Skip to content
This repository was archived by the owner on Jul 8, 2025. It is now read-only.

[pull] develop from eXist-db:develop - #383

Open
pull[bot] wants to merge 1986 commits into
EIDO-Systems:developfrom
eXist-db:develop
Open

[pull] develop from eXist-db:develop#383
pull[bot] wants to merge 1986 commits into
EIDO-Systems:developfrom
eXist-db:develop

Conversation

@pull

@pull pull Bot commented Jun 5, 2025

Copy link
Copy Markdown

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.1)

Can you help keep this open source service alive? 💖 Please sponsor : )

dizzzz and others added 28 commits June 20, 2026 10:15
…place `invalidateAll` with `reset`, modify JMX registration logic, and enhance cache shutdown handling.
The general-purpose value sequences checked only direct reference equality
(item == values[i]) and did not recurse into items that are themselves
containers, unlike MapType.containsReference and ArrayType.containsReference
which both do `value == item || value.containsReference(item)`. Affected:
ValueSequence, ArrayListValueSequence, OrderedValueSequence,
PreorderedValueSequence, and SubSequence. (NodeSets hold only nodes and
RangeSequence only integers, so neither can nest a map/array; both are
unaffected.)

As a result, a value nested inside a map (or array) held by such a sequence
was invisible to the variable-cleanup guard: when a let/function scope pops,
XQueryContext.popLocalVariables -> VariableImpl.destroy ->
<sequence>.destroy -> <value>.destroy(context, contextSequence) skips closing
a value only if `contextSequence.containsReference(value)`. For a file-backed
binary returned nested in a map inside a sequence, that guard returned false,
so the binary's file channel was closed while still referenced through the
returned map. A later read then failed with "Underlying channel has been
closed", surfaced (e.g.) as "error while obtaining length of binary value"
from xmldb:store.

This is exactly the path the Roaster / existdb-openapi multipart upload
tripped: request:get-uploaded-file-data, carried as $request?body?file?data
(Roaster's form-data binary shape: map { name, data, size }), failed at
xmldb:store. Reproduced with the real Roaster body:parse and reduced to the
test cases below.

Fix: make each general-purpose sequence's containsReference recurse into
container items, mirroring MapType/ArrayType.

Tests:
- ContainsReferenceNestedTest (unit): directly asserts ValueSequence,
  ArrayListValueSequence and SubSequence detect an item nested in a map
  (fails without the fix). OrderedValueSequence/PreorderedValueSequence take
  the identical one-line fix (their OrderSpec construction is not exercised
  directly).
- binary-nested-in-map.xqm (XQSuite, file module): a file:read-binary value
  returned nested in a map inside a sequence and escaping a function, then
  read; fails with "Underlying channel has been closed" before the fix. The
  inner one-iteration FLWOR is load-bearing -- it wraps the map in a
  ValueSequence; a bare map { ... } goes through MapType.containsReference,
  which already recurses, and would not exercise the bug.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
…erface helper

Per review feedback on PR #6507: replace the withMapNesting(...) lambda
indirection with straightforward, inlined per-test setup. More verbose and
slightly duplicated, but easier to follow at a glance. No change to coverage:
each test still builds map { "data": $nested } in a fresh context, wraps it in
the sequence type under test, and asserts the nested item is detected while a
sibling item is not.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Bumps [org.expath.packaging:pkg-java](https://github.com/expath/expath-pkg-java) from 2.0.1 to 2.1.1.
- [Commits](expath/expath-pkg-java@pkg-2.0.1...pkg-2.1.1)

---
updated-dependencies:
- dependency-name: org.expath.packaging:pkg-java
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Per review feedback on PR #6507: the fixture setup (create the test directory and
write the .env fixture) now lives in a %test:setUp function, symmetric with the
existing %test:tearDown, instead of inline in the test body.

helper:get-test-directory embeds a fresh uuid on every call, so the directory is
computed once in a module variable ($bnm:directory) shared by setUp and the test,
rather than recomputed per function (which would land the fixture and the read in
different directories).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Bumps the actions group with 1 update: [actions/cache](https://github.com/actions/cache).


Updates `actions/cache` from 5 to 6
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@v5...v6)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
…ckaging-pkg-java-2.1.1

Bump org.expath.packaging:pkg-java from 2.0.1 to 2.1.1
…ored docs

A trailing path step that is a function call whose argument is a relative
child step (e.g. doc(...)/authors/author/places/count(place)) returned the
wrong result on stored (persistent) documents: count(place) was evaluated
once over the whole context instead of once per context item, counting every
descendant (a single 5 instead of (2, 3)). The same query over an in-memory
document was already correct.

LocationStep.getDependencies() reports a CONTEXT_ITEM dependency for a step
that is the initial step of its enclosing expression, so that PathExpr.eval()
selects the per-item evaluation branch. It detected "initial step" lazily via
parent.getSubExpression(0) == this. That test is unreliable at evaluation
time because Function.checkArgument() rewrites the parent's child list after
analysis, wrapping the argument in a DynamicCardinalityCheck. The wrapped
LocationStep no longer matched parent.getSubExpression(0), so it dropped the
CONTEXT_ITEM dependency and PathExpr.eval() fell through to the whole-context
branch, which collapses the per-item multiplicity for an atomic-returning
step. In-memory nodes were unaffected because PathExpr forces the per-item
branch for memtree regardless of the dependency flags.

Capture whether the step is the initial step during analyze(), before the
parent's child list can be rewritten, and use the cached value in
getDependencies().

Adds XQSuite regression tests in count.xql covering the stored-doc case, the
in-memory case, and both of the workarounds from the issue (the simple map
operator and copying the persistent tree into memory).

Closes #6521

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
XSD 1.1 validation and catalog  fixes.
[refactor] Revise HttpClient creation and caching.
github-actions Bot and others added 30 commits July 27, 2026 10:09
Bumps [com.microsoft.onnxruntime:onnxruntime](https://github.com/microsoft/onnxruntime) from 1.27.0 to 1.28.0.
- [Release notes](https://github.com/microsoft/onnxruntime/releases)
- [Changelog](https://github.com/microsoft/onnxruntime/blob/main/docs/ReleaseManagement.md)
- [Commits](microsoft/onnxruntime@v1.27.0...v1.28.0)

---
updated-dependencies:
- dependency-name: com.microsoft.onnxruntime:onnxruntime
  dependency-version: 1.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
….onnxruntime-onnxruntime-1.28.0

Bump com.microsoft.onnxruntime:onnxruntime from 1.27.0 to 1.28.0
…sion

[feature] restore izpack compression format to xz
Bumps com.oracle.database.jdbc:ojdbc11 from 23.26.2.0.0 to 23.26.3.0.0.

---
updated-dependencies:
- dependency-name: com.oracle.database.jdbc:ojdbc11
  dependency-version: 23.26.3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
…tabase.jdbc-ojdbc11-23.26.3.0.0

Bump com.oracle.database.jdbc:ojdbc11 from 23.26.2.0.0 to 23.26.3.0.0
Bumps [org.jspecify:jspecify](https://github.com/jspecify/jspecify) from 1.0.0 to 1.0.1.
- [Release notes](https://github.com/jspecify/jspecify/releases)
- [Commits](jspecify/jspecify@v1.0.0...v1.0.1)

---
updated-dependencies:
- dependency-name: org.jspecify:jspecify
  dependency-version: 1.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps the apache-commons group with 1 update: [commons-codec:commons-codec](https://github.com/apache/commons-codec).


Updates `commons-codec:commons-codec` from 1.22.0 to 1.22.1
- [Changelog](https://github.com/apache/commons-codec/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-codec@rel/commons-codec-1.22.0...rel/commons-codec-1.22.1)

---
updated-dependencies:
- dependency-name: commons-codec:commons-codec
  dependency-version: 1.22.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: apache-commons
...

Signed-off-by: dependabot[bot] <support@github.com>
…s-96c78cca71

Bump commons-codec:commons-codec from 1.22.0 to 1.22.1 in the apache-commons group
Publish JMH benchmark results to a gh-pages dashboard
Bumps the junit4-test-support group with 3 updates: [org.xmlunit:xmlunit-core](https://github.com/xmlunit/xmlunit), [org.xmlunit:xmlunit-matchers](https://github.com/xmlunit/xmlunit) and [org.xmlunit:xmlunit-legacy](https://github.com/xmlunit/xmlunit).


Updates `org.xmlunit:xmlunit-core` from 2.12.0 to 2.13.0
- [Release notes](https://github.com/xmlunit/xmlunit/releases)
- [Changelog](https://github.com/xmlunit/xmlunit/blob/main/RELEASE_NOTES.md)
- [Commits](xmlunit/xmlunit@v2.12.0...v2.13.0)

Updates `org.xmlunit:xmlunit-matchers` from 2.12.0 to 2.13.0
- [Release notes](https://github.com/xmlunit/xmlunit/releases)
- [Changelog](https://github.com/xmlunit/xmlunit/blob/main/RELEASE_NOTES.md)
- [Commits](xmlunit/xmlunit@v2.12.0...v2.13.0)

Updates `org.xmlunit:xmlunit-legacy` from 2.12.0 to 2.13.0
- [Release notes](https://github.com/xmlunit/xmlunit/releases)
- [Changelog](https://github.com/xmlunit/xmlunit/blob/main/RELEASE_NOTES.md)
- [Commits](xmlunit/xmlunit@v2.12.0...v2.13.0)

Updates `org.xmlunit:xmlunit-matchers` from 2.12.0 to 2.13.0
- [Release notes](https://github.com/xmlunit/xmlunit/releases)
- [Changelog](https://github.com/xmlunit/xmlunit/blob/main/RELEASE_NOTES.md)
- [Commits](xmlunit/xmlunit@v2.12.0...v2.13.0)

Updates `org.xmlunit:xmlunit-legacy` from 2.12.0 to 2.13.0
- [Release notes](https://github.com/xmlunit/xmlunit/releases)
- [Changelog](https://github.com/xmlunit/xmlunit/blob/main/RELEASE_NOTES.md)
- [Commits](xmlunit/xmlunit@v2.12.0...v2.13.0)

---
updated-dependencies:
- dependency-name: org.xmlunit:xmlunit-core
  dependency-version: 2.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: junit4-test-support
- dependency-name: org.xmlunit:xmlunit-matchers
  dependency-version: 2.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: junit4-test-support
- dependency-name: org.xmlunit:xmlunit-legacy
  dependency-version: 2.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: junit4-test-support
- dependency-name: org.xmlunit:xmlunit-matchers
  dependency-version: 2.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: junit4-test-support
- dependency-name: org.xmlunit:xmlunit-legacy
  dependency-version: 2.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: junit4-test-support
...

Signed-off-by: dependabot[bot] <support@github.com>
…upport-2b30e928bf

Bump the junit4-test-support group with 3 updates
Bumps the actions group with 2 updates: [docker/login-action](https://github.com/docker/login-action) and [docker/build-push-action](https://github.com/docker/build-push-action).


Updates `docker/login-action` from 4.4.0 to 4.6.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@af1e73f...dbcb813)

Updates `docker/build-push-action` from 6.18.0 to 7.3.0
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@2634353...53b7df9)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: docker/build-push-action
  dependency-version: 7.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
[bugfix] Restore XQuery pool integrity for execute-only callers
Bumps the junit4-test-support group with 1 update: [org.objenesis:objenesis](https://github.com/easymock/objenesis).


Updates `org.objenesis:objenesis` from 3.5 to 3.6
- [Release notes](https://github.com/easymock/objenesis/releases)
- [Commits](easymock/objenesis@3.5...3.6)

---
updated-dependencies:
- dependency-name: org.objenesis:objenesis
  dependency-version: '3.6'
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: junit4-test-support
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps `jetty.version` from 12.1.11 to 12.1.12.

Updates `org.eclipse.jetty:jetty-server` from 12.1.11 to 12.1.12

Updates `org.eclipse.jetty:jetty-xml` from 12.1.11 to 12.1.12

Updates `org.eclipse.jetty:jetty-util` from 12.1.11 to 12.1.12

Updates `org.eclipse.jetty:jetty-jmx` from 12.1.11 to 12.1.12

Updates `org.eclipse.jetty:jetty-security` from 12.1.11 to 12.1.12

Updates `org.eclipse.jetty:jetty-http` from 12.1.11 to 12.1.12

Updates `org.eclipse.jetty.http2:jetty-http2-server` from 12.1.11 to 12.1.12

Updates `org.eclipse.jetty:jetty-alpn-server` from 12.1.11 to 12.1.12

Updates `org.eclipse.jetty:jetty-alpn-java-server` from 12.1.11 to 12.1.12

Updates `org.eclipse.jetty.ee10:jetty-ee10-annotations` from 12.1.11 to 12.1.12

Updates `org.eclipse.jetty:jetty-deploy` from 12.1.11 to 12.1.12

Updates `org.eclipse.jetty.ee10:jetty-ee10-jndi` from 12.1.11 to 12.1.12

Updates `org.eclipse.jetty.ee10:jetty-ee10-plus` from 12.1.11 to 12.1.12

Updates `org.eclipse.jetty.ee10:jetty-ee10-servlet` from 12.1.11 to 12.1.12

Updates `org.eclipse.jetty.ee10:jetty-ee10-webapp` from 12.1.11 to 12.1.12

Updates `org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jetty-server` from 12.1.11 to 12.1.12

Updates `org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server` from 12.1.11 to 12.1.12

Updates `org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-client` from 12.1.11 to 12.1.12

---
updated-dependencies:
- dependency-name: org.eclipse.jetty:jetty-server
  dependency-version: 12.1.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.jetty:jetty-xml
  dependency-version: 12.1.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.jetty:jetty-util
  dependency-version: 12.1.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.jetty:jetty-jmx
  dependency-version: 12.1.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.jetty:jetty-security
  dependency-version: 12.1.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.jetty:jetty-http
  dependency-version: 12.1.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.jetty.http2:jetty-http2-server
  dependency-version: 12.1.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.jetty:jetty-alpn-server
  dependency-version: 12.1.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.jetty:jetty-alpn-java-server
  dependency-version: 12.1.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.jetty.ee10:jetty-ee10-annotations
  dependency-version: 12.1.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.jetty:jetty-deploy
  dependency-version: 12.1.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.jetty.ee10:jetty-ee10-jndi
  dependency-version: 12.1.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.jetty.ee10:jetty-ee10-plus
  dependency-version: 12.1.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.jetty.ee10:jetty-ee10-servlet
  dependency-version: 12.1.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.jetty.ee10:jetty-ee10-webapp
  dependency-version: 12.1.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jetty-server
  dependency-version: 12.1.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-server
  dependency-version: 12.1.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-client
  dependency-version: 12.1.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [org.owasp:dependency-check-maven](https://github.com/dependency-check/DependencyCheck) from 12.2.2 to 13.0.0.
- [Release notes](https://github.com/dependency-check/DependencyCheck/releases)
- [Changelog](https://github.com/dependency-check/DependencyCheck/blob/main/CHANGELOG.md)
- [Commits](dependency-check/DependencyCheck@v12.2.2...v13.0.0)

---
updated-dependencies:
- dependency-name: org.owasp:dependency-check-maven
  dependency-version: 13.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
…upport-51fe9c7e0b

Bump org.objenesis:objenesis from 3.5 to 3.6 in the junit4-test-support group
Bumps `greenmail.version` from 2.1.11 to 2.1.12.

Updates `com.icegreen:greenmail-junit4` from 2.1.11 to 2.1.12
- [Release notes](https://github.com/greenmail-mail-test/greenmail/releases)
- [Commits](greenmail-mail-test/greenmail@release-2.1.11...release-2.1.12)

Updates `com.icegreen:greenmail` from 2.1.11 to 2.1.12
- [Release notes](https://github.com/greenmail-mail-test/greenmail/releases)
- [Commits](greenmail-mail-test/greenmail@release-2.1.11...release-2.1.12)

---
updated-dependencies:
- dependency-name: com.icegreen:greenmail-junit4
  dependency-version: 2.1.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
- dependency-name: com.icegreen:greenmail
  dependency-version: 2.1.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [at.yawk.lz4:lz4-java](https://github.com/yawkat/lz4-java) from 1.11.1 to 1.11.2.
- [Release notes](https://github.com/yawkat/lz4-java/releases)
- [Changelog](https://github.com/yawkat/lz4-java/blob/main/CHANGES.md)
- [Commits](yawkat/lz4-java@v1.11.1...v1.11.2)

---
updated-dependencies:
- dependency-name: at.yawk.lz4:lz4-java
  dependency-version: 1.11.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
…z4-java-1.11.2

Bump at.yawk.lz4:lz4-java from 1.11.1 to 1.11.2
…sion-2.1.12

Bump greenmail.version from 2.1.11 to 2.1.12
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants