This is an automated email from the ASF dual-hosted git repository.
tilman pushed a commit to branch branch_2x
in repository https://gitbox.apache.org/repos/asf/tika.git
The following commit(s) were added to refs/heads/branch_2x by this push:
new 19277c7c0 TIKA-4456: update forbiddenapis, maven-antrun-plugin,
maven-assembly-plugin, maven-jar-plugin, aws, google cloud, bc, commons-cli,
commons-codec, commons-lang3, commons-io, jackson, jackcess, junit, jackrabbit,
poi, reactor, sqlite, tukaani, zstd, logback, maven-plugin-annotations,
maven-versions-plugin, maven-release-plugin
19277c7c0 is described below
commit 19277c7c0a33d446154eda1859c2547fde3756d1
Author: Tilman Hausherr <[email protected]>
AuthorDate: Tue Dec 2 12:10:03 2025 +0100
TIKA-4456: update forbiddenapis, maven-antrun-plugin,
maven-assembly-plugin, maven-jar-plugin, aws, google cloud, bc, commons-cli,
commons-codec, commons-lang3, commons-io, jackson, jackcess, junit, jackrabbit,
poi, reactor, sqlite, tukaani, zstd, logback, maven-plugin-annotations,
maven-versions-plugin, maven-release-plugin
---
tika-parent/pom.xml | 50 +++++++++++++++++++++++++-------------------------
1 file changed, 25 insertions(+), 25 deletions(-)
diff --git a/tika-parent/pom.xml b/tika-parent/pom.xml
index 5536554d0..5bd763e1f 100644
--- a/tika-parent/pom.xml
+++ b/tika-parent/pom.xml
@@ -288,15 +288,15 @@
<project.build.outputTimestamp>1745931970</project.build.outputTimestamp>
<!-- plugin versions -->
<checkstyle.plugin.version>3.6.0</checkstyle.plugin.version>
- <forbiddenapis.version>3.9</forbiddenapis.version>
+ <forbiddenapis.version>3.10</forbiddenapis.version>
<groovy.maven.version>2.1.1</groovy.maven.version>
- <maven.antrun.version>3.1.0</maven.antrun.version>
- <maven.assembly.version>3.7.1</maven.assembly.version>
+ <maven.antrun.version>3.2.0</maven.antrun.version>
+ <maven.assembly.version>3.8.0</maven.assembly.version>
<!-- can't update to 6, needs jdk17 -->
<maven.bundle.version>5.1.9</maven.bundle.version>
<maven.compiler.plugin.version>3.14.1</maven.compiler.plugin.version>
<maven.javadoc.version>3.12.0</maven.javadoc.version>
- <maven.jar.version>3.4.2</maven.jar.version>
+ <maven.jar.version>3.5.0</maven.jar.version>
<maven.scr.version>1.26.4</maven.scr.version>
<maven.failsafe.version>3.5.4</maven.failsafe.version>
<maven.surefire.version>3.5.4</maven.surefire.version>
@@ -309,8 +309,8 @@
<rat.version>0.16.1</rat.version>
<!-- dependency versions -->
- <google.cloud.version>2.58.1</google.cloud.version>
- <aws.version>1.12.792</aws.version>
+ <google.cloud.version>2.60.0</google.cloud.version>
+ <aws.version>1.12.793</aws.version>
<!-- WARNING: when you upgrade asm make sure that you update the
OpCode in the initializer in
org.apache.tika.parser.asm.XHTMLClassVisitor
See TIKA-2992.
@@ -318,17 +318,17 @@
<asm.version>9.8</asm.version>
<boilerpipe.version>1.1.0</boilerpipe.version>
<!-- used by POI, PDFBox and Jackcess ...try to sync -->
- <bouncycastle.version>1.82</bouncycastle.version>
+ <bouncycastle.version>1.83</bouncycastle.version>
<!-- NOTE: sync brotli version with commons-compress-->
<brotli.version>0.1.2</brotli.version>
- <commons.cli.version>1.10.0</commons.cli.version>
- <commons.codec.version>1.19.0</commons.codec.version>
+ <commons.cli.version>1.11.0</commons.cli.version>
+ <commons.codec.version>1.20.0</commons.codec.version>
<commons.collections4.version>4.5.0</commons.collections4.version>
<commons.compress.version>1.28.0</commons.compress.version>
<commons.csv.version>1.14.1</commons.csv.version>
<commons.exec.version>1.5.0</commons.exec.version>
- <commons.io.version>2.20.0</commons.io.version>
- <commons.lang3.version>3.19.0</commons.lang3.version>
+ <commons.io.version>2.21.0</commons.io.version>
+ <commons.lang3.version>3.20.0</commons.lang3.version>
<commons.logging.version>1.3.5</commons.logging.version>
<commons.math3.version>3.6.1</commons.math3.version>
<commons.net.version>3.11.1</commons.net.version>
@@ -350,8 +350,8 @@
<imageio.version>1.4.0</imageio.version>
<!-- jackrabbit 2.21.23 requires java 11 -->
<jackrabbit.version>2.21.22</jackrabbit.version>
- <jackson.version>2.20.0</jackson.version>
- <jackcess.version>4.0.8</jackcess.version>
+ <jackson.version>2.20.1</jackson.version>
+ <jackcess.version>4.0.10</jackcess.version>
<jackcess.encrypt.version>4.0.3</jackcess.encrypt.version>
<javax.annotation.version>1.3.2</javax.annotation.version>
<javax.jcr.version>2.0</javax.jcr.version>
@@ -369,7 +369,7 @@
<jna.version>5.18.1</jna.version>
<json.simple.version>1.1.1</json.simple.version>
<junit4.version>4.13.2</junit4.version>
- <junit5.version>5.13.4</junit5.version>
+ <junit5.version>5.14.1</junit5.version>
<junrar.version>7.5.7</junrar.version>
<libpst.version>0.9.3</libpst.version>
<log4j2.version>2.25.2</log4j2.version>
@@ -383,7 +383,7 @@
<mockito.version>4.11.0</mockito.version>
<netcdf-java.version>4.5.5</netcdf-java.version>
<netty.version>4.2.7.Final</netty.version>
- <oak.jackrabbit.version>1.86.0</oak.jackrabbit.version>
+ <oak.jackrabbit.version>1.88.0</oak.jackrabbit.version>
<openjson.version>1.0.13</openjson.version>
<!-- 2.0.0 doesn't compile with jdk8 -->
<opennlp.version>1.9.4</opennlp.version>
@@ -395,11 +395,11 @@
<!-- 4.14.0 needs jdk11 -->
<pax.exam.version>4.13.5</pax.exam.version>
<pdfbox.version>2.0.35</pdfbox.version>
- <poi.version>5.4.1</poi.version>
+ <poi.version>5.5.1</poi.version>
<!-- 2.5.0 needs jakarta.xml.bind 4.0.2 in tika-parser-scientific-module
-->
<quartz.version>2.3.2</quartz.version>
- <reactor.core.version>3.7.11</reactor.core.version>
- <reactor.netty.version>1.3.0-RC1</reactor.netty.version>
+ <reactor.core.version>3.8.0</reactor.core.version>
+ <reactor.netty.version>1.3.0</reactor.netty.version>
<rome.version>2.1.0</rome.version>
<scm.version>2.1.0</scm.version>
<!-- sis 1.3 xml bind 4 -->
@@ -409,11 +409,11 @@
<!-- NOTE: Spring 6 requires jdk17 -->
<!-- remove from ossindex when bumping from 5.3.39 -->
<spring.version>5.3.39</spring.version>
- <sqlite.version>3.50.3.0</sqlite.version>
+ <sqlite.version>3.51.1.0</sqlite.version>
<tagsoup.version>1.2.1</tagsoup.version>
<testcontainers.version>1.21.3</testcontainers.version>
<!-- NOTE: sync tukaani version with commons-compress in tika-parent-->
- <tukaani.version>1.10</tukaani.version>
+ <tukaani.version>1.11</tukaani.version>
<twelvemonkeys.version>3.12.0</twelvemonkeys.version>
<!-- 3.5.0 doesn't compile with jdk8 -->
<uima.version>3.4.1</uima.version>
@@ -423,12 +423,12 @@
<vorbis.version>0.8</vorbis.version>
<xerces.version>2.12.2</xerces.version>
<xmpcore.version>6.1.11</xmpcore.version>
- <zstd.version>1.5.7-5</zstd.version>
+ <zstd.version>1.5.7-6</zstd.version>
<!-- 4.0.0 doesn't compile with jdk8 -->
<kafka.version>3.9.1</kafka.version>
<snappy.java.version>1.1.10.8</snappy.java.version>
<!-- can't update to 1.4, these need jdk11 -->
- <logback.version>1.3.15</logback.version>
+ <logback.version>1.3.16</logback.version>
<javacpp.version>1.5.12</javacpp.version>
<!-- h2 2.3 requires jdk11 -->
<h2.version>2.2.224</h2.version>
@@ -1043,7 +1043,7 @@
<dependency>
<groupId>org.apache.maven.plugin-tools</groupId>
<artifactId>maven-plugin-annotations</artifactId>
- <version>3.15.1</version>
+ <version>3.15.2</version>
</dependency>
<!-- for zookeeper to avoid CVE-2023-6378 -->
<dependency>
@@ -1102,7 +1102,7 @@
<plugin>
<groupId>org.codehaus.mojo</groupId>
<artifactId>versions-maven-plugin</artifactId>
- <version>2.19.1</version>
+ <version>2.20.1</version>
<configuration>
<generateBackupPoms>false</generateBackupPoms>
</configuration>
@@ -1298,7 +1298,7 @@
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-release-plugin</artifactId>
- <version>3.1.1</version>
+ <version>3.2.0</version>
<configuration>
<autoVersionSubmodules>true</autoVersionSubmodules>
</configuration>
