This is an automated email from the ASF dual-hosted git repository.

spmallette pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/tinkerpop.git


The following commit(s) were added to refs/heads/master by this push:
     new 77b1abf620 Bumped commons dependencies CTR
77b1abf620 is described below

commit 77b1abf620f593a2a6f090eb6ce58861438d23d4
Author: Stephen Mallette <[email protected]>
AuthorDate: Tue Jan 27 11:41:18 2026 -0500

    Bumped commons dependencies CTR
---
 hadoop-gremlin/pom.xml | 17 +++++++++++++++++
 pom.xml                | 19 ++++++++++---------
 2 files changed, 27 insertions(+), 9 deletions(-)

diff --git a/hadoop-gremlin/pom.xml b/hadoop-gremlin/pom.xml
index 034d3bcea6..d02691dfdf 100644
--- a/hadoop-gremlin/pom.xml
+++ b/hadoop-gremlin/pom.xml
@@ -51,6 +51,14 @@ limitations under the License.
             <artifactId>hadoop-client</artifactId>
             <version>${hadoop.version}</version>
             <exclusions>
+                <exclusion>
+                    <groupId>org.apache.httpcomponents</groupId>
+                    <artifactId>httpclient</artifactId>
+                </exclusion>
+                <exclusion>
+                    <groupId>org.apache.httpcomponents</groupId>
+                    <artifactId>httpcore</artifactId>
+                </exclusion>
                 <exclusion>
                     <groupId>org.jline</groupId>
                     <artifactId>jline</artifactId>
@@ -108,6 +116,15 @@ limitations under the License.
             </exclusions>
         </dependency>
         <!-- hadoop-client conflict resolution -->
+        <dependency>
+            <groupId>org.apache.httpcomponents</groupId>
+            <artifactId>httpclient</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>org.apache.httpcomponents</groupId>
+            <artifactId>httpcore</artifactId>
+            <version>4.4.16</version>
+        </dependency>
         <dependency>
             <groupId>org.jline</groupId>
             <artifactId>jline</artifactId>
diff --git a/pom.xml b/pom.xml
index 40315bb660..b8d023660c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -153,12 +153,13 @@ limitations under the License.
     <properties>
         <antlr4.version>4.9.1</antlr4.version>
         <caffeine.version>3.2.3</caffeine.version>
-        <commons.collections.version>4.4</commons.collections.version>
-        <commons.configuration.version>2.11.0</commons.configuration.version>
+        <commons.codec.version>1.20.0</commons.codec.version>
+        <commons.collections.version>4.5.0</commons.collections.version>
+        <commons.configuration.version>2.13.0</commons.configuration.version>
         <commons.lang.version>2.6</commons.lang.version>
         <commons.io.version>2.8.0</commons.io.version>
-        <commons.lang3.version>3.17.0</commons.lang3.version>
-        <commons.text.version>1.10.0</commons.text.version>
+        <commons.lang3.version>3.20.0</commons.lang3.version>
+        <commons.text.version>1.15.0</commons.text.version>
         <cucumber.version>7.21.1</cucumber.version>
         <exp4j.version>0.4.8</exp4j.version>
         <groovy.version>4.0.25</groovy.version>
@@ -172,7 +173,7 @@ limitations under the License.
           it supports the jakarta.inject namespace which tinkerpop doesn't 
fuss with
         -->
         <guice.version>6.0.0</guice.version>
-        <hadoop.version>3.4.1</hadoop.version>
+        <hadoop.version>3.4.2</hadoop.version>
         <hamcrest.version>3.0</hamcrest.version>
         <java.tuples.version>1.2</java.tuples.version>
         <javadoc-plugin.version>3.3.1</javadoc-plugin.version>
@@ -905,14 +906,12 @@ limitations under the License.
             <dependency>
                 <groupId>org.apache.httpcomponents</groupId>
                 <artifactId>httpclient</artifactId>
-                <version>4.5.13</version>
+                <version>4.5.14</version>
                 <exclusions>
-                    <!-- bring commons-codec in line with TinkerPop -->
                     <exclusion>
                         <groupId>commons-codec</groupId>
                         <artifactId>commons-codec</artifactId>
                     </exclusion>
-                    <!-- bring commons-logging in line with TinkerPop -->
                     <exclusion>
                         <groupId>commons-logging</groupId>
                         <artifactId>commons-logging</artifactId>
@@ -971,6 +970,7 @@ limitations under the License.
                 <artifactId>jacoco-maven-plugin</artifactId>
                 <version>0.8.8</version>
             </dependency>
+            <!-- start - align httpclient to TinkerPop -->
             <dependency>
                 <groupId>commons-io</groupId>
                 <artifactId>commons-io</artifactId>
@@ -979,8 +979,9 @@ limitations under the License.
             <dependency>
                 <groupId>commons-codec</groupId>
                 <artifactId>commons-codec</artifactId>
-                <version>1.15</version>
+                <version>${commons.codec.version}</version>
             </dependency>
+            <!-- end - align httpclient to TinkerPop -->
         </dependencies>
     </dependencyManagement>
 

Reply via email to