What's Changed
- Bump to 6.2.6-SNAPSHOT by @jbonofre in #1961
- [6.2.x] Add more transport types to the denied list for JMX part 2 (#1972) by @cshannon in #1973
- Execute CI on activemq-5.19.x and activemq-6.2.x branches (6.2.x) by @jbonofre in #1958
- build(deps): bump log4j-version from 2.25.3 to 2.25.4 by @robertregina59 in #1993
- [6.2.x] Block the XBeanBrokerFactory by default inside VMTransportFactory (#2003) by @cshannon in #2010
- [6.2.x] Handle validation for Composite URIs without parens (#2004) by @cshannon in #2012
- [6.2.x] Disable the message servlet by default (#2000) by @cshannon in #2014
- [#2005] 6.2.x - Fix authorization check on removeDestination by @mattrpav in #2009
- [6.2.x] Remove "java.lang" package as a default allowed serializable package (#2026) by @cshannon in #2027
- Bump dependencies for CVE fixes on 6.2.x by @jbonofre in #2030
- Harden default broker and web console configuration (6.2.x backport) by @jbonofre in #2035
- build(deps): bump shiro-version from 2.1.0 to 2.2.0 (6.2.x backport) by @jbonofre in #2041
- [6.2.x] Harden web console and Jolokia access by default (#2025) by @jbonofre in #2037
- [6.2.x] Backport network flaky test improvements by @cshannon in #2045
- [6.2.x] Ensure connection info is processed before durable sync by @cshannon in #2048
New Contributors
- @robertregina59 made their first contribution in #1993
Full Changelog: activemq-6.2.5...activemq-6.2.6