.xml | 2 +-
rt/rs/security/oauth-parent/oauth2-saml/pom.xml | 2 +-
rt/rs/security/oauth-parent/oauth2/pom.xml | 2 +-
.../oauth2/filters/JwtAccessTokenValidator.java | 17 ++-
.../oauth2/filters/OAuthRequestFilter.java | 17 ++-
.../oauth2/grants/jwt/AbstractJwtHandler.java | 3 +-
.../oauth2/grants/jwt/JwtBearerAuthHandler.java | 3 +-
.../filters/JwtAccessTokenValidatorTest.java | 33 +++++
.../oauth2/filters/OAuthRequestFilterTest.java | 95 +++++++++++++
.../grants/jwt/JwtBearerGrantHandlerTest.java | 32 ++++-
rt/rs/security/oauth-parent/pom.xml | 2 +-
rt/rs/security/pom.xml | 2 +-
rt/rs/security/sso/oidc/pom.xml | 2 +-
rt/rs/security/sso/saml/pom.xml | 2 +-
rt/rs/security/xml/pom.xml | 2 +-
rt/rs/sse/pom.xml | 2 +-
rt/security-saml/pom.xml | 2 +-
rt/security/pom.xml | 2 +-
rt/transports/http-hc/pom.xml | 2 +-
rt/transports/http-hc5/pom.xml | 2 +-
rt/transports/http-jetty/pom.xml | 2 +-
rt/transports/http-netty/netty-client/pom.xml | 2 +-
rt/transports/http-netty/netty-server/pom.xml | 2 +-
rt/transports/http-undertow/pom.xml | 2 +-
rt/transports/http/pom.xml | 2 +-
.../cxf/transport/http/HttpClientHTTPConduit.java | 7 +
.../http/HttpClientHTTPConduitResendLoopTest.java | 141 ++++++++++++++++++++
rt/transports/jms/pom.xml | 2 +-
rt/transports/local/pom.xml | 2 +-
rt/transports/pom.xml | 2 +-
rt/transports/udp/pom.xml | 2 +-
rt/transports/websocket/pom.xml | 2 +-
rt/ws/addr/pom.xml | 2 +-
rt/ws/eventing/pom.xml | 2 +-
rt/ws/mex/pom.xml | 2 +-
rt/ws/policy/pom.xml | 2 +-
.../org/apache/cxf/ws/policy/PolicyEngineImpl.java | 7 +-
rt/ws/pom.xml | 2 +-
rt/ws/rm/pom.xml | 2 +-
rt/ws/security/pom.xml | 2 +-
.../policyhandlers/AbstractBindingBuilder.java | 6 +-
.../security/wss4j/SignatureConfirmationTest.java | 4 +-
rt/ws/transfer/pom.xml | 2 +-
rt/wsdl/pom.xml | 2 +-
services/pom.xml | 2 +-
services/sts/pom.xml | 2 +-
services/sts/sts-core/pom.xml | 2 +-
.../cxf/sts/operation/IssueSamlUnitTest.java | 7 +-
services/sts/systests/advanced/pom.xml | 2 +-
services/sts/systests/basic/pom.xml | 2 +-
services/sts/systests/pom.xml | 2 +-
services/sts/systests/sts-osgi/pom.xml | 2 +-
services/ws-discovery/pom.xml | 2 +-
services/ws-discovery/ws-discovery-api/pom.xml | 2 +-
services/ws-discovery/ws-discovery-service/pom.xml | 2 +-
services/wsn/pom.xml | 2 +-
services/wsn/wsn-api/pom.xml | 2 +-
services/wsn/wsn-core/pom.xml | 2 +-
services/wsn/wsn-osgi/pom.xml | 2 +-
services/xkms/pom.xml | 2 +-
services/xkms/xkms-client/pom.xml | 2 +-
services/xkms/xkms-common/pom.xml | 2 +-
services/xkms/xkms-service/pom.xml | 2 +-
services/xkms/xkms-war/pom.xml | 2 +-
services/xkms/xkms-x509-handlers/pom.xml | 2 +-
services/xkms/xkms-x509-repo-ldap/pom.xml | 2 +-
systests/cdi/base/pom.xml | 2 +-
systests/cdi/cdi-owb/cdi-multiple-apps-owb/pom.xml | 2 +-
systests/cdi/cdi-owb/cdi-no-apps-owb/pom.xml | 2 +-
systests/cdi/cdi-owb/cdi-producers-owb/pom.xml | 2 +-
systests/cdi/cdi-owb/pom.xml | 2 +-
.../cdi/cdi-weld/cdi-multiple-apps-weld/pom.xml | 2 +-
systests/cdi/cdi-weld/cdi-no-apps-weld/pom.xml | 2 +-
systests/cdi/cdi-weld/cdi-producers-weld/pom.xml | 2 +-
systests/cdi/cdi-weld/pom.xml | 2 +-
systests/cdi/pom.xml | 2 +-
systests/container-integration/grizzly/pom.xml | 2 +-
systests/container-integration/pom.xml | 2 +-
systests/container-integration/webapp/pom.xml | 2 +-
systests/databinding/pom.xml | 2 +-
systests/forked/pom.xml | 2 +-
systests/jaxrs/pom.xml | 2 +-
systests/jaxws/pom.xml | 2 +-
systests/kerberos/pom.xml | 2 +-
systests/ldap/pom.xml | 2 +-
systests/microprofile/client/async/pom.xml | 2 +-
.../microprofile/rest/client/AsyncMethodTest.java | 5 +-
systests/microprofile/client/jaxrs/pom.xml | 2 +-
systests/microprofile/client/nocdi/pom.xml | 2 +-
systests/microprofile/client/tracing/pom.xml | 2 +-
systests/microprofile/client/weld/pom.xml | 2 +-
systests/microprofile/pom.xml | 2 +-
systests/pom.xml | 2 +-
systests/rs-http-sci/pom.xml | 2 +-
systests/rs-security/pom.xml | 2 +-
.../security/oauth2/grants/JAXRSOAuth2Test.java | 21 +++
systests/rs-sse/pom.xml | 2 +-
systests/rs-sse/rs-sse-base/pom.xml | 2 +-
systests/rs-sse/rs-sse-jetty/pom.xml | 2 +-
systests/rs-sse/rs-sse-tomcat/pom.xml | 2 +-
systests/rs-sse/rs-sse-undertow/pom.xml | 2 +-
systests/spring-boot/pom.xml | 2 +-
systests/tracing/pom.xml | 2 +-
systests/transport-hc5/pom.xml | 2 +-
systests/transport-jms/pom.xml | 2 +-
systests/transport-netty/pom.xml | 2 +-
systests/transport-undertow/pom.xml | 2 +-
systests/transports/pom.xml | 2 +-
systests/uncategorized/pom.xml | 2 +-
systests/ws-rm/pom.xml | 2 +-
systests/ws-security-examples/pom.xml | 2 +-
systests/ws-security/pom.xml | 2 +-
systests/ws-specs/pom.xml | 2 +-
systests/ws-transfer/pom.xml | 2 +-
systests/wsdl_maven/codegen/pom.xml | 2 +-
systests/wsdl_maven/java2ws/pom.xml | 2 +-
systests/wsdl_maven/pom.xml | 2 +-
tck/cxf-tck/pom.xml | 2 +-
testutils/pom.xml | 2 +-
tools/common/pom.xml | 2 +-
.../cxf/tools/common/model/JavaInterface.java | 7 +-
.../apache/cxf/tools/common/model/JavaModel.java | 3 +-
.../common/toolspec/parser/BadUsageException.java | 2 +-
.../common/toolspec/parser/CommandDocument.java | 7 +-
tools/corba/pom.xml | 2 +-
.../tools/corba/common/CorbaPrimitiveMapTest.java | 3 +-
tools/javato/pom.xml | 2 +-
tools/javato/ws/pom.xml | 2 +-
tools/pom.xml | 2 +-
tools/validator/pom.xml | 2 +-
tools/wadlto/jaxrs/pom.xml | 2 +-
tools/wadlto/pom.xml | 2 +-
tools/wsdlto/core/pom.xml | 2 +-
tools/wsdlto/databinding/jaxb/pom.xml | 2 +-
tools/wsdlto/frontend/javascript/pom.xml | 2 +-
tools/wsdlto/frontend/jaxws/pom.xml | 2 +-
.../customization/JAXWSBindingSerializer.java | 3 +-
tools/wsdlto/misc/pom.xml | 2 +-
.../misc/processor/WSDLToSoapProcessorTest.java | 4 +-
tools/wsdlto/pom.xml | 2 +-
tools/wsdlto/test/pom.xml | 2 +-
330 files changed, 1537 insertions(+), 782 deletions(-)
create mode 100644
rt/rs/security/jose-parent/jose-jaxrs/src/test/java/org/apache/cxf/rs/security/jose/jaxrs/JwtAuthenticationFilterTest.java
create mode 100644
rt/transports/http/src/test/java/org/apache/cxf/transport/http/HttpClientHTTPConduitResendLoopTest.java
