Inperpetuammemoriam
3e11ee8d8c
GUACAMOLE-1809: Remove obsolete license information
...
The Spring framework is no longer used.
2023-06-11 20:28:17 +02:00
Inperpetuammemoriam
0530450748
GUACAMOLE-1809: Replace library used for IP address matching
...
Newer versions of Spring Security lack support of Java 8.
2023-06-11 20:15:51 +02:00
Inperpetuammemoriam
846c507ba7
GUACAMOLE-1806: Update Java dependencies to patched versions
...
These changes should address the following (potentially relevant)
vulnerabilities:
- CVE-2022-21724
- CVE-2022-26520
- CVE-2022-31197
- CVE-2022-40151
- CVE-2022-40152
- CVE-2022-41946
- CVE-2023-20861
- CVE-2023-20862
- CVE-2023-20863
- GHSA-673j-qm5f-xpv8
2023-06-10 09:58:49 +02:00
Inperpetuammemoriam
4290c378c8
GUACAMOLE-1806: Fix naming inconsistency
...
The version in the folder name now matches the version specified in the
files below that folder.
2023-06-10 09:58:16 +02:00
James Muehlner
4852d63373
GUACAMOLE-1794: Update KSM SDK to 16.5.3 to add support for "passkey" field type.
...
(cherry picked from commit 2a9bbed2250be2087db8d4a276ff4140ac919888)
2023-05-23 23:40:44 +00:00
Mike Jumper
8ada1a91c2
GUACAMOLE-1786: Update Java dependencies to latest compatible versions.
2023-05-11 21:03:48 -07:00
Michael Jumper
1d0714f185
GUACAMOLE-1763: Update JavaScript dependencies to latest compatible versions.
2023-04-03 14:31:07 -07:00
Michael Jumper
8ee9ee40dc
GUACAMOLE-1763: Update Java dependencies to latest compatible versions.
2023-04-03 14:24:58 -07:00
Mike Jumper
0f3cb8d056
GUACAMOLE-1594: Update JavaScript dependencies to latest compatible versions.
2023-01-10 16:28:08 -08:00
Mike Jumper
9262a2b33b
GUACAMOLE-1594: Update Java dependencies to latest compatible versions.
2023-01-10 16:28:08 -08:00
James Muehlner
ed0930212c
GUACAMOLE-1594: Merge switch to Logback 1.3.x for Java 8 support.
2022-11-11 15:32:52 -08:00
Mike Jumper
22f2f89009
GUACAMOLE-1594: Switch to Logback 1.3.x (supports Java 8).
2022-11-11 15:27:28 -08:00
Mike Jumper
4c8ba81c10
GUACAMOLE-1594: Override transitive common-text for LDAP with latest release (1.10.0).
2022-11-06 22:06:22 -08:00
Mike Jumper
6637f4911d
GUACAMOLE-1594: Update to Spring Security 5.7.5.
2022-11-06 22:06:17 -08:00
Mike Jumper
753cfc3e5c
GUACAMOLE-1594: Update to latest version of Jackson (2.14.0).
2022-11-06 22:06:06 -08:00
Mike Jumper
ce9922e08c
GUACAMOLE-1594: Update all Java and JavaScript dependencies to latest compatible.
...
NOTE: Several WebPack plugins could not be updated as all plugins within
WebPack's "webpack-contrib" have dropped support for WebPack v4
entirely, but Closure Compiler only supports WebPack v4.
2022-10-27 12:54:58 -07:00
James Muehlner
74a34337f3
GUACAMOLE-1594: Update as many transitive dependencies as possible with force rebuild.
2022-05-02 21:01:26 +00:00
James Muehlner
b06b7e4fae
GUACAMOLE-1594: Update jackson-databind to 2.13.2.1 and bump other dependencies as needed.
2022-05-02 20:02:04 +00:00
Michael Jumper
979505bb58
GUACAMOLE-641: Remove Azure Key Vault extension until license text can be obtained.
2022-01-22 22:25:05 -08:00
Michael Jumper
8bedbe746c
GUACAMOLE-641: Add initial draft implementation of KSM vault support for Guacamole.
2022-01-22 22:25:04 -08:00
Michael Jumper
6145a79f5d
GUACAMOLE-641: Add generic vault support with an initial Azure Key Vault implementation.
2022-01-22 22:25:04 -08:00
Michael Jumper
c8ffbbdbab
GUACAMOLE-957: Add license information for SnakeYAML version required by updated Jackson.
2021-12-27 10:56:27 -08:00
Virtually Nick
20eec4bbb0
Merge 1.4.0 changes back to master.
2021-12-27 09:32:39 -05:00
Michael Jumper
d8ce01318e
GUACAMOLE-773: Update JavaScript dependencies to latest stable, compatible versions.
2021-12-26 17:50:43 -08:00
Michael Jumper
b8d23962d6
GUACAMOLE-773: Update Java dependencies to latest stable, compatible versions.
2021-12-26 17:50:43 -08:00
Michael Jumper
49a4a6c7a0
GUACAMOLE-957: Support reading multiple LDAP server configurations from "ldap-servers.yml".
2021-10-23 20:19:51 -07:00
Michael Jumper
88ab68cf6b
GUACAMOLE-773: Update commons-collections dependency of guacamole-auth-radius to latest (3.2.2).
2021-09-16 19:51:27 -07:00
Michael Jumper
3ec578edce
GUACAMOLE-773: Remove angular-touch (no longer applicable).
...
Previously, the angular-touch library provided by AngularJS was used to
allow click interactions with UI components to work on touch devices
without an uncomfortable ~300ms delay. From AngularJS 1.7.x onward, this
feature of angular-touch is no longer present:
https://docs.angularjs.org/guide/migration#ngtouch
This should be OK - modern browsers will now recognize applications
aimed at touch support via the use of the "viewport" meta tag (which we
use), removing our original need for angular-touch. The same goes for
IE10+.
2021-06-02 20:37:52 -07:00
Michael Jumper
e93d0faa22
GUACAMOLE-773: Update Pickr to version 1.8.1.
2021-06-02 20:37:52 -07:00
Michael Jumper
8ed9ac524c
GUACAMOLE-773: Add license information for new JavaScript dependencies pulled in by Webpack.
2021-06-02 20:37:52 -07:00
Michael Jumper
4c32e5951b
GUACAMOLE-773: Add separate license for messageformat-parser (different version from messageformat).
2021-06-02 20:37:52 -07:00
Michael Jumper
fd6c5c3e91
GUACAMOLE-773: Update license information from Webjar Maven coordinates to NPM module coordinates.
2021-06-02 20:37:52 -07:00
Michael Jumper
e119ba459b
GUACAMOLE-773: Allow automatic license generation to consider multiple dependency lists, not necessarily from Maven.
2021-06-02 20:37:52 -07:00
Michael Jumper
5f0ab7b3f3
GUACAMOLE-773: Use Webpack rather than Webpack+Gulp.
2021-06-02 12:48:57 -07:00
Michael Jumper
af0b2ec5c2
GUACAMOLE-773: Use HTTPS for all LICENSE information URLs pointing to Apache.
2021-04-27 15:24:01 -07:00
Michael Jumper
4246acf24e
GUACAMOLE-773: Update Jersey from 2.33 to 2.34.
2021-04-26 12:53:23 -07:00
Michael Jumper
9b90376ef3
GUACAMOLE-773: Remove license documentation for dependencies that are no longer bundled.
2021-04-03 19:26:46 -07:00
Michael Jumper
a5ae5811c1
GUACAMOLE-773: Bring license details of bundled Java dependencies up-to-date.
2021-04-03 19:22:43 -07:00
Michael Jumper
d155975d93
GUACAMOLE-773: Allow license checks to be bypassed when necessary for testing/development.
2021-04-03 17:21:34 -07:00
Michael Jumper
7ae3cc1084
GUACAMOLE-1298: Ensure LICENSE/NOTICE generation takes current build into account (not central repository).
2021-03-31 18:37:18 -07:00
Michael Jumper
73e582b478
GUACAMOLE-1298: Avoid POSIX character classes for compatibility with mawk.
2021-03-31 17:23:37 -07:00
Michael Jumper
31a0100c02
GUACAMOLE-1298: Trim down NOTICE files to only those attribution notices that are required.
...
From https://infra.apache.org/licensing-howto.html#bundle-asf-product :
>
> Modifications to NOTICE
> -----------------------
>
> The NOTICE file is reserved for a certain subset of legally required
> notifications which are not satisfied by either the text of LICENSE or
> the presence of licensing information embedded within the bundled
> dependency. Aside from Apache-licensed dependencies which supply NOTICE
> files of their own, it is uncommon for a dependency to require additions
> to NOTICE.
>
> Copyright notifications which have been relocated, rather than
> removed, from source files must be preserved in NOTICE. However,
> elements such as the copyright notifications embedded within BSD and MIT
> licenses do not need to be duplicated in NOTICE. You can leave those
> notices in their original locations.
>
> It is important to keep NOTICE as brief and simple as possible, as each
> addition places a burden on downstream consumers.
>
> *Do not* add anything to NOTICE which is not legally required.
>
2021-03-31 12:36:10 -07:00
Michael Jumper
1a331e3d67
GUACAMOLE-1298: Do not include duplicate copies of Apache License for dependencies, moving any additional notes to NOTICE.
2021-03-31 12:16:59 -07:00
Michael Jumper
258e5ae5ac
GUACAMOLE-1298: Add automatic generation and packaging of LICENSE/NOTICE for RADIUS support.
2021-03-31 11:42:38 -07:00
Michael Jumper
6c8a699faa
GUACAMOLE-1298: Automatically generate LICENSE and NOTICE files.
2021-03-31 11:42:38 -07:00