From 1b0b718eaaf02425f2559e10e06b28bbc3df91f2 Mon Sep 17 00:00:00 2001
From: "slominskir-coding-agent[bot]"
 <335168828+slominskir-coding-agent[bot]@users.noreply.github.com>
Date: Tue, 10 Nov 2026 12:09:55 -0500
Subject: [PATCH 1/2] Bump the smoothness weblib to 5.3.0

Move the weblib from 5.0.2 to 5.3.0, the latest release. Its changes
since 5.0.2 are fixes and tests: stricter ParamConverter dates with
readable number errors, TimeUtil and week-range fixes, IpReadFilter
keeping the query string on its login redirect, AuditFilter keeping
short usernames, and CacheFilter caching static types set with
parameters.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 build.gradle | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/build.gradle b/build.gradle
index 7c7bcf0..0cb025b 100644
--- a/build.gradle
+++ b/build.gradle
@@ -10,7 +10,7 @@ description = 'Application Registry Manager app'
 group = 'org.jlab'
 version = new File("${projectDir}/VERSION").text.trim()
 ext.version = project.version
-ext.smoothnessVersion = '5.0.2'
+ext.smoothnessVersion = '5.3.0'
 ext.releaseDate = new Date().format('MMM dd yyyy')
 
 tasks.withType(JavaCompile).configureEach {

From 46a18e5dbcede25aa6d8c9150903ea1506d523f4 Mon Sep 17 00:00:00 2001
From: "slominskir-coding-agent[bot]"
 <335168828+slominskir-coding-agent[bot]@users.noreply.github.com>
Date: Tue, 10 Nov 2026 12:09:55 -0500
Subject: [PATCH 2/2] Bump jeffersonlab/wildfly to 3.1.1 and keycloak to 3.1.0

Match the images Smoothness 5.3.0 builds its demo on. The app image's
WildFly base moves from 3.0.1 to 3.1.1, which applies the Elytron
2.6.4 OIDC patch and sets the session cookie's SameSite attribute to
Lax; it is still WildFly 37.0.1. The demo Keycloak moves from 2.6.0 to
3.1.0 (upstream Keycloak 26.6.4 and entrypoint fixes).

The image's self-signed certificate is new, so the integration tests
trust the new one in src/integration/resources/wildfly-localhost.crt,
the same certificate as Smoothness's demo tests (its SHA-256
fingerprint starts E1:1B:1C:D1).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 Dockerfile                                    |  2 +-
 deps.yaml                                     |  2 +-
 .../resources/wildfly-localhost.crt           | 37 ++++++++++---------
 3 files changed, 21 insertions(+), 20 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index c0a4392..ff2d44f 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,5 +1,5 @@
 ARG BUILD_IMAGE=gradle:9-jdk21
-ARG RUN_IMAGE=jeffersonlab/wildfly:3.0.1
+ARG RUN_IMAGE=jeffersonlab/wildfly:3.1.1
 
 ################## Stage 0
 FROM ${BUILD_IMAGE} AS builder
diff --git a/deps.yaml b/deps.yaml
index 7875166..c1442db 100644
--- a/deps.yaml
+++ b/deps.yaml
@@ -20,7 +20,7 @@ services:
       start_interval: 5s
 
   keycloak:
-    image: jeffersonlab/keycloak:2.6.0
+    image: jeffersonlab/keycloak:3.1.0
     hostname: keycloak
     ports:
       - "127.0.0.1:${SIM_KEYCLOAK_PORT:-8081}:8080"
diff --git a/src/integration/resources/wildfly-localhost.crt b/src/integration/resources/wildfly-localhost.crt
index edc2454..9f40beb 100644
--- a/src/integration/resources/wildfly-localhost.crt
+++ b/src/integration/resources/wildfly-localhost.crt
@@ -1,20 +1,21 @@
 -----BEGIN CERTIFICATE-----
-MIIDUTCCAjkCFGFfxF4Z4k/YWJ1XysQSXDCdYUunMA0GCSqGSIb3DQEBCwUAMGQx
-CzAJBgNVBAYTAlVTMREwDwYDVQQIDAhWaXJnaW5pYTEWMBQGA1UECgwNbG9jYWxo
-b3N0IGRldjEWMBQGA1UECwwNSVQgRGVwYXJ0bWVudDESMBAGA1UEAwwJbG9jYWxo
-b3N0MCAXDTI2MDIxOTEzNTQwOFoYDzIyOTkxMjA0MTM1NDA4WjBkMQswCQYDVQQG
-EwJVUzERMA8GA1UECAwIVmlyZ2luaWExFjAUBgNVBAoMDWxvY2FsaG9zdCBkZXYx
-FjAUBgNVBAsMDUlUIERlcGFydG1lbnQxEjAQBgNVBAMMCWxvY2FsaG9zdDCCASIw
-DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL61OfXPi7VuzMJ4+SRf1oCpjz8j
-tIaujTpggXMFmQ1QEIWpstwNl24lwhG/yXgpOpFLv8pGOVDJp/cR9+766EI6nqpJ
-TQVt7qEjAJwaH6U8gEE2RfboyzyysVry03K899dEV/FN9wJagGJldSryeu0glEJ9
-Zi0rjbWYQ/x5AIB3fF8pu33BrNa+h62Qzz8AIOlA5YoZr+JNnUUEx4tIqLXOajOE
-Ho9nqTKjbOXcYPwWijKjkbB91g1Q/06e5Ze8wAEzo7zkGZ05qwKRii/OZ6vg5GoW
-1wVaoMQh1nbw0Hi+mDTfIBUQZwKtVj/HyNIZTm5mC60dGS4ikgtRDU03K/8CAwEA
-ATANBgkqhkiG9w0BAQsFAAOCAQEAEW2AcwVYOgk3K50JY4y8Yalfecv58pHsSJO4
-ckGBPFiACDBvWvlue7rVIUnEa751QjtvafxFAtoxqDi9J81LjxT4ssppZbJh5Q2U
-lRi28dxv+sau7tLq4emBuJ9m7NXiZHiJWhM8P3Iipz3EJov+vFHoHXoN8/8mUlxx
-HoZ3MTQLeQMmWQq/L7H91vW0+lo7Puzwj2VvHP4mEV1s2hj0ju+N5YcYqb6G6udF
-twE41wPKUXiEdlNlldW4qckhPNArgpwBjypR5mQjgjH6l6mSfDInl6YU1ov94NFF
-SqJ1uaDQ1AraMgXjb2cQIKqGWiuMBYfxglLJ169SilLbCY/hyQ==
+MIIDeTCCAmGgAwIBAgIUaIwjXdadE0/yWp/rOWM4E7wH0aIwDQYJKoZIhvcNAQEL
+BQAwZDELMAkGA1UEBhMCVVMxETAPBgNVBAgMCFZpcmdpbmlhMRYwFAYDVQQKDA1s
+b2NhbGhvc3QgZGV2MRYwFAYDVQQLDA1JVCBEZXBhcnRtZW50MRIwEAYDVQQDDAls
+b2NhbGhvc3QwIBcNMjYxMDA2MTY1MzUyWhgPMjMwMDA3MjExNjUzNTJaMGQxCzAJ
+BgNVBAYTAlVTMREwDwYDVQQIDAhWaXJnaW5pYTEWMBQGA1UECgwNbG9jYWxob3N0
+IGRldjEWMBQGA1UECwwNSVQgRGVwYXJ0bWVudDESMBAGA1UEAwwJbG9jYWxob3N0
+MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Uq7C9DQqJTPj/wBu24j
+qWdBzxxlT0u4/kgI0pCdK4Awg4wouWys+d8ilVqdveaSARBv9oEW1e8kHI3VST40
+MXXlaIzZ+tjI29nQwyRPKVWk3+GlIIn/TMG77PnHqmhGnktK5VafEM3SVhGEaFM/
+/0psHEyXiYJIB9N+32yIIJlbidlAZZeaTRsm6RpZNup+59tBe0LB5vupW2X9VDzR
+FjZPEA/FlBeAayOr4F6zpKNk5/W3C6PUKScLW0NXLQfexT2a9V+Rm6Bb80Oau3fy
+NU+ZVLDYDo70KlsEU5p3zqkF+qfUgMU8vIE0+f6oqsiq5bb6ucnAZhJHnPrmQSYT
+9QIDAQABoyEwHzAdBgNVHQ4EFgQU2ACCJm8Et9lWVCM5t+efgXTt4pYwDQYJKoZI
+hvcNAQELBQADggEBAFdEL3RCgldj/ntmMqp8iUI9SHRLllbEWA7aFzxYy1z2nsPF
+0ILqOHbcyMn6jCU9HfnZNUuuLdPZ62fWNnu0rgYXNmqbKnAarNtissxYx/BIJ7Ai
+A22m1lwliXuK6AyiqgJPokdz947FVSon9UP60KO/TQEZQGjMUZ3b+ZtnuNhM67oH
+iWOSXKRi2t0RN/x47r9PUhDJjm3LpP7WMi+p3WaAJkj8feVV8JYUY0TRDNE2ERCH
+f2sIITdARCNhTaYbc5YmuggNCnSRvqZ+BV4ZcKCN1KVUpCMBqKylp8LWrX5js4bZ
+dn9IytgH7DhrmdZcwU1gDHGK75Oaww/lvRpqdvk=
 -----END CERTIFICATE-----