This is an automated email from the ASF dual-hosted git repository.
jungm pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tomee.git
The following commit(s) were added to refs/heads/main by this push:
new f2424acefb Minor: Regenerated BOMs for
875e7b9958ce210f643250af1859a8ef5f52d92b (#2986)
f2424acefb is described below
commit f2424acefb50718e2cb666f1e0e3b1942a04d359
Author: github-actions[bot]
<41898282+github-actions[bot]@users.noreply.github.com>
AuthorDate: Thu Oct 1 13:14:03 2026 +0200
Minor: Regenerated BOMs for 875e7b9958ce210f643250af1859a8ef5f52d92b (#2986)
Signed-off-by: GitHub <[email protected]>
Co-authored-by: rzo1 <[email protected]>
---
boms/tomee-microprofile-api/pom.xml | 2 +-
boms/tomee-microprofile/pom.xml | 85 ++++++++++++++++------------
boms/tomee-plume-api/pom.xml | 2 +-
boms/tomee-plume/pom.xml | 107 ++++++++++++++++++++----------------
boms/tomee-plus-api/pom.xml | 2 +-
boms/tomee-plus/pom.xml | 99 +++++++++++++++++++--------------
boms/tomee-webprofile-api/pom.xml | 2 +-
boms/tomee-webprofile/pom.xml | 43 ++++++++++-----
8 files changed, 201 insertions(+), 141 deletions(-)
diff --git a/boms/tomee-microprofile-api/pom.xml
b/boms/tomee-microprofile-api/pom.xml
index 51841f057f..c857df13e0 100644
--- a/boms/tomee-microprofile-api/pom.xml
+++ b/boms/tomee-microprofile-api/pom.xml
@@ -64,7 +64,7 @@
<dependency>
<groupId>org.apache.myfaces.core</groupId>
<artifactId>myfaces-api</artifactId>
- <version>4.1.3</version>
+ <version>4.1.4</version>
</dependency>
<dependency>
<groupId>org.apache.tomcat</groupId>
diff --git a/boms/tomee-microprofile/pom.xml b/boms/tomee-microprofile/pom.xml
index b0b6d6d111..ae5d77adf2 100644
--- a/boms/tomee-microprofile/pom.xml
+++ b/boms/tomee-microprofile/pom.xml
@@ -49,17 +49,17 @@
<dependency>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-core</artifactId>
- <version>2.22.2</version>
+ <version>2.22.3</version>
</dependency>
<dependency>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-databind</artifactId>
- <version>2.22.2</version>
+ <version>2.22.3</version>
</dependency>
<dependency>
<groupId>com.fasterxml.jackson.dataformat</groupId>
<artifactId>jackson-dataformat-yaml</artifactId>
- <version>2.22.2</version>
+ <version>2.22.3</version>
</dependency>
<dependency>
<groupId>com.fasterxml.woodstox</groupId>
@@ -104,7 +104,7 @@
<dependency>
<groupId>io.github.librewsdl4j</groupId>
<artifactId>libre-wsdl4j</artifactId>
- <version>1.12.0</version>
+ <version>1.13.0</version>
</dependency>
<dependency>
<groupId>io.github.rzo1.org.metatype.sxc</groupId>
@@ -359,22 +359,22 @@
<dependency>
<groupId>net.shibboleth</groupId>
<artifactId>shib-networking</artifactId>
- <version>9.1.3</version>
+ <version>9.2.3</version>
</dependency>
<dependency>
<groupId>net.shibboleth</groupId>
<artifactId>shib-security</artifactId>
- <version>9.1.3</version>
+ <version>9.2.3</version>
</dependency>
<dependency>
<groupId>net.shibboleth</groupId>
<artifactId>shib-support</artifactId>
- <version>9.1.3</version>
+ <version>9.2.3</version>
</dependency>
<dependency>
<groupId>net.shibboleth</groupId>
<artifactId>shib-velocity</artifactId>
- <version>9.1.3</version>
+ <version>9.2.3</version>
</dependency>
<dependency>
<groupId>org.apache.bval</groupId>
@@ -391,6 +391,11 @@
<artifactId>commons-pool2</artifactId>
<version>2.13.1</version>
</dependency>
+ <dependency>
+ <groupId>org.apache.commons</groupId>
+ <artifactId>commons-secure-xml</artifactId>
+ <version>1.0.0</version>
+ </dependency>
<dependency>
<groupId>org.apache.cxf</groupId>
<artifactId>cxf-core</artifactId>
@@ -534,17 +539,17 @@
<dependency>
<groupId>org.apache.myfaces.core</groupId>
<artifactId>myfaces-api</artifactId>
- <version>4.1.3</version>
+ <version>4.1.4</version>
</dependency>
<dependency>
<groupId>org.apache.myfaces.core</groupId>
<artifactId>myfaces-impl</artifactId>
- <version>4.1.3</version>
+ <version>4.1.4</version>
</dependency>
<dependency>
<groupId>org.apache.neethi</groupId>
<artifactId>neethi</artifactId>
- <version>3.2.3</version>
+ <version>3.2.4</version>
</dependency>
<dependency>
<groupId>org.apache.openjpa</groupId>
@@ -889,32 +894,32 @@
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-bindings</artifactId>
- <version>4.0.0</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-policy</artifactId>
- <version>4.0.0</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-ws-security-common</artifactId>
- <version>4.0.0</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-ws-security-dom</artifactId>
- <version>4.0.0</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-ws-security-policy-stax</artifactId>
- <version>4.0.0</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-ws-security-stax</artifactId>
- <version>4.0.0</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.xbean</groupId>
@@ -954,7 +959,7 @@
<dependency>
<groupId>org.bouncycastle</groupId>
<artifactId>bcprov-jdk18on</artifactId>
- <version>1.85</version>
+ <version>1.86</version>
</dependency>
<dependency>
<groupId>org.bouncycastle</groupId>
@@ -969,7 +974,7 @@
<dependency>
<groupId>org.cryptacular</groupId>
<artifactId>cryptacular</artifactId>
- <version>1.2.7</version>
+ <version>1.3.0</version>
</dependency>
<dependency>
<groupId>org.eclipse.angus</groupId>
@@ -1059,72 +1064,72 @@
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-core-api</artifactId>
- <version>5.1.3</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-core-impl</artifactId>
- <version>5.1.3</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-profile-api</artifactId>
- <version>5.1.3</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-saml-api</artifactId>
- <version>5.1.3</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-saml-impl</artifactId>
- <version>5.1.3</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-security-api</artifactId>
- <version>5.1.3</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-security-impl</artifactId>
- <version>5.1.3</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-soap-api</artifactId>
- <version>5.1.3</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-xacml-api</artifactId>
- <version>5.1.3</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-xacml-impl</artifactId>
- <version>5.1.3</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-xacml-saml-api</artifactId>
- <version>5.1.3</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-xacml-saml-impl</artifactId>
- <version>5.1.3</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-xmlsec-api</artifactId>
- <version>5.1.3</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-xmlsec-impl</artifactId>
- <version>5.1.3</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.ow2.asm</groupId>
@@ -1139,12 +1144,12 @@
<dependency>
<groupId>org.slf4j</groupId>
<artifactId>slf4j-api</artifactId>
- <version>2.0.18</version>
+ <version>2.0.20</version>
</dependency>
<dependency>
<groupId>org.slf4j</groupId>
<artifactId>slf4j-jdk14</artifactId>
- <version>2.0.18</version>
+ <version>2.0.20</version>
</dependency>
<dependency>
<groupId>org.snakeyaml</groupId>
@@ -1875,6 +1880,16 @@
</exclusion>
</exclusions>
</dependency>
+ <dependency>
+ <groupId>org.apache.commons</groupId>
+ <artifactId>commons-secure-xml</artifactId>
+ <exclusions>
+ <exclusion>
+ <artifactId>*</artifactId>
+ <groupId>*</groupId>
+ </exclusion>
+ </exclusions>
+ </dependency>
<dependency>
<groupId>org.apache.cxf</groupId>
<artifactId>cxf-core</artifactId>
diff --git a/boms/tomee-plume-api/pom.xml b/boms/tomee-plume-api/pom.xml
index a73b4a1411..8107f161a4 100644
--- a/boms/tomee-plume-api/pom.xml
+++ b/boms/tomee-plume-api/pom.xml
@@ -149,7 +149,7 @@
<dependency>
<groupId>org.glassfish</groupId>
<artifactId>jakarta.faces</artifactId>
- <version>4.1.14</version>
+ <version>4.1.17</version>
</dependency>
</dependencies>
</dependencyManagement>
diff --git a/boms/tomee-plume/pom.xml b/boms/tomee-plume/pom.xml
index c3d820ca75..c836092797 100644
--- a/boms/tomee-plume/pom.xml
+++ b/boms/tomee-plume/pom.xml
@@ -49,17 +49,17 @@
<dependency>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-core</artifactId>
- <version>2.22.2</version>
+ <version>2.22.3</version>
</dependency>
<dependency>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-databind</artifactId>
- <version>2.22.2</version>
+ <version>2.22.3</version>
</dependency>
<dependency>
<groupId>com.fasterxml.jackson.dataformat</groupId>
<artifactId>jackson-dataformat-yaml</artifactId>
- <version>2.22.2</version>
+ <version>2.22.3</version>
</dependency>
<dependency>
<groupId>com.fasterxml.woodstox</groupId>
@@ -104,7 +104,7 @@
<dependency>
<groupId>io.github.librewsdl4j</groupId>
<artifactId>libre-wsdl4j</artifactId>
- <version>1.12.0</version>
+ <version>1.13.0</version>
</dependency>
<dependency>
<groupId>io.github.rzo1.org.metatype.sxc</groupId>
@@ -364,57 +364,57 @@
<dependency>
<groupId>net.shibboleth</groupId>
<artifactId>shib-networking</artifactId>
- <version>9.1.3</version>
+ <version>9.2.3</version>
</dependency>
<dependency>
<groupId>net.shibboleth</groupId>
<artifactId>shib-security</artifactId>
- <version>9.1.3</version>
+ <version>9.2.3</version>
</dependency>
<dependency>
<groupId>net.shibboleth</groupId>
<artifactId>shib-support</artifactId>
- <version>9.1.3</version>
+ <version>9.2.3</version>
</dependency>
<dependency>
<groupId>net.shibboleth</groupId>
<artifactId>shib-velocity</artifactId>
- <version>9.1.3</version>
+ <version>9.2.3</version>
</dependency>
<dependency>
<groupId>org.apache.activemq.protobuf</groupId>
<artifactId>activemq-protobuf</artifactId>
- <version>6.3.1</version>
+ <version>6.3.2</version>
</dependency>
<dependency>
<groupId>org.apache.activemq</groupId>
<artifactId>activemq-broker</artifactId>
- <version>6.3.1</version>
+ <version>6.3.2</version>
</dependency>
<dependency>
<groupId>org.apache.activemq</groupId>
<artifactId>activemq-client</artifactId>
- <version>6.3.1</version>
+ <version>6.3.2</version>
</dependency>
<dependency>
<groupId>org.apache.activemq</groupId>
<artifactId>activemq-jdbc-store</artifactId>
- <version>6.3.1</version>
+ <version>6.3.2</version>
</dependency>
<dependency>
<groupId>org.apache.activemq</groupId>
<artifactId>activemq-kahadb-store</artifactId>
- <version>6.3.1</version>
+ <version>6.3.2</version>
</dependency>
<dependency>
<groupId>org.apache.activemq</groupId>
<artifactId>activemq-openwire-legacy</artifactId>
- <version>6.3.1</version>
+ <version>6.3.2</version>
</dependency>
<dependency>
<groupId>org.apache.activemq</groupId>
<artifactId>activemq-ra</artifactId>
- <version>6.3.1</version>
+ <version>6.3.2</version>
</dependency>
<dependency>
<groupId>org.apache.batchee</groupId>
@@ -436,6 +436,11 @@
<artifactId>commons-pool2</artifactId>
<version>2.13.1</version>
</dependency>
+ <dependency>
+ <groupId>org.apache.commons</groupId>
+ <artifactId>commons-secure-xml</artifactId>
+ <version>1.0.0</version>
+ </dependency>
<dependency>
<groupId>org.apache.cxf</groupId>
<artifactId>cxf-core</artifactId>
@@ -579,7 +584,7 @@
<dependency>
<groupId>org.apache.neethi</groupId>
<artifactId>neethi</artifactId>
- <version>3.2.3</version>
+ <version>3.2.4</version>
</dependency>
<dependency>
<groupId>org.apache.openjpa</groupId>
@@ -924,32 +929,32 @@
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-bindings</artifactId>
- <version>4.0.0</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-policy</artifactId>
- <version>4.0.0</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-ws-security-common</artifactId>
- <version>4.0.0</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-ws-security-dom</artifactId>
- <version>4.0.0</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-ws-security-policy-stax</artifactId>
- <version>4.0.0</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-ws-security-stax</artifactId>
- <version>4.0.0</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.xbean</groupId>
@@ -989,7 +994,7 @@
<dependency>
<groupId>org.bouncycastle</groupId>
<artifactId>bcprov-jdk18on</artifactId>
- <version>1.85</version>
+ <version>1.86</version>
</dependency>
<dependency>
<groupId>org.bouncycastle</groupId>
@@ -1004,7 +1009,7 @@
<dependency>
<groupId>org.cryptacular</groupId>
<artifactId>cryptacular</artifactId>
- <version>1.2.7</version>
+ <version>1.3.0</version>
</dependency>
<dependency>
<groupId>org.eclipse.angus</groupId>
@@ -1049,17 +1054,17 @@
<dependency>
<groupId>org.eclipse.persistence</groupId>
<artifactId>org.eclipse.persistence.core</artifactId>
- <version>5.0.1</version>
+ <version>5.0.2</version>
</dependency>
<dependency>
<groupId>org.eclipse.persistence</groupId>
<artifactId>org.eclipse.persistence.jpa.jpql</artifactId>
- <version>5.0.1</version>
+ <version>5.0.2</version>
</dependency>
<dependency>
<groupId>org.eclipse.persistence</groupId>
<artifactId>org.eclipse.persistence.jpa</artifactId>
- <version>5.0.1</version>
+ <version>5.0.2</version>
</dependency>
<dependency>
<groupId>org.fusesource.hawtbuf</groupId>
@@ -1084,7 +1089,7 @@
<dependency>
<groupId>org.glassfish</groupId>
<artifactId>jakarta.faces</artifactId>
- <version>4.1.14</version>
+ <version>4.1.17</version>
</dependency>
<dependency>
<groupId>org.hsqldb</groupId>
@@ -1119,82 +1124,82 @@
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-core-api</artifactId>
- <version>5.1.3</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-core-impl</artifactId>
- <version>5.1.3</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-profile-api</artifactId>
- <version>5.1.3</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-saml-api</artifactId>
- <version>5.1.3</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-saml-impl</artifactId>
- <version>5.1.3</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-security-api</artifactId>
- <version>5.1.3</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-security-impl</artifactId>
- <version>5.1.3</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-soap-api</artifactId>
- <version>5.1.3</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-xacml-api</artifactId>
- <version>5.1.3</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-xacml-impl</artifactId>
- <version>5.1.3</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-xacml-saml-api</artifactId>
- <version>5.1.3</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-xacml-saml-impl</artifactId>
- <version>5.1.3</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-xmlsec-api</artifactId>
- <version>5.1.3</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-xmlsec-impl</artifactId>
- <version>5.1.3</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.ow2.asm</groupId>
<artifactId>asm-commons</artifactId>
- <version>9.10</version>
+ <version>9.10.1</version>
</dependency>
<dependency>
<groupId>org.ow2.asm</groupId>
<artifactId>asm-tree</artifactId>
- <version>9.10</version>
+ <version>9.10.1</version>
</dependency>
<dependency>
<groupId>org.ow2.asm</groupId>
@@ -1209,12 +1214,12 @@
<dependency>
<groupId>org.slf4j</groupId>
<artifactId>slf4j-api</artifactId>
- <version>2.0.18</version>
+ <version>2.0.20</version>
</dependency>
<dependency>
<groupId>org.slf4j</groupId>
<artifactId>slf4j-jdk14</artifactId>
- <version>2.0.18</version>
+ <version>2.0.20</version>
</dependency>
<dependency>
<groupId>org.snakeyaml</groupId>
@@ -2035,6 +2040,16 @@
</exclusion>
</exclusions>
</dependency>
+ <dependency>
+ <groupId>org.apache.commons</groupId>
+ <artifactId>commons-secure-xml</artifactId>
+ <exclusions>
+ <exclusion>
+ <artifactId>*</artifactId>
+ <groupId>*</groupId>
+ </exclusion>
+ </exclusions>
+ </dependency>
<dependency>
<groupId>org.apache.cxf</groupId>
<artifactId>cxf-core</artifactId>
diff --git a/boms/tomee-plus-api/pom.xml b/boms/tomee-plus-api/pom.xml
index 8659869230..b8e82026a8 100644
--- a/boms/tomee-plus-api/pom.xml
+++ b/boms/tomee-plus-api/pom.xml
@@ -69,7 +69,7 @@
<dependency>
<groupId>org.apache.myfaces.core</groupId>
<artifactId>myfaces-api</artifactId>
- <version>4.1.3</version>
+ <version>4.1.4</version>
</dependency>
<dependency>
<groupId>org.apache.tomcat</groupId>
diff --git a/boms/tomee-plus/pom.xml b/boms/tomee-plus/pom.xml
index 0cc1cb1b7f..b44f277509 100644
--- a/boms/tomee-plus/pom.xml
+++ b/boms/tomee-plus/pom.xml
@@ -49,17 +49,17 @@
<dependency>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-core</artifactId>
- <version>2.22.2</version>
+ <version>2.22.3</version>
</dependency>
<dependency>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-databind</artifactId>
- <version>2.22.2</version>
+ <version>2.22.3</version>
</dependency>
<dependency>
<groupId>com.fasterxml.jackson.dataformat</groupId>
<artifactId>jackson-dataformat-yaml</artifactId>
- <version>2.22.2</version>
+ <version>2.22.3</version>
</dependency>
<dependency>
<groupId>com.fasterxml.woodstox</groupId>
@@ -104,7 +104,7 @@
<dependency>
<groupId>io.github.librewsdl4j</groupId>
<artifactId>libre-wsdl4j</artifactId>
- <version>1.12.0</version>
+ <version>1.13.0</version>
</dependency>
<dependency>
<groupId>io.github.rzo1.org.metatype.sxc</groupId>
@@ -364,57 +364,57 @@
<dependency>
<groupId>net.shibboleth</groupId>
<artifactId>shib-networking</artifactId>
- <version>9.1.3</version>
+ <version>9.2.3</version>
</dependency>
<dependency>
<groupId>net.shibboleth</groupId>
<artifactId>shib-security</artifactId>
- <version>9.1.3</version>
+ <version>9.2.3</version>
</dependency>
<dependency>
<groupId>net.shibboleth</groupId>
<artifactId>shib-support</artifactId>
- <version>9.1.3</version>
+ <version>9.2.3</version>
</dependency>
<dependency>
<groupId>net.shibboleth</groupId>
<artifactId>shib-velocity</artifactId>
- <version>9.1.3</version>
+ <version>9.2.3</version>
</dependency>
<dependency>
<groupId>org.apache.activemq.protobuf</groupId>
<artifactId>activemq-protobuf</artifactId>
- <version>6.3.1</version>
+ <version>6.3.2</version>
</dependency>
<dependency>
<groupId>org.apache.activemq</groupId>
<artifactId>activemq-broker</artifactId>
- <version>6.3.1</version>
+ <version>6.3.2</version>
</dependency>
<dependency>
<groupId>org.apache.activemq</groupId>
<artifactId>activemq-client</artifactId>
- <version>6.3.1</version>
+ <version>6.3.2</version>
</dependency>
<dependency>
<groupId>org.apache.activemq</groupId>
<artifactId>activemq-jdbc-store</artifactId>
- <version>6.3.1</version>
+ <version>6.3.2</version>
</dependency>
<dependency>
<groupId>org.apache.activemq</groupId>
<artifactId>activemq-kahadb-store</artifactId>
- <version>6.3.1</version>
+ <version>6.3.2</version>
</dependency>
<dependency>
<groupId>org.apache.activemq</groupId>
<artifactId>activemq-openwire-legacy</artifactId>
- <version>6.3.1</version>
+ <version>6.3.2</version>
</dependency>
<dependency>
<groupId>org.apache.activemq</groupId>
<artifactId>activemq-ra</artifactId>
- <version>6.3.1</version>
+ <version>6.3.2</version>
</dependency>
<dependency>
<groupId>org.apache.batchee</groupId>
@@ -436,6 +436,11 @@
<artifactId>commons-pool2</artifactId>
<version>2.13.1</version>
</dependency>
+ <dependency>
+ <groupId>org.apache.commons</groupId>
+ <artifactId>commons-secure-xml</artifactId>
+ <version>1.0.0</version>
+ </dependency>
<dependency>
<groupId>org.apache.cxf</groupId>
<artifactId>cxf-core</artifactId>
@@ -579,17 +584,17 @@
<dependency>
<groupId>org.apache.myfaces.core</groupId>
<artifactId>myfaces-api</artifactId>
- <version>4.1.3</version>
+ <version>4.1.4</version>
</dependency>
<dependency>
<groupId>org.apache.myfaces.core</groupId>
<artifactId>myfaces-impl</artifactId>
- <version>4.1.3</version>
+ <version>4.1.4</version>
</dependency>
<dependency>
<groupId>org.apache.neethi</groupId>
<artifactId>neethi</artifactId>
- <version>3.2.3</version>
+ <version>3.2.4</version>
</dependency>
<dependency>
<groupId>org.apache.openjpa</groupId>
@@ -934,32 +939,32 @@
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-bindings</artifactId>
- <version>4.0.0</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-policy</artifactId>
- <version>4.0.0</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-ws-security-common</artifactId>
- <version>4.0.0</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-ws-security-dom</artifactId>
- <version>4.0.0</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-ws-security-policy-stax</artifactId>
- <version>4.0.0</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-ws-security-stax</artifactId>
- <version>4.0.0</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.xbean</groupId>
@@ -999,7 +1004,7 @@
<dependency>
<groupId>org.bouncycastle</groupId>
<artifactId>bcprov-jdk18on</artifactId>
- <version>1.85</version>
+ <version>1.86</version>
</dependency>
<dependency>
<groupId>org.bouncycastle</groupId>
@@ -1014,7 +1019,7 @@
<dependency>
<groupId>org.cryptacular</groupId>
<artifactId>cryptacular</artifactId>
- <version>1.2.7</version>
+ <version>1.3.0</version>
</dependency>
<dependency>
<groupId>org.eclipse.angus</groupId>
@@ -1109,72 +1114,72 @@
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-core-api</artifactId>
- <version>5.1.3</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-core-impl</artifactId>
- <version>5.1.3</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-profile-api</artifactId>
- <version>5.1.3</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-saml-api</artifactId>
- <version>5.1.3</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-saml-impl</artifactId>
- <version>5.1.3</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-security-api</artifactId>
- <version>5.1.3</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-security-impl</artifactId>
- <version>5.1.3</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-soap-api</artifactId>
- <version>5.1.3</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-xacml-api</artifactId>
- <version>5.1.3</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-xacml-impl</artifactId>
- <version>5.1.3</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-xacml-saml-api</artifactId>
- <version>5.1.3</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-xacml-saml-impl</artifactId>
- <version>5.1.3</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-xmlsec-api</artifactId>
- <version>5.1.3</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-xmlsec-impl</artifactId>
- <version>5.1.3</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.ow2.asm</groupId>
@@ -1189,12 +1194,12 @@
<dependency>
<groupId>org.slf4j</groupId>
<artifactId>slf4j-api</artifactId>
- <version>2.0.18</version>
+ <version>2.0.20</version>
</dependency>
<dependency>
<groupId>org.slf4j</groupId>
<artifactId>slf4j-jdk14</artifactId>
- <version>2.0.18</version>
+ <version>2.0.20</version>
</dependency>
<dependency>
<groupId>org.snakeyaml</groupId>
@@ -2015,6 +2020,16 @@
</exclusion>
</exclusions>
</dependency>
+ <dependency>
+ <groupId>org.apache.commons</groupId>
+ <artifactId>commons-secure-xml</artifactId>
+ <exclusions>
+ <exclusion>
+ <artifactId>*</artifactId>
+ <groupId>*</groupId>
+ </exclusion>
+ </exclusions>
+ </dependency>
<dependency>
<groupId>org.apache.cxf</groupId>
<artifactId>cxf-core</artifactId>
diff --git a/boms/tomee-webprofile-api/pom.xml
b/boms/tomee-webprofile-api/pom.xml
index 776c0f62e7..900ad13f79 100644
--- a/boms/tomee-webprofile-api/pom.xml
+++ b/boms/tomee-webprofile-api/pom.xml
@@ -64,7 +64,7 @@
<dependency>
<groupId>org.apache.myfaces.core</groupId>
<artifactId>myfaces-api</artifactId>
- <version>4.1.3</version>
+ <version>4.1.4</version>
</dependency>
<dependency>
<groupId>org.apache.tomcat</groupId>
diff --git a/boms/tomee-webprofile/pom.xml b/boms/tomee-webprofile/pom.xml
index 30f3e831cf..7c08575fec 100644
--- a/boms/tomee-webprofile/pom.xml
+++ b/boms/tomee-webprofile/pom.xml
@@ -79,7 +79,7 @@
<dependency>
<groupId>io.github.librewsdl4j</groupId>
<artifactId>libre-wsdl4j</artifactId>
- <version>1.12.0</version>
+ <version>1.13.0</version>
</dependency>
<dependency>
<groupId>io.github.rzo1.org.metatype.sxc</groupId>
@@ -121,6 +121,11 @@
<artifactId>commons-pool2</artifactId>
<version>2.13.1</version>
</dependency>
+ <dependency>
+ <groupId>org.apache.commons</groupId>
+ <artifactId>commons-secure-xml</artifactId>
+ <version>1.0.0</version>
+ </dependency>
<dependency>
<groupId>org.apache.cxf</groupId>
<artifactId>cxf-core</artifactId>
@@ -259,17 +264,17 @@
<dependency>
<groupId>org.apache.myfaces.core</groupId>
<artifactId>myfaces-api</artifactId>
- <version>4.1.3</version>
+ <version>4.1.4</version>
</dependency>
<dependency>
<groupId>org.apache.myfaces.core</groupId>
<artifactId>myfaces-impl</artifactId>
- <version>4.1.3</version>
+ <version>4.1.4</version>
</dependency>
<dependency>
<groupId>org.apache.neethi</groupId>
<artifactId>neethi</artifactId>
- <version>3.2.3</version>
+ <version>3.2.4</version>
</dependency>
<dependency>
<groupId>org.apache.openjpa</groupId>
@@ -599,32 +604,32 @@
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-bindings</artifactId>
- <version>4.0.0</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-policy</artifactId>
- <version>4.0.0</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-ws-security-common</artifactId>
- <version>4.0.0</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-ws-security-dom</artifactId>
- <version>4.0.0</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-ws-security-policy-stax</artifactId>
- <version>4.0.0</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-ws-security-stax</artifactId>
- <version>4.0.0</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.xbean</groupId>
@@ -664,7 +669,7 @@
<dependency>
<groupId>org.bouncycastle</groupId>
<artifactId>bcprov-jdk18on</artifactId>
- <version>1.85</version>
+ <version>1.86</version>
</dependency>
<dependency>
<groupId>org.bouncycastle</groupId>
@@ -679,7 +684,7 @@
<dependency>
<groupId>org.cryptacular</groupId>
<artifactId>cryptacular</artifactId>
- <version>1.2.7</version>
+ <version>1.3.0</version>
</dependency>
<dependency>
<groupId>org.eclipse.angus</groupId>
@@ -739,12 +744,12 @@
<dependency>
<groupId>org.slf4j</groupId>
<artifactId>slf4j-api</artifactId>
- <version>2.0.18</version>
+ <version>2.0.20</version>
</dependency>
<dependency>
<groupId>org.slf4j</groupId>
<artifactId>slf4j-jdk14</artifactId>
- <version>2.0.18</version>
+ <version>2.0.20</version>
</dependency>
<dependency>
<groupId>org.tomitribe</groupId>
@@ -925,6 +930,16 @@
</exclusion>
</exclusions>
</dependency>
+ <dependency>
+ <groupId>org.apache.commons</groupId>
+ <artifactId>commons-secure-xml</artifactId>
+ <exclusions>
+ <exclusion>
+ <artifactId>*</artifactId>
+ <groupId>*</groupId>
+ </exclusion>
+ </exclusions>
+ </dependency>
<dependency>
<groupId>org.apache.cxf</groupId>
<artifactId>cxf-core</artifactId>
