13422 Commits

Author SHA1 Message Date
CES Marvin
0e780dd068 Release version 3.11.5 3.11.5 2026-02-25 12:28:10 +00:00
René Pfeuffer
c9aa4d5263 Adjust changelog for release 3.11.5 2026-02-25 13:21:13 +01:00
René Pfeuffer
67b98ba8fe Prepare for next development iteration 2026-02-25 11:34:49 +01:00
René Pfeuffer
9e80a01ca3 Merge tag '3.7.8' into develop
Release version 3.7.8
2026-02-25 11:21:44 +01:00
Rene Pfeuffer
8b47fa762e Update JGit to v7.5.0
Squash commits of branch dependency/jgit_7.5.0:

- Update JGit to v7.5.0
2026-02-25 10:14:46 +00:00
CES Marvin
d6b5631d20 Release version 3.7.8 3.7.8 2026-02-25 09:55:56 +00:00
René Pfeuffer
2225851ada Adjust changelog for release 3.7.8 2026-02-25 08:56:17 +01:00
Rene Pfeuffer
bceca6722c Update JGit to v7.1.1 2026-02-24 18:10:26 +00:00
René Pfeuffer
4e4a3c4429 Fix Java version for windows installation 2026-02-13 10:21:48 +01:00
René Pfeuffer
37dfddb0e5 Merge branch 'main' into develop 2026-02-11 15:27:20 +01:00
CES Marvin
1b192ffa38 Release version 3.11.4 3.11.4 2026-02-11 13:20:14 +00:00
René Pfeuffer
61f92f337c Adjust changelog for release 3.11.4 2026-02-11 14:11:17 +01:00
Rene Pfeuffer
4a767d3886 Fix import of exports without queryable store data 2026-02-11 13:04:08 +00:00
Rene Pfeuffer
67e5f1bcb0 Update docker and vagrant base images 2026-02-11 09:23:34 +00:00
René Pfeuffer
771f890aa4 Merge branch 'support/3.11.x' into develop 2026-02-10 17:31:25 +01:00
René Pfeuffer
fbd78ab7e1 Prepare for next development iteration 2026-02-10 17:29:33 +01:00
CES Marvin
452703eb3d Release version 3.11.3 3.11.3 2026-02-10 15:36:30 +00:00
René Pfeuffer
9c300b9eb5 Adjust changelog for release 3.11.3 2026-02-10 16:29:46 +01:00
Rene Pfeuffer
78ef9a50e8 Fix proxy exclusions with glob patterns 2026-02-10 14:34:47 +00:00
Rene Pfeuffer
b16a06d7e6 Update minor dependencies 2026-02-03 08:51:18 +00:00
Rene Pfeuffer
76372c1d5b Bump various dependencies 2026-02-02 14:43:35 +00:00
Rene Pfeuffer
9dd2b8733d Consolidate plugin versions in build.gradle 2026-02-02 10:42:25 +00:00
Rene Pfeuffer
86ca7426d3 Bump edison hal dependencies 2026-01-30 14:25:57 +00:00
Rene Pfeuffer
7cc18ad14d Bump picocli 2026-01-30 14:25:40 +00:00
Thomas Zerr
e6912b100b Bump sqlite version 2026-01-30 14:24:12 +00:00
Rene Pfeuffer
7b753e0981 Fix server freeze during random token generation 2026-01-30 13:50:25 +00:00
Thomas Zerr
b6ac1f3668 Bump jetty version
Mitigate CVE-2025-5115
2026-01-30 13:47:26 +00:00
Rene Pfeuffer
f21444f97b Bump shiro version 2026-01-30 13:05:45 +00:00
Thomas Zerr
0217132f68 Bump bouncycastle version 2026-01-30 13:00:25 +00:00
Rene Pfeuffer
7be567202e Fix exception with empty SVN repositories
The changeset command attempted to open a revision with
the id of 1 (starting from 0) even if only a revision 0 existed.
The thrown exception has been replaced by an empty collection
as a return value.
2026-01-30 12:24:19 +00:00
Thomas Zerr
af6b342944 Bump jaxb version 2026-01-30 12:03:57 +00:00
Thomas Zerr
1f8921a8f1 Bump jackson version 2026-01-30 12:00:51 +00:00
René Pfeuffer
3413ebc3c2 Add gradle version checks plugin 2026-01-30 11:22:17 +01:00
Thomas Zerr
fd1be5ffe8 Bump resteasy version 2026-01-30 10:08:37 +00:00
Rene Pfeuffer
225b400522 Bump logback version
Squash commits of branch dependency/logback:

- Bump logback version
2026-01-30 09:55:32 +00:00
Rene Pfeuffer
471f40208a Bump hikariCp version 2026-01-30 09:32:22 +00:00
Johannes Schnatterer
676628ce1e Helm: Add ingressClassName 2026-01-27 16:18:21 +00:00
René Pfeuffer
f0144c96b0 Log internal server errors with exceptions 2026-01-26 18:57:59 +01:00
Rene Pfeuffer
e98a6ff093 Include filename of corrupt file in store exception 2026-01-26 15:51:32 +00:00
Rene Pfeuffer
a378ad97e3 Fix error in cat command on empty repository 2026-01-26 13:43:28 +00:00
René Pfeuffer
fd3231a24f Add changelog entry for b6116b1fc9 2026-01-23 10:15:40 +01:00
René Pfeuffer
d1a0cc9fa5 Fix logos for plugins 2026-01-23 10:12:24 +01:00
Matt Harbison
b6116b1fc9 Mercurial config fixes (#2247)
* Stop ignoring global Mercurial configuration for non-server commands

There was previously a weird duality where a simple push to or pull from a
repository hosted by SCM-Manager would load all of the system and user level
config files, but they were ignored when importing a repository.  I found this
out when importing an LFS repo, and it eventually failed with a message that the
LFS extension needs to be enabled, even though it was enabled globally.  The
global config should typically never be ignored, because some repositories are
unreadable without certain extensions or configurations.

The JavaHg API here mirrors the hg behavior for the `HGRCPATH` environment
variable- not setting it (or null here) uses the default config resolution, and
`""` (the default in JavaHg for some reason) disables default config resolution.
The repository initialization code in JavaHg also uses `""`, and there's no way
to alter that from the outside.  But that appears to be harmless, so I'm
ignoring that for now.  Note that this may only have been a problem on
non-Windows systems- setting an environment variable to empty on Windows
*unsets* the variable, even in the `_wputenv()` API, which is what we want.

After this, normal push/pull operations continue to use the global config.  But
now imports from the SCM-Manager UI, the hooks run during a push, and any other
commands that are run through JavaHg will see a consistent configuration.  LFS
(and maybe largefiles- I haven't tested it) repository imports now work.  (I
wouldn't say "supported" yet because it doesn't pull the blobs.  The largefiles
extension has a command for doing this, but the LFS extension doesn't.  The
stopgap for this is to run `hg verify` to download the blobs, but that won't
work here with the way subrepos aren't nested as expected.  I can work on a
command on the hg side to fill this gap.)

One final thing to note here- as I was testing, I initially got authentication
failures when trying to pull.  It happened several times as I added more and
more logging, then disappeared, and I wasn't able to trigger it again as I
backed off the logging to get to this change alone.  The auth info is written to
the repository's hgrc file, so a change to whether or not the global
configuration is processed is irrelevant.  The next couple of commits will try
to improve the related code.

* Stop modifying and reusing the global JavaHg RepositoryConfiguration singleton

I can't point to a specific error, but modifying a singleton and reusing it is
a good way to get unexpected state.  The extension adding won't collect
additional state (it's add-if-not-present), but the underlying
`java.util.HashMap` isn't threadsafe.  Any differences in the environment map
when this is called would alter that state of anything else that still held a
configuration (and it also uses `HashMap`), and the pending changeset, encoding,
and HgBin settings would be overwritten for everybody outright.

There's only a default constructor for this class, so nothing to pass along in
the constructor.  I don't *think* this was the cause of the random auth failures
mentioned in the previous commit, but it's easy to avoid these potential
problems.

* Avoid modifying the Mercurial repository config file to add config options

Modifying the config file is complicated and error prone, but there hasn't been
any other option aside from setting `HGRCPATH` to point to a standalone file.
Starting with Mercurial 7.0 (scheduled for March 2025), there's now a global
option to specify one or more additional config files on the command line,
without disabling the normal system and user level config file processing.[1]
Since I'm not sure what the minimum supported Mercurial is for this project,
this includes an extension that backports the same option if it is not present
in the version of Mercurial that is used, and does nothing if Mercurial natively
supports it.  I tested back to Mercurial 6.0, which should be more than
sufficient- 6.1.4 (June 2022) was the last release to support Python 2 (which
has been EOL since Jan 2020), and the Python 3 support before that release was
considered experimental.  It likely works in earlier versions, but there's a
definite minimum of 4.9 (Feb 2019), due to the `exthelper` module import.

Without the need to modify a possibly existing file and then restore it when
done, a bunch of code falls away, and the tests that supported it.


[1] https://repo.mercurial-scm.org/hg/rev/25b344f2aeef

* Clean up

---------

Co-authored-by: René Pfeuffer <rene.pfeuffer@cloudogu.com>
2026-01-23 08:55:57 +01:00
Matthias Thieroff
42c185cdb2 Update IntelliJ IDEA configuration 2026-01-21 13:36:36 +00:00
CES Marvin
2a4089de3d Prepare for next development iteration 2026-01-12 10:44:14 +00:00
CES Marvin
5186c2c9f1 Release version 3.11.2 3.11.2 2026-01-12 09:54:50 +00:00
Thomas Zerr
72e8ad5002 Adjust changelog for release 3.11.2 2026-01-12 10:46:09 +01:00
Rene Pfeuffer
a8307f8618 Update Tika to mitigate CVE-2025-54988 and CVE-2025-66516
To do so, we also have to update slf4j, logback, and spotter.
2026-01-12 09:44:26 +00:00
René Pfeuffer
67fa03736d Increase gradle memory for sonar analysis 2026-01-06 15:24:09 +01:00
René Pfeuffer
cd11f2854f Bump node version 2026-01-06 10:18:14 +01:00