Commit Graph
225 Commits
Author SHA1 Message Date
Kai Kreuzer 5692232e2b Apply spotless
Signed-off-by: Kai Kreuzer <kai@openhab.org>
2023-07-24 01:11:37 +02:00
openhab-bot fd93f0a766 [unleash-maven-plugin] Preparation for next development cycle. 2023-07-23 17:14:35 +00:00
J-N-KandGitHub 64fd046266 Bump spifly to 1.3.6 and asm to 9.4 to support records (#3658)
Signed-off-by: Jan N. Klug <github@klug.nrw>
2023-06-23 10:46:43 +02:00
J-N-KandGitHub f36ccea50c Bump jose4j (#3645)
Signed-off-by: Jan N. Klug <github@klug.nrw>
2023-06-08 13:26:43 +02:00
Matthew SkinnerandGitHub c2ce05a550 Bump Netty version to 4.1.92.Final (#3577)
Bump Netty to latest versions.

Signed-off-by: Matthew Skinner <matt@pcmus.com>
2023-05-11 07:03:37 +02:00
Andrew Fiddian-GreenandGitHub 8a0fdfc173 Add jetty-alpn-java-client dependency (#3455)
Signed-off-by: Andrew Fiddian-Green <software@whitebear.ch>
2023-03-16 09:04:22 +01:00
Wouter BornandGitHub 0c792ec89a Upgrade XStream to 1.4.20 (#3446)
This addresses CVE-2022-40151 and CVE-2022-41966, see:

https://x-stream.github.io/changes.html#1.4.20

This version also fixes an issue with closing streams so the workaround in GenerateDefaultTranslationsMojoTest is no longer needed.

Signed-off-by: Wouter Born <github@maindrain.net>
2023-03-12 12:22:33 +01:00
Andrew Fiddian-GreenandGitHub a5d65ce2ad Add support for Jetty HTTP/2 clients (#3433)
Signed-off-by: Andrew Fiddian-Green <software@whitebear.ch>
2023-03-12 10:22:50 +01:00
Wouter BornandGitHub ac5bbb90b8 Upgrade JUPnP to 2.7.0 (#3421)
Fixes openhab/openhab-distro#1473

Signed-off-by: Wouter Born <github@maindrain.net>
2023-03-05 09:55:06 +01:00
Wouter BornandGitHub ec3af50f11 Upgrade to Karaf 4.4.3 (#3252)
* Sync runtime dependencies with Karaf 4.4.3, most notably:
  * Jetty 9.4.50.v20221201
  * Pax Logging 2.2.0
  * Pax Web 8.0.15
* Use OSGi R8 as compile dependency
* Rework Servlets to use Http Whiteboard annotations in favor of proprietary `org.openhab.core.io.http.servlet` classes
* Resolve itest runbundles

Also-by: Jan N. Klug <github@klug.nrw>

Signed-off-by: Wouter Born <github@maindrain.net>
2023-03-01 13:09:07 +01:00
J-N-KandGitHub 8d64ecfd8d Update license header to 2023 (#3294)
* Update license header to 2023

Signed-off-by: Jan N. Klug <github@klug.nrw>
2023-01-03 09:45:42 +01:00
Wouter BornandGitHub 07d09c5a7a Update Jackson to 2.14.1 (#3284)
Updates Jackson from 2.12.7 to 2.14.1

For release notes, see:

https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.13
https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.14

Signed-off-by: Wouter Born <github@maindrain.net>
2022-12-30 22:46:51 +01:00
J-N-KandGitHub 41ba3ff854 Raise minimum JDK version to 17 (#2994)
* Raise source level to Java 17 (except for model classes)
* Remove Nashorn script engine
* Upgrade spotless and add jvm options  
  See https://github.com/diffplug/spotless/issues/834
* Add suppression for findBugs false positive error
* Upgrade xtext to 2.29.0
* Adjust JNA
* Resolve itests

Signed-off-by: Jan N. Klug <github@klug.nrw>
2022-12-19 19:52:43 +01:00
J-N-KandGitHub 3fc4d23734 Fix spotless and resolve itests (#3239)
Signed-off-by: Jan N. Klug <github@klug.nrw>
2022-12-19 11:09:31 +01:00
openhab-bot 35254b3a0a [unleash-maven-plugin] Preparation for next development cycle. 2022-12-18 23:08:22 +00:00
dependabot[bot]andGitHub 070a11e593 Upgrade commons-net to 3.9.0 (#3200)
* Bump commons-net from 3.7.2 to 3.9.0 in /bom/runtime

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Wouter Born <github@maindrain.net>
2022-12-07 18:03:15 +01:00
Wouter BornandGitHub 2cb8f148ef Upgrade Californium to 2.7.4 (#3147)
For release notes see:

* https://projects.eclipse.org/projects/iot.californium/releases/2.7.4

Signed-off-by: Wouter Born <github@maindrain.net>
2022-12-05 17:44:17 +01:00
dependabot[bot]andGitHub 952b11560a Bump jackson to 2.12.7(.1) (#3163)
* Bump jackson-databind from 2.12.6.1 to 2.12.7.1 in /bom/runtime

Bumps [jackson-databind](https://github.com/FasterXML/jackson) from 2.12.6.1 to 2.12.7.1.
- [Release notes](https://github.com/FasterXML/jackson/releases)
- [Commits](https://github.com/FasterXML/jackson/commits)

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-type: direct:production
...

Also-by: Wouter Born <github@maindrain.net>
Signed-off-by: dependabot[bot] <support@github.com>
2022-11-30 19:36:30 +01:00
Wouter BornandGitHub 149a9e9ee1 Upgrade Californium to 2.7.3 (#3085)
Upgrades Californium from 2.0.0 to 2.7.3 which has many fixes.

For release notes see:

* https://projects.eclipse.org/projects/iot.californium/governance

Replaces #3061, #3062

Signed-off-by: Wouter Born <github@maindrain.net>
2022-09-21 07:48:58 +02:00
J-N-KandGitHub dca8088fb4 Improve FeatureInstaller (#3049)
* Improve FeatureInstaller
* Remove unnecessary synchronized and clean up processing
* Re-add refeshing bundles after all configuratzion changes are processed
* Prevent unnecessary refreshes
* Make JNA part of the tp

Signed-off-by: Jan N. Klug <github@klug.nrw>
2022-09-18 10:43:12 +02:00
Kai KreuzerandGitHub 2e7fd9d72a Upgrade to JmDNS 3.5.8 (#3029)
Signed-off-by: Kai Kreuzer <kai@openhab.org>
2022-07-04 21:52:34 +02:00
Kai KreuzerandGitHub 61fd47c853 Apply spotless and resolver (#3018)
Signed-off-by: Kai Kreuzer <kai@openhab.org>
2022-06-27 13:41:28 +02:00
openhab-bot 8944bdbbe4 [unleash-maven-plugin] Preparation for next development cycle. 2022-06-26 16:37:00 +00:00
J-N-KandGitHub 6695321089 Bump JuPNP to 2.6.1 (#2979)
Signed-off-by: Jan N. Klug <github@klug.nrw>
2022-05-24 18:34:26 +02:00
Wouter BornandGitHub 4ab0f83e83 Upgrade to Karaf 4.3.7 (#2934)
* Syncs dependencies with Karaf 4.3.7
* Resolves itest runbundles for these new dependencies

Signed-off-by: Wouter Born <github@maindrain.net>
2022-04-28 22:00:16 +02:00
J-N-KandGitHub 0ea6feef72 Bump jackson to 2.12.6(.1) (#2933)
The `jackson-databind` bundle contains a vulnerability that is fixed in version 2.12.6.1. This version is only available for that bundle, all other bundles are still available as 2.12.6.

Signed-off-by: Jan N. Klug <github@klug.nrw>
2022-04-26 19:47:34 +02:00
Wouter BornandGitHub 5df95cd8be Upgrade nrjavaserial to fix file descriptor leak (#2899)
Uses an openHAB 5.2.1.OH1 build based on the latest changes in the nrjavaserial master branch (https://github.com/NeuronRobotics/nrjavaserial/tree/7aa21d1dc8cecdc8daad3ebc40273cfb8179e9d2).
When there is an official release containing those changes we can upgrade to that.

Most importantly this fixes a file descriptor leak when checking lock dir permissions.
It also adds FreeBSD aarch64 (ARM64) support.

Fixes #1842

Signed-off-by: Wouter Born <github@maindrain.net>
2022-04-08 07:42:45 +02:00
Wouter BornandGitHub 44f9baff18 Upgrade Xtext/Xtend to 2.26.0, LSP4J to 0.12.0 (#2786)
For release notes, see:

https://www.eclipse.org/Xtext/releasenotes.html#/releasenotes/2022/02/28/version-2-26-0

This release adds initial support for Java 17.

Signed-off-by: Wouter Born <github@maindrain.net>
2022-03-05 11:28:56 +01:00
J-N-KandGitHub c267e8f876 Fix missing feature (#2804)
Signed-off-by: Jan N. Klug <github@klug.nrw>
2022-02-26 12:51:56 +01:00
Wouter BornandGitHub d1a4d226b6 Upgrade XStream to 1.4.19 (#2738)
This addresses CVE-2021-43859, see:

https://x-stream.github.io/changes.html

Signed-off-by: Wouter Born <github@maindrain.net>
2022-02-06 21:33:10 +01:00
Christoph WeitkampandGitHub cabb3f7315 Update license headers to 2022 (#2671)
Signed-off-by: Christoph Weitkamp <github@christophweitkamp.de>
2022-01-07 13:16:42 +01:00
Matthew SkinnerandGitHub 68fb13f610 Bump netty to 4.1.72.Final for log4j2 2.15.0 fix (#2648)
* Bump netty to 4.1.72.Final for log4j2 2.15.0 fix
* Add netty-tcnative/2.0.46.Final
* Change to netty-tcnative-classes

Signed-off-by: Matthew Skinner <matt@pcmus.com>
2021-12-28 09:44:25 +01:00
Kai KreuzerandGitHub 9297727112 Revert "Bump netty to 4.1.72.Final for log4j2 2.15.0 fix (#2634)" (#2646)
This reverts commit 2f1ae2c4b8.
2021-12-26 22:40:23 +01:00
Kai KreuzerandGitHub e3b07782b4 pom reference update from http to https (#2644)
Signed-off-by: Kai Kreuzer <kai@openhab.org>
2021-12-23 22:55:20 +01:00
Matthew SkinnerandGitHub 2f1ae2c4b8 Bump netty to 4.1.72.Final for log4j2 2.15.0 fix (#2634)
* Bump netty to 4.1.72.Final for log4j2 2.15.0 fix

Signed-off-by: Matthew Skinner <matt@pcmus.com>
2021-12-22 20:27:34 +01:00
Kai Kreuzer 1ebf7395d9 Apply spotless
Signed-off-by: Kai Kreuzer <kai@openhab.org>
2021-12-20 06:59:22 +01:00
openhab-bot 5ac05c4968 [unleash-maven-plugin] Preparation for next development cycle. 2021-12-19 21:49:34 +00:00
Wouter BornandGitHub 0028a3c792 Downgrade Aries JAX-RS Whiteboard from 2.0.1 to 2.0.0 (#2599)
It causes unneccessary bundle refreshes whenever add-ons are installed/uninstalled.
As a result the UI does not get properly notified of installation changes.

Fixes #2580
Reverts the Aries JAX-RS Whiteboard upgrade of #2532

Signed-off-by: Wouter Born <github@maindrain.net>
2021-12-10 23:34:01 +01:00
Wouter BornandGitHub 3d722ec13b Upgrade UoM dependencies (#2573)
Signed-off-by: Wouter Born <github@maindrain.net>
2021-11-21 10:27:20 +01:00
Wouter BornandGitHub 54cd303b57 Update Jackson to 2.12.5 (#2572)
Updates Jackson from 2.12.3 to 2.12.5.

For all bug fixes, see:

* https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.12.4
* https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.12.5

Signed-off-by: Wouter Born <github@maindrain.net>
2021-11-21 10:19:03 +01:00
Wouter BornandGitHub a2ef0084d2 Upgrade JAX-RS Whiteboard and CXF (#2532)
* Upgrade JAX-RS Whiteboard and CXF

* Upgrades Aries JAX-RS Whiteboard from 2.0.0 to 2.0.1
* Upgrades CXF from 3.4.3 to 3.4.5

For CXF release notes, see:

* https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310511&version=12350023
* https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310511&version=12350279

Fixes #2512

Signed-off-by: Wouter Born <github@maindrain.net>
2021-10-25 11:55:02 +02:00
Matthew SkinnerandGitHub 338204341b Bump Netty.io library to 4.1.68.Final (#2500)
Update to latest Netty which has 2 security fixes in it.
Change log here:
https://netty.io/news/2021/09/09/4-1-68-Final.html

Also this PR is also needed see here:
https://github.com/openhab/openhab-addons/pull/11326

Signed-off-by: Matthew Skinner <matt@pcmus.com>
2021-09-30 12:31:23 +02:00
Wouter BornandGitHub 0d5b2d6140 Upgrade to Karaf 4.3.3 (#2489)
* Syncs dependencies with Karaf 4.3.3
* Resolves itest runbundles for these new dependencies

Signed-off-by: Wouter Born <github@maindrain.net>
2021-09-18 16:06:57 +02:00
Wouter BornandGitHub 4d842f4ba3 Upgrade XStream to 1.4.18 (#2482)
For release notes, see:

https://x-stream.github.io/changes.html#1.4.18

Signed-off-by: Wouter Born <github@maindrain.net>
2021-09-11 15:21:31 +02:00
Kai Kreuzer 5a667cc868 applied spotless
Signed-off-by: Kai Kreuzer <kai@openhab.org>
2021-06-27 23:22:02 +02:00
jenkins b8d2077805 [unleash-maven-plugin] Preparation for next development cycle. 2021-06-27 15:50:02 +00:00
Kai KreuzerandGitHub f8c2def130 upgrade to JUPnP 2.6.0 (#2396)
Signed-off-by: Kai Kreuzer <kai@openhab.org>
2021-06-02 09:21:15 +02:00
Kai KreuzerandGitHub 17f95768a4 Update to new JmDNS release 3.5.7 (#2391)
Signed-off-by: Kai Kreuzer <kai@openhab.org>
2021-05-30 18:42:50 +02:00
Wouter BornandGitHub 85f17aefa4 Upgrade XStream to 1.4.17 (#2369)
Upgrades XStream from 1.4.15 to 1.4.17

Prevents the following vulnerabilities when using XStream instances with an uninitialized security framework:

* CVE-2021-21341
* CVE-2021-21342
* CVE-2021-21343
* CVE-2021-21344
* CVE-2021-21345
* CVE-2021-21346
* CVE-2021-21347
* CVE-2021-21348
* CVE-2021-21349
* CVE-2021-21350
* CVE-2021-21351
* CVE-2021-29505

See: http://x-stream.github.io/changes.html#1.4.17

Related to: #2250, #2251

Signed-off-by: Wouter Born <github@maindrain.net>
2021-05-19 21:15:55 +02:00
Wouter BornandGitHub e3f12c8a45 Upgrade to Karaf 4.3.2 (#2363)
* Syncs dependencies with Karaf 4.3.2
* Resolves itest runbundles for these new dependencies

Signed-off-by: Wouter Born <github@maindrain.net>
2021-05-17 21:09:46 +02:00