Skip to content

OSS update to 6.2.9 (6.2.10-TT.1) - #260

Merged
epearson-tt merged 36 commits into
tomitribe:activemq-6.2.x-TT.xfrom
epearson-tt:activemq-6.2.x-TT.x-oss629
Aug 27, 2026
Merged

OSS update to 6.2.9 (6.2.10-TT.1)#260
epearson-tt merged 36 commits into
tomitribe:activemq-6.2.x-TT.xfrom
epearson-tt:activemq-6.2.x-TT.x-oss629

Conversation

@epearson-tt

Copy link
Copy Markdown

No description provided.

cshannon and others added 30 commits July 28, 2026 20:30
This fixes the AmqpMessageSupport utility to correctly decompress the
body of Object Message's in all cases.

Previously the decompression could stop early and not decompress the entire stream of
data. This was due to the loop incorrectly casting the read int from the inflater
stream as a byte before comparing to -1 to look for end of stream.

This is incorrect because the read() method can return a value between -1 and 255.
Java uses Two's Complement to represent signed ints, so if the returned value int
is 255 and is cast to a byte it becomes -1. This meant that reading 255 would return -1
leading to the code to exit thinking end of stream has been reached.

(cherry picked from commit 2d60a85)
…#2361)

Bumps [org.apache.groovy:groovy-ant](https://github.com/apache/groovy) from 5.0.4 to 5.0.8.
- [Commits](https://github.com/apache/groovy/commits)

---
updated-dependencies:
- dependency-name: org.apache.groovy:groovy-ant
  dependency-version: 5.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…apache#2354)

Bumps org.jvnet.jaxb:jaxb-plugins-runtime from 4.0.8 to 4.0.16.

---
updated-dependencies:
- dependency-name: org.jvnet.jaxb:jaxb-plugins-runtime
  dependency-version: 4.0.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps `slf4j-version` from 2.0.17 to 2.0.18.

Updates `org.slf4j:slf4j-api` from 2.0.17 to 2.0.18

Updates `org.slf4j:jcl-over-slf4j` from 2.0.17 to 2.0.18

Updates `org.slf4j:slf4j-simple` from 2.0.17 to 2.0.18

---
updated-dependencies:
- dependency-name: org.slf4j:slf4j-api
  dependency-version: 2.0.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.slf4j:jcl-over-slf4j
  dependency-version: 2.0.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.slf4j:slf4j-simple
  dependency-version: 2.0.18
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps `karaf-version` from 4.4.9 to 4.4.11.

Updates `org.apache.karaf.shell:org.apache.karaf.shell.console` from 4.4.9 to 4.4.11

Updates `org.apache.karaf:apache-karaf` from 4.4.9 to 4.4.11

---
updated-dependencies:
- dependency-name: org.apache.karaf.shell:org.apache.karaf.shell.console
  dependency-version: 4.4.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.karaf:apache-karaf
  dependency-version: 4.4.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…2357)

Bumps org.glassfish.jaxb:jaxb-bom from 4.0.6 to 4.0.9.

---
updated-dependencies:
- dependency-name: org.glassfish.jaxb:jaxb-bom
  dependency-version: 4.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…pache#2296)

Bumps [org.owasp:dependency-check-maven](https://github.com/dependency-check/DependencyCheck) from 12.2.0 to 12.2.2.
- [Release notes](https://github.com/dependency-check/DependencyCheck/releases)
- [Changelog](https://github.com/dependency-check/DependencyCheck/blob/main/CHANGELOG.md)
- [Commits](dependency-check/DependencyCheck@v12.2.0...v12.2.2)

---
updated-dependencies:
- dependency-name: org.owasp:dependency-check-maven
  dependency-version: 12.2.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…2307)

Bumps `netty-version` from 4.2.10.Final to 4.2.16.Final.

Updates `io.netty:netty-buffer` from 4.2.10.Final to 4.2.16.Final
- [Release notes](https://github.com/netty/netty/releases)
- [Commits](netty/netty@netty-4.2.10.Final...netty-4.2.16.Final)

Updates `io.netty:netty-common` from 4.2.10.Final to 4.2.16.Final
- [Release notes](https://github.com/netty/netty/releases)
- [Commits](netty/netty@netty-4.2.10.Final...netty-4.2.16.Final)

Updates `io.netty:netty-handler` from 4.2.10.Final to 4.2.16.Final
- [Release notes](https://github.com/netty/netty/releases)
- [Commits](netty/netty@netty-4.2.10.Final...netty-4.2.16.Final)

Updates `io.netty:netty-codec-http` from 4.2.10.Final to 4.2.16.Final
- [Release notes](https://github.com/netty/netty/releases)
- [Commits](netty/netty@netty-4.2.10.Final...netty-4.2.16.Final)

Updates `io.netty:netty-transport` from 4.2.10.Final to 4.2.16.Final
- [Release notes](https://github.com/netty/netty/releases)
- [Commits](netty/netty@netty-4.2.10.Final...netty-4.2.16.Final)

---
updated-dependencies:
- dependency-name: io.netty:netty-buffer
  dependency-version: 4.2.16.Final
  dependency-type: direct:development
  update-type: version-update:semver-patch
- dependency-name: io.netty:netty-common
  dependency-version: 4.2.16.Final
  dependency-type: direct:development
  update-type: version-update:semver-patch
- dependency-name: io.netty:netty-handler
  dependency-version: 4.2.16.Final
  dependency-type: direct:development
  update-type: version-update:semver-patch
- dependency-name: io.netty:netty-codec-http
  dependency-version: 4.2.16.Final
  dependency-type: direct:development
  update-type: version-update:semver-patch
- dependency-name: io.netty:netty-transport
  dependency-version: 4.2.16.Final
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
)

Bumps org.apache.qpid:proton-j from 0.34.1 to 0.35.0.

---
updated-dependencies:
- dependency-name: org.apache.qpid:proton-j
  dependency-version: 0.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps `xbean-version` from 4.30 to 4.31.

Updates `org.apache.xbean:xbean-spring` from 4.30 to 4.31

Updates `org.apache.xbean:maven-xbean-plugin` from 4.30 to 4.31

Updates `org.apache.xbean:xbean-blueprint` from 4.30 to 4.31

Updates `org.apache.xbean:xbean-finder` from 4.30 to 4.31

Updates `org.apache.xbean:xbean-asm-util` from 4.30 to 4.31

Updates `org.apache.xbean:xbean-bundleutils` from 4.30 to 4.31

---
updated-dependencies:
- dependency-name: org.apache.xbean:xbean-spring
  dependency-version: '4.31'
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: org.apache.xbean:maven-xbean-plugin
  dependency-version: '4.31'
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: org.apache.xbean:xbean-blueprint
  dependency-version: '4.31'
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: org.apache.xbean:xbean-finder
  dependency-version: '4.31'
  dependency-type: direct:development
  update-type: version-update:semver-minor
- dependency-name: org.apache.xbean:xbean-asm-util
  dependency-version: '4.31'
  dependency-type: direct:development
  update-type: version-update:semver-minor
- dependency-name: org.apache.xbean:xbean-bundleutils
  dependency-version: '4.31'
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…e#2331)

Bumps [commons-codec:commons-codec](https://github.com/apache/commons-codec) from 1.21.0 to 1.22.1.
- [Changelog](https://github.com/apache/commons-codec/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-codec@rel/commons-codec-1.21.0...rel/commons-codec-1.22.1)

---
updated-dependencies:
- dependency-name: commons-codec:commons-codec
  dependency-version: 1.22.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…he#2317)

Bumps [org.codehaus.jettison:jettison](https://github.com/jettison-json/jettison) from 1.5.4 to 1.5.7.
- [Release notes](https://github.com/jettison-json/jettison/releases)
- [Commits](jettison-json/jettison@jettison-1.5.4...jettison-1.5.7)

---
updated-dependencies:
- dependency-name: org.codehaus.jettison:jettison
  dependency-version: 1.5.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [org.apache.groovy:groovy](https://github.com/apache/groovy) from 5.0.4 to 5.0.8.
- [Commits](https://github.com/apache/groovy/commits)

---
updated-dependencies:
- dependency-name: org.apache.groovy:groovy
  dependency-version: 5.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
….0 (apache#2342)

Bumps [org.codehaus.mojo:flatten-maven-plugin](https://github.com/mojohaus/flatten-maven-plugin) from 1.7.3 to 1.8.0.
- [Release notes](https://github.com/mojohaus/flatten-maven-plugin/releases)
- [Commits](mojohaus/flatten-maven-plugin@1.7.3...1.8.0)

---
updated-dependencies:
- dependency-name: org.codehaus.mojo:flatten-maven-plugin
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps org.apache.ant:ant from 1.10.15 to 1.10.17.

---
updated-dependencies:
- dependency-name: org.apache.ant:ant
  dependency-version: 1.10.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [org.eclipse.jdt:ecj](https://github.com/eclipse-jdt/eclipse.jdt.core) from 3.44.0 to 3.46.0.
- [Commits](https://github.com/eclipse-jdt/eclipse.jdt.core/commits)

---
updated-dependencies:
- dependency-name: org.eclipse.jdt:ecj
  dependency-version: 3.46.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…che#2375)

Bumps [commons-logging:commons-logging](https://github.com/apache/commons-logging) from 1.3.5 to 1.4.0.
- [Changelog](https://github.com/apache/commons-logging/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-logging@rel/commons-logging-1.3.5...rel/commons-logging-1.4.0)

---
updated-dependencies:
- dependency-name: commons-logging:commons-logging
  dependency-version: 1.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps org.ow2.asm:asm from 9.9.1 to 9.10.1.

---
updated-dependencies:
- dependency-name: org.ow2.asm:asm
  dependency-version: 9.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…ache#2291)

Bumps [org.ops4j.pax.url:pax-url-aether](https://github.com/ops4j/org.ops4j.pax.url) from 2.7.0 to 2.7.1.
- [Changelog](https://github.com/ops4j/org.ops4j.pax.url/blob/main/changes-3.0.adoc)
- [Commits](ops4j/org.ops4j.pax.url@url-2.7.0...url-2.7.1)

---
updated-dependencies:
- dependency-name: org.ops4j.pax.url:pax-url-aether
  dependency-version: 2.7.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps `maven-core-version` from 3.9.12 to 3.9.16.

Updates `org.apache.maven:maven-plugin-api` from 3.9.12 to 3.9.16
- [Release notes](https://github.com/apache/maven/releases)
- [Commits](apache/maven@maven-3.9.12...maven-3.9.16)

Updates `org.apache.maven:maven-core` from 3.9.12 to 3.9.16

---
updated-dependencies:
- dependency-name: org.apache.maven:maven-plugin-api
  dependency-version: 3.9.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.maven:maven-core
  dependency-version: 3.9.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…re (apache#2338)

Bumps org.apache.aries.blueprint:org.apache.aries.blueprint.core from 1.10.2 to 1.10.3.

---
updated-dependencies:
- dependency-name: org.apache.aries.blueprint:org.apache.aries.blueprint.core
  dependency-version: 1.10.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…e#2311)

Bumps org.apache.cxf:cxf-xjc-plugin from 4.1.2 to 4.2.0.

---
updated-dependencies:
- dependency-name: org.apache.cxf:cxf-xjc-plugin
  dependency-version: 4.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…apache#2370)

Bumps org.apache.felix:maven-bundle-plugin from 6.0.0 to 6.1.0.

---
updated-dependencies:
- dependency-name: org.apache.felix:maven-bundle-plugin
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…che#2336)

Bumps [org.javassist:javassist](https://github.com/jboss-javassist/javassist) from 3.30.2-GA to 3.32.0-GA.
- [Release notes](https://github.com/jboss-javassist/javassist/releases)
- [Changelog](https://github.com/jboss-javassist/javassist/blob/master/Changes.md)
- [Commits](https://github.com/jboss-javassist/javassist/commits)

---
updated-dependencies:
- dependency-name: org.javassist:javassist
  dependency-version: 3.32.0-GA
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps `mockito-version` from 4.8.1 to 4.11.0.

Updates `org.mockito:mockito-core` from 4.8.1 to 4.11.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v4.8.1...v4.11.0)

Updates `org.mockito:mockito-inline` from 4.8.1 to 4.11.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v4.8.1...v4.11.0)

---
updated-dependencies:
- dependency-name: org.mockito:mockito-core
  dependency-version: 4.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: org.mockito:mockito-inline
  dependency-version: 4.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v6...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps commons-io:commons-io from 2.21.0 to 2.22.0.

---
updated-dependencies:
- dependency-name: commons-io:commons-io
  dependency-version: 2.22.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps `log4j-version` from 2.25.4 to 2.26.1.

Updates `org.apache.logging.log4j:log4j-api` from 2.25.4 to 2.26.1

Updates `org.apache.logging.log4j:log4j-core` from 2.25.4 to 2.26.1

Updates `org.apache.logging.log4j:log4j-slf4j2-impl` from 2.25.4 to 2.26.1

---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-api
  dependency-version: 2.26.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.26.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: org.apache.logging.log4j:log4j-slf4j2-impl
  dependency-version: 2.26.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps `camel-version` from 4.14.7 to 4.21.0.

Updates `org.apache.camel:camel-bom` from 4.14.7 to 4.21.0

Updates `org.apache.camel:camel-core` from 4.14.7 to 4.21.0

Updates `org.apache.camel:camel-spring` from 4.14.7 to 4.21.0

---
updated-dependencies:
- dependency-name: org.apache.camel:camel-bom
  dependency-version: 4.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: org.apache.camel:camel-core
  dependency-version: 4.21.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
- dependency-name: org.apache.camel:camel-spring
  dependency-version: 4.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
cshannon and others added 6 commits August 5, 2026 20:08
… error (apache#2399) (apache#2410)

* [apache#2398] Add test proving FutureBrokerInfo.get(timeout) ignores its timeout

The timed get loop's condition uses || between the not-disposed check and
the deadline check, so the loop runs until disposal regardless of the
caller's timeout. Widens FutureBrokerInfo to package-private so the test
drives the real class. Two of four scenarios fail until the condition is
corrected.

* Fix FutureBrokerInfo.get(timeout) to honor its timeout

Correct the loop condition from || to && so the timed get exits when
EITHER the bridge is disposed OR the deadline expires. Previously a peer
that never delivered its BrokerInfo parked the bridge start thread until
disposal, ignoring the caller's timeout.

(cherry picked from commit c6f85bc)

Co-authored-by: Matt Pavlovich <mattrpav@apache.org>
…ppression (apache#2416)

getRegionSubscriptions returns null when the destination's region is not
an AbstractRegion; duplicateSuppressionIsRequired iterated the result
unconditionally, throwing NPE on the advisory path and tearing down the
bridge. Treat a null view as nothing to compare against.

(cherry picked from commit 5b0f3fa)
This adopts the same approach as LongSequenceGenerator and uses an
Atomic field updater to avoid using synchronized.

The sequence generator is used by ResponseCorrelator so the existing
tests will catch any errors.

See https://issues.apache.org/jira/browse/AMQ-7300

(cherry picked from commit 9c3add1)
[maven-release-plugin] copy for tag activemq-6.2.9
@epearson-tt
epearson-tt merged commit 4d09c0f into tomitribe:activemq-6.2.x-TT.x Aug 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants