lingwei.kong/hawkbit
1
0
Fork 0
Code Issues Pull Requests Actions 3 Packages Projects Releases Wiki Activity

Bump/override org.apache.commons:commons-lang3 version to 3.20.0 (#2819)

Browse Source 
Signed-off-by: Avgustin Marinov <Avgustin.Marinov@bosch.com>
This commit is contained in:
Avgustin Marinov
2025-11-18 15:05:38 +02:00
committed by GitHub
parent 80165de06a
commit a6927ef94f
1 changed files with 14 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
pom.xml
View File

@@ -41,6 +41,13 @@
</scm>
<properties>
<!-- Overrides START - to be reviewed regularly -->
<!-- Override vulnerable commons-fileupload used by feign-form-spring (via spring-cloud-starter-openfeign) -->
<commons-fileupload.version>1.6.0</commons-fileupload.version>
<!-- Override commons-lang3 version since 3.17 is vulnerable -->
<commons-lang-version>3.20.0</commons-lang-version>
<!-- Overrides END -->
<revision>0-SNAPSHOT</revision>
<java.version>17</java.version>
@@ -48,9 +55,6 @@
as libraries in other projects might be compiled with a different, lower, java version. -->
<java.client.version>17</java.client.version>
<!-- Override vulnerable commons-fileupload used by feign-form-spring (via spring-cloud-starter-openfeign) -->
<commons-fileupload.version>1.6.0</commons-fileupload.version>
<!-- must be the same as the parent version -->
<spring.boot.version>3.5.7</spring.boot.version>
<spring.cloud.version>2025.0.0</spring.cloud.version>
@@ -200,12 +204,18 @@
<dependencyManagement>
<dependencies>
<!-- Override vulnerable commons-fileupload used by feign-form-spring (via spring-cloud-starter-openfeign) -->
<!-- Overrides START -->
<dependency>
<groupId>commons-fileupload</groupId>
<artifactId>commons-fileupload</artifactId>
<version>${commons-fileupload.version}</version>
</dependency>
<dependency>
<groupId>org.apache.commons</groupId>
<artifactId>commons-lang3</artifactId>
<version>${commons-lang-version}</version>
</dependency>
<!-- Overrides END -->
<!-- Misc -->
<dependency>