Skip to content

Commit c0e592a

Browse files
authored
Upgrade commons-io from 2.15.1 to 2.18.0 (#7943)
This commit upgrades the Apache Commons IO library to version 2.18.0 to address potential security vulnerabilities and benefit from the latest bug fixes and improvements. Changes: - Updated commons-io version in DependencyConstraints.groovy from 2.15.1 to 2.18.0 - Updated expected-pom.xml to reflect new commons-io version (2.18.0) - Updated assembly_content.txt with new commons-io JAR reference - Updated gfsh_dependency_classpath.txt with new commons-io version - Updated dependency_classpath.txt in geode-server-all with new version Testing: - All unit tests pass (./gradlew test) - Build validation successful (./gradlew clean build -x test) - All quality checks pass (./gradlew build install javadoc spotlessCheck rat checkPom resolveDependencies pmdMain -x test) Version 2.18.0 includes important fixes and improvements over 2.15.1, providing better stability and security for the Geode project.
1 parent a807625 commit c0e592a

5 files changed

Lines changed: 5 additions & 5 deletions

File tree

boms/geode-all-bom/src/test/resources/expected-pom.xml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -160,7 +160,7 @@
160160
<dependency>
161161
<groupId>commons-io</groupId>
162162
<artifactId>commons-io</artifactId>
163-
<version>2.11.0</version>
163+
<version>2.18.0</version>
164164
</dependency>
165165
<dependency>
166166
<groupId>commons-logging</groupId>

build-tools/geode-dependency-management/src/main/groovy/org/apache/geode/gradle/plugins/DependencyConstraints.groovy

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@ class DependencyConstraints {
3333
// These version numbers are consumed by :geode-modules-assembly:distAppServer filtering
3434
// Some of these are referenced below as well
3535
deps.put("antlr.version", "2.7.7")
36-
deps.put("commons-io.version", "2.15.1")
36+
deps.put("commons-io.version", "2.18.0")
3737
deps.put("commons-lang3.version", "3.12.0")
3838
deps.put("commons-validator.version", "1.7")
3939
deps.put("fastutil.version", "8.5.8")

geode-assembly/src/integrationTest/resources/assembly_content.txt

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -931,7 +931,7 @@ lib/commons-beanutils-1.11.0.jar
931931
lib/commons-codec-1.15.jar
932932
lib/commons-collections-3.2.2.jar
933933
lib/commons-digester-2.1.jar
934-
lib/commons-io-2.15.1.jar
934+
lib/commons-io-2.18.0.jar
935935
lib/commons-lang3-3.12.0.jar
936936
lib/commons-logging-1.3.5.jar
937937
lib/commons-modeler-2.0.1.jar

geode-assembly/src/integrationTest/resources/gfsh_dependency_classpath.txt

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -53,7 +53,7 @@ shiro-config-ogdl-1.13.0.jar
5353
commons-codec-1.15.jar
5454
commons-collections-3.2.2.jar
5555
commons-digester-2.1.jar
56-
commons-io-2.15.1.jar
56+
commons-io-2.18.0.jar
5757
commons-logging-1.3.5.jar
5858
classgraph-4.8.147.jar
5959
micrometer-core-1.9.1.jar

geode-server-all/src/integrationTest/resources/dependency_classpath.txt

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -80,7 +80,7 @@ lucene-analyzers-phonetic-6.6.6.jar
8080
spring-context-5.3.21.jar
8181
jetty-security-9.4.57.v20241219.jar
8282
geode-logging-0.0.0.jar
83-
commons-io-2.15.1.jar
83+
commons-io-2.18.0.jar
8484
shiro-lang-1.13.0.jar
8585
javax.transaction-api-1.3.jar
8686
geode-common-0.0.0.jar

0 commit comments

Comments
 (0)