This is an automated email from the ASF dual-hosted git repository.
jerryshao pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/gravitino.git
The following commit(s) were added to refs/heads/main by this push:
new ccaf7ab494 [#11162] improvement(deps): Upgrade commons-configuration2
from 2.8.0 to 2.10.1 (#11163)
ccaf7ab494 is described below
commit ccaf7ab494f27923bce06097b0aa1df636b23d5d
Author: geyanggang <[email protected]>
AuthorDate: Thu May 21 15:17:01 2026 +0800
[#11162] improvement(deps): Upgrade commons-configuration2 from 2.8.0 to
2.10.1 (#11163)
### What changes were proposed in this pull request?
Upgrade commons-configuration2 from 2.8.0 to 2.10.1 in
`gradle/libs.versions.toml`.
### Why are the changes needed?
commons-configuration2 2.8.0 has known issues with improper input
validation in configuration property interpolation. Version 2.10.1 is
the minimum version that fixes these issues while maintaining API
backward compatibility.
Fix: #11162
### Does this PR introduce _any_ user-facing change?
No.
### How was this patch tested?
- `./gradlew :catalogs:catalog-hive:compileJava
:catalogs:catalog-lakehouse-hudi:compileJava` — passes
- `./gradlew :catalogs:hive-metastore-common:test
:catalogs:catalog-hive:test -PskipITs` — passes
- Integration tests to be verified by CI
---
gradle/libs.versions.toml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index 4596d1590a..3f0945f9c2 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -51,7 +51,7 @@ httpclient5 = "5.4.4"
httpcore5 = "5.3.4"
micrometer-core = "1.12.2"
mockserver = "5.15.0"
-commons-configuration2 = "2.8.0"
+commons-configuration2 = "2.10.1"
commons-csv = "1.12.0"
commons-lang3 = "3.14.0"
commons-lang = "2.6"
