This is an automated email from the ASF dual-hosted git repository.
joshtynjala pushed a commit to branch develop
in repository https://gitbox.apache.org/repos/asf/royale-compiler.git
The following commit(s) were added to refs/heads/develop by this push:
new 4a819ee37 update commons-lang3 to 3.18.0
4a819ee37 is described below
commit 4a819ee37831fc09cbf7198838038c69c3073978
Author: Josh Tynjala <joshtynj...@apache.org>
AuthorDate: Wed Aug 27 10:19:17 2025 -0700
update commons-lang3 to 3.18.0
to fix a security alert
---
README | 2 +-
compiler-build-tools/.classpath | 2 +-
compiler-common/.classpath | 2 +-
compiler-externc/.classpath | 2 +-
compiler-jburg-types/.classpath | 2 +-
compiler-test-utils/.classpath | 2 +-
compiler/.classpath | 2 +-
compiler/pom.xml | 2 +-
compiler/src/test/downloads.xml | 10 +++++-----
royale-ant-tasks/.classpath | 2 +-
royale-maven-plugin/pom.xml | 2 +-
11 files changed, 15 insertions(+), 15 deletions(-)
diff --git a/README b/README
index 3cbcdb75e..d6bc4d130 100644
--- a/README
+++ b/README
@@ -252,7 +252,7 @@ Software Dependencies
commons-cli -
https://repo1.maven.org/maven2/commons-cli/commons-cli/1.2/commons-cli-1.2.jar
commons-io -
https://repo1.maven.org/maven2/commons-io/commons-io/2.14.0/commons-io-2.14.0.jar
commons-lang -
https://repo1.maven.org/maven2/commons-lang/commons-lang/2.6/commons-lang-2.6.jar
- commons-lang3 -
https://repo1.maven.org/maven2/org/apache/commons/commons-lang3/3.4/commons-lang3-3.4.jar
+ commons-lang3 -
https://repo1.maven.org/maven2/org/apache/commons/commons-lang3/3.18.0/commons-lang3-3.18.0.jar
commons-compress -
https://repo1.maven.org/maven2/org/apache/commons/commons-compress/1.26.0/commons-compress-1.26.0.jar
guava -
https://repo1.maven.org/maven2/com/google/guava/guava/32.0.0-jre/guava-32.0.0-jre.jar
failureaccess -
https://repo1.maven.org/maven2/com/google/guava/failureaccess/1.0.2/failureaccess-1.0.2.jar
diff --git a/compiler-build-tools/.classpath b/compiler-build-tools/.classpath
index 1d1bab107..05a5f2f2a 100644
--- a/compiler-build-tools/.classpath
+++ b/compiler-build-tools/.classpath
@@ -6,7 +6,7 @@
<classpathentry kind="lib" path="../compiler/lib/external/guava.jar"/>
<classpathentry kind="con"
path="org.eclipse.jdt.launching.JRE_CONTAINER"/>
<classpathentry kind="lib"
path="../compiler/lib/external/flex-tool-api.jar"/>
- <classpathentry kind="lib"
path="../compiler/lib/external/commons-lang3-3.4.jar"/>
+ <classpathentry kind="lib"
path="../compiler/lib/external/commons-lang3-3.18.0.jar"/>
<classpathentry kind="lib"
path="../compiler/lib/external/commons-compress-1.26.0.jar"/>
<classpathentry kind="lib" path="../compiler/lib/external/antlr.jar"/>
<classpathentry kind="lib"
path="../compiler/lib/external/junit-4.10.jar"/>
diff --git a/compiler-common/.classpath b/compiler-common/.classpath
index 7395f6a8a..63e02043b 100644
--- a/compiler-common/.classpath
+++ b/compiler-common/.classpath
@@ -6,7 +6,7 @@
<classpathentry kind="lib" path="../compiler/lib/external/guava.jar"/>
<classpathentry kind="con"
path="org.eclipse.jdt.launching.JRE_CONTAINER"/>
<classpathentry kind="lib"
path="../compiler/lib/external/flex-tool-api.jar"/>
- <classpathentry kind="lib"
path="../compiler/lib/external/commons-lang3-3.4.jar"/>
+ <classpathentry kind="lib"
path="../compiler/lib/external/commons-lang3-3.18.0.jar"/>
<classpathentry kind="lib"
path="../compiler/lib/external/commons-compress-1.26.0.jar"/>
<classpathentry kind="lib" path="../compiler/lib/external/antlr.jar"/>
<classpathentry kind="lib"
path="../compiler/lib/external/junit-4.10.jar"/>
diff --git a/compiler-externc/.classpath b/compiler-externc/.classpath
index e019211d7..edf519c61 100644
--- a/compiler-externc/.classpath
+++ b/compiler-externc/.classpath
@@ -12,7 +12,7 @@
<classpathentry kind="con"
path="org.eclipse.jdt.launching.JRE_CONTAINER"/>
<classpathentry kind="lib"
path="../compiler/lib/external/flex-tool-api.jar"/>
<classpathentry kind="lib"
path="../compiler/lib/external/junit-4.10.jar"/>
- <classpathentry kind="lib"
path="../compiler/lib/external/commons-lang3-3.4.jar"/>
+ <classpathentry kind="lib"
path="../compiler/lib/external/commons-lang3-3.18.0.jar"/>
<classpathentry combineaccessrules="false" kind="src"
path="/compiler-common"/>
<classpathentry kind="lib"
path="../compiler/lib/external/commons-compress-1.26.0.jar"/>
<classpathentry kind="lib"
path="../compiler-jx/lib/google/closure-compiler/compiler.jar"/>
diff --git a/compiler-jburg-types/.classpath b/compiler-jburg-types/.classpath
index 5e497ae7c..aa1b64a05 100644
--- a/compiler-jburg-types/.classpath
+++ b/compiler-jburg-types/.classpath
@@ -6,7 +6,7 @@
<classpathentry kind="lib" path="../compiler/lib/external/guava.jar"/>
<classpathentry kind="con"
path="org.eclipse.jdt.launching.JRE_CONTAINER"/>
<classpathentry kind="lib"
path="../compiler/lib/external/flex-tool-api.jar"/>
- <classpathentry kind="lib"
path="../compiler/lib/external/commons-lang3-3.4.jar"/>
+ <classpathentry kind="lib"
path="../compiler/lib/external/commons-lang3-3.18.0.jar"/>
<classpathentry kind="lib"
path="../compiler/lib/external/commons-compress-1.26.0.jar"/>
<classpathentry kind="lib" path="../compiler/lib/external/antlr.jar"/>
<classpathentry kind="lib"
path="../compiler/lib/external/junit-4.10.jar"/>
diff --git a/compiler-test-utils/.classpath b/compiler-test-utils/.classpath
index 7395f6a8a..63e02043b 100644
--- a/compiler-test-utils/.classpath
+++ b/compiler-test-utils/.classpath
@@ -6,7 +6,7 @@
<classpathentry kind="lib" path="../compiler/lib/external/guava.jar"/>
<classpathentry kind="con"
path="org.eclipse.jdt.launching.JRE_CONTAINER"/>
<classpathentry kind="lib"
path="../compiler/lib/external/flex-tool-api.jar"/>
- <classpathentry kind="lib"
path="../compiler/lib/external/commons-lang3-3.4.jar"/>
+ <classpathentry kind="lib"
path="../compiler/lib/external/commons-lang3-3.18.0.jar"/>
<classpathentry kind="lib"
path="../compiler/lib/external/commons-compress-1.26.0.jar"/>
<classpathentry kind="lib" path="../compiler/lib/external/antlr.jar"/>
<classpathentry kind="lib"
path="../compiler/lib/external/junit-4.10.jar"/>
diff --git a/compiler/.classpath b/compiler/.classpath
index 018911c7d..68f3de7ed 100644
--- a/compiler/.classpath
+++ b/compiler/.classpath
@@ -17,7 +17,7 @@
<classpathentry kind="var" path="ANT_JAR"/>
<classpathentry kind="lib" path="lib/external/flex-tool-api.jar"/>
<classpathentry kind="lib" path="lib/external/junit-4.10.jar"/>
- <classpathentry kind="lib" path="lib/external/commons-lang3-3.4.jar"/>
+ <classpathentry kind="lib"
path="lib/external/commons-lang3-3.18.0.jar"/>
<classpathentry kind="lib" path="lib/external/jburg.jar"/>
<classpathentry kind="lib"
path="lib/external/commons-compress-1.26.0.jar"/>
<classpathentry combineaccessrules="false" kind="src"
path="/compiler-common"/>
diff --git a/compiler/pom.xml b/compiler/pom.xml
index 059146c8a..a6166595b 100644
--- a/compiler/pom.xml
+++ b/compiler/pom.xml
@@ -656,7 +656,7 @@
<dependency>
<groupId>org.apache.commons</groupId>
<artifactId>commons-lang3</artifactId>
- <version>3.4</version>
+ <version>3.18.0</version>
<scope>test</scope>
</dependency>
</dependencies>
diff --git a/compiler/src/test/downloads.xml b/compiler/src/test/downloads.xml
index 6328db1db..940da5e4e 100644
--- a/compiler/src/test/downloads.xml
+++ b/compiler/src/test/downloads.xml
@@ -202,24 +202,24 @@
<target name="commons-lang3-jar-check" description="Checks if
commons-lang3 JAR exists.">
<condition property="commons-lang3.jar.exists">
<and>
- <available file="${external.lib.dir}/commons-lang3-3.4.jar"/>
+ <available
file="${external.lib.dir}/commons-lang3-3.18.0.jar"/>
</and>
</condition>
</target>
<target name="commons-lang3-jar" depends="commons-lang3-jar-check"
unless="commons-lang3.jar.exists"
description="Copies the commons-lang3 JAR to the lib directory.">
- <echo message="Obtaining lib/external/commons-lang3-3.4.jar"/>
+ <echo message="Obtaining lib/external/commons-lang3-3.18.0.jar"/>
<antcall target="commons-lang3-download-jar"/>
</target>
<target name="commons-lang3-download-jar"
depends="commons-lang3-jar-check" unless="commons-lang3.jar.exists"
description="Downloads the commons-lang3 jar.">
<antcall target="download-jar">
- <param name="srcUrl"
value="https://repo1.maven.org/maven2/org/apache/commons/commons-lang3/3.4"/>
- <param name="srcJarFile" value="commons-lang3-3.4.jar"/>
+ <param name="srcUrl"
value="https://repo1.maven.org/maven2/org/apache/commons/commons-lang3/3.18.0"/>
+ <param name="srcJarFile" value="commons-lang3-3.18.0.jar"/>
<param name="destDir" value="${external.lib.dir}"/>
- <param name="destJarFile" value="commons-lang3-3.4.jar"/>
+ <param name="destJarFile" value="commons-lang3-3.18.0.jar"/>
</antcall>
</target>
diff --git a/royale-ant-tasks/.classpath b/royale-ant-tasks/.classpath
index 92909cf71..3de8aec41 100644
--- a/royale-ant-tasks/.classpath
+++ b/royale-ant-tasks/.classpath
@@ -6,7 +6,7 @@
<classpathentry kind="lib" path="../compiler/lib/external/guava.jar"/>
<classpathentry kind="con"
path="org.eclipse.jdt.launching.JRE_CONTAINER"/>
<classpathentry kind="lib"
path="../compiler/lib/external/flex-tool-api.jar"/>
- <classpathentry kind="lib"
path="../compiler/lib/external/commons-lang3-3.4.jar"/>
+ <classpathentry kind="lib"
path="../compiler/lib/external/commons-lang3-3.18.0.jar"/>
<classpathentry kind="lib"
path="../compiler/lib/external/commons-compress-1.26.0.jar"/>
<classpathentry kind="lib" path="../compiler/lib/external/antlr.jar"/>
<classpathentry kind="lib"
path="../compiler/lib/external/junit-4.10.jar"/>
diff --git a/royale-maven-plugin/pom.xml b/royale-maven-plugin/pom.xml
index 261cfe14e..62c5dc37b 100644
--- a/royale-maven-plugin/pom.xml
+++ b/royale-maven-plugin/pom.xml
@@ -83,7 +83,7 @@
<dependency>
<groupId>org.apache.commons</groupId>
<artifactId>commons-lang3</artifactId>
- <version>3.4</version>
+ <version>3.18.0</version>
</dependency>
<dependency>
<groupId>org.apache.flex</groupId>
