commits  

Messages by Thread

• (shiro) branch dependabot/maven/arquillian.core.version-1.10.2.Final deleted (was a1ebf6064) github-bot
• (shiro) branch main updated: chore(deps-dev): bump arquillian.core.version (#2722) steinarb
• (shiro) branch dependabot/github_actions/github-actions-dependencies-1ec6b7b1c2 deleted (was c18521051) github-bot
• (shiro) branch main updated: chore(deps): bump org.apache.commons:commons-configuration2 (#2724) steinarb
• (shiro) branch main updated: chore(deps): bump the github-actions-dependencies group with 3 updates (#2723) steinarb
• (shiro) branch dependabot/maven/org.omnifaces-omnifaces-3.14.21 deleted (was 1bd71d6ed) github-bot
• (shiro) branch dependabot/maven/org.apache.commons-commons-configuration2-2.15.1 deleted (was 2f530ae07) github-bot
• (shiro) branch main updated: chore(deps): bump org.omnifaces:omnifaces from 3.14.20 to 3.14.21 (#2725) steinarb
• (shiro) branch dependabot/maven/com.github.siom79.japicmp-japicmp-maven-plugin-0.26.0 deleted (was bfe9db9f7) github-bot
• (shiro) branch main updated (0aed6eee9 -> e1a4128b6) steinarb
• (shiro) branch dependabot/maven/org.apache.cxf-cxf-bom-3.6.11 deleted (was 62f0a5cc6) github-bot
• (shiro) branch main updated: chore(deps): bump org.apache.cxf:cxf-bom from 3.6.10 to 3.6.11 (#2728) steinarb
• (shiro) branch dependabot/maven/org.apache.cxf-cxf-rt-rs-client-3.6.11 deleted (was ff97b28ab) github-bot
• (shiro) branch main updated: chore(deps): bump org.apache.cxf:cxf-rt-rs-client from 3.6.10 to 3.6.11 (#2729) steinarb
• (shiro) branch 3.x updated (0f4bfc6f8 -> 4088694b1) lprimak
  • (shiro) 01/01: Merge branch 'main' into 3.x lprimak
• (shiro) branch main updated: Using Rdn.escapeValues() lprimak
• (shiro) branch 3.x updated: Using Rdn.escapeValues() lprimak
• (shiro) branch dependabot/maven/org.apache.johnzon-johnzon-jsonb-1.3.0 deleted (was 36aa07673) github-bot
• (shiro) branch main updated (dbad41af1 -> 31fbdb81c) fpapon
  • (shiro) 01/01: Merge pull request #2698 from apache/dependabot/maven/org.apache.johnzon-johnzon-jsonb-1.3.0 fpapon
• (shiro) branch 3.x updated (07a65c9a9 -> 4f4001083) lprimak
  • (shiro) 01/01: Merge branch 'main' into 3.x lprimak
• (shiro-site) branch asf-site updated: 2.2 release lprimak
• (shiro-site) branch main updated: enh: made alpha release optional lprimak
• (shiro) branch dependabot/maven/org.htmlunit-htmlunit-5.0.0 deleted (was 9394c7fbf) github-bot
• (shiro) branch dependabot/maven/org.apache.cxf-cxf-rt-frontend-jaxrs-3.6.11 created (now 9efd1efbb) github-bot
• (shiro) branch dependabot/maven/org.apache.cxf-cxf-rt-rs-client-3.6.11 created (now ff97b28ab) github-bot
• [PR] chore(deps): bump org.apache.cxf:cxf-rt-rs-client from 3.6.10 to 3.6.11 [shiro] via GitHub
  • Re: [PR] chore(deps): bump org.apache.cxf:cxf-rt-rs-client from 3.6.10 to 3.6.11 [shiro] via GitHub
• (shiro) branch dependabot/maven/org.apache.cxf-cxf-bom-3.6.11 created (now 62f0a5cc6) github-bot
• [PR] chore(deps): bump org.apache.cxf:cxf-bom from 3.6.10 to 3.6.11 [shiro] via GitHub
  • Re: [PR] chore(deps): bump org.apache.cxf:cxf-bom from 3.6.10 to 3.6.11 [shiro] via GitHub
• (shiro) branch dependabot/maven/com.github.siom79.japicmp-japicmp-maven-plugin-0.26.0 created (now bfe9db9f7) github-bot
• [PR] chore(deps): bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.25.7 to 0.26.0 [shiro] via GitHub
  • Re: [PR] chore(deps): bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.25.7 to 0.26.0 [shiro] via GitHub
• (shiro) branch dependabot/maven/org.htmlunit-htmlunit-5.0.0 created (now 9394c7fbf) github-bot
• [PR] chore(deps): bump org.htmlunit:htmlunit from 4.21.0 to 5.0.0 [shiro] via GitHub
  • Re: [PR] chore(deps): bump org.htmlunit:htmlunit from 4.21.0 to 5.0.0 [shiro] via GitHub
  • Re: [PR] chore(deps): bump org.htmlunit:htmlunit from 4.21.0 to 5.0.0 [shiro] via GitHub
• [PR] chore(deps): bump org.omnifaces:omnifaces from 3.14.20 to 3.14.21 [shiro] via GitHub
  • Re: [PR] chore(deps): bump org.omnifaces:omnifaces from 3.14.20 to 3.14.21 [shiro] via GitHub
• (shiro) branch dependabot/maven/org.omnifaces-omnifaces-3.14.21 created (now 1bd71d6ed) github-bot
• (shiro) branch dependabot/maven/org.apache.commons-commons-configuration2-2.15.1 created (now 2f530ae07) github-bot
• [PR] chore(deps): bump org.apache.commons:commons-configuration2 from 2.15.0 to 2.15.1 [shiro] via GitHub
  • Re: [PR] chore(deps): bump org.apache.commons:commons-configuration2 from 2.15.0 to 2.15.1 [shiro] via GitHub
• (shiro) branch dependabot/maven/arquillian.core.version-1.10.2.Final created (now a1ebf6064) github-bot
• (shiro) branch dependabot/github_actions/github-actions-dependencies-1ec6b7b1c2 created (now c18521051) github-bot
• [PR] chore(deps-dev): bump arquillian.core.version from 1.10.1.Final to 1.10.2.Final [shiro] via GitHub
  • Re: [PR] chore(deps-dev): bump arquillian.core.version from 1.10.1.Final to 1.10.2.Final [shiro] via GitHub
• [PR] chore(deps-dev): bump org.apache.cxf:cxf-rt-frontend-jaxrs from 3.6.10 to 3.6.11 [shiro] via GitHub
  • Re: [PR] chore(deps-dev): bump org.apache.cxf:cxf-rt-frontend-jaxrs from 3.6.10 to 3.6.11 [shiro] via GitHub
• (shiro) branch dependabot/github_actions/github-actions-dependencies-10fd86e523 deleted (was ebb1d2fb4) github-bot
• (shiro) branch main updated (91a69dcc9 -> dbad41af1) fpapon
  • (shiro) 01/01: Merge pull request #2696 from apache/dependabot/github_actions/github-actions-dependencies-10fd86e523 fpapon
• (shiro) branch dependabot/maven/log4j.version-2.26.0 deleted (was 9f3528313) github-bot
• (shiro) branch main updated (164cb1ef4 -> 91a69dcc9) fpapon
  • (shiro) 01/01: Merge pull request #2697 from apache/dependabot/maven/log4j.version-2.26.0 fpapon
• (shiro) branch main updated (be6769800 -> 164cb1ef4) fpapon
  • (shiro) 01/01: Merge pull request #2702 from potiuk/asf-security/agents-md-security-link-2026-05-14 fpapon
• (shiro-site) branch main updated: [release] Announce 2.2.0 (#306) fpapon
• (shiro) branch dependabot/maven/log4j.version-2.26.0 updated (3aa88c433 -> 9f3528313) github-bot
• (shiro) branch dependabot/maven/slf4j.version-2.0.18 deleted (was 7cd0b1c43) github-bot
• (shiro) branch main updated (c589bb19c -> be6769800) fpapon
  • (shiro) 01/01: Merge pull request #2694 from apache/dependabot/maven/slf4j.version-2.0.18 fpapon
• (shiro) branch dependabot/maven/com.github.siom79.japicmp-japicmp-maven-plugin-0.25.7 deleted (was 5f13983cc) fpapon
• (shiro) branch main updated (eda402277 -> c589bb19c) fpapon
  • (shiro) 01/01: Merge pull request #2699 from apache/dependabot/maven/com.github.siom79.japicmp-japicmp-maven-plugin-0.25.7 fpapon
• (shiro) branch dependabot/maven/org.apache-apache-38 deleted (was 4fb4cbbdc) fpapon
• (shiro) branch main updated (9371115fe -> eda402277) fpapon
  • (shiro) 01/01: Merge pull request #2700 from apache/dependabot/maven/org.apache-apache-38 fpapon
• [PR] Session versioning support [shiro] via GitHub
  • Re: [PR] Session versioning support [shiro] via GitHub
  • Re: [PR] Session versioning support [shiro] via GitHub
  • Re: [PR] Session versioning support [shiro] via GitHub
• (shiro-site) branch asf-site updated: update: security model lprimak
• (shiro-site) branch main updated: security-model.adoc: draft additions for adversary model, known non-findings, triage dispositions (#302) lprimak
• (shiro-site) branch dependabot/maven/asm.version-9.10.1 deleted (was e193c77e9) github-bot
• (shiro-site) branch main updated: build(deps): bump asm.version from 9.10 to 9.10.1 (#305) lprimak
• (shiro-site) branch dependabot/maven/asm.version-9.10.1 created (now e193c77e9) github-bot
• (shiro-site) branch asf-site updated: update CVEs May 23 2026 lprimak
• (shiro-site) branch main updated (6e7668d79 -> b8547cd70) lprimak
  • (shiro-site) 01/02: enh: update Apache Shiro vulnerability reports for CVE-2026-48589, CVE-2026-44598, CVE-2026-43827, and CVE-2026-43828 lprimak
  • (shiro-site) 02/02: bugfix: update spring matching strategy from markdown to asciidoc format lprimak
• (shiro) branch 3.x updated (169a49825 -> 07a65c9a9) lprimak
  • (shiro) 02/04: bugfix: session attributes survive id rotation in native session mode fixes #2710 lprimak
  • (shiro) 01/04: make sure subject's session gets fully cleared fix for #2704 lprimak
  • (shiro) 03/04: Merge branch 'session-fixation' into 3.x lprimak
  • (shiro) 04/04: Merge branch 'main' into 3.x lprimak
• (shiro) branch main updated: [#2704] [#2710] Fixed Session fixation-related regressions (#2711) lprimak
• (shiro) branch main updated: chore(deps): bump org.apache.commons:commons-configuration2 (#2706) lprimak
• (shiro) branch dependabot/maven/org.apache.commons-commons-configuration2-2.15.0 deleted (was dcbac50b4) github-bot
• (shiro) branch main updated (c6af28cf4 -> bd278bcc3) lprimak
• (shiro) branch 3.x updated (6ae355c1e -> 169a49825) lprimak
  • (shiro) 02/03: enh(jakarta-ee): strip out the host part of the referer header lprimak
  • (shiro) 01/03: enh(jakarta-ee): strip out the host part of the referer header lprimak
  • (shiro) 03/03: Merge branch 'main' into 3.x lprimak
• [PR] [CI] Add pre-commit hook to validate the CITATION file; Add missing required field `message` [shiro] via GitHub
  • Re: [PR] [CI] Add pre-commit hook to validate the CITATION file; Add missing required field `message` [shiro] via GitHub
• [PR] [CI] Add hook to validate dependabot.yml with pre-commit [shiro] via GitHub
  • Re: [PR] [CI] Add hook to validate dependabot.yml with pre-commit [shiro] via GitHub
• [PR] bugfix(3.x): restore resource loading file:// and relative path funct… [shiro] via GitHub
  • Re: [PR] bugfix(3.x): restore resource loading file:// and relative path funct… [shiro] via GitHub
  • Re: [PR] bugfix(3.x): restore resource loading file:// and relative path funct… [shiro] via GitHub
  • Re: [PR] bugfix(3.x): restore resource loading file:// and relative path funct… [shiro] via GitHub
  • Re: [PR] bugfix(3.x): restore resource loading file:// and relative path funct… [shiro] via GitHub
  • Re: [PR] bugfix(3.x): restore resource loading file:// and relative path funct… [shiro] via GitHub
  • Re: [PR] bugfix(3.x): restore resource loading file:// and relative path funct… [shiro] via GitHub
  • Re: [PR] bugfix(3.x): restore resource loading file:// and relative path funct… [shiro] via GitHub
• (shiro-site) branch asf-site updated: no changes lprimak
• [PR] bugfix: using atomics for session updates [shiro] via GitHub
  • Re: [PR] [#2713] [3.0] bugfix: using atomics for session updates [shiro] via GitHub
  • Re: [PR] [#2713] [3.0] bugfix: using atomics for session updates [shiro] via GitHub
  • Re: [PR] [#2713] [3.0] bugfix: using atomics for session updates [shiro] via GitHub
  • Re: [PR] [#2713] [3.0] bugfix: using atomics for session updates [shiro] via GitHub
  • Re: [PR] [#2713] [3.0] bugfix: using atomics for session updates [shiro] via GitHub
  • Re: [PR] [#2713] [3.0] bugfix: using atomics for session updates [shiro] via GitHub
  • Re: [PR] [#2713] [3.0] bugfix: using atomics for session updates [shiro] via GitHub
  • Re: [PR] [#2713] [3.0] bugfix: Improve thread-safety of Shiro-native sessions by using Atomic* classes [shiro] via GitHub
  • Re: [PR] [#2713] [3.0] bugfix: Improve thread-safety of Shiro-native sessions by using Atomic* classes [shiro] via GitHub
• [PR] Session fixation [shiro] via GitHub
  • Re: [PR] [#2704] [#2710] [3.x] Fixed Session fixation-related regressions [shiro] via GitHub
  • Re: [PR] [#2704] [#2710] [3.x] Fixed Session fixation-related regressions [shiro] via GitHub
  • Re: [PR] [#2704] [#2710] [3.x] Fixed Session fixation-related regressions [shiro] via GitHub
  • Re: [PR] [#2704] [#2710] [3.x] Fixed Session fixation-related regressions [shiro] via GitHub
  • Re: [PR] [#2704] [#2710] Fixed Session fixation-related regressions [shiro] via GitHub
  • Re: [PR] [#2704] [#2710] Fixed Session fixation-related regressions [shiro] via GitHub
• (shiro-site) branch main updated (99e5b8dd3 -> 6e7668d79) lprimak
  • (shiro-site) 01/05: enh: added CVE-2026-43827 lprimak
  • (shiro-site) 02/05: enh: reverted secureInDev flag and sync'd with current system proeprties lprimak
  • (shiro-site) 03/05: added note to for servlet-managed sessions lprimak
  • (shiro-site) 05/05: security: added shiroSavedRequest cookie CVE lprimak
  • (shiro-site) 04/05: added unsecure cookies CVE lprimak
• (shiro) branch dependabot/maven/junit.version-6.1.0 deleted (was 530007149) github-bot
• (shiro) branch main updated: chore(deps): bump https://github.com/zizmorcore/zizmor-pre-commit (#2709) lprimak
• (shiro) branch dependabot/maven/junit.engine.version-6.1.0 deleted (was dc5f4c593) github-bot
• (shiro) branch dependabot/pre_commit/pre-commit-hooks-06c144ec33 deleted (was a6f7c54c3) github-bot
• [PR] chore(deps): bump https://github.com/zizmorcore/zizmor-pre-commit from v1.24.1 to 1.25.2 in the pre-commit-hooks group [shiro] via GitHub
  • Re: [PR] chore(deps): bump https://github.com/zizmorcore/zizmor-pre-commit from v1.24.1 to 1.25.2 in the pre-commit-hooks group [shiro] via GitHub
• (shiro) branch dependabot/pre_commit/pre-commit-hooks-06c144ec33 created (now a6f7c54c3) github-bot
• (shiro) branch dependabot/maven/junit.engine.version-6.1.0 created (now dc5f4c593) github-bot
• [PR] chore(deps-dev): bump junit.engine.version from 1.13.4 to 6.1.0 [shiro] via GitHub
  • Re: [PR] chore(deps-dev): bump junit.engine.version from 1.13.4 to 6.1.0 [shiro] via GitHub
  • Re: [PR] chore(deps-dev): bump junit.engine.version from 1.13.4 to 6.1.0 [shiro] via GitHub
• (shiro) branch dependabot/maven/junit.version-6.1.0 created (now 530007149) github-bot
• [PR] chore(deps): bump junit.version from 5.13.4 to 6.1.0 [shiro] via GitHub
  • Re: [PR] chore(deps): bump junit.version from 5.13.4 to 6.1.0 [shiro] via GitHub
  • Re: [PR] chore(deps): bump junit.version from 5.13.4 to 6.1.0 [shiro] via GitHub
• (shiro) branch dependabot/maven/org.apache.commons-commons-configuration2-2.15.0 created (now dcbac50b4) github-bot
• [PR] chore(deps): bump org.apache.commons:commons-configuration2 from 2.14.0 to 2.15.0 [shiro] via GitHub
  • Re: [PR] chore(deps): bump org.apache.commons:commons-configuration2 from 2.14.0 to 2.15.0 [shiro] via GitHub
• [PR] Switch pre-commit to ASF approved prek-action [shiro] via GitHub
  • Re: [PR] Switch pre-commit to ASF approved prek-action [shiro] via GitHub
• svn commit: r84591 - release/shiro/2.2.0 fpapon
• (shiro-site) branch infrastructure-ruleset-bot/default-branch-protection deleted (was 308066ed0) lprimak
• (shiro-site) branch main updated: Set up default protection ruleset for default and release branches (#304) lprimak
• (shiro-site) branch dependabot/maven/asm.version-9.10 deleted (was 2c4e839d1) github-bot
• (shiro-site) branch main updated: build(deps): bump asm.version from 9.9.1 to 9.10 (#303) lprimak
• (shiro-site) branch dependabot/maven/asm.version-9.10 created (now 2c4e839d1) github-bot
• [PR] Add AGENTS.md + SECURITY.md linking the project's security model [shiro] via GitHub
  • Re: [PR] Add AGENTS.md + SECURITY.md linking the project's security model [shiro] via GitHub
  • Re: [PR] Add AGENTS.md + SECURITY.md linking the project's security model [shiro] via GitHub
  • Re: [PR] Add AGENTS.md + SECURITY.md linking the project's security model [shiro] via GitHub
  • Re: [PR] Add AGENTS.md + SECURITY.md linking the project's security model [shiro] via GitHub
  • Re: [PR] Add AGENTS.md + SECURITY.md linking the project's security model [shiro] via GitHub
• (shiro) annotated tag shiro-root-2.2.0 updated (8454a317e -> 7fc3540a6) fpapon
• svn commit: r84530 - dev/shiro fpapon
• [PR] chore: add branch protection rules [shiro] via GitHub
  • Re: [PR] chore: add branch protection rules [shiro] via GitHub
  • Re: [PR] chore: add branch protection rules [shiro] via GitHub
  • Re: [PR] chore: add branch protection rules [shiro] via GitHub
• (shiro) branch dependabot/maven/groovy.version-5.0.6 deleted (was cc6c252fa) github-bot
• (shiro) branch dependabot/maven/tomcat.version-11.0.22 deleted (was 325d3e273) github-bot
• [PR] chore(deps): bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.25.6 to 0.25.7 [shiro] via GitHub
  • Re: [PR] chore(deps): bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.25.6 to 0.25.7 [shiro] via GitHub
• (shiro) branch dependabot/maven/org.apache-apache-38 created (now 4fb4cbbdc) github-bot
• (shiro) branch dependabot/maven/com.github.siom79.japicmp-japicmp-maven-plugin-0.25.7 created (now 5f13983cc) github-bot
• (shiro) branch dependabot/maven/org.apache.johnzon-johnzon-jsonb-1.3.0 created (now 36aa07673) github-bot
• (shiro) branch dependabot/github_actions/github-actions-dependencies-10fd86e523 created (now ebb1d2fb4) github-bot
• [PR] chore(deps): bump org.apache:apache from 37 to 38 [shiro] via GitHub
  • Re: [PR] chore(deps): bump org.apache:apache from 37 to 38 [shiro] via GitHub
  • [PR] chore(deps): bump org.apache:apache from 37 to 38 [shiro] via GitHub
  • Re: [PR] chore(deps): bump org.apache:apache from 37 to 38 [shiro] via GitHub
• (shiro) branch dependabot/maven/log4j.version-2.26.0 created (now 3aa88c433) github-bot
• [PR] chore(deps): bump org.apache.johnzon:johnzon-jsonb from 1.2.22 to 1.3.0 [shiro] via GitHub
  • Re: [PR] chore(deps): bump org.apache.johnzon:johnzon-jsonb from 1.2.22 to 1.3.0 [shiro] via GitHub
• [PR] chore(deps): bump log4j.version from 2.25.4 to 2.26.0 [shiro] via GitHub
  • Re: [PR] chore(deps): bump log4j.version from 2.25.4 to 2.26.0 [shiro] via GitHub
• (shiro) branch dependabot/maven/tomcat.version-11.0.22 created (now 325d3e273) github-bot
• [PR] chore(deps): bump the github-actions-dependencies group with 3 updates [shiro] via GitHub
  • Re: [PR] chore(deps): bump the github-actions-dependencies group with 3 updates [shiro] via GitHub
  • [PR] chore(deps): bump the github-actions-dependencies group with 3 updates [shiro] via GitHub
  • Re: [PR] chore(deps): bump the github-actions-dependencies group with 3 updates [shiro] via GitHub
  • [PR] chore(deps): bump the github-actions-dependencies group with 3 updates [shiro] via GitHub
  • Re: [PR] chore(deps): bump the github-actions-dependencies group with 3 updates [shiro] via GitHub
  • [PR] chore(deps): bump the github-actions-dependencies group with 3 updates [shiro] via GitHub
  • Re: [PR] chore(deps): bump the github-actions-dependencies group with 3 updates [shiro] via GitHub
• (shiro) branch dependabot/maven/slf4j.version-2.0.18 created (now 7cd0b1c43) github-bot
• [PR] chore(deps): bump slf4j.version from 2.0.17 to 2.0.18 [shiro] via GitHub
  • Re: [PR] chore(deps): bump slf4j.version from 2.0.17 to 2.0.18 [shiro] via GitHub

• Earlier messages
• Later messages