This is an automated email from the ASF dual-hosted git repository.

tilman pushed a commit to branch branch_2x
in repository https://gitbox.apache.org/repos/asf/tika.git


The following commit(s) were added to refs/heads/branch_2x by this push:
     new 66347542f TIKA-4456: update fileupload (CWE), apache, google cloud, 
aws, bc, jackson, junit, log4j, netty, oak, reactor, testcontainers, kafka
66347542f is described below

commit 66347542f3fe85acedab5e329adffba2bcd11180
Author: Tilman Hausherr <[email protected]>
AuthorDate: Sat Jul 12 17:37:43 2025 +0200

    TIKA-4456: update fileupload (CWE), apache, google cloud, aws, bc, jackson, 
junit, log4j, netty, oak, reactor, testcontainers, kafka
---
 tika-parent/pom.xml | 28 ++++++++++++++--------------
 1 file changed, 14 insertions(+), 14 deletions(-)

diff --git a/tika-parent/pom.xml b/tika-parent/pom.xml
index 05071a0bd..cb8126cb6 100644
--- a/tika-parent/pom.xml
+++ b/tika-parent/pom.xml
@@ -25,7 +25,7 @@
   <parent>
     <groupId>org.apache</groupId>
     <artifactId>apache</artifactId>
-    <version>34</version>
+    <version>35</version>
     <relativePath />
   </parent>
 
@@ -309,8 +309,8 @@
     <rat.version>0.16.1</rat.version>
 
     <!-- dependency versions -->
-    <google.cloud.version>2.51.0</google.cloud.version>
-    <aws.version>1.12.782</aws.version>
+    <google.cloud.version>2.53.2</google.cloud.version>
+    <aws.version>1.12.787</aws.version>
     <!-- WARNING: when you upgrade asm make sure that you update the
         OpCode in the initializer in 
org.apache.tika.parser.asm.XHTMLClassVisitor
         See TIKA-2992.
@@ -318,7 +318,7 @@
     <asm.version>9.8</asm.version>
     <boilerpipe.version>1.1.0</boilerpipe.version>
     <!-- used by POI, PDFBox and Jackcess ...try to sync -->
-    <bouncycastle.version>1.80</bouncycastle.version>
+    <bouncycastle.version>1.81</bouncycastle.version>
     <!-- NOTE: sync brotli version with commons-compress-->
     <brotli.version>0.1.2</brotli.version>
     <commons.cli.version>1.9.0</commons.cli.version>
@@ -332,7 +332,7 @@
     <commons.logging.version>1.3.5</commons.logging.version>
     <commons.math3.version>3.6.1</commons.math3.version>
     <commons.net.version>3.11.1</commons.net.version>
-    <commons.fileupload.version>1.5</commons.fileupload.version>
+    <commons.fileupload.version>1.6.0</commons.fileupload.version>
     <ctakes.version>5.1.0</ctakes.version>
     <!-- can't update to 3.6.0, needs jdk11 -->
     <cxf.version>3.5.11</cxf.version>
@@ -350,7 +350,7 @@
     <imageio.version>1.4.0</imageio.version>
     <!-- jackrabbit 2.21.23 requires java 11 -->
     <jackrabbit.version>2.21.22</jackrabbit.version>
-    <jackson.version>2.19.0</jackson.version>
+    <jackson.version>2.19.1</jackson.version>
     <jackcess.version>4.0.8</jackcess.version>
     <jackcess.encrypt.version>4.0.3</jackcess.encrypt.version>
     <javax.annotation.version>1.3.2</javax.annotation.version>
@@ -369,10 +369,10 @@
     <jna.version>5.17.0</jna.version>
     <json.simple.version>1.1.1</json.simple.version>
     <junit4.version>4.13.2</junit4.version>
-    <junit5.version>5.12.2</junit5.version>
+    <junit5.version>5.13.3</junit5.version>
     <junrar.version>7.5.5</junrar.version>
     <libpst.version>0.9.3</libpst.version>
-    <log4j2.version>2.24.3</log4j2.version>
+    <log4j2.version>2.25.1</log4j2.version>
     <lombok.version>1.18.20</lombok.version>
     <!-- lucene >= 9.x requires Java 11 -->
     <lucene.version>8.11.4</lucene.version>
@@ -382,8 +382,8 @@
     <!-- mockito >= 5 requires jdk11 -->
     <mockito.version>4.11.0</mockito.version>
     <netcdf-java.version>4.5.5</netcdf-java.version>
-    <netty.version>4.2.0.Final</netty.version>
-    <oak.jackrabbit.version>1.78.0</oak.jackrabbit.version>
+    <netty.version>4.2.2.Final</netty.version>
+    <oak.jackrabbit.version>1.82.0</oak.jackrabbit.version>
     <openjson.version>1.0.13</openjson.version>
     <!-- 2.0.0 doesn't compile with jdk8 -->
     <opennlp.version>1.9.4</opennlp.version>
@@ -398,8 +398,8 @@
     <poi.version>5.4.1</poi.version>
     <!-- 2.5.0 needs jakarta.xml.bind 4.0.2 in tika-parser-scientific-module 
-->
     <quartz.version>2.3.2</quartz.version>
-    <reactor.core.version>3.7.3</reactor.core.version>
-    <reactor.netty.version>1.2.3</reactor.netty.version>
+    <reactor.core.version>3.7.7</reactor.core.version>
+    <reactor.netty.version>1.2.7</reactor.netty.version>
     <rome.version>2.1.0</rome.version>
     <scm.version>2.1.0</scm.version>
     <sis.version>1.3</sis.version>
@@ -410,7 +410,7 @@
     <spring.version>5.3.39</spring.version>
     <sqlite.version>3.49.1.0</sqlite.version>
     <tagsoup.version>1.2.1</tagsoup.version>
-    <testcontainers.version>1.21.0</testcontainers.version>
+    <testcontainers.version>1.21.3</testcontainers.version>
     <!-- NOTE: sync tukaani version with commons-compress in tika-parent-->
     <tukaani.version>1.10</tukaani.version>
     <twelvemonkeys.version>3.12.0</twelvemonkeys.version>
@@ -424,7 +424,7 @@
     <xmpcore.version>6.1.11</xmpcore.version>
     <zstd.version>1.5.7-2</zstd.version>
     <!-- 4.0.0 doesn't compile with jdk8 -->
-    <kafka.version>3.9.0</kafka.version>
+    <kafka.version>3.9.1</kafka.version>
     <snappy.java.version>1.1.10.7</snappy.java.version>
     <!-- can't update to 1.4, these need jdk11 -->
     <logback.version>1.3.15</logback.version>

Reply via email to