This is an automated email from the ASF dual-hosted git repository.
vladimirsitnikov pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/jmeter.git
The following commit(s) were added to refs/heads/master by this push:
new 642a1e266d fix(deps): update dependency
org.apache.commons:commons-jexl3 to v3.5.0
642a1e266d is described below
commit 642a1e266d80af374106b3437431ac599819dcbe
Author: Mend Renovate <[email protected]>
AuthorDate: Mon Oct 27 17:22:43 2025 +0000
fix(deps): update dependency org.apache.commons:commons-jexl3 to v3.5.0
---
gradle/verification-metadata.xml | 5 +++++
src/bom-thirdparty/build.gradle.kts | 2 +-
src/dist/src/dist/expected_release_jars.csv | 2 +-
.../src/main/java/org/apache/jmeter/functions/Jexl3Function.java | 3 +++
4 files changed, 10 insertions(+), 2 deletions(-)
diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index 4be1109f08..b8880e8cd5 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -653,6 +653,11 @@
<sha256
value="628df30148acd3c491cfcb6b73c7ae4b5989e5526ab13a2f428dea5d4ad10d7a"
origin="Generated by Gradle"/>
</artifact>
</component>
+ <component group="org.apache.commons" name="commons-parent" version="81">
+ <artifact name="commons-parent-81.pom">
+ <sha256
value="348d4e7c131be6114c854a719ce7a44307a7c39bd366084977b24fd29ad0edb4"
origin="Generated by Gradle"/>
+ </artifact>
+ </component>
<component group="org.checkerframework"
name="checkerframework-gradle-plugin" version="0.6.37">
<artifact name="checkerframework-gradle-plugin-0.6.37.jar">
<sha256
value="f6c3f7c2d2fd68cead661b5b3a4ee3b27a337165c0f9634876d42aeb9e67bf32"
origin="Generated by Gradle" reason="Artifact is not signed"/>
diff --git a/src/bom-thirdparty/build.gradle.kts
b/src/bom-thirdparty/build.gradle.kts
index 3f98a163bd..f26a2b6d19 100644
--- a/src/bom-thirdparty/build.gradle.kts
+++ b/src/bom-thirdparty/build.gradle.kts
@@ -91,7 +91,7 @@ dependencies {
api("org.apache-extras.beanshell:bsh:2.0b6")
api("org.apache.commons:commons-collections4:4.5.0")
api("org.apache.commons:commons-dbcp2:2.9.0")
- api("org.apache.commons:commons-jexl3:3.2.1")
+ api("org.apache.commons:commons-jexl3:3.5.0")
api("org.apache.commons:commons-jexl:2.1.1")
api("org.apache.commons:commons-lang3:3.19.0") {
because("User might still rely on commons-lang3")
diff --git a/src/dist/src/dist/expected_release_jars.csv
b/src/dist/src/dist/expected_release_jars.csv
index a3b57ebed5..f711532058 100644
--- a/src/dist/src/dist/expected_release_jars.csv
+++ b/src/dist/src/dist/expected_release_jars.csv
@@ -30,7 +30,7 @@
211301,commons-dbcp2-2.9.0.jar
563971,commons-io-2.20.0.jar
267634,commons-jexl-2.1.1.jar
-462124,commons-jexl3-3.2.1.jar
+558963,commons-jexl3-3.5.0.jar
924068,commons-jvm-4.7.3.jar
709075,commons-lang3-3.19.0.jar
73737,commons-logging-1.3.5.jar
diff --git
a/src/functions/src/main/java/org/apache/jmeter/functions/Jexl3Function.java
b/src/functions/src/main/java/org/apache/jmeter/functions/Jexl3Function.java
index 69b86555c1..132d70810d 100644
--- a/src/functions/src/main/java/org/apache/jmeter/functions/Jexl3Function.java
+++ b/src/functions/src/main/java/org/apache/jmeter/functions/Jexl3Function.java
@@ -26,6 +26,7 @@ import org.apache.commons.jexl3.JexlContext;
import org.apache.commons.jexl3.JexlEngine;
import org.apache.commons.jexl3.JexlScript;
import org.apache.commons.jexl3.MapContext;
+import org.apache.commons.jexl3.introspection.JexlPermissions;
import org.apache.jmeter.engine.util.CompoundVariable;
import org.apache.jmeter.samplers.SampleResult;
import org.apache.jmeter.samplers.Sampler;
@@ -116,6 +117,8 @@ public class Jexl3Function extends AbstractFunction
implements ThreadListener {
.cache(512)
.silent(true)
.strict(true)
+ // TODO: allow customization for the permissions
+ .permissions(JexlPermissions.UNRESTRICTED)
// debug is true by default an impact negatively performances
// by a factory of 10
// Use JexlInfo if necessary
