8075bbe50a
JCLOUDS-1618: Upgrade to gson 2.10.1
2023-06-15 19:05:39 -07:00
2275637fb8
Remove bnd
...
This blocks upgrading gson. References #176 .
2023-06-15 18:43:55 -07:00
a00454bdd1
Bump guava from 31.1-jre to 32.0.0-jre in /project
...
Bumps [guava](https://github.com/google/guava ) from 31.1-jre to 32.0.0-jre.
- [Release notes](https://github.com/google/guava/releases )
- [Commits](https://github.com/google/guava/commits )
---
updated-dependencies:
- dependency-name: com.google.guava:guava
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-06-14 20:19:30 -07:00
e7894e5a77
Use a class with a File member
...
Using gson on a File directly breaks Java strong encapsulation.
2023-06-14 20:17:28 -07:00
db69360b5f
Revert "Revert "Upgrade to snakeyaml 2.0""
...
This reverts commit cf4a926afe
2023-06-14 20:16:28 -07:00
39050e8fad
Java 9/16 strong encapsulation fixes
...
* Remove Reflection access modification
* Make some fields public so reflection can access them with strong
encapsulation
* Ignore test which fails due to differences in File serialization
2023-06-11 23:09:18 -07:00
c8ca330857
Remove unneeded -XX:MaxPermSize=256m
...
Newer JDK remove this flag.
2023-06-06 03:50:06 -07:00
318138e6b0
Upgrade to surefire 3.1.0
...
Release notes:
https://github.com/apache/maven-surefire/releases/tag/surefire-3.0.0
https://github.com/apache/maven-surefire/releases/tag/surefire-3.1.0
2023-06-06 03:24:44 -07:00
8a3c5ae992
Upgrade to EasyMock 5.1.0
...
This resolves a Java 17 compatibility issue. Release notes:
https://github.com/easymock/easymock/releases/tag/easymock-5.0.0
https://github.com/easymock/easymock/releases/tag/easymock-5.0.1
https://github.com/easymock/easymock/releases/tag/easymock-5.1.0
2023-06-05 04:25:59 -07:00
cf4a926afe
Revert "Upgrade to snakeyaml 2.0"
...
This reverts commit f82e94c337
2023-05-10 21:30:27 +09:00
f82e94c337
Upgrade to snakeyaml 2.0
...
This has some API changes. Closes #169 .
2023-04-16 16:43:36 +09:00
788f75f937
Replace TravisCI with GitHUb Actions
2023-02-08 08:33:39 +09:00
b7f28f1e6a
Lazily open parts during LocalBlobStore complete MPU
...
This removes a previous workaround for opening too many
FileInputStream and exhausting rlimits.
2023-01-29 17:56:15 +09:00
12de6ef74d
Atomically replace objects in filesystem putBlob
...
Fixes gaul/s3proxy#490 . This fixes a regression from
41ce90ec36
2023-01-24 14:44:53 +09:00
62632c9db6
JCLOUDS-1371: Optimize filesystem delimiter
...
populateBlobKeysInContainer will no longer recurse when the delimiter
matches "/". This makes listing deep hierarchies with a delimiter
faster. Note that the general LocalBlobStore handling is still
required for the general cases. This requires removing a bogus test
case. References gaul/s3proxy#473 .
2023-01-24 14:44:34 +09:00
e478dd5452
JCLOUDS-1371: JCLOUDS-1488: optimize fs prefix
...
This reduces the number of stat calls required when prefix is deep in the
filesystem hierarchy. Further optimizations to delimiter are possible.
References gaul/s3proxy#473 .
2023-01-22 18:31:09 +09:00
7e50ae630d
Upgrade to Guice 5.1.0
...
Release notes:
https://github.com/google/guice/wiki/Guice510
2022-12-17 07:41:44 +09:00
b754e177fe
Bump snakeyaml from 1.31 to 1.32 in /apis/byon
...
---
updated-dependencies:
- dependency-name: org.yaml:snakeyaml
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-12-15 12:40:10 +09:00
552eb95c44
Fix Files name collision
...
Regression from b282b5cbfe
2022-11-21 07:49:18 +09:00
b282b5cbfe
vuln-fix: Temporary File Information Disclosure
...
This fixes temporary file information disclosure vulnerability due to the use
of the vulnerable `File.createTempFile()` method. The vulnerability is fixed by
using the `Files.createTempFile()` method which sets the correct posix permissions.
Weakness: CWE-377: Insecure Temporary File
Severity: Medium
CVSSS: 5.5
Detection: CodeQL & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.java.security.SecureTempFileCreation )
Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Bug-tracker: https://github.com/JLLeitschuh/security-research/issues/18
Co-authored-by: Moderne <team@moderne.io>
2022-11-20 21:31:45 +09:00
25bcb7961e
activate Reproducible Builds
2022-11-14 07:54:03 +09:00
b2a2025b32
This fixes problem JCLOUDS 1615.
2022-10-14 22:11:19 +09:00
d913a56037
JCLOUDS-1617: Fix HTTPS support in OkHttpCommandExecutorService ( #153 )
...
* JCLOUDS-1617: Fix HTTPS support in OkHttpCommandExecutorService
Added support for proxy server type = HTTPS
* Update DelegatingSocketFactory.java
Added java doc
2022-09-15 17:50:36 +02:00
b098cceaf9
Bump snakeyaml from 1.26 to 1.31 in /apis/byon ( #154 )
...
Bumps [snakeyaml](https://bitbucket.org/snakeyaml/snakeyaml ) from 1.26 to 1.31.
- [Commits](https://bitbucket.org/snakeyaml/snakeyaml/branches/compare/snakeyaml-1.31..snakeyaml-1.26 )
---
updated-dependencies:
- dependency-name: org.yaml:snakeyaml
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-15 13:16:09 +02:00
57a9e7b7cc
Deep copy Blob in LocalBlobStore.getBlob
...
ByteSourcePayload.openStream is not thread safe and lack of
synchronization can throw ArrayIndexOutOfBoundsExceptions. Instead
deep copy the underlying Payload. Fixes gaul/s3proxy#303 .
2022-08-04 21:17:44 +09:00
5067897ff5
Upgrade to jax-rs 2.1.1
...
Also address constant TODO.
2022-08-04 07:38:54 +09:00
88f0c341cf
JCLOUDS-1616: Proxy credentials validation is missing in OkHttpCommandExecutorService API request
...
Added support for credentials validation
2022-08-03 21:26:49 +09:00
7fecb72e0d
Upgrade to testng 7.5
...
Requires upgrading surefire as well.
2022-08-03 21:24:12 +09:00
f4ec2bb63c
Address testng cyclic dependency
...
Uncovered by newer versions of testng.
2022-08-03 21:24:12 +09:00
5111923566
Specify missing DataProviders
...
Uncovered by newer versions of testng.
2022-08-03 21:24:12 +09:00
2b217fb2bb
Annotate public non-test methods
...
Newer versions of TestNG try to run these.
2022-08-03 21:24:12 +09:00
65e16c97f5
Annotate test methods as singleThreaded
...
Newer versions of testng deprecate sequential.
2022-08-03 21:24:12 +09:00
16926b0bb7
Upgrade to assertj 3.23.1
...
Enabled by requiring Java 8. Also fix some minor API breakage.
2022-07-31 17:19:05 +09:00
aea2603733
JCLOUDS-1609: Upgrade to BouncyCastle 1.71
...
Release notes:
https://www.bouncycastle.org/releasenotes.html#r1rv71
2022-06-18 18:25:32 +09:00
d404391651
JCLOUDS-1602: Upgrade to Jetty 9.4.46
...
Remove BaseJettyTest which BaseMockWebServerTest superseded.
2022-06-12 18:32:43 +09:00
7eb64f4850
JCLOUDS-1603: Upgrade to Guava 31.1
2022-06-12 18:30:56 +09:00
3538aba871
Bump logback-core from 1.1.2 to 1.2.9 in /project
...
Bumps logback-core from 1.1.2 to 1.2.9.
---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-core
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-06-12 13:01:13 +09:00
a9c76e7d8a
Bump httpclient from 4.3.6 to 4.5.13 in /drivers/apachehc
...
Bumps httpclient from 4.3.6 to 4.5.13.
---
updated-dependencies:
- dependency-name: org.apache.httpcomponents:httpclient
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-06-12 12:43:10 +09:00
2d893aec33
Bump logback-classic from 1.1.2 to 1.2.0 in /project
...
Bumps logback-classic from 1.1.2 to 1.2.0.
---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-classic
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-06-12 12:40:38 +09:00
bcf3b64a2c
Update README copyright dates and AzureBlob README
2022-05-04 10:23:05 +09:00
659951bc63
JCLOUDS-1601: Upgrade to log4j 2.17.2
...
Release notes:
https://logging.apache.org/log4j/2.x/changes-report.html#a2.17.2
2022-04-17 23:01:44 +09:00
27274d40a9
JCLOUDS-1604: Upgrade to AutoFactory 1.0.1
2022-04-17 22:59:01 +09:00
36f351cd18
Next development version 2.6.0-SNAPSHOT
2022-03-26 18:30:06 +09:00
5fad7fa895
JCLOUDS-1599 - Add support for GLACIER_IR storage class
2022-03-09 09:06:13 +09:00
83deb0efef
JCLOUDS-1598: Support Metric Alert Operation ( #134 )
2022-02-25 10:12:43 -08:00
99f2ff86da
JCLOUDS-1597: Support for Alerts ( #133 )
2022-02-21 19:37:50 +09:00
738a01dda6
Update AzureComputeApi.java
2022-02-05 00:02:24 -08:00
2b16b55e33
JCLOUDS-1596: Support Activity Log Alert Operations
2022-02-05 00:02:24 -08:00
468b126dd8
JCLOUDS-1594: Allow overriding S3 signer
...
Previously s3 always used v2 and aws-s3 always used v4. Now s3
defaults to v2 and can override to v4. Note that this does not change
BlobRequestSigner.
2022-01-12 22:24:45 +09:00
c95ddff020
JCLOUDS-1591: Fix NPE in ClientCredentialsClaims
2021-12-27 16:26:28 +09:00
Andrew Gaul
Andrew Gaul
dependabot[bot]
Ignasi Barrera
Jonathan Leitschuh
Hervé Boutemy
Christian.Jung
SATYANAN-ANAND
SATYANAN-ANAND
Ikky
ramahin