Messages by Date
-
2026/09/08
(commons-lang) branch master updated: Fraction.add and subtract return the reduced form when an operand is zero (#1787)
ggregory
-
2026/09/08
(commons-lang) branch master updated: Fix MethodUtils.invokeMethod on instances of non-public classes (#1783).
ggregory
-
2026/09/08
(commons-lang) branch master updated: Fix MethodUtils.invokeMethod on instances of non-public classes (#1783)
ggregory
-
2026/09/08
(commons-lang) 02/02: Fix Fraction.add and subtract for operands not in lowest terms (#1784).
ggregory
-
2026/09/08
(commons-lang) branch master updated (e213b85ce -> 80ac358a4)
ggregory
-
2026/09/08
(commons-lang) 01/02: Fix Fraction.add and subtract for operands not in lowest terms (#1784).
ggregory
-
2026/09/08
(commons-lang) branch master updated: Fix Fraction.add and subtract for operands not in lowest terms (#1784)
ggregory
-
2026/09/08
(commons-jelly) 03/03: Bump ojb:obj from 0.9.6 to 1.0.rc4.
ggregory
-
2026/09/08
(commons-jelly) branch master updated (d51dcf4e -> a244cd59)
ggregory
-
2026/09/08
(commons-jelly) 02/03: Fix title.
ggregory
-
2026/09/08
(commons-jelly) 01/03: Replace SAXParserFactory with SecureSAXParserFactory
ggregory
-
2026/09/08
(commons-digester) branch master updated: Use new API newNSInstance().
ggregory
-
2026/09/08
(commons-digester) branch master updated: Replace SAXParserFactory with SecureSAXParserFactory
ggregory
-
2026/09/08
(commons-text) branch feat/use-commons-xml updated (bc9c2044 -> 121b9df5)
ggregory
-
2026/09/08
(commons-jcs) 04/06: Use thread pool, also test FIFO Cache
tv
-
2026/09/08
(commons-jcs) 06/06: Merge branch 'master' of https://gitbox.apache.org/repos/asf/commons-jcs.git
tv
-
2026/09/08
(commons-jcs) 05/06: Update MemoryElementDescriptor in-place
tv
-
2026/09/08
(commons-jcs) 02/06: Handle maxObjects < 0 correctly
tv
-
2026/09/08
(commons-jcs) 03/06: Test all memeory cache implementations. Output performance data.
tv
-
2026/09/08
(commons-jcs) 01/06: Use ConcurrentMap again
tv
-
2026/09/08
(commons-jcs) branch master updated (8e3bba7f -> 404fd99d)
tv
-
2026/09/08
(commons-jelly) 02/02: Refactor Commons Lang 3 dependency management.
ggregory
-
2026/09/08
(commons-jelly) 01/02: Add comment.
ggregory
-
2026/09/08
(commons-jelly) branch master updated (82352ed0 -> d51dcf4e)
ggregory
-
2026/09/08
(commons-jelly) branch dependabot/maven/commons-httpclient-commons-httpclient-3.1 updated (522d9c17 -> c23c3d07)
github-bot
-
2026/09/08
(commons-jelly) branch dependabot/maven/commons-lang-commons-lang-2.6 updated (2ab36762 -> 3f03cd61)
github-bot
-
2026/09/08
(commons-lang) branch master updated: Fix TypeUtils.isAssignable() for wildcards with multiple upper bounds (#1782).
ggregory
-
2026/09/08
(commons-lang) branch master updated: Fix TypeUtils.isAssignable() for wildcards with multiple upper bounds (#1782)
ggregory
-
2026/09/08
(commons-jelly) branch master updated: Bump jline:jline from 0.9.5 to 2.14.6 (#104)
ggregory
-
2026/09/08
(commons-jelly) branch master updated: Bump jline:jline from 0.9.5 to 2.14.6 (#104, #107).
ggregory
-
2026/09/08
(commons-jelly) branch dependabot/maven/jline-jline-2.14.6 deleted (was e52e89f6)
ggregory
-
2026/09/08
(commons-jelly) branch dependabot/maven/jline-jline-2.14.6 updated (1c0532c1 -> e52e89f6)
ggregory
-
2026/09/08
(commons-weaver) branch master updated: Bump commons-parent from 104 to 105.
ggregory
-
2026/09/08
(commons-weaver) branch master updated: Try to fix the GH CI Javadoc on Windows (macOS OK locally) (#84)
ggregory
-
2026/09/08
(commons-text) branch feat/use-commons-xml updated (d4205be7 -> bc9c2044)
pkarwasz
-
2026/09/07
(commons-numbers) branch master updated: Correct constant comment and naming convention
aherbert
-
2026/09/07
(commons-jelly) branch feat/use-commons-xml updated (3c49192e -> be2e1f17)
ggregory
-
2026/09/07
(commons-jelly) branch feat/use-commons-xml deleted (was aef9d98d)
ggregory
-
2026/09/07
(commons-jelly) branch master updated: Harden XML parsing via commons-secure-xml (#108)
ggregory
-
2026/09/07
(commons-jelly) branch master updated: Harden XML parsing via commons-secure-xml (#108)
ggregory
-
2026/09/07
(commons-jelly) branch feat/use-commons-xml updated (be2e1f17 -> aef9d98d)
ggregory
-
2026/09/07
(commons-jelly) branch feat/use-commons-xml updated (e5592064 -> 3c49192e)
ggregory
-
2026/09/07
(commons-lang) branch master updated: Bump commons-parent from 104 to 105. (#1785)
ggregory
-
2026/09/07
(commons-jxpath) branch master updated: Bump commons-parent from 104 to 105.
ggregory
-
2026/09/07
(commons-jelly) branch master updated: Bump commons-parent from 104 to 105.
ggregory
-
2026/09/07
(commons-jcs) branch master updated: Bump org.apache.commons:commons-parent from 104 to 105.
ggregory
-
2026/09/07
(commons-vfs) branch master updated: Bump org.apache.commons:commons-parent from 104 to 105.
ggregory
-
2026/09/07
(commons-collections) branch master updated: Bump org.apache.commons:commons-parent from 104 to 105.
ggregory
-
2026/09/07
(commons-collections) branch dependabot/maven/org.apache.commons-commons-parent-105 deleted (was bf04be9b3)
github-bot
-
2026/09/07
(commons-weaver) branch master updated: Java 11 build passes locally but not on GH CI.
ggregory
-
2026/09/07
(commons-collections) branch dependabot/maven/org.apache.commons-commons-parent-105 updated (40c9714fc -> bf04be9b3)
github-bot
-
2026/09/07
(commons-collections) branch master updated: Bump org.easymock:easymock from 5.6.0 to 5.7.0 (#732).
ggregory
-
2026/09/07
(commons-collections) branch dependabot/maven/org.easymock-easymock-5.7.0 deleted (was 16767ae68)
ggregory
-
2026/09/07
(commons-collections) branch master updated: Bump org.easymock:easymock from 5.6.0 to 5.7.0 (#732)
ggregory
-
2026/09/07
(commons-collections) branch dependabot/maven/org.easymock-easymock-5.7.0 updated (bd1c67c85 -> 16767ae68)
github-bot
-
2026/09/07
(commons-collections) branch master updated: Bump com.google.guava:guava-testlib from 33.6.0-jre to 33.7.1-jre (#733).
ggregory
-
2026/09/07
(commons-collections) branch dependabot/maven/com.google.guava-guava-testlib-33.7.1-jre deleted (was 0c3459459)
ggregory
-
2026/09/07
(commons-collections) branch master updated: Bump com.google.guava:guava-testlib from 33.6.0-jre to 33.7.1-jre (#733)
ggregory
-
2026/09/07
(commons-validator) branch master updated: Bump org.apache.commons:commons-parent from 104 to 105.
ggregory
-
2026/09/07
(commons-text) branch master updated (5d882dca -> 9c9a0047)
ggregory
-
2026/09/07
(commons-skin) branch master updated: Bump org.apache.commons:commons-parent from 104 to 105.
ggregory
-
2026/09/07
(commons-secure-xml) branch main updated: Bump org.apache.commons:commons-parent from 104 to 105.
ggregory
-
2026/09/07
(commons-scxml) branch master updated: Bump org.apache.commons:commons-parent from 104 to 105.
ggregory
-
2026/09/07
(commons-release-plugin) branch master updated: Bump org.apache.commons:commons-parent from 104 to 105.
ggregory
-
2026/09/07
(commons-rdf) branch master updated: Bump org.apache.commons:commons-parent from 104 to 105.
ggregory
-
2026/09/07
(commons-net) branch master updated: Bump org.apache.commons:commons-parent from 104 to 105.
ggregory
-
2026/09/07
(commons-logging) branch master updated: Bump org.apache.commons:commons-parent from 104 to 105.
ggregory
-
2026/09/07
(commons-jexl) branch master updated: Bump org.apache.commons:commons-parent from 104 to 105.
ggregory
-
2026/09/07
(commons-jci) branch master updated: Bump org.apache.commons:commons-parent from 104 to 105.
ggregory
-
2026/09/07
(commons-io) branch master updated (a8c5a8c36 -> f720b2422)
ggregory
-
2026/09/07
(commons-io) branch master updated (fbf2fa83e -> a8c5a8c36)
ggregory
-
2026/09/07
(commons-io) branch master updated (edd1cd734 -> fbf2fa83e)
ggregory
-
2026/09/07
(commons-imaging) branch master updated: Bump org.apache.commons:commons-parent from 104 to 105.
ggregory
-
2026/09/07
(commons-graph) branch master updated: Bump org.apache.commons:commons-parent from 104 to 105.
ggregory
-
2026/09/07
(commons-collections) branch dependabot/maven/org.apache.commons-commons-parent-105 created (now 40c9714fc)
github-bot
-
2026/09/07
(commons-collections) branch dependabot/maven/com.google.guava-guava-testlib-33.7.1-jre created (now 0c3459459)
github-bot
-
2026/09/07
(commons-collections) branch dependabot/maven/org.easymock-easymock-5.7.0 created (now bd1c67c85)
github-bot
-
2026/09/07
(commons-dbutils) branch master updated: Bump org.apache.commons:commons-parent from 104 to 105.
ggregory
-
2026/09/07
(commons-fileupload) branch master updated: Bump org.apache.commons:commons-parent from 104 to 105.
ggregory
-
2026/09/07
(commons-fileupload) branch 1.x updated: Bump org.apache.commons:commons-parent from 104 to 105.
ggregory
-
2026/09/07
(commons-exec) branch master updated: Bump org.apache.commons:commons-parent from 104 to 105.
ggregory
-
2026/09/07
(commons-email) branch 1.x updated: Bump org.apache.commons:commons-parent from 104 to 105.
ggregory
-
2026/09/07
(commons-email) branch master updated: Bump org.apache.commons:commons-parent from 104 to 105.
ggregory
-
2026/09/07
(commons-digester) branch master updated: Bump org.apache.commons:commons-parent from 104 to 105.
ggregory
-
2026/09/07
(commons-dbcp) branch master updated: Bump org.apache.commons:commons-parent from 104 to 105.
ggregory
-
2026/09/07
(commons-daemon) branch master updated: Bump org.apache.commons:commons-parent from 104 to 105.
ggregory
-
2026/09/07
(commons-csv) branch master updated: Bump org.apache.commons:commons-parent from 104 to 105.
ggregory
-
2026/09/07
(commons-configuration) branch master updated: Bump org.apache.commons:commons-parent from 104 to 105.
ggregory
-
2026/09/07
(commons-compress) branch master updated: Bump org.apache.commons:commons-parent from 104 to 105.
ggregory
-
2026/09/07
(commons-codec) branch master updated: Bump org.apache.commons:commons-parent from 104 to 105.
ggregory
-
2026/09/07
(commons-cli) branch master updated: Bump org.apache.commons:commons-parent from 104 to 105.
ggregory
-
2026/09/07
(commons-build-plugin) branch master updated: Bump org.apache.commons:commons-parent from 104 to 105.
ggregory
-
2026/09/07
(commons-beanutils) branch master updated: Bump org.apache.commons:commons-parent from 104 to 105.
ggregory
-
2026/09/07
(commons-parent) branch master updated: Updates for the next release
ggregory
-
2026/09/07
(commons-beanutils) branch master updated: Bump org.apache.commons:commons-parent from 104 to 105.
ggregory
-
2026/09/07
(commons-beanutils) branch 1.X updated: Bump org.apache.commons:commons-parent from 104 to 105.
ggregory
-
2026/09/07
(commons-bsf) branch master updated: Bump org.apache.commons:commons-parent from 104 to 105.
ggregory
-
2026/09/07
(commons-parent) branch master updated: Updates for the next release
ggregory
-
2026/09/07
svn commit: r87315 - dev/commons/parent/105-RC1
ggregory
-
2026/09/07
(commons-parent) branch release updated (f26020f -> 7a8a297)
ggregory
-
2026/09/07
(commons-parent) branch master updated (76013b5 -> 7a8a297)
ggregory
-
2026/09/07
(commons-parent) annotated tag rel/commons-parent-105 updated (f26020f -> de49845)
ggregory
-
2026/09/07
svn commit: r87314 - release/commons/parent/source
ggregory
-
2026/09/07
svn commit: r87313 - dev/commons/parent/105-RC1 dev/commons/parent/105-RC1/source release/commons/parent release/commons/parent/source
ggregory
-
2026/09/07
(commons-build-plugin) branch master updated: Update OpenSSF badge link in readme-md-template.md (#425).
ggregory
-
2026/09/07
(commons-build-plugin) branch master updated: Update OpenSSF badge link in readme-md-template.md (#425)
ggregory
-
2026/09/07
(commons-csv) branch master updated: Fix Javadoc for CSVPrinter.getRecordCount(): the header record written by the constructor is counted (#633).
ggregory
-
2026/09/07
(commons-csv) 01/01: Merge pull request #633 from lenamonj/csv-printer-record-count-javadoc
ggregory
-
2026/09/07
(commons-csv) branch master updated (fb71dcb6 -> 66c88c77)
ggregory
-
2026/09/07
(commons-csv) branch master updated: Escape-mode printer and parser mishandles value ending in multi-char delimiter prefix (f001).
ggregory
-
2026/09/06
(commons-lang) branch master updated: FastDateFormat static caches grow without bound per distinct pattern/zone/locale, untrusted patterns pin several KB each, forever (f033).
ggregory
-
2026/09/06
(commons-lang) branch master updated: Reflection builders' cycle registry unregisters per-visit: cycle-SAFE but DAG-exponential, a 40-level reference diamond drives ~2^40 traversals and unbounded output (f032).
ggregory
-
2026/09/06
(commons-lang) branch master updated: Reflection builders' cycle registry unregisters per-visit: cycle-SAFE but DAG-exponential, a 40-level reference diamond drives ~2^40 traversals and unbounded output (f032).
ggregory
-
2026/09/06
(commons-jelly) branch feat/use-commons-xml updated (4c8213b5 -> e5592064)
pkarwasz
-
2026/09/06
(commons-jelly) branch feat/use-commons-xml updated (9c0e5110 -> 4c8213b5)
pkarwasz
-
2026/09/06
(commons-lang) branch master updated: ExceptionUtils.getThrowableList() cycle check is O(n^2) over deep cause chains; all chain-walking consumers inherit it (f031).
ggregory
-
2026/09/06
(commons-jxpath) branch dependabot/maven/org.jdom-jdom-2.0.2 updated (56558d37 -> 18579de7)
ggregory
-
2026/09/06
(commons-secure-xml) branch main updated: Fix the OpenRewrite migration recipe to add a dependency on org.apache.commons:commons-secure-xml:1.0.0.
ggregory
-
2026/09/06
(commons-secure-xml) branch main updated: The OpenRewrite receipe now adds a dependency on commons-secure-xml.
ggregory
-
2026/09/06
svn commit: r87299 - in dev/commons/bcel/6.13.0-RC1: . binaries site site/apidocs site/apidocs/legal site/apidocs/org site/apidocs/org/apache site/apidocs/org/apache/bcel site/apidocs/org/apache/bcel/class-use site/apidocs/org/apache/bcel/classfile sit...
ggregory
-
2026/09/06
(commons-bcel) annotated tag commons-bcel-6.13.0-RC1 updated (be4bc45e -> 0945d4dd)
ggregory
-
2026/09/06
(commons-bcel) branch release updated: Prepare for the release candidate 6.13.0 RC1
ggregory
-
2026/09/06
(commons-bcel) branch release updated (45b3a158 -> 13fe5d91)
ggregory
-
2026/09/06
(commons-bcel) branch master updated: Prepare for the release candidate
ggregory
-
2026/09/06
(commons-secure-xml) branch main updated: Update logo with new component name.
ggregory
-
2026/09/06
(commons-lang) branch master updated: Javadoc
ggregory
-
2026/09/06
(commons-secure-xml) branch main updated: Fix download link
ggregory
-
2026/09/06
(commons-geometry) branch feat/use-commons-xml updated (7abf4a4a -> d4764afa)
ggregory
-
2026/09/06
(commons-secure-xml) branch main updated: Fix the OpenRewrite migration recipe to target static method calls instead of class references.
ggregory
-
2026/09/06
(commons-graph) branch master updated (d7698af -> b285412)
ggregory
-
2026/09/06
(commons-digester) branch feat/use-commons-xml deleted (was 48ad2c6c)
ggregory
-
2026/09/06
(commons-configuration) branch master updated: Harden XML parsing via commons-xml (#647)
ggregory
-
2026/09/06
(commons-configuration) branch feat/use-commons-xml deleted (was d43075a87)
ggregory
-
2026/09/06
(commons-jxpath) branch feat/use-commons-xml deleted (was d2466f88)
ggregory
-
2026/09/06
(commons-bsf) branch feat/use-commons-xml deleted (was 1eccdfb)
ggregory
-
2026/09/06
(commons-graph) branch feat/use-commons-xml deleted (was 87cd1d0)
ggregory
-
2026/09/06
(commons-geometry) branch feat/use-commons-xml deleted (was e1241bc5)
ggregory
-
2026/09/06
(commons-geometry) branch master updated: Harden XML output via commons-secure-xml (#300)
ggregory
-
2026/09/06
(commons-secure-xml) branch main updated: Updates for the next release
ggregory
-
2026/09/06
(commons-geometry) branch feat/use-commons-xml updated (d4764afa -> e1241bc5)
ggregory
-
2026/09/06
(commons-digester) branch master updated: Harden XML parsing via commons-secure-xml (#289)
ggregory
-
2026/09/06
(commons-vfs) branch master updated: Harden XML parsing via commons-secure-xml (#781)
ggregory
-
2026/09/06
(commons-vfs) branch feat/use-commons-xml deleted (was 634d55e06)
ggregory
-
2026/09/06
(commons-jxpath) branch master updated: Harden XML parsing via commons-secure-xml (#288)
ggregory
-
2026/09/06
(commons-jcs) branch master updated: Use Atomic* for statistics
tv
-
2026/09/06
(commons-bsf) branch master updated (6400516 -> 3922289)
ggregory
-
2026/09/06
(commons-bsf) 01/01: Merge pull request #280 from apache/feat/use-commons-xml
ggregory
-
2026/09/06
(commons-graph) 01/01: Merge pull request #50 from apache/feat/use-commons-xml
ggregory
-
2026/09/06
(commons-graph) branch feat/use-commons-xml updated (be774d1 -> 87cd1d0)
ggregory
-
2026/09/06
(commons-jelly) branch feat/use-commons-xml updated (6bcde77f -> 9c0e5110)
ggregory
-
2026/09/06
(commons-jxpath) branch feat/use-commons-xml updated (49e6c1fd -> d2466f88)
ggregory
-
2026/09/06
(commons-vfs) branch feat/use-commons-xml updated (377637feb -> 634d55e06)
ggregory
-
2026/09/06
(commons-digester) branch feat/use-commons-xml updated (cad08f69 -> 48ad2c6c)
ggregory
-
2026/09/06
(commons-text) branch feat/use-commons-xml updated (ac4f28fc -> d4205be7)
ggregory
-
2026/09/06
(commons-scxml) branch feat/use-commons-xml updated (d48f1442 -> 27e4b697)
ggregory
-
2026/09/06
(commons-bsf) branch feat/use-commons-xml updated (776e95e -> 1eccdfb)
ggregory
-
2026/09/06
(commons-configuration) branch feat/use-commons-xml updated (327d76221 -> d43075a87)
ggregory
-
2026/09/06
(commons-secure-xml) branch main updated: Updates for the next release
ggregory
-
2026/09/06
(commons-secure-xml) branch main updated: Updates for the next release
ggregory
-
2026/09/06
(commons-secure-xml) branch release updated (f240d75 -> e399b14)
ggregory
-
2026/09/06
svn commit: r87296 - dev/commons/secure-xml/1.0.0-RC2
ggregory
-
2026/09/06
(commons-secure-xml) branch main updated (15e2597 -> e399b14)
ggregory
-
2026/09/06
svn commit: r1937932 - commons/cms-site/trunk/conf
ggregory
-
2026/09/06
svn commit: r87294 - release/commons/secure-xml
ggregory
-
2026/09/06
(commons-secure-xml) annotated tag rel/commons-secure-xml-1.0.0 updated (f240d75 -> 8aa56cd)
ggregory
-
2026/09/06
svn commit: r87295 - release/commons/secure-xml
ggregory
-
2026/09/06
svn commit: r87293 - dev/commons/secure-xml/1.0.0-RC2 dev/commons/secure-xml/1.0.0-RC2/binaries dev/commons/secure-xml/1.0.0-RC2/source release/commons/secure-xml release/commons/secure-xml/binaries release/commons/secure-xml/source
ggregory
-
2026/09/06
svn commit: r87292 - in release/commons/secure-xml: binaries source
ggregory
-
2026/09/05
(commons-lang) branch master updated: ThresholdCircuitBreaker accepts negative increments and overflows its accumulator, silently keeping the breaker closed (f027).
ggregory
-
2026/09/05
(commons-lang) branch master updated: StrBuilder.indexOf materializes the whole builder as a String per call; deleteAll/replaceAll multiply it into ~750 GB churn on a 1 MB builder (f026).
ggregory
-
2026/09/05
(commons-lang) branch master updated: Attacker-controlled exception message forges frames in getRootCauseStackTrace output AND suppresses all real frames, beyond cosmetic log spoofing (f025).
ggregory
-
2026/09/05
(commons-lang) branch master updated: FormattableUtils.append pads right-justified output with insert(0) per char; O(width^2); '%500000s' costs ~1.25e11 char moves (f024).
ggregory
-
2026/09/05
(commons-lang) branch master updated: ArrayUtils.addAll/insert length arithmetic overflows (undeclared NegativeArraySizeException) while sibling concat is overflow-checked (f023).
ggregory
-
2026/09/05
(commons-lang) branch master updated: StringEscapeUtils.escapeHtml4/3 apostrophe gap: single-quoted and unquoted HTML attribute contexts are trivially breakable, and the javadoc discloses the gap only as an HTML4 entity-legality footnote (f022).
ggregory
-
2026/09/05
(commons-lang) branch master updated: Fraction.getFraction(String) throws undeclared ArithmeticException on crafted numeric strings ('9999999999.5', '1/0', mixed-number overflow) (f021).
ggregory
-
2026/09/05
(commons-lang) branch master updated: ClassUtils.getClass() name normalization (whitespace stripping + dot-to-dollar rewriting) defeats host-side class-name string checks (f020).
ggregory
-
2026/09/05
(commons-lang) branch master updated: BitField long-mask fields silently mis-answer int/short/byte accessors: shifts masked mod 32, and sign extension makes above-bit-31 flags read as set on any negative holder (f019).
ggregory
-
2026/09/05
(commons-lang) branch master updated: DoubleRange/Range accept NaN endpoints, silently producing a half-unbounded range, contains()/fit() fail open for every value above the minimum (f018).
ggregory
-
2026/09/05
(commons-lang) branch master updated: Fix LockingVisitors Javadoc to match code (f017).
ggregory
-
2026/09/05
(commons-lang) branch master updated: Match Javadoc to code in SystemProperties.getProperty() and SystemUtils.getEnvironmentVariable() and update inline comments (f016).
ggregory
-
2026/09/05
(commons-lang) branch master updated: JavaVersion.get() throws NumberFormatException where javadoc promises null (f015).
ggregory
-
2026/09/05
(commons-lang) branch master updated: DurationFormatUtils.formatPeriod walks the calendar one year per iteration, Long.MAX_VALUE endMillis forces ~292 million Calendar round trips on one thread (f014).
ggregory
-
2026/09/05
(commons-jcs) 02/06: Move payload to derived classes
tv
-
2026/09/05
(commons-lang) branch master updated: StrSubstitutor (deprecated) recursive expansion has a cycle check but no fan-out, depth, or size bound.
ggregory
-
2026/09/05
(commons-lang) branch master updated: StringEscapeUtils.escapeEcmaScript() misses backtick/template-literal (`, ${) and inline-script parser-state sequences (<!--, <script) - claim 'Deals correctly with quotes' is falsified by ES6 (f012).
ggregory
-
2026/09/05
(commons-lang) branch master updated: Memoizer: default caches the first failure forever, has no size bound or eviction, and runs the user computation inside the ConcurrentHashMap bin lock (blocking unrelated keys, deadlocking reentrant use) (f011).
ggregory
-
2026/09/05
(commons-jcs) 04/06: Simplify
tv
-
2026/09/05
(commons-jcs) 05/06: Re-add ASL
tv
-
2026/09/05
(commons-jcs) branch master updated (61215aac -> 638611a9)
tv
-
2026/09/05
(commons-jcs) 01/06: Move misc code out of the lock
tv
-
2026/09/05
(commons-jcs) 03/06: Make DoubleLinkedList Iterable
tv
-
2026/09/05
(commons-jcs) 06/06: Use same locking as in AbstractMemoryCache
tv
-
2026/09/05
(commons-lang) branch master updated: FastDateParser.parse throws undeclared IllegalArgumentException, NullPointerException, and IllegalStateException on crafted date strings (f010).
ggregory
-
2026/09/05
(commons-lang) branch master updated: WordUtils.wrap(wrapLongWords=false, the 2-arg default) copies the entire remaining string every iteration (f009).
ggregory
-
2026/09/05
(commons-lang) branch master updated: ExtendedMessageFormat.applyPattern() is quadratic: full pattern.toCharArray() per token (f008).
ggregory
-
2026/09/05
(commons-lang) branch master updated: Add missing test
ggregory
-
2026/09/05
(commons-lang) branch master updated: LocaleUtils static caches no longer grows on invalid input to LocaleUtils.countriesByLanguage(String) (f007).
ggregory
-
2026/09/05
(commons-bcel) branch master updated: Javadoc
ggregory
-
2026/09/05
(commons-lang) branch master updated: EventUtils.EventBindingInvocationHandler.invoke() dispatches Object.hashCode/equals/toString into the bound business method (empty-eventTypes default), or returns null -> NPE from hash collections (non-empty) (f006).
ggregory
-
2026/09/04
(commons-lang) branch master updated: StringUtils.replaceEachRepeatedly derives its recursion budget from the input itself - the documented StackOverflowError protection fails on large tables, and expanding rules amplify text 64x even at the default TTL (f005).
ggregory