OGNL 3.4.3

What's Changed

• Cherry-picks "WW-5417 update OgnlRuntime & ObjectPropertyAccessor to do access check for set field value" by @lukaszlenart in #265

Dependencies

• Bump actions/checkout from 3.5.3 to 3.6.0 by @dependabot in #224
• Bump org.easymock:easymock from 5.1.0 to 5.2.0 by @dependabot in #225
• Bump actions/cache from 3.3.1 to 3.3.2 by @dependabot in #227
• Bump actions/checkout from 3.6.0 to 4.0.0 by @dependabot in #226
• Bump org.sonatype.buildsupport:buildsupport from 37 to 38 by @dependabot in #228
• Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.5.0 to 3.6.0 by @dependabot in #229
• Bump actions/checkout from 4.0.0 to 4.1.0 by @dependabot in #230
• Bump org.sonatype.buildsupport:buildsupport from 38 to 39 by @dependabot in #231
• Bump actions/checkout from 4.1.0 to 4.1.1 by @dependabot in #232
• Bump org.jacoco:jacoco-maven-plugin from 0.8.10 to 0.8.11 by @dependabot in #233
• Bump org.apache.maven.plugins:maven-surefire-plugin from 3.1.2 to 3.2.1 by @dependabot in #234
• Bump junit.version from 5.10.0 to 5.10.1 by @dependabot in #235
• Bump org.sonatype.buildsupport:buildsupport from 39 to 41 by @dependabot in #236
• Bump org.apache.maven.plugins:maven-surefire-plugin from 3.2.1 to 3.2.2 by @dependabot in #238
• Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.6.0 to 3.6.2 by @dependabot in #237
• Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.6.2 to 3.6.3 by @dependabot in #239
• Bump actions/setup-java from 3 to 4 by @dependabot in #240
• Bump org.apache.maven.plugins:maven-surefire-plugin from 3.2.2 to 3.2.3 by @dependabot in #241
• Bump org.javassist:javassist from 3.29.2-GA to 3.30.2-GA by @dependabot in #243
• Bump org.assertj:assertj-core from 3.24.2 to 3.25.0 by @dependabot in #244
• Bump org.assertj:assertj-core from 3.25.0 to 3.25.1 by @dependabot in #245
• Bump org.apache.maven.plugins:maven-surefire-plugin from 3.2.3 to 3.2.5 by @dependabot in #246
• Bump actions/cache from 3.3.2 to 3.3.3 by @dependabot in #247
• Bump actions/cache from 3.3.3 to 4.0.0 by @dependabot in #248
• Bump org.assertj:assertj-core from 3.25.1 to 3.25.2 by @dependabot in #249
• Bump org.assertj:assertj-core from 3.25.2 to 3.25.3 by @dependabot in #251
• Bump junit.version from 5.10.1 to 5.10.2 by @dependabot in #250
• Adds KEYS to allow verify signed artifacts by @lukaszlenart in #253
• Bump org.sonatype.buildsupport:buildsupport from 41 to 43 by @dependabot in #254
• Bump org.sonatype.buildsupport:buildsupport from 43 to 44 by @dependabot in #256
• Bump org.codehaus.mojo:javacc-maven-plugin from 3.0.1 to 3.1.0 by @dependabot in #255
• Bump actions/cache from 4.0.0 to 4.0.1 by @dependabot in #257
• Bump actions/checkout from 4.1.1 to 4.1.2 by @dependabot in #258
• Bump actions/cache from 4.0.1 to 4.0.2 by @dependabot in #259
• Bump org.jacoco:jacoco-maven-plugin from 0.8.11 to 0.8.12 by @dependabot in #260
• Bump org.sonatype.buildsupport:buildsupport from 44 to 46 by @dependabot in #261

Full Changelog: OGNL_3_4_2...OGNL_3_4_3

OGNL 3.3.5

What's Changed

• Passes instance of MemberAccess to OgnlContext to avoid IllegalArgumentException by @lukaszlenart in #174
• WW-5417 update OgnlRuntime & ObjectPropertyAccessor to do access check for set field value by @jefferyxhy in #264

New Contributors

• @jefferyxhy made their first contribution in #264

Full Changelog: OGNL_3_4_2...OGNL_3_3_5

OGNL 3.4.2

What's Changed

• OGNL-102 Improves performance when null was returned by @lukaszlenart in #204
• Brings back Map interface into OgnlContext by @lukaszlenart in #222
• Uses Java 17 in Code Quality check by @lukaszlenart in #223

Full Changelog: OGNL_3_4_1...OGNL_3_4_2

OGNL 3.4.1

What's Changed

• Includes the Vintage engine to run Junit4.x tests and fix one issue by @lukaszlenart in #218
• Update ExpressionCompiler to run on JDK17+ without 'add-opens' JVM opt using Javassist ClassPool.toClass overload that takes a neighbour class by @petergeneric in #214
• Partially reverts #214 to keep compatibility with JDK8 by @lukaszlenart in #219
• Adds additional helper method to simplify create OgnlContext by @lukaszlenart in #220

Dependencies

• Bump org.junit.jupiter:junit-jupiter from 5.9.0 to 5.10.0 by @dependabot in #216
• Bump org.jacoco:jacoco-maven-plugin from 0.8.8 to 0.8.10 by @dependabot in #215
• Bump org.junit.jupiter:junit-jupiter-params from 5.9.0 to 5.10.0 by @dependabot in #217

New Contributors

• @petergeneric made their first contribution in #214

Full Changelog: OGNL_3_4_0...OGNL_3_4_1

OGNL 3.4.0

What's Changed

• Merges changes from commons-ognl and cleans up code by @lukaszlenart in #155
• Automatically assign reviewers to dependabot PRs by @lukaszlenart in #170
• Defines Sonar token in pom.xml and in GH Actions by @lukaszlenart in #171
• Uses proper Maven command to run Sonar analytics by @lukaszlenart in #172
• Create FUNDING.yml and clarify Apache Commons OGNL status by @lukaszlenart in #173
• Cherry picks #174 - Passes instance of MemberAccess to OgnlContext to avoid IllegalArgumentException by @lukaszlenart in #175
• Update maven metadata & enable deploy of snapshots by @lukaszlenart in #176
• Turns OgnlContext into independent class not inherited from Map by @lukaszlenart in #193

Dependencies

• Bump javassist from 3.29.0-GA to 3.29.1-GA by @dependabot in #163
• Bump maven-javadoc-plugin from 3.4.0 to 3.4.1 by @dependabot in #164
• Bump actions/setup-java from 2 to 3 by @dependabot in #165
• Bump actions/cache from 2.1.4 to 3.0.8 by @dependabot in #167
• Bump jacoco-maven-plugin from 0.8.7 to 0.8.8 by @dependabot in #169
• Bump actions/checkout from 2.3.4 to 3.0.2 by @dependabot in #168
• Bump maven-jar-plugin from 3.2.2 to 3.3.0 by @dependabot in #178
• Bump javassist from 3.29.1-GA to 3.29.2-GA by @dependabot in #177
• Bump actions/cache from 3.0.8 to 3.0.9 by @dependabot in #180
• Bump javacc-maven-plugin from 3.0.0 to 3.0.1 by @dependabot in #179
• Bump actions/cache from 3.0.9 to 3.0.10 by @dependabot in #181
• Bump actions/checkout from 3.0.2 to 3.1.0 by @dependabot in #182
• Bump actions/cache from 3.0.10 to 3.0.11 by @dependabot in #183
• Bump easymock from 4.3 to 5.0.0 by @dependabot in #184
• Bump pascalgn/automerge-action from 0.15.3 to 0.15.5 by @dependabot in #185
• Bump easymock from 5.0.0 to 5.0.1 by @dependabot in #186
• Bump actions/checkout from 3.1.0 to 3.2.0 by @dependabot in #187
• Bump actions/cache from 3.0.11 to 3.2.1 by @dependabot in #188
• Bump easymock from 5.0.1 to 5.1.0 by @dependabot in #189
• Bump actions/cache from 3.2.1 to 3.2.2 by @dependabot in #190
• Bump actions/checkout from 3.2.0 to 3.3.0 by @dependabot in #191
• Bump actions/cache from 3.2.2 to 3.2.3 by @dependabot in #192
• Bump actions/cache from 3.2.3 to 3.2.4 by @dependabot in #194
• Bump actions/cache from 3.2.4 to 3.2.5 by @dependabot in #195
• Bump maven-javadoc-plugin from 3.4.1 to 3.5.0 by @dependabot in #196
• Bump actions/cache from 3.2.5 to 3.2.6 by @dependabot in #197
• Bump maven-compiler-plugin from 3.10.1 to 3.11.0 by @dependabot in #198
• Bump actions/cache from 3.2.6 to 3.3.0 by @dependabot in #199
• Bump actions/checkout from 3.3.0 to 3.4.0 by @dependabot in #201
• Bump maven-surefire-plugin from 2.22.2 to 3.0.0 by @dependabot in #202
• Bump actions/cache from 3.3.0 to 3.3.1 by @dependabot in #200
• Bump actions/checkout from 3.4.0 to 3.5.0 by @dependabot in #203
• Bump actions/checkout from 3.5.0 to 3.5.2 by @dependabot in #205
• Bump assertj-core from 3.23.1 to 3.24.2 by @dependabot in #206
• Bump maven-surefire-plugin from 3.0.0 to 3.1.0 by @dependabot in #207
• Bump maven-source-plugin from 3.2.1 to 3.3.0 by @dependabot in #208
• Bump maven-surefire-plugin from 3.1.0 to 3.1.2 by @dependabot in #210
• Bump actions/checkout from 3.5.2 to 3.5.3 by @dependabot in #209
• Bump maven-clean-plugin from 3.2.0 to 3.3.1 by @dependabot in #211

Full Changelog: OGNL_3_3_4...OGNL_3_4_0

OGNL 3.3.4

What's Changed

• Passes instance of MemberAccess to OgnlContext to avoid IllegalArgumentException by @lukaszlenart in #174

Full Changelog: OGNL_3_3_3...OGNL_3_3_4