[cxf] branch dependabot/maven/org.glassfish.corba-glassfish-corba-orb-4.2.5 created (now f7ab94a0b9)

2023-09-25 Thread github-bot
This is an automated email from the ASF dual-hosted git repository.

github-bot pushed a change to branch 
dependabot/maven/org.glassfish.corba-glassfish-corba-orb-4.2.5
in repository https://gitbox.apache.org/repos/asf/cxf.git


  at f7ab94a0b9 Bump org.glassfish.corba:glassfish-corba-orb from 4.2.4 to 
4.2.5

No new revisions were added by this update.



[cxf] 03/03: Recording .gitmergeinfo Changes

2023-09-25 Thread reta
This is an automated email from the ASF dual-hosted git repository.

reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git

commit f247acd4cfd885ebd036c66aea2079eff01ad0fa
Author: Andriy Redko 
AuthorDate: Mon Sep 25 10:43:38 2023 -0400

Recording .gitmergeinfo Changes
---
 .gitmergeinfo | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.gitmergeinfo b/.gitmergeinfo
index c572edf2c7..e5cc2e22ae 100644
--- a/.gitmergeinfo
+++ b/.gitmergeinfo
@@ -465,6 +465,7 @@ M 8207f6bf9c0e4f1833ba20ba61adb6bff0921253
 M 82bae36fd9a04d9bdd897f89f0b7988c3be2b9e6
 M 8323d4cb042ac4b6b073e8ee44d6dc4489e5
 M 8394701f3327adaac409d950a1756eca9fc7a0c8
+M 840ad558856fcfb37cdb42ff15f9e3e31bdb83e0
 M 84e897dfbda3bff1d6be3c3b44ef36c039cb8c92
 M 8502ca81b4b7711e803ed124173581b5050ae4cc
 M 85d952cfdd706a1a91ff2a82fbbe9e52da88595a
@@ -570,6 +571,7 @@ M b3374081627e6ead5c9dba6c6e937d397e0c713c
 M b3d51944942ce2a63ea7f6f05980ab9164d2a79e
 M b40a2e5bf71e70a92bb5c782890d017c1fb2922a
 M b44d82d3496cfd27e920b81c563c06aa4f7763e4
+M b44fa59df40a897c556d3c64880a6bec5654caa0
 M b49846c8c4275fe7758449e45e473c1a1ab3bdd6
 M b4f5181ac1fddaf0276b4564e4cf6e9f6140bbd0
 M b546325057f0baac221d0f2a535ef1ee8c0956f7



[cxf] 02/03: Bump actions/checkout from 4.0.0 to 4.1.0 (#1450)

2023-09-25 Thread reta
This is an automated email from the ASF dual-hosted git repository.

reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git

commit 538dcf9874147f5477fda43a1c5ffdbc02a7b3e1
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Mon Sep 25 09:05:42 2023 -0400

Bump actions/checkout from 4.0.0 to 4.1.0 (#1450)

Bumps [actions/checkout](https://github.com/actions/checkout) from 4.0.0 to 
4.1.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- 
[Commits](https://github.com/actions/checkout/compare/3df4ab11eba7bda6032a0b82a6bb43b11571feac...8ade135a41bc03ea155e62e844d188df1ea18608)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] 
Co-authored-by: dependabot[bot] 
<49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit 840ad558856fcfb37cdb42ff15f9e3e31bdb83e0)

# Conflicts:
#   .github/workflows/codeql-analysis.yml
#   .github/workflows/pull-request-build.yml
#   .github/workflows/scorecards.yml
---
 .github/workflows/codeql-analysis.yml| 2 +-
 .github/workflows/pull-request-build.yml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/codeql-analysis.yml 
b/.github/workflows/codeql-analysis.yml
index 6e8446ad5c..05710c6f06 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -37,7 +37,7 @@ jobs:
 
 steps:
 - name: Checkout repository
-  uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
+  uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
   with:
 # We must fetch at least the immediate parents so that if this is
 # a pull request then we can checkout the head.
diff --git a/.github/workflows/pull-request-build.yml 
b/.github/workflows/pull-request-build.yml
index 61db75033c..85b3817183 100644
--- a/.github/workflows/pull-request-build.yml
+++ b/.github/workflows/pull-request-build.yml
@@ -15,7 +15,7 @@ jobs:
   pull-requests: read
 timeout-minutes: 130
 steps:
-  - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # 
v3.6.0
+  - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # 
v4.1.0
   - name: Set up JDK 11
 uses: actions/setup-java@0ab4596768b603586c0de567f2430c30f5b0d2b0 # 
v3.13.0
 with:



[cxf] 01/03: Bump actions/setup-java from 3.12.0 to 3.13.0 (#1449)

2023-09-25 Thread reta
This is an automated email from the ASF dual-hosted git repository.

reta pushed a commit to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git

commit 50bb0d6a83c2fbfac7b3f0e0d4d14a2a7535f680
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Mon Sep 25 07:43:53 2023 -0400

Bump actions/setup-java from 3.12.0 to 3.13.0 (#1449)

Bumps [actions/setup-java](https://github.com/actions/setup-java) from 
3.12.0 to 3.13.0.
- [Release notes](https://github.com/actions/setup-java/releases)
- 
[Commits](https://github.com/actions/setup-java/compare/cd89f46ac9d01407894225f350157564c9c7cee2...0ab4596768b603586c0de567f2430c30f5b0d2b0)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] 
Co-authored-by: dependabot[bot] 
<49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit b44fa59df40a897c556d3c64880a6bec5654caa0)

# Conflicts:
#   .github/workflows/codeql-analysis.yml
#   .github/workflows/pull-request-build.yml
---
 .github/workflows/codeql-analysis.yml| 2 +-
 .github/workflows/pull-request-build.yml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/codeql-analysis.yml 
b/.github/workflows/codeql-analysis.yml
index 9caa45b965..6e8446ad5c 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -43,7 +43,7 @@ jobs:
 # a pull request then we can checkout the head.
 fetch-depth: 2
 - name: Setup JDK 11
-  uses: actions/setup-java@cd89f46ac9d01407894225f350157564c9c7cee2 # 
v3.12.0
+  uses: actions/setup-java@0ab4596768b603586c0de567f2430c30f5b0d2b0 # 
v3.13.0
   with:
 distribution: 'temurin'
 java-version: '11'
diff --git a/.github/workflows/pull-request-build.yml 
b/.github/workflows/pull-request-build.yml
index d38f1abd57..61db75033c 100644
--- a/.github/workflows/pull-request-build.yml
+++ b/.github/workflows/pull-request-build.yml
@@ -17,7 +17,7 @@ jobs:
 steps:
   - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # 
v3.6.0
   - name: Set up JDK 11
-uses: actions/setup-java@cd89f46ac9d01407894225f350157564c9c7cee2 # 
v3.12.0
+uses: actions/setup-java@0ab4596768b603586c0de567f2430c30f5b0d2b0 # 
v3.13.0
 with:
   java-version: '11'
   distribution: 'temurin'



[cxf] branch 3.6.x-fixes updated (bb6497e817 -> f247acd4cf)

2023-09-25 Thread reta
This is an automated email from the ASF dual-hosted git repository.

reta pushed a change to branch 3.6.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git


from bb6497e817 Downgrade Apache ActiveMQ to 5.17.5 (since 5.18.x require 
JMS 2.0)
 new 50bb0d6a83 Bump actions/setup-java from 3.12.0 to 3.13.0 (#1449)
 new 538dcf9874 Bump actions/checkout from 4.0.0 to 4.1.0 (#1450)
 new f247acd4cf Recording .gitmergeinfo Changes

The 3 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.


Summary of changes:
 .github/workflows/codeql-analysis.yml| 4 ++--
 .github/workflows/pull-request-build.yml | 4 ++--
 .gitmergeinfo| 2 ++
 3 files changed, 6 insertions(+), 4 deletions(-)



[cxf] branch dependabot/github_actions/actions/checkout-4.1.0 deleted (was d0b84b128b)

2023-09-25 Thread github-bot
This is an automated email from the ASF dual-hosted git repository.

github-bot pushed a change to branch 
dependabot/github_actions/actions/checkout-4.1.0
in repository https://gitbox.apache.org/repos/asf/cxf.git


 was d0b84b128b Bump actions/checkout from 4.0.0 to 4.1.0

The revisions that were on this branch are still contained in
other references; therefore, this change does not discard any commits
from the repository.



[cxf] branch main updated: Bump actions/checkout from 4.0.0 to 4.1.0 (#1450)

2023-09-25 Thread reta
This is an automated email from the ASF dual-hosted git repository.

reta pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/cxf.git


The following commit(s) were added to refs/heads/main by this push:
 new 840ad55885 Bump actions/checkout from 4.0.0 to 4.1.0 (#1450)
840ad55885 is described below

commit 840ad558856fcfb37cdb42ff15f9e3e31bdb83e0
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Mon Sep 25 09:05:42 2023 -0400

Bump actions/checkout from 4.0.0 to 4.1.0 (#1450)

Bumps [actions/checkout](https://github.com/actions/checkout) from 4.0.0 to 
4.1.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- 
[Commits](https://github.com/actions/checkout/compare/3df4ab11eba7bda6032a0b82a6bb43b11571feac...8ade135a41bc03ea155e62e844d188df1ea18608)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] 
Co-authored-by: dependabot[bot] 
<49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql-analysis.yml| 2 +-
 .github/workflows/pull-request-build.yml | 2 +-
 .github/workflows/scorecards.yml | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql-analysis.yml 
b/.github/workflows/codeql-analysis.yml
index bf214bcd1d..7e46d223e8 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -28,7 +28,7 @@ jobs:
 
 steps:
 - name: Checkout repository
-  uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
+  uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
 
 - name: Setup JDK 17
   uses: actions/setup-java@0ab4596768b603586c0de567f2430c30f5b0d2b0 # 
v3.13.0
diff --git a/.github/workflows/pull-request-build.yml 
b/.github/workflows/pull-request-build.yml
index 22b71a3492..6d3cc5ae2b 100644
--- a/.github/workflows/pull-request-build.yml
+++ b/.github/workflows/pull-request-build.yml
@@ -15,7 +15,7 @@ jobs:
   pull-requests: read
 timeout-minutes: 130
 steps:
-  - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # 
v3.6.0
+  - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # 
v3.6.0
   - name: Set up JDK 17
 uses: actions/setup-java@0ab4596768b603586c0de567f2430c30f5b0d2b0 # 
v3.13.0
 with:
diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
index 348d7b0934..09e67afe67 100644
--- a/.github/workflows/scorecards.yml
+++ b/.github/workflows/scorecards.yml
@@ -25,7 +25,7 @@ jobs:
 
 steps:
   - name: "Checkout code"
-uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # 
tag=v3.0.0
+uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # 
tag=v3.0.0
 with:
   persist-credentials: false
 



[cxf-fediz] branch dependabot/github_actions/actions/setup-java-3.13.0 created (now a47a1297)

2023-09-25 Thread github-bot
This is an automated email from the ASF dual-hosted git repository.

github-bot pushed a change to branch 
dependabot/github_actions/actions/setup-java-3.13.0
in repository https://gitbox.apache.org/repos/asf/cxf-fediz.git


  at a47a1297 Bump actions/setup-java from 3.12.0 to 3.13.0

No new revisions were added by this update.



[cxf-fediz] branch dependabot/github_actions/actions/checkout-4.1.0 created (now 268574f4)

2023-09-25 Thread github-bot
This is an automated email from the ASF dual-hosted git repository.

github-bot pushed a change to branch 
dependabot/github_actions/actions/checkout-4.1.0
in repository https://gitbox.apache.org/repos/asf/cxf-fediz.git


  at 268574f4 Bump actions/checkout from 4.0.0 to 4.1.0

No new revisions were added by this update.



[cxf] branch dependabot/maven/org.bsc.maven-maven-processor-plugin-5.0-jdk8 deleted (was 2e7ab2db4e)

2023-09-25 Thread github-bot
This is an automated email from the ASF dual-hosted git repository.

github-bot pushed a change to branch 
dependabot/maven/org.bsc.maven-maven-processor-plugin-5.0-jdk8
in repository https://gitbox.apache.org/repos/asf/cxf.git


 was 2e7ab2db4e Bump org.bsc.maven:maven-processor-plugin from 5.0 to 
5.0-jdk8

The revisions that were on this branch are still contained in
other references; therefore, this change does not discard any commits
from the repository.



[cxf] branch dependabot/github_actions/actions/checkout-4.1.0 updated (88c9e9a7ff -> d0b84b128b)

2023-09-25 Thread github-bot
This is an automated email from the ASF dual-hosted git repository.

github-bot pushed a change to branch 
dependabot/github_actions/actions/checkout-4.1.0
in repository https://gitbox.apache.org/repos/asf/cxf.git


omit 88c9e9a7ff Bump actions/checkout from 4.0.0 to 4.1.0
 add b44fa59df4 Bump actions/setup-java from 3.12.0 to 3.13.0 (#1449)
 add d0b84b128b Bump actions/checkout from 4.0.0 to 4.1.0

This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version.  This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:

 * -- * -- B -- O -- O -- O   (88c9e9a7ff)
\
 N -- N -- N   
refs/heads/dependabot/github_actions/actions/checkout-4.1.0 (d0b84b128b)

You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.

Any revisions marked "omit" are not gone; other references still
refer to them.  Any revisions marked "discard" are gone forever.

No new revisions were added by this update.

Summary of changes:
 .github/workflows/codeql-analysis.yml| 2 +-
 .github/workflows/pull-request-build.yml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)



[cxf] branch dependabot/github_actions/actions/setup-java-3.13.0 deleted (was 19f41e7359)

2023-09-25 Thread github-bot
This is an automated email from the ASF dual-hosted git repository.

github-bot pushed a change to branch 
dependabot/github_actions/actions/setup-java-3.13.0
in repository https://gitbox.apache.org/repos/asf/cxf.git


 was 19f41e7359 Bump actions/setup-java from 3.12.0 to 3.13.0

The revisions that were on this branch are still contained in
other references; therefore, this change does not discard any commits
from the repository.



[cxf] branch main updated: Bump actions/setup-java from 3.12.0 to 3.13.0 (#1449)

2023-09-25 Thread reta
This is an automated email from the ASF dual-hosted git repository.

reta pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/cxf.git


The following commit(s) were added to refs/heads/main by this push:
 new b44fa59df4 Bump actions/setup-java from 3.12.0 to 3.13.0 (#1449)
b44fa59df4 is described below

commit b44fa59df40a897c556d3c64880a6bec5654caa0
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Mon Sep 25 07:43:53 2023 -0400

Bump actions/setup-java from 3.12.0 to 3.13.0 (#1449)

Bumps [actions/setup-java](https://github.com/actions/setup-java) from 
3.12.0 to 3.13.0.
- [Release notes](https://github.com/actions/setup-java/releases)
- 
[Commits](https://github.com/actions/setup-java/compare/cd89f46ac9d01407894225f350157564c9c7cee2...0ab4596768b603586c0de567f2430c30f5b0d2b0)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] 
Co-authored-by: dependabot[bot] 
<49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql-analysis.yml| 2 +-
 .github/workflows/pull-request-build.yml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/codeql-analysis.yml 
b/.github/workflows/codeql-analysis.yml
index f43cfa9e1b..bf214bcd1d 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -31,7 +31,7 @@ jobs:
   uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
 
 - name: Setup JDK 17
-  uses: actions/setup-java@cd89f46ac9d01407894225f350157564c9c7cee2 # 
v3.12.0
+  uses: actions/setup-java@0ab4596768b603586c0de567f2430c30f5b0d2b0 # 
v3.13.0
   with:
 distribution: 'temurin'
 java-version: '17'
diff --git a/.github/workflows/pull-request-build.yml 
b/.github/workflows/pull-request-build.yml
index d68cb246b0..22b71a3492 100644
--- a/.github/workflows/pull-request-build.yml
+++ b/.github/workflows/pull-request-build.yml
@@ -17,7 +17,7 @@ jobs:
 steps:
   - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # 
v3.6.0
   - name: Set up JDK 17
-uses: actions/setup-java@cd89f46ac9d01407894225f350157564c9c7cee2 # 
v3.12.0
+uses: actions/setup-java@0ab4596768b603586c0de567f2430c30f5b0d2b0 # 
v3.13.0
 with:
   java-version: '17'
   distribution: 'temurin'