Commit Graph

3047 Commits

Author SHA1 Message Date
Stefan Bodewig 6c0560f93c update release notes with CVE-2022-46751 2023-08-20 11:59:44 +02:00
Stefan Bodewig 2be17bc18b CVE-2022-46751 don't parse doctypes and access external entities by default 2023-08-17 16:53:14 +02:00
Stefan Bodewig 6ac4f36c9e bump copyright line 2023-08-17 16:52:06 +02:00
Stefan Bodewig 6fc8657b81 prepare Ivy 2.5.2 2023-08-16 20:58:47 +02:00
Stefan Bodewig aa011feaef record HttpClient upgrade 2023-06-21 13:26:53 +02:00
Stefan Bodewig 5f11f05fe3 IVY-1642 fix POM translation for multiple artifacts in one module 2023-04-25 21:19:13 +02:00
Stefan Bodewig c63ce79f52 IVY-1641: fix NullPointerException if content type has no charset 2023-03-17 12:59:02 +01:00
Stefan Bodewig 8a5ef6825b upgrade dependencies with known vulnerabilities 2022-12-05 19:58:18 +01:00
Stefan Bodewig fe57d58632 add last two Ivy releases 2022-11-05 13:07:29 +01:00
Stefan Bodewig 4ffed6329f back to normal development 2022-11-04 12:32:53 +01:00
Stefan Bodewig 9c4802b70c update release notes with CVE information 2022-11-02 18:28:21 +01:00
Stefan Bodewig 3f374602d4 CVE-2022-37866 prevent path-traversal with bogus module coordinates 2022-11-01 10:26:24 +01:00
Stefan Bodewig 03b6b8c3ae CVE-2022-37865 ZipPacking allows overwriting arbitrary files 2022-11-01 10:14:19 +01:00
Stefan Bodewig 9d7b5e133f ignore failing test 2022-11-01 10:13:33 +01:00
Stefan Bodewig 55179bb0b6 need newer version of RAT for https license URIs 2022-11-01 10:13:15 +01:00
Stefan Bodewig ff6adbeb00 prepare Ivy 2.5.1 2022-11-01 09:56:06 +01:00
Stefan Bodewig 259d054396 switch to https 2022-08-07 19:41:57 +02:00
Jaikiran Pai cd9296a409 add contributor of IVY-1632 to contributors list 2022-01-15 09:57:01 +05:30
Jaikiran a2701d733a
Merge pull request #96 from bernolanger/master
IVY-1632: Use valid value for HTTP header "Accept".
2022-01-15 04:21:07 +00:00
Jaikiran Pai 1fe3c3cff6 repo.jfrog.org is no longer available 2021-12-23 10:42:52 +05:30
Berno Langer 17a0d80da3 IVY-1632: Use valid value for HTTP header "Accept".
The default accept header of Java isn't valid as described at
https://bugs.openjdk.java.net/browse/JDK-8163921

Therefore set an accept header that accepts simply anything in the
ivy:retrieve Ant task.
2021-12-20 09:39:25 +01:00
Maarten Coene c14e2ba5a7
Merge pull request #95 from maartenc/IvyRetrieveEmptySet
IVY-1631: ivy:retrieve Ant task and empty FileSet bug
2021-11-24 16:18:41 +01:00
Maarten Coene 0170436231 Extra test to check that the created path is also empty 2021-11-24 13:10:59 +01:00
Maarten Coene 17f2727826 Extra test to check that the created path is also empty 2021-11-24 13:06:08 +01:00
Maarten Coene 0864db0364 set the project a bit sooner so it can be used within the other methods 2021-11-23 17:47:28 +01:00
Maarten Coene f760b390e5 IVY-1631: when the ivy:retrieve Ant task retrieves the jars to a non-empty directory, but the retrieve task itself didn't retrieve any files, the created fileset was not empty but contained the existing files in that directory. 2021-11-23 17:37:04 +01:00
Jaikiran Pai 8e2bdfb302 IVY-1616 Properly parse the artifact origin location, if the location is a file: URI 2021-03-29 13:06:52 +05:30
Jason Guild 424fa89419 IVY-1615 implement retrieval of ivysettings from url in standalone.
Closes #91 pull request at github.com/apache/ant-ivy repo
2021-03-29 10:12:45 +05:30
Jaikiran Pai ac9af265f9 Update release notes 2021-03-29 09:39:22 +05:30
Jaikiran Pai 370e52b74a IVY-1618 Don't change the dependency resolver configure on Ivy settings when setting the one on ResolveEngine 2021-03-29 09:33:15 +05:30
Jaikiran Pai a4ab62a717 IVY-1626 Add a note to bintray resolver documentation, that bintray and JCenter are being decommissioned 2021-03-29 08:44:32 +05:30
Jaikiran Pai f1093f67d4 IVY-1628 Add a testcase to reproduce the issue and verify the fix 2021-03-25 09:51:06 +05:30
Jaikiran Pai 083e3f685c IVY-1628 Fix potential ConcurrentModificationException 2021-03-23 07:30:30 +05:30
Maarten Coene 79bd0ce1f4 Documentation fix: the [originalname] token does NOT contains the extension! 2021-02-17 09:55:36 +01:00
Jaikiran Pai 2cf83cc35a IVY-1614 Add a test to show that Maven version range exclusion syntax is correctly honoured 2021-02-13 10:24:00 +05:30
Jaikiran Pai 70dfaf2467 Allow jacoco coverage to be disabled when running tests
This allows us to run the Ivy testsuite against latest Java
early access versions without having to wait for the instrumentation
libraries (that jacoco coverage needs) to start supporting the
class version of the new Java version being tested.
2021-01-16 19:47:22 +05:30
Jaikiran Pai 824e8eebfe Skip Pack200 tests from JDK >=14 (since Pack200 tools and API have now been removed from that JDK version) 2021-01-16 09:54:16 +05:30
Jaikiran Pai 27491e3688 Use https for IvyDE updatesite test 2021-01-15 20:59:19 +05:30
Jaikiran Pai 66547a20a0 jfrog repo now redirects http to https - use https in the test 2021-01-15 20:20:43 +05:30
Jaikiran Pai ad87c251aa Upgrade to 0.8.6 of jacoco 2021-01-15 18:21:07 +05:30
Simon Legner bb8cfa726c
RetrieveEngine: remove superfluous space in error 2020-04-05 12:26:10 +02:00
Jaikiran Pai 87de654504 Use newer version of jacoco 2019-11-02 18:53:44 +05:30
Jaikiran Pai 4c1347531e Add Java 8 runtime requirement to release notes 2019-11-02 18:39:56 +05:30
Jaikiran Pai 6364399673 Remove property which seems to be unused 2019-11-02 18:36:00 +05:30
Jaikiran Pai 6edcf2631d No longer required in Java 8 2019-11-02 18:32:22 +05:30
Jaikiran Pai 28eb66db03 Upgrade ivy.api.reference version to 2.5.0
Contributed-by: Gintautas Grigelionis
Pull request: https://github.com/apache/ant-ivy/pull/90/
2019-11-02 18:24:17 +05:30
Jaikiran Pai 5a5e3eb084 Use newer version of Ivy in example
Contributed-by: Gintautas Grigelionis
Pull request: https://github.com/apache/ant-ivy/pull/90
2019-11-02 18:23:15 +05:30
Jaikiran Pai b5f8c9d7e5 Fix link in release notes.
Contributed-by: Gintautas Grigelionis
Pull request: https://github.com/apache/ant-ivy/pull/90/
2019-11-02 18:19:09 +05:30
Jaikiran Pai 8e29e307d6 Upgrade to latest versions of bouncycastle and httpclient
Contributed-by: Gintautas Grigelionis
Pull request: https://github.com/apache/ant-ivy/pull/90/
2019-11-02 18:18:34 +05:30
Jaikiran Pai c0c8df492d Remove the workaround introduced in commit 5918182e0d, now that we require minimum Java 8 runtime 2019-11-02 18:11:07 +05:30