This is an automated email from the ASF dual-hosted git repository.
rombert pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/sling-ide-tooling.git
The following commit(s) were added to refs/heads/master by this push:
new 401aa4e8 Bump commons-io:commons-io from 2.11.0 to 2.14.0 in
/shared/impl-vlt (#24)
401aa4e8 is described below
commit 401aa4e8a52b52b28ae55e658985f029985c5243
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Mon Jun 2 12:21:45 2025 +0200
Bump commons-io:commons-io from 2.11.0 to 2.14.0 in /shared/impl-vlt (#24)
* Bump commons-io:commons-io from 2.11.0 to 2.14.0 in /shared/impl-vlt
Bumps commons-io:commons-io from 2.11.0 to 2.14.0.
---
updated-dependencies:
- dependency-name: commons-io:commons-io
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <[email protected]>
* Adjust commons-io version in bnd.bnd as well
* Adjust fix-up messages for multi-release jars
---------
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Robert Munteanu <[email protected]>
---
shared/impl-vlt/bnd.bnd | 9 +++++----
shared/impl-vlt/pom.xml | 2 +-
2 files changed, 6 insertions(+), 5 deletions(-)
diff --git a/shared/impl-vlt/bnd.bnd b/shared/impl-vlt/bnd.bnd
index b281ccb1..1786f0bc 100644
--- a/shared/impl-vlt/bnd.bnd
+++ b/shared/impl-vlt/bnd.bnd
@@ -28,7 +28,7 @@ Import-Package: \
# some dependencies can be kept private
-includeresource: \
@commons-collections-3.2.2.jar, \
[email protected], \
[email protected], \
@jcr-2.0.jar, \
@org.apache.jackrabbit.vault-${vault.version}.jar!/!OSGI-INF/*, \
@vault-davex-${vault.version}.jar, \
@@ -42,6 +42,7 @@ Import-Package: \
@jackrabbit-webdav-${jackrabbit.version}.jar \
# whitelist the private reference usage in
Packaging.getJcrPackageRegistry(Session)
--fixupmessages:"Export org.apache.jackrabbit.vault.packaging, has 1, private
references [org.apache.jackrabbit.vault.packaging.registry.impl]"; \
- restrict:=warning; \
- is:=warn
\ No newline at end of file
+# ignore errors coming from multi-release jars, should be fixed with bnd 7.0 (
https://github.com/bndtools/bnd/issues/3514 )
+-fixupmessages: \
+ "Export org.apache.jackrabbit.vault.packaging, has 1, private references
[org.apache.jackrabbit.vault.packaging.registry.impl]"; is:=warning, \
+ "Classes found in the wrong directory"; is:=warning
diff --git a/shared/impl-vlt/pom.xml b/shared/impl-vlt/pom.xml
index a55d29ea..512d222c 100644
--- a/shared/impl-vlt/pom.xml
+++ b/shared/impl-vlt/pom.xml
@@ -68,7 +68,7 @@
<dependency>
<groupId>commons-io</groupId>
<artifactId>commons-io</artifactId>
- <version>2.11.0</version>
+ <version>2.14.0</version>
</dependency>
</dependencies>
</dependencyManagement>
