This is an automated email from the ASF dual-hosted git repository.
jungm pushed a commit to branch tomee-10.x
in repository https://gitbox.apache.org/repos/asf/tomee.git
The following commit(s) were added to refs/heads/tomee-10.x by this push:
new fc59c50342 Minor: Regenerated BOMs for
36721d39ee8bf2ba5681284c55f1ddc6e559a71a (#2987)
fc59c50342 is described below
commit fc59c50342302ce7722137b4d42871672516765e
Author: github-actions[bot]
<41898282+github-actions[bot]@users.noreply.github.com>
AuthorDate: Thu Oct 1 13:14:12 2026 +0200
Minor: Regenerated BOMs for 36721d39ee8bf2ba5681284c55f1ddc6e559a71a (#2987)
Signed-off-by: GitHub <[email protected]>
Co-authored-by: rzo1 <[email protected]>
---
boms/tomee-microprofile-api/pom.xml | 2 +-
boms/tomee-microprofile/pom.xml | 85 ++++++++++++++++++-------------
boms/tomee-plume-api/pom.xml | 2 +-
boms/tomee-plume/pom.xml | 97 +++++++++++++++++++++---------------
boms/tomee-plus-api/pom.xml | 2 +-
boms/tomee-plus/pom.xml | 99 +++++++++++++++++++++----------------
boms/tomee-webprofile-api/pom.xml | 2 +-
boms/tomee-webprofile/pom.xml | 41 ++++++++++-----
8 files changed, 195 insertions(+), 135 deletions(-)
diff --git a/boms/tomee-microprofile-api/pom.xml
b/boms/tomee-microprofile-api/pom.xml
index 511b3f3856..5d76f755f8 100644
--- a/boms/tomee-microprofile-api/pom.xml
+++ b/boms/tomee-microprofile-api/pom.xml
@@ -49,7 +49,7 @@
<dependency>
<groupId>org.apache.myfaces.core</groupId>
<artifactId>myfaces-api</artifactId>
- <version>4.0.3</version>
+ <version>4.0.4</version>
</dependency>
<dependency>
<groupId>org.apache.tomcat</groupId>
diff --git a/boms/tomee-microprofile/pom.xml b/boms/tomee-microprofile/pom.xml
index e2c4942abc..0dbf2a396c 100644
--- a/boms/tomee-microprofile/pom.xml
+++ b/boms/tomee-microprofile/pom.xml
@@ -49,17 +49,17 @@
<dependency>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-core</artifactId>
- <version>2.22.2</version>
+ <version>2.22.3</version>
</dependency>
<dependency>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-databind</artifactId>
- <version>2.22.2</version>
+ <version>2.22.3</version>
</dependency>
<dependency>
<groupId>com.fasterxml.jackson.dataformat</groupId>
<artifactId>jackson-dataformat-yaml</artifactId>
- <version>2.22.2</version>
+ <version>2.22.3</version>
</dependency>
<dependency>
<groupId>com.fasterxml.woodstox</groupId>
@@ -364,22 +364,22 @@
<dependency>
<groupId>net.shibboleth</groupId>
<artifactId>shib-networking</artifactId>
- <version>9.1.6</version>
+ <version>9.2.3</version>
</dependency>
<dependency>
<groupId>net.shibboleth</groupId>
<artifactId>shib-security</artifactId>
- <version>9.1.6</version>
+ <version>9.2.3</version>
</dependency>
<dependency>
<groupId>net.shibboleth</groupId>
<artifactId>shib-support</artifactId>
- <version>9.1.6</version>
+ <version>9.2.3</version>
</dependency>
<dependency>
<groupId>net.shibboleth</groupId>
<artifactId>shib-velocity</artifactId>
- <version>9.1.6</version>
+ <version>9.2.3</version>
</dependency>
<dependency>
<groupId>org.apache.bval</groupId>
@@ -396,6 +396,11 @@
<artifactId>commons-pool2</artifactId>
<version>2.13.1</version>
</dependency>
+ <dependency>
+ <groupId>org.apache.commons</groupId>
+ <artifactId>commons-secure-xml</artifactId>
+ <version>1.0.0</version>
+ </dependency>
<dependency>
<groupId>org.apache.cxf</groupId>
<artifactId>cxf-core</artifactId>
@@ -539,12 +544,12 @@
<dependency>
<groupId>org.apache.myfaces.core</groupId>
<artifactId>myfaces-api</artifactId>
- <version>4.0.3</version>
+ <version>4.0.4</version>
</dependency>
<dependency>
<groupId>org.apache.myfaces.core</groupId>
<artifactId>myfaces-impl</artifactId>
- <version>4.0.3</version>
+ <version>4.0.4</version>
</dependency>
<dependency>
<groupId>org.apache.neethi</groupId>
@@ -894,32 +899,32 @@
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-bindings</artifactId>
- <version>4.0.1</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-policy</artifactId>
- <version>4.0.1</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-ws-security-common</artifactId>
- <version>4.0.1</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-ws-security-dom</artifactId>
- <version>4.0.1</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-ws-security-policy-stax</artifactId>
- <version>4.0.1</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-ws-security-stax</artifactId>
- <version>4.0.1</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.xbean</groupId>
@@ -949,7 +954,7 @@
<dependency>
<groupId>org.bitbucket.b_c</groupId>
<artifactId>jose4j</artifactId>
- <version>0.9.6</version>
+ <version>0.9.7</version>
</dependency>
<dependency>
<groupId>org.bouncycastle</groupId>
@@ -959,7 +964,7 @@
<dependency>
<groupId>org.bouncycastle</groupId>
<artifactId>bcprov-jdk18on</artifactId>
- <version>1.85</version>
+ <version>1.86</version>
</dependency>
<dependency>
<groupId>org.bouncycastle</groupId>
@@ -974,7 +979,7 @@
<dependency>
<groupId>org.cryptacular</groupId>
<artifactId>cryptacular</artifactId>
- <version>1.2.7</version>
+ <version>1.3.0</version>
</dependency>
<dependency>
<groupId>org.eclipse.angus</groupId>
@@ -1074,72 +1079,72 @@
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-core-api</artifactId>
- <version>5.1.6</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-core-impl</artifactId>
- <version>5.1.6</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-profile-api</artifactId>
- <version>5.1.6</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-saml-api</artifactId>
- <version>5.1.6</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-saml-impl</artifactId>
- <version>5.1.6</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-security-api</artifactId>
- <version>5.1.6</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-security-impl</artifactId>
- <version>5.1.6</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-soap-api</artifactId>
- <version>5.1.6</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-xacml-api</artifactId>
- <version>5.1.6</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-xacml-impl</artifactId>
- <version>5.1.6</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-xacml-saml-api</artifactId>
- <version>5.1.6</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-xacml-saml-impl</artifactId>
- <version>5.1.6</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-xmlsec-api</artifactId>
- <version>5.1.6</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-xmlsec-impl</artifactId>
- <version>5.1.6</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.ow2.asm</groupId>
@@ -1154,12 +1159,12 @@
<dependency>
<groupId>org.slf4j</groupId>
<artifactId>slf4j-api</artifactId>
- <version>2.0.18</version>
+ <version>2.0.20</version>
</dependency>
<dependency>
<groupId>org.slf4j</groupId>
<artifactId>slf4j-jdk14</artifactId>
- <version>2.0.18</version>
+ <version>2.0.20</version>
</dependency>
<dependency>
<groupId>org.tomitribe</groupId>
@@ -1169,7 +1174,7 @@
<dependency>
<groupId>org.yaml</groupId>
<artifactId>snakeyaml</artifactId>
- <version>2.6</version>
+ <version>2.7</version>
</dependency>
<dependency>
<groupId>xml-resolver</groupId>
@@ -1895,6 +1900,16 @@
</exclusion>
</exclusions>
</dependency>
+ <dependency>
+ <groupId>org.apache.commons</groupId>
+ <artifactId>commons-secure-xml</artifactId>
+ <exclusions>
+ <exclusion>
+ <artifactId>*</artifactId>
+ <groupId>*</groupId>
+ </exclusion>
+ </exclusions>
+ </dependency>
<dependency>
<groupId>org.apache.cxf</groupId>
<artifactId>cxf-core</artifactId>
diff --git a/boms/tomee-plume-api/pom.xml b/boms/tomee-plume-api/pom.xml
index 20492f3cb5..2bab889bb2 100644
--- a/boms/tomee-plume-api/pom.xml
+++ b/boms/tomee-plume-api/pom.xml
@@ -134,7 +134,7 @@
<dependency>
<groupId>org.glassfish</groupId>
<artifactId>jakarta.faces</artifactId>
- <version>4.0.23</version>
+ <version>4.0.26</version>
</dependency>
</dependencies>
</dependencyManagement>
diff --git a/boms/tomee-plume/pom.xml b/boms/tomee-plume/pom.xml
index f92c9236c8..4cd168290a 100644
--- a/boms/tomee-plume/pom.xml
+++ b/boms/tomee-plume/pom.xml
@@ -49,17 +49,17 @@
<dependency>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-core</artifactId>
- <version>2.22.2</version>
+ <version>2.22.3</version>
</dependency>
<dependency>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-databind</artifactId>
- <version>2.22.2</version>
+ <version>2.22.3</version>
</dependency>
<dependency>
<groupId>com.fasterxml.jackson.dataformat</groupId>
<artifactId>jackson-dataformat-yaml</artifactId>
- <version>2.22.2</version>
+ <version>2.22.3</version>
</dependency>
<dependency>
<groupId>com.fasterxml.woodstox</groupId>
@@ -364,57 +364,57 @@
<dependency>
<groupId>net.shibboleth</groupId>
<artifactId>shib-networking</artifactId>
- <version>9.1.6</version>
+ <version>9.2.3</version>
</dependency>
<dependency>
<groupId>net.shibboleth</groupId>
<artifactId>shib-security</artifactId>
- <version>9.1.6</version>
+ <version>9.2.3</version>
</dependency>
<dependency>
<groupId>net.shibboleth</groupId>
<artifactId>shib-support</artifactId>
- <version>9.1.6</version>
+ <version>9.2.3</version>
</dependency>
<dependency>
<groupId>net.shibboleth</groupId>
<artifactId>shib-velocity</artifactId>
- <version>9.1.6</version>
+ <version>9.2.3</version>
</dependency>
<dependency>
<groupId>org.apache.activemq.protobuf</groupId>
<artifactId>activemq-protobuf</artifactId>
- <version>1.1</version>
+ <version>6.3.2</version>
</dependency>
<dependency>
<groupId>org.apache.activemq</groupId>
<artifactId>activemq-broker</artifactId>
- <version>6.2.9</version>
+ <version>6.3.2</version>
</dependency>
<dependency>
<groupId>org.apache.activemq</groupId>
<artifactId>activemq-client</artifactId>
- <version>6.2.9</version>
+ <version>6.3.2</version>
</dependency>
<dependency>
<groupId>org.apache.activemq</groupId>
<artifactId>activemq-jdbc-store</artifactId>
- <version>6.2.9</version>
+ <version>6.3.2</version>
</dependency>
<dependency>
<groupId>org.apache.activemq</groupId>
<artifactId>activemq-kahadb-store</artifactId>
- <version>6.2.9</version>
+ <version>6.3.2</version>
</dependency>
<dependency>
<groupId>org.apache.activemq</groupId>
<artifactId>activemq-openwire-legacy</artifactId>
- <version>6.2.9</version>
+ <version>6.3.2</version>
</dependency>
<dependency>
<groupId>org.apache.activemq</groupId>
<artifactId>activemq-ra</artifactId>
- <version>6.2.9</version>
+ <version>6.3.2</version>
</dependency>
<dependency>
<groupId>org.apache.batchee</groupId>
@@ -436,6 +436,11 @@
<artifactId>commons-pool2</artifactId>
<version>2.13.1</version>
</dependency>
+ <dependency>
+ <groupId>org.apache.commons</groupId>
+ <artifactId>commons-secure-xml</artifactId>
+ <version>1.0.0</version>
+ </dependency>
<dependency>
<groupId>org.apache.cxf</groupId>
<artifactId>cxf-core</artifactId>
@@ -924,32 +929,32 @@
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-bindings</artifactId>
- <version>4.0.1</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-policy</artifactId>
- <version>4.0.1</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-ws-security-common</artifactId>
- <version>4.0.1</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-ws-security-dom</artifactId>
- <version>4.0.1</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-ws-security-policy-stax</artifactId>
- <version>4.0.1</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-ws-security-stax</artifactId>
- <version>4.0.1</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.xbean</groupId>
@@ -979,7 +984,7 @@
<dependency>
<groupId>org.bitbucket.b_c</groupId>
<artifactId>jose4j</artifactId>
- <version>0.9.6</version>
+ <version>0.9.7</version>
</dependency>
<dependency>
<groupId>org.bouncycastle</groupId>
@@ -989,7 +994,7 @@
<dependency>
<groupId>org.bouncycastle</groupId>
<artifactId>bcprov-jdk18on</artifactId>
- <version>1.85</version>
+ <version>1.86</version>
</dependency>
<dependency>
<groupId>org.bouncycastle</groupId>
@@ -1004,7 +1009,7 @@
<dependency>
<groupId>org.cryptacular</groupId>
<artifactId>cryptacular</artifactId>
- <version>1.2.7</version>
+ <version>1.3.0</version>
</dependency>
<dependency>
<groupId>org.eclipse.angus</groupId>
@@ -1079,7 +1084,7 @@
<dependency>
<groupId>org.glassfish</groupId>
<artifactId>jakarta.faces</artifactId>
- <version>4.0.23</version>
+ <version>4.0.26</version>
</dependency>
<dependency>
<groupId>org.hdrhistogram</groupId>
@@ -1119,72 +1124,72 @@
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-core-api</artifactId>
- <version>5.1.6</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-core-impl</artifactId>
- <version>5.1.6</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-profile-api</artifactId>
- <version>5.1.6</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-saml-api</artifactId>
- <version>5.1.6</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-saml-impl</artifactId>
- <version>5.1.6</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-security-api</artifactId>
- <version>5.1.6</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-security-impl</artifactId>
- <version>5.1.6</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-soap-api</artifactId>
- <version>5.1.6</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-xacml-api</artifactId>
- <version>5.1.6</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-xacml-impl</artifactId>
- <version>5.1.6</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-xacml-saml-api</artifactId>
- <version>5.1.6</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-xacml-saml-impl</artifactId>
- <version>5.1.6</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-xmlsec-api</artifactId>
- <version>5.1.6</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-xmlsec-impl</artifactId>
- <version>5.1.6</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.ow2.asm</groupId>
@@ -1199,12 +1204,12 @@
<dependency>
<groupId>org.slf4j</groupId>
<artifactId>slf4j-api</artifactId>
- <version>2.0.18</version>
+ <version>2.0.20</version>
</dependency>
<dependency>
<groupId>org.slf4j</groupId>
<artifactId>slf4j-jdk14</artifactId>
- <version>2.0.18</version>
+ <version>2.0.20</version>
</dependency>
<dependency>
<groupId>org.tomitribe</groupId>
@@ -1214,7 +1219,7 @@
<dependency>
<groupId>org.yaml</groupId>
<artifactId>snakeyaml</artifactId>
- <version>2.6</version>
+ <version>2.7</version>
</dependency>
<dependency>
<groupId>xml-resolver</groupId>
@@ -2020,6 +2025,16 @@
</exclusion>
</exclusions>
</dependency>
+ <dependency>
+ <groupId>org.apache.commons</groupId>
+ <artifactId>commons-secure-xml</artifactId>
+ <exclusions>
+ <exclusion>
+ <artifactId>*</artifactId>
+ <groupId>*</groupId>
+ </exclusion>
+ </exclusions>
+ </dependency>
<dependency>
<groupId>org.apache.cxf</groupId>
<artifactId>cxf-core</artifactId>
diff --git a/boms/tomee-plus-api/pom.xml b/boms/tomee-plus-api/pom.xml
index f507b1a242..3203ba37bd 100644
--- a/boms/tomee-plus-api/pom.xml
+++ b/boms/tomee-plus-api/pom.xml
@@ -49,7 +49,7 @@
<dependency>
<groupId>org.apache.myfaces.core</groupId>
<artifactId>myfaces-api</artifactId>
- <version>4.0.3</version>
+ <version>4.0.4</version>
</dependency>
<dependency>
<groupId>org.apache.tomcat</groupId>
diff --git a/boms/tomee-plus/pom.xml b/boms/tomee-plus/pom.xml
index ec3919defe..4482a92207 100644
--- a/boms/tomee-plus/pom.xml
+++ b/boms/tomee-plus/pom.xml
@@ -49,17 +49,17 @@
<dependency>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-core</artifactId>
- <version>2.22.2</version>
+ <version>2.22.3</version>
</dependency>
<dependency>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-databind</artifactId>
- <version>2.22.2</version>
+ <version>2.22.3</version>
</dependency>
<dependency>
<groupId>com.fasterxml.jackson.dataformat</groupId>
<artifactId>jackson-dataformat-yaml</artifactId>
- <version>2.22.2</version>
+ <version>2.22.3</version>
</dependency>
<dependency>
<groupId>com.fasterxml.woodstox</groupId>
@@ -364,57 +364,57 @@
<dependency>
<groupId>net.shibboleth</groupId>
<artifactId>shib-networking</artifactId>
- <version>9.1.6</version>
+ <version>9.2.3</version>
</dependency>
<dependency>
<groupId>net.shibboleth</groupId>
<artifactId>shib-security</artifactId>
- <version>9.1.6</version>
+ <version>9.2.3</version>
</dependency>
<dependency>
<groupId>net.shibboleth</groupId>
<artifactId>shib-support</artifactId>
- <version>9.1.6</version>
+ <version>9.2.3</version>
</dependency>
<dependency>
<groupId>net.shibboleth</groupId>
<artifactId>shib-velocity</artifactId>
- <version>9.1.6</version>
+ <version>9.2.3</version>
</dependency>
<dependency>
<groupId>org.apache.activemq.protobuf</groupId>
<artifactId>activemq-protobuf</artifactId>
- <version>1.1</version>
+ <version>6.3.2</version>
</dependency>
<dependency>
<groupId>org.apache.activemq</groupId>
<artifactId>activemq-broker</artifactId>
- <version>6.2.9</version>
+ <version>6.3.2</version>
</dependency>
<dependency>
<groupId>org.apache.activemq</groupId>
<artifactId>activemq-client</artifactId>
- <version>6.2.9</version>
+ <version>6.3.2</version>
</dependency>
<dependency>
<groupId>org.apache.activemq</groupId>
<artifactId>activemq-jdbc-store</artifactId>
- <version>6.2.9</version>
+ <version>6.3.2</version>
</dependency>
<dependency>
<groupId>org.apache.activemq</groupId>
<artifactId>activemq-kahadb-store</artifactId>
- <version>6.2.9</version>
+ <version>6.3.2</version>
</dependency>
<dependency>
<groupId>org.apache.activemq</groupId>
<artifactId>activemq-openwire-legacy</artifactId>
- <version>6.2.9</version>
+ <version>6.3.2</version>
</dependency>
<dependency>
<groupId>org.apache.activemq</groupId>
<artifactId>activemq-ra</artifactId>
- <version>6.2.9</version>
+ <version>6.3.2</version>
</dependency>
<dependency>
<groupId>org.apache.batchee</groupId>
@@ -436,6 +436,11 @@
<artifactId>commons-pool2</artifactId>
<version>2.13.1</version>
</dependency>
+ <dependency>
+ <groupId>org.apache.commons</groupId>
+ <artifactId>commons-secure-xml</artifactId>
+ <version>1.0.0</version>
+ </dependency>
<dependency>
<groupId>org.apache.cxf</groupId>
<artifactId>cxf-core</artifactId>
@@ -579,12 +584,12 @@
<dependency>
<groupId>org.apache.myfaces.core</groupId>
<artifactId>myfaces-api</artifactId>
- <version>4.0.3</version>
+ <version>4.0.4</version>
</dependency>
<dependency>
<groupId>org.apache.myfaces.core</groupId>
<artifactId>myfaces-impl</artifactId>
- <version>4.0.3</version>
+ <version>4.0.4</version>
</dependency>
<dependency>
<groupId>org.apache.neethi</groupId>
@@ -934,32 +939,32 @@
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-bindings</artifactId>
- <version>4.0.1</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-policy</artifactId>
- <version>4.0.1</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-ws-security-common</artifactId>
- <version>4.0.1</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-ws-security-dom</artifactId>
- <version>4.0.1</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-ws-security-policy-stax</artifactId>
- <version>4.0.1</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-ws-security-stax</artifactId>
- <version>4.0.1</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.xbean</groupId>
@@ -989,7 +994,7 @@
<dependency>
<groupId>org.bitbucket.b_c</groupId>
<artifactId>jose4j</artifactId>
- <version>0.9.6</version>
+ <version>0.9.7</version>
</dependency>
<dependency>
<groupId>org.bouncycastle</groupId>
@@ -999,7 +1004,7 @@
<dependency>
<groupId>org.bouncycastle</groupId>
<artifactId>bcprov-jdk18on</artifactId>
- <version>1.85</version>
+ <version>1.86</version>
</dependency>
<dependency>
<groupId>org.bouncycastle</groupId>
@@ -1014,7 +1019,7 @@
<dependency>
<groupId>org.cryptacular</groupId>
<artifactId>cryptacular</artifactId>
- <version>1.2.7</version>
+ <version>1.3.0</version>
</dependency>
<dependency>
<groupId>org.eclipse.angus</groupId>
@@ -1119,72 +1124,72 @@
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-core-api</artifactId>
- <version>5.1.6</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-core-impl</artifactId>
- <version>5.1.6</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-profile-api</artifactId>
- <version>5.1.6</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-saml-api</artifactId>
- <version>5.1.6</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-saml-impl</artifactId>
- <version>5.1.6</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-security-api</artifactId>
- <version>5.1.6</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-security-impl</artifactId>
- <version>5.1.6</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-soap-api</artifactId>
- <version>5.1.6</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-xacml-api</artifactId>
- <version>5.1.6</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-xacml-impl</artifactId>
- <version>5.1.6</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-xacml-saml-api</artifactId>
- <version>5.1.6</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-xacml-saml-impl</artifactId>
- <version>5.1.6</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-xmlsec-api</artifactId>
- <version>5.1.6</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.opensaml</groupId>
<artifactId>opensaml-xmlsec-impl</artifactId>
- <version>5.1.6</version>
+ <version>5.2.3</version>
</dependency>
<dependency>
<groupId>org.ow2.asm</groupId>
@@ -1199,12 +1204,12 @@
<dependency>
<groupId>org.slf4j</groupId>
<artifactId>slf4j-api</artifactId>
- <version>2.0.18</version>
+ <version>2.0.20</version>
</dependency>
<dependency>
<groupId>org.slf4j</groupId>
<artifactId>slf4j-jdk14</artifactId>
- <version>2.0.18</version>
+ <version>2.0.20</version>
</dependency>
<dependency>
<groupId>org.tomitribe</groupId>
@@ -1214,7 +1219,7 @@
<dependency>
<groupId>org.yaml</groupId>
<artifactId>snakeyaml</artifactId>
- <version>2.6</version>
+ <version>2.7</version>
</dependency>
<dependency>
<groupId>xml-resolver</groupId>
@@ -2020,6 +2025,16 @@
</exclusion>
</exclusions>
</dependency>
+ <dependency>
+ <groupId>org.apache.commons</groupId>
+ <artifactId>commons-secure-xml</artifactId>
+ <exclusions>
+ <exclusion>
+ <artifactId>*</artifactId>
+ <groupId>*</groupId>
+ </exclusion>
+ </exclusions>
+ </dependency>
<dependency>
<groupId>org.apache.cxf</groupId>
<artifactId>cxf-core</artifactId>
diff --git a/boms/tomee-webprofile-api/pom.xml
b/boms/tomee-webprofile-api/pom.xml
index 86de8fa471..4cfb5e6c3a 100644
--- a/boms/tomee-webprofile-api/pom.xml
+++ b/boms/tomee-webprofile-api/pom.xml
@@ -49,7 +49,7 @@
<dependency>
<groupId>org.apache.myfaces.core</groupId>
<artifactId>myfaces-api</artifactId>
- <version>4.0.3</version>
+ <version>4.0.4</version>
</dependency>
<dependency>
<groupId>org.apache.tomcat</groupId>
diff --git a/boms/tomee-webprofile/pom.xml b/boms/tomee-webprofile/pom.xml
index a8416ee2bd..ded7d655d7 100644
--- a/boms/tomee-webprofile/pom.xml
+++ b/boms/tomee-webprofile/pom.xml
@@ -106,6 +106,11 @@
<artifactId>commons-pool2</artifactId>
<version>2.13.1</version>
</dependency>
+ <dependency>
+ <groupId>org.apache.commons</groupId>
+ <artifactId>commons-secure-xml</artifactId>
+ <version>1.0.0</version>
+ </dependency>
<dependency>
<groupId>org.apache.cxf</groupId>
<artifactId>cxf-core</artifactId>
@@ -244,12 +249,12 @@
<dependency>
<groupId>org.apache.myfaces.core</groupId>
<artifactId>myfaces-api</artifactId>
- <version>4.0.3</version>
+ <version>4.0.4</version>
</dependency>
<dependency>
<groupId>org.apache.myfaces.core</groupId>
<artifactId>myfaces-impl</artifactId>
- <version>4.0.3</version>
+ <version>4.0.4</version>
</dependency>
<dependency>
<groupId>org.apache.neethi</groupId>
@@ -584,32 +589,32 @@
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-bindings</artifactId>
- <version>4.0.1</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-policy</artifactId>
- <version>4.0.1</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-ws-security-common</artifactId>
- <version>4.0.1</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-ws-security-dom</artifactId>
- <version>4.0.1</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-ws-security-policy-stax</artifactId>
- <version>4.0.1</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.wss4j</groupId>
<artifactId>wss4j-ws-security-stax</artifactId>
- <version>4.0.1</version>
+ <version>4.0.2</version>
</dependency>
<dependency>
<groupId>org.apache.xbean</groupId>
@@ -639,7 +644,7 @@
<dependency>
<groupId>org.bitbucket.b_c</groupId>
<artifactId>jose4j</artifactId>
- <version>0.9.6</version>
+ <version>0.9.7</version>
</dependency>
<dependency>
<groupId>org.bouncycastle</groupId>
@@ -649,7 +654,7 @@
<dependency>
<groupId>org.bouncycastle</groupId>
<artifactId>bcprov-jdk18on</artifactId>
- <version>1.85</version>
+ <version>1.86</version>
</dependency>
<dependency>
<groupId>org.bouncycastle</groupId>
@@ -664,7 +669,7 @@
<dependency>
<groupId>org.cryptacular</groupId>
<artifactId>cryptacular</artifactId>
- <version>1.2.7</version>
+ <version>1.3.0</version>
</dependency>
<dependency>
<groupId>org.eclipse.angus</groupId>
@@ -719,12 +724,12 @@
<dependency>
<groupId>org.slf4j</groupId>
<artifactId>slf4j-api</artifactId>
- <version>2.0.18</version>
+ <version>2.0.20</version>
</dependency>
<dependency>
<groupId>org.slf4j</groupId>
<artifactId>slf4j-jdk14</artifactId>
- <version>2.0.18</version>
+ <version>2.0.20</version>
</dependency>
<dependency>
<groupId>org.tomitribe</groupId>
@@ -875,6 +880,16 @@
</exclusion>
</exclusions>
</dependency>
+ <dependency>
+ <groupId>org.apache.commons</groupId>
+ <artifactId>commons-secure-xml</artifactId>
+ <exclusions>
+ <exclusion>
+ <artifactId>*</artifactId>
+ <groupId>*</groupId>
+ </exclusion>
+ </exclusions>
+ </dependency>
<dependency>
<groupId>org.apache.cxf</groupId>
<artifactId>cxf-core</artifactId>
