commits  

Messages by Thread

• • (ws-xmlschema) 01/01: Serialize notation as well and fix some NPEs coheigea
• (ws-wss4j) branch coheigea/nonce-encoding created (now 04c0e5a73) coheigea
  • (ws-wss4j) 01/01: Fix nonce encoding issue coheigea
• (ws-wss4j) branch coheigea/stax-replay-cache deleted (was 487498563) coheigea
• (ws-xmlschema) branch master updated: Documenting threat-safety concerns coheigea
• (ws-xmlschema) branch coheigea/unresolvable deleted (was b8210e77) coheigea
• (ws-xmlschema) branch master updated: Report unresolvable and complex-where-simple type references as XmlSchemaException (#155) coheigea
• (ws-wss4j) branch 2_4_x-fixes updated: Fix StAX replaycache tests (#703) coheigea
• (ws-wss4j) branch 3_0_x-fixes updated: Fix StAX replaycache tests (#703) coheigea
• (ws-wss4j) branch master updated: Fix StAX replaycache tests (#703) coheigea
• (ws-xmlschema) branch coheigea/unresolvable created (now b8210e77) coheigea
  • (ws-xmlschema) 01/01: Report unresolvable and complex-where-simple type references as XmlSchemaException coheigea
• (ws-wss4j) branch coheigea/stax-replay-cache updated (d50458933 -> 487498563) coheigea
• (ws-xmlschema) branch coheigea/errors deleted (was 78691945) coheigea
• (ws-xmlschema) branch master updated: Keep document-walk failures distinguishable (#154) coheigea
• (ws-xmlschema) branch coheigea/errors created (now 78691945) coheigea
  • (ws-xmlschema) 01/01: Keep document-walk failures distinguishable coheigea
• (ws-wss4j) branch coheigea/stax-replay-cache created (now d50458933) coheigea
  • (ws-wss4j) 01/01: Fix StAX replaycache tests coheigea
• (ws-wss4j) branch dependabot/maven/org.apache-apache-39 created (now f793a0127) github-bot
• (ws-wss4j) branch dependabot/maven/org.apache.maven.plugins-maven-surefire-plugin-3.6.0 created (now fc63e1acd) github-bot
• (ws-wss4j) branch dependabot/maven/org.cyclonedx-cyclonedx-maven-plugin-2.9.3 created (now bb5cac2e2) github-bot
• (ws-xmlschema) branch coheigea/default-uri-limits updated (ba22cf0e -> b35d45b1) coheigea
• (ws-wss4j) branch coheigea/signature-replay deleted (was 9b1513583) coheigea
• (ws-xmlschema) branch master updated: Fix scchema resolution budget bug (#153) coheigea
• (ws-wss4j) branch 2_4_x-fixes updated: Fix signature replay caching (#699) coheigea
• (ws-wss4j) branch 3_0_x-fixes updated: Fix signature replay caching (#699) coheigea
• (ws-wss4j) branch master updated: Fix signature replay caching (#699) coheigea
• (ws-xmlschema) branch coheigea/budget-resolution deleted (was 666ddc4c) coheigea
• (ws-xmlschema) branch coheigea/budget-resolution created (now 666ddc4c) coheigea
  • (ws-xmlschema) 01/01: Fix scchema resolution budget bug coheigea
• (ws-xmlschema) branch coheigea/default-uri-limits deleted (was b35d45b1) coheigea
• (ws-xmlschema) branch master updated: Place default limits on read timeouts + size on remote schemas (#152) coheigea
• (ws-wss4j) branch coheigea/signature-replay updated (361615f63 -> 9b1513583) coheigea
• (ws-wss4j) branch coheigea/signature-replay created (now 361615f63) coheigea
  • (ws-wss4j) 01/01: Fix signature replay caching coheigea
• (ws-wss4j) branch master updated: Bump org.apache.felix:maven-bundle-plugin from 6.1.0 to 6.1.2 (#695) coheigea
• (ws-xmlschema) branch coheigea/dangling-npe deleted (was a1aba119) coheigea
• (ws-xmlschema) branch master updated: Fix some potential NPEs (#151) coheigea
• (ws-xmlschema) branch coheigea/dangling-npe created (now a1aba119) coheigea
  • (ws-xmlschema) 01/01: Fix some potential NPEs coheigea
• (ws-xmlschema) branch master updated: More DefaultURIResolver hardening coheigea
• (ws-wss4j) branch dependabot/maven/org.apache.maven.plugins-maven-compiler-plugin-3.16.0 deleted (was a35df48db) github-bot
• (ws-xmlschema) branch master updated: Fixing one more DefaultURIResolver case coheigea
• (ws-xmlschema) branch coheigea/uri-resolver deleted (was e87655fd) coheigea
• (ws-xmlschema) branch master updated: Exclude a few other things by default in DefaultURIResolver (#150) coheigea
• (ws-xmlschema) branch coheigea/uri-resolver created (now e87655fd) coheigea
  • (ws-xmlschema) 01/01: Exclude a few other things by default in DefaultURIResolver coheigea
• (ws-wss4j) branch dependabot/maven/slf4j.version-2.0.19 deleted (was 57a4880e9) github-bot
• (ws-xmlschema) branch master updated: Updating docs for remote URI dereferencing (#149) coheigea
• (ws-xmlschema) branch coheigea/remote-uri deleted (was e77579e6) coheigea
• (ws-xmlschema) branch coheigea/remote-uri created (now e77579e6) coheigea
  • (ws-xmlschema) 01/01: Updating docs for remote URI dereferencing coheigea
• (ws-xmlschema) branch coheigea/defaulturiresolver-protocols deleted (was c1203e38) coheigea
• (ws-xmlschema) branch master updated: Restrict default protocols allowed by the DefaultURIResolver (#148) coheigea
• (ws-xmlschema) branch coheigea/defaulturiresolver-protocols created (now c1203e38) coheigea
  • (ws-xmlschema) 01/01: Restrict default protocols allowed by the DefaultURIResolver coheigea
• (ws-xmlschema) branch coheigea/dtd-fix deleted (was c06e496f) coheigea
• (ws-xmlschema) branch master updated: Fix up DTD handling (#147) coheigea
• (ws-axiom) branch dependabot/maven/org.apache.maven.plugins-maven-install-plugin-3.2.0 deleted (was 65b87bda8) github-bot
• (ws-wss4j) branch 3_0_x-fixes updated: Bump org.apache.maven.plugins:maven-jar-plugin from 3.5.0 to 3.5.1 (#692) coheigea
• (ws-xmlschema) branch coheigea/dtd-fix created (now c06e496f) coheigea
  • (ws-xmlschema) 01/01: Fix up DTD handling coheigea
• (ws-wss4j) branch dependabot/maven/org.apache.maven.plugins-maven-jar-plugin-3.5.1 deleted (was 78f9ac883) github-bot
• (ws-wss4j) branch master updated: Bump org.apache.maven.plugins:maven-jar-plugin from 3.5.0 to 3.5.1 (#692) coheigea
• (ws-wss4j) branch dependabot/github_actions/actions/setup-java-6.0.1 created (now f8daad976) github-bot
• (ws-wss4j) branch dependabot/maven/org.apache.felix-maven-bundle-plugin-6.1.2 deleted (was 0843f1652) github-bot
• (ws-wss4j) branch 3_0_x-fixes updated (92e156b4b -> 3a74c363b) coheigea
  • (ws-wss4j) 01/02: Bump com.google.guava:guava from 33.6.0-jre to 33.7.1-jre (#696) coheigea
  • (ws-wss4j) 02/02: Bump slf4j.version from 2.0.18 to 2.0.19 (#693) coheigea
• (ws-wss4j) branch dependabot/maven/bcprov.version-1.86 updated (d8528b254 -> 6cbb15c00) github-bot
• (ws-wss4j) branch dependabot/maven/org.apache.maven.plugins-maven-jar-plugin-3.5.1 updated (32c412aa9 -> 78f9ac883) github-bot
• (ws-wss4j) branch dependabot/maven/com.google.guava-guava-33.7.1-jre deleted (was 9a73e6cc8) github-bot
• (ws-wss4j) branch master updated: Bump com.google.guava:guava from 33.6.0-jre to 33.7.1-jre (#696) coheigea
• (ws-wss4j) branch dependabot/github_actions/codeql-action-8213001b74 deleted (was 8258b0d77) github-bot
• (ws-wss4j) branch master updated: Bump slf4j.version from 2.0.18 to 2.0.19 (#693) coheigea
• (ws-wss4j) branch master updated: Bump actions/setup-java from 6.0.0 to 6.0.1 (#698) coheigea
• (ws-wss4j) branch dependabot/github_actions/actions/setup-java-6.0.1 deleted (was f8daad976) github-bot
• (ws-wss4j) branch master updated: Bump the codeql-action group with 3 updates (#697) coheigea
• (ws-wss4j) branch dependabot/github_actions/codeql-action-8213001b74 created (now 8258b0d77) github-bot
• (ws-wss4j) branch dependabot/maven/org.apache.felix-maven-bundle-plugin-6.1.2 created (now 0843f1652) github-bot
• (ws-wss4j) branch dependabot/maven/slf4j.version-2.0.19 created (now 57a4880e9) github-bot
• (ws-wss4j) branch dependabot/maven/com.google.guava-guava-33.7.1-jre created (now 9a73e6cc8) github-bot
• (ws-wss4j) branch dependabot/maven/bcprov.version-1.86 created (now d8528b254) github-bot
• (ws-wss4j) branch dependabot/maven/org.apache.maven.plugins-maven-jar-plugin-3.5.1 created (now 32c412aa9) github-bot
• (ws-axiom) branch master updated: Bump org.apache.maven.plugins:maven-install-plugin from 3.1.4 to 3.2.0 veithen
• (ws-wss4j) branch 3_0_x-fixes updated: Bump org.apache.maven.plugins:maven-compiler-plugin (#676) coheigea
• (ws-wss4j) branch dependabot/maven/jakarta.servlet-jakarta.servlet-api-6.0.0 deleted (was 2c6a5a927) github-bot
• (ws-wss4j) branch master updated: Disabling errorprone coheigea
• (ws-wss4j) branch dependabot/maven/com.puppycrawl.tools-checkstyle-14.1.0 deleted (was b95cba07d) github-bot
• (ws-wss4j) branch dependabot/maven/com.google.errorprone-error_prone_core-2.50.0 deleted (was 8933eba31) github-bot
• (ws-wss4j) branch master updated: Bump jakarta.servlet:jakarta.servlet-api from 5.0.0 to 6.0.0 (#600) coheigea
• (ws-wss4j) branch master updated: Bump com.fasterxml.woodstox:woodstox-core from 7.1.1 to 7.2.2 (#660) coheigea
• (ws-wss4j) branch dependabot/maven/com.fasterxml.woodstox-woodstox-core-7.2.2 deleted (was cd7e54d48) github-bot
• (ws-wss4j) branch master updated: Bump org.apache.maven.plugins:maven-compiler-plugin (#676) coheigea
• (ws-axiom) branch dependabot/maven/org.apache.maven.plugins-maven-install-plugin-3.2.0 created (now 65b87bda8) github-bot
• (ws-wss4j) branch coheigea/strtransform created (now bd81baefc) coheigea
  • (ws-wss4j) 01/01: Fix bug with signature policy validation for STR Transform coheigea
• (ws-wss4j) branch 3_0_x-fixes updated: Fix bug with signature policy validation for STR Transform (#691) coheigea
• (ws-wss4j) branch dependabot/maven/org.apache.maven.plugins-maven-compiler-plugin-3.16.0 updated (2914c6af9 -> a35df48db) github-bot
• (ws-wss4j) branch dependabot/maven/com.fasterxml.woodstox-woodstox-core-7.2.2 updated (50a3762aa -> cd7e54d48) github-bot
• (ws-wss4j) branch 2_4_x-fixes updated: Fix bug with signature policy validation for STR Transform (#691) coheigea
• (ws-wss4j) branch master updated: Fix bug with signature policy validation for STR Transform (#691) coheigea
• (ws-wss4j) branch coheigea/strtransform deleted (was bd81baefc) coheigea
• (ws-neethi) annotated tag neethi-3.2.4 created (now cb477d6) coheigea
• (ws-neethi) branch master updated: [maven-release-plugin] prepare release neethi-3.2.4 coheigea
• (ws-neethi) branch master updated: Add memory exhaustion protection to Axiom path as well coheigea
• (ws-axiom) branch dependabot/maven/org.codehaus.mojo-build-helper-maven-plugin-3.6.2 deleted (was 5847ed275) github-bot
• (ws-xmlschema) branch master updated (ef94d591 -> 97180ce5) coheigea
• (ws-xmlschema) branch dependabot/github_actions/codeql-action-03ad6eec6c deleted (was 94e8af72) github-bot
• (ws-axiom) branch master updated: Bump org.codehaus.mojo:build-helper-maven-plugin from 3.6.1 to 3.6.2 veithen
• (ws-axiom) branch master updated: Bump org.codehaus.mojo:tidy-maven-plugin from 1.4.0 to 1.4.1 veithen
• (ws-axiom) branch dependabot/maven/org.codehaus.mojo-tidy-maven-plugin-1.4.1 deleted (was f0c6ac9c3) github-bot
• (ws-neethi) branch master updated (3add82b -> 4b558d8) coheigea
• (ws-neethi) branch dependabot/github_actions/codeql-action-03ad6eec6c deleted (was dbab4c6) github-bot
• (ws-neethi) branch dependabot/github_actions/actions/setup-java-6.0.1 deleted (was 1a37b43) github-bot
• (ws-neethi) branch master updated (4b558d8 -> fac343f) coheigea
  • (ws-neethi) 01/01: Merge pull request #85 from apache/dependabot/github_actions/actions/setup-java-6.0.1 coheigea
• (ws-xmlschema) branch dependabot/maven/org.apache.maven.plugins-maven-surefire-plugin-3.6.0 deleted (was ed7a5040) github-bot
• (ws-xmlschema) branch master updated: Bump the codeql-action group with 2 updates (#145) coheigea
• (ws-xmlschema) branch dependabot/github_actions/actions/setup-java-6.0.1 deleted (was 77d5cfee) github-bot
• (ws-xmlschema) branch master updated (97180ce5 -> 0100eb48) coheigea
• (ws-axiom) branch dependabot/maven/org.codehaus.mojo-build-helper-maven-plugin-3.6.2 created (now 5847ed275) github-bot
• (ws-axiom) branch dependabot/maven/org.codehaus.mojo-tidy-maven-plugin-1.4.1 created (now f0c6ac9c3) github-bot
• (ws-wss4j) branch coheigea/encrypted-headers created (now cef14ab93) coheigea
  • (ws-wss4j) 01/01: Make sure for Attachment-Complete the mime type is read from the encrypted header coheigea
• (ws-wss4j) branch coheigea/loader created (now b58695277) coheigea
  • (ws-wss4j) 01/01: Harden Loader to only load from file + jar by default coheigea
• (ws-wss4j) branch master updated: Harden Loader to only load from file + jar by default (#689) coheigea
• (ws-xmlschema) branch dependabot/github_actions/actions/setup-java-6.0.1 created (now 77d5cfee) github-bot
• (ws-neethi) branch dependabot/github_actions/codeql-action-03ad6eec6c created (now dbab4c6) github-bot
• (ws-xmlschema) branch dependabot/github_actions/codeql-action-03ad6eec6c created (now 94e8af72) github-bot
• (ws-neethi) branch dependabot/github_actions/actions/setup-java-6.0.1 created (now 1a37b43) github-bot
• (ws-wss4j) branch 3_0_x-fixes updated: Harden Loader to only load from file + jar by default (#689) coheigea
• (ws-wss4j) branch coheigea/subject-cert-constraints-javadoc updated (5242dadff -> 2c6857ba8) coheigea
• (ws-wss4j) branch master updated: Harden XML parsing via commons-secure-xml (#673) coheigea
• (ws-wss4j) branch 2_4_x-fixes updated: Improving docs for subject cert constraint (#690) coheigea
• (ws-wss4j) branch 3_0_x-fixes updated: Improving docs for subject cert constraint (#690) coheigea
• (ws-wss4j) branch coheigea/subject-cert-constraints-javadoc deleted (was 2c6857ba8) coheigea
• (ws-wss4j) branch master updated: Improving docs for subject cert constraint (#690) coheigea
• (ws-wss4j) branch coheigea/subject-cert-constraints-javadoc created (now 5242dadff) coheigea
  • (ws-wss4j) 01/01: Improving docs for subject cert constraint coheigea
• (ws-wss4j) branch 3_0_x-fixes updated: Harden XML parsing via commons-secure-xml (#673) coheigea
• (ws-wss4j) branch coheigea/loader deleted (was b58695277) coheigea
• (ws-wss4j) branch 2_4_x-fixes updated: Make sure for Attachment-Complete the mime type is read from the encrypted header (#688) coheigea
• (ws-wss4j) branch 3_0_x-fixes updated: Make sure for Attachment-Complete the mime type is read from the encrypted header (#688) coheigea
• (ws-wss4j) branch coheigea/encrypted-headers deleted (was cdaffe654) coheigea
• (ws-wss4j) branch master updated: Make sure for Attachment-Complete the mime type is read from the encrypted header (#688) coheigea
• (ws-wss4j) branch coheigea/encrypted-headers updated (cef14ab93 -> cdaffe654) coheigea
• (ws-axiom) branch dependabot/maven/maven-plugin-tools.version-3.16.0 created (now 8db1d2ecf) github-bot
• (ws-axiom) branch dependabot/maven/org.eclipse.platform-org.eclipse.osgi-3.24.300 created (now 6401516a4) github-bot
• (ws-axiom) branch dependabot/maven/mime4j.version-0.8.15 created (now ed50d7624) github-bot
• (ws-axiom) branch dependabot/maven/checkerframework.version-4.2.3 deleted (was 1bb5e5acd) github-bot
• (ws-axiom) branch dependabot/maven/org.slf4j-slf4j-bom-2.0.19 deleted (was 009d382d7) github-bot
• (ws-axiom) branch dependabot/maven/jetty.version-12.1.13 deleted (was df1c8bcc8) github-bot
• (ws-axiom) branch master updated: Bump groovy.version from 5.1.1 to 5.1.2 veithen
• (ws-axiom) branch dependabot/maven/groovy.version-5.1.2 deleted (was 269cc06ab) github-bot
• (ws-axiom) branch master updated: Bump checkerframework.version from 4.2.2 to 4.2.3 veithen
• (ws-axiom) branch master updated: Bump jetty.version from 12.1.12 to 12.1.13 veithen
• (ws-axiom) branch master updated: Bump org.slf4j:slf4j-bom from 2.0.18 to 2.0.19 veithen
• (ws-axiom) branch master updated: Bump com.diffplug.spotless:spotless-maven-plugin from 3.10.1 to 3.10.2 veithen
• (ws-axiom) branch dependabot/maven/com.diffplug.spotless-spotless-maven-plugin-3.10.2 deleted (was 7f4f96d4a) github-bot
• (ws-wss4j) branch coheigea/encrypted-header updated (37a413e26 -> 4470928b9) coheigea
• (ws-wss4j) branch coheigea/encrypted-header created (now fd7215dc2) coheigea
  • (ws-wss4j) 01/01: EncryptedHeader child confusion causing wrong protected-header selection coheigea
• (ws-wss4j) branch 2_4_x-fixes updated: EncryptedHeader child confusion causing wrong protected-header selection (#687) coheigea
• (ws-wss4j) branch 3_0_x-fixes updated: EncryptedHeader child confusion causing wrong protected-header selection (#687) coheigea
• (ws-wss4j) branch coheigea/encrypted-header deleted (was 4470928b9) coheigea
• (ws-wss4j) branch master updated: EncryptedHeader child confusion causing wrong protected-header selection (#687) coheigea
• (ws-wss4j) branch coheigea/encrypted-header updated (fd7215dc2 -> 37a413e26) coheigea
• (ws-wss4j) branch 2_4_x-fixes updated: Make sure we can't register a fake SOAP Body for lookup (#686) coheigea
• (ws-wss4j) branch 3_0_x-fixes updated: Make sure we can't register a fake SOAP Body for lookup (#686) coheigea
• (ws-wss4j) branch coheigea/dom-soap-body deleted (was c4c1be9a9) coheigea
• (ws-wss4j) branch master updated: Make sure we can't register a fake SOAP Body for lookup (#686) coheigea
• (ws-wss4j) branch coheigea/dom-soap-body updated (e186fdb52 -> c4c1be9a9) coheigea
• (ws-wss4j) branch 2_4_x-fixes updated: Fix sender-vouches signature referencing (#685) coheigea
• (ws-wss4j) branch 3_0_x-fixes updated: Fix sender-vouches signature referencing (#685) coheigea
• (ws-wss4j) branch coheigea/dom-soap-body created (now e186fdb52) coheigea
  • (ws-wss4j) 02/02: Make sure we can't register a fake SOAP Body for lookup coheigea
  • (ws-wss4j) 01/02: Updating replay cache docs coheigea
• (ws-wss4j) branch master updated: Docs update coheigea
• (ws-wss4j) branch master updated: Fix sender-vouches signature referencing (#685) coheigea
• (ws-wss4j) branch 2_4_x-fixes updated (cbb4ecc7d -> 087c46598) coheigea
  • (ws-wss4j) 01/01: Fix sender-vouches signature referencing (#685) coheigea
  • (ws-wss4j) branch 2_4_x-fixes updated (cbb4ecc7d -> 087c46598) coheigea
  • (ws-wss4j) 01/01: Fix sender-vouches signature referencing (#685) coheigea
• (ws-wss4j) branch coheigea/sender-vouches deleted (was 8a283166c) coheigea
• (ws-wss4j) branch coheigea/sender-vouches created (now 8a283166c) coheigea
  • (ws-wss4j) 01/01: Fix sender-vouches signature referencing coheigea
• (ws-wss4j) branch 2_4_x-fixes updated: Reject duplicate C14N settings + Detect unknown top-level policy assertions (#684) coheigea
• (ws-wss4j) branch coheigea/policy-fixes deleted (was cb9a1ea74) coheigea
• (ws-wss4j) branch 3_0_x-fixes updated: Reject duplicate C14N settings + Detect unknown top-level policy assertions (#684) coheigea
• (ws-wss4j) branch master updated: Reject duplicate C14N settings + Detect unknown top-level policy assertions (#684) coheigea
• (ws-wss4j) branch coheigea/policy-fixes created (now cb9a1ea74) coheigea
  • (ws-wss4j) 01/01: Reject duplicate C14N settings + Detect unknown top-level policy assertions coheigea
• (ws-xmlschema) branch master updated: Bump slf4j.version from 2.0.18 to 2.0.19 (#144) coheigea
• (ws-wss4j) branch master updated: WSS-729 Switch default JasyptPasswordEncryptor algorithm to PBEWithHmacSHA512AndAES_256 (#683) coheigea
• (ws-xmlschema) branch dependabot/maven/slf4j.version-2.0.19 deleted (was 3bfb0c76) github-bot
• (ws-wss4j) branch coheigea/WSS-729 deleted (was 470124c4f) coheigea
• (ws-xmlschema) branch dependabot/maven/slf4j.version-2.0.19 created (now 3bfb0c76) github-bot

• Earlier messages
• Later messages