commits  

Messages by Thread

• (commons-bcel) branch master updated: Silent u2/u1 count truncation across dump paths corrupts emitted bytecode (f013). ggregory
• (commons-bcel) branch master updated: Repositories cache classes under the input-defined this_class name; global static Repository/VerifierFactory make the poisoning ClassLoader-wide (f012). ggregory
• (commons-jcs) branch master updated (ecc6241d -> 593885cb) tv
  • (commons-jcs) 02/02: A bit of reorganization in basic structures tv
  • (commons-jcs) 01/02: Better data encapsulation tv
• (commons-bcel) branch master updated: f011: typeSignatureToString recurses per generic-nesting level, unbounded, with quadratic substring copies ggregory
• (commons-bcel) branch master updated: ConstantPool.constantToString recurses forever on self-referencing CONSTANT_MethodHandle (f010). ggregory
• (commons-bcel) branch master updated: Disassembler and Class2HTML re-implement the unchecked switch-table allocation (f009). ggregory
• (commons-bcel) branch master updated: Subroutines.noRecursiveCalls enumerates exponentially many JSR call paths (f008). ggregory
• (commons-bcel) branch master updated: Cubic handlers × range × subroutines scan in Subroutines constructor hangs JustIce Pass 3b (f007). ggregory
• (commons-bcel) branch master updated: Pass 3b dataflow stores frames per instruction and clones ever-growing execution chains (f006). ggregory
• (commons-bcel) branch master updated: JustIce Pass 2 LVT check amplifies each 10-byte entry into ~131k hashtable operations (f005). ggregory
• (commons-bcel) branch master updated: JustIce Pass 2 hangs on cyclic superclass chain of a referenced exception class (f004). ggregory
• (commons-bcel) branch master updated: Opcodes tableswitch and lookupswitch add boundary checks (f003). ggregory
• (commons-bcel) branch master updated (b27feadf -> ad48367d) ggregory
  • (commons-bcel) 02/02: Nested annotation element values recurse unboundedly; MAX_ARRAY_DIMENSIONS cap bypassed (f002). ggregory
  • (commons-bcel) 01/02: Sort members ggregory
• (commons-bcel) branch master updated: f001 Nested Code/Record attributes drive unbounded parse-time recursion in ClassParser. ggregory
• (commons-bcel) branch master updated: Nested Code/Record attributes drive unbounded parse-time recursion in ClassParser (f001). ggregory
• (commons-text) branch master updated (81de4f7a -> 5d882dca) ggregory
  • (commons-text) 01/02: Typo ggregory
  • (commons-text) 02/02: StringMatcher.isMatch(CharSequence, int, int, int) forwards bufferEnd as bufferStart (#768). ggregory
• (commons-text) branch master updated: StringMatcher.isMatch(CharSequence, int, int, int) forwards bufferEnd as bufferStart (#768) ggregory
• (commons-jcs) branch master updated: Relax test timing for windows build tv
• svn commit: r87183 - in dev/commons/parent/105-RC1: . binaries site site/css site/images site/images/logos site/img site/js source ggregory
• (commons-parent) annotated tag commons-parent-105-RC1 updated (f26020f -> c41c050) ggregory
• (commons-parent) branch release updated: Prepare for the release candidate 105 RC1 ggregory
• (commons-build-plugin) branch master updated: Bump graalvm.version from 25.1.3 to 25.3.4.1 on Java 25 and up ggregory
• (commons-parent) branch master updated: Prepare for the release candidate ggregory
• (commons-parent) branch release updated (029a890 -> 76013b5) ggregory
• (commons-text) branch master updated: Move profile from Java 22 to 25 (LTS) boundary. ggregory
• (commons-text) branch master updated (ad7bce75 -> 8f11af0b) ggregory
  • (commons-text) 02/02: Bump net.bytebuddy:byte-buddy from 1.18.10 to 1.18.13 ggregory
  • (commons-text) 01/02: [test] Bump org.graalvm.js:js from 25.0.2 to 25.3.4.1 on Java 22 and up. ggregory
• (commons-parent) branch master updated: Bump maven-failsafe-plugin from 3.5.6 to 3.6.0. ggregory
• (commons-parent) branch master updated (cd35faf -> d172e0f) ggregory
  • (commons-parent) 01/03: Bump maven-surefire-report-plugin to 3.5.6 to 3.6.0. ggregory
  • (commons-parent) 02/03: Bump org.apache.felix:maven-bundle-plugin from 6.1.0 to 6.1.2 on Java 17 and up. ggregory
  • (commons-parent) 03/03: Bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.26.1 to 0.26.2. ggregory
• (commons-parent) branch master updated (6f3fdc9 -> cd35faf) ggregory
  • (commons-parent) 02/02: Bump maven-surefire-plugin to 3.5.6 to 3.6.0. ggregory
  • (commons-parent) 01/02: Bump commons.checkstyle.version from 14.0.0 to 14.1.0 on Java 21 and up. ggregory
• (commons-compress) branch master updated: Bump om.github.luben:zstd-jni from 1.5.7-15 to 1.5.7-16. ggregory
• (commons-text) branch master updated: Compare characters by value in DamerauLevenshteinDistance (#770). ggregory
• (commons-text) branch master updated: Compare characters by value in DamerauLevenshteinDistance (#770) ggregory
• (commons-collections) branch master updated: Fix TransformedMultiValuedMap.putAll(K, Iterable) NPE for null value transformer (#731). ggregory
• (commons-collections) branch master updated: Fix putAll(K, Iterable) NPE for null value transformer (#731) ggregory
• (commons-collections) branch master updated: Fix putAll(K, Iterable) NPE for null value transformer (#731). ggregory
• (commons-collections) branch master updated: Remove reference to sonatype-snapshots in POM (2026-08-15 f009). ggregory
• (commons-jcs) branch dependabot/maven/commons-jcs4-jcache-extras/org.apache.tomcat-tomcat-catalina-11.0.25 created (now 79bf6aa7) github-bot
• (commons-scxml) branch feat/use-commons-xml updated (cb9672c2 -> d48f1442) pkarwasz
• (commons-text) branch feat/use-commons-xml updated (f758b18b -> ac4f28fc) pkarwasz
• (commons-vfs) branch feat/use-commons-xml updated (1f65d1edd -> 377637feb) pkarwasz
• (commons-jelly) branch feat/use-commons-xml updated (55c5bad2 -> 6bcde77f) pkarwasz
• (commons-jxpath) branch feat/use-commons-xml updated (915bc091 -> 49e6c1fd) pkarwasz
• (commons-graph) branch feat/use-commons-xml updated (36ed084 -> be774d1) pkarwasz
• (commons-digester) branch feat/use-commons-xml updated (ccd7f6f3 -> cad08f69) pkarwasz
• (commons-geometry) branch feat/use-commons-xml updated (99a74470 -> 7abf4a4a) pkarwasz
• (commons-bsf) branch feat/use-commons-xml updated (31df147 -> 776e95e) pkarwasz
• (commons-configuration) branch feat/use-commons-xml updated (264769b0d -> 327d76221) pkarwasz
• (commons-parent) branch master updated (186b455 -> 6f3fdc9) ggregory
  • (commons-parent) 02/02: Bump commons.compiler.version from 3.15.0 to 3.16.0. ggregory
  • (commons-parent) 01/02: Ignore macOS noise. ggregory
• (commons-lang) branch master updated: Fix DurationFormatUtils.formatPeriod() calculation when pattern omits 'M' (#1780). ggregory
• (commons-lang) branch master updated: Fix DurationFormatUtils.formatPeriod() calculation when pattern omits M (#1780) ggregory
• svn commit: r87149 - in dev/commons/secure-xml/1.0.0-RC2: . binaries site site/apidocs site/apidocs/legal site/apidocs/org site/apidocs/org/apache site/apidocs/org/apache/commons site/apidocs/org/apache/commons/xml site/apidocs/org/apache/commons/xml/s... ggregory
• (commons-secure-xml) annotated tag commons-secure-xml-1.0.0-RC2 updated (f240d75 -> 0ae7c78) ggregory
• (commons-secure-xml) branch release updated: Prepare for the release candidate 1.0.0 RC2 ggregory
• (commons-secure-xml) branch release updated (157f41e -> 15e2597) ggregory
• (commons-secure-xml) branch dependabot/maven/commons.graalvm.buildtools.version-1.1.11 deleted (was 327d5ab) ggregory
• (commons-secure-xml) branch main updated: Bump commons.graalvm.buildtools.version from 1.1.10 to 1.1.11 (#85) ggregory
• (commons-secure-xml) branch dependabot/maven/commons.graalvm.buildtools.version-1.1.11 created (now 327d5ab) github-bot
• (commons-secure-xml) branch main updated (7602db1 -> 10b4451) ggregory
  • (commons-secure-xml) 01/02: Better table description ggregory
  • (commons-secure-xml) 02/02: Fix HTML links ggregory
• (commons-secure-xml) branch main updated: Javadoc ggregory
• (commons-secure-xml) branch main updated (92724fb -> 7602db1) ggregory
  • (commons-secure-xml) 01/02: Normalize Javadoc `@throws`. ggregory
  • (commons-secure-xml) 02/02: Normalize Javadoc `@param`. ggregory
• (commons-secure-xml) branch main updated (61fe771 -> 8af1672) ggregory
  • (commons-secure-xml) 03/10: Javadoc (grammar) ggregory
  • (commons-secure-xml) 08/10: Fix inline comment ggregory
  • (commons-secure-xml) 02/10: Javadoc @see tag not needed here. ggregory
  • (commons-secure-xml) 07/10: Javadoc ggregory
  • (commons-secure-xml) 01/10: Javadoc (grammar) ggregory
  • (commons-secure-xml) 05/10: Javadoc: Fix word salad ggregory
  • (commons-secure-xml) 04/10: Normalize spelling. ggregory
  • (commons-secure-xml) 06/10: Javadoc: Fix word salad. ggregory
  • (commons-secure-xml) 10/10: Javadoc ggregory
  • (commons-secure-xml) 09/10: FIx Javadoc @param description ggregory
• (commons-secure-xml) branch main updated: Fix the site test report and count Android in the coverage (#82) ggregory
• (commons-beanutils) branch master updated: NumberConverter.toNumber(Class, Number): Preserve float and double magnitude when converting to BigInteger (#438). ggregory
• (commons-beanutils) branch master updated: Preserve float and double magnitude when converting to BigInteger (#438) ggregory
• (commons-lang) branch master updated: Checkstyle ggregory
• (commons-lang) branch master updated: Add DurationFormatUtilsTest.testFormatPeriodWithoutMonthsAfterLeapDayAnniversary() ggregory
• (commons-lang) branch master updated: Fix int overflow in Conversion count and position bounds guards (#1779). ggregory
• (commons-lang) branch master updated: fix int overflow in Conversion count and position bounds guards (#1779) ggregory
• (commons-secure-xml) branch main updated: Split the Security and Threat Model pages (#83) ggregory
• (commons-secure-xml) branch main updated: Fix broken English. ggregory
• (commons-secure-xml) branch main updated: Javadoc @link to our own classes. ggregory
  • (commons-secure-xml) branch main updated: Javadoc @link to our own classes. ggregory
• (commons-statistics) branch master updated: Implement the range probability(from, to) using a single sum aherbert
• (commons-secure-xml) branch main updated: Import class instead of using a FQCN. ggregory
• (commons-secure-xml) branch main updated: SchemaContentModelLimitTest.MAX_OCCURS only needs to be just over 5,000. ggregory
• (commons-secure-xml) branch main updated: Document resolvers in the Javadoc overview (#81) ggregory
• (commons-secure-xml) branch main updated: Sharpen the threat model: honored JAXP contracts, XInclude, and expansion limits (#66) pkarwasz
• (commons-secure-xml) branch main updated: Remove unused import. ggregory
• (commons-secure-xml) branch main updated (94898e3 -> 1ff8851) pkarwasz
  • (commons-secure-xml) 02/02: Use the ASF id in the changelog and the developer entry pkarwasz
  • (commons-secure-xml) 01/02: Credit Elliotte Rusty Harold's clean-up in the changelog pkarwasz
• (commons-secure-xml) branch main updated: Remove unthrown exceptions (#78) ggregory
• (commons-secure-xml) branch main updated: Copy editing (#80) ggregory
• (commons-secure-xml) branch main updated: Small simplifications (#79) pkarwasz
• (commons-secure-xml) branch main updated: Don't need protected method in final class (#77) pkarwasz
• (commons-secure-xml) branch main updated: Forward getExternalSubset to a caller EntityResolver2 (#68) ggregory
• (commons-jcs) branch master updated: Fix inconsistent locking tv
• (commons-secure-xml) branch main updated (e1dde41 -> b08f73e) ggregory
  • (commons-secure-xml) 02/02: Javadoc ggregory
  • (commons-secure-xml) 01/02: Javadoc ggregory
• (commons-secure-xml) branch main updated (4ae7b9c -> e1dde41) ggregory
  • (commons-secure-xml) 04/05: Javadoc ggregory
  • (commons-secure-xml) 02/05: Add android-tests to source assembly. ggregory
  • (commons-secure-xml) 01/05: Next RC will be RC2. ggregory
  • (commons-secure-xml) 03/05: Sort members. ggregory
  • (commons-secure-xml) 05/05: Generate binary assembly. ggregory
• (commons-secure-xml) branch main updated: Bound the content model a schema expands into (#73) ggregory
• (commons-secure-xml) branch main updated: Install a fresh StAX resolver floor per hook instead of mutating one (#75) ggregory
• (commons-secure-xml) branch main updated: Package-private FallbackIgnoreEntityResolver2 can be final. ggregory
• (commons-jcs) branch master updated (60b41be5 -> ced38659) tv
  • (commons-jcs) 03/03: Merge branch 'master' of https://gitbox.apache.org/repos/asf/commons-jcs.git tv
  • (commons-jcs) 02/03: Document scheduled pool configuration tv
  • (commons-jcs) 01/03: Improve thread pool handling tv
• (commons-secure-xml) branch main updated: Delegate the Java 18 XPathFactory property methods (#76) ggregory
• (commons-secure-xml) branch ci/zulu-8u152 deleted (was 19f678d) ggregory
• (commons-secure-xml) branch main updated: Secure getAssociatedStylesheet, and pin the CI Zulu job to JDK 8u152 (#74) ggregory
• (commons-secure-xml) branch ci/zulu-8u152 updated (dad641f -> 19f678d) ggregory
• (commons-secure-xml) branch main updated: Keep the resolver floor on a reader obtained before reset() (#72) ggregory
• (commons-secure-xml) branch main updated: Cover Saxon's unparsed-text family and json-doc on the TrAX path (#71) ggregory
• (commons-secure-xml) branch main updated: Rethrow JVM errors unchanged in MethodHandleFactory.invokeExact (#70) ggregory
• (commons-secure-xml) branch main updated: Resolve each unresolved URI to a fresh empty document (#69) ggregory
• svn commit: r87114 - dev/commons/secure-xml/1.0.0-RC1 ggregory
• (commons-secure-xml) branch main updated: Restructure SECURITY.md into a full security policy (#67) ggregory
• (commons-secure-xml) branch build/build-all-gate deleted (was a8116c3) pkarwasz
• (commons-secure-xml) branch ci/zulu-8u152 updated (414da2f -> dad641f) pkarwasz
• (commons-secure-xml) branch ci/zulu-8u152 created (now 414da2f) pkarwasz
  • (commons-secure-xml) 01/01: Pin the CI Zulu job to JDK 8u152 pkarwasz
• (commons-parent) branch master updated: Update Commons Skin 5.2.0 to 5.3.0 aherbert
• svn commit: r87108 - dev/commons/skin/5.3.0-RC1 aherbert
• (commons-skin) annotated tag rel/commons-skin-5.3.0 updated (8e1b3b1 -> 750ea31) aherbert
• (commons-skin) branch master updated (60e4e81 -> 46a5362) aherbert
  • (commons-skin) 02/02: Merge branch 'release' aherbert
  • (commons-skin) 01/02: Bump to next development version aherbert
• (commons-secure-xml) branch main updated: Verify the Gradle wrapper and distribution by checksum pkarwasz
• (commons-secure-xml) branch main updated: Disable Mockito-based tests in the native image pkarwasz
• (commons-secure-xml) branch main updated (39df65a -> ce48b10) pkarwasz
  • (commons-secure-xml) 02/03: Rework the SAX default parser selection tests. pkarwasz
  • (commons-secure-xml) 01/03: fix: add Mockito as Gradle dependency pkarwasz
  • (commons-secure-xml) 03/03: Rework the DOM default parser selection test. pkarwasz
• svn commit: r87101 - in dev/commons/secure-xml/1.0.0-RC1: . binaries site site/apidocs site/apidocs/legal site/apidocs/org site/apidocs/org/apache site/apidocs/org/apache/commons site/apidocs/org/apache/commons/xml site/apidocs/org/apache/commons/xml/s... ggregory
• (commons-secure-xml) annotated tag commons-secure-xml-1.0.0-RC1 updated (157f41e -> 993e926) ggregory
• (commons-secure-xml) branch release updated: Prepare for the release candidate 1.0.0 RC1 ggregory
• (commons-secure-xml) branch release created (now 39df65a) ggregory
• (commons-secure-xml) branch main updated: Add assembly folder. ggregory
• (commons-secure-xml) branch main updated: Prepare for the release candidate ggregory
  • (commons-secure-xml) branch main updated: Prepare for the release candidate ggregory
• (commons-jexl) branch JEXL-471 updated (24d8dd0a -> bc10ac91) henrib
• (commons-jexl) branch master updated (73fbe48e -> a60740ee) henrib
  • (commons-jexl) 01/01: Merge pull request #414 from apache/JEXL-471 henrib
• (commons-geometry) branch feat/use-commons-xml created (now 2ce771f3) pkarwasz
  • (commons-geometry) 01/01: Harden XML output via commons-secure-xml pkarwasz
• (commons-configuration) branch feat/use-commons-xml updated (cbd24075e -> 264769b0d) pkarwasz
• (commons-text) branch feat/use-commons-xml updated (68e8cc39 -> f758b18b) pkarwasz
• (commons-geometry) branch feat/use-commons-xml updated (2ce771f3 -> 99a74470) pkarwasz
• (commons-vfs) branch feat/use-commons-xml updated (e93dbcbf4 -> 1f65d1edd) pkarwasz
• (commons-jelly) branch feat/use-commons-xml updated (7278e247 -> 55c5bad2) pkarwasz
• (commons-digester) branch feat/use-commons-xml updated (846b7a6f -> ccd7f6f3) pkarwasz
  • (commons-digester) 01/01: Harden XML parsing via commons-secure-xml pkarwasz
• (commons-scxml) branch feat/use-commons-xml updated (bb35dc42 -> cb9672c2) pkarwasz
• (commons-jxpath) branch feat/use-commons-xml updated (f9af9ef6 -> 915bc091) pkarwasz
• (commons-bsf) branch feat/use-commons-xml updated (c2d8806 -> 31df147) pkarwasz
• (commons-graph) branch feat/use-commons-xml updated (101c3ac -> 36ed084) pkarwasz
• (commons-secure-xml) branch main updated: Add inline comments ggregory
• (commons-secure-xml) branch main updated (630bfd3 -> ced43e2) ggregory
  • (commons-secure-xml) 01/02: Parameter name typo and Javadoc. ggregory
  • (commons-secure-xml) 02/02: Internal refactoring ggregory
• (commons-text) branch feat/use-commons-xml created (now 68e8cc39) pkarwasz
  • (commons-text) 01/01: Harden XML parsing via commons-secure-xml pkarwasz
• (commons-jelly) branch feat/use-commons-xml created (now 7278e247) pkarwasz
  • (commons-jelly) 01/01: Harden XML parsing via commons-secure-xml pkarwasz
• (commons-vfs) branch feat/use-commons-xml created (now e93dbcbf4) pkarwasz
  • (commons-vfs) 01/01: Harden XML parsing via commons-secure-xml pkarwasz
• (commons-digester) branch feat/use-commons-xml created (now 846b7a6f) pkarwasz
  • (commons-digester) 01/01: Harden XML parsing via commons-secure-xml pkarwasz
• (commons-scxml) branch feat/use-commons-xml created (now bb35dc42) pkarwasz
  • (commons-scxml) 01/01: Harden XML parsing via commons-secure-xml pkarwasz
• (commons-jxpath) branch feat/use-commons-xml created (now f9af9ef6) pkarwasz
  • (commons-jxpath) 01/01: Harden XML parsing via commons-secure-xml pkarwasz
• (commons-bsf) branch feat/use-commons-xml created (now c2d8806) pkarwasz
  • (commons-bsf) 01/01: Harden XSLT processing via commons-secure-xml pkarwasz
• (commons-configuration) branch feat/use-commons-xml updated (ef22ba534 -> cbd24075e) pkarwasz

• Earlier messages