Merge branch 'master' of https://github.com/lucee/extension-image

# Conflicts:
#	pom.xml

Author: michaeloffner

.github/workflows/main.yml

@@ -1,12 +1,24 @@
 name: Java CI Combined
 
-on: [push, pull_request, workflow_dispatch]
+on:
+  push:
+  pull_request:
+  workflow_dispatch:
+    inputs:
+      lucee-versions:
+        description: 'JSON array of Lucee versions to test'
+        default: '["7.0/snapshot/light","7.0/stable/light","6.2/snapshot/light","6.2/stable/light"]'
+      dry-run:
+        description: 'Dry run - skip deploy to Maven'
+        type: boolean
+        default: false
 
 jobs:
   setup:
     runs-on: ubuntu-latest
     outputs:
       version: ${{ steps.extract-version.outputs.VERSION }}
+      lucee-matrix: ${{ steps.set-matrix.outputs.matrix }}
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
@@ -31,6 +43,16 @@ jobs:
           VERSION=$(mvn help:evaluate -Dexpression=project.version -q -DforceStdout)
           echo "VERSION=$VERSION" >> $GITHUB_OUTPUT
 
+      - name: Set Lucee test matrix
+        id: set-matrix
+        run: |
+          DEFAULT='["7.0/snapshot/light","7.0/stable/light","6.2/snapshot/light","6.2/stable/light"]'
+          MATRIX="${{ inputs.lucee-versions || '' }}"
+          if [ -z "$MATRIX" ]; then
+            MATRIX="$DEFAULT"
+          fi
+          echo "matrix=$MATRIX" >> $GITHUB_OUTPUT
+
       - name: Cache Lucee files
         uses: actions/cache@v4
         with:
@@ -43,23 +65,9 @@ jobs:
         env:
           GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
 
-  build-and-test:
+  build:
     runs-on: ubuntu-latest
     needs: setup
-    env:
-      testLabels: image
-      testAdditional: ${{ github.workspace }}/tests
-      LUCEE_TEST_VERSIONS_JAKARTA: ${{ vars.LUCEE_TEST_VERSIONS_JAKARTA }}
-    strategy:
-      fail-fast: false
-      matrix:
-        lucee: ${{ fromJSON(vars.LUCEE_TEST_VERSIONS_JAKARTA) }}
-        java: [ 11, 21 ]
-    services:
-      minio:
-        image: fclairamb/minio-github-actions
-        ports:
-          - 9000:9000
     steps:
       - uses: actions/checkout@v4
 
@@ -69,6 +77,14 @@ jobs:
           java-version: '11'
           distribution: 'adopt'
 
+      - name: Cache Maven packages
+        uses: actions/cache@v4
+        with:
+          path: ~/.m2
+          key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
+          restore-keys: |
+            ${{ runner.os }}-maven-
+
       - name: Build and Install with Maven
         run: |
           echo "------- Maven Install -------";
@@ -77,9 +93,31 @@ jobs:
       - name: Upload Artifact
         uses: actions/upload-artifact@v4
         with:
-          name: image-lex-${{ matrix.lucee.version }}-${{ matrix.java }}
+          name: image-lex
           path: target/*.lex
 
+  test:
+    runs-on: ubuntu-latest
+    needs: [setup, build]
+    strategy:
+      fail-fast: false
+      matrix:
+        lucee: ${{ fromJSON(needs.setup.outputs.lucee-matrix) }}
+        java: [ 11, 21 ]
+    services:
+      minio:
+        image: fclairamb/minio-github-actions
+        ports:
+          - 9000:9000
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Download Artifact
+        uses: actions/download-artifact@v4
+        with:
+          name: image-lex
+          path: target
+
       - name: Checkout Lucee
         uses: actions/checkout@v4
         with:
@@ -97,8 +135,7 @@ jobs:
         with:
           webroot: ${{ github.workspace }}/lucee/test
           execute: /bootstrap-tests.cfm
-          luceeVersion: ${{ matrix.lucee.version }}
-          luceeVersionQuery: ${{ matrix.lucee.query }}
+          luceeVersion: ${{ matrix.lucee }}
           extensionDir: ${{ github.workspace }}/target
         env:
           testLabels: image
@@ -108,8 +145,8 @@ jobs:
 
   deploy:
     runs-on: ubuntu-latest
-    needs: [setup, build-and-test]
-    if: always() && needs.build-and-test.result == 'success'
+    needs: [setup, test]
+    if: always() && needs.test.result == 'success' && github.ref == 'refs/heads/master' && !inputs.dry-run
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
@@ -146,4 +183,4 @@ jobs:
           else
             echo "------- Maven Deploy release on ${{ github.event_name }} -------";
             mvn -B -e -f pom.xml clean deploy -DperformRelease=true --settings maven-settings.xml
-          fi
+          fi

.gitignore

@@ -28,3 +28,4 @@ WEB-INF
 *.iml
 *.ipr
 *.iws
+test-output/

CHANGELOG.md

@@ -0,0 +1,57 @@
+# Changelog
+
+## 3.0.1.2 (2026-03-26)
+
+- [LDEV-5129](https://luceeserver.atlassian.net/browse/LDEV-5129) remove unused bundled jars: commons-io (CVE-2024-47554), xmpcore, apiguardian, hamcrest, opentest4j
+
+## 3.0.1.1 (2026-03-19)
+
+- [LDEV-6157](https://luceeserver.atlassian.net/browse/LDEV-6157) fix jakarta/javax compat — `<cfimage action="writeToBrowser">` threw `NoSuchMethodError` on Lucee 6 because `touchDestination()` bytecode was bound to jakarta servlet API. Use `eng.getClassUtil().callMethod()` reflection instead.
+- CI: build once, test against Lucee 6.2 + 7.0 (stable + snapshot), Java 11 + 21. Deploy gated to master only.
+
+## 3.0.1.0 (2026-03-09)
+
+- Add javax servlet support — dual TLD entries (`tag-class` / `javax-tag-class`) and javax tag classes for Lucee 6 compat (per [LDEV-6120](https://luceeserver.atlassian.net/browse/LDEV-6120))
+- **Note:** this release has a broken javax implementation, fixed in 3.0.1.1
+
+## 3.0.0.9 (2026-01-29)
+
+- [LDEV-3967](https://luceeserver.atlassian.net/browse/LDEV-3967) use TwelveMonkeys for image resizing
+
+## 3.0.0.8 (2026-01-28)
+
+- [LDEV-6082](https://luceeserver.atlassian.net/browse/LDEV-6082) avoid logging NPE when metadata is null
+
+## 3.0.0.7 (2026-01-27)
+
+- [LDEV-6081](https://luceeserver.atlassian.net/browse/LDEV-6081) fix resource leaks
+- [LDEV-5731](https://luceeserver.atlassian.net/browse/LDEV-5731) make JaiCoder visible and improve logging
+- [LDEV-5640](https://luceeserver.atlassian.net/browse/LDEV-5640) migrate to Jakarta EE (Lucee 7+)
+- Remove JSPException usage
+- Migrate from legacy nexus-staging to central-publishing plugin
+
+## 2.0.0.33 (2026-01-28)
+
+- [LDEV-6082](https://luceeserver.atlassian.net/browse/LDEV-6082) avoid logging NPE when metadata is null (backport)
+
+## 2.0.0.32 (2026-01-27)
+
+- [LDEV-6081](https://luceeserver.atlassian.net/browse/LDEV-6081) fix resource leaks
+- [LDEV-5731](https://luceeserver.atlassian.net/browse/LDEV-5731) make JaiCoder visible and improve logging
+
+## 2.0.0.29 (2025-02-25)
+
+- [LDEV-5283](https://luceeserver.atlassian.net/browse/LDEV-5283) remove JAI dependencies
+- [LDEV-5640](https://luceeserver.atlassian.net/browse/LDEV-5640) fix imagePaste regression by using local graphics object
+- Add Java 21 to CI test matrix
+
+## 2.0.0.26 (2025-01-29)
+
+- [LDEV-5284](https://luceeserver.atlassian.net/browse/LDEV-5284) ImageWrite metadata improvements
+- imageFilter flare: add centerX and centerY params
+- Avoid NPE when imageFilter parameters is empty
+- Add test cases from core
+
+## 2.0.0.23 (2023-12-18)
+
+- [LDEV-4455](https://luceeserver.atlassian.net/browse/LDEV-4455) improve exception for ImageSharpen() with gain argument

pom.xml

@@ -4,7 +4,7 @@
     <modelVersion>4.0.0</modelVersion>
     <groupId>org.lucee</groupId>
     <artifactId>image-extension</artifactId>
-    <version>3.0.1.1-SNAPSHOT</version>
+    <version>3.0.1.3-SNAPSHOT</version>
     <packaging>pom</packaging>
     <name>Image Extension</name>
 

source/java/libs/org.apache.commons.commons-io-2.11.0.jar

@@ -405,8 +405,11 @@ private String touchDestination() throws IOException, PageException {
 			destination = folder.getRealResource(name);
 			cleanOld(folder);
 
-			// create path
-			String cp = pageContext.getHttpServletRequest().getContextPath();
+			// create path (use reflection to avoid jakarta/javax bytecode binding)
+			Object req = eng.getClassUtil().callMethod(pageContext,
+				eng.getCastUtil().toKey("getHttpServletRequest"), new Object[] {});
+			String cp = (String) eng.getClassUtil().callMethod(req,
+				eng.getCastUtil().toKey("getContextPath"), new Object[] {});
 			if (eng.getStringUtil().isEmpty(cp))
 				cp = "";
 			return cp + "/lucee/graph.cfm?img=" + name + "&type="