dependabot[bot] opened a new pull request, #192: URL: https://github.com/apache/roller/pull/192
Bumps [org.apache.struts:struts2-core](https://github.com/apache/struts) from 2.5.29 to 6.8.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/apache/struts/releases";>org.apache.struts:struts2-core's releases</a>.</em></p> <blockquote> <h2>Struts 6.8.0</h2> <h2>What's Changed</h2> <ul> <li>WW-5544 Marks ReflectionContextFactory as deprecated and uses ActionContext instead by <a href="https://github.com/lukaszlenart";><code>@lukaszlenart</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1254";>apache/struts#1254</a></li> <li>WW-5546 Fixes NPE when uploaded file is empty by <a href="https://github.com/lukaszlenart";><code>@lukaszlenart</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1262";>apache/struts#1262</a></li> <li>Cleans up all uploaded files by <a href="https://github.com/lukaszlenart";><code>@lukaszlenart</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1306";>apache/struts#1306</a></li> <li>WW-5524 Fixup StrutsConverterFactory - Struts 6 by <a href="https://github.com/lukaszlenart";><code>@lukaszlenart</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1316";>apache/struts#1316</a></li> <li>WW-5511 Removes deprecated addCspHeaders method by <a href="https://github.com/lukaszlenart";><code>@lukaszlenart</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1317";>apache/struts#1317</a></li> <li>WW-5564 Upgrades commons-fileupload to version 1.6.0 by <a href="https://github.com/lukaszlenart";><code>@lukaszlenart</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1328";>apache/struts#1328</a></li> <li>WW-5567 Bump log4j2.version from 2.24.1 to 2.25.1 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/apache/struts/pull/1330";>apache/struts#1330</a> <a href="https://redirect.github.com/apache/struts/pull/1337";>apache/struts#1337</a></li> <li>WW-5568 Bump jackson.version from 2.18.0 to 2.20.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/apache/struts/pull/1334";>apache/struts#1334</a></li> <li>WW-5570 Bump org.apache.commons:commons-collections4 from 4.4 to 4.5.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/apache/struts/pull/1342";>apache/struts#1342</a></li> <li>WW-5571 Bump org.apache.commons:commons-compress from 1.27.1 to 1.28.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/apache/struts/pull/1344";>apache/struts#1344</a></li> <li>WW-5504 Allows to use request instead of session attribute to store nonce by <a href="https://github.com/lukaszlenart";><code>@lukaszlenart</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1174";>apache/struts#1174</a></li> </ul> <h3>Dependencies</h3> <ul> <li>Bump slf4j.version from 2.0.16 to 2.0.17 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/apache/struts/pull/1335";>apache/struts#1335</a></li> <li>Bump org.apache.maven.plugins:maven-wrapper-plugin from 3.3.2 to 3.3.3 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in</li> <li>Bump org.apache.maven.plugins:maven-project-info-reports-plugin from 3.7.0 to 3.9.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/apache/struts/pull/1343";>apache/struts#1343</a></li> <li>Bump org.assertj:assertj-core from 3.26.3 to 3.27.4 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/apache/struts/pull/1345";>apache/struts#1345</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/apache/struts/compare/STRUTS_6_7_4...STRUTS_6_8_0";>https://github.com/apache/struts/compare/STRUTS_6_7_4...STRUTS_6_8_0</a></p> <h2>Struts 6.7.4</h2> <h2>What's Changed</h2> <ul> <li>WW-5493 Restores parameters and uses getAttributes() by <a href="https://github.com/lukaszlenart";><code>@lukaszlenart</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1141";>apache/struts#1141</a></li> <li>Sets version to 6.7.1-SNAPSHOT to prepare for another development cycle by <a href="https://github.com/lukaszlenart";><code>@lukaszlenart</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1150";>apache/struts#1150</a></li> <li>WW-5501 Exclude malicious names by <a href="https://github.com/lukaszlenart";><code>@lukaszlenart</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1156";>apache/struts#1156</a></li> <li>Updates .asf.yaml to match main by <a href="https://github.com/lukaszlenart";><code>@lukaszlenart</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1158";>apache/struts#1158</a></li> <li>Excludes new & old packages by <a href="https://github.com/lukaszlenart";><code>@lukaszlenart</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1167";>apache/struts#1167</a></li> <li>WW-5498 Adds devMode errors as action messages to avoid breaking validation logic by <a href="https://github.com/lukaszlenart";><code>@lukaszlenart</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1168";>apache/struts#1168</a></li> <li>WW-5500 Extends pattern to validate multipart uploads by <a href="https://github.com/lukaszlenart";><code>@lukaszlenart</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1169";>apache/struts#1169</a></li> <li>WW-5501 Only exclude malicious file names by <a href="https://github.com/lukaszlenart";><code>@lukaszlenart</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1181";>apache/struts#1181</a></li> <li>WW-5512 Extends the container to support injecting optional parameters into constructor by <a href="https://github.com/lukaszlenart";><code>@lukaszlenart</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1175";>apache/struts#1175</a></li> <li>Fixes nightlies builds by <a href="https://github.com/lukaszlenart";><code>@lukaszlenart</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1192";>apache/struts#1192</a></li> <li>WW-5516 Fix TemplateDir and Theme fallback to Request/Session/Application attributes by <a href="https://github.com/kusalk";><code>@kusalk</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1190";>apache/struts#1190</a></li> <li>Simplifies Jenkinsfile to build Struts 6.x by <a href="https://github.com/lukaszlenart";><code>@lukaszlenart</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1194";>apache/struts#1194</a></li> <li>Defines proper snapshot version by <a href="https://github.com/lukaszlenart";><code>@lukaszlenart</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1195";>apache/struts#1195</a></li> <li>Defines proper snapshot version for BOM by <a href="https://github.com/lukaszlenart";><code>@lukaszlenart</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1202";>apache/struts#1202</a></li> <li>6.7: WW-5526 Fix AttributeMap NPE when PageContext has no request by <a href="https://github.com/kusalk";><code>@kusalk</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1210";>apache/struts#1210</a></li> <li>WW-5501 Ignores DMI related action field by <a href="https://github.com/lukaszlenart";><code>@lukaszlenart</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1211";>apache/struts#1211</a></li> <li>6.7: WW-5528 Ensure multipart upload illegal characters reported as error by <a href="https://github.com/kusalk";><code>@kusalk</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1215";>apache/struts#1215</a></li> <li>WW-5501 Reverts all changes related to WW-5501 by <a href="https://github.com/lukaszlenart";><code>@lukaszlenart</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1218";>apache/struts#1218</a></li> <li>6.7: WW-5525 Fix NPE in ProxyUtil for SecurityMemberAccess originating static members by <a href="https://github.com/kusalk";><code>@kusalk</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1220";>apache/struts#1220</a></li> <li>Drops unused misleading setter setMaxLength in favour of setMaxlength by <a href="https://github.com/lukaszlenart";><code>@lukaszlenart</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1222";>apache/struts#1222</a></li> <li>WW-5531 Enforce JRE8 compatibility (when compiled on JDK9+) by <a href="https://github.com/kusalk";><code>@kusalk</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1225";>apache/struts#1225</a></li> <li>WW-5529 Adds autogenerated files with updated desc by <a href="https://github.com/lukaszlenart";><code>@lukaszlenart</code></a> in <a href="https://redirect.github.com/apache/struts/pull/1226";>apache/struts#1226</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/apache/struts/compare/STRUTS_6_7_0...STRUTS_6_7_4";>https://github.com/apache/struts/compare/STRUTS_6_7_0...STRUTS_6_7_4</a></p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/apache/struts/commits";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/apache/roller/network/alerts). </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
