This is an automated email from the ASF dual-hosted git repository.
vladimirsitnikov pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/jmeter.git
The following commit(s) were added to refs/heads/master by this push:
new 8584f2a3cc fix(deps): update dependency
org.apache.commons:commons-lang3 to v3.19.0
8584f2a3cc is described below
commit 8584f2a3cc0c1e21a6460918925f18a1d5e4983b
Author: Mend Renovate <[email protected]>
AuthorDate: Thu Oct 9 19:54:28 2025 +0000
fix(deps): update dependency org.apache.commons:commons-lang3 to v3.19.0
---
gradle/verification-metadata.xml | 10 ++++++++++
src/bom-thirdparty/build.gradle.kts | 2 +-
src/dist/src/dist/expected_release_jars.csv | 2 +-
.../main/java/org/apache/jmeter/functions/RandomString.java | 4 ++--
4 files changed, 14 insertions(+), 4 deletions(-)
diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index 9c13a224bc..bac953e9e2 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -459,6 +459,11 @@
<sha256
value="d78bd8524c5f8380a190a6525686629a95dfe512df21111383a6d8c0923a4415"
origin="Generated by Gradle"/>
</artifact>
</component>
+ <component group="org.apache" name="apache" version="35">
+ <artifact name="apache-35.pom">
+ <sha256
value="ea297dcd114136e8b8e8b630230d52a76c2fc69f6c5db25d672b1857000728b8"
origin="Generated by Gradle"/>
+ </artifact>
+ </component>
<component group="org.apache.commons" name="commons-parent" version="79">
<artifact name="commons-parent-79.pom">
<sha256
value="628df30148acd3c491cfcb6b73c7ae4b5989e5526ab13a2f428dea5d4ad10d7a"
origin="Generated by Gradle"/>
@@ -568,6 +573,11 @@
<sha256
value="19d4b747b204805325b6334553296f986562277a4ac1cb5e593a5e4c4f5e4115"
origin="Generated by Gradle"/>
</artifact>
</component>
+ <component group="org.junit" name="junit-bom" version="5.13.4">
+ <artifact name="junit-bom-5.13.4.pom">
+ <sha256
value="d7a08a99b2502f0bb68cd4e1f984f0bf69324aaa208bd0f73366c03fc3548a42"
origin="Generated by Gradle"/>
+ </artifact>
+ </component>
<component group="org.nosphere.apache" name="creadur-rat-gradle"
version="0.8.1">
<artifact name="creadur-rat-gradle-0.8.1.jar">
<sha256
value="c1a58cbbe3d0a5e207cd90e79a9e22c9eb01d9e77f7313f4f5aa7d9e478a0550"
origin="Generated by Gradle" reason="Artifact is not signed"/>
diff --git a/src/bom-thirdparty/build.gradle.kts
b/src/bom-thirdparty/build.gradle.kts
index 237ed8b5ec..a5364458c6 100644
--- a/src/bom-thirdparty/build.gradle.kts
+++ b/src/bom-thirdparty/build.gradle.kts
@@ -96,7 +96,7 @@ dependencies {
api("org.apache.commons:commons-dbcp2:2.9.0")
api("org.apache.commons:commons-jexl3:3.2.1")
api("org.apache.commons:commons-jexl:2.1.1")
- api("org.apache.commons:commons-lang3:3.14.0") {
+ api("org.apache.commons:commons-lang3:3.19.0") {
because("User might still rely on commons-lang3")
}
api("org.apache.commons:commons-math3:3.6.1")
diff --git a/src/dist/src/dist/expected_release_jars.csv
b/src/dist/src/dist/expected_release_jars.csv
index 476638871f..d8386b4c71 100644
--- a/src/dist/src/dist/expected_release_jars.csv
+++ b/src/dist/src/dist/expected_release_jars.csv
@@ -32,7 +32,7 @@
267634,commons-jexl-2.1.1.jar
462124,commons-jexl3-3.2.1.jar
760623,commons-jvm-4.1.0.jar
-657952,commons-lang3-3.14.0.jar
+709075,commons-lang3-3.19.0.jar
73737,commons-logging-1.3.5.jar
2213560,commons-math3-3.6.1.jar
322780,commons-net-3.10.0.jar
diff --git
a/src/functions/src/main/java/org/apache/jmeter/functions/RandomString.java
b/src/functions/src/main/java/org/apache/jmeter/functions/RandomString.java
index 0497799171..04949cec17 100644
--- a/src/functions/src/main/java/org/apache/jmeter/functions/RandomString.java
+++ b/src/functions/src/main/java/org/apache/jmeter/functions/RandomString.java
@@ -91,9 +91,9 @@ public class RandomString extends AbstractFunction {
String myValue;
if (StringUtilities.isEmpty(charsToUse)) {
- myValue = RandomStringUtils.random(length);
+ myValue = RandomStringUtils.insecure().next(length);
} else {
- myValue = RandomStringUtils.random(length, charsToUse);
+ myValue = RandomStringUtils.insecure().next(length, charsToUse);
}
if (myName.length() > 0) {
