This is an automated email from the ASF dual-hosted git repository.
slachiewicz pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/maven-plugin-tools.git
The following commit(s) were added to refs/heads/master by this push:
new b21c816a Update commons-io to 2.22.0
b21c816a is described below
commit b21c816a1349189a4303ca8edc11c6b1a2c83da3
Author: Sylwester Lachiewicz <[email protected]>
AuthorDate: Thu Oct 29 23:50:29 2026 +0000
Update commons-io to 2.22.0
---
pom.xml | 7 +++++++
1 file changed, 7 insertions(+)
diff --git a/pom.xml b/pom.xml
index 4998beef..c466899f 100644
--- a/pom.xml
+++ b/pom.xml
@@ -109,6 +109,13 @@
<dependencyManagement>
<dependencies>
+ <!-- maven-shared-utils 3.4.2 (via maven-reporting-impl) brings in
commons-io 2.11.0, which has a known vulnerability -->
+ <dependency>
+ <groupId>commons-io</groupId>
+ <artifactId>commons-io</artifactId>
+ <version>2.22.0</version>
+ </dependency>
+
<!-- maven -->
<dependency>
<groupId>org.apache.maven.plugin-tools</groupId>
