This is an automated email from the ASF dual-hosted git repository.
asf-gitbox-commits pushed a commit to branch branch_2x
in repository https://gitbox.apache.org/repos/asf/tika.git
The following commit(s) were added to refs/heads/branch_2x by this push:
new e6d5c925ec TIKA-4622: update forbiddenapis, google cloud, azure, asm,
bc, commons-codec, commons-lang3, guava, jackson, jackcess, junrar,
metadata-extractor, reactor, slf4j, twelvemonkeys, zstd, snappy, woodstox-core,
xmlbeans, versions-plugins
e6d5c925ec is described below
commit e6d5c925ec1c043ce716fabc3e9a04d29b7b2b1d
Author: Tilman Hausherr <[email protected]>
AuthorDate: Mon Oct 26 21:27:09 2026 +0100
TIKA-4622: update forbiddenapis, google cloud, azure, asm, bc,
commons-codec, commons-lang3, guava, jackson, jackcess, junrar,
metadata-extractor, reactor, slf4j, twelvemonkeys, zstd, snappy, woodstox-core,
xmlbeans, versions-plugins
---
tika-parent/pom.xml | 49 +++++++++++++++++++++++++------------------------
1 file changed, 25 insertions(+), 24 deletions(-)
diff --git a/tika-parent/pom.xml b/tika-parent/pom.xml
index 3a4200d68b..c05b2ac5cb 100644
--- a/tika-parent/pom.xml
+++ b/tika-parent/pom.xml
@@ -288,7 +288,7 @@
<project.build.outputTimestamp>1745931970</project.build.outputTimestamp>
<!-- plugin versions -->
<checkstyle.plugin.version>3.6.0</checkstyle.plugin.version>
- <forbiddenapis.version>3.10</forbiddenapis.version>
+ <forbiddenapis.version>3.11</forbiddenapis.version>
<groovy.maven.version>2.1.1</groovy.maven.version>
<maven.antrun.version>3.2.0</maven.antrun.version>
<maven.assembly.version>3.8.0</maven.assembly.version>
@@ -310,30 +310,30 @@
<rat.version>0.16.1</rat.version>
<!-- dependency versions -->
- <google.cloud.version>2.73.0</google.cloud.version>
- <azure.version>1.3.8</azure.version>
+ <google.cloud.version>2.74.0</google.cloud.version>
+ <azure.version>1.3.9</azure.version>
<aws.version>1.12.797</aws.version>
<!-- WARNING: when you upgrade asm make sure that you update the
OpCode in the initializer in
org.apache.tika.parser.asm.XHTMLClassVisitor
See TIKA-2992.
-->
- <asm.version>9.10.1</asm.version>
+ <asm.version>9.11</asm.version>
<boilerpipe.version>1.1.0</boilerpipe.version>
<!-- used by POI, PDFBox and Jackcess ...try to sync -->
- <bouncycastle.version>1.86.1</bouncycastle.version>
+ <bouncycastle.version>1.86.2</bouncycastle.version>
<!-- NOTE: sync brotli version with commons-compress-->
<brotli.version>0.1.2</brotli.version>
<commons.cli.version>1.11.0</commons.cli.version>
- <commons.codec.version>1.22.1</commons.codec.version>
+ <commons.codec.version>1.23.0</commons.codec.version>
<commons.collections4.version>4.6.0</commons.collections4.version>
<commons.compress.version>1.28.0</commons.compress.version>
<commons.csv.version>1.14.1</commons.csv.version>
<commons.exec.version>1.6.0</commons.exec.version>
<commons.io.version>2.22.0</commons.io.version>
- <commons.lang3.version>3.20.0</commons.lang3.version>
+ <commons.lang3.version>3.21.0</commons.lang3.version>
<commons.logging.version>1.4.0</commons.logging.version>
<commons.math3.version>3.6.1</commons.math3.version>
- <commons.net.version>3.11.1</commons.net.version>
+ <commons.net.version>3.13.0</commons.net.version>
<commons.fileupload.version>1.6.0</commons.fileupload.version>
<ctakes.version>5.1.0</ctakes.version>
<!-- can't update to 3.6.0, needs jdk11 -->
@@ -343,7 +343,7 @@
<dl4j.version>1.0.0-M2</dl4j.version>
<!-- fakeload versions > 0.4.0 require java > 8 -->
<fakeload.version>0.4.0</fakeload.version>
- <guava.version>33.7.1-jre</guava.version>
+ <guava.version>33.7.2-jre</guava.version>
<hdf5.version>1.14.3-1.5.10</hdf5.version>
<httpcomponents.version>4.5.14</httpcomponents.version>
<httpcore.version>4.4.16</httpcore.version>
@@ -352,9 +352,9 @@
<imageio.version>1.4.0</imageio.version>
<!-- jackrabbit 2.21.23 requires java 11 -->
<jackrabbit.version>2.21.22</jackrabbit.version>
- <jackson.version>2.22.2</jackson.version>
- <jackcess.version>4.0.11</jackcess.version>
- <jackcess.encrypt.version>4.0.3</jackcess.encrypt.version>
+ <jackson.version>2.22.4</jackson.version>
+ <jackcess.version>4.0.12</jackcess.version>
+ <jackcess.encrypt.version>4.0.4</jackcess.encrypt.version>
<javax.annotation.version>1.3.2</javax.annotation.version>
<javax.jcr.version>2.0</javax.jcr.version>
<javax.rest.version>2.1.1</javax.rest.version>
@@ -373,18 +373,18 @@
<json.simple.version>1.1.1</json.simple.version>
<junit4.version>4.13.2</junit4.version>
<junit5.version>5.14.4</junit5.version>
- <junrar.version>8.1.1</junrar.version>
+ <junrar.version>8.1.2</junrar.version>
<libpst.version>0.9.3</libpst.version>
<log4j2.version>2.26.1</log4j2.version>
<!-- lucene >= 9.x requires Java 11 -->
<lucene.version>8.11.4</lucene.version>
- <metadata.extractor.version>2.21.0</metadata.extractor.version>
+ <metadata.extractor.version>2.22.0</metadata.extractor.version>
<microsoft.translator.version>0.6.2</microsoft.translator.version>
<mime4j.version>0.8.15</mime4j.version>
<!-- mockito >= 5 requires jdk11 -->
<mockito.version>4.11.0</mockito.version>
<netcdf-java.version>4.5.5</netcdf-java.version>
- <netty.version>4.2.18.Final</netty.version>
+ <netty.version>4.2.19.Final</netty.version>
<oak.jackrabbit.version>2.6.0</oak.jackrabbit.version>
<openjson.version>1.0.13</openjson.version>
<!-- 2.0.0 doesn't compile with jdk8 -->
@@ -400,13 +400,13 @@
<poi.version>5.5.1</poi.version>
<!-- 2.5.0 needs jakarta.xml.bind 4.0.2 in tika-parser-scientific-module
-->
<quartz.version>2.4.1</quartz.version>
- <reactor.core.version>3.8.7</reactor.core.version>
- <reactor.netty.version>1.3.7</reactor.netty.version>
+ <reactor.core.version>3.8.8</reactor.core.version>
+ <reactor.netty.version>1.3.8</reactor.netty.version>
<rome.version>2.1.0</rome.version>
<scm.version>2.2.1</scm.version>
<!-- sis 1.3 xml bind 4 -->
<sis.version>1.3</sis.version>
- <slf4j.version>2.0.19</slf4j.version>
+ <slf4j.version>2.0.20</slf4j.version>
<solrj.version>8.11.4</solrj.version>
<!-- NOTE: Spring 6 requires jdk17 -->
<!-- remove from ossindex when bumping from 5.3.39 -->
@@ -416,7 +416,7 @@
<testcontainers.version>1.21.4</testcontainers.version>
<!-- NOTE: sync tukaani version with commons-compress in tika-parent-->
<tukaani.version>1.12</tukaani.version>
- <twelvemonkeys.version>3.15.1</twelvemonkeys.version>
+ <twelvemonkeys.version>3.15.3</twelvemonkeys.version>
<!-- 3.5.0 doesn't compile with jdk8 -->
<uima.version>3.4.1</uima.version>
<!-- 3.5.0 doesn't compile with jdk8 -->
@@ -425,10 +425,10 @@
<vorbis.version>0.8</vorbis.version>
<xerces.version>2.12.2</xerces.version>
<xmpcore.version>6.1.11</xmpcore.version>
- <zstd.version>1.5.7-16</zstd.version>
+ <zstd.version>1.5.7-24</zstd.version>
<!-- 4.0.0 doesn't compile with jdk8 -->
<kafka.version>3.9.2</kafka.version>
- <snappy.java.version>1.1.10.8</snappy.java.version>
+ <snappy.java.version>1.1.10.12</snappy.java.version>
<!-- can't update to 1.4, these need jdk11 -->
<logback.version>1.3.16</logback.version>
<javacpp.version>1.5.13</javacpp.version>
@@ -529,7 +529,7 @@
<dependency>
<groupId>com.fasterxml.woodstox</groupId>
<artifactId>woodstox-core</artifactId>
- <version>7.2.2</version>
+ <version>7.3.0</version>
</dependency>
<dependency>
<groupId>com.beust</groupId>
@@ -554,6 +554,7 @@
<dependency>
<groupId>com.github.albfernandez</groupId>
<artifactId>juniversalchardet</artifactId>
+ <!-- TODO 2.5.0 fails in Apache Tika text parser module -->
<version>2.5.0</version>
</dependency>
<!-- jai-imageio-core is allowed since LEGAL-304 -->
@@ -816,7 +817,7 @@
<dependency>
<groupId>org.apache.xmlbeans</groupId>
<artifactId>xmlbeans</artifactId>
- <version>5.4.0</version>
+ <version>5.4.1</version>
<!-- need to exclude these provided dependencies -->
<exclusions>
<exclusion>
@@ -1074,7 +1075,7 @@
<plugin>
<groupId>org.codehaus.mojo</groupId>
<artifactId>versions-maven-plugin</artifactId>
- <version>2.22.0</version>
+ <version>2.23.0</version>
<configuration>
<generateBackupPoms>false</generateBackupPoms>
</configuration>
