Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: codehaus-plexus/plexus-xml
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: plexus-xml-4.1.0
Choose a base ref
...
head repository: codehaus-plexus/plexus-xml
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: master
Choose a head ref
  • 10 commits
  • 15 files changed
  • 6 contributors

Commits on Apr 5, 2025

  1. Configuration menu
    Copy the full SHA
    924660b View commit details
    Browse the repository at this point in the history

Commits on May 29, 2025

  1. Bump org.codehaus.plexus:plexus from 20 to 21

    Bumps [org.codehaus.plexus:plexus](https://github.com/codehaus-plexus/plexus-pom) from 20 to 21.
    - [Release notes](https://github.com/codehaus-plexus/plexus-pom/releases)
    - [Commits](https://github.com/codehaus-plexus/plexus-pom/commits)
    
    ---
    updated-dependencies:
    - dependency-name: org.codehaus.plexus:plexus
      dependency-version: '21'
      dependency-type: direct:production
      update-type: version-update:semver-major
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    dependabot[bot] authored and slachiewicz committed May 29, 2025
    Configuration menu
    Copy the full SHA
    1407ddc View commit details
    Browse the repository at this point in the history

Commits on Jun 3, 2025

  1. Bump org.codehaus.plexus:plexus from 21 to 22

    Bumps [org.codehaus.plexus:plexus](https://github.com/codehaus-plexus/plexus-pom) from 21 to 22.
    - [Release notes](https://github.com/codehaus-plexus/plexus-pom/releases)
    - [Commits](https://github.com/codehaus-plexus/plexus-pom/commits)
    
    ---
    updated-dependencies:
    - dependency-name: org.codehaus.plexus:plexus
      dependency-version: '22'
      dependency-type: direct:production
      update-type: version-update:semver-major
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    dependabot[bot] authored and slachiewicz committed Jun 3, 2025
    Configuration menu
    Copy the full SHA
    9434226 View commit details
    Browse the repository at this point in the history
  2. Declare license info in POM

    Goooler authored and slachiewicz committed Jun 3, 2025
    Configuration menu
    Copy the full SHA
    bad0a2b View commit details
    Browse the repository at this point in the history

Commits on Jun 27, 2025

  1. Bump org.apache.maven:maven-xml from 4.0.0-rc-3 to 4.0.0-rc-4

    Bumps [org.apache.maven:maven-xml](https://github.com/apache/maven) from 4.0.0-rc-3 to 4.0.0-rc-4.
    - [Release notes](https://github.com/apache/maven/releases)
    - [Commits](apache/maven@maven-4.0.0-rc-3...maven-4.0.0-rc-4)
    
    ---
    updated-dependencies:
    - dependency-name: org.apache.maven:maven-xml
      dependency-version: 4.0.0-rc-4
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    dependabot[bot] authored and slachiewicz committed Jun 27, 2025
    Configuration menu
    Copy the full SHA
    c6b2c7a View commit details
    Browse the repository at this point in the history

Commits on Aug 19, 2025

  1. Bump org.codehaus.plexus:plexus from 22 to 23

    Bumps [org.codehaus.plexus:plexus](https://github.com/codehaus-plexus/plexus-pom) from 22 to 23.
    - [Release notes](https://github.com/codehaus-plexus/plexus-pom/releases)
    - [Commits](https://github.com/codehaus-plexus/plexus-pom/commits)
    
    ---
    updated-dependencies:
    - dependency-name: org.codehaus.plexus:plexus
      dependency-version: '23'
      dependency-type: direct:production
      update-type: version-update:semver-major
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    dependabot[bot] authored and slachiewicz committed Aug 19, 2025
    Configuration menu
    Copy the full SHA
    2294db6 View commit details
    Browse the repository at this point in the history

Commits on Oct 19, 2025

  1. Bump org.codehaus.plexus:plexus from 23 to 24

    Bumps [org.codehaus.plexus:plexus](https://github.com/codehaus-plexus/plexus-pom) from 23 to 24.
    - [Release notes](https://github.com/codehaus-plexus/plexus-pom/releases)
    - [Commits](https://github.com/codehaus-plexus/plexus-pom/commits)
    
    ---
    updated-dependencies:
    - dependency-name: org.codehaus.plexus:plexus
      dependency-version: '24'
      dependency-type: direct:production
      update-type: version-update:semver-major
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    dependabot[bot] authored and slachiewicz committed Oct 19, 2025
    Configuration menu
    Copy the full SHA
    303c1a2 View commit details
    Browse the repository at this point in the history

Commits on Oct 26, 2025

  1. Fix polynomial regular expression vulnerability in XML encoding detec…

    …tion (#68)
    
    * Fix polynomial regex vulnerability in ENCODING_PATTERN
    
    Changed the regex pattern from .* to .*? to use non-greedy matching,
    preventing catastrophic backtracking on malicious input.
    
    Added test case to validate the fix with various edge cases.
    
    ---------
    Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
    Co-authored-by: slachiewicz <6705942+slachiewicz@users.noreply.github.com>
    Copilot and slachiewicz authored Oct 26, 2025
    Configuration menu
    Copy the full SHA
    9a87e5c View commit details
    Browse the repository at this point in the history

Commits on Nov 10, 2025

  1. JUnit Jupiter best practices

    Co-authored-by: Moderne <team@moderne.io>
    slachiewicz and TeamModerne committed Nov 10, 2025
    Configuration menu
    Copy the full SHA
    bc07169 View commit details
    Browse the repository at this point in the history

Commits on Nov 14, 2025

  1. Bump org.apache.maven:maven-xml from 4.0.0-rc-4 to 4.0.0-rc-5

    Bumps org.apache.maven:maven-xml from 4.0.0-rc-4 to 4.0.0-rc-5.
    
    ---
    updated-dependencies:
    - dependency-name: org.apache.maven:maven-xml
      dependency-version: 4.0.0-rc-5
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    dependabot[bot] authored and slachiewicz committed Nov 14, 2025
    Configuration menu
    Copy the full SHA
    a51782f View commit details
    Browse the repository at this point in the history
Loading