This is an automated email from the ASF dual-hosted git repository.

chengpan pushed a commit to branch branch-1.10
in repository https://gitbox.apache.org/repos/asf/kyuubi.git


The following commit(s) were added to refs/heads/branch-1.10 by this push:
     new ef5e2150a7 [KYUUBI #7151] Bump commons-lang3 3.18.0
ef5e2150a7 is described below

commit ef5e2150a7f4e5d17b4670708dbbea2985652dbd
Author: Cheng Pan <[email protected]>
AuthorDate: Thu Jul 24 14:46:51 2025 +0800

    [KYUUBI #7151] Bump commons-lang3 3.18.0
    
    ### Why are the changes needed?
    
    This version contains CVE-2025-48924 fix.
    
    ### How was this patch tested?
    
    Pass GHA.
    
    ### Was this patch authored or co-authored using generative AI tooling?
    
    No.
    
    Closes #7151 from pan3793/lang3-3.18.
    
    Closes #7151
    
    fbbedce33 [Cheng Pan] Bump commons-lang3 3.18.0
    
    Authored-by: Cheng Pan <[email protected]>
    Signed-off-by: Cheng Pan <[email protected]>
    (cherry picked from commit 8bea66a4125b521086094ef4f3a8a9fa75df7631)
    Signed-off-by: Cheng Pan <[email protected]>
---
 dev/dependencyList | 2 +-
 pom.xml            | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/dev/dependencyList b/dev/dependencyList
index 3366f333d6..91c08b84a1 100644
--- a/dev/dependencyList
+++ b/dev/dependencyList
@@ -30,7 +30,7 @@ arrow-vector/16.0.0//arrow-vector-16.0.0.jar
 checker-qual/3.42.0//checker-qual-3.42.0.jar
 classgraph/4.8.138//classgraph-4.8.138.jar
 commons-codec/1.17.1//commons-codec-1.17.1.jar
-commons-lang3/3.17.0//commons-lang3-3.17.0.jar
+commons-lang3/3.18.0//commons-lang3-3.18.0.jar
 error_prone_annotations/2.23.0//error_prone_annotations-2.23.0.jar
 failsafe/3.3.2//failsafe-3.3.2.jar
 failureaccess/1.0.2//failureaccess-1.0.2.jar
diff --git a/pom.xml b/pom.xml
index 47465b5210..65106fdf93 100644
--- a/pom.xml
+++ b/pom.xml
@@ -134,7 +134,7 @@
         <commons-codec.version>1.17.1</commons-codec.version>
         <commons-collections.version>3.2.2</commons-collections.version>
         <commons-io.version>2.16.1</commons-io.version>
-        <commons-lang3.version>3.17.0</commons-lang3.version>
+        <commons-lang3.version>3.18.0</commons-lang3.version>
         <delta.artifact>delta-spark_${scala.binary.version}</delta.artifact>
         <delta.version>3.2.0</delta.version>
         <failsafe.verion>3.3.2</failsafe.verion>

Reply via email to