github apache/karaf karaf-4.4.12
Apache Karaf 4.4.12

pre-release4 hours ago

What's Changed

  • [4.4.x] bump org.jline:jline from 3.30.9 to 3.30.11 by @dependabot[bot] in #2607
  • [4.4.x] bump org.codehaus.plexus:plexus-utils from 3.5.1 to 3.6.1 by @dependabot[bot] in #2606
  • [4.4.x] bump org.osgi:org.osgi.annotation.bundle from 1.1.0 to 1.1.1 by @dependabot[bot] in #2602
  • [4.4.x] bump redis.clients:jedis from 4.2.3 to 4.4.8 by @dependabot[bot] in #2604
  • [4.4.x] bump dawidd6/action-download-artifact from 20 to 21 by @dependabot[bot] in #2614
  • [4.4.x] bump jakarta.mail:jakarta.mail-api from 1.6.5 to 1.6.8 by @dependabot[bot] in #2608
  • [4.4.x] bump activemq.version from 5.19.1 to 5.19.6 by @dependabot[bot] in #2610
  • [4.4.x] bump camel.version from 3.6.0 to 3.22.4 by @dependabot[bot] in #2605
  • [4.4.x] bump javax.servlet:javax.servlet-api from 3.0.1 to 3.1.0 by @dependabot[bot] in #2601
  • [4.4.x] bump org.hibernate.orm:hibernate-core from 6.6.18.Final to 6.6.49.Final by @dependabot[bot] in #2599
  • [4.4.x] bump org.jline:jline from 3.30.11 to 3.30.12 by @dependabot[bot] in #2618
  • [4.4.x] bump jackson.version from 2.21.2 to 2.21.3 by @dependabot[bot] in #2616
  • [4.4.x] bump org.hibernate.orm:hibernate-core from 6.6.49.Final to 6.6.50.Final by @dependabot[bot] in #2633
  • [4.4.x] bump org.jline:jline from 3.30.12 to 3.30.13 by @dependabot[bot] in #2635
  • Downgrade to WebConsole MemoryUsage plugin to 1.0.10 by @jbonofre in #2638
  • [4.4.x] bump pax.logging.version from 2.3.3 to 2.3.4 by @dependabot[bot] in #2662
  • [4.4.x] bump asm.version from 9.9.1 to 9.10 by @dependabot[bot] in #2660
  • [4.4.x] bump slf4j.version from 2.0.17 to 2.0.18 by @dependabot[bot] in #2658
  • [4.4.x] bump log4j.version from 2.25.4 to 2.26.0 by @dependabot[bot] in #2650
  • [4.4.x] bump maven.version from 3.9.15 to 3.9.16 by @dependabot[bot] in #2663
  • [4.4.x] bump cxf.version from 3.6.10 to 3.6.11 by @dependabot[bot] in #2667
  • [4.4.x] bump org.hibernate.orm:hibernate-core from 6.6.50.Final to 6.6.51.Final by @dependabot[bot] in #2679
  • [4.4.x] bump asm.version from 9.10 to 9.10.1 by @dependabot[bot] in #2676
  • Fix snapshot version by @CptBartender in #2674
  • Avoid injection issues in the JDBC datasource (backport #2654) by @jbonofre in #2673
  • [4.4.x] bump jackson.version from 2.21.3 to 2.21.4 by @dependabot[bot] in #2690
  • [4.4.x] bump org.jacoco:jacoco-maven-plugin from 0.8.14 to 0.8.15 by @dependabot[bot] in #2705
  • [4.4.x] bump biz.aQute.bnd:biz.aQute.bndlib from 7.2.3 to 7.3.0 by @dependabot[bot] in #2703
  • [4.4.x] bump org.codehaus.plexus:plexus-archiver from 4.11.0 to 4.12.0 by @dependabot[bot] in #2713
  • [4.4.x] bump org.hibernate.orm:hibernate-core from 6.6.51.Final to 6.6.53.Final by @dependabot[bot] in #2716
  • Added option to configure dynamic imports by @CptBartender in #2682
  • [4.4.x] bump activemq.version from 5.19.6 to 5.19.7 by @dependabot[bot] in #2697
  • [4.4.x] bump actions/checkout from 6 to 7 by @dependabot[bot] in #2737
  • Add retry on wrapper resources download (karaf-4.4.x) by @jbonofre in #2740
  • [4.4.x] bump org.jline:jline from 3.30.13 to 3.30.14 by @dependabot[bot] in #2743
  • [4.4.x] bump net.bytebuddy:byte-buddy from 1.17.5 to 1.18.11 by @dependabot[bot] in #2758
  • [4.4.x] bump log4j.version from 2.26.0 to 2.26.1 by @dependabot[bot] in #2753
  • [4.4.x] bump org.apache.maven.shared:maven-filtering from 3.5.0 to 3.5.1 by @dependabot[bot] in #2755
  • [4.4.x] bump org.jline:jline from 3.30.14 to 3.30.15 by @dependabot[bot] in #2750
  • [4.4.x] bump org.hibernate.orm:hibernate-core from 6.6.53.Final to 6.6.54.Final by @dependabot[bot] in #2747
  • [4.4.x] bump activemq.version from 5.19.7 to 5.19.8 by @dependabot[bot] in #2744
  • [4.4.x] bump jna.version from 5.18.1 to 5.19.1 by @dependabot[bot] in #2726
  • [4.4.x] bump io.smallrye:jandex from 3.2.7 to 3.6.0 by @dependabot[bot] in #2711
  • [4.4.x] bump xbean.version from 4.30 to 4.31 by @dependabot[bot] in #2761
  • [4.4.x] bump sshd.version from 2.17.1 to 2.19.0 by @dependabot[bot] in #2769
  • Fix flaky SSH security integration tests on Windows CI (#2764) by @jbonofre in #2766
  • [4.4.x] bump jackson.version from 2.21.4 to 2.21.5 by @dependabot[bot] in #2767
  • [4.4.x] bump bouncycastle.version from 1.84 to 1.85 by @dependabot[bot] in #2775
  • [4.4.x] bump org.jline:jline from 3.30.15 to 3.30.16 by @dependabot[bot] in #2778
  • [4.4.x] bump activemq.version from 5.19.8 to 5.19.9 by @dependabot[bot] in #2781
  • [4.4.x] bump commons-logging:commons-logging from 1.3.6 to 1.4.0 by @dependabot[bot] in #2732
  • [4.4.x] bump actions/setup-java from 5 to 5.6.0 by @dependabot[bot] in #2789
  • [4.4.x] bump activemq.version from 5.19.9 to 5.19.10 by @dependabot[bot] in #2799
  • [4.4.x] bump org.hibernate.orm:hibernate-core from 6.6.54.Final to 6.6.55.Final by @dependabot[bot] in #2792
  • Make JdbcExampleTest robust to reruns and command registration race (backport #2787) by @jbonofre in #2790
  • [4.4.x] bump net.bytebuddy:byte-buddy from 1.18.11 to 1.18.12 by @dependabot[bot] in #2811
  • [4.4.x] bump cxf.version from 3.6.11 to 3.6.12 by @dependabot[bot] in #2795
  • [4.4.x] bump dawidd6/action-download-artifact from 21 to 23 by @dependabot[bot] in #2807
  • [4.4.x] bump biz.aQute.bnd:biz.aQute.bndlib from 7.3.0 to 7.4.0 by @dependabot[bot] in #2813
  • [4.4.x] bump actions/setup-java from 5.6.0 to 5.7.0 by @dependabot[bot] in #2791
  • [4.4.x] bump dawidd6/action-download-artifact from 23 to 24 by @dependabot[bot] in #2826
  • [4.4.x] bump org.codehaus.plexus:plexus-archiver from 4.12.0 to 4.13.0 by @dependabot[bot] in #2824
  • [4.4.x] bump org.codehaus.modello:modello-maven-plugin from 2.6.0 to 2.8.0 by @dependabot[bot] in #2820
  • [4.4.x] bump org.codehaus.plexus:plexus-utils from 3.6.1 to 3.6.2 by @dependabot[bot] in #2819
  • [4.4.x] bump org.easymock:easymock from 5.6.0 to 5.7.0 by @dependabot[bot] in #2828
  • [4.4.x] bump org.codehaus.plexus:plexus-archiver from 4.13.0 to 4.14.0 by @dependabot[bot] in #2833
  • [4.4.x] bump org.hibernate.orm:hibernate-core from 6.6.55.Final to 6.6.56.Final by @dependabot[bot] in #2831
  • [4.4.x] bump actions/setup-java from 5 to 6 by @dependabot[bot] in #2836
  • [4.4.x] bump org.codehaus.modello:modello-maven-plugin from 2.8.0 to 2.8.1 by @dependabot[bot] in #2850
  • [4.4.x] bump net.bytebuddy:byte-buddy from 1.18.12 to 1.18.13 by @dependabot[bot] in #2858
  • [4.4.x] bump slf4j.version from 2.0.18 to 2.0.19 by @dependabot[bot] in #2856
  • [4.4.x] bump activemq.version from 5.19.10 to 5.19.11 by @dependabot[bot] in #2854
  • [4.4.x] bump jackson.version from 2.21.5 to 2.22.2 by @dependabot[bot] in #2809
  • [4.4.x] bump org.apache.maven.plugins:maven-plugin-plugin from 3.15.2 to 3.16.0 by @dependabot[bot] in #2877
  • [4.4.x] bump org.apache.maven.plugin-tools:maven-plugin-annotations from 3.15.2 to 3.16.0 by @dependabot[bot] in #2876
  • [4.4.x] bump pax.logging.version from 2.3.4 to 2.3.5 by @dependabot[bot] in #2802
  • [4.4.x] fix(itests): Speed up JVM teardown by using TCP communication instead of stdio by @holgerfriedrich in #2882
  • fix(config): restrict config:install to the admin role (backport #2861) by @jbonofre in #2862
  • [4.4.x] Apply the JMX RBAC guard to MBean lifecycle operations by @jbonofre in #2866
  • [4.4.x] Escape %u/%dn/%fqdn substitutions in LDAP search filters by @jbonofre in #2881
  • [4.4.x] bump org.jline:jline from 3.30.16 to 3.30.17 by @dependabot[bot] in #2887
  • [4.4.x] Reject shell metacharacters in instance javaOpts and add missing instance ACL by @jbonofre in #2879
  • Ensure configuration files are always written within ${karaf.etc} (4.4.x backport) by @jbonofre in #2868
  • fix(jdbc,jms): add command ACLs for the jdbc and jms scopes (karaf-4.4.x) by @jbonofre in #2863
  • fix: port security improvement (XSS) from Felix WebConsole by @jbonofre in #2729
  • [4.4.x] Drop guava 23 (#2889) by @holgerfriedrich in #2891
  • [4.4.x] Align jetty dependency in tests by @holgerfriedrich in #2890
  • [karaf-4.4.x] Restrict feature:repo-add -i and feature:repo-remove -u to admin role by @jbonofre in #2884
  • [4.4.x] Align jetty dependency by @holgerfriedrich in #2894
  • [4.4.x] Upgrade org.eclipse.osgi from 3.18.0 to 3.18.600 by @holgerfriedrich in #2893
  • [4.4.x] Upgrade bouncycastle from 1.85 to 1.86 by @holgerfriedrich in #2895
  • [karaf-4.4.x] GH-2741: Clean the OSGi bundle cache on JDK version change by @jbonofre in #2899
  • [karaf-4.4.x] Fix race condition corrupting cfg files when updating an existing configuration by @jbonofre in #2900
  • [4.4.x] bump org.codehaus.mojo:build-helper-maven-plugin from 3.6.1 to 3.6.2 by @dependabot[bot] in #2904
  • Upgrade jackson 2.18 legacy features to 2.18.10 by @holgerfriedrich in #2901
  • [4.4.x] bump org.codehaus.mojo:exec-maven-plugin from 3.6.3 to 3.6.4 by @dependabot[bot] in #2906
  • [4.4.x] Bump Jolokia to 1.7.3 by @rovarga in #2909
  • [4.4.x] bump org.hibernate.orm:hibernate-core from 6.6.56.Final to 6.6.57.Final by @dependabot[bot] in #2914
  • [4.4.x] Restrict WebConsole plugin getResource() to /res/ paths by @jbonofre in #2910
  • Update copyright dates in the NOTICE files by @jbonofre in #2915
  • [4.4.x] bump net.bytebuddy:byte-buddy from 1.18.13 to 1.18.14 by @dependabot[bot] in #2918
  • [4.4.x] bump net.bytebuddy:byte-buddy to 1.17.8 by @holgerfriedrich in #2920
  • [4.4.x] bump io.smallrye.jandex to 3.2.7 by @holgerfriedrich in #2921

Full Changelog: karaf-4.4.11...karaf-4.4.12

Don't miss a new karaf release

NewReleases is sending notifications on new releases.