This is an automated email from the ASF dual-hosted git repository.
adamsaghy pushed a commit to branch develop
in repository https://gitbox.apache.org/repos/asf/fineract.git
The following commit(s) were added to refs/heads/develop by this push:
new a656dbde18 FINERACT-2421: Upgrade tomcat version
a656dbde18 is described below
commit a656dbde18abd9dae47ad31f1a8d234504583a8f
Author: Adam Saghy <[email protected]>
AuthorDate: Mon Feb 23 14:24:19 2026 +0100
FINERACT-2421: Upgrade tomcat version
---
buildSrc/src/main/groovy/org.apache.fineract.dependencies.gradle | 6 +++---
integration-tests/dependencies.gradle | 2 +-
oauth2-tests/dependencies.gradle | 2 +-
twofactor-tests/dependencies.gradle | 2 +-
4 files changed, 6 insertions(+), 6 deletions(-)
diff --git a/buildSrc/src/main/groovy/org.apache.fineract.dependencies.gradle
b/buildSrc/src/main/groovy/org.apache.fineract.dependencies.gradle
index 271bf5d8a4..1912865870 100644
--- a/buildSrc/src/main/groovy/org.apache.fineract.dependencies.gradle
+++ b/buildSrc/src/main/groovy/org.apache.fineract.dependencies.gradle
@@ -303,8 +303,8 @@ dependencyManagement {
// Force lz4-java version: CVE-2025-12183
dependency 'at.yawk.lz4:lz4-java:1.10.1'
// Force tomcat-embed-core version: CVE-2025-24813
- dependency 'org.apache.tomcat.embed:tomcat-embed-core:10.1.47'
- dependency 'org.apache.tomcat.embed:tomcat-embed-el:10.1.47'
- dependency 'org.apache.tomcat.embed:tomcat-embed-websocket:10.1.47'
+ dependency 'org.apache.tomcat.embed:tomcat-embed-core:10.1.49'
+ dependency 'org.apache.tomcat.embed:tomcat-embed-el:10.1.49'
+ dependency 'org.apache.tomcat.embed:tomcat-embed-websocket:10.1.49'
}
}
diff --git a/integration-tests/dependencies.gradle
b/integration-tests/dependencies.gradle
index 0dc39501c6..6f5a7d412d 100644
--- a/integration-tests/dependencies.gradle
+++ b/integration-tests/dependencies.gradle
@@ -20,7 +20,7 @@ dependencies {
// testCompile dependencies are ONLY used in src/test, not src/main.
// Do NOT repeat dependencies which are ALREADY in implementation or
runtimeOnly!
//
- tomcat 'org.apache.tomcat:tomcat:10.1.47@zip'
+ tomcat 'org.apache.tomcat:tomcat:10.1.49@zip'
def providerMainOutput =
project(':fineract-provider').extensions.getByType(SourceSetContainer).named('main').get().output
testImplementation( providerMainOutput,
project(path: ':fineract-core', configuration: 'runtimeElements'),
diff --git a/oauth2-tests/dependencies.gradle b/oauth2-tests/dependencies.gradle
index 2b94eb21ae..c66dfb9a2b 100644
--- a/oauth2-tests/dependencies.gradle
+++ b/oauth2-tests/dependencies.gradle
@@ -20,7 +20,7 @@ dependencies {
// testCompile dependencies are ONLY used in src/test, not src/main.
// Do NOT repeat dependencies which are ALREADY in implementation or
runtimeOnly!
//
- tomcat 'org.apache.tomcat:tomcat:10.1.47@zip'
+ tomcat 'org.apache.tomcat:tomcat:10.1.49@zip'
testImplementation(
files("$rootDir/fineract-provider/build/classes/java/main/"),
project(path: ':fineract-provider', configuration:
'runtimeElements'),
project(path: ':fineract-security', configuration:
'runtimeElements'),
diff --git a/twofactor-tests/dependencies.gradle
b/twofactor-tests/dependencies.gradle
index 9a5e31684c..30f99d7a43 100644
--- a/twofactor-tests/dependencies.gradle
+++ b/twofactor-tests/dependencies.gradle
@@ -20,7 +20,7 @@ dependencies {
// testCompile dependencies are ONLY used in src/test, not src/main.
// Do NOT repeat dependencies which are ALREADY in implementation or
runtimeOnly!
//
- tomcat 'org.apache.tomcat:tomcat:10.1.47@zip'
+ tomcat 'org.apache.tomcat:tomcat:10.1.49@zip'
testImplementation(
files("$rootDir/fineract-provider/build/classes/java/main/"),
project(path: ':fineract-provider', configuration:
'runtimeElements'),
'org.junit.jupiter:junit-jupiter-api',
