What's Changed
- Adds info about homepage and descritpion to Github repo by @lukaszlenart in #1151
- WW-5501 Excludes malicious names by @lukaszlenart in #1157
- [readme] add link to struts site commercial support page by @ljharb in #1160
- Adds additional test cases to match Struts packages by @lukaszlenart in #1161
- WW-5503 Removes unused dependencies by @lukaszlenart in #1159
- Uses exact branch name instead of wildcard by @lukaszlenart in #1162
- Add YourKit thank you section by @lukaszlenart in #1165
- Removes checking branch ref and removes branch name as not needed by @lukaszlenart in #1166
- Updates SECURITY.md by @lukaszlenart in #1172
- WW-5498 Adds devMode errors as action messages to avoid breaking validation logic by @lukaszlenart in #1170
- WW-5500 Extends pattern to validate multipart uploads by @lukaszlenart in #1171
- Add jakarta package to exclusion list by @kusalk in #1179
- WW-5501 Only exclude malicious file names by @lukaszlenart in #1184
- WW-5510 Marks support for tooltips as deprecated by @lukaszlenart in #1185
- Adds 6.7.x branch to nigthlies step by @lukaszlenart in #1186
- WW-5517 Fixes <s:debug/> to be compatible with allowlist capability by @lukaszlenart in #1187
- 7.0: WW-5516 Fix TemplateDir and Theme fallback to Request/Session/Application attributes by @kusalk in #1193
- WW-5512 Extends the container to support injecting optional parameters into constructor by @lukaszlenart in #1191
- Improves code quality by @lukaszlenart in #1204
- WW-5501 Ignores DMI related action field by @lukaszlenart in #1203
- WW-5526 Fix AttributeMap NPE when PageContext has no request by @kusalk in #1209
Dependencies
- Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.5.1 to 3.5.2 by @dependabot in #1147
- Bump org.codehaus.mojo:exec-maven-plugin from 3.4.1 to 3.5.0 by @dependabot in #1148
- Bump github/codeql-action from 3.27.7 to 3.27.9 by @dependabot in #1149
- Bump actions/upload-artifact from 4.4.3 to 4.5.0 by @dependabot in #1155
- Bump github/codeql-action from 3.27.9 to 3.28.0 by @dependabot in #1154
- Bump org.codehaus.mojo:versions-maven-plugin from 2.17.1 to 2.18.0 by @dependabot in #1152
- Bump org.freemarker:freemarker from 2.3.33 to 2.3.34 by @dependabot in #1163
- Bump org.apache.velocity:velocity-engine-core from 2.3 to 2.4.1 by @dependabot in #1164
- Updates dependabot.yml by @lukaszlenart in #1173
- Bump commons-io:commons-io from 2.15.1 to 2.18.0 by @dependabot in #1133
- Bump log4j2.version from 2.24.2 to 2.24.3 by @dependabot in #1178
- Bump github/codeql-action from 3.28.0 to 3.28.1 by @dependabot in #1182
- Bump actions/upload-artifact from 4.5.0 to 4.6.0 by @dependabot in #1183
- Bump byte-buddy.version from 1.14.11 to 1.15.11 by @dependabot in #1176
- Bump org.sitemesh:sitemesh from 3.2.1 to 3.2.2 by @dependabot in #1189
- Bump github/codeql-action from 3.28.1 to 3.28.5 by @dependabot in #1196
- Bump byte-buddy.version from 1.15.11 to 1.16.1 by @dependabot in #1198
- Bump org.apache.commons:commons-text from 1.12.0 to 1.13.0 by @dependabot in #1199
- Bump github/codeql-action from 3.28.5 to 3.28.8 by @dependabot in #1205
- Bump org.htmlunit:htmlunit from 4.2.0 to 4.9.0 by @dependabot in #1207
New Contributors
Full Changelog: STRUTS_7_0_0...STRUTS_7_0_2