Skip to content

LIBCIR-497. Upgrade to DSpace 8.4#236

Merged
dsteelma-umd merged 1158 commits into
mdsoar-mainfrom
feature/LIBCIR-497
Jun 12, 2026
Merged

LIBCIR-497. Upgrade to DSpace 8.4#236
dsteelma-umd merged 1158 commits into
mdsoar-mainfrom
feature/LIBCIR-497

Conversation

@dsteelma-umd

Copy link
Copy Markdown
Contributor

Merge changes from DSpace 8.4 ("dspace-8.4" tag) into MD-SOAR.

  • Updated derived/copied versions of DSpace stock files to reflect DSpace 8.4 changes
  • Fixed compilation errors

https://umd-dit.atlassian.net/browse/LIBCIR-497

EikLoe and others added 30 commits February 17, 2026 17:46
… section.

(cherry picked from commit ef6b02b886ce046639f3e3e53f626e6a93df4fd1)
(cherry picked from commit 3b33cccbae698479e81a4dfdca4840307d0b61ab)
[Port dspace-8_x] Include orcid in dim2datacite crosswalks - fixes #9883
[Port dspace-8_x] Refactor authorization-based Solr queries and add new findAddAuthorized/findEditAuthorized endpoints
…nload has a tendency to fail randomly in automated Docker builds.

(cherry picked from commit d2abf0f7a0ab28af8d2f8c46782f637db2cf641a)
[Port dspace-8_x] [Docker] Install Apache Ant via `apt-get` instead of manual download.
….checkerframework-checker-qual-3.53.1

build(deps): bump org.checkerframework:checker-qual from 3.53.0 to 3.53.1
…arta-67cb3e7486

build(deps): bump jakarta.xml.bind:jakarta.xml.bind-api from 4.0.4 to 4.0.5 in the jakarta group
Bumps the spring group with 13 updates:

| Package | From | To |
| --- | --- | --- |
| [org.springframework:spring-orm](https://github.com/spring-projects/spring-framework) | `6.2.15` | `6.2.16` |
| [org.springframework:spring-core](https://github.com/spring-projects/spring-framework) | `6.2.15` | `6.2.16` |
| [org.springframework:spring-beans](https://github.com/spring-projects/spring-framework) | `6.2.15` | `6.2.16` |
| [org.springframework:spring-aop](https://github.com/spring-projects/spring-framework) | `6.2.15` | `6.2.16` |
| [org.springframework:spring-context](https://github.com/spring-projects/spring-framework) | `6.2.15` | `6.2.16` |
| [org.springframework:spring-context-support](https://github.com/spring-projects/spring-framework) | `6.2.15` | `6.2.16` |
| [org.springframework:spring-tx](https://github.com/spring-projects/spring-framework) | `6.2.15` | `6.2.16` |
| [org.springframework:spring-jdbc](https://github.com/spring-projects/spring-framework) | `6.2.15` | `6.2.16` |
| [org.springframework:spring-web](https://github.com/spring-projects/spring-framework) | `6.2.15` | `6.2.16` |
| [org.springframework:spring-webmvc](https://github.com/spring-projects/spring-framework) | `6.2.15` | `6.2.16` |
| [org.springframework:spring-expression](https://github.com/spring-projects/spring-framework) | `6.2.15` | `6.2.16` |
| [org.springframework:spring-test](https://github.com/spring-projects/spring-framework) | `6.2.15` | `6.2.16` |
| [org.springframework.ldap:spring-ldap-core](https://github.com/spring-projects/spring-ldap) | `3.3.5` | `3.3.6` |


Updates `org.springframework:spring-orm` from 6.2.15 to 6.2.16
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.15...v6.2.16)

Updates `org.springframework:spring-core` from 6.2.15 to 6.2.16
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.15...v6.2.16)

Updates `org.springframework:spring-beans` from 6.2.15 to 6.2.16
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.15...v6.2.16)

Updates `org.springframework:spring-aop` from 6.2.15 to 6.2.16
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.15...v6.2.16)

Updates `org.springframework:spring-context` from 6.2.15 to 6.2.16
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.15...v6.2.16)

Updates `org.springframework:spring-context-support` from 6.2.15 to 6.2.16
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.15...v6.2.16)

Updates `org.springframework:spring-tx` from 6.2.15 to 6.2.16
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.15...v6.2.16)

Updates `org.springframework:spring-jdbc` from 6.2.15 to 6.2.16
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.15...v6.2.16)

Updates `org.springframework:spring-web` from 6.2.15 to 6.2.16
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.15...v6.2.16)

Updates `org.springframework:spring-webmvc` from 6.2.15 to 6.2.16
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.15...v6.2.16)

Updates `org.springframework:spring-expression` from 6.2.15 to 6.2.16
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.15...v6.2.16)

Updates `org.springframework:spring-test` from 6.2.15 to 6.2.16
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.15...v6.2.16)

Updates `org.springframework:spring-core` from 6.2.15 to 6.2.16
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.15...v6.2.16)

Updates `org.springframework:spring-beans` from 6.2.15 to 6.2.16
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.15...v6.2.16)

Updates `org.springframework:spring-aop` from 6.2.15 to 6.2.16
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.15...v6.2.16)

Updates `org.springframework:spring-context` from 6.2.15 to 6.2.16
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.15...v6.2.16)

Updates `org.springframework:spring-context-support` from 6.2.15 to 6.2.16
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.15...v6.2.16)

Updates `org.springframework.ldap:spring-ldap-core` from 3.3.5 to 3.3.6
- [Release notes](https://github.com/spring-projects/spring-ldap/releases)
- [Changelog](https://github.com/spring-projects/spring-ldap/blob/main/changelog.txt)
- [Commits](spring-projects/spring-ldap@3.3.5...3.3.6)

Updates `org.springframework:spring-tx` from 6.2.15 to 6.2.16
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.15...v6.2.16)

Updates `org.springframework:spring-jdbc` from 6.2.15 to 6.2.16
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.15...v6.2.16)

Updates `org.springframework:spring-web` from 6.2.15 to 6.2.16
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.15...v6.2.16)

Updates `org.springframework:spring-webmvc` from 6.2.15 to 6.2.16
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.15...v6.2.16)

Updates `org.springframework:spring-expression` from 6.2.15 to 6.2.16
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.15...v6.2.16)

Updates `org.springframework:spring-test` from 6.2.15 to 6.2.16
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.15...v6.2.16)

---
updated-dependencies:
- dependency-name: org.springframework:spring-orm
  dependency-version: 6.2.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework:spring-core
  dependency-version: 6.2.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework:spring-beans
  dependency-version: 6.2.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework:spring-aop
  dependency-version: 6.2.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework:spring-context
  dependency-version: 6.2.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework:spring-context-support
  dependency-version: 6.2.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework:spring-tx
  dependency-version: 6.2.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework:spring-jdbc
  dependency-version: 6.2.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework:spring-web
  dependency-version: 6.2.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework:spring-webmvc
  dependency-version: 6.2.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework:spring-expression
  dependency-version: 6.2.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework:spring-test
  dependency-version: 6.2.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework:spring-core
  dependency-version: 6.2.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework:spring-beans
  dependency-version: 6.2.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework:spring-aop
  dependency-version: 6.2.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework:spring-context
  dependency-version: 6.2.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework:spring-context-support
  dependency-version: 6.2.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework.ldap:spring-ldap-core
  dependency-version: 3.3.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework:spring-tx
  dependency-version: 6.2.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework:spring-jdbc
  dependency-version: 6.2.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework:spring-web
  dependency-version: 6.2.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework:spring-webmvc
  dependency-version: 6.2.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework:spring-expression
  dependency-version: 6.2.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework:spring-test
  dependency-version: 6.2.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [org.postgresql:postgresql](https://github.com/pgjdbc/pgjdbc) from 42.7.9 to 42.7.10.
- [Release notes](https://github.com/pgjdbc/pgjdbc/releases)
- [Changelog](https://github.com/pgjdbc/pgjdbc/blob/master/CHANGELOG.md)
- [Commits](pgjdbc/pgjdbc@REL42.7.9...REL42.7.10)

---
updated-dependencies:
- dependency-name: org.postgresql:postgresql
  dependency-version: 42.7.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps the amazon-s3 group with 2 updates: software.amazon.awssdk:s3 and [software.amazon.awssdk.crt:aws-crt](https://github.com/awslabs/aws-crt-java).


Updates `software.amazon.awssdk:s3` from 2.41.14 to 2.41.24

Updates `software.amazon.awssdk.crt:aws-crt` from 0.42.2 to 0.43.1
- [Release notes](https://github.com/awslabs/aws-crt-java/releases)
- [Commits](awslabs/aws-crt-java@v0.42.2...v0.43.1)

---
updated-dependencies:
- dependency-name: software.amazon.awssdk:s3
  dependency-version: 2.41.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: amazon-s3
- dependency-name: software.amazon.awssdk.crt:aws-crt
  dependency-version: 0.43.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: amazon-s3
...

Signed-off-by: dependabot[bot] <support@github.com>
jboss-logging is a transitive dependency and it causes dependency
convergence errors because various hibernate components pull in
different versions. We should be pinning this to the same version
used by the hibernate parent and disabling dependabot updates for
it.

See: https://github.com/hibernate/hibernate-orm/blob/6.4/settings.gradle#L74
(cherry picked from commit 5168e81289b5ba0841d87651e97afddbe77a5850)
[Port dspace-8_x] Pin jboss-logging version
….postgresql-postgresql-42.7.10

build(deps): bump org.postgresql:postgresql from 42.7.9 to 42.7.10
…ing-f74a7fb233

build(deps): bump the spring group with 13 updates
…zon-s3-2ed27dae15

build(deps): bump the amazon-s3 group with 2 updates
…core. Older spring-jcl exclusions can now be removed as they all inherit via spring-core

(cherry picked from commit 5a7d4a93ef78f5b7ac364d363fac3285f8270318)
[Port dspace-8_x] [Docker] Fix `docker-deploy` issues with running Handle Server by excluding `spring-jcl` from classpath
Co-authored-by: abhinav <abhinav.sidharthan@atmire.com>
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3 to 4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@v3...v4)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [actions/add-to-project](https://github.com/actions/add-to-project) from 1.0.0 to 1.0.2.
- [Release notes](https://github.com/actions/add-to-project/releases)
- [Commits](actions/add-to-project@v1.0.0...v1.0.2)

---
updated-dependencies:
- dependency-name: actions/add-to-project
  dependency-version: 1.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the amazon-s3 group with 2 updates: software.amazon.awssdk:s3 and [software.amazon.awssdk.crt:aws-crt](https://github.com/awslabs/aws-crt-java).


Updates `software.amazon.awssdk:s3` from 2.41.28 to 2.41.33

Updates `software.amazon.awssdk.crt:aws-crt` from 0.43.1 to 0.43.4
- [Release notes](https://github.com/awslabs/aws-crt-java/releases)
- [Commits](awslabs/aws-crt-java@v0.43.1...v0.43.4)

---
updated-dependencies:
- dependency-name: software.amazon.awssdk:s3
  dependency-version: 2.41.33
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: amazon-s3
- dependency-name: software.amazon.awssdk.crt:aws-crt
  dependency-version: 0.43.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: amazon-s3
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the spring group with 13 updates:

| Package | From | To |
| --- | --- | --- |
| [org.springframework.boot:spring-boot-starter-test](https://github.com/spring-projects/spring-boot) | `3.5.10` | `3.5.11` |
| [org.springframework.boot:spring-boot-starter-tomcat](https://github.com/spring-projects/spring-boot) | `3.5.10` | `3.5.11` |
| [org.springframework.boot:spring-boot-maven-plugin](https://github.com/spring-projects/spring-boot) | `3.5.10` | `3.5.11` |
| [org.springframework.boot:spring-boot-starter-cache](https://github.com/spring-projects/spring-boot) | `3.5.10` | `3.5.11` |
| [org.springframework.boot:spring-boot-starter](https://github.com/spring-projects/spring-boot) | `3.5.10` | `3.5.11` |
| [org.springframework.boot:spring-boot-starter-thymeleaf](https://github.com/spring-projects/spring-boot) | `3.5.10` | `3.5.11` |
| [org.springframework.boot:spring-boot-starter-web](https://github.com/spring-projects/spring-boot) | `3.5.10` | `3.5.11` |
| [org.springframework.boot:spring-boot-starter-data-rest](https://github.com/spring-projects/spring-boot) | `3.5.10` | `3.5.11` |
| [org.springframework.boot:spring-boot-starter-security](https://github.com/spring-projects/spring-boot) | `3.5.10` | `3.5.11` |
| [org.springframework.boot:spring-boot-starter-aop](https://github.com/spring-projects/spring-boot) | `3.5.10` | `3.5.11` |
| [org.springframework.boot:spring-boot-starter-actuator](https://github.com/spring-projects/spring-boot) | `3.5.10` | `3.5.11` |
| [org.springframework.boot:spring-boot-starter-log4j2](https://github.com/spring-projects/spring-boot) | `3.5.10` | `3.5.11` |
| [org.springframework.security:spring-security-test](https://github.com/spring-projects/spring-security) | `6.5.7` | `6.5.8` |


Updates `org.springframework.boot:spring-boot-starter-test` from 3.5.10 to 3.5.11
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.10...v3.5.11)

Updates `org.springframework.boot:spring-boot-starter-tomcat` from 3.5.10 to 3.5.11
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.10...v3.5.11)

Updates `org.springframework.boot:spring-boot-maven-plugin` from 3.5.10 to 3.5.11
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.10...v3.5.11)

Updates `org.springframework.boot:spring-boot-starter-cache` from 3.5.10 to 3.5.11
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.10...v3.5.11)

Updates `org.springframework.boot:spring-boot-starter` from 3.5.10 to 3.5.11
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.10...v3.5.11)

Updates `org.springframework.boot:spring-boot-starter-thymeleaf` from 3.5.10 to 3.5.11
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.10...v3.5.11)

Updates `org.springframework.boot:spring-boot-starter-web` from 3.5.10 to 3.5.11
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.10...v3.5.11)

Updates `org.springframework.boot:spring-boot-starter-data-rest` from 3.5.10 to 3.5.11
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.10...v3.5.11)

Updates `org.springframework.boot:spring-boot-starter-security` from 3.5.10 to 3.5.11
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.10...v3.5.11)

Updates `org.springframework.boot:spring-boot-starter-aop` from 3.5.10 to 3.5.11
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.10...v3.5.11)

Updates `org.springframework.boot:spring-boot-starter-actuator` from 3.5.10 to 3.5.11
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.10...v3.5.11)

Updates `org.springframework.boot:spring-boot-starter-log4j2` from 3.5.10 to 3.5.11
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.10...v3.5.11)

Updates `org.springframework.boot:spring-boot-starter-tomcat` from 3.5.10 to 3.5.11
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.10...v3.5.11)

Updates `org.springframework.security:spring-security-test` from 6.5.7 to 6.5.8
- [Release notes](https://github.com/spring-projects/spring-security/releases)
- [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc)
- [Commits](spring-projects/spring-security@6.5.7...6.5.8)

Updates `org.springframework.boot:spring-boot-maven-plugin` from 3.5.10 to 3.5.11
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.10...v3.5.11)

Updates `org.springframework.boot:spring-boot-starter-cache` from 3.5.10 to 3.5.11
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.10...v3.5.11)

Updates `org.springframework.boot:spring-boot-starter` from 3.5.10 to 3.5.11
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.10...v3.5.11)

Updates `org.springframework.boot:spring-boot-starter-thymeleaf` from 3.5.10 to 3.5.11
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.10...v3.5.11)

Updates `org.springframework.boot:spring-boot-starter-web` from 3.5.10 to 3.5.11
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.10...v3.5.11)

Updates `org.springframework.boot:spring-boot-starter-data-rest` from 3.5.10 to 3.5.11
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.10...v3.5.11)

Updates `org.springframework.boot:spring-boot-starter-security` from 3.5.10 to 3.5.11
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.10...v3.5.11)

Updates `org.springframework.boot:spring-boot-starter-aop` from 3.5.10 to 3.5.11
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.10...v3.5.11)

Updates `org.springframework.boot:spring-boot-starter-actuator` from 3.5.10 to 3.5.11
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.10...v3.5.11)

Updates `org.springframework.boot:spring-boot-starter-log4j2` from 3.5.10 to 3.5.11
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.10...v3.5.11)

---
updated-dependencies:
- dependency-name: org.springframework.boot:spring-boot-starter-test
  dependency-version: 3.5.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework.boot:spring-boot-starter-tomcat
  dependency-version: 3.5.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework.boot:spring-boot-maven-plugin
  dependency-version: 3.5.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework.boot:spring-boot-starter-cache
  dependency-version: 3.5.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework.boot:spring-boot-starter
  dependency-version: 3.5.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework.boot:spring-boot-starter-thymeleaf
  dependency-version: 3.5.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework.boot:spring-boot-starter-web
  dependency-version: 3.5.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework.boot:spring-boot-starter-data-rest
  dependency-version: 3.5.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework.boot:spring-boot-starter-security
  dependency-version: 3.5.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework.boot:spring-boot-starter-aop
  dependency-version: 3.5.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework.boot:spring-boot-starter-actuator
  dependency-version: 3.5.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework.boot:spring-boot-starter-log4j2
  dependency-version: 3.5.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework.boot:spring-boot-starter-tomcat
  dependency-version: 3.5.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework.security:spring-security-test
  dependency-version: 6.5.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework.boot:spring-boot-maven-plugin
  dependency-version: 3.5.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework.boot:spring-boot-starter-cache
  dependency-version: 3.5.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework.boot:spring-boot-starter
  dependency-version: 3.5.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework.boot:spring-boot-starter-thymeleaf
  dependency-version: 3.5.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework.boot:spring-boot-starter-web
  dependency-version: 3.5.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework.boot:spring-boot-starter-data-rest
  dependency-version: 3.5.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework.boot:spring-boot-starter-security
  dependency-version: 3.5.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework.boot:spring-boot-starter-aop
  dependency-version: 3.5.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework.boot:spring-boot-starter-actuator
  dependency-version: 3.5.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework.boot:spring-boot-starter-log4j2
  dependency-version: 3.5.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [actions/setup-java](https://github.com/actions/setup-java) from 4 to 5.
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](actions/setup-java@v4...v5)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [korthout/backport-action](https://github.com/korthout/backport-action) from 2 to 4.
- [Release notes](https://github.com/korthout/backport-action/releases)
- [Commits](korthout/backport-action@v2...v4)

---
updated-dependencies:
- dependency-name: korthout/backport-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps the build-tools group with 4 updates: [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin), [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire), [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) and [org.apache.maven.plugins:maven-dependency-plugin](https://github.com/apache/maven-dependency-plugin).


Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.14.1 to 3.15.0
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.14.1...maven-compiler-plugin-3.15.0)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.4 to 3.5.5
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.4...surefire-3.5.5)

Updates `org.apache.maven.plugins:maven-failsafe-plugin` from 3.5.4 to 3.5.5
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.4...surefire-3.5.5)

Updates `org.apache.maven.plugins:maven-dependency-plugin` from 3.9.0 to 3.10.0
- [Release notes](https://github.com/apache/maven-dependency-plugin/releases)
- [Commits](apache/maven-dependency-plugin@maven-dependency-plugin-3.9.0...maven-dependency-plugin-3.10.0)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-version: 3.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: build-tools
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.5.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: build-tools
- dependency-name: org.apache.maven.plugins:maven-failsafe-plugin
  dependency-version: 3.5.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: build-tools
- dependency-name: org.apache.maven.plugins:maven-dependency-plugin
  dependency-version: 3.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: build-tools
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps the fasterxml group with 3 updates: [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core), [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) and com.fasterxml.jackson.datatype:jackson-datatype-jsr310.


Updates `com.fasterxml.jackson.core:jackson-core` from 2.21.0 to 2.21.1
- [Commits](FasterXML/jackson-core@jackson-core-2.21.0...jackson-core-2.21.1)

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.21.0 to 2.21.1
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `com.fasterxml.jackson.datatype:jackson-datatype-jsr310` from 2.21.0 to 2.21.1

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.21.0 to 2.21.1
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `com.fasterxml.jackson.datatype:jackson-datatype-jsr310` from 2.21.0 to 2.21.1

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson.core:jackson-core
  dependency-version: 2.21.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: fasterxml
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-version: 2.21.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: fasterxml
- dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-jsr310
  dependency-version: 2.21.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: fasterxml
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-version: 2.21.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: fasterxml
- dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-jsr310
  dependency-version: 2.21.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: fasterxml
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 5 to 6.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@v5...v6)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [Wandalen/wretry.action](https://github.com/wandalen/wretry.action) from 1.3.0 to 3.8.0.
- [Release notes](https://github.com/wandalen/wretry.action/releases)
- [Commits](Wandalen/wretry.action@v1.3.0...v3.8.0)

---
updated-dependencies:
- dependency-name: Wandalen/wretry.action
  dependency-version: 3.8.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
…am-metadata #12039

(cherry picked from commit c301804561a6cedb4256a661fed262566856c638)
kshepherd and others added 29 commits May 27, 2026 13:10
(cherry picked from commit 56ae2871eaba764900e4d9e23685a9472f485069)
* Safer Velocity configuration
* New "message.templates.allowed-config" config
* Remove "UnmodifiableConfiguration" in favour of a
  simple Map of whitelisted Config keys/values
* Centralise Velocity config in core Utils
* Small javadoc changes

(cherry picked from commit b2d6141389f5652970b366325ed9deff21a86836)
(cherry picked from commit 6b665313cb48131ada04ae0840ff531b08b31dad)
(cherry picked from commit 5803819ba65e7211a4f49318d0d3bbf2246e21c1)
(cherry picked from commit c70dc74d1d581b7d79d52aec1a3be863c2af68c8)
…ation-8_x

[Port dspace-8_x] ORE aggregated resource URI validation
[Port dspace-8_x] Application hardening: filter requests for JSPs and other unwanted patterns
…g-8_x

[Port dspace-8_x] Velocity template engine configuration improvements
Includes some central validation that other classes
can make use of.
However, it may be overly restrictive.
And we may need to allow multiple separate absolute base paths for each config?
# Conflicts:
#	dspace-api/src/main/java/org/dspace/core/LDN.java
(cherry picked from commit 6437472b8277b9aa815dd71e14b499ba7515f87d)
(cherry picked from commit 00e4979a60fd69adbf4a7476926701ef59207ce7)
[Port dspace-8_x] LDN and Curation I/O improvements
Updated files copied or derived from stock DSpace files to reflect any
changes in their stock DSpace 8.4 counterparts.

https://umd-dit.atlassian.net/browse/LIBCIR-497
Likely the result of the Git merge of the DSpace 8.4 code, removed the
extraneous "Base64" import, which is note needed.

https://umd-dit.atlassian.net/browse/LIBCIR-497
@dsteelma-umd dsteelma-umd merged commit 54ca6b7 into mdsoar-main Jun 12, 2026
13 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.