All pull requests

Pull requests

• Use SunLimitedUnsafeReflectionProvider not SunUnsafeReflectionProvider on 23+

  #475·jglick opened Jul 6, 2026Contributor·

  ·
  3

• Bump actions/checkout from 6 to 7 in the github-actions group

  dependenciesgithub_actions
  #473·dependabot[bot] opened Jul 1, 2026Bot·

  ·

• Bump org.codehaus.jettison:jettison from 1.5.4 to 1.5.6

  dependenciesjava
  #472·dependabot[bot] opened Jul 1, 2026Bot·

  ·

• Bump io.wcm.devops.maven.plugins:eclipse-maven-plugin from 3.3.0 to 3.3.2

  dependenciesjava
  #471·dependabot[bot] opened Jul 1, 2026Bot·

  ·

• Bump xom:xom from 1.3.9 to 1.4.6

  dependenciesjava
  #470·dependabot[bot] opened Jul 1, 2026Bot·

  ·

• Bump org.jacoco:jacoco-maven-plugin from 0.8.14 to 0.8.15

  dependenciesjava
  #469·dependabot[bot] opened Jul 1, 2026Bot·

  ·

• Bump org.hibernate.orm:hibernate-envers from 7.2.6.Final to 7.4.3.Final

  dependenciesjava
  #468·dependabot[bot] opened Jul 1, 2026Bot·

  ·

• Bump org.hibernate.orm:hibernate-core from 7.2.6.Final to 7.4.3.Final

  dependenciesjava
  #467·dependabot[bot] opened Jul 1, 2026Bot·

  ·

• Bump org.sonatype.central:central-publishing-maven-plugin from 0.10.0 to 0.11.0

  dependenciesjava
  #466·dependabot[bot] opened Jul 1, 2026Bot·

  ·

• pad percent escape to two hex digits in FilePersistenceStrategy

  #465·jmestwa-coder opened Jun 3, 2026·

  ·
  1

• reject doctype declarations in XomDriver

  #464·jmestwa-coder opened Jun 2, 2026·

  ·
  1

• Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.5.5 to 3.5.6

  dependenciesjava
  #462·dependabot[bot] opened Jun 1, 2026Bot·

  ·

• Bump org.apache.maven.plugins:maven-dependency-plugin from 3.10.0 to 3.11.0

  dependenciesjava
  #461·dependabot[bot] opened Jun 1, 2026Bot·

  ·

• Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.2 to 3.6.3

  dependenciesjava
  #460·dependabot[bot] opened Jun 1, 2026Bot·

  ·

• Bump version.plugin.maven.surefire from 3.5.5 to 3.5.6

  dependenciesjava
  #459·dependabot[bot] opened Jun 1, 2026Bot·

  ·

• Bump org.apache.maven.plugins:maven-site-plugin from 3.21.0 to 3.22.0

  dependenciesjava
  #457·dependabot[bot] opened Jun 1, 2026Bot·

  ·

• fix loss of read-only state in SubjectConverter

  #455·jmestwa-coder opened Jun 1, 2026·

  ·
  1

• Bump io.github.git-commit-id:git-commit-id-maven-plugin from 9.1.0 to 9.2.0

  dependenciesjava
  #450·dependabot[bot] opened May 1, 2026Bot·

  ·

• Bump commons-codec:commons-codec from 1.21.0 to 1.22.0

  dependenciesjava
  #449·dependabot[bot] opened May 1, 2026Bot·

  ·

• add guardrails for deserialization

  #371·htanwar-atlassian opened Mar 20, 2025·

  ·

• RecordConverter: Do not throw ClassNotFoundException when "class" attribute is absent

  #351·toby1984 opened Oct 17, 2023Contributor·

  ·
  2

• Sonarqube Fixes

  #299·gorky opened Jul 6, 2022Contributor·

  ·
  1

• XStream modules are using to be deleted Java APIs - Java9 version #211

  improvement
  #212·gorky opened Jul 29, 2020Contributor·

  ·

  · 1.5.x
  3

  

• Add some unit tests

  #190·zeshuai007 opened Mar 18, 2020Contributor·

  ·
  2

• XStreamExcludeEmpty annotation added

  #109·Enigo opened Mar 1, 2018·

  ·
  1