GitHub / apache/axis-axis2-java-core / commits
Apache Axis2-Java Core
| SHA | Message | Author | Date | Stats |
|---|---|---|---|---|
| 2f4e2d3e |
Cover IPv6 response endpoints and record how the body ceilings measure
Co-authored-by: Claude Opus 5 <n****y@a****m> |
Robert Lazarski <r****i@g****m> | 14 days ago | |
| dccf1530 | merge Merge pull request #1269 from apache/dependabot/maven/production-dependencies... |
Christian Ortlepp <c****p@h****m>
Committed by: GitHub <n****y@g****m> |
18 days ago | |
| 8aa4db5d |
build(deps): bump the production-dependencies group with 4 updates
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
18 days ago | |
| 0e02005f | merge Merge pull request #1268 from apache/cortlepp/group-dependabot-prs |
Christian Ortlepp <c****p@h****m>
Committed by: GitHub <n****y@g****m> |
18 days ago | |
| bc1e4df0 | dependabot: enable groups, change frequency to weekly | Christian Ortlepp <c****p@h****m> | 18 days ago | |
| 107b8d73 | merge Merge pull request #1267 from apache/dependabot/maven/swagger.version-2.2.53 |
Christian Ortlepp <c****p@h****m>
Committed by: GitHub <n****y@g****m> |
18 days ago | |
| 91b9bb8d | merge Merge pull request #1264 from apache/dependabot/github_actions/actions/setup-... |
Christian Ortlepp <c****p@h****m>
Committed by: GitHub <n****y@g****m> |
19 days ago | |
| 83745f3a | merge Merge pull request #1265 from apache/dependabot/maven/groovy.version-5.0.8 |
Christian Ortlepp <c****p@h****m>
Committed by: GitHub <n****y@g****m> |
19 days ago | |
| f5431eaa | merge Merge pull request #1266 from apache/dependabot/maven/xmlunit.version-2.13.0 |
Christian Ortlepp <c****p@h****m>
Committed by: GitHub <n****y@g****m> |
19 days ago | |
| 91bfe95c |
Opt the JAX-WS integration repositories into decoupled responses
Co-authored-by: Claude Fable 5 <n****y@a****m> |
Robert Lazarski <r****i@g****m> | 19 days ago | |
| 1ba2b127 |
Opt the transport and sample repositories into decoupled responses
Co-authored-by: Claude Fable 5 <n****y@a****m> |
Robert Lazarski <r****i@g****m> | 19 days ago | |
| c2013582 |
Document the 2.0.2 hardening in the threat model
Co-authored-by: Claude Fable 5 <n****y@a****m> |
Robert Lazarski <r****i@g****m> | 19 days ago | |
| c292ba83 |
build(deps): bump swagger.version from 2.2.52 to 2.2.53
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: Christian Ortlepp <c****p@h****m> |
19 days ago | |
| 5ec4d152 |
Drop third-party references from test documentation
Co-authored-by: Claude Fable 5 <n****y@a****m> |
Robert Lazarski <r****i@g****m> | 20 days ago | |
| 75191f77 |
Do not follow redirects when sending a decoupled response
Co-authored-by: Claude Fable 5 <n****y@a****m> |
Robert Lazarski <r****i@g****m> | 20 days ago | |
| 1d325f4d |
Permit only https as a reply scheme unless told otherwise
Co-authored-by: Claude Fable 5 <n****y@a****m> |
Robert Lazarski <r****i@g****m> | 20 days ago | |
| 52c7ba31 |
Also gate the response endpoint where the transport is acquired
Co-authored-by: Claude Fable 5 <n****y@a****m> |
Robert Lazarski <r****i@g****m> | 20 days ago | |
| 1b6856b4 |
Refuse decoupled WS-Addressing responses by default
Co-authored-by: Claude Fable 5 <n****y@a****m> |
Robert Lazarski <r****i@g****m> | 20 days ago | |
| a483b5cd |
Publish a relative OpenAPI server URL instead of following the Host
Co-authored-by: Claude Fable 5 <n****y@a****m> |
Robert Lazarski <r****i@g****m> | 21 days ago | |
| cbcccb33 |
Bound and shut down the response-endpoint resolver pool
Co-authored-by: Claude Fable 5 <n****y@a****m> |
Robert Lazarski <r****i@g****m> | 21 days ago | |
| 0e256fd0 |
Bound the response-endpoint name lookup
Co-authored-by: Claude Fable 5 <n****y@a****m> |
Robert Lazarski <r****i@g****m> | 21 days ago | |
| bb87bdec | merge Merge remote-tracking branch 'origin/master' | Robert Lazarski <r****i@g****m> | 21 days ago | |
| 8c783edf | merge Harden five anonymous-reachable surfaces from a private security report | Robert Lazarski <r****i@g****m> | 21 days ago | |
| cfbaf6a6 |
Cover the attack path an inbound wsa:ReplyTo actually takes
Co-authored-by: Claude Fable 5 <n****y@a****m> |
Robert Lazarski <r****i@g****m> | 21 days ago | |
| 9ad5b471 |
Only refuse never-legitimate reply destinations by default
Co-authored-by: Claude Fable 5 <n****y@a****m> |
Robert Lazarski <r****i@g****m> | 21 days ago | |
| f98c5d49 |
Mirror the new tuning parameters into the webapp axis2.xml
Co-authored-by: Claude Fable 5 <n****y@a****m> |
Robert Lazarski <r****i@g****m> | 21 days ago | |
| 1b5b2fca |
Do not restrict WS-Addressing reply endpoints to HTTP
Co-authored-by: Claude Fable 5 <n****y@a****m> |
Robert Lazarski <r****i@g****m> | 21 days ago | |
| 2b98e5a3 |
Delete multipart temporary files instead of accumulating them
Co-authored-by: Claude Fable 5 <n****y@a****m> |
Robert Lazarski <r****i@g****m> | 21 days ago | |
| 1671a686 |
Harden five anonymous-reachable surfaces reported privately on 2026-07-30
Co-authored-by: Claude Fable 5 <n****y@a****m> |
Robert Lazarski <r****i@g****m> | 21 days ago | |
| 3c8227f1 |
build(deps): bump xmlunit.version from 2.12.0 to 2.13.0
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
22 days ago | |
| 84a5bad8 |
build(deps): bump groovy.version from 5.0.7 to 5.0.8
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
22 days ago | |
| a9fef79b |
build(deps): bump actions/setup-java from 5.6.0 to 5.7.0
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
22 days ago | |
| fd936449 | merge Merge pull request #1258 from apache/dependabot/maven/org.apache.neethi-neeth... |
Christian Ortlepp <c****p@h****m>
Committed by: GitHub <n****y@g****m> |
22 days ago | |
| ba64212f | merge Merge pull request #1255 from apache/dependabot/github_actions/actions/checko... |
Christian Ortlepp <c****p@h****m>
Committed by: GitHub <n****y@g****m> |
22 days ago | |
| 5ade3e4e | merge Merge pull request #1257 from apache/dependabot/maven/org.apache.maven.plugin... |
Christian Ortlepp <c****p@h****m>
Committed by: GitHub <n****y@g****m> |
22 days ago | |
| 18a31851 | merge Merge pull request #1259 from apache/dependabot/maven/org.codehaus.jettison-j... |
Christian Ortlepp <c****p@h****m>
Committed by: GitHub <n****y@g****m> |
22 days ago | |
| 8d940485 | merge Merge pull request #1260 from apache/dependabot/maven/activemq.version-6.3.0 |
Christian Ortlepp <c****p@h****m>
Committed by: GitHub <n****y@g****m> |
22 days ago | |
| 7668b963 | merge Merge pull request #1261 from apache/dependabot/maven/com.squareup.okio-okio-... |
Christian Ortlepp <c****p@h****m>
Committed by: GitHub <n****y@g****m> |
22 days ago | |
| 88ffba3c | merge Merge pull request #1262 from apache/dependabot/maven/org.apache.felix-maven-... |
Christian Ortlepp <c****p@h****m>
Committed by: GitHub <n****y@g****m> |
22 days ago | |
| 2b6a83f9 | merge Merge pull request #1263 from apache/dependabot/maven/org.apache.httpcomponen... |
Christian Ortlepp <c****p@h****m>
Committed by: GitHub <n****y@g****m> |
22 days ago | |
| dfcdf810 |
build(deps): bump org.apache.httpcomponents.client5:httpclient5
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
25 days ago | |
| ed0de1e8 |
build(deps-dev): bump org.apache.felix:maven-bundle-plugin
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
26 days ago | |
| b02e5dc3 |
build(deps): bump com.squareup.okio:okio from 3.17.0 to 3.18.1
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
27 days ago | |
| 1938e0da |
build(deps-dev): bump activemq.version from 6.2.7 to 6.3.0
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
28 days ago | |
| 173bad18 |
Document CVE-2026-66713 for the removed clustering deserialization issue
Co-authored-by: Claude Opus 4.8 <n****y@a****m> |
Robert Lazarski <r****i@g****m> | 29 days ago | |
| 74adf1ea |
build(deps): bump org.codehaus.jettison:jettison from 1.5.6 to 1.5.7
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| 5fe80fb4 |
build(deps): bump org.apache.neethi:neethi from 3.2.2 to 3.2.3
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| 83ccb54e |
build(deps): bump org.apache.maven.plugins:maven-jar-plugin
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| 54de37f4 |
Document HTTP/2 client production hardening; add the defenses to the sample
Co-authored-by: Claude Opus 4.8 (1M context) <n****y@a****m> |
Robert Lazarski <r****i@g****m> | about 1 month ago | |
| c626471a |
build(deps): bump actions/checkout from 7.0.0 to 7.0.1
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| 76923dce | merge Merge pull request #1254 from apache/dependabot/github_actions/actions/setup-... |
Christian Ortlepp <c****p@h****m>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| 088e3ff3 |
build(deps): bump actions/setup-java from 5.5.0 to 5.6.0
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| e532f865 | merge Merge pull request #1253 from apache/dependabot/maven/com.icegreen-greenmail-... |
Christian Ortlepp <c****p@h****m>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| 2b0e17c3 |
build(deps-dev): bump com.icegreen:greenmail from 2.1.9 to 2.1.11
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| 93e8e934 | merge Merge pull request #1250 from apache/dependabot/maven/org.junit.jupiter-junit... |
Christian Ortlepp <c****p@h****m>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| 7464e62b | merge Merge pull request #1251 from apache/dependabot/maven/org.bouncycastle-bcpkix... |
Christian Ortlepp <c****p@h****m>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| 4d36a91b |
build(deps): bump org.bouncycastle:bcpkix-jdk18on from 1.84 to 1.85
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| c754c317 |
build(deps): bump org.junit.jupiter:junit-jupiter from 6.1.1 to 6.1.2
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| ecc8c919 | merge Merge pull request #1247 from apache/dependabot/github_actions/actions/setup-... |
Christian Ortlepp <c****p@h****m>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| dbd46cc0 | merge Merge pull request #1248 from apache/dependabot/maven/jetty.version-12.1.11 |
Christian Ortlepp <c****p@h****m>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| 7d341f96 | merge Merge pull request #1249 from apache/dependabot/maven/com.fasterxml.jackson.c... |
Christian Ortlepp <c****p@h****m>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| f45e6a28 |
build(deps): bump com.fasterxml.jackson.core:jackson-databind
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| cdfb027b |
build(deps): bump jetty.version from 12.1.10 to 12.1.11
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| 956108ea |
build(deps): bump actions/setup-java from 5.4.0 to 5.5.0
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| 580ebc85 | merge Merge pull request #1242 from rootvector2/swagger-ui-url-escape |
Christian Ortlepp <c****p@h****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| 8468a1d4 | merge Merge pull request #1238 from apache/dependabot/maven/activemq.version-6.2.7 |
Christian Ortlepp <c****p@h****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| 7ed16db3 | merge Merge pull request #1239 from apache/dependabot/maven/org.apache-apache-39 |
Christian Ortlepp <c****p@h****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| 0be596eb | merge Merge pull request #1240 from apache/dependabot/maven/org.junit.jupiter-junit... |
Christian Ortlepp <c****p@h****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| 858eb376 | merge Merge pull request #1241 from apache/dependabot/maven/org.apache.httpcomponen... |
Christian Ortlepp <c****p@h****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| 6c977b82 | merge Merge pull request #1243 from apache/dependabot/maven/org.apache.logging.log4... |
Christian Ortlepp <c****p@h****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| 54fd2c1f | merge Merge pull request #1244 from apache/dependabot/maven/org.codehaus.gmavenplus... |
Christian Ortlepp <c****p@h****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| 7a4ee930 | merge Merge pull request #1245 from apache/dependabot/maven/net.bytebuddy-byte-budd... |
Christian Ortlepp <c****p@h****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| d8c96529 | merge Merge pull request #1246 from apache/dependabot/maven/groovy.version-5.0.7 |
Christian Ortlepp <c****p@h****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| 00d1912b |
build(deps): bump groovy.version from 5.0.6 to 5.0.7
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| 2b2888bd | merge Merge pull request #1221 from digi-scrypt/saaj-soappart-xxe |
robertlazarski <5****i@u****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| d57f760d |
build(deps): bump net.bytebuddy:byte-buddy from 1.18.10 to 1.18.11
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| f891149e |
build(deps): bump org.codehaus.gmavenplus:gmavenplus-plugin
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| 9f27fee3 |
build(deps): bump org.apache.logging.log4j:log4j-bom
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| 212440b6 | make buildOpenApiUrl return a URI | Naveed Khan <d****k@g****m> | about 2 months ago | |
| 2963c23a |
ci: harden Remove Snapshots step against silent failure
Co-authored-by: Claude Opus 4.8 (1M context) <n****y@a****m> |
Robert Lazarski <r****i@g****m> | about 2 months ago | |
| f15d3c31 |
ci: least-privilege permissions + SHA-pin actions
Co-authored-by: Claude Opus 4.8 (1M context) <n****y@a****m> |
Robert Lazarski <r****i@g****m> | about 2 months ago | |
| c2f5d68f | merge Merge pull request #1227 from rootvector2/addaswebresources-zip-slip |
robertlazarski <5****i@u****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| f1ad3606 |
build(deps): bump org.apache.httpcomponents.client5:httpclient5
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| 0aca7980 |
build(deps): bump org.junit.jupiter:junit-jupiter from 6.1.0 to 6.1.1
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| b5ce339a |
build(deps): bump org.apache:apache from 38 to 39
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| eaf2f4e4 |
build(deps-dev): bump activemq.version from 6.2.6 to 6.2.7
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| aaf1489f | merge Merge pull request #1237 from apache/dependabot/maven/httpcore.version-5.4.3 |
Christian Ortlepp <c****p@h****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| df3d4463 | merge Merge pull request #1232 from apache/dependabot/maven/commons-logging-commons... |
Christian Ortlepp <c****p@h****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| 5f8d49c6 | merge Merge pull request #1233 from apache/dependabot/maven/org.codehaus.jettison-j... |
Christian Ortlepp <c****p@h****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| 8421c141 | merge Merge pull request #1234 from apache/dependabot/github_actions/actions/checko... |
Christian Ortlepp <c****p@h****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| b32ef44c | merge Merge pull request #1235 from apache/dependabot/maven/swagger.version-2.2.52 |
Christian Ortlepp <c****p@h****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| 9205f239 | merge Merge pull request #1236 from apache/dependabot/github_actions/actions/cache-6 |
Christian Ortlepp <c****p@h****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| 33a3801f |
build(deps): bump httpcore.version from 5.4.2 to 5.4.3
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| 824dbe5a |
build(deps): bump actions/cache from 5 to 6
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| ec9ce010 |
build(deps): bump swagger.version from 2.2.51 to 2.2.52
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| e32a6fea |
build(deps): bump actions/checkout from 6 to 7
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| b1b7a662 |
build(deps): bump org.codehaus.jettison:jettison from 1.5.5 to 1.5.6
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| fa8f5eea |
build(deps): bump commons-logging:commons-logging from 1.3.6 to 1.4.0
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| 385e846e | merge Merge pull request #1231 from apache/dependabot/maven/com.icegreen-greenmail-... |
Christian Ortlepp <c****p@h****m>
Committed by: GitHub <n****y@g****m> |
2 months ago | |
| 7887a585 |
build(deps-dev): bump com.icegreen:greenmail from 2.1.8 to 2.1.9
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
2 months ago |