[struts] 01/01: WW-5325 Upgrades commons-lang3 to version 3.13.0

2023-07-29 Thread lukaszlenart
This is an automated email from the ASF dual-hosted git repository.

lukaszlenart pushed a commit to branch WW-5325-commons-lang3
in repository https://gitbox.apache.org/repos/asf/struts.git

commit 129b2c3b0830b7fb45d9aaa2031f9f8c1400edb5
Author: Lukasz Lenart 
AuthorDate: Thu Jul 27 20:56:59 2023 +0200

WW-5325 Upgrades commons-lang3 to version 3.13.0
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 1b7b56725..f538e7d86 100644
--- a/pom.xml
+++ b/pom.xml
@@ -926,7 +926,7 @@
 
 org.apache.commons
 commons-lang3
-3.10
+3.13.0
 
 
 org.apache.commons



[struts] branch WW-5325-commons-lang3 updated (468f36b5f -> 129b2c3b0)

2023-07-29 Thread lukaszlenart
This is an automated email from the ASF dual-hosted git repository.

lukaszlenart pushed a change to branch WW-5325-commons-lang3
in repository https://gitbox.apache.org/repos/asf/struts.git


 discard 468f36b5f WW-5325 Upgrades commons-lang3 to version 3.12.0
 new 129b2c3b0 WW-5325 Upgrades commons-lang3 to version 3.13.0

This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version.  This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:

 * -- * -- B -- O -- O -- O   (468f36b5f)
\
 N -- N -- N   refs/heads/WW-5325-commons-lang3 (129b2c3b0)

You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.

Any revisions marked "omit" are not gone; other references still
refer to them.  Any revisions marked "discard" are gone forever.

The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.


Summary of changes:
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)



[struts] branch WW-5325-commons-lang3 deleted (was 129b2c3b0)

2023-07-29 Thread lukaszlenart
This is an automated email from the ASF dual-hosted git repository.

lukaszlenart pushed a change to branch WW-5325-commons-lang3
in repository https://gitbox.apache.org/repos/asf/struts.git


 was 129b2c3b0 WW-5325 Upgrades commons-lang3 to version 3.13.0

The revisions that were on this branch are still contained in
other references; therefore, this change does not discard any commits
from the repository.



[struts] branch master updated (bcaab0c2b -> 85f7e8a1a)

2023-07-29 Thread lukaszlenart
This is an automated email from the ASF dual-hosted git repository.

lukaszlenart pushed a change to branch master
in repository https://gitbox.apache.org/repos/asf/struts.git


from bcaab0c2b Merge pull request #713 from 
apache/dependabot/maven/jackson.version-2.15.2
 add 129b2c3b0 WW-5325 Upgrades commons-lang3 to version 3.13.0
 new 85f7e8a1a Merge pull request #714 from apache/WW-5325-commons-lang3

The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.


Summary of changes:
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)



[struts] 01/01: Merge pull request #714 from apache/WW-5325-commons-lang3

2023-07-29 Thread lukaszlenart
This is an automated email from the ASF dual-hosted git repository.

lukaszlenart pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/struts.git

commit 85f7e8a1a564cfb27bd0f640c33fd1d446c385a1
Merge: bcaab0c2b 129b2c3b0
Author: Lukasz Lenart 
AuthorDate: Sun Jul 30 07:59:07 2023 +0200

Merge pull request #714 from apache/WW-5325-commons-lang3

[WW-5325] Upgrades commons-lang3 to version 2.13.0

 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)




[struts] 02/04: WW-5233 Disables XML external entity parsing

2023-07-29 Thread lukaszlenart
This is an automated email from the ASF dual-hosted git repository.

lukaszlenart pushed a commit to branch WW-5233-tiles
in repository https://gitbox.apache.org/repos/asf/struts.git

commit 01ccc0bcb32b16c3e44a83b2c8c0be1a9b069e55
Author: Lukasz Lenart 
AuthorDate: Fri Jul 14 08:15:19 2023 +0200

WW-5233 Disables XML external entity parsing
---
 .../definition/digester/DigesterDefinitionsReader.java| 15 +++
 1 file changed, 15 insertions(+)

diff --git 
a/plugins/tiles/src/main/java/org/apache/tiles/core/definition/digester/DigesterDefinitionsReader.java
 
b/plugins/tiles/src/main/java/org/apache/tiles/core/definition/digester/DigesterDefinitionsReader.java
index 4d756bbb2..ccbed0a81 100644
--- 
a/plugins/tiles/src/main/java/org/apache/tiles/core/definition/digester/DigesterDefinitionsReader.java
+++ 
b/plugins/tiles/src/main/java/org/apache/tiles/core/definition/digester/DigesterDefinitionsReader.java
@@ -21,6 +21,7 @@ package org.apache.tiles.core.definition.digester;
 
 import org.apache.commons.digester.Digester;
 import org.apache.commons.digester.Rule;
+import org.apache.struts2.StrutsException;
 import org.apache.tiles.api.Attribute;
 import org.apache.tiles.api.Definition;
 import org.apache.tiles.api.Expression;
@@ -30,8 +31,11 @@ import org.apache.tiles.core.definition.DefinitionsReader;
 import org.xml.sax.Attributes;
 import org.xml.sax.ErrorHandler;
 import org.xml.sax.SAXException;
+import org.xml.sax.SAXNotRecognizedException;
+import org.xml.sax.SAXNotSupportedException;
 import org.xml.sax.SAXParseException;
 
+import javax.xml.parsers.ParserConfigurationException;
 import java.io.IOException;
 import java.io.InputStream;
 import java.net.URL;
@@ -256,6 +260,17 @@ public class DigesterDefinitionsReader implements 
DefinitionsReader {
 digester.setNamespaceAware(true);
 digester.setUseContextClassLoader(true);
 digester.setErrorHandler(new ThrowingErrorHandler());
+try {
+//OWASP
+
//https://cheatsheetseries.owasp.org/cheatsheets/XML_External_Entity_Prevention_Cheat_Sheet.html
+
digester.setFeature("http://xml.org/sax/features/external-general-entities";, 
false);
+
digester.setFeature("http://xml.org/sax/features/external-parameter-entities";, 
false);
+// Disable external DTDs as well
+
digester.setFeature("http://apache.org/xml/features/nonvalidating/load-external-dtd";,
 false);
+digester.setXIncludeAware(false);
+} catch (ParserConfigurationException | SAXNotRecognizedException | 
SAXNotSupportedException e) {
+throw new StrutsException("Unable to disable external XML entity 
parsing", e);
+}
 
 // Register our local copy of the DTDs that we can find
 String[] registrations = getRegistrations();



[struts] 03/04: [maven-release-plugin] prepare release STRUTS_6_3_0_RC1

2023-07-29 Thread lukaszlenart
This is an automated email from the ASF dual-hosted git repository.

lukaszlenart pushed a commit to branch WW-5233-tiles
in repository https://gitbox.apache.org/repos/asf/struts.git

commit 67a21ffe1b52777049f2e832f59a3bd11237bb68
Author: Lukasz Lenart 
AuthorDate: Sun Jul 16 09:48:03 2023 +0200

[maven-release-plugin] prepare release STRUTS_6_3_0_RC1
---
 apps/pom.xml| 2 +-
 apps/rest-showcase/pom.xml  | 4 ++--
 apps/showcase/pom.xml   | 2 +-
 assembly/pom.xml| 2 +-
 bom/pom.xml | 8 
 bundles/admin/pom.xml   | 2 +-
 bundles/demo/pom.xml| 2 +-
 bundles/pom.xml | 2 +-
 core/pom.xml| 2 +-
 plugins/async/pom.xml   | 2 +-
 plugins/bean-validation/pom.xml | 2 +-
 plugins/cdi/pom.xml | 2 +-
 plugins/config-browser/pom.xml  | 2 +-
 plugins/convention/pom.xml  | 2 +-
 plugins/dwr/pom.xml | 2 +-
 plugins/embeddedjsp/pom.xml | 2 +-
 plugins/gxp/pom.xml | 2 +-
 plugins/jasperreports/pom.xml   | 2 +-
 plugins/javatemplates/pom.xml   | 2 +-
 plugins/jfreechart/pom.xml  | 2 +-
 plugins/json/pom.xml| 2 +-
 plugins/junit/pom.xml   | 2 +-
 plugins/osgi/pom.xml| 2 +-
 plugins/oval/pom.xml| 2 +-
 plugins/pell-multipart/pom.xml  | 2 +-
 plugins/plexus/pom.xml  | 2 +-
 plugins/pom.xml | 2 +-
 plugins/portlet-mocks/pom.xml   | 2 +-
 plugins/portlet-tiles/pom.xml   | 2 +-
 plugins/portlet/pom.xml | 2 +-
 plugins/rest/pom.xml| 2 +-
 plugins/sitemesh/pom.xml| 2 +-
 plugins/spring/pom.xml  | 2 +-
 plugins/testng/pom.xml  | 2 +-
 plugins/tiles/pom.xml   | 2 +-
 plugins/velocity/pom.xml| 2 +-
 plugins/xslt/pom.xml| 2 +-
 pom.xml | 6 +++---
 38 files changed, 44 insertions(+), 44 deletions(-)

diff --git a/apps/pom.xml b/apps/pom.xml
index 37682ab24..219c3e869 100644
--- a/apps/pom.xml
+++ b/apps/pom.xml
@@ -24,7 +24,7 @@
 
 org.apache.struts
 struts2-parent
-6.3.0-SNAPSHOT
+6.3.0-RC1
 
 struts2-apps
 pom
diff --git a/apps/rest-showcase/pom.xml b/apps/rest-showcase/pom.xml
index 17f9c4a19..6d37a96a4 100644
--- a/apps/rest-showcase/pom.xml
+++ b/apps/rest-showcase/pom.xml
@@ -24,12 +24,12 @@
 
 org.apache.struts
 struts2-apps
-6.3.0-SNAPSHOT
+6.3.0-RC1
 
 
 struts2-rest-showcase
 war
-6.3.0-SNAPSHOT
+6.3.0-RC1
 Struts 2 Rest Showcase Webapp
 Struts 2 Rest Showcase Example
 
diff --git a/apps/showcase/pom.xml b/apps/showcase/pom.xml
index 1a04728ce..b22d7adbc 100644
--- a/apps/showcase/pom.xml
+++ b/apps/showcase/pom.xml
@@ -24,7 +24,7 @@
 
 org.apache.struts
 struts2-apps
-6.3.0-SNAPSHOT
+6.3.0-RC1
 
 
 struts2-showcase
diff --git a/assembly/pom.xml b/assembly/pom.xml
index 5caee68fc..d35f4ceee 100644
--- a/assembly/pom.xml
+++ b/assembly/pom.xml
@@ -24,7 +24,7 @@
 
 org.apache.struts
 struts2-parent
-6.3.0-SNAPSHOT
+6.3.0-RC1
 
 
 struts2-assembly
diff --git a/bom/pom.xml b/bom/pom.xml
index 6a9757382..1f16a41c2 100644
--- a/bom/pom.xml
+++ b/bom/pom.xml
@@ -25,11 +25,11 @@
 
 org.apache.struts
 struts2-parent
-6.3.0-SNAPSHOT
+6.3.0-RC1
 
 
 struts2-bom
-6.3.0-SNAPSHOT
+6.3.0-RC1
 pom
 
 Struts 2 Bill of Materials
@@ -44,7 +44,7 @@
 
 
 
-6.3.0-SNAPSHOT
+6.3.0-RC1
 true
 true
 
@@ -190,7 +190,7 @@
 
 
   
-HEAD
+STRUTS_6_3_0_RC1
 
scm:git:https://gitbox.apache.org/repos/asf/struts.git
 
scm:git:https://gitbox.apache.org/repos/asf/struts.git
 https://github.com/apache/struts/
diff --git a/bundles/admin/pom.xml b/bundles/admin/pom.xml
index c5b9224c3..91d97b8fb 100644
--- a/bundles/admin/pom.xml
+++ b/bundles/admin/pom.xml
@@ -24,7 +24,7 @@
 
 org.apache.struts
 struts2-osgi-bundles
-6.3.0-SNAPSHOT
+6.3.0-RC1
 
 
 struts2-osgi-admin-bundle
diff --git a/bundles/demo/pom.xml b/bundles/demo/pom.xml
index cdd4d..b17186c30 100644
--- a/bundles/demo/pom.xml
+++ b/bundles/demo/pom.xml
@@ -24,7 +24,7 @@
 
 org.apache.struts
 struts2-osgi-bundles
-6.3.0-SNAPSHOT
+6.3.0-RC1
 
 
 struts2-osgi-demo-bundle
diff --git a/bundles/pom.xml b/bundles/pom.xml
index 00e7e2f72..2c271e959 100755
--- a/bundles/pom.xml
+++ b/bundles/pom.xml
@@ -24,7 +24,7 @@
 
 org.apache.struts
 struts2-parent
-6.3.0-SNAPSHOT
+6.3.0-RC1
 
 
 struts2-osgi-bundles
diff --git a/core/pom.xml b/core/pom.xml
index 59f0d43fd..f55aa140d 100644
--- a/core/pom.xml
+++ b/core/pom.xml
@@ -24,7 +24,7 @@
 
 org.apache.struts
 struts2-parent
-6.3.0-SNAPSHOT
+

[struts] 04/04: [maven-release-plugin] prepare for next development iteration

2023-07-29 Thread lukaszlenart
This is an automated email from the ASF dual-hosted git repository.

lukaszlenart pushed a commit to branch WW-5233-tiles
in repository https://gitbox.apache.org/repos/asf/struts.git

commit 8080d41a1c29494cce5e56985b456a3c15a5c620
Author: Lukasz Lenart 
AuthorDate: Sun Jul 16 09:48:11 2023 +0200

[maven-release-plugin] prepare for next development iteration
---
 apps/pom.xml| 2 +-
 apps/rest-showcase/pom.xml  | 4 ++--
 apps/showcase/pom.xml   | 2 +-
 assembly/pom.xml| 2 +-
 bom/pom.xml | 8 
 bundles/admin/pom.xml   | 2 +-
 bundles/demo/pom.xml| 2 +-
 bundles/pom.xml | 2 +-
 core/pom.xml| 2 +-
 plugins/async/pom.xml   | 2 +-
 plugins/bean-validation/pom.xml | 2 +-
 plugins/cdi/pom.xml | 2 +-
 plugins/config-browser/pom.xml  | 2 +-
 plugins/convention/pom.xml  | 2 +-
 plugins/dwr/pom.xml | 2 +-
 plugins/embeddedjsp/pom.xml | 2 +-
 plugins/gxp/pom.xml | 2 +-
 plugins/jasperreports/pom.xml   | 2 +-
 plugins/javatemplates/pom.xml   | 2 +-
 plugins/jfreechart/pom.xml  | 2 +-
 plugins/json/pom.xml| 2 +-
 plugins/junit/pom.xml   | 2 +-
 plugins/osgi/pom.xml| 2 +-
 plugins/oval/pom.xml| 2 +-
 plugins/pell-multipart/pom.xml  | 2 +-
 plugins/plexus/pom.xml  | 2 +-
 plugins/pom.xml | 2 +-
 plugins/portlet-mocks/pom.xml   | 2 +-
 plugins/portlet-tiles/pom.xml   | 2 +-
 plugins/portlet/pom.xml | 2 +-
 plugins/rest/pom.xml| 2 +-
 plugins/sitemesh/pom.xml| 2 +-
 plugins/spring/pom.xml  | 2 +-
 plugins/testng/pom.xml  | 2 +-
 plugins/tiles/pom.xml   | 2 +-
 plugins/velocity/pom.xml| 2 +-
 plugins/xslt/pom.xml| 2 +-
 pom.xml | 6 +++---
 38 files changed, 44 insertions(+), 44 deletions(-)

diff --git a/apps/pom.xml b/apps/pom.xml
index 219c3e869..37682ab24 100644
--- a/apps/pom.xml
+++ b/apps/pom.xml
@@ -24,7 +24,7 @@
 
 org.apache.struts
 struts2-parent
-6.3.0-RC1
+6.3.0-SNAPSHOT
 
 struts2-apps
 pom
diff --git a/apps/rest-showcase/pom.xml b/apps/rest-showcase/pom.xml
index 6d37a96a4..17f9c4a19 100644
--- a/apps/rest-showcase/pom.xml
+++ b/apps/rest-showcase/pom.xml
@@ -24,12 +24,12 @@
 
 org.apache.struts
 struts2-apps
-6.3.0-RC1
+6.3.0-SNAPSHOT
 
 
 struts2-rest-showcase
 war
-6.3.0-RC1
+6.3.0-SNAPSHOT
 Struts 2 Rest Showcase Webapp
 Struts 2 Rest Showcase Example
 
diff --git a/apps/showcase/pom.xml b/apps/showcase/pom.xml
index b22d7adbc..1a04728ce 100644
--- a/apps/showcase/pom.xml
+++ b/apps/showcase/pom.xml
@@ -24,7 +24,7 @@
 
 org.apache.struts
 struts2-apps
-6.3.0-RC1
+6.3.0-SNAPSHOT
 
 
 struts2-showcase
diff --git a/assembly/pom.xml b/assembly/pom.xml
index d35f4ceee..5caee68fc 100644
--- a/assembly/pom.xml
+++ b/assembly/pom.xml
@@ -24,7 +24,7 @@
 
 org.apache.struts
 struts2-parent
-6.3.0-RC1
+6.3.0-SNAPSHOT
 
 
 struts2-assembly
diff --git a/bom/pom.xml b/bom/pom.xml
index 1f16a41c2..6a9757382 100644
--- a/bom/pom.xml
+++ b/bom/pom.xml
@@ -25,11 +25,11 @@
 
 org.apache.struts
 struts2-parent
-6.3.0-RC1
+6.3.0-SNAPSHOT
 
 
 struts2-bom
-6.3.0-RC1
+6.3.0-SNAPSHOT
 pom
 
 Struts 2 Bill of Materials
@@ -44,7 +44,7 @@
 
 
 
-6.3.0-RC1
+6.3.0-SNAPSHOT
 true
 true
 
@@ -190,7 +190,7 @@
 
 
   
-STRUTS_6_3_0_RC1
+HEAD
 
scm:git:https://gitbox.apache.org/repos/asf/struts.git
 
scm:git:https://gitbox.apache.org/repos/asf/struts.git
 https://github.com/apache/struts/
diff --git a/bundles/admin/pom.xml b/bundles/admin/pom.xml
index 91d97b8fb..c5b9224c3 100644
--- a/bundles/admin/pom.xml
+++ b/bundles/admin/pom.xml
@@ -24,7 +24,7 @@
 
 org.apache.struts
 struts2-osgi-bundles
-6.3.0-RC1
+6.3.0-SNAPSHOT
 
 
 struts2-osgi-admin-bundle
diff --git a/bundles/demo/pom.xml b/bundles/demo/pom.xml
index b17186c30..cdd4d 100644
--- a/bundles/demo/pom.xml
+++ b/bundles/demo/pom.xml
@@ -24,7 +24,7 @@
 
 org.apache.struts
 struts2-osgi-bundles
-6.3.0-RC1
+6.3.0-SNAPSHOT
 
 
 struts2-osgi-demo-bundle
diff --git a/bundles/pom.xml b/bundles/pom.xml
index 2c271e959..00e7e2f72 100755
--- a/bundles/pom.xml
+++ b/bundles/pom.xml
@@ -24,7 +24,7 @@
 
 org.apache.struts
 struts2-parent
-6.3.0-RC1
+6.3.0-SNAPSHOT
 
 
 struts2-osgi-bundles
diff --git a/core/pom.xml b/core/pom.xml
index f55aa140d..59f0d43fd 100644
--- a/core/pom.xml
+++ b/core/pom.xml
@@ -24,7 +24,7 @@
 
 org.apache.struts
 struts2-parent
-6.3.0-RC1

[struts] branch WW-5233-tiles updated (301d1533e -> 8080d41a1)

2023-07-29 Thread lukaszlenart
This is an automated email from the ASF dual-hosted git repository.

lukaszlenart pushed a change to branch WW-5233-tiles
in repository https://gitbox.apache.org/repos/asf/struts.git


omit 301d1533e [maven-release-plugin] prepare for next development iteration
omit 3d72886b2 [maven-release-plugin] prepare release STRUTS_6_3_0_RC1
omit 93519c9ff WW-5233 Disables XML external entity parsing
omit f7c522ab5 WW-5233 Introduces Tiles base code into the Tiles plugin
 add 13ac0eced Adds missing Dependabot config
 add 9aed8cd09 Bump actions/upload-artifact from 3.1.0 to 3.1.2
 add 47f7707f6 Merge pull request #702 from 
apache/dependabot/github_actions/actions/upload-artifact-3.1.2
 add 279ef0cd0 Bump actions/cache from 3.0.8 to 3.3.1
 add b2807827e Merge pull request #705 from 
apache/dependabot/github_actions/actions/cache-3.3.1
 add 66c0b219c Bump osgi.core from 7.0.0 to 8.0.0
 add b27c9a6bc Merge pull request #701 from 
apache/dependabot/maven/org.osgi-osgi.core-8.0.0
 add 040a7c726 Bump stax2-api from 4.2 to 4.2.1
 add e6db239aa Merge pull request #703 from 
apache/dependabot/maven/org.codehaus.woodstox-stax2-api-4.2.1
 add b48adacec Bump ossf/scorecard-action from 2.0.6 to 2.2.0
 add 86be4955d Merge pull request #704 from 
apache/dependabot/github_actions/ossf/scorecard-action-2.2.0
 add c06069cc9 Bump assertj-core from 3.15.0 to 3.24.2
 add 4fa10952c Merge pull request #707 from 
apache/dependabot/maven/org.assertj-assertj-core-3.24.2
 add 10355a9ce Bump jaxb-impl from 2.3.2 to 4.0.3
 add dbdf72b38 Merge pull request #708 from 
apache/dependabot/maven/com.sun.xml.bind-jaxb-impl-4.0.3
 add a0da9f210 Bump net.sf.jasperreports:jasperreports from 6.19.1 to 6.20.5
 add 24fcc6e5f Merge pull request #709 from 
apache/dependabot/maven/net.sf.jasperreports-jasperreports-6.20.5
 add 11833fdd5 Reverts JAXB implementation to pre-Jakarta version
 add 51c68e5ca Bump jackson.version from 2.14.1 to 2.15.2
 add 3685c074c Unifies versions
 add bcaab0c2b Merge pull request #713 from 
apache/dependabot/maven/jackson.version-2.15.2
 add 129b2c3b0 WW-5325 Upgrades commons-lang3 to version 3.13.0
 add 85f7e8a1a Merge pull request #714 from apache/WW-5325-commons-lang3
 new 10203ed89 WW-5233 Introduces Tiles base code into the Tiles plugin
 new 01ccc0bcb WW-5233 Disables XML external entity parsing
 new 67a21ffe1 [maven-release-plugin] prepare release STRUTS_6_3_0_RC1
 new 8080d41a1 [maven-release-plugin] prepare for next development iteration

This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version.  This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:

 * -- * -- B -- O -- O -- O   (301d1533e)
\
 N -- N -- N   refs/heads/WW-5233-tiles (8080d41a1)

You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.

Any revisions marked "omit" are not gone; other references still
refer to them.  Any revisions marked "discard" are gone forever.

The 4 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.


Summary of changes:
 .github/dependabot.yml | 10 ++
 .github/workflows/maven.yml|  2 +-
 .github/workflows/scorecards-analysis.yaml |  4 ++--
 plugins/bean-validation/pom.xml|  2 +-
 plugins/jasperreports/pom.xml  |  2 +-
 plugins/osgi/pom.xml   |  2 +-
 pom.xml| 11 +--
 7 files changed, 21 insertions(+), 12 deletions(-)
 create mode 100644 .github/dependabot.yml



[struts] 01/01: WW-5327 Stops using JavaBeans notation for setters

2023-07-29 Thread lukaszlenart
This is an automated email from the ASF dual-hosted git repository.

lukaszlenart pushed a commit to branch WW-5327-non-java-beans
in repository https://gitbox.apache.org/repos/asf/struts.git

commit bb1a34daaef78b5ce983a00cfb3b7c7d7c0effd2
Author: Lukasz Lenart 
AuthorDate: Sun Jul 30 08:25:33 2023 +0200

WW-5327 Stops using JavaBeans notation for setters
---
 .../xwork2/interceptor/ParametersInterceptor.java  |  4 +-
 .../com/opensymphony/xwork2/ognl/OgnlUtil.java | 18 ++--
 .../opensymphony/xwork2/ognl/OgnlValueStack.java   | 24 --
 .../xwork2/ognl/SecurityMemberAccess.java  | 56 +
 .../xwork2/util/MemberAccessValueStack.java| 12 +++
 .../xwork2/ognl/SecurityMemberAccessTest.java  | 98 +++---
 .../util/SecurityMemberAccessInServletsTest.java   |  4 +-
 .../xwork2/ognl/SecurityMemberAccessProxyTest.java |  2 +-
 .../com/test/SecurityMemberAccessProxyTest.java|  2 +-
 9 files changed, 149 insertions(+), 71 deletions(-)

diff --git 
a/core/src/main/java/com/opensymphony/xwork2/interceptor/ParametersInterceptor.java
 
b/core/src/main/java/com/opensymphony/xwork2/interceptor/ParametersInterceptor.java
index 3fa04220a..ec0ded9c7 100644
--- 
a/core/src/main/java/com/opensymphony/xwork2/interceptor/ParametersInterceptor.java
+++ 
b/core/src/main/java/com/opensymphony/xwork2/interceptor/ParametersInterceptor.java
@@ -217,8 +217,8 @@ public class ParametersInterceptor extends 
MethodFilterInterceptor {
 //block or allow access to properties
 //see WW-2761 for more details
 MemberAccessValueStack accessValueStack = (MemberAccessValueStack) 
newStack;
-
accessValueStack.setAcceptProperties(acceptedPatterns.getAcceptedPatterns());
-
accessValueStack.setExcludeProperties(excludedPatterns.getExcludedPatterns());
+
accessValueStack.useAcceptProperties(acceptedPatterns.getAcceptedPatterns());
+
accessValueStack.useExcludeProperties(excludedPatterns.getExcludedPatterns());
 }
 
 for (Map.Entry entry : 
acceptableParameters.entrySet()) {
diff --git a/core/src/main/java/com/opensymphony/xwork2/ognl/OgnlUtil.java 
b/core/src/main/java/com/opensymphony/xwork2/ognl/OgnlUtil.java
index 827cda11a..8c1790229 100644
--- a/core/src/main/java/com/opensymphony/xwork2/ognl/OgnlUtil.java
+++ b/core/src/main/java/com/opensymphony/xwork2/ognl/OgnlUtil.java
@@ -872,22 +872,22 @@ public class OgnlUtil {
 }
 
 SecurityMemberAccess memberAccess = new 
SecurityMemberAccess(allowStaticFieldAccess);
-memberAccess.setDisallowProxyMemberAccess(disallowProxyMemberAccess);
+memberAccess.disallowProxyMemberAccess(disallowProxyMemberAccess);
 
 if (devMode) {
 if (!warnReported.get()) {
 warnReported.set(true);
 LOG.warn("Working in devMode, using devMode excluded classes 
and packages!");
 }
-memberAccess.setExcludedClasses(devModeExcludedClasses);
-
memberAccess.setExcludedPackageNamePatterns(devModeExcludedPackageNamePatterns);
-memberAccess.setExcludedPackageNames(devModeExcludedPackageNames);
-
memberAccess.setExcludedPackageExemptClasses(devModeExcludedPackageExemptClasses);
+memberAccess.useExcludedClasses(devModeExcludedClasses);
+
memberAccess.useExcludedPackageNamePatterns(devModeExcludedPackageNamePatterns);
+memberAccess.useExcludedPackageNames(devModeExcludedPackageNames);
+
memberAccess.useExcludedPackageExemptClasses(devModeExcludedPackageExemptClasses);
 } else {
-memberAccess.setExcludedClasses(excludedClasses);
-
memberAccess.setExcludedPackageNamePatterns(excludedPackageNamePatterns);
-memberAccess.setExcludedPackageNames(excludedPackageNames);
-
memberAccess.setExcludedPackageExemptClasses(excludedPackageExemptClasses);
+memberAccess.useExcludedClasses(excludedClasses);
+
memberAccess.useExcludedPackageNamePatterns(excludedPackageNamePatterns);
+memberAccess.useExcludedPackageNames(excludedPackageNames);
+
memberAccess.useExcludedPackageExemptClasses(excludedPackageExemptClasses);
 }
 
 return Ognl.createDefaultContext(root, memberAccess, resolver, 
defaultConverter);
diff --git 
a/core/src/main/java/com/opensymphony/xwork2/ognl/OgnlValueStack.java 
b/core/src/main/java/com/opensymphony/xwork2/ognl/OgnlValueStack.java
index 938ed477a..34fe3ae77 100644
--- a/core/src/main/java/com/opensymphony/xwork2/ognl/OgnlValueStack.java
+++ b/core/src/main/java/com/opensymphony/xwork2/ognl/OgnlValueStack.java
@@ -89,11 +89,11 @@ public class OgnlValueStack implements Serializable, 
ValueStack, ClearableValueS
 @Inject
 protected void setOgnlUtil(OgnlUtil ognlUtil) {
 this.ognlUtil = ognlUtil;
-securityMemberAccess.setExcludedClasses(ognlUtil.getExclude

[struts] branch WW-5327-non-java-beans created (now bb1a34daa)

2023-07-29 Thread lukaszlenart
This is an automated email from the ASF dual-hosted git repository.

lukaszlenart pushed a change to branch WW-5327-non-java-beans
in repository https://gitbox.apache.org/repos/asf/struts.git


  at bb1a34daa WW-5327 Stops using JavaBeans notation for setters

This branch includes the following new commits:

 new bb1a34daa WW-5327 Stops using JavaBeans notation for setters

The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.