commits

Messages by Date

2026/09/04 (commons-lang) branch master updated: UnicodeUnescaper.unescapeJava/EcmaScript/Json: malformed \u sequences throw undeclared IllegalArgumentException, AND non-ASCII digit spellings of \u escapes are silently accepted; both arms of one missing ASCII-hex prescan (f004). ggregory
2026/09/04 (commons-lang) branch master updated: FastDateParser parses 'Y' (week year) as plain calendar year; asymmetric with FastDatePrinter and with SimpleDateFormat; boundary dates shift by a full year, silently (f002). ggregory
2026/09/04 (commons-lang) branch master updated: FastDateParser parses 'Y' (week year) as plain calendar year; asymmetric with FastDatePrinter and with SimpleDateFormat; boundary dates shift by a full year, silently (f002). ggregory
2026/09/04 (commons-bcel) branch master updated: Sort members ggregory
2026/09/04 (commons-bcel) branch master updated: Utility.JavaReader escape decoding: OOB table index, bad-hex crash, silent non-canonical aliasing (f026). ggregory
2026/09/04 (commons-bcel) branch master updated: Static WIDE ThreadLocal survives exceptions, corrupting the next class's disassembly on the same thread (f025). ggregory
2026/09/04 (commons-bcel) 01/02: Verifier cache grows unboundedly with attacker-chosen class names (f024). ggregory
2026/09/04 (commons-bcel) 02/02: org.apache.bcel.verifier.VerifierFactory.DEFAULT_MAX_CACHE_SIZE doesn't need to be public. ggregory
2026/09/04 (commons-bcel) branch master updated (b0c3e6a1 -> 4a4b7577) ggregory
2026/09/04 (commons-bcel) branch master updated: Verifier pass 3a delayed checks are quadratic in attribute and code size (f023). ggregory
2026/09/04 (commons-bcel) branch master updated: BCELifier interpolates attacker class/package names into generated Java source unescaped (f022). ggregory
2026/09/04 (commons-bcel) branch master updated: Utility.decode fixed 3x buffer breaks the encode/decode round trip and throws unchecked AIOOBE (f021). ggregory
2026/09/04 (commons-bcel) branch master updated: Signature.matchGJIdent recurses unboundedly on nested generic signatures (Signature.translate) (f020). ggregory
2026/09/04 (commons-bcel) branch master updated: PMG attribute ignores declared length, enabling BCEL-vs-JVM parse divergence (f019). ggregory
2026/09/04 (commons-jcs) branch dependabot/maven/commons-jcs4-jcache-extras/org.apache.tomcat-tomcat-catalina-11.0.25 deleted (was 79bf6aa7) github-bot
2026/09/04 (commons-jcs) branch master updated: 10.16.1.2 does not exist tv
2026/09/04 (commons-bcel) branch master updated: ClassPath.getBytes() sizes its buffer from the forged ZIP uncompressed-size field (f016). ggregory
2026/09/04 (commons-jcs) branch dependabot/maven/commons-jcs4-jcache-openjpa/org.apache.derby-derby-10.17.1.0 deleted (was 8a8544cc) github-bot
2026/09/04 (commons-jcs) 01/01: Merge pull request #419 from apache/dependabot/maven/commons-jcs4-jcache-openjpa/org.apache.derby-derby-10.17.1.0 tv
2026/09/04 (commons-jcs) branch master updated (c493ae79 -> 22c86674) tv
2026/09/04 (commons-jcs) branch dependabot/maven/commons-jcs4-jcache-openjpa/org.apache.derby-derby-10.17.1.0 updated (2f3256aa -> 8a8544cc) tv
2026/09/04 (commons-jcs) branch dependabot/maven/commons-jcs4-jcache-openjpa/org.apache.derby-derby-10.17.1.0 created (now 2f3256aa) github-bot
2026/09/04 (commons-bcel) branch master updated: Class2HTML builds output file paths from the unvalidated class name (f015). ggregory
2026/09/04 (commons-jcs) branch master updated: Potential fix for code scanning alert no. 124: Failure to use secure cookies tv
2026/09/04 (commons-jcs) branch master updated: Remove declaration of exceptions never thrown tv
2026/09/04 (commons-bcel) 01/03: Repositories cache classes under the input-defined this_class name; global static Repository/VerifierFactory make the poisoning ClassLoader-wide. (f012). ggregory
2026/09/04 (commons-bcel) 03/03: Class2HTML emitters write attacker class-file strings into HTML unescaped (stored XSS in reports) (f014). ggregory
2026/09/04 (commons-bcel) 02/03: Silent u2/u1 count truncation across dump paths corrupts emitted bytecode. (f013). ggregory
2026/09/04 (commons-bcel) branch master updated (512a70bb -> fb72c225) ggregory
2026/09/04 (commons-jcs) branch master updated (816923b3 -> 735ba195) tv
2026/09/04 (commons-jcs) 01/01: Merge pull request #418 from apache/dependabot/maven/commons-jcs4-jcache-extras/org.apache.tomcat-tomcat-catalina-11.0.25 tv
2026/09/04 (commons-bcel) branch master updated: Silent u2/u1 count truncation across dump paths corrupts emitted bytecode (f013). ggregory
2026/09/04 (commons-bcel) branch master updated: Repositories cache classes under the input-defined this_class name; global static Repository/VerifierFactory make the poisoning ClassLoader-wide (f012). ggregory
2026/09/04 (commons-jcs) 01/02: Better data encapsulation tv
2026/09/04 (commons-jcs) 02/02: A bit of reorganization in basic structures tv
2026/09/04 (commons-jcs) branch master updated (ecc6241d -> 593885cb) tv
2026/09/04 (commons-bcel) branch master updated: f011: typeSignatureToString recurses per generic-nesting level, unbounded, with quadratic substring copies ggregory
2026/09/04 (commons-bcel) branch master updated: ConstantPool.constantToString recurses forever on self-referencing CONSTANT_MethodHandle (f010). ggregory
2026/09/04 (commons-bcel) branch master updated: Disassembler and Class2HTML re-implement the unchecked switch-table allocation (f009). ggregory
2026/09/04 (commons-bcel) branch master updated: Subroutines.noRecursiveCalls enumerates exponentially many JSR call paths (f008). ggregory
2026/09/04 (commons-bcel) branch master updated: Cubic handlers × range × subroutines scan in Subroutines constructor hangs JustIce Pass 3b (f007). ggregory
2026/09/04 (commons-bcel) branch master updated: Pass 3b dataflow stores frames per instruction and clones ever-growing execution chains (f006). ggregory
2026/09/04 (commons-bcel) branch master updated: JustIce Pass 2 LVT check amplifies each 10-byte entry into ~131k hashtable operations (f005). ggregory
2026/09/04 (commons-bcel) branch master updated: JustIce Pass 2 hangs on cyclic superclass chain of a referenced exception class (f004). ggregory
2026/09/04 (commons-bcel) branch master updated: Opcodes tableswitch and lookupswitch add boundary checks (f003). ggregory
2026/09/04 (commons-bcel) branch master updated (b27feadf -> ad48367d) ggregory
2026/09/04 (commons-bcel) 01/02: Sort members ggregory
2026/09/04 (commons-bcel) 02/02: Nested annotation element values recurse unboundedly; MAX_ARRAY_DIMENSIONS cap bypassed (f002). ggregory
2026/09/04 (commons-bcel) branch master updated: f001 Nested Code/Record attributes drive unbounded parse-time recursion in ClassParser. ggregory
2026/09/04 (commons-bcel) branch master updated: Nested Code/Record attributes drive unbounded parse-time recursion in ClassParser (f001). ggregory
2026/09/04 (commons-parent) 03/03: Bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.26.1 to 0.26.2. ggregory
2026/09/04 (commons-text) branch master updated (81de4f7a -> 5d882dca) ggregory
2026/09/04 (commons-text) 02/02: StringMatcher.isMatch(CharSequence, int, int, int) forwards bufferEnd as bufferStart (#768). ggregory
2026/09/04 (commons-text) 01/02: Typo ggregory
2026/09/04 (commons-text) branch master updated: StringMatcher.isMatch(CharSequence, int, int, int) forwards bufferEnd as bufferStart (#768) ggregory
2026/09/04 (commons-jcs) branch master updated: Relax test timing for windows build tv
2026/09/04 svn commit: r87183 - in dev/commons/parent/105-RC1: . binaries site site/css site/images site/images/logos site/img site/js source ggregory
2026/09/04 (commons-parent) annotated tag commons-parent-105-RC1 updated (f26020f -> c41c050) ggregory
2026/09/04 (commons-parent) branch release updated: Prepare for the release candidate 105 RC1 ggregory
2026/09/04 (commons-build-plugin) branch master updated: Bump graalvm.version from 25.1.3 to 25.3.4.1 on Java 25 and up ggregory
2026/09/04 (commons-parent) branch master updated: Prepare for the release candidate ggregory
2026/09/04 (commons-parent) branch release updated (029a890 -> 76013b5) ggregory
2026/09/04 (commons-text) branch master updated: Move profile from Java 22 to 25 (LTS) boundary. ggregory
2026/09/04 (commons-text) branch master updated (ad7bce75 -> 8f11af0b) ggregory
2026/09/04 (commons-text) 01/02: [test] Bump org.graalvm.js:js from 25.0.2 to 25.3.4.1 on Java 22 and up. ggregory
2026/09/04 (commons-text) 02/02: Bump net.bytebuddy:byte-buddy from 1.18.10 to 1.18.13 ggregory
2026/09/04 (commons-parent) branch master updated: Bump maven-failsafe-plugin from 3.5.6 to 3.6.0. ggregory
2026/09/04 (commons-parent) 02/03: Bump org.apache.felix:maven-bundle-plugin from 6.1.0 to 6.1.2 on Java 17 and up. ggregory
2026/09/04 (commons-parent) branch master updated (cd35faf -> d172e0f) ggregory
2026/09/04 (commons-parent) 01/03: Bump maven-surefire-report-plugin to 3.5.6 to 3.6.0. ggregory
2026/09/04 (commons-parent) 01/02: Bump commons.checkstyle.version from 14.0.0 to 14.1.0 on Java 21 and up. ggregory
2026/09/04 (commons-parent) branch master updated (6f3fdc9 -> cd35faf) ggregory
2026/09/04 (commons-parent) 02/02: Bump maven-surefire-plugin to 3.5.6 to 3.6.0. ggregory
2026/09/03 (commons-compress) branch master updated: Bump om.github.luben:zstd-jni from 1.5.7-15 to 1.5.7-16. ggregory
2026/09/03 (commons-text) branch master updated: Compare characters by value in DamerauLevenshteinDistance (#770). ggregory
2026/09/03 (commons-text) branch master updated: Compare characters by value in DamerauLevenshteinDistance (#770) ggregory
2026/09/03 (commons-collections) branch master updated: Fix TransformedMultiValuedMap.putAll(K, Iterable) NPE for null value transformer (#731). ggregory
2026/09/03 (commons-collections) branch master updated: Fix putAll(K, Iterable) NPE for null value transformer (#731) ggregory
2026/09/03 (commons-collections) branch master updated: Fix putAll(K, Iterable) NPE for null value transformer (#731). ggregory
2026/09/03 (commons-collections) branch master updated: Remove reference to sonatype-snapshots in POM (2026-08-15 f009). ggregory
2026/09/03 (commons-jcs) branch dependabot/maven/commons-jcs4-jcache-extras/org.apache.tomcat-tomcat-catalina-11.0.25 created (now 79bf6aa7) github-bot
2026/09/02 (commons-scxml) branch feat/use-commons-xml updated (cb9672c2 -> d48f1442) pkarwasz
2026/09/02 (commons-text) branch feat/use-commons-xml updated (f758b18b -> ac4f28fc) pkarwasz
2026/09/02 (commons-vfs) branch feat/use-commons-xml updated (1f65d1edd -> 377637feb) pkarwasz
2026/09/02 (commons-jelly) branch feat/use-commons-xml updated (55c5bad2 -> 6bcde77f) pkarwasz
2026/09/02 (commons-jxpath) branch feat/use-commons-xml updated (915bc091 -> 49e6c1fd) pkarwasz
2026/09/02 (commons-graph) branch feat/use-commons-xml updated (36ed084 -> be774d1) pkarwasz
2026/09/02 (commons-digester) branch feat/use-commons-xml updated (ccd7f6f3 -> cad08f69) pkarwasz
2026/09/02 (commons-geometry) branch feat/use-commons-xml updated (99a74470 -> 7abf4a4a) pkarwasz
2026/09/02 (commons-bsf) branch feat/use-commons-xml updated (31df147 -> 776e95e) pkarwasz
2026/09/02 (commons-configuration) branch feat/use-commons-xml updated (264769b0d -> 327d76221) pkarwasz
2026/09/02 (commons-parent) branch master updated (186b455 -> 6f3fdc9) ggregory
2026/09/02 (commons-parent) 01/02: Ignore macOS noise. ggregory
2026/09/02 (commons-parent) 02/02: Bump commons.compiler.version from 3.15.0 to 3.16.0. ggregory
2026/09/02 (commons-lang) branch master updated: Fix DurationFormatUtils.formatPeriod() calculation when pattern omits 'M' (#1780). ggregory
2026/09/02 (commons-lang) branch master updated: Fix DurationFormatUtils.formatPeriod() calculation when pattern omits M (#1780) ggregory
2026/09/02 svn commit: r87149 - in dev/commons/secure-xml/1.0.0-RC2: . binaries site site/apidocs site/apidocs/legal site/apidocs/org site/apidocs/org/apache site/apidocs/org/apache/commons site/apidocs/org/apache/commons/xml site/apidocs/org/apache/commons/xml/s... ggregory
2026/09/02 (commons-secure-xml) annotated tag commons-secure-xml-1.0.0-RC2 updated (f240d75 -> 0ae7c78) ggregory
2026/09/02 (commons-secure-xml) branch release updated: Prepare for the release candidate 1.0.0 RC2 ggregory
2026/09/02 (commons-secure-xml) branch release updated (157f41e -> 15e2597) ggregory
2026/09/02 (commons-secure-xml) branch main updated: Prepare for the release candidate ggregory
2026/09/02 (commons-secure-xml) branch dependabot/maven/commons.graalvm.buildtools.version-1.1.11 deleted (was 327d5ab) ggregory
2026/09/02 (commons-secure-xml) branch main updated: Bump commons.graalvm.buildtools.version from 1.1.10 to 1.1.11 (#85) ggregory
2026/09/02 (commons-secure-xml) branch dependabot/maven/commons.graalvm.buildtools.version-1.1.11 created (now 327d5ab) github-bot
2026/09/02 (commons-secure-xml) 02/02: Fix HTML links ggregory
2026/09/02 (commons-secure-xml) 01/02: Better table description ggregory
2026/09/02 (commons-secure-xml) branch main updated (7602db1 -> 10b4451) ggregory
2026/09/02 (commons-secure-xml) branch main updated: Javadoc ggregory
2026/09/02 (commons-secure-xml) branch main updated (92724fb -> 7602db1) ggregory
2026/09/02 (commons-secure-xml) 02/02: Normalize Javadoc `@param`. ggregory
2026/09/02 (commons-secure-xml) 01/02: Normalize Javadoc `@throws`. ggregory
2026/09/02 (commons-secure-xml) 09/10: FIx Javadoc @param description ggregory
2026/09/02 (commons-secure-xml) 10/10: Javadoc ggregory
2026/09/02 (commons-secure-xml) branch main updated (61fe771 -> 8af1672) ggregory
2026/09/02 (commons-secure-xml) 06/10: Javadoc: Fix word salad. ggregory
2026/09/02 (commons-secure-xml) 04/10: Normalize spelling. ggregory
2026/09/02 (commons-secure-xml) 05/10: Javadoc: Fix word salad ggregory
2026/09/02 (commons-secure-xml) 01/10: Javadoc (grammar) ggregory
2026/09/02 (commons-secure-xml) 07/10: Javadoc ggregory
2026/09/02 (commons-secure-xml) 02/10: Javadoc @see tag not needed here. ggregory
2026/09/02 (commons-secure-xml) 08/10: Fix inline comment ggregory
2026/09/02 (commons-secure-xml) 03/10: Javadoc (grammar) ggregory
2026/09/02 (commons-secure-xml) branch main updated: Fix the site test report and count Android in the coverage (#82) ggregory
2026/09/01 (commons-beanutils) branch master updated: NumberConverter.toNumber(Class, Number): Preserve float and double magnitude when converting to BigInteger (#438). ggregory
2026/09/01 (commons-beanutils) branch master updated: Preserve float and double magnitude when converting to BigInteger (#438) ggregory
2026/09/01 (commons-lang) branch master updated: Checkstyle ggregory
2026/09/01 (commons-lang) branch master updated: Add DurationFormatUtilsTest.testFormatPeriodWithoutMonthsAfterLeapDayAnniversary() ggregory
2026/09/01 (commons-lang) branch master updated: Fix int overflow in Conversion count and position bounds guards (#1779). ggregory
2026/09/01 (commons-lang) branch master updated: fix int overflow in Conversion count and position bounds guards (#1779) ggregory
2026/09/01 (commons-secure-xml) branch main updated: Split the Security and Threat Model pages (#83) ggregory
2026/09/01 (commons-secure-xml) branch main updated: Fix broken English. ggregory
2026/09/01 (commons-secure-xml) branch main updated: Javadoc @link to our own classes. ggregory
2026/09/01 (commons-secure-xml) branch main updated: Javadoc @link to our own classes. ggregory
2026/09/01 (commons-statistics) branch master updated: Implement the range probability(from, to) using a single sum aherbert
2026/09/01 (commons-secure-xml) branch main updated: Import class instead of using a FQCN. ggregory
2026/09/01 (commons-secure-xml) branch main updated: SchemaContentModelLimitTest.MAX_OCCURS only needs to be just over 5,000. ggregory
2026/09/01 (commons-secure-xml) branch main updated: Document resolvers in the Javadoc overview (#81) ggregory
2026/09/01 (commons-secure-xml) branch main updated: Sharpen the threat model: honored JAXP contracts, XInclude, and expansion limits (#66) pkarwasz
2026/09/01 (commons-secure-xml) branch main updated: Remove unused import. ggregory
2026/09/01 (commons-secure-xml) branch main updated (94898e3 -> 1ff8851) pkarwasz
2026/09/01 (commons-secure-xml) 01/02: Credit Elliotte Rusty Harold's clean-up in the changelog pkarwasz
2026/09/01 (commons-secure-xml) 02/02: Use the ASF id in the changelog and the developer entry pkarwasz
2026/09/01 (commons-secure-xml) branch main updated: Remove unthrown exceptions (#78) ggregory
2026/09/01 (commons-secure-xml) branch main updated: Copy editing (#80) ggregory
2026/09/01 (commons-secure-xml) branch main updated: Small simplifications (#79) pkarwasz
2026/09/01 (commons-secure-xml) branch main updated: Don't need protected method in final class (#77) pkarwasz
2026/09/01 (commons-secure-xml) branch main updated: Forward getExternalSubset to a caller EntityResolver2 (#68) ggregory
2026/09/01 (commons-jcs) branch master updated: Fix inconsistent locking tv
2026/09/01 (commons-secure-xml) 01/02: Javadoc ggregory
2026/09/01 (commons-secure-xml) 02/02: Javadoc ggregory
2026/09/01 (commons-secure-xml) branch main updated (e1dde41 -> b08f73e) ggregory
2026/09/01 (commons-secure-xml) 05/05: Generate binary assembly. ggregory
2026/09/01 (commons-secure-xml) 03/05: Sort members. ggregory
2026/09/01 (commons-secure-xml) 01/05: Next RC will be RC2. ggregory
2026/09/01 (commons-secure-xml) 02/05: Add android-tests to source assembly. ggregory
2026/09/01 (commons-secure-xml) 04/05: Javadoc ggregory
2026/09/01 (commons-secure-xml) branch main updated (4ae7b9c -> e1dde41) ggregory
2026/09/01 (commons-secure-xml) branch main updated: Bound the content model a schema expands into (#73) ggregory
2026/09/01 (commons-secure-xml) branch main updated: Install a fresh StAX resolver floor per hook instead of mutating one (#75) ggregory
2026/09/01 (commons-secure-xml) branch main updated: Package-private FallbackIgnoreEntityResolver2 can be final. ggregory
2026/09/01 (commons-jcs) 01/03: Improve thread pool handling tv
2026/09/01 (commons-jcs) 02/03: Document scheduled pool configuration tv
2026/09/01 (commons-jcs) 03/03: Merge branch 'master' of https://gitbox.apache.org/repos/asf/commons-jcs.git tv
2026/09/01 (commons-jcs) branch master updated (60b41be5 -> ced38659) tv
2026/09/01 (commons-secure-xml) branch main updated: Delegate the Java 18 XPathFactory property methods (#76) ggregory
2026/09/01 (commons-secure-xml) branch ci/zulu-8u152 deleted (was 19f678d) ggregory
2026/09/01 (commons-secure-xml) branch main updated: Secure getAssociatedStylesheet, and pin the CI Zulu job to JDK 8u152 (#74) ggregory
2026/09/01 (commons-secure-xml) branch ci/zulu-8u152 updated (dad641f -> 19f678d) ggregory
2026/09/01 (commons-secure-xml) branch main updated: Keep the resolver floor on a reader obtained before reset() (#72) ggregory
2026/09/01 (commons-secure-xml) branch main updated: Cover Saxon's unparsed-text family and json-doc on the TrAX path (#71) ggregory
2026/09/01 (commons-secure-xml) branch main updated: Rethrow JVM errors unchanged in MethodHandleFactory.invokeExact (#70) ggregory
2026/09/01 (commons-secure-xml) branch main updated: Resolve each unresolved URI to a fresh empty document (#69) ggregory
2026/09/01 svn commit: r87114 - dev/commons/secure-xml/1.0.0-RC1 ggregory
2026/09/01 (commons-secure-xml) branch main updated: Restructure SECURITY.md into a full security policy (#67) ggregory
2026/09/01 (commons-secure-xml) branch build/build-all-gate deleted (was a8116c3) pkarwasz
2026/09/01 (commons-secure-xml) branch ci/zulu-8u152 updated (414da2f -> dad641f) pkarwasz
2026/09/01 (commons-secure-xml) branch ci/zulu-8u152 created (now 414da2f) pkarwasz
2026/09/01 (commons-secure-xml) 01/01: Pin the CI Zulu job to JDK 8u152 pkarwasz
2026/09/01 (commons-parent) branch master updated: Update Commons Skin 5.2.0 to 5.3.0 aherbert
2026/09/01 svn commit: r87108 - dev/commons/skin/5.3.0-RC1 aherbert
2026/09/01 (commons-skin) annotated tag rel/commons-skin-5.3.0 updated (8e1b3b1 -> 750ea31) aherbert
2026/09/01 (commons-skin) 01/02: Bump to next development version aherbert
2026/09/01 (commons-skin) branch master updated (60e4e81 -> 46a5362) aherbert
2026/09/01 (commons-skin) 02/02: Merge branch 'release' aherbert
2026/09/01 (commons-secure-xml) branch main updated: Verify the Gradle wrapper and distribution by checksum pkarwasz
2026/09/01 (commons-secure-xml) branch main updated: Disable Mockito-based tests in the native image pkarwasz
2026/09/01 (commons-secure-xml) 03/03: Rework the DOM default parser selection test. pkarwasz
2026/09/01 (commons-secure-xml) branch main updated (39df65a -> ce48b10) pkarwasz
2026/09/01 (commons-secure-xml) 01/03: fix: add Mockito as Gradle dependency pkarwasz
2026/09/01 (commons-secure-xml) 02/03: Rework the SAX default parser selection tests. pkarwasz
2026/08/31 svn commit: r87101 - in dev/commons/secure-xml/1.0.0-RC1: . binaries site site/apidocs site/apidocs/legal site/apidocs/org site/apidocs/org/apache site/apidocs/org/apache/commons site/apidocs/org/apache/commons/xml site/apidocs/org/apache/commons/xml/s... ggregory
2026/08/31 (commons-secure-xml) annotated tag commons-secure-xml-1.0.0-RC1 updated (157f41e -> 993e926) ggregory
2026/08/31 (commons-secure-xml) branch release updated: Prepare for the release candidate 1.0.0 RC1 ggregory
2026/08/31 (commons-secure-xml) branch release created (now 39df65a) ggregory
2026/08/31 (commons-secure-xml) branch main updated: Add assembly folder. ggregory
2026/08/31 (commons-secure-xml) branch main updated: Prepare for the release candidate ggregory
2026/08/31 (commons-jexl) branch JEXL-471 updated (24d8dd0a -> bc10ac91) henrib
2026/08/31 (commons-jexl) branch master updated (73fbe48e -> a60740ee) henrib
2026/08/31 (commons-geometry) branch feat/use-commons-xml created (now 2ce771f3) pkarwasz
2026/08/31 (commons-jexl) 01/01: Merge pull request #414 from apache/JEXL-471 henrib