308 Commits

Author SHA1 Message Date
Athou
4ff46965c4 add websocket support to immediately refresh tree when new entries are available 2023-01-18 20:58:45 +01:00
Athou
04894f118b replace old client with new client from commafeed-ui repository 2022-08-13 17:41:41 +02:00
Athou
ac7b6eeb21 split client and server into maven modules 2022-08-13 10:48:09 +02:00
Athou
a75f726111 2.6.0 release 2022-08-08 12:43:36 +02:00
dependabot[bot]
155a66b913 Bump postgresql from 42.3.3 to 42.4.1
Bumps [postgresql](https://github.com/pgjdbc/pgjdbc) from 42.3.3 to 42.4.1.
- [Release notes](https://github.com/pgjdbc/pgjdbc/releases)
- [Changelog](https://github.com/pgjdbc/pgjdbc/blob/master/CHANGELOG.md)
- [Commits](https://github.com/pgjdbc/pgjdbc/compare/REL42.3.3...REL42.4.1)

---
updated-dependencies:
- dependency-name: org.postgresql:postgresql
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-08-06 07:15:04 +00:00
Athou
2e24d32cc2 add support for java17 (#1009) 2022-07-30 13:55:57 +02:00
Athou
d97f42ff2d add first integration test 2022-07-17 10:25:07 +02:00
Athou
9ab52aeaf2 migrate to junit5 2022-07-15 19:28:11 +02:00
Athou
a48135a60d send X-Frame-Options header with value "DENY" 2022-07-14 13:58:37 +02:00
Athou
d21e5dfee4 upgrade dropwizard to 2.1 2022-07-14 13:58:37 +02:00
Athou
899a8d746a increase minimum password strength 2022-07-13 22:20:19 +02:00
Athou
0fd55c6635 keep using log4j-over-slf4j 2022-03-22 16:20:55 +01:00
Athou
4b346dd2e1 liquibase upgrade (#993) 2022-03-22 16:01:44 +01:00
Athou
ec50530284 downgrade mysql client to fix java.lang.ClassCastException: class java.time.LocalDateTime cannot be cast to class java.lang.String (#993)
https://forum.liquibase.org/t/liquibaseexception-java-lang-classcastexception-class-java-time-localdatetime-cannot-be-cast-to-class-java-lang-string/5059
2022-03-22 14:40:53 +01:00
Athou
cbc4ebe7b3 fix infinite build in recent eclipse versions 2022-03-22 14:28:16 +01:00
Jérémie Panzer
f5339db646 Merge pull request #995 from Athou/dependabot/maven/com.h2database-h2-2.1.210
Bump h2 from 2.0.206 to 2.1.210
2022-03-22 12:51:50 +01:00
dependabot[bot]
16b3049839 Bump h2 from 2.0.206 to 2.1.210
Bumps [h2](https://github.com/h2database/h2database) from 2.0.206 to 2.1.210.
- [Release notes](https://github.com/h2database/h2database/releases)
- [Commits](https://github.com/h2database/h2database/compare/version-2.0.206...version-2.1.210)

---
updated-dependencies:
- dependency-name: com.h2database:h2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-03-22 11:49:07 +00:00
dependabot[bot]
57ff8e9d22 Bump postgresql from 42.3.2 to 42.3.3
Bumps [postgresql](https://github.com/pgjdbc/pgjdbc) from 42.3.2 to 42.3.3.
- [Release notes](https://github.com/pgjdbc/pgjdbc/releases)
- [Changelog](https://github.com/pgjdbc/pgjdbc/blob/master/CHANGELOG.md)
- [Commits](https://github.com/pgjdbc/pgjdbc/compare/REL42.3.2...REL42.3.3)

---
updated-dependencies:
- dependency-name: org.postgresql:postgresql
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-03-22 11:49:07 +00:00
dependabot[bot]
3df53b582a Bump postgresql from 42.3.1 to 42.3.2
Bumps [postgresql](https://github.com/pgjdbc/pgjdbc) from 42.3.1 to 42.3.2.
- [Release notes](https://github.com/pgjdbc/pgjdbc/releases)
- [Changelog](https://github.com/pgjdbc/pgjdbc/blob/master/CHANGELOG.md)
- [Commits](https://github.com/pgjdbc/pgjdbc/compare/REL42.3.1...REL42.3.2)

---
updated-dependencies:
- dependency-name: org.postgresql:postgresql
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-02-02 07:08:31 +00:00
dependabot[bot]
c4e9178efb Bump h2 from 2.0.204 to 2.0.206
Bumps [h2](https://github.com/h2database/h2database) from 2.0.204 to 2.0.206.
- [Release notes](https://github.com/h2database/h2database/releases)
- [Commits](https://github.com/h2database/h2database/compare/version-2.0.204...version-2.0.206)

---
updated-dependencies:
- dependency-name: com.h2database:h2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-01-07 06:36:30 +00:00
Athou
089be99287 use sslcontext-kickstart to create ssl factory 2022-01-02 21:25:15 +01:00
Athou
b3dd6acfe6 enforce code formatting 2022-01-02 21:24:37 +01:00
Athou
ec3645a1c9 use dependencies instead of copying code 2022-01-02 21:03:33 +01:00
Athou
1c49873da1 fix media extension not loaded in shaded jar by merging our rome.properties with the one from rome-modules (#800) 2022-01-02 18:42:53 +01:00
Athou
4fb95799f8 support for media thumbnail and description as a backup for missing content (#800) 2022-01-02 15:58:00 +01:00
Athou
2ee9084b91 upgrade dependencies 2022-01-02 08:38:30 +01:00
Athou
e01e59b72c restore previous liquibase version to fix issue with "filter" column not created with correct case in FEEDSUBSCRIPTIONS table 2022-01-01 22:09:33 +01:00
Athou
c6601e5bbf correctly follow http error code 308 redirects (fixes #978) 2022-01-01 18:52:31 +01:00
Athou
8e1aad655a pgsql driver upgrade 2021-12-23 15:07:02 +01:00
Athou
942447c62f dropwizard upgrade 2021-12-23 15:07:02 +01:00
Athou
b45219a595 fix metrics 2021-01-30 22:40:31 +01:00
Pierre Klink
4aca62c042 add tests for PubSubService 2020-10-04 00:12:29 +02:00
Athou
b597c655cd prepare next version 2020-09-02 21:24:21 +02:00
Athou
c1dac2e064 2.5.0 release 2020-09-02 21:20:20 +02:00
Jeremie Panzer
b44e737448 fix liquibase script when running on an empty postgresql database 2020-03-12 13:45:06 +01:00
Jeremie Panzer
bb429afd95 ignore swagger in eclipse 2020-03-12 12:54:20 +01:00
Athou
7f40a430fd hide securitycheck user from swagger documentation 2019-05-01 23:33:55 +02:00
Athou
696e0b1fa7 maven config for swagger plugin changed 2019-05-01 19:56:48 +02:00
Jérémie Panzer
71ac2bfc45 support for Java9+ (#906)
* initial java9+ support

* restore session management, updated for jetty 9.4

* Session actually implements EntityManager

* reusable method for setting the timeout
2019-04-22 20:30:06 +02:00
Athou
b3ce43eaf7 faster replace for large feeds (#881) 2018-07-11 17:13:38 +02:00
snyk-bot
0cc94c2033 fix: pom.xml to reduce vulnerabilities
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JAVA-COMH2DATABASE-31685
- https://snyk.io/vuln/SNYK-JAVA-MYSQL-31399
- https://snyk.io/vuln/SNYK-JAVA-MYSQL-31449
- https://snyk.io/vuln/SNYK-JAVA-MYSQL-31580
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHEHTTPCOMPONENTS-31517
- https://snyk.io/vuln/SNYK-JAVA-ORGJSOUP-31218
2018-06-14 05:55:43 +00:00
Athou
ea5fccfe5f fix build 2017-10-12 12:10:04 +02:00
Athou
f381974955 prepare for next version 2017-08-01 13:55:11 +02:00
Athou
2fca6132a0 2.4.0 release 2017-08-01 13:50:40 +02:00
Jérémie Panzer
137eba33c9 prerequisites is for maven plugins 2017-08-01 13:44:23 +02:00
Ty Brown
cb254f87d4 Add feature to emit Graphite metrics based on configuration 2017-07-05 21:56:00 -05:00
Athou
8daaee28c3 fix version number 2016-11-17 20:35:50 +01:00
Athou
c32f608ec5 upgrade postgresql jdbc driver (fix #827) 2016-11-17 20:30:34 +01:00
Athou
268869345c reduce npm verbosity (fixes #811) 2016-08-23 12:11:42 +02:00
Justine Tunney
7817431bce Upgrade Apache Commons Collections to v4.1
Version 4.0 has a CVSS 10.0 vulnerability. That's the worst kind of
vulnerability that exists. By merely existing on the classpath, this
library causes the Java serialization parser for the entire JVM process
to go from being a state machine to a turing machine. A turing machine
with an exec() function!

https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8103
https://commons.apache.org/proper/commons-collections/security-reports.html
http://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/
2016-04-10 20:56:38 -07:00