Labels

Maven tooling, reproducibility, packaging and quality reports.

CI workflows, dependency automation and repository protection.

JSP/Jakarta/ESAPI consumers, OSGi and integration fixtures.

Explicit future API/scope/compatibility decisions.

Consumer/contributor documentation and project metadata.

Output-context API semantics and migration guidance.

Signed artifacts, release tooling, publication and custody.

Pull requests that update a dependency file

Pull requests that update GitHub Actions code

Pull requests that update java code

Active security release delivery; first priority when its external blocker clears.

High priority: security contracts, CI protection or consumer compatibility.

Planned maintenance; follow the ordered batch and documented dependencies.

Future scope or compatibility decision; not implementation approval.

Security-sensitive scope or acceptance criteria; not a vulnerability classification.

Scope transferred to a named canonical issue; closed as duplicate, not implemented.

Decision required before implementation; neither rejected nor accepted by triage.

Follow the explicit predecessor/coverage/tooling dependencies in the issue.

Requires external access or individual confirmation; preserve evidence of what remains.

Scope reviewed; actionable within its batch, subject to the normal PR process.

Implementation PR exists and awaits normal independent maintainer review.