#      interval: "weekly"
#    groups:
#      dependencies:
#        applies-to: version-updates
#        patterns:
#          - "*"
#  - package-ecosystem: "maven"
#    directory: "/android"
#    schedule:
#      interval: "weekly"
#    groups:
#      dependencies:
#        applies-to: version-updates
#        patterns:
#          - "*"
  - package-ecosystem: "github-actions"
    directory: "/"
    schedule:

     * <p>
     * Patterns can be exact class names or use wildcards with '*' at the end.
     * For example: "com.example.*" allows all classes in the com.example package.
     * </p>
     *
     * @param allowedPatterns the patterns of classes to allow
     * @return an ObjectInputFilter configured with the specified patterns
     */

            return false;
        }

        Pattern pattern = (Pattern) propMap.get(USER_CODE_PATTERN);
        if (pattern == null) {
            pattern = Pattern.compile(getUserCodePattern());
            propMap.put(USER_CODE_PATTERN, pattern);
        }
        return pattern.matcher(userCode).matches();
    }

    String getQueryCollapseInnerHitsSorts();

      hostname += "."
    }
    if (!pattern.endsWith(".")) {
      pattern += "."
    }
    // Hostname and pattern are now absolute domain names.

    pattern = pattern.asciiToLowercase()
    // Hostname and pattern are now in lower case -- domain names are case-insensitive.

    if ("*" !in pattern) {
      // Not a wildcard pattern -- hostname and pattern must match exactly.
      return hostname == pattern

        assertEquals("/etc/passwd.log", AdminLogAction.sanitizeFilename(". ./. ./etc/passwd.log"));
    }

    @Test
    public void test_sanitizeFilename_pathTraversalPatterns() {
        // Common path traversal attack patterns - multiple slashes are normalized to single
        assertEquals("/etc/passwd.log", AdminLogAction.sanitizeFilename("../etc/passwd.log"));

└── fess_indices/              # OpenSearch index mappings

src/main/webapp/WEB-INF/view/  # JSP templates
src/test/java/.../it/          # Integration tests (*Tests.java)
```

## Architecture Patterns

### Action (Controller)
- Hierarchy: `TypicalAction` → `FessBaseAction` → `FessAdminAction`/`FessSearchAction`
- `@Execute` marks web endpoints
- `@Resource` for DI

        // Pattern with single backslash (14 chars): should match
        String singleBackslash = "image/svg" + "\\" + "+xml";
        assertEquals("Single backslash pattern should be 14 chars", 14, singleBackslash.length());
        assertTrue(svgMimetype.matches(singleBackslash));

        // Pattern with double backslash (15 chars): should NOT match
        String doubleBackslash = "image/svg" + "\\\\" + "+xml";

        assertFalse(validator.isValid("* * * *", context));
    }

    // Test common valid cron patterns that are likely to work
    @Test
    public void test_basicValidCronExpressions() {
        final ConstraintValidatorContext context = null;

        // Test basic patterns that should be valid
        String[] potentiallyValidCrons = { "0 0 * * * ?", // Every hour

        Pattern pattern = Pattern.compile(FS_FILE_RULE_PATTERN);
        assertTrue(pattern.matcher("text/html").matches());
    }

    @Test
    public void test_fsFileRulePattern_lhaTypes() {
        Pattern pattern = Pattern.compile(FS_FILE_RULE_PATTERN);
        assertTrue(pattern.matcher("application/lha").matches());
        assertTrue(pattern.matcher("application/x-lha").matches());

    init {
      require(
        (pattern.startsWith("*.") && pattern.indexOf("*", 1) == -1) ||
          (pattern.startsWith("**.") && pattern.indexOf("*", 2) == -1) ||
          pattern.indexOf("*") == -1,
      ) {
        "Unexpected pattern: $pattern"
      }

      this.pattern =
        pattern.toCanonicalHost() ?: throw IllegalArgumentException("Invalid pattern: $pattern")

      when {