Bot releases are visible (Hide)
What's Changed
- WW-5441 Bump net.sf.jasperreports:jasperreports to 6.21.3 by @kusalk in https://github.com/apache/struts/pull/985
- WW-5428 Stop further excessive logging in DevMode by @kusalk in https://github.com/apache/struts/pull/987
- WW-5443 Bump Spring dependencies to 5.3.37 by @kusalk in https://github.com/apache/struts/pull/990
- WW-5442 Enforce allowlist for OgnlReflectionProvider by @kusalk in https://github.com/apache/struts/pull/988
- WW-5440 Fix OGNL allowlist compat with Convention plugin by @kusalk in https://github.com/apache/struts/pull/986
Dependencies
- Bump jackson.version from 2.17.1 to 2.17.2 by @dependabot in https://github.com/apache/struts/pull/993
- Bump maven-surefire-plugin.version from 3.2.5 to 3.3.1 by @dependabot in https://github.com/apache/struts/pull/994
Full Changelog: https://github.com/apache/struts/compare/STRUTS_7_0_0_M8...STRUTS_7_0_0_M9
struts
- Struts 6.6.0
Published by lukaszlenart 3 months ago
What's Changed
- WW-5406 Ensure Action excluded patterns are reinjected by @kusalk in https://github.com/apache/struts/pull/910
- WW-5407 Extend SecurityMemberAccess proxy detection to other proxies by @jefferyxhy in https://github.com/apache/struts/pull/911
- WW-5408 add option to not fallback to empty namespace when unresolved by @jefferyxhy in https://github.com/apache/struts/pull/912
- WW-5406 Fix injection order issue for excluded patterns by @kusalk in https://github.com/apache/struts/pull/917
- WW-5409 introduce final attribute to package element which make them unextendable by @jefferyxhy in https://github.com/apache/struts/pull/914
- WW-5417 bump ognl version to fix security issue by @jefferyxhy in https://github.com/apache/struts/pull/915
- WW-5418 Forbid Enums and Jasper classes by @kusalk in https://github.com/apache/struts/pull/916
- WW-5421 Bump asm.version from 9.6 to 9.7 by @dependabot in https://github.com/apache/struts/pull/907
- WW-5420 Upgrades commons-text to ver. 1.12.0 by @lukaszlenart in https://github.com/apache/struts/pull/924
- WW-5419 Fixes support for loading Tiles definitions by @lukaszlenart in https://github.com/apache/struts/pull/920
- WW-5400 Extend default configuration options for the CSP interceptor. by @eschulma in https://github.com/apache/struts/pull/913
- WW-5422 Fixes support for trimable locale string in request by @lukaszlenart in https://github.com/apache/struts/pull/931
- WW-5414 Always call afterInvocation even in case of exception by @lukaszlenart in https://github.com/apache/struts/pull/932
- WW-5415 Fixes accessing public constructors via expression by @lukaszlenart in https://github.com/apache/struts/pull/933
- INFRA-25666 Disables review by code owners by @lukaszlenart in https://github.com/apache/struts/pull/945
- WW-5425 Bump jackson.version from 2.16.1 to 2.17.1 by @dependabot in https://github.com/apache/struts/pull/944
- WW-5426 Bump org.freemarker:freemarker from 2.3.32 to 2.3.33 by @dependabot in https://github.com/apache/struts/pull/953
- WW-5424 Fixes ClassCastException when using short var name in s:set tag by @lukaszlenart in https://github.com/apache/struts/pull/946
- Disables required reviewers option by @lukaszlenart in https://github.com/apache/struts/pull/947
- WW-5412 Upgrades struts-master to ver 15 by @lukaszlenart in https://github.com/apache/struts/pull/948
- WW-5400 Simplifies how CspSettings is created by @lukaszlenart in https://github.com/apache/struts/pull/956
- WW-5250 Addresses TODO in test and stops using Mock Objects by @lukaszlenart in https://github.com/apache/struts/pull/957
- WW-5310 Fixes broken support for Fragments in <s:url/> tag by @lukaszlenart in https://github.com/apache/struts/pull/968
- WW-5429 Log parameter annotation issues at ERROR level when in DevMode by @kusalk in https://github.com/apache/struts/pull/969
- WW-5431 Marks unused constants as deprecated by @lukaszlenart in https://github.com/apache/struts/pull/971
- WW-5437 Swap order of sysStrSubstitutor and envStrSubstitutor in substitute method by @stefansielaff in https://github.com/apache/struts/pull/977
- WW-5428 Allowlist capability should resolve Hibernate proxies when disableProxyObjects is not set by @kusalk in https://github.com/apache/struts/pull/967
- WW-5439 Move DevMode security configuration to SecurityMemberAccess by @kusalk in https://github.com/apache/struts/pull/979
- WW-5428 Stop excessive logging in DevMode by @kusalk in https://github.com/apache/struts/pull/982
- WW-5441 Bump net.sf.jasperreports:jasperreports to 6.21.3 by @kusalk in https://github.com/apache/struts/pull/985
- WW-5428 Stop further excessive logging in DevMode by @kusalk in https://github.com/apache/struts/pull/987
- WW-5443 Bump Spring dependencies to 5.3.37 by @kusalk in https://github.com/apache/struts/pull/990
- WW-5442 Enforce allowlist for OgnlReflectionProvider by @kusalk in https://github.com/apache/struts/pull/988
- WW-5440 Fix OGNL allowlist compat with Convention plugin by @kusalk in https://github.com/apache/struts/pull/986
Dependencies
- Bump org.assertj:assertj-core from 3.25.2 to 3.25.3 by @dependabot in https://github.com/apache/struts/pull/909
- Bump actions/upload-artifact from 4.3.1 to 4.3.2 by @dependabot in https://github.com/apache/struts/pull/923
- Bump org.codehaus.mojo:versions-maven-plugin from 2.16.1 to 2.16.2 by @dependabot in https://github.com/apache/struts/pull/922
- Bump org.codehaus.mojo:exec-maven-plugin from 3.1.0 to 3.2.0 by @dependabot in https://github.com/apache/struts/pull/925
- Bump actions/upload-artifact from 4.3.2 to 4.3.3 by @dependabot in https://github.com/apache/struts/pull/926
- Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.0.0-M6 to 3.2.5 by @dependabot in https://github.com/apache/struts/pull/905
- Bump org.apache.maven.plugins:maven-source-plugin from 3.3.0 to 3.3.1 by @dependabot in https://github.com/apache/struts/pull/934
- Bump slf4j.version from 2.0.12 to 2.0.13 by @dependabot in https://github.com/apache/struts/pull/936
- Bump org.apache.maven.plugins:maven-project-info-reports-plugin from 3.0.0 to 3.5.0 by @dependabot in https://github.com/apache/struts/pull/938
- Bump ossf/scorecard-action from 2.3.1 to 2.3.3 by @dependabot in https://github.com/apache/struts/pull/939
- Bump org.jacoco:jacoco-maven-plugin from 0.8.11 to 0.8.12 by @dependabot in https://github.com/apache/struts/pull/940
- Bump org.apache.maven.plugins:maven-assembly-plugin from 3.6.0 to 3.7.1 by @dependabot in https://github.com/apache/struts/pull/950
- Bump org.apache.commons:commons-compress from 1.26.0 to 1.26.2 by @dependabot in https://github.com/apache/struts/pull/961
- Bump org.owasp:dependency-check-maven from 8.4.2 to 9.2.0 by @dependabot in https://github.com/apache/struts/pull/962
- Bump commons-validator:commons-validator from 1.8.0 to 1.9.0 by @dependabot in https://github.com/apache/struts/pull/958
- Bump org.apache.felix:org.apache.felix.main from 6.0.3 to 7.0.5 by @dependabot in https://github.com/apache/struts/pull/960
- Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.4.1 to 3.5.0 by @dependabot in https://github.com/apache/struts/pull/965
- Bump org.codehaus.mojo:exec-maven-plugin from 3.2.0 to 3.3.0 by @dependabot in https://github.com/apache/struts/pull/966
- Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.2.5 to 3.3.0 by @dependabot in https://github.com/apache/struts/pull/976
- Bump actions/upload-artifact from 4.3.3 to 4.3.4 by @dependabot in https://github.com/apache/struts/pull/978
- Bump jackson.version from 2.17.1 to 2.17.2 by @dependabot in https://github.com/apache/struts/pull/993
- Bump maven-surefire-plugin.version from 3.2.5 to 3.3.1 by @dependabot in https://github.com/apache/struts/pull/994
New Contributors
- @jefferyxhy made their first contribution in https://github.com/apache/struts/pull/911
- @eschulma made their first contribution in https://github.com/apache/struts/pull/913
- @stefansielaff made their first contribution in https://github.com/apache/struts/pull/977
Full Changelog: https://github.com/apache/struts/compare/STRUTS_6_4_0...STRUTS_6_6_0
struts
- Struts 6.5.0
Published by lukaszlenart 3 months ago
What's Changed
- WW-5406 Ensure Action excluded patterns are reinjected by @kusalk in https://github.com/apache/struts/pull/910
- WW-5407 Extend SecurityMemberAccess proxy detection to other proxies by @jefferyxhy in https://github.com/apache/struts/pull/911
- WW-5408 add option to not fallback to empty namespace when unresolved by @jefferyxhy in https://github.com/apache/struts/pull/912
- WW-5406 Fix injection order issue for excluded patterns by @kusalk in https://github.com/apache/struts/pull/917
- WW-5409 introduce final attribute to package element which make them unextendable by @jefferyxhy in https://github.com/apache/struts/pull/914
- WW-5417 bump ognl version to fix security issue by @jefferyxhy in https://github.com/apache/struts/pull/915
- WW-5418 Forbid Enums and Jasper classes by @kusalk in https://github.com/apache/struts/pull/916
- WW-5421 Bump asm.version from 9.6 to 9.7 by @dependabot in https://github.com/apache/struts/pull/907
- WW-5420 Upgrades commons-text to ver. 1.12.0 by @lukaszlenart in https://github.com/apache/struts/pull/924
- WW-5419 Fixes support for loading Tiles definitions by @lukaszlenart in https://github.com/apache/struts/pull/920
- WW-5400 Extend default configuration options for the CSP interceptor. by @eschulma in https://github.com/apache/struts/pull/913
- WW-5422 Fixes support for trimable locale string in request by @lukaszlenart in https://github.com/apache/struts/pull/931
- WW-5414 Always call afterInvocation even in case of exception by @lukaszlenart in https://github.com/apache/struts/pull/932
- WW-5415 Fixes accessing public constructors via expression by @lukaszlenart in https://github.com/apache/struts/pull/933
- INFRA-25666 Disables review by code owners by @lukaszlenart in https://github.com/apache/struts/pull/945
- WW-5425 Bump jackson.version from 2.16.1 to 2.17.1 by @dependabot in https://github.com/apache/struts/pull/944
- WW-5426 Bump org.freemarker:freemarker from 2.3.32 to 2.3.33 by @dependabot in https://github.com/apache/struts/pull/953
- WW-5424 Fixes ClassCastException when using short var name in s:set tag by @lukaszlenart in https://github.com/apache/struts/pull/946
- Disables required reviewers option by @lukaszlenart in https://github.com/apache/struts/pull/947
- WW-5412 Upgrades struts-master to ver 15 by @lukaszlenart in https://github.com/apache/struts/pull/948
- WW-5400 Simplifies how CspSettings is created by @lukaszlenart in https://github.com/apache/struts/pull/956
- WW-5250 Addresses TODO in test and stops using Mock Objects by @lukaszlenart in https://github.com/apache/struts/pull/957
- WW-5310 Fixes broken support for Fragments in <s:url/> tag by @lukaszlenart in https://github.com/apache/struts/pull/968
- WW-5429 Log parameter annotation issues at ERROR level when in DevMode by @kusalk in https://github.com/apache/struts/pull/969
- WW-5431 Marks unused constants as deprecated by @lukaszlenart in https://github.com/apache/struts/pull/971
- WW-5437 Swap order of sysStrSubstitutor and envStrSubstitutor in substitute method by @stefansielaff in https://github.com/apache/struts/pull/977
- WW-5428 Allowlist capability should resolve Hibernate proxies when disableProxyObjects is not set by @kusalk in https://github.com/apache/struts/pull/967
- WW-5439 Move DevMode security configuration to SecurityMemberAccess by @kusalk in https://github.com/apache/struts/pull/979
- WW-5428 Stop excessive logging in DevMode by @kusalk in https://github.com/apache/struts/pull/982
Dependencies
- Bump org.assertj:assertj-core from 3.25.2 to 3.25.3 by @dependabot in https://github.com/apache/struts/pull/909
- Bump actions/upload-artifact from 4.3.1 to 4.3.2 by @dependabot in https://github.com/apache/struts/pull/923
- Bump org.codehaus.mojo:versions-maven-plugin from 2.16.1 to 2.16.2 by @dependabot in https://github.com/apache/struts/pull/922
- Bump org.codehaus.mojo:exec-maven-plugin from 3.1.0 to 3.2.0 by @dependabot in https://github.com/apache/struts/pull/925
- Bump actions/upload-artifact from 4.3.2 to 4.3.3 by @dependabot in https://github.com/apache/struts/pull/926
- Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.0.0-M6 to 3.2.5 by @dependabot in https://github.com/apache/struts/pull/905
- Bump org.apache.maven.plugins:maven-source-plugin from 3.3.0 to 3.3.1 by @dependabot in https://github.com/apache/struts/pull/934
- Bump slf4j.version from 2.0.12 to 2.0.13 by @dependabot in https://github.com/apache/struts/pull/936
- Bump org.apache.maven.plugins:maven-project-info-reports-plugin from 3.0.0 to 3.5.0 by @dependabot in https://github.com/apache/struts/pull/938
- Bump ossf/scorecard-action from 2.3.1 to 2.3.3 by @dependabot in https://github.com/apache/struts/pull/939
- Bump org.jacoco:jacoco-maven-plugin from 0.8.11 to 0.8.12 by @dependabot in https://github.com/apache/struts/pull/940
- Bump org.apache.maven.plugins:maven-assembly-plugin from 3.6.0 to 3.7.1 by @dependabot in https://github.com/apache/struts/pull/950
- Bump org.apache.commons:commons-compress from 1.26.0 to 1.26.2 by @dependabot in https://github.com/apache/struts/pull/961
- Bump org.owasp:dependency-check-maven from 8.4.2 to 9.2.0 by @dependabot in https://github.com/apache/struts/pull/962
- Bump commons-validator:commons-validator from 1.8.0 to 1.9.0 by @dependabot in https://github.com/apache/struts/pull/958
- Bump org.apache.felix:org.apache.felix.main from 6.0.3 to 7.0.5 by @dependabot in https://github.com/apache/struts/pull/960
- Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.4.1 to 3.5.0 by @dependabot in https://github.com/apache/struts/pull/965
- Bump org.codehaus.mojo:exec-maven-plugin from 3.2.0 to 3.3.0 by @dependabot in https://github.com/apache/struts/pull/966
- Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.2.5 to 3.3.0 by @dependabot in https://github.com/apache/struts/pull/976
- Bump actions/upload-artifact from 4.3.3 to 4.3.4 by @dependabot in https://github.com/apache/struts/pull/978
New Contributors
- @jefferyxhy made their first contribution in https://github.com/apache/struts/pull/911
- @eschulma made their first contribution in https://github.com/apache/struts/pull/913
- @stefansielaff made their first contribution in https://github.com/apache/struts/pull/977
Full Changelog: https://github.com/apache/struts/compare/STRUTS_6_4_0...STRUTS_6_5_0
struts
- Struts 7.0.0-M8
Published by lukaszlenart 3 months ago
What's Changed
- WW-5310 Fixes broken support for Fragments in <s:url/> tag by @lukaszlenart in https://github.com/apache/struts/pull/968
- WW-5429 Log parameter annotation issues at ERROR level when in DevMode by @kusalk in https://github.com/apache/struts/pull/969
- WW-5430 Uses Freemarker native support for JakartaEE instead of manually transforming the artifacts by @lukaszlenart in https://github.com/apache/struts/pull/970
- WW-5431 Marks unused constants as deprecated by @lukaszlenart in https://github.com/apache/struts/pull/971
- Bump commons-validator:commons-validator from 1.8.0 to 1.9.0 by @dependabot in https://github.com/apache/struts/pull/958
- Bump org.apache.felix:org.apache.felix.main from 6.0.3 to 7.0.5 by @dependabot in https://github.com/apache/struts/pull/960
- Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.4.1 to 3.5.0 by @dependabot in https://github.com/apache/struts/pull/965
- Bump org.codehaus.mojo:exec-maven-plugin from 3.2.0 to 3.3.0 by @dependabot in https://github.com/apache/struts/pull/966
- WW-5437 Swap order of sysStrSubstitutor and envStrSubstitutor in substitute method by @stefansielaff in https://github.com/apache/struts/pull/977
- WW-5428 Allowlist capability should resolve Hibernate proxies when disableProxyObjects is not set by @kusalk in https://github.com/apache/struts/pull/967
- WW-5439 Move DevMode security configuration to SecurityMemberAccess by @kusalk in https://github.com/apache/struts/pull/979
- Merge master to 7.0.x, 2024-07-08 by @kusalk in https://github.com/apache/struts/pull/980
- Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.2.5 to 3.3.0 by @dependabot in https://github.com/apache/struts/pull/976
- Bump actions/upload-artifact from 4.3.3 to 4.3.4 by @dependabot in https://github.com/apache/struts/pull/978
- WW-5411 Delete deprecated method/classes by @kusalk in https://github.com/apache/struts/pull/981
- WW-5428 Stop excessive logging in DevMode by @kusalk in https://github.com/apache/struts/pull/982
- Merge master to 7.0.x, 2024-07-09 by @kusalk in https://github.com/apache/struts/pull/983
- WW-5438 Fixes scope of Weld dependencies by @lukaszlenart in https://github.com/apache/struts/pull/984
New Contributors
- @stefansielaff made their first contribution in https://github.com/apache/struts/pull/977
Full Changelog: https://github.com/apache/struts/compare/STRUTS_7_0_0_M7...STRUTS_7_0_0_M8
struts
- Struts 7.0.0-M7
Published by lukaszlenart 4 months ago
What's Changed
- WW-5406 Ensure Action excluded patterns are reinjected by @kusalk in https://github.com/apache/struts/pull/910
- WW-5407 Extend SecurityMemberAccess proxy detection to other proxies by @jefferyxhy in https://github.com/apache/struts/pull/911
- WW-5408 add option to not fallback to empty namespace when unresolved by @jefferyxhy in https://github.com/apache/struts/pull/912
- WW-5406 Fix injection order issue for excluded patterns by @kusalk in https://github.com/apache/struts/pull/917
- WW-5409 introduce final attribute to package element which make them unextendable by @jefferyxhy in https://github.com/apache/struts/pull/914
- WW-5417 bump ognl version to fix security issue by @jefferyxhy in https://github.com/apache/struts/pull/915
- WW-5418 Forbid Enums and Jasper classes by @kusalk in https://github.com/apache/struts/pull/916
- Bump org.assertj:assertj-core from 3.25.2 to 3.25.3 by @dependabot in https://github.com/apache/struts/pull/909
- Forward merge master to 7.0.0 by @kusalk in https://github.com/apache/struts/pull/918
- Bump actions/upload-artifact from 4.3.1 to 4.3.2 by @dependabot in https://github.com/apache/struts/pull/923
- Bump org.codehaus.mojo:versions-maven-plugin from 2.16.1 to 2.16.2 by @dependabot in https://github.com/apache/struts/pull/922
- WW-5353 Stronger security defaults for 7.0 by @kusalk in https://github.com/apache/struts/pull/919
- Bump org.codehaus.mojo:exec-maven-plugin from 3.1.0 to 3.2.0 by @dependabot in https://github.com/apache/struts/pull/925
- Bump actions/upload-artifact from 4.3.2 to 4.3.3 by @dependabot in https://github.com/apache/struts/pull/926
- WW-5421 Bump asm.version from 9.6 to 9.7 by @dependabot in https://github.com/apache/struts/pull/907
- Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.0.0-M6 to 3.2.5 by @dependabot in https://github.com/apache/struts/pull/905
- WW-5420 Upgrades commons-text to ver. 1.12.0 by @lukaszlenart in https://github.com/apache/struts/pull/924
- [WW-5419] Fixes support for loading Tiles definitions by @lukaszlenart in https://github.com/apache/struts/pull/920
- WW-5400 Extend default configuration options for the CSP interceptor. by @eschulma in https://github.com/apache/struts/pull/913
- Bump org.apache.maven.plugins:maven-source-plugin from 3.3.0 to 3.3.1 by @dependabot in https://github.com/apache/struts/pull/934
- Bump slf4j.version from 2.0.12 to 2.0.13 by @dependabot in https://github.com/apache/struts/pull/936
- Bump org.apache.maven.plugins:maven-project-info-reports-plugin from 3.0.0 to 3.5.0 by @dependabot in https://github.com/apache/struts/pull/938
- Bump ossf/scorecard-action from 2.3.1 to 2.3.3 by @dependabot in https://github.com/apache/struts/pull/939
- WW-5422 Fixes support for trimable locale string in request by @lukaszlenart in https://github.com/apache/struts/pull/931
- WW-5414 Always call afterInvocation even in case of exception by @lukaszlenart in https://github.com/apache/struts/pull/932
- WW-5415 Fixes accessing public constructors via expression by @lukaszlenart in https://github.com/apache/struts/pull/933
- INFRA-25666 Disables review by code owners by @lukaszlenart in https://github.com/apache/struts/pull/945
- Bump org.jacoco:jacoco-maven-plugin from 0.8.11 to 0.8.12 by @dependabot in https://github.com/apache/struts/pull/940
- WW-5425 Bump jackson.version from 2.16.1 to 2.17.1 by @dependabot in https://github.com/apache/struts/pull/944
- Bump org.apache.maven.plugins:maven-assembly-plugin from 3.6.0 to 3.7.1 by @dependabot in https://github.com/apache/struts/pull/950
- WW-5426 Bump org.freemarker:freemarker from 2.3.32 to 2.3.33 by @dependabot in https://github.com/apache/struts/pull/953
- [WW-5424] Fixes ClassCastException when using short var name in s:set tag by @lukaszlenart in https://github.com/apache/struts/pull/946
- Disables required reviewers option by @lukaszlenart in https://github.com/apache/struts/pull/947
- [WW-5412] Upgrades struts-master to ver 15 by @lukaszlenart in https://github.com/apache/struts/pull/948
- Bump org.apache.commons:commons-compress from 1.26.0 to 1.26.2 by @dependabot in https://github.com/apache/struts/pull/961
- Bump org.owasp:dependency-check-maven from 8.4.2 to 9.2.0 by @dependabot in https://github.com/apache/struts/pull/962
- [WW-5423] Fixes returning null instead of empty array in case of non-existing param by @lukaszlenart in https://github.com/apache/struts/pull/954
- WW-5400 Simplifies how CspSettings is created by @lukaszlenart in https://github.com/apache/struts/pull/956
- WW-5250 Addresses TODO in test and stops using Mock Objects by @lukaszlenart in https://github.com/apache/struts/pull/957
- Merge master 2024-06-10 by @lukaszlenart in https://github.com/apache/struts/pull/963
New Contributors
- @jefferyxhy made their first contribution in https://github.com/apache/struts/pull/911
- @eschulma made their first contribution in https://github.com/apache/struts/pull/913
Full Changelog: https://github.com/apache/struts/compare/STRUTS_7_0_0_M6...STRUTS_7_0_0_M7
struts
- Struts 7.0.0-M6
Published by lukaszlenart 6 months ago
What's Changed
- WW-5397 Bump net.sf.jasperreports:jasperreports from 6.20.6 to 6.21.0 by @dependabot in https://github.com/apache/struts/pull/843
- Updates link to build status on Jenkins by @lukaszlenart in https://github.com/apache/struts/pull/878
- Bump org.apache.maven.doxia:doxia-core from 1.9.1 to 1.12.0 by @dependabot in https://github.com/apache/struts/pull/879
- Bump slf4j.version from 2.0.11 to 2.0.12 by @dependabot in https://github.com/apache/struts/pull/880
- Bump org.apache.maven.doxia:doxia-module-markdown from 1.9.1 to 1.12.0 by @dependabot in https://github.com/apache/struts/pull/883
- WW-5398 Bump commons-validator:commons-validator from 1.6 to 1.8.0 by @dependabot in https://github.com/apache/struts/pull/882
- [WW-5399] Bump org.apache.commons:commons-compress from 1.25.0 to 1.26.0 by @dependabot in https://github.com/apache/struts/pull/884
- Bump maven-surefire-plugin.version from 3.0.0-M7 to 3.2.5 by @dependabot in https://github.com/apache/struts/pull/886
- Fix original file upload to use actual file name rather than uploadxxx.tmp by @gregh3269 in https://github.com/apache/struts/pull/893
- [WW-5401] Improves logging around wrapping request and detecting multipart request by @lukaszlenart in https://github.com/apache/struts/pull/892
- WW-5364 Fix potential NPE in XmlDocConfigurationProvider by @kusalk in https://github.com/apache/struts/pull/894
- Converts multiple file uploads example to use Action based upload by @lukaszlenart in https://github.com/apache/struts/pull/895
- WW-5251 Reinstate deleted interfaces with transparent compat by @kusalk in https://github.com/apache/struts/pull/898
- Enables required review by codeowners by @lukaszlenart in https://github.com/apache/struts/pull/899
- WW-5251 Fix deprecated interface method signature by @kusalk in https://github.com/apache/struts/pull/900
- WW-5402 Auto loads Tiles definitions from classpath by @lukaszlenart in https://github.com/apache/struts/pull/896
- Uses proper context name in branch protection rule by @lukaszlenart in https://github.com/apache/struts/pull/901
- WW-5404 Bump log4j2.version from 2.21.1 to 2.23.1 by @dependabot in https://github.com/apache/struts/pull/902
- WW-5390 Fixes creating assembly and attaching sources when preparing a new release by @lukaszlenart in https://github.com/apache/struts/pull/903
Full Changelog: https://github.com/apache/struts/compare/STRUTS_7_0_0_M3...STRUTS_7_0_0_M6
struts
- Struts 6.4.0
Published by lukaszlenart 7 months ago
What's Changed
- WW-5341 Ensure exclusion list applies to objects from all ClassLoaders by @kusalk in https://github.com/apache/struts/pull/741
- WW-5342 Add option to block use of default package by @kusalk in https://github.com/apache/struts/pull/742
- WW-5339 Misc clean up in CompoundRootAccessor and OgnlValueStackTest by @kusalk in https://github.com/apache/struts/pull/745
- WW-5340 Preliminary refactor of OgnlUtil by @kusalk in https://github.com/apache/struts/pull/746
- [WW-5346] replace BeanManager::createInjectionTarget by @hepptho in https://github.com/apache/struts/pull/754
- WW-5340 Introducing OGNL Guard by @kusalk in https://github.com/apache/struts/pull/747
- WW-5348 Allow overriding of logging behaviour in DefaultAcceptedPatternsChecker by @kusalk in https://github.com/apache/struts/pull/757
- [WW-5338] Removes deprecated OgnlTool by @lukaszlenart in https://github.com/apache/struts/pull/758
- [WW-5344] Un-deprecates Sitemesh plugin and upgrades Sitmesh to ver 2.5.0 by @lukaszlenart in https://github.com/apache/struts/pull/759
- WW-5340 Mild refactor StrutsOgnlGuard for easier subclassing by @kusalk in https://github.com/apache/struts/pull/760
- WW-5349 Remove Struts core dependency on OGNL VarRefs by @kusalk in https://github.com/apache/struts/pull/763
- WW-5354 Ensure ActionSupport fields are not parameter injectable by @kusalk in https://github.com/apache/struts/pull/765
- WW-5355 Integrate W-TinyLfu cache and use by default by @kusalk in https://github.com/apache/struts/pull/766
- Improved the StrutsUrlDecoder so that charset retrieval is performed only once. by @mygreen in https://github.com/apache/struts/pull/773
- WW-5358 Expand exclusion lists by @kusalk in https://github.com/apache/struts/pull/774
- WW-5350 Refactor SecurityMemberAccess by @kusalk in https://github.com/apache/struts/pull/780
- [WW-5333] Refactors AttributeMap by @lukaszlenart in https://github.com/apache/struts/pull/779
- WW-5363 Velocity: read chained contexts before ValueStack by @kusalk in https://github.com/apache/struts/pull/789
- WW-5350 Implement OGNL Allowlist capability by @kusalk in https://github.com/apache/struts/pull/781
- WW-5363 Remove redundant method from VelocityManager by @kusalk in https://github.com/apache/struts/pull/793
- WW-5343 Make SecurityMemberAccess an extensible bean by @kusalk in https://github.com/apache/struts/pull/791
- WW-5364 Automatically populate OGNL allowlist by @kusalk in https://github.com/apache/struts/pull/800
- WW-5339 Add option to block custom OGNL maps by @kusalk in https://github.com/apache/struts/pull/806
- [WW-5370] Makes HttpParameters case-insensitive by @lukaszlenart in https://github.com/apache/struts/pull/807
- [WW-5371] Modern upload by @lukaszlenart in https://github.com/apache/struts/pull/808
- WW-5364 Add missing system allowlist classes by @kusalk in https://github.com/apache/struts/pull/815
- [WW-5373] Update JavaDoc CspReportAction.java by @assachs in https://github.com/apache/struts/pull/814
- [WW-5328] Removes deprecated setters by @lukaszlenart in https://github.com/apache/struts/pull/811
- [WW-5362] Removes type attribute out of <s:script/> tag by @lukaszlenart in https://github.com/apache/struts/pull/812
- WW-5378 Add option to NOT fallback to context lookup when finding value on OgnlValueStack by @kusalk in https://github.com/apache/struts/pull/821
- WW-5364 Add String.class to system allowlist by @kusalk in https://github.com/apache/struts/pull/828
- WW-5381 Introduce RootAccessor interface for extension point by @kusalk in https://github.com/apache/struts/pull/823
- WW-5379 Implement alternative mechanism for Velocity directives to obtain ValueStack by @kusalk in https://github.com/apache/struts/pull/822
- WW-5352 Repackage ParametersInterceptor and related classes by @kusalk in https://github.com/apache/struts/pull/829
- WW-5381 Introduce extension point for CompoundRootAccessor by @kusalk in https://github.com/apache/struts/pull/824
- [WW-5383] Updates RegEx to excludes JARs by default by @lukaszlenart in https://github.com/apache/struts/pull/830
- WW-5382 Fix stale injections in Dispatcher by @kusalk in https://github.com/apache/struts/pull/826
- WW-5381 Introduce extension point for MethodAccessor by @kusalk in https://github.com/apache/struts/pull/825
- WW-5352 Refactor ParametersInterceptor by @kusalk in https://github.com/apache/struts/pull/831
- [WW-5365] Reverts changes introduced in WW-5192 to allow evaluate the value attribute of Radio tag by @lukaszlenart in https://github.com/apache/struts/pull/835
- WW-5352 Clean up OgnlValueStackTest by @kusalk in https://github.com/apache/struts/pull/841
- [WW-5387] Fixes remove() signature by @lukaszlenart in https://github.com/apache/struts/pull/844
- [WW-5369] Re-define minimal library set by @lukaszlenart in https://github.com/apache/struts/pull/847
- [WW-5374] Allows to prepend reportUri with Servlet context by @lukaszlenart in https://github.com/apache/struts/pull/845
- [WW-5357] Adds support for disabled attribute to anchor tag by @lukaszlenart in https://github.com/apache/struts/pull/848
- WW-5352 Introducing the StrutsParameter annotation by @kusalk in https://github.com/apache/struts/pull/832
- [WW-5360] Introduces additional countStr & indexStr to allow to ignore conversion by @lukaszlenart in https://github.com/apache/struts/pull/852
- WW-5391 Add interface for VelocityManager extension point by @kusalk in https://github.com/apache/struts/pull/867
- WW-5394 Use request encoding by @aleksandr-m in https://github.com/apache/struts/pull/872
- s:file shows server/file location WW-5396 by @gregh3269 in https://github.com/apache/struts/pull/876
- [WW-5401] Improves logging around wrapping request and detecting multipart request by @lukaszlenart in https://github.com/apache/struts/pull/892
- WW-5364 Fix potential NPE in XmlDocConfigurationProvider by @kusalk in https://github.com/apache/struts/pull/894
- WW-5251 Reinstate deleted interfaces with transparent compat by @kusalk in https://github.com/apache/struts/pull/898
- WW-5251 Fix deprecated interface method signature by @kusalk in https://github.com/apache/struts/pull/900
- WW-5402 Auto loads Tiles definitions from classpath by @lukaszlenart in https://github.com/apache/struts/pull/896
- WW-5390 Fixes creating assembly and attaching sources when preparing a new release by @lukaszlenart in https://github.com/apache/struts/pull/903
Dependencies
- Moves all CI notifications to commits@ list by @lukaszlenart in https://github.com/apache/struts/pull/748
- Bump actions/checkout from 3 to 4 by @dependabot in https://github.com/apache/struts/pull/751
- Bump actions/upload-artifact from 3.1.2 to 3.1.3 by @dependabot in https://github.com/apache/struts/pull/752
- Bump actions/cache from 3.3.1 to 3.3.2 by @dependabot in https://github.com/apache/struts/pull/753
- Split SonarCloud into separate action by @kusalk in https://github.com/apache/struts/pull/755
- [WW-5347] Upgrades to commons-digester3 ver 3.2 by @lukaszlenart in https://github.com/apache/struts/pull/756
- Bump ossf/scorecard-action from 2.2.0 to 2.3.0 by @dependabot in https://github.com/apache/struts/pull/762
- Bump org.jfree:jfreechart from 1.5.1 to 1.5.4 by @dependabot in https://github.com/apache/struts/pull/740
- Add JDK 21 build by @kusalk in https://github.com/apache/struts/pull/764
- Fix conflicting dependencies by @kusalk in https://github.com/apache/struts/pull/767
- Bump org.codehaus.mojo:versions-maven-plugin from 2.7 to 2.16.1 by @dependabot in https://github.com/apache/struts/pull/768
- Bump org.owasp:dependency-check-maven from 7.2.0 to 8.4.2 by @dependabot in https://github.com/apache/struts/pull/771
- Bump ossf/scorecard-action from 2.3.0 to 2.3.1 by @dependabot in https://github.com/apache/struts/pull/775
- Bump junit:junit from 4.13.1 to 4.13.2 by @dependabot in https://github.com/apache/struts/pull/776
- Bump org.jacoco:jacoco-maven-plugin from 0.8.8 to 0.8.11 by @dependabot in https://github.com/apache/struts/pull/777
- Bump slf4j.version from 2.0.7 to 2.0.9 by @dependabot in https://github.com/apache/struts/pull/783
- Bump net.sf.jasperreports:jasperreports from 6.20.5 to 6.20.6 by @dependabot in https://github.com/apache/struts/pull/784
- Uses the new notifications@ list for all the messages form Github by @lukaszlenart in https://github.com/apache/struts/pull/788
- Send Jenkins notifications to the notifications@ list by @lukaszlenart in https://github.com/apache/struts/pull/790
- Bump jackson.version from 2.15.3 to 2.16.0 by @dependabot in https://github.com/apache/struts/pull/796
- Bump actions/setup-java from 3 to 4 by @dependabot in https://github.com/apache/struts/pull/804
- Builds Struts 7 as part of the main pipeline by @lukaszlenart in https://github.com/apache/struts/pull/813
- Bump github/codeql-action from 2 to 3 by @dependabot in https://github.com/apache/struts/pull/817
- Bump actions/upload-artifact from 3.1.3 to 4.0.0 by @dependabot in https://github.com/apache/struts/pull/816
- Bump org.apache.commons:commons-compress from 1.23.0 to 1.24.0 by @dependabot in https://github.com/apache/struts/pull/818
- Stops cleaning nightlies to allow to coexist different versions by @lukaszlenart in https://github.com/apache/struts/pull/834
- Bump org.apache.maven.plugins:maven-release-plugin from 3.0.0-M1 to 3.0.1 by @dependabot in https://github.com/apache/struts/pull/837
- Reduces log level to debug to reduce noise in the logs by @lukaszlenart in https://github.com/apache/struts/pull/838
- Bump actions/upload-artifact from 4.0.0 to 4.1.0 by @dependabot in https://github.com/apache/struts/pull/842
- Bump org.apache.commons:commons-compress from 1.23.0 to 1.25.0 by @dependabot in https://github.com/apache/struts/pull/820
- Extends sleep period to avoid breaking a build by @lukaszlenart in https://github.com/apache/struts/pull/849
- Upgrade maven to 3.9.6 and wrapper to 3.2.0 (cherry-pick from 7.x) by @sepe81 in https://github.com/apache/struts/pull/853
- Bump actions/upload-artifact from 4.1.0 to 4.2.0 by @dependabot in https://github.com/apache/struts/pull/855
- Fixes excluding Plexus container in OWASP scan by @lukaszlenart in https://github.com/apache/struts/pull/858
- Drops JDK11 build and fixes duplicated steps by @lukaszlenart in https://github.com/apache/struts/pull/859
- Small spelling and MD fixes (IntelliJ assisted) by @sepe81 in https://github.com/apache/struts/pull/854
- Stops running sonar.yml on forks by @lukaszlenart in https://github.com/apache/struts/pull/862
- Bump actions/upload-artifact from 4.2.0 to 4.3.0 by @dependabot in https://github.com/apache/struts/pull/864
- various dependency updates for master by @sepe81 in https://github.com/apache/struts/pull/863
- WW-5395 Bump commons-logging:commons-logging from 1.2 to 1.3.0 by @dependabot in https://github.com/apache/struts/pull/874
- Bump actions/upload-artifact from 4.3.0 to 4.3.1 by @dependabot in https://github.com/apache/struts/pull/875
- Updates link to build status on Jenkins by @lukaszlenart in https://github.com/apache/struts/pull/878
- Bump org.apache.maven.doxia:doxia-core from 1.9.1 to 1.12.0 by @dependabot in https://github.com/apache/struts/pull/879
- Bump slf4j.version from 2.0.11 to 2.0.12 by @dependabot in https://github.com/apache/struts/pull/880
- Bump org.apache.maven.doxia:doxia-module-markdown from 1.9.1 to 1.12.0 by @dependabot in https://github.com/apache/struts/pull/883
- Bump maven-surefire-plugin.version from 3.0.0-M7 to 3.2.5 by @dependabot in https://github.com/apache/struts/pull/886
- Converts multiple file uploads example to use Action based upload by @lukaszlenart in https://github.com/apache/struts/pull/895
- Enables required review by codeowners by @lukaszlenart in https://github.com/apache/struts/pull/899
- Uses proper context name in branch protection rule by @lukaszlenart in https://github.com/apache/struts/pull/901
- WW-5397 Bump net.sf.jasperreports:jasperreports from 6.20.6 to 6.21.0 by @dependabot in https://github.com/apache/struts/pull/843
- WW-5398 Bump commons-validator:commons-validator from 1.6 to 1.8.0 by @dependabot in https://github.com/apache/struts/pull/882
- [WW-5399] Bump org.apache.commons:commons-compress from 1.25.0 to 1.26.0 by @dependabot in https://github.com/apache/struts/pull/884
- WW-5404 Bump log4j2.version from 2.21.1 to 2.23.1 by @dependabot in https://github.com/apache/struts/pull/902
New Contributors
- @hepptho made their first contribution in https://github.com/apache/struts/pull/754
- @mygreen made their first contribution in https://github.com/apache/struts/pull/773
- @assachs made their first contribution in https://github.com/apache/struts/pull/814
Full Changelog: https://github.com/apache/struts/compare/STRUTS_6_3_0...STRUTS_6_4_0
struts
- v7.0.0-M3
Published by lukaszlenart 8 months ago
What's Changed
- various dependency updates for master by @sepe81 in https://github.com/apache/struts/pull/863
- WW-5391 Add interface for VelocityManager extension point by @kusalk in https://github.com/apache/struts/pull/867
- [WW-5390] Fixes generating assemblies during release process by @lukaszlenart in https://github.com/apache/struts/pull/868
- Fixes problem with failing file upload tests by @lukaszlenart in https://github.com/apache/struts/pull/869
- [WW-5384] Update log4j2 to 2.22.1 and [WW-5393] caffeine to 3.1.8 including error_prone_annotations > 2.10.0 which depends on Java 11 by @sepe81 in https://github.com/apache/struts/pull/870
- Bump actions/upload-artifact from 4.3.0 to 4.3.1 by @dependabot in https://github.com/apache/struts/pull/875
- WW-5395 Bump commons-logging:commons-logging from 1.2 to 1.3.0 by @dependabot in https://github.com/apache/struts/pull/874
- WW-5394 Use request encoding by @aleksandr-m in https://github.com/apache/struts/pull/872
- [WW-5388] Fixes a few issues in Servlet 6 file upload usage by @lukaszlenart in https://github.com/apache/struts/pull/873
- s:file shows server/file location WW-5396 by @gregh3269 in https://github.com/apache/struts/pull/876
- Merge master to 7-x-x 2024-02-16 by @lukaszlenart in https://github.com/apache/struts/pull/877
Full Changelog: https://github.com/apache/struts/compare/STRUTS_7_0_0_M2...STRUTS_7_0_0_M3
struts
- v7.0.0-M2
Published by lukaszlenart 9 months ago
What's Changed
- Fixes excluding Plexus container in OWASP scan by @lukaszlenart in https://github.com/apache/struts/pull/858
- Drops JDK11 build and fixes duplicated steps by @lukaszlenart in https://github.com/apache/struts/pull/859
- Small spelling and MD fixes (IntelliJ assisted) by @sepe81 in https://github.com/apache/struts/pull/854
- Stops running sonar.yml on forks by @lukaszlenart in https://github.com/apache/struts/pull/862
- WW-5352 Introducing the StrutsParameter annotation by @kusalk in https://github.com/apache/struts/pull/832
- [WW-5360] Introduces additional countStr & indexStr to allow to ignore conversion by @lukaszlenart in https://github.com/apache/struts/pull/852
- [WW-5388] Uses the latest JakartaEE FileUpload Servlet 6 package by @lukaszlenart in https://github.com/apache/struts/pull/861
- Merge master into 7-0-x branch - 2024-02-01 by @lukaszlenart in https://github.com/apache/struts/pull/866
Dependencies
- Upgrade maven to 3.9.6 and wrapper to 3.2.0 by @sepe81 in https://github.com/apache/struts/pull/851
- Upgrade maven to 3.9.6 and wrapper to 3.2.0 (cherry-pick from 7.x) by @sepe81 in https://github.com/apache/struts/pull/853
- Bump actions/upload-artifact from 4.1.0 to 4.2.0 by @dependabot in https://github.com/apache/struts/pull/855
- Bump actions/upload-artifact from 4.2.0 to 4.3.0 by @dependabot in https://github.com/apache/struts/pull/864
Full Changelog: https://github.com/apache/struts/compare/STRUTS_7_0_0_M1...STRUTS_7_0_0_M2
struts
- Struts 2.5.33
Published by lukaszlenart 9 months ago
What's changed
Full Changelog: https://github.com/apache/struts/compare/STRUTS_2_5_32...STRUTS_2_5_33
struts
- Struts 2.5.32
Published by lukaszlenart 9 months ago
What's Changed
Full Changelog: https://github.com/apache/struts/compare/STRUTS_2_5_31...STRUTS_2_5_32
struts
- v7.0.0-M1
Published by lukaszlenart 9 months ago
What's Changed
- Moves all CI notifications to commits@ list by @lukaszlenart in https://github.com/apache/struts/pull/748
- WW-5341 Ensure exclusion list applies to objects from all ClassLoaders by @kusalk in https://github.com/apache/struts/pull/741
- WW-5342 Add option to block use of default package by @kusalk in https://github.com/apache/struts/pull/742
- WW-5339 Misc clean up in CompoundRootAccessor and OgnlValueStackTest by @kusalk in https://github.com/apache/struts/pull/745
- WW-5340 Preliminary refactor of OgnlUtil by @kusalk in https://github.com/apache/struts/pull/746
- [WW-5346] replace BeanManager::createInjectionTarget by @hepptho in https://github.com/apache/struts/pull/754
- Split SonarCloud into separate action by @kusalk in https://github.com/apache/struts/pull/755
- WW-5340 Introducing OGNL Guard by @kusalk in https://github.com/apache/struts/pull/747
- WW-5348 Allow overriding of logging behaviour in DefaultAcceptedPatternsChecker by @kusalk in https://github.com/apache/struts/pull/757
- [WW-5347] Upgrades to commons-digester3 ver 3.2 by @lukaszlenart in https://github.com/apache/struts/pull/756
- [WW-5338] Removes deprecated OgnlTool by @lukaszlenart in https://github.com/apache/struts/pull/758
- [WW-5344] Un-deprecates Sitemesh plugin and upgrades Sitmesh to ver 2.5.0 by @lukaszlenart in https://github.com/apache/struts/pull/759
- WW-5340 Mild refactor StrutsOgnlGuard for easier subclassing by @kusalk in https://github.com/apache/struts/pull/760
- WW-5349 Remove Struts core dependency on OGNL VarRefs by @kusalk in https://github.com/apache/struts/pull/763
- Add JDK 21 build by @kusalk in https://github.com/apache/struts/pull/764
- WW-5354 Ensure ActionSupport fields are not parameter injectable by @kusalk in https://github.com/apache/struts/pull/765
- WW-5355 Integrate W-TinyLfu cache and use by default by @kusalk in https://github.com/apache/struts/pull/766
- Improved the StrutsUrlDecoder so that charset retrieval is performed only once. by @mygreen in https://github.com/apache/struts/pull/773
- WW-5358 Expand exclusion lists by @kusalk in https://github.com/apache/struts/pull/774
- WW-5350 Refactor SecurityMemberAccess by @kusalk in https://github.com/apache/struts/pull/780
- [WW-5333] Refactors AttributeMap by @lukaszlenart in https://github.com/apache/struts/pull/779
- Uses the new notifications@ list for all the messages form Github by @lukaszlenart in https://github.com/apache/struts/pull/788
- Send Jenkins notifications to the notifications@ list by @lukaszlenart in https://github.com/apache/struts/pull/790
- WW-5363 Velocity: read chained contexts before ValueStack by @kusalk in https://github.com/apache/struts/pull/789
- WW-5350 Implement OGNL Allowlist capability by @kusalk in https://github.com/apache/struts/pull/781
- WW-5363 Remove redundant method from VelocityManager by @kusalk in https://github.com/apache/struts/pull/793
- WW-5343 Make SecurityMemberAccess an extensible bean by @kusalk in https://github.com/apache/struts/pull/791
- WW-5364 Automatically populate OGNL allowlist by @kusalk in https://github.com/apache/struts/pull/800
- WW-5339 Add option to block custom OGNL maps by @kusalk in https://github.com/apache/struts/pull/806
- [WW-5370] Makes HttpParameters case-insensitive by @lukaszlenart in https://github.com/apache/struts/pull/807
- [WW-5371] Modern upload by @lukaszlenart in https://github.com/apache/struts/pull/808
- Rebase struts-7-0-x branch by @lukaszlenart in https://github.com/apache/struts/pull/809
- Builds Struts 7 as part of the main pipeline by @lukaszlenart in https://github.com/apache/struts/pull/813
- WW-5364 Add missing system allowlist classes by @kusalk in https://github.com/apache/struts/pull/815
- [WW-5373] Update JavaDoc CspReportAction.java by @assachs in https://github.com/apache/struts/pull/814
- [WW-5328] Removes deprecated setters by @lukaszlenart in https://github.com/apache/struts/pull/811
- JakartaEE modules by @lukaszlenart in https://github.com/apache/struts/pull/810
- [WW-5362] Removes type attribute out of <s:script/> tag by @lukaszlenart in https://github.com/apache/struts/pull/812
- WW-5378 Add option to NOT fallback to context lookup when finding value on OgnlValueStack by @kusalk in https://github.com/apache/struts/pull/821
- WW-5364 Add String.class to system allowlist by @kusalk in https://github.com/apache/struts/pull/828
- Upgrades Mockito to ver 5.8.0 by @lukaszlenart in https://github.com/apache/struts/pull/827
- WW-5381 Introduce RootAccessor interface for extension point by @kusalk in https://github.com/apache/struts/pull/823
- WW-5379 Implement alternative mechanism for Velocity directives to obtain ValueStack by @kusalk in https://github.com/apache/struts/pull/822
- WW-5352 Repackage ParametersInterceptor and related classes by @kusalk in https://github.com/apache/struts/pull/829
- WW-5381 Introduce extension point for CompoundRootAccessor by @kusalk in https://github.com/apache/struts/pull/824
- [WW-5383] Updates RegEx to excludes JARs by default by @lukaszlenart in https://github.com/apache/struts/pull/830
- [Struts 7] Merge master to 7xx by @lukaszlenart in https://github.com/apache/struts/pull/833
- Stops cleaning nightlies to allow to coexist different versions by @lukaszlenart in https://github.com/apache/struts/pull/834
- WW-5382 Fix stale injections in Dispatcher by @kusalk in https://github.com/apache/struts/pull/826
- WW-5381 Introduce extension point for MethodAccessor by @kusalk in https://github.com/apache/struts/pull/825
- WW-5352 Refactor ParametersInterceptor by @kusalk in https://github.com/apache/struts/pull/831
- Reduces log level to debug to reduce noise in the logs by @lukaszlenart in https://github.com/apache/struts/pull/838
- [WW-5365] Reverts changes introduced in WW-5192 to allow evaluate the value attribute of Radio tag by @lukaszlenart in https://github.com/apache/struts/pull/835
- WW-5352 Clean up OgnlValueStackTest by @kusalk in https://github.com/apache/struts/pull/841
- [WW-5387] Fixes remove() signature by @lukaszlenart in https://github.com/apache/struts/pull/844
- [WW-5369] Re-define minimal library set by @lukaszlenart in https://github.com/apache/struts/pull/847
- [WW-5374] Allows to prepend reportUri with Servlet context by @lukaszlenart in https://github.com/apache/struts/pull/845
- Extends sleep period to avoid breaking a build by @lukaszlenart in https://github.com/apache/struts/pull/849
- [WW-5357] Adds support for disabled attribute to anchor tag by @lukaszlenart in https://github.com/apache/struts/pull/848
- [Struts-7] Merge master to 7xx 2024-01-20 by @lukaszlenart in https://github.com/apache/struts/pull/850
Dependencies
- Bump actions/checkout from 3 to 4 by @dependabot in https://github.com/apache/struts/pull/751
- Bump actions/upload-artifact from 3.1.2 to 3.1.3 by @dependabot in https://github.com/apache/struts/pull/752
- Bump actions/cache from 3.3.1 to 3.3.2 by @dependabot in https://github.com/apache/struts/pull/753
- Bump ossf/scorecard-action from 2.2.0 to 2.3.0 by @dependabot in https://github.com/apache/struts/pull/762
- Bump org.jfree:jfreechart from 1.5.1 to 1.5.4 by @dependabot in https://github.com/apache/struts/pull/740
- Fix conflicting dependencies by @kusalk in https://github.com/apache/struts/pull/767
- Bump org.codehaus.mojo:versions-maven-plugin from 2.7 to 2.16.1 by @dependabot in https://github.com/apache/struts/pull/768
- Bump org.owasp:dependency-check-maven from 7.2.0 to 8.4.2 by @dependabot in https://github.com/apache/struts/pull/771
- Bump ossf/scorecard-action from 2.3.0 to 2.3.1 by @dependabot in https://github.com/apache/struts/pull/775
- Bump junit:junit from 4.13.1 to 4.13.2 by @dependabot in https://github.com/apache/struts/pull/776
- Bump org.jacoco:jacoco-maven-plugin from 0.8.8 to 0.8.11 by @dependabot in https://github.com/apache/struts/pull/777
- Bump slf4j.version from 2.0.7 to 2.0.9 by @dependabot in https://github.com/apache/struts/pull/783
- Bump net.sf.jasperreports:jasperreports from 6.20.5 to 6.20.6 by @dependabot in https://github.com/apache/struts/pull/784
- Bump jackson.version from 2.15.3 to 2.16.0 by @dependabot in https://github.com/apache/struts/pull/796
- Bump actions/setup-java from 3 to 4 by @dependabot in https://github.com/apache/struts/pull/804
- Bump github/codeql-action from 2 to 3 by @dependabot in https://github.com/apache/struts/pull/817
- Bump actions/upload-artifact from 3.1.3 to 4.0.0 by @dependabot in https://github.com/apache/struts/pull/816
- Bump org.apache.commons:commons-compress from 1.23.0 to 1.24.0 by @dependabot in https://github.com/apache/struts/pull/818
- Bump org.apache.maven.plugins:maven-release-plugin from 3.0.0-M1 to 3.0.1 by @dependabot in https://github.com/apache/struts/pull/837
- Bump actions/upload-artifact from 4.0.0 to 4.1.0 by @dependabot in https://github.com/apache/struts/pull/842
- Bump org.apache.commons:commons-compress from 1.23.0 to 1.25.0 by @dependabot in https://github.com/apache/struts/pull/820
New Contributors
- @hepptho made their first contribution in https://github.com/apache/struts/pull/754
- @mygreen made their first contribution in https://github.com/apache/struts/pull/773
- @assachs made their first contribution in https://github.com/apache/struts/pull/814
Full Changelog: https://github.com/apache/struts/compare/STRUTS_6_3_0...STRUTS_7_0_0_M1
struts
- Struts 6.3.0
Published by lukaszlenart about 1 year ago
What's Changed
- [WW-5327] Stop using JavaBeans notation for setters in SecurityMemberAccess & MemberAccessValueStack by @lukaszlenart in https://github.com/apache/struts/pull/715
- [WW-5233] Include Apache Tiles code base in the Tiles plugin by @lukaszlenart in https://github.com/apache/struts/pull/608
- Update StreamResult.java - fix misspell by @ervinpm in https://github.com/apache/struts/pull/723
- WW-5332 Add validation for package name parsing by @kusalk in https://github.com/apache/struts/pull/726
- [WW-5327] Removes duplicated exclusion by @lukaszlenart in https://github.com/apache/struts/pull/729
- Uses Java 17 to perform Code Quality check by @lukaszlenart in https://github.com/apache/struts/pull/730
- WW-5334 Enable usage of junit-plugin inside velocity-plugin by @kusalk in https://github.com/apache/struts/pull/732
- [WW-5331] Uses proper signature of get() by @lukaszlenart in https://github.com/apache/struts/pull/727
- WW-5334 Extract ConventionJUnit4Test into correct module by @kusalk in https://github.com/apache/struts/pull/733
- Defines a proper CODEOWNERS file by @lukaszlenart in https://github.com/apache/struts/pull/728
- WW-5334 Misc VelocityManager code cleanup by @kusalk in https://github.com/apache/struts/pull/731
- WW-5337 Make SecurityMemberAccess exclusion checking more performant by @kusalk in https://github.com/apache/struts/pull/736
- WW-5336 Deprecate OgnlTool by @kusalk in https://github.com/apache/struts/pull/735
- WW-5334 Fix empty chained context names in VelocityManager by @kusalk in https://github.com/apache/struts/pull/744
Dependencies
- [WW-5315] Upgrades ASM to version 9.5 by @lukaszlenart in https://github.com/apache/struts/pull/695
- [WW-5316] Upgrades commons-io to version 2.13.0 by @lukaszlenart in https://github.com/apache/struts/pull/697
- [WW-5317] Upgrades log4j to version 2.20.0 by @lukaszlenart in https://github.com/apache/struts/pull/698
- upgrade Felix Maven Bundle Plugin by @hboutemy in https://github.com/apache/struts/pull/696
- Feature/update maven dependency plugin by @sepe81 in https://github.com/apache/struts/pull/699
- [WW-5318] Upgrades slf4j to version 2.0.7 by @lukaszlenart in https://github.com/apache/struts/pull/700
- Bump actions/upload-artifact from 3.1.0 to 3.1.2 by @dependabot in https://github.com/apache/struts/pull/702
- Bump actions/cache from 3.0.8 to 3.3.1 by @dependabot in https://github.com/apache/struts/pull/705
- Bump osgi.core from 7.0.0 to 8.0.0 by @dependabot in https://github.com/apache/struts/pull/701
- Bump stax2-api from 4.2 to 4.2.1 by @dependabot in https://github.com/apache/struts/pull/703
- Bump ossf/scorecard-action from 2.0.6 to 2.2.0 by @dependabot in https://github.com/apache/struts/pull/704
- Bump assertj-core from 3.15.0 to 3.24.2 by @dependabot in https://github.com/apache/struts/pull/707
- Bump jaxb-impl from 2.3.2 to 4.0.3 by @dependabot in https://github.com/apache/struts/pull/708
- Bump net.sf.jasperreports:jasperreports from 6.19.1 to 6.20.5 by @dependabot in https://github.com/apache/struts/pull/709
- Bump jackson.version from 2.14.1 to 2.15.2 by @dependabot in https://github.com/apache/struts/pull/713
- [WW-5325] Upgrades commons-lang3 to version 2.13.0 by @lukaszlenart in https://github.com/apache/struts/pull/714
- [WW-5329] Upgrades xstream to version 1.4.20 by @lukaszlenart in https://github.com/apache/struts/pull/721
- Drops duplicated dependency by @lukaszlenart in https://github.com/apache/struts/pull/737
New Contributors
- @ervinpm made their first contribution in https://github.com/apache/struts/pull/723
Full Changelog: https://github.com/apache/struts/compare/STRUTS_6_2_0...STRUTS_6_3_0
struts
- Struts 6.2.0
Published by lukaszlenart over 1 year ago
What's Changed
- Updates OWASP suppressions as some reports are false positive by @lukaszlenart in https://github.com/apache/struts/pull/637
- Defines to autolink PRs to issues in ASF JIRA by @lukaszlenart in https://github.com/apache/struts/pull/638
- [WW-5263] Uses proper names for CSP, COOP and COEP interceptors by @lukaszlenart in https://github.com/apache/struts/pull/639
- [WW-5262] Extracts excluded classes and beans into dedicated XML config files by @lukaszlenart in https://github.com/apache/struts/pull/640
- WW-5199 Allow forwarding from/to actions by @kusalk in https://github.com/apache/struts/pull/642
- [WW-5264] Moves XSLT result into a dedicated plugin by @lukaszlenart in https://github.com/apache/struts/pull/641
- Applies permission to GH workflows by @lukaszlenart in https://github.com/apache/struts/pull/643
- [WW-5264] Removes XSLTResult from struts-default.xml as it was moved in to plugin by @lukaszlenart in https://github.com/apache/struts/pull/646
- WW-5265 Allow removal of a single/specific container provider by @kusalk in https://github.com/apache/struts/pull/645
- [WW-5269] Upgrades Jackson to version 2.14.1 by @lukaszlenart in https://github.com/apache/struts/pull/647
- [WW-5272] Extends <s:date/> to support java.sql.Time by @lukaszlenart in https://github.com/apache/struts/pull/649
- [WW-5277] Upgrades Freemarker to version 2.3.32 by @lukaszlenart in https://github.com/apache/struts/pull/651
- [WW-5274] Marks the Pell multipart plugin as deprecated by @lukaszlenart in https://github.com/apache/struts/pull/653
- [WW-5276] Cleans up also wrapper request to avoid resource leak and potential DoS attack by @lukaszlenart in https://github.com/apache/struts/pull/654
- [WW-4404] Http interceptor by @lukaszlenart in https://github.com/apache/struts/pull/655
- WW-5270 Fix forwarding from Struts excluded URL by @kusalk in https://github.com/apache/struts/pull/648
- WW-5278 Collect duplicated code into AbstractActionValidatorManager by @kusalk in https://github.com/apache/struts/pull/656
- WW-5279 Improve readability of XmlConfigurationProvider class by @kusalk in https://github.com/apache/struts/pull/657
- [WW-5275] Allows to provide a custom CspSettings per action by @lukaszlenart in https://github.com/apache/struts/pull/658
- WW-5284 Refactor ActionValidatorManager implementations by @kusalk in https://github.com/apache/struts/pull/659
- WW-5268 Ability to exempt classes from package exclusions by @kusalk in https://github.com/apache/struts/pull/660
- [WW-5285] Limits max number of files to upload at once by @lukaszlenart in https://github.com/apache/struts/pull/662
- WW-5290 Refactor ConfigurationManager by @kusalk in https://github.com/apache/struts/pull/666
- WW-5292 Allow overriding of Operations classes in two filter setup and assorted clean up by @kusalk in https://github.com/apache/struts/pull/667
- WW-5266 Implement struts.multipart.maxFileSize by @kusalk in https://github.com/apache/struts/pull/665
- WW-5196 use generics for RequestMap and ApplicationMap and correct SessionMap to also be of type <String, Object> by @sdutry in https://github.com/apache/struts/pull/585
- WW-5243 remove deprecated action prefix cross namespaces by @sdutry in https://github.com/apache/struts/pull/669
- WW-5253 Remove deprecated methods from DefaultUrlHelper by @sdutry in https://github.com/apache/struts/pull/671
- WW-5251 remove deprecated interfaces related to ServletConfigInterceptor by @sdutry in https://github.com/apache/struts/pull/670
- WW-5288 Make excluded package exemption logic more strict by @kusalk in https://github.com/apache/struts/pull/664
- WW-5293 Allow loading XML configuration from other than filesystem by @kusalk in https://github.com/apache/struts/pull/668
- Bump spring-core from 5.3.23 to 5.3.26 by @dependabot in https://github.com/apache/struts/pull/672
- [WW-5289] Fixes creating executor to avoid locking JVM on shutdown by @lukaszlenart in https://github.com/apache/struts/pull/673
- [WW-5295] Adds support for java.time.LocalTime to <s:date/> tag by @lukaszlenart in https://github.com/apache/struts/pull/677
- WW-5298 Clean up StrutsVelocityContext by @kusalk in https://github.com/apache/struts/pull/674
- WW-5299 Clean up ActionChainResult by @kusalk in https://github.com/apache/struts/pull/675
- WW-5300 Make Dispatcher methods overridable by @kusalk in https://github.com/apache/struts/pull/676
- WW-5308 Java templates plugin, add minlength and maxlength to textarea. by @gregh3269 in https://github.com/apache/struts/pull/683
- [WW-5280] Cleans up NoParameters interfaces by @lukaszlenart in https://github.com/apache/struts/pull/679
- [WW-5304] Drops deprecated methods and fields in ActionContext by @lukaszlenart in https://github.com/apache/struts/pull/680
- Improve [WW-4434] - add documentation and rename existing ftl to achieve the wanted behaviour by @fischey in https://github.com/apache/struts/pull/682
- Bump testng from 7.5 to 7.5.1 by @dependabot in https://github.com/apache/struts/pull/684
- [WW-5302] Evaluates the name attribute before assigning it to the id attribute by @lukaszlenart in https://github.com/apache/struts/pull/678
- Bump spring-core from 5.3.26 to 5.3.27 by @dependabot in https://github.com/apache/struts/pull/681
- [WW-5296] Uses proper DTDs by @lukaszlenart in https://github.com/apache/struts/pull/685
- [WW-5309] Supports patterns starting with variable by @lukaszlenart in https://github.com/apache/struts/pull/686
- WW-5301 Fix custom VelocityManager bean selection by @kusalk in https://github.com/apache/struts/pull/687
- [WW-5312] Attempt to fix ExecuteAndWaitInterceptor inconsistent processing by @JCgH4164838Gh792C124B5 in https://github.com/apache/struts/pull/688
- [WW-5310] Properly parses param value with equal sign by @lukaszlenart in https://github.com/apache/struts/pull/689
- WW-5288 follow-up test case updates by @JCgH4164838Gh792C124B5 in https://github.com/apache/struts/pull/690
- [WW-5261] Avoids creating ValueStack if no ActionContext is available by @lukaszlenart in https://github.com/apache/struts/pull/691
- WW-5314 Do not log warnings for bad user input from JakartaMultiPartRequest by @kusalk in https://github.com/apache/struts/pull/693
- [WW-5310] Supports fragment in URL by @lukaszlenart in https://github.com/apache/struts/pull/692
New Contributors
- @kusalk made their first contribution in https://github.com/apache/struts/pull/642
- @fischey made their first contribution in https://github.com/apache/struts/pull/682
Full Changelog: https://github.com/apache/struts/compare/STRUTS_6_1_1...STRUTS_6_2_0
struts
- Struts 2.5.31
Published by lukaszlenart over 1 year ago
What's Changed
Full Changelog: https://github.com/apache/struts/compare/STRUTS_2_5_30...STRUTS_2_5_31
struts
- Struts 6.1.2.1
Published by lukaszlenart over 1 year ago
What's Changed
Full Changelog: https://github.com/apache/struts/compare/STRUTS_6_1_2...STRUTS_6_1_2_1
struts
- Struts 6.1.2
Published by lukaszlenart over 1 year ago
What's Changed
- [WW-5285] Limits max number of files to upload at once by @lukaszlenart in https://github.com/apache/struts/pull/662
Full Changelog: https://github.com/apache/struts/compare/STRUTS_6_1_1...STRUTS_6_1_2
struts
- Struts 6.1.1
Published by lukaszlenart almost 2 years ago
What's Changed
- WW-5219 Moves TestNG related classes into TestNG plugin by @lukaszlenart in https://github.com/apache/struts/pull/594
- WW-5220 Moves JUnit related test into the JUnit plugin by @lukaszlenart in https://github.com/apache/struts/pull/595
- WW-5184 - Add optional parameter value check to ParametersInterceptor by @brianandle in https://github.com/apache/struts/pull/559
- [WW-5213] Upgrades javax.el to 3.0.1-b12 by @lukaszlenart in https://github.com/apache/struts/pull/596
- [WW-5226] Upgrade weld-core to version 2.4.8.Final by @lukaszlenart in https://github.com/apache/struts/pull/597
- [WW-5227] Upgrades Log4j to version 2.19.0 by @lukaszlenart in https://github.com/apache/struts/pull/598
- [WW-5229] Upgrades Spring to version 5.3.23 by @lukaszlenart in https://github.com/apache/struts/pull/599
- [WW-5228] Upgrades OWASP dependency-check-maven to version 7.2.0 by @lukaszlenart in https://github.com/apache/struts/pull/600
- [WW-5231] Upgrades apache-rat-plugin to version 0.15 by @lukaszlenart in https://github.com/apache/struts/pull/601
- [WW-5232] Introduces GH Actions build instead of using Travis by @lukaszlenart in https://github.com/apache/struts/pull/602
- Replaces Travis badge with GH Actions badge by @lukaszlenart in https://github.com/apache/struts/pull/603
- [WW-5234] Improves DTD definitions to use proper URL by @lukaszlenart in https://github.com/apache/struts/pull/604
- [WW-5232] Applies proper coverage settings for Jacoco plugin and Sonar by @lukaszlenart in https://github.com/apache/struts/pull/605
- [WW-5235] Uses debug log level when setting expression max length to avoid cluttering logs by @lukaszlenart in https://github.com/apache/struts/pull/606
- [WW-5184] Uses debug log level when parameter value was not accepted by @lukaszlenart in https://github.com/apache/struts/pull/607
- WW-3691 Converts BackgroundProcess into interface and uses Executor to execute BackgroundProcess by @lukaszlenart in https://github.com/apache/struts/pull/609
- [WW-5241] Fixes issue with includeParams=all when using exec & wait by @lukaszlenart in https://github.com/apache/struts/pull/611
- [WW-5242] Marks struts.mapper.action.prefix.crossNamespaces as deprecated by @lukaszlenart in https://github.com/apache/struts/pull/613
- [WW-5244] Upgrades commons-text to version 1.10.0 by @lukaszlenart in https://github.com/apache/struts/pull/614
- [WW-5245] Upgrades Jackson Databind to version 2.13.4.2 by @lukaszlenart in https://github.com/apache/struts/pull/618
- [WW-2815] Refactors XStreamHandler to allow to provide a custom configuration by @lukaszlenart in https://github.com/apache/struts/pull/615
- [WW-5230] Upgrades OGNL to version 3.3.4 by @lukaszlenart in https://github.com/apache/struts/pull/619
- [WW-3529] Fixes usage of RegEx related characters in named pattern by @lukaszlenart in https://github.com/apache/struts/pull/620
- [WW-3737] Allows to define a custom separator used to split patterns by @lukaszlenart in https://github.com/apache/struts/pull/621
- [WW-5133] Drops labelposition attribute by @lukaszlenart in https://github.com/apache/struts/pull/622
- [WW-3725] Removes unused template by @lukaszlenart in https://github.com/apache/struts/pull/623
- [WW-5137] Removes deprecated class attribute by @lukaszlenart in https://github.com/apache/struts/pull/624
- [WW-4173] Adds support to disable processing a given interceptor by @lukaszlenart in https://github.com/apache/struts/pull/625
- [WW-4440] Adds basic README.md to all submodules by @lukaszlenart in https://github.com/apache/struts/pull/627
- [WW-4692] Extracts Url encoder/decoder into dedicated interfaces/classes by @lukaszlenart in https://github.com/apache/struts/pull/626
- [WW-5252] Disables parsing external entities by @lukaszlenart in https://github.com/apache/struts/pull/628
- [WW-5255] Fixes <s:script/> and <s:link/> and uses them across tags by @lukaszlenart in https://github.com/apache/struts/pull/629
- [WW-4514] Fixes building query string with empty parameters by @lukaszlenart in https://github.com/apache/struts/pull/630
- [WW-5240] Uses doubleOn* attributes in the template by @lukaszlenart in https://github.com/apache/struts/pull/631
- [WW-5257] Cleans up template by @lukaszlenart in https://github.com/apache/struts/pull/632
- [WW-5258] Upgrades Struts Annotations to version 1.0.8 by @lukaszlenart in https://github.com/apache/struts/pull/633
- [WW-5259] Extracts UrlHelper#parseQueryString into a dedicated bean by @lukaszlenart in https://github.com/apache/struts/pull/634
- [WW-4173] Introduces a dedicated interface to allow conditionally disabling a given interceptor by @lukaszlenart in https://github.com/apache/struts/pull/635
- [WW-5260] Introduces a constant to set submitUnchecked attribute of checkbox tag globally by @lukaszlenart in https://github.com/apache/struts/pull/636
New Contributors
- @brianandle made their first contribution in https://github.com/apache/struts/pull/559
Staging Maven repo
https://repository.apache.org/content/groups/staging/
Standalone artifacts
https://dist.apache.org/repos/dist/dev/struts/6.1.1/
Release notes
https://cwiki.apache.org/confluence/display/WW/Version+Notes+6.1.1
Full Changelog: https://github.com/apache/struts/compare/STRUTS_6_0_3...STRUTS_6_1_1
struts
- Struts 6.0.3
Published by lukaszlenart about 2 years ago
What's Changed
- Add async and velocity plugin to bom by @tobiasstadler in https://github.com/apache/struts/pull/568
- [WW-5191] Fixes placement of maxLength and minLength attributes in <s:textarea/> tag by @lukaszlenart in https://github.com/apache/struts/pull/572
- [WW-5187] Comments out Velocity based PageFilter by @lukaszlenart in https://github.com/apache/struts/pull/570
- [WW-5185] Reintroduces proper implementation of Tiles resource to support wildcard matching of Tiles definitions by @lukaszlenart in https://github.com/apache/struts/pull/566
- [WW-5188] Replaces since 2.6 with 6.0 by @lukaszlenart in https://github.com/apache/struts/pull/569
- WW-5197 Adds support for java.sql.Date by @tobiasstadler in https://github.com/apache/struts/pull/574
- [WW-5201] Upgrades log4j2 to version 2.18.0 by @lukaszlenart in https://github.com/apache/struts/pull/575
- [WW-5193] Uses proper org.hibernate.validator groupId and upgrade to version 6.1.3.Final by @lukaszlenart in https://github.com/apache/struts/pull/576
- WW-5202 Update jasperreports to 6.19.1 and exclude optional itext from jasperreports by @sepe81 in https://github.com/apache/struts/pull/578
- [WW-5190] Fixes StackOverflowException when dispatching request by @lukaszlenart in https://github.com/apache/struts/pull/571
- [WW-5192] Fixes broken radio tag when using with enums by @lukaszlenart in https://github.com/apache/struts/pull/577
- [WW-5204] Upgrades OGNL to version 3.3.3 by @lukaszlenart in https://github.com/apache/struts/pull/579
- Update maven wrapper to 3.8.6 by @sepe81 in https://github.com/apache/struts/pull/582
- WW-5208 Update hibernate-validator to 6.2.4 by @sepe81 in https://github.com/apache/struts/pull/583
- [WW-5205] - Reverting injection refactor of internal bean by @rproserpio in https://github.com/apache/struts/pull/580
- Add openjdk17 to build, remove oraclejdk9 (EOL) and switch from oraclejdk to openjdk to fix Travis CI build by @sepe81 in https://github.com/apache/struts/pull/584
- Update maven-surefire-plugin to 3.0.0-M7 by @sepe81 in https://github.com/apache/struts/pull/587
- [WW-5207] Uses ASM 9 by default by @lukaszlenart in https://github.com/apache/struts/pull/586
- [WW-5203] Re-builds policy string on each call by @lukaszlenart in https://github.com/apache/struts/pull/588
- [WW-5173] - Attempt to fix DI behaviour for custom cache factories by @JCgH4164838Gh792C124B5 in https://github.com/apache/struts/pull/573
- Update maven-enforcer-plugin to 3.1.0 by @sepe81 in https://github.com/apache/struts/pull/591
- [WW-5215] Checks if session was already created before applying CSP settings by @lukaszlenart in https://github.com/apache/struts/pull/590
- [WW-5212] Upgrades to Spring 5.3.22 by @lukaszlenart in https://github.com/apache/struts/pull/592
- [WW-5218] Allows to disable CSP related interceptors by @lukaszlenart in https://github.com/apache/struts/pull/593
New Contributors
- @tobiasstadler made their first contribution in https://github.com/apache/struts/pull/568
- @rproserpio made their first contribution in https://github.com/apache/struts/pull/580
Staging Maven repo
https://repository.apache.org/content/groups/staging/
Standalone artifacts
https://dist.apache.org/repos/dist/dev/struts/6.0.3/
Release notes
https://cwiki.apache.org/confluence/display/WW/Version+Notes+6.0.3
Full Changelog: https://github.com/apache/struts/compare/STRUTS_6_0_0...STRUTS_6_0_3
struts
- Struts 6.0.0
Published by lukaszlenart over 2 years ago
What's Changed
- upgrade Felix m-bundle-p: reproducible builds by @hboutemy in https://github.com/apache/struts/pull/555
- Bump junit from 4.13 to 4.13.1 by @dependabot in https://github.com/apache/struts/pull/547
- [WW-5182] Upgrade to Servlet API 3.1 by @lukaszlenart in https://github.com/apache/struts/pull/550
- [WW-5181] Blocks permanently access to static methods by @lukaszlenart in https://github.com/apache/struts/pull/549
- Bump xercesImpl from 2.12.0 to 2.12.2 by @dependabot in https://github.com/apache/struts/pull/551
- Potential expression cache enhancement for 2.6 series by @JCgH4164838Gh792C124B5 in https://github.com/apache/struts/pull/528
- Basic LocalDateTime support by @gregh3269 in https://github.com/apache/struts/pull/532
- [WW-5165] Upgrades Spring to version 5.3.20 by @lukaszlenart in https://github.com/apache/struts/pull/552
- [WW-5179] Set default value of struts.ognl.expressionMaxLength to 256 by @lukaszlenart in https://github.com/apache/struts/pull/553
- Add basic LocalDateTime support WW-5175 by @gregh3269 in https://github.com/apache/struts/pull/554
- [WW-5168] Support submit unchecked in Javatemplates and fixes logic for FTL template by @lukaszlenart in https://github.com/apache/struts/pull/531
- [WW-5016] Adds support for LocalDate and adjusts tests to use the new Java 8 API by @lukaszlenart in https://github.com/apache/struts/pull/529
- Update mvnw to 3.1.0 and migrate from takari to apache by @sepe81 in https://github.com/apache/struts/pull/516
- [WW-5161] Update spring to 4.3.30 by @sepe81 in https://github.com/apache/struts/pull/517
- upgrade Felix maven-bundle-plugin to 5.1.3 by @hboutemy in https://github.com/apache/struts/pull/518
- upgrade maven-war-plugin to 3.3.1 by @hboutemy in https://github.com/apache/struts/pull/519
- REST Showcase fix for broken JSPs using S2 link tags by @JCgH4164838Gh792C124B5 in https://github.com/apache/struts/pull/520
- Update log4j to 2.17.1 to address CVE-2021-44832. by @Chromico in https://github.com/apache/struts/pull/521
- [WW-4792] Uses proper names for constants by @lukaszlenart in https://github.com/apache/struts/pull/522
- [WW-5117] Evaluates dynamic attributes - cherrypick by @lukaszlenart in https://github.com/apache/struts/pull/525
- [WW-5022] Sets escapeHtmlBody to false by default and defines a new flag by @lukaszlenart in https://github.com/apache/struts/pull/523
- [WW-5112] Reduces logging in logic around missing resource key by @lukaszlenart in https://github.com/apache/struts/pull/527
- [WW-5115] Reduces logging for ignored DMI related params when DMI is disabled by @lukaszlenart in https://github.com/apache/struts/pull/526
- WW-4558 contentType override ignored for JSONInterceptor by @victorsosa in https://github.com/apache/struts/pull/87
- WW-4634 Centre alignment doesn't seem to work in Velocity tags by @victorsosa in https://github.com/apache/struts/pull/95
- add allowed methods to handleUnknownAction by @justinjmiller in https://github.com/apache/struts/pull/99
- WW-4650 Json deserialization does not work in 2.5.1 by @victorsosa in https://github.com/apache/struts/pull/103
- sync up execution ids with top-level Apache pom, otherwise the sources are deployed twice during release by @pbruski in https://github.com/apache/struts/pull/101
- action parameters should be included when building the URL to action by @pbruski in https://github.com/apache/struts/pull/102
- WW-4652 fixed a concurrency issue in addDefaultResourceBundle by @pbruski in https://github.com/apache/struts/pull/106
- WW-4572 Http parameters by @lukaszlenart in https://github.com/apache/struts/pull/58
- WW-4638 - TestNG 6.9.10 dependency error by @victorsosa in https://github.com/apache/struts/pull/98
- Change to the documentation by @andrea-ligios in https://github.com/apache/struts/pull/107
- Fix freemaker error in checkbox.ftl of css_xhtml template by @tiv-source in https://github.com/apache/struts/pull/109
- [WW-4620] Improve XWorkListPropertyAccessor to against DOS attack by @quaff in https://github.com/apache/struts/pull/105
- updated javadoc after changing to enum by @sdutry in https://github.com/apache/struts/pull/110
- replaced String constants for marking status with enum by @sdutry in https://github.com/apache/struts/pull/111
- WW-4690 added version to jshint-maven-plugin by @sdutry in https://github.com/apache/struts/pull/112
- ConversionErrorInterceptor to extend MethodFilterIntercept by @gregh3269 in https://github.com/apache/struts/pull/108
- WW-4636 - File upload error message always in default language by @aleksandr-m in https://github.com/apache/struts/pull/113
- Virtual file representation by @lukaszlenart in https://github.com/apache/struts/pull/114
- WW-4737 Properly handle arrays containing nulls by @ThrawnCA in https://github.com/apache/struts/pull/115
- [WW-4694] annotation processing improved by @yasserzamani in https://github.com/apache/struts/pull/117
- [WW-4528] handling ChainingInterceptor excludes and includes lists by @yasserzamani in https://github.com/apache/struts/pull/116
- [WW-4741] Do not force session creation on locale read operation by @yasserzamani in https://github.com/apache/struts/pull/119
- WW-4753: Injectable context by @lukaszlenart in https://github.com/apache/struts/pull/120
- WW-4714: Localized bean by @lukaszlenart in https://github.com/apache/struts/pull/121
- WW-4757: LocaleProvider factory by @lukaszlenart in https://github.com/apache/struts/pull/122
- WW-4756: Introduce TextFactoryProvider by @lukaszlenart in https://github.com/apache/struts/pull/123
- WW-4744: AnnotationUtils supports non-public methods by @yasserzamani in https://github.com/apache/struts/pull/124
- WW-4578: Multidimensional validation by @lukaszlenart in https://github.com/apache/struts/pull/128
- WW-4780 : upgraded version of log4j2 to 2.8.2 by @sdutry in https://github.com/apache/struts/pull/132
- WW-4210: Type conversion class by @lukaszlenart in https://github.com/apache/struts/pull/131
- WW-3952: Credit card validator by @lukaszlenart in https://github.com/apache/struts/pull/130
- WW-4749: Buffer/Flush behaviour in FreemarkerResult by @lukaszlenart in https://github.com/apache/struts/pull/134
- WW-4105 Unwraps Spring proxy in actions chain by @yasserzamani in https://github.com/apache/struts/pull/135
- WW-4762: Default provider by @lukaszlenart in https://github.com/apache/struts/pull/137
- WW-3171 WW-3650 WW-4581: Locale aware converters by @lukaszlenart in https://github.com/apache/struts/pull/138
- WW-4800 Executes aspects when chaining AOPed actions by @yasserzamani in https://github.com/apache/struts/pull/139
- WW-4801 Only one hidden field per checkboxlist. by @gregh3269 in https://github.com/apache/struts/pull/140
- WW-4805 Blocks ognl access to class members of Spring proxy by @yasserzamani in https://github.com/apache/struts/pull/142
- WW-4794 Fixes wrapField's where clause by @yasserzamani in https://github.com/apache/struts/pull/143
- WW-4744 WW-4694 Removes annotation search to commons lang 3.6 by @yasserzamani in https://github.com/apache/struts/pull/144
- add constant to control proxy member access by @aleksandr-m in https://github.com/apache/struts/pull/146
- WW-4821 Upgrade Commons IO to 2.5 by @sdutry in https://github.com/apache/struts/pull/149
- WW-4819 fixed commons-collections groupId in dependency management by @sdutry in https://github.com/apache/struts/pull/150
- WW-4818 change default Multipart validation regex to comply with RFC1341 by @sdutry in https://github.com/apache/struts/pull/151
- WW-4826 upgrade to ASM version 5.2 by @sdutry in https://github.com/apache/struts/pull/152
- WW-4808: Multiple suffixes by @lukaszlenart in https://github.com/apache/struts/pull/148
- WW-4831 properly convert nulls in arrays by @ThrawnCA in https://github.com/apache/struts/pull/154
- WW-4834 Improve RegEx used to validate URLs by @sdutry in https://github.com/apache/struts/pull/156
- WW-4827 Not fully initialized ObjectFactory tries to create beans by @aleksandr-m in https://github.com/apache/struts/pull/153
- WW-4835: Configurable handlers by @lukaszlenart in https://github.com/apache/struts/pull/158
- WW-4834 fixed faulty regex by @sdutry in https://github.com/apache/struts/pull/157
- WW-4840 Build Fails Due to Unused com.sun Import by @swiftelan in https://github.com/apache/struts/pull/161
- WW-4839 JakartaStreamMultiPartRequest Should Honor "struts.multipart.… by @swiftelan in https://github.com/apache/struts/pull/160
- return request HTTP method to fix problem for portlets with multipart validation by @pheaber in https://github.com/apache/struts/pull/162
- WW-4843 DefaultUrlHelper().buildUrl() not outputting port when used as parameter by @aleksandr-m in https://github.com/apache/struts/pull/163
- WW-4846 Does not traverse/include proxy info in JSONResult by @yasserzamani in https://github.com/apache/struts/pull/164
- WW-4851 Upgrade to Log4j2 2.9.0 by @sdutry in https://github.com/apache/struts/pull/166
- Fixes a snippet typo by @yasserzamani in https://github.com/apache/struts/pull/170
- WW-4849: Initializable interface by @lukaszlenart in https://github.com/apache/struts/pull/168
- remove an obsolete TODO comment by @pengyunie in https://github.com/apache/struts/pull/171
- WW-4034 Allows to use custom JSONwriter by @yasserzamani in https://github.com/apache/struts/pull/167
- Site generation by @lukaszlenart in https://github.com/apache/struts/pull/174
- WW-4877: adds missing header with license by @lukaszlenart in https://github.com/apache/struts/pull/175
- WW-4862: Multipart regex by @lukaszlenart in https://github.com/apache/struts/pull/176
- WW-4884: Allow define just a TextProvider by @lukaszlenart in https://github.com/apache/struts/pull/178
- WW-4846 Adds unit tests by @yasserzamani in https://github.com/apache/struts/pull/180
- WW-4869 Fixes JarEntryRevision by @yasserzamani in https://github.com/apache/struts/pull/172
- WW-4888 add escaping possibilities to text-tag by @sdutry in https://github.com/apache/struts/pull/181
- WW-4871 Fixes StringConverter and improves it's tests by @yasserzamani in https://github.com/apache/struts/pull/173
- WW-4713 Added deprecation warnings as preparation to drop searchValue… by @sdutry in https://github.com/apache/struts/pull/184
- WW-4876 WW-4841 Parses validators after all injections done by @yasserzamani in https://github.com/apache/struts/pull/185
- Pimp my struts by @lukaszlenart in https://github.com/apache/struts/pull/183
- WW-4892 WW-4893: Use Jackson to handle JSON request by @lukaszlenart in https://github.com/apache/struts/pull/187
- changed Map iterations to use entrySet when both key and value are used by @sdutry in https://github.com/apache/struts/pull/186
- WW-4900 Makes BackgroundProcess transient by @yasserzamani in https://github.com/apache/struts/pull/191
- WW-4901 Decouples from URL.openConnection implementation of container by @yasserzamani in https://github.com/apache/struts/pull/190
- WW-4873 Makes ActionInvocation not serializable and InvocationSessionStore$InvocationContext transient by @yasserzamani in https://github.com/apache/struts/pull/192
- Increases the coverage of DefaultActionInvocation by @yasserzamani in https://github.com/apache/struts/pull/193
- used char instead of a single character string by @sdutry in https://github.com/apache/struts/pull/194
- WW-4903: fixes PrefixBasedActionProxyFactory by @lukaszlenart in https://github.com/apache/struts/pull/195
- Minor Formatting changes by @sdutry in https://github.com/apache/struts/pull/197
- add tests to UIBean class by @sdutry in https://github.com/apache/struts/pull/198
- WW-4905: Allows Initializable interface on implementing class instead of interface by @lukaszlenart in https://github.com/apache/struts/pull/196
- fix conversion by annotation and WW-4906 by @yasserzamani in https://github.com/apache/struts/pull/199
- WW-4907 support JSR 303 Validation Groups in BeanValidation-Plugin by @HedjuHor in https://github.com/apache/struts/pull/200
- WW-4909: Renames a constant and adds a test by @lukaszlenart in https://github.com/apache/struts/pull/202
- add tests for initializable to cover more scopes by @yasserzamani in https://github.com/apache/struts/pull/203
- WW-4891 Debug tag should not display anything when not in dev mode by @HedjuHor in https://github.com/apache/struts/pull/201
- Initial test dedicated for the DefaultUnknownHandlerManager by @zalsaeed in https://github.com/apache/struts/pull/205
- WW-4899: upgrade Spring by @lukaszlenart in https://github.com/apache/struts/pull/189
- WW-4912: scan package-info and class at the same time by @lukaszlenart in https://github.com/apache/struts/pull/206
- WW-4741: Do not create session by @lukaszlenart in https://github.com/apache/struts/pull/207
- WW-4921 initialize session like WW-3442 by @yasserzamani in https://github.com/apache/struts/pull/214
- WW-4920 fix java.net.JarURLConnection#parseSpecs by @yasserzamani in https://github.com/apache/struts/pull/211
- WW-4923 Null check to avoid NPE when not passing a JDBC connection by @zepernick in https://github.com/apache/struts/pull/212
- WW-4922: Jackson XML by @lukaszlenart in https://github.com/apache/struts/pull/210
- WW-4910 Align OptGroup with Select by @quaff in https://github.com/apache/struts/pull/204
- WW-4875 Add ability to use Java based configuration by @aleksandr-m in https://github.com/apache/struts/pull/177
- WW-4915 Replace deprecated commons-lang3 classes by @aleksandr-m in https://github.com/apache/struts/pull/208
- WW-685 Add generic type conversion error message by @aleksandr-m in https://github.com/apache/struts/pull/215
- WW-4874 Introduces Async plugin (adds support for async methods) by @yasserzamani in https://github.com/apache/struts/pull/179
- WW-4928 Using the same default value delimiter by @aleksandr-m in https://github.com/apache/struts/pull/217
- WW-4865: Add "requiredValue" parameter to Checkbox Struts Tag by @burtonrhodes in https://github.com/apache/struts/pull/169
- Upgrade to Java EE5 by @lukaszlenart in https://github.com/apache/struts/pull/216
- Immutable context by @lukaszlenart in https://github.com/apache/struts/pull/125
- WW-4937 Add SortedSet support to JSON plugin by @loomchild in https://github.com/apache/struts/pull/219
- WW-4887 upgrade Tiles to 3.0.8 by @yasserzamani in https://github.com/apache/struts/pull/220
- drop searchValueStack attribute from the s:text tag by @sdutry in https://github.com/apache/struts/pull/222
- drop deprecated logging layer by @sdutry in https://github.com/apache/struts/pull/223
- WW-4932 honor .properties file before the generic parametrics by @yasserzamani in https://github.com/apache/struts/pull/221
- WW-4779 Remove profiling layer by @sdutry in https://github.com/apache/struts/pull/224
- update commons-beanutils dependency to version 1.9.3 by @sdutry in https://github.com/apache/struts/pull/225
- WW-4931 update Apache FreeMarker to version 2.3.28 by @sdutry in https://github.com/apache/struts/pull/228
- WW-4792 Removes deprecated XWork constants by @sdutry in https://github.com/apache/struts/pull/227
- WW-4769 add unit tests to verify immutable collections by @sullis in https://github.com/apache/struts/pull/232
- add 'sun.misc.' to struts.excludedPackageNames by @sullis in https://github.com/apache/struts/pull/231
- add 'com.opensymphony.xwork2.ognl.' to excludedPackageNames by @sullis in https://github.com/apache/struts/pull/239
- add unit test for Dispatcher init() by @sullis in https://github.com/apache/struts/pull/236
- fix typos in README by @ThrawnCA in https://github.com/apache/struts/pull/240
- Fix logging messages by @benelog in https://github.com/apache/struts/pull/241
- Better logging message (for WW-4954) by @aleksandr-m in https://github.com/apache/struts/pull/246
- WW-4954 Moves XWorkList out of util package by @lukaszlenart in https://github.com/apache/struts/pull/249
- Fixed grammar by @zmacomber in https://github.com/apache/struts/pull/251
- Fix typo in a local variable naming by @thinkshihang in https://github.com/apache/struts/pull/253
- increase test coverage by @yasserzamani in https://github.com/apache/struts/pull/254
- WW-4967 Jackson 2.9.6 by @sullis in https://github.com/apache/struts/pull/237
- Minor config fixes for the Showcase Application: by @JCgH4164838Gh792C124B5 in https://github.com/apache/struts/pull/255
- WW-4963 Implement new Aware interfaces by @lukaszlenart in https://github.com/apache/struts/pull/252
- [WW-4973] Upgrades to OGNL 3.2.8 by @lukaszlenart in https://github.com/apache/struts/pull/258
- Proposed unit test improvement for Windows, plus one additional minor change by @JCgH4164838Gh792C124B5 in https://github.com/apache/struts/pull/261
- Update maven-wrapper to 3.5.4 and add maven-wrapper.jar to .gitignore by @sepe81 in https://github.com/apache/struts/pull/266
- Update Struts 2.6.0 build with some newer (compatible) library versions. by @JCgH4164838Gh792C124B5 in https://github.com/apache/struts/pull/265
- Remove dependencies cglib and cglib-nodep by @sepe81 in https://github.com/apache/struts/pull/268
- WW-4930 Add constant to enable smi inheritance by @pHeidelbach in https://github.com/apache/struts/pull/267
- WW-4845 pass all current tests with java 9 by @yasserzamani in https://github.com/apache/struts/pull/262
- Refactor environment dependant tests and replace deprecated classes by @sepe81 in https://github.com/apache/struts/pull/272
- WW-4982 Remove the deprecated JsonLibHandler and json-lib dependency by @sepe81 in https://github.com/apache/struts/pull/273
- [WW-4977] Fixing flaky test in Jsr168DispatcherTest and Jsr286DispatcherTest. by @OrDTesters in https://github.com/apache/struts/pull/263
- Update various plugin dependencies by @sepe81 in https://github.com/apache/struts/pull/269
- Update maven bundle plugin by @sepe81 in https://github.com/apache/struts/pull/274
- [WW-4981] Adds support for JDK11 by @lukaszlenart in https://github.com/apache/struts/pull/270
- WW-4983 Set private access modifier for HttpParameters.toMap by @sepe81 in https://github.com/apache/struts/pull/276
- Fix: Resources should be closed by @sepe81 in https://github.com/apache/struts/pull/277
- Remove unused private methods by @sepe81 in https://github.com/apache/struts/pull/278
- WW-4985 Update persistence-api from 1.0 to 1.0.2 by @sepe81 in https://github.com/apache/struts/pull/279
- Enhance after_success for Travis CI by @sepe81 in https://github.com/apache/struts/pull/280
- Minor update to Struts 2.6 SecurityMemberAccess. by @JCgH4164838Gh792C124B5 in https://github.com/apache/struts/pull/282
- Fix various sonar warnings for class ActionSupport by @sepe81 in https://github.com/apache/struts/pull/284
- Upgrade DWR from 1.x to 2.x by @JCgH4164838Gh792C124B5 in https://github.com/apache/struts/pull/283
- WW-4069 upgrade to DWR 3 with a showcase by @yasserzamani in https://github.com/apache/struts/pull/285
- WW-4987 Add list attributes to optgroup tag by @aleksandr-m in https://github.com/apache/struts/pull/286
- [WW-4889] Adds XML handler based on Apache Juneau by @lukaszlenart in https://github.com/apache/struts/pull/287
- [WW-4964] Drops duplicated import of utils.js by @lukaszlenart in https://github.com/apache/struts/pull/290
- [WW-4989] Uses JacksonXML handler a default handler for XML in the REST plugin by @lukaszlenart in https://github.com/apache/struts/pull/288
- Update Struts 2.6 to the latest OGNL 3.2.x version available. by @JCgH4164838Gh792C124B5 in https://github.com/apache/struts/pull/294
- [WW-4938] Uses container to create an instance of the class by @lukaszlenart in https://github.com/apache/struts/pull/295
- Updates and cleanup for some configuration-related items (2.6.x) by @JCgH4164838Gh792C124B5 in https://github.com/apache/struts/pull/292
- Enhancement for s:set tag to allow better tag body whitespace control. by @JCgH4164838Gh792C124B5 in https://github.com/apache/struts/pull/299
- [WW-4938] Reverts dropping injecting internal beans in Spring Factory by @lukaszlenart in https://github.com/apache/struts/pull/300
- [WW-4938] Adds missing test case and properly fixes injecting internal beans by @lukaszlenart in https://github.com/apache/struts/pull/302
- [WW-4975] Upgrades commons-fileupload to version 1.4 - Struts 2.6 by @lukaszlenart in https://github.com/apache/struts/pull/303
- Fix sonar warnings for DefaultTypeConverter by @sepe81 in https://github.com/apache/struts/pull/298
- introduce integration tests with minimum needed changes by @yasserzamani in https://github.com/apache/struts/pull/301
- [WW-4996] Refactor DefaultTypeConverterCreator to use ObjectFactory#buildConverter by @lukaszlenart in https://github.com/apache/struts/pull/297
- [WW-4972] Switches incompatible_improvements to VERSION_2_3_28 by @lukaszlenart in https://github.com/apache/struts/pull/289
- Update Embedded JSP Plugin (more current Juli/Jasper versions) by @JCgH4164838Gh792C124B5 in https://github.com/apache/struts/pull/307
- Equivalent to PR#309, but for the master (2.6.x) branch. by @JCgH4164838Gh792C124B5 in https://github.com/apache/struts/pull/311
- [WW-5001] Adds support for struts-conversion.properties files by @lukaszlenart in https://github.com/apache/struts/pull/313
- [WW-5007] Upgrades Jackson libraries to version 2.9.8 by @lukaszlenart in https://github.com/apache/struts/pull/319
- Fix for access issue for 2.6 discovered in WW-5004: by @JCgH4164838Gh792C124B5 in https://github.com/apache/struts/pull/320
- Upgrades OWASP dependency-check-plugin to version 4.0.2 by @lukaszlenart in https://github.com/apache/struts/pull/325
- Switch to Java 8 by @aleksandr-m in https://github.com/apache/struts/pull/312
- WW-5009 EmptyStackException in JSON plugin due to concurrency by @aleksandr-m in https://github.com/apache/struts/pull/329
- Update jenkins badge by @aleksandr-m in https://github.com/apache/struts/pull/331
- WW-5016 Support java8 date/time in date tag by @aleksandr-m in https://github.com/apache/struts/pull/330
- Improve SecurityMemberAccess by @aleksandr-m in https://github.com/apache/struts/pull/323
- WW-5020 delete deprecated sitegraph plugin by @yasserzamani in https://github.com/apache/struts/pull/332
- Fix 2.6 Showcase bean-validator Java 11 failures. by @JCgH4164838Gh792C124B5 in https://github.com/apache/struts/pull/335
- Fix for default (un-configured) allowStaticFieldAccess state, Showcase Application in 2.6.x by @JCgH4164838Gh792C124B5 in https://github.com/apache/struts/pull/334
- Upgrade SLF4J to 1.7.26 (WW-5023) by @JCgH4164838Gh792C124B5 in https://github.com/apache/struts/pull/337
- Update maven-wrapper to 0.5.3 and maven to 3.6.0 by @sepe81 in https://github.com/apache/struts/pull/338
- Forward-port fix for WW-5026 to 2.6 by @JCgH4164838Gh792C124B5 in https://github.com/apache/struts/pull/345
- Forward port fix for WW-5024 to 2.6: by @JCgH4164838Gh792C124B5 in https://github.com/apache/struts/pull/346
- Add common .gitignore patterns from gitignore.io by @sepe81 in https://github.com/apache/struts/pull/351
- WW-5011 use Tiles already provided URLApplicationResource by @yasserzamani in https://github.com/apache/struts/pull/352
- Update maven-wrapper to 0.5.5 and maven to 3.6.1 by @sepe81 in https://github.com/apache/struts/pull/359
- [WW-5034] Forward port - Minor enhancement/fix to AbstractLocalizedTextProvider: by @JCgH4164838Gh792C124B5 in https://github.com/apache/struts/pull/360
- Fix typo in MultiselectInterceptor javadoc by @sehaas in https://github.com/apache/struts/pull/363
- Defines a Docker build by @lukaszlenart in https://github.com/apache/struts/pull/364
- [WW-5038] Upgrades jackson-databind to version 2.9.9.3 by @lukaszlenart in https://github.com/apache/struts/pull/365
- Forward-port PR#354 from 2.5.x to 2.6.x (cherry-pick) by @JCgH4164838Gh792C124B5 in https://github.com/apache/struts/pull/368
- Forward-port PR#366 from 2.5.x to 2.6.x (cherry-pick) by @JCgH4164838Gh792C124B5 in https://github.com/apache/struts/pull/369
- Forward-port PR#367 from 2.5.x to 2.6.x (cherry-pick) by @JCgH4164838Gh792C124B5 in https://github.com/apache/struts/pull/370
- Update dependencies by @sepe81 in https://github.com/apache/struts/pull/374
- Remove duplicate attribute by @Scaralu in https://github.com/apache/struts/pull/375
- Add more consistency to code by @gabrielmcoelho in https://github.com/apache/struts/pull/377
- Proposed fix for WW-5022 (escape html tag body control flag) by @JCgH4164838Gh792C124B5 in https://github.com/apache/struts/pull/373
- WW-5045 Update jasperreports to 6.10.0 by @sepe81 in https://github.com/apache/struts/pull/379
- Fix xml configuration provider test by @sepe81 in https://github.com/apache/struts/pull/381
- WW-5048 Update various dependencies to newest version by @sepe81 in https://github.com/apache/struts/pull/382
- Fix incorrect encoding strings in FileUploadInterceptorTest (cherry-pick fix for 2.6.x) by @JCgH4164838Gh792C124B5 in https://github.com/apache/struts/pull/386
- Update maven-wrapper to 0.5.6 and maven to 3.6.3 by @sepe81 in https://github.com/apache/struts/pull/389
- Update OWASP dependency-check-maven to 5.2.4 by @sepe81 in https://github.com/apache/struts/pull/388
- WW-5050 cherry pick #371 and related commits by @yasserzamani in https://github.com/apache/struts/pull/390
- [WW-5003] Drops XWorkException and uses StrutsException instead by @lukaszlenart in https://github.com/apache/struts/pull/391
- [WW-5049] Velocity plugin by @lukaszlenart in https://github.com/apache/struts/pull/384
- Minor follow-up to WW-5050 changes to ContainerImpl by @JCgH4164838Gh792C124B5 in https://github.com/apache/struts/pull/392
- WW-5057 Showcase cleanup for 2.6 branch by @JCgH4164838Gh792C124B5 in https://github.com/apache/struts/pull/395
- debug docker by @yasserzamani in https://github.com/apache/struts/pull/396
- [WW-5054] debug=browser by @lukaszlenart in https://github.com/apache/struts/pull/393
- [WW-5047] Upgrades to VelocityEngine 2.1 and VelocityTools 3.0 by @lukaszlenart in https://github.com/apache/struts/pull/394
- Proposed implementation to address WW-5030. by @JCgH4164838Gh792C124B5 in https://github.com/apache/struts/pull/398
- WW5052 TypeConversionException instead StrutsException by @santosr09 in https://github.com/apache/struts/pull/399
- Proposed WW-5068 change by @JCgH4164838Gh792C124B5 in https://github.com/apache/struts/pull/403
- Cherry-Pick PR#404 into master by @JCgH4164838Gh792C124B5 in https://github.com/apache/struts/pull/409
- [WW-4043] Moves TestUtils into junit-plugin by @lukaszlenart in https://github.com/apache/struts/pull/408
- WW-4796 Rename springconstants to have a uniform naming pattern by @sdutry in https://github.com/apache/struts/pull/229
- [WW-5017] Drops deprecated Validation annotation as not needed by @lukaszlenart in https://github.com/apache/struts/pull/407
- [WW-5070] Adds more sophisticated logic to search for the Root by @lukaszlenart in https://github.com/apache/struts/pull/406
- [WW-5065] Defines a new flag to control appending params - cherry-pick by @lukaszlenart in https://github.com/apache/struts/pull/410
- Cherry-Pick PR#411 into master by @JCgH4164838Gh792C124B5 in https://github.com/apache/struts/pull/412
- Proposed WW-5074 Fix by @JCgH4164838Gh792C124B5 in https://github.com/apache/struts/pull/413
- [WW-4789] [WW-3788] ActionContext refactoring by @lukaszlenart in https://github.com/apache/struts/pull/397
- Tiny improvements by @lukaszlenart in https://github.com/apache/struts/pull/414
- Minor post WW-5030 Cleanup for 2.6.x by @JCgH4164838Gh792C124B5 in https://github.com/apache/struts/pull/415
- Cherry-pick PR#416 and PR#417 from 2.5.x into 2.6.x by @JCgH4164838Gh792C124B5 in https://github.com/apache/struts/pull/418
- [WW-5077] Uses better logging to inform user about excluded params (cherry-pick) by @lukaszlenart in https://github.com/apache/struts/pull/420
- [WW-5081] Makes textarea compatible with W3C by @lukaszlenart in https://github.com/apache/struts/pull/423
- [WW-5080] Defines a new result type plain to use directly with Java code by @lukaszlenart in https://github.com/apache/struts/pull/422
- WW-5083: Adds support for Fetch Metadata in Struts2. by @salcho in https://github.com/apache/struts/pull/426
- WW-5083 PR#426 follow-up. by @JCgH4164838Gh792C124B5 in https://github.com/apache/struts/pull/428
- WW-5085: Add Cross-Origin Opener Policy (COOP) and Cross-Origin Embedder Policy (COEP) support by @gchatz22 in https://github.com/apache/struts/pull/432
- WW-5075 Fixes for OSGi plugin in 2.6.x by @JCgH4164838Gh792C124B5 in https://github.com/apache/struts/pull/433
- WW-5084: Add Content Security Policy support to Struts by @salcho in https://github.com/apache/struts/pull/430
- [WW-5088] Empty file upload, storeLocation null gives wrong error message. by @gregh3269 in https://github.com/apache/struts/pull/435
- WW-5087 handle Parameter.Empty properly by @yasserzamani in https://github.com/apache/struts/pull/439
- Refactoring Nonce Propagation in Struts Tags for CSP by @eozmen410 in https://github.com/apache/struts/pull/434
- WW-5088: Fix empty file upload with commons-fileupload:1.4. by @pys-arhs in https://github.com/apache/struts/pull/440
- WW-5088: Integration test for empty file upload. by @pys-arhs in https://github.com/apache/struts/pull/441
- Update RestfulActionMapper.java by @peutch in https://github.com/apache/struts/pull/443
- Update Restful2ActionMapper.java by @peutch in https://github.com/apache/struts/pull/444
- Fix meaningless close by @lcc in https://github.com/apache/struts/pull/445
- [WW-5098] Upgrade asm to 9.0 by @sepe81 in https://github.com/apache/struts/pull/448
- [WW-5095] Cherry picks changes from 2-5-x branch by @lukaszlenart in https://github.com/apache/struts/pull/447
- [WW-5096] Fix StaticParametersInterceptor param overwrite by @yasserzamani in https://github.com/apache/struts/pull/449
- [WW-3730] Avoids conversion to String[] of passed params by @lukaszlenart in https://github.com/apache/struts/pull/450
- [WW-4929] Adds support for Accept-Language header when looking up Locale by @lukaszlenart in https://github.com/apache/struts/pull/451
- [WW-5078] Removes support for DTDs by @lukaszlenart in https://github.com/apache/struts/pull/452
- WW-5093 - Improve tag var attribute comments. by @JCgH4164838Gh792C124B5 in https://github.com/apache/struts/pull/454
- sort getMethods for deterministic iteration order by @Yilinwang in https://github.com/apache/struts/pull/455
- [WW-3877] Drops altSyntax option by @lukaszlenart in https://github.com/apache/struts/pull/453
- [WW-5100] Applies encoding to response as well by @lukaszlenart in https://github.com/apache/struts/pull/456
- [WW-3877] Removes comments about altSyntax by @lukaszlenart in https://github.com/apache/struts/pull/459
- [WW-5063] Adds null check for ActionInvocation by @lukaszlenart in https://github.com/apache/struts/pull/461
- Initial attempt to address WW-5101 by @JCgH4164838Gh792C124B5 in https://github.com/apache/struts/pull/460
- Proposed TextProvider feature addition (and cleanup) by @JCgH4164838Gh792C124B5 in https://github.com/apache/struts/pull/467
- [WW-4742] Stops evaluating default message as a OGNL expression by @lukaszlenart in https://github.com/apache/struts/pull/463
- [WW-5000] Extracts string literals as constants by @lukaszlenart in https://github.com/apache/struts/pull/464
- [WW-5099] Upgrades JFreeChart to version 1.5.1 by @lukaszlenart in https://github.com/apache/struts/pull/465
- [WW-5056] Accepts dashes in param names by @lukaszlenart in https://github.com/apache/struts/pull/466
- [WW-5021] Introduces a new constant to allow define a path to static content by @lukaszlenart in https://github.com/apache/struts/pull/462
- [WW-4799] Adding struts.date.format as a conversion format for DateConverter by @lukaszlenart in https://github.com/apache/struts/pull/468
- [WW-5113] [WW-5114] Drops deprecated config options by @lukaszlenart in https://github.com/apache/struts/pull/470
- WW-5116: Fix wrong regex range by @Marcono1234 in https://github.com/apache/struts/pull/471
- WW-2411 Add a maxlength attribute to the textarea tag by @kerttup in https://github.com/apache/struts/pull/474
- [WW-5119] Fix: remove contention during localized text lookup (JDK 1.8+) by @davoustp in https://github.com/apache/struts/pull/476
- [WW-5121] Fix: remove contention during Scope.SINGLETON injection by @davoustp in https://github.com/apache/struts/pull/478
- [WW-5117] Keeps Action always on top of the ValueStack by @lukaszlenart in https://github.com/apache/struts/pull/480
- [WW-5125] use .get(...) instead of [...] for fieldErrors by @yasserzamani in https://github.com/apache/struts/pull/487
- [WW-5126] use == instead of .equals in ModelDrivenInterceptor by @yasserzamani in https://github.com/apache/struts/pull/486
- add 'java.lang.Thread' to struts.excludedClasses by @sullis in https://github.com/apache/struts/pull/488
- Fix NPE in XmlConfigurationProvider.java by @containerAnalyzer in https://github.com/apache/struts/pull/491
- [WW-5132] [WW-5123] labelposition - cherry-pick by @lukaszlenart in https://github.com/apache/struts/pull/492
- [WW-5136] Makes class attribute deprecated - cherry-pick by @lukaszlenart in https://github.com/apache/struts/pull/494
- [WW-5073] - simplify AbstractMatcher convertParam by @sdutry in https://github.com/apache/struts/pull/497
- [WW-5064] Move XWork Spring support into struts2-spring-plugin by @sdutry in https://github.com/apache/struts/pull/498
- [WW-5143] [WW-5142] Upgrades OVal to ver. 3.2.1 and upgrades XStream to ver 1.4.18 by @lukaszlenart in https://github.com/apache/struts/pull/499
- fixed flakiness in JacksonXmlHandlerTest.java by @FanYuliang in https://github.com/apache/struts/pull/500
- [WW-5129] Supports dynamic attributes in second control by @lukaszlenart in https://github.com/apache/struts/pull/502
- Add test codes to check the encoding of response by @powercomsmt in https://github.com/apache/struts/pull/505
- Cache all OGNL expressions (when enabled) irrespective of their execution status [Fixes WW-5147] by @davoustp in https://github.com/apache/struts/pull/504
- Fix flaky test testDynamicAttributesSupport. by @yyfMichaelYan in https://github.com/apache/struts/pull/506
- Update maven to 3.8.3 by @sepe81 in https://github.com/apache/struts/pull/508
- [WW-5148] Upgrade ASM to version 9.2 by @sepe81 in https://github.com/apache/struts/pull/509
- fix double evaluations... by @yasserzamani in https://github.com/apache/struts/pull/483
- WW-5124 - Proposed fix for Struts JSP tag behaviour with tag pooling (re-target to 2.6.x) by @JCgH4164838Gh792C124B5 in https://github.com/apache/struts/pull/501
- [WW-5151] Bump to 2.15.0 to fix log4j vulnerability by @cldrn in https://github.com/apache/struts/pull/511
- Update maven to 3.8.4 by @sepe81 in https://github.com/apache/struts/pull/512
- Update slf4j to 1.7.32 by @sepe81 in https://github.com/apache/struts/pull/513
- log4j 2.17.0 by @sullis in https://github.com/apache/struts/pull/514
New Contributors
- @dependabot made their first contribution in https://github.com/apache/struts/pull/547
- @Chromico made their first contribution in https://github.com/apache/struts/pull/521
- @justinjmiller made their first contribution in https://github.com/apache/struts/pull/99
- @tiv-source made their first contribution in https://github.com/apache/struts/pull/109
- @ThrawnCA made their first contribution in https://github.com/apache/struts/pull/115
- @pheaber made their first contribution in https://github.com/apache/struts/pull/162
- @pengyunie made their first contribution in https://github.com/apache/struts/pull/171
- @HedjuHor made their first contribution in https://github.com/apache/struts/pull/200
- @zalsaeed made their first contribution in https://github.com/apache/struts/pull/205
- @zepernick made their first contribution in https://github.com/apache/struts/pull/212
- @burtonrhodes made their first contribution in https://github.com/apache/struts/pull/169
- @loomchild made their first contribution in https://github.com/apache/struts/pull/219
- @sullis made their first contribution in https://github.com/apache/struts/pull/232
- @zmacomber made their first contribution in https://github.com/apache/struts/pull/251
- @thinkshihang made their first contribution in https://github.com/apache/struts/pull/253
- @pHeidelbach made their first contribution in https://github.com/apache/struts/pull/267
- @OrDTesters made their first contribution in https://github.com/apache/struts/pull/263
- @sehaas made their first contribution in https://github.com/apache/struts/pull/363
- @Scaralu made their first contribution in https://github.com/apache/struts/pull/375
- @gabrielmcoelho made their first contribution in https://github.com/apache/struts/pull/377
- @santosr09 made their first contribution in https://github.com/apache/struts/pull/399
- @salcho made their first contribution in https://github.com/apache/struts/pull/426
- @gchatz22 made their first contribution in https://github.com/apache/struts/pull/432
- @eozmen410 made their first contribution in https://github.com/apache/struts/pull/434
- @pys-arhs made their first contribution in https://github.com/apache/struts/pull/440
- @peutch made their first contribution in https://github.com/apache/struts/pull/443
- @lcc made their first contribution in https://github.com/apache/struts/pull/445
- @Yilinwang made their first contribution in https://github.com/apache/struts/pull/455
- @kerttup made their first contribution in https://github.com/apache/struts/pull/474
- @containerAnalyzer made their first contribution in https://github.com/apache/struts/pull/491
- @FanYuliang made their first contribution in https://github.com/apache/struts/pull/500
- @powercomsmt made their first contribution in https://github.com/apache/struts/pull/505
- @yyfMichaelYan made their first contribution in https://github.com/apache/struts/pull/506
- @cldrn made their first contribution in https://github.com/apache/struts/pull/511
Full Changelog: https://github.com/apache/struts/compare/STRUTS_2_5_30...STRUTS_6_0_0
Staging Maven repo
https://repository.apache.org/content/groups/staging/
Standalone artifacts
https://dist.apache.org/repos/dist/dev/struts/6.0.0/
Release notes
https://cwiki.apache.org/confluence/display/WW/Version+Notes+6.0.0
Package Rankings
Top 3.61% on Repo1.maven.org
Badges
Extracted from project README
