[GitHub] [myfaces-tobago] dependabot[bot] opened a new pull request, #4142: build(deps): bump spring-boot.version from 2.7.12 to 2.7.13

2023-06-23 Thread via GitHub


dependabot[bot] opened a new pull request, #4142:
URL: https://github.com/apache/myfaces-tobago/pull/4142

   Bumps `spring-boot.version` from 2.7.12 to 2.7.13.
   Updates `spring-boot` from 2.7.12 to 2.7.13
   
   Release notes
   Sourced from https://github.com/spring-projects/spring-boot/releases";>spring-boot's 
releases.
   
   v2.7.13
   :lady_beetle: Bug Fixes
   
   Spring Boot properties migrator can create circular references https://redirect.github.com/spring-projects/spring-boot/issues/35919";>#35919
   Devtools does not support package-private main classes https://redirect.github.com/spring-projects/spring-boot/issues/35858";>#35858
   Java 20 is supported but there's no value for it in the JavaVersion enum 
https://redirect.github.com/spring-projects/spring-boot/issues/35758";>#35758
   Processing of @EndpointCloudFoundryExtension logs a 
warnings as it does not use @AliasFor on its override of the 
endpoint attribute https://redirect.github.com/spring-projects/spring-boot/pull/35716";>#35716
   Actuator loggers list endpoint throws exception on Log4J2 loggers with 
custom log levels https://redirect.github.com/spring-projects/spring-boot/issues/35227";>#35227
   Validation is not applied for ConfigurationProperties that implement 
Validator and use @ConstructorBinding https://redirect.github.com/spring-projects/spring-boot/issues/33669";>#33669
   
   :notebook_with_decorative_cover: Documentation
   
   Description of spring.data.mongodb.uri property incorrectly states that 
it overrides spring.data.mongodb.database https://redirect.github.com/spring-projects/spring-boot/issues/35686";>#35686
   Update description of spring-boot-starter-data-rest to clarify that it 
uses Spring MVC https://redirect.github.com/spring-projects/spring-boot/issues/35678";>#35678
   Move property notes up to external configuration section https://redirect.github.com/spring-projects/spring-boot/pull/35662";>#35662
   Document audience support in OAuth2 resource server https://redirect.github.com/spring-projects/spring-boot/pull/35286";>#35286
   Add @DynamicPropertySource to documented list of property 
source ordering https://redirect.github.com/spring-projects/spring-boot/issues/32901";>#32901
   
   :hammer: Dependency Upgrades
   
   Upgrade to Dropwizard Metrics 4.2.19 https://redirect.github.com/spring-projects/spring-boot/issues/35794";>#35794
   Upgrade to Hazelcast 5.1.7 https://redirect.github.com/spring-projects/spring-boot/issues/35987";>#35987
   Upgrade to Infinispan 13.0.18.Final https://redirect.github.com/spring-projects/spring-boot/issues/35795";>#35795
   Upgrade to Lombok 1.18.28 https://redirect.github.com/spring-projects/spring-boot/issues/35796";>#35796
   Upgrade to Micrometer 1.9.12 https://redirect.github.com/spring-projects/spring-boot/issues/35725";>#35725
   Upgrade to Netty 4.1.94.Final https://redirect.github.com/spring-projects/spring-boot/issues/35988";>#35988
   Upgrade to Reactor Bom 2020.0.33 https://redirect.github.com/spring-projects/spring-boot/issues/35726";>#35726
   Upgrade to Spring AMQP 2.4.13 https://redirect.github.com/spring-projects/spring-boot/issues/35727";>#35727
   Upgrade to Spring Data Bom 2021.2.13 https://redirect.github.com/spring-projects/spring-boot/issues/35728";>#35728
   Upgrade to Spring Framework 5.3.28 https://redirect.github.com/spring-projects/spring-boot/issues/35729";>#35729
   Upgrade to Spring Security 5.7.9 https://redirect.github.com/spring-projects/spring-boot/issues/35730";>#35730
   Upgrade to Spring Session Bom 2021.2.2 https://redirect.github.com/spring-projects/spring-boot/issues/35731";>#35731
   Upgrade to Tomcat 9.0.76 https://redirect.github.com/spring-projects/spring-boot/issues/35799";>#35799
   Upgrade to UnboundID LDAPSDK 6.0.9 https://redirect.github.com/spring-projects/spring-boot/issues/35800";>#35800
   Upgrade to Undertow 2.2.25.Final https://redirect.github.com/spring-projects/spring-boot/issues/35801";>#35801
   
   :heart: Contributors
   Thank you to all the contributors who worked on this release:
   https://github.com/bbulgarelli";>@​bbulgarelli, 
https://github.com/bikash30851";>@​bikash30851, and https://github.com/twobiers";>@​twobiers
   
   
   
   Commits
   
   https://github.com/spring-projects/spring-boot/commit/de539742baabdf925eae952e35a1baca922d19ac";>de53974
 Release v2.7.13
   https://github.com/spring-projects/spring-boot/commit/fff30efed5a9029065132a512bee7fd44cd253d1";>fff30ef
 Configure timeouts on staging builds
   https://github.com/spring-projects/spring-boot/commit/f6841c3c160294659d646e8ea044dff2daa658bc";>f6841c3
 Revert "Start building against Spring WS 3.1.7 snapshots"
   https://github.com/spring-projects/spring-boot/commit/0fb4c9a09585493b731b2c1f1f132a92456f0a8d";>0fb4c9a
 Prohibit upgrades to RSocket 1.1.4
   https://github.com/spring-projects/spring-boot/commit/cb5330fd116b9e6dc23345fa1d343c4aa8de1103";>cb5330f
 Upgrade to Spring Session Bom 2021.2.2
   https://github.com/spring-proje

[GitHub] [myfaces-tobago] dependabot[bot] opened a new pull request, #4141: build(deps): bump joinfaces.version from 4.7.12 to 4.7.13

2023-06-23 Thread via GitHub


dependabot[bot] opened a new pull request, #4141:
URL: https://github.com/apache/myfaces-tobago/pull/4141

   Bumps `joinfaces.version` from 4.7.12 to 4.7.13.
   Updates `joinfaces-autoconfigure` from 4.7.12 to 4.7.13
   
   Release notes
   Sourced from https://github.com/joinfaces/joinfaces/releases";>joinfaces-autoconfigure's
 releases.
   
   4.7.13
   What's Changed
   
   Bump io.github.classgraph:classgraph from 4.8.158 to 4.8.160 by https://github.com/dependabot";>@​dependabot in https://redirect.github.com/joinfaces/joinfaces/pull/1751";>joinfaces/joinfaces#1751
   Bump nebula.lint from 18.0.3 to 18.1.0 by https://github.com/dependabot";>@​dependabot in https://redirect.github.com/joinfaces/joinfaces/pull/1755";>joinfaces/joinfaces#1755
   Bump springBootVersion from 2.7.12 to 2.7.13 by https://github.com/dependabot";>@​dependabot in https://redirect.github.com/joinfaces/joinfaces/pull/1758";>joinfaces/joinfaces#1758
   
   Full Changelog: https://github.com/joinfaces/joinfaces/compare/4.7.12...4.7.13";>https://github.com/joinfaces/joinfaces/compare/4.7.12...4.7.13
   
   
   
   Commits
   
   https://github.com/joinfaces/joinfaces/commit/b7d9b130cc4e1f162b889a5c6369a940c52705eb";>b7d9b13
 Merge pull request https://redirect.github.com/joinfaces/joinfaces/issues/1758";>#1758 
from joinfaces/dependabot/gradle/4.7.x/springBootVer...
   https://github.com/joinfaces/joinfaces/commit/26417b282a7a731800a1e76f662046ae92b9361a";>26417b2
 Bump springBootVersion from 2.7.12 to 2.7.13
   https://github.com/joinfaces/joinfaces/commit/906904a14e9dc26ccfaeef4a3b6c9b2efa580fde";>906904a
 Merge pull request https://redirect.github.com/joinfaces/joinfaces/issues/1755";>#1755 
from joinfaces/dependabot/gradle/4.7.x/nebula.lint-1...
   https://github.com/joinfaces/joinfaces/commit/9bbfa6c1d5f1c28c5c9d4261d57438e895d2a3d1";>9bbfa6c
 Bump nebula.lint from 18.0.3 to 18.1.0
   https://github.com/joinfaces/joinfaces/commit/9173874d07d01a0de41b7ea9144629390a2243ca";>9173874
 Merge pull request https://redirect.github.com/joinfaces/joinfaces/issues/1751";>#1751 
from joinfaces/dependabot/gradle/4.7.x/io.github.cla...
   https://github.com/joinfaces/joinfaces/commit/f70b1e1874a79f92e3a611e3cf0f1fce7fd2cf97";>f70b1e1
 Bump io.github.classgraph:classgraph from 4.8.158 to 4.8.160
   See full diff in https://github.com/joinfaces/joinfaces/compare/4.7.12...4.7.13";>compare 
view
   
   
   
   
   Updates `joinfaces-maven-plugin` from 4.7.12 to 4.7.13
   
   Release notes
   Sourced from https://github.com/joinfaces/joinfaces/releases";>joinfaces-maven-plugin's 
releases.
   
   4.7.13
   What's Changed
   
   Bump io.github.classgraph:classgraph from 4.8.158 to 4.8.160 by https://github.com/dependabot";>@​dependabot in https://redirect.github.com/joinfaces/joinfaces/pull/1751";>joinfaces/joinfaces#1751
   Bump nebula.lint from 18.0.3 to 18.1.0 by https://github.com/dependabot";>@​dependabot in https://redirect.github.com/joinfaces/joinfaces/pull/1755";>joinfaces/joinfaces#1755
   Bump springBootVersion from 2.7.12 to 2.7.13 by https://github.com/dependabot";>@​dependabot in https://redirect.github.com/joinfaces/joinfaces/pull/1758";>joinfaces/joinfaces#1758
   
   Full Changelog: https://github.com/joinfaces/joinfaces/compare/4.7.12...4.7.13";>https://github.com/joinfaces/joinfaces/compare/4.7.12...4.7.13
   
   
   
   Commits
   
   https://github.com/joinfaces/joinfaces/commit/b7d9b130cc4e1f162b889a5c6369a940c52705eb";>b7d9b13
 Merge pull request https://redirect.github.com/joinfaces/joinfaces/issues/1758";>#1758 
from joinfaces/dependabot/gradle/4.7.x/springBootVer...
   https://github.com/joinfaces/joinfaces/commit/26417b282a7a731800a1e76f662046ae92b9361a";>26417b2
 Bump springBootVersion from 2.7.12 to 2.7.13
   https://github.com/joinfaces/joinfaces/commit/906904a14e9dc26ccfaeef4a3b6c9b2efa580fde";>906904a
 Merge pull request https://redirect.github.com/joinfaces/joinfaces/issues/1755";>#1755 
from joinfaces/dependabot/gradle/4.7.x/nebula.lint-1...
   https://github.com/joinfaces/joinfaces/commit/9bbfa6c1d5f1c28c5c9d4261d57438e895d2a3d1";>9bbfa6c
 Bump nebula.lint from 18.0.3 to 18.1.0
   https://github.com/joinfaces/joinfaces/commit/9173874d07d01a0de41b7ea9144629390a2243ca";>9173874
 Merge pull request https://redirect.github.com/joinfaces/joinfaces/issues/1751";>#1751 
from joinfaces/dependabot/gradle/4.7.x/io.github.cla...
   https://github.com/joinfaces/joinfaces/commit/f70b1e1874a79f92e3a611e3cf0f1fce7fd2cf97";>f70b1e1
 Bump io.github.classgraph:classgraph from 4.8.158 to 4.8.160
   See full diff in https://github.com/joinfaces/joinfaces/compare/4.7.12...4.7.13";>compare 
view
   
   
   
   
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You 

[GitHub] [myfaces] melloware opened a new pull request, #590: MYFACES-4609: Web.xml init params evaluate for EL expressions

2023-06-23 Thread via GitHub


melloware opened a new pull request, #590:
URL: https://github.com/apache/myfaces/pull/590

   This was my idea was to refactor this where the init params are being read 
to evaluate them for EL.
   
   However I suspect using FacesContext here is not correct?
   
   ```java
   FacesContext facesContext = FacesContext.getCurrentInstance();
   return (T) 
facesContext.getApplication().evaluateExpressionGet(facesContext, param, 
Object.class);
   ```


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Created] (MYFACES-4609) Web.xml parameters evaluate as EL

2023-06-23 Thread Melloware (Jira)
Melloware created MYFACES-4609:
--

 Summary: Web.xml parameters evaluate as EL
 Key: MYFACES-4609
 URL: https://issues.apache.org/jira/browse/MYFACES-4609
 Project: MyFaces Core
  Issue Type: New Feature
  Components: General
Affects Versions: 4.0.1
Reporter: Melloware


Based on the previous discussion that web.xml init parameters should be 
evaluated for EL expressions by default.

for example:
{code:java}

   jakarta.faces.FACELETS_REFRESH_PERIOD
   #{facesContext.application.projectStage eq 'Development' ? 2 : 
-1}
 {code}



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Commented] (MYFACES-4608) FACELETS_REFRESH_PERIOD Settings

2023-06-23 Thread Paul Nicolucci (Jira)


[ 
https://issues.apache.org/jira/browse/MYFACES-4608?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17736470#comment-17736470
 ] 

Paul Nicolucci commented on MYFACES-4608:
-

Specification issue opened here: https://github.com/jakartaee/faces/issues/1821

> FACELETS_REFRESH_PERIOD Settings
> 
>
> Key: MYFACES-4608
> URL: https://issues.apache.org/jira/browse/MYFACES-4608
> Project: MyFaces Core
>  Issue Type: New Feature
>  Components: General
>Affects Versions: 2.3.10, 3.0.2, 2.3-next-M8, 4.0.1
>Reporter: Melloware
>Priority: Major
>
> Original issue came up in Quarkus conversation: 
> [https://github.com/quarkiverse/quarkus-primefaces/issues/75]
> User had this setting in web.xml and was wondering why he could not hot 
> reload pages in DEV Mode
> {code:java}
>     
>         jakarta.faces.FACELETS_REFRESH_PERIOD
>         -1
>      
> {code}
> Question for the team based on what Mojarra is doing.
>  # In PRODUCTION mode should we force it to -1 and ignore the user setting 
> like Mojarra does?
>  # If the value is not a positive number in DEV mode should we ignore it or 
> log a warning?
>  
> Any other ideas?



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[GitHub] [myfaces-tobago] henningn merged pull request #4140: chore: activate spring boot example

2023-06-23 Thread via GitHub


henningn merged PR #4140:
URL: https://github.com/apache/myfaces-tobago/pull/4140


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [myfaces-tobago] henningn opened a new pull request, #4140: chore: activate spring boot example

2023-06-23 Thread via GitHub


henningn opened a new pull request, #4140:
URL: https://github.com/apache/myfaces-tobago/pull/4140

   (no comment)


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [myfaces-tobago] henningn merged pull request #4139: fix: CVE-2022-25883

2023-06-23 Thread via GitHub


henningn merged PR #4139:
URL: https://github.com/apache/myfaces-tobago/pull/4139


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [myfaces-tobago] henningn opened a new pull request, #4139: fix: CVE-2022-25883

2023-06-23 Thread via GitHub


henningn opened a new pull request, #4139:
URL: https://github.com/apache/myfaces-tobago/pull/4139

   (no comment)


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [myfaces-tobago] henningn merged pull request #4138: fix: CVE-2022-25883

2023-06-23 Thread via GitHub


henningn merged PR #4138:
URL: https://github.com/apache/myfaces-tobago/pull/4138


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [myfaces-tobago] henningn opened a new pull request, #4138: fix: CVE-2022-25883

2023-06-23 Thread via GitHub


henningn opened a new pull request, #4138:
URL: https://github.com/apache/myfaces-tobago/pull/4138

   * update "semver" to 7.5.3 to fix CVE-2022-25883


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@myfaces.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org