This is an automated email from the ASF dual-hosted git repository.
asf-gitbox-commits pushed a commit to branch branch_2x
in repository https://gitbox.apache.org/repos/asf/tika.git
The following commit(s) were added to refs/heads/branch_2x by this push:
new c53f2738d7 TIKA-4456: update guava, jackson, reactor core, zstd,
plexus, google cloud, bc, commons-codec, commons-collections, junrar, netty,
woodstox; introduce jspecify because of conflicts
c53f2738d7 is described below
commit c53f2738d7ab9450953f368646982c4a461a7d47
Author: Tilman Hausherr <[email protected]>
AuthorDate: Mon Aug 24 11:26:19 2026 +0200
TIKA-4456: update guava, jackson, reactor core, zstd, plexus, google cloud,
bc, commons-codec, commons-collections, junrar, netty, woodstox; introduce
jspecify because of conflicts
---
tika-parent/pom.xml | 54 ++++++++++++++++++++++++++---------------------------
1 file changed, 26 insertions(+), 28 deletions(-)
diff --git a/tika-parent/pom.xml b/tika-parent/pom.xml
index 9744b3a45a..33ba2235c8 100644
--- a/tika-parent/pom.xml
+++ b/tika-parent/pom.xml
@@ -309,7 +309,7 @@
<rat.version>0.16.1</rat.version>
<!-- dependency versions -->
- <google.cloud.version>2.70.0</google.cloud.version>
+ <google.cloud.version>2.71.0</google.cloud.version>
<azure.version>1.3.8</azure.version>
<aws.version>1.12.797</aws.version>
<!-- WARNING: when you upgrade asm make sure that you update the
@@ -319,12 +319,12 @@
<asm.version>9.10.1</asm.version>
<boilerpipe.version>1.1.0</boilerpipe.version>
<!-- used by POI, PDFBox and Jackcess ...try to sync -->
- <bouncycastle.version>1.85</bouncycastle.version>
+ <bouncycastle.version>1.85.2</bouncycastle.version>
<!-- NOTE: sync brotli version with commons-compress-->
<brotli.version>0.1.2</brotli.version>
<commons.cli.version>1.11.0</commons.cli.version>
- <commons.codec.version>1.22.0</commons.codec.version>
- <commons.collections4.version>4.5.0</commons.collections4.version>
+ <commons.codec.version>1.22.1</commons.codec.version>
+ <commons.collections4.version>4.6.0</commons.collections4.version>
<commons.compress.version>1.28.0</commons.compress.version>
<commons.csv.version>1.14.1</commons.csv.version>
<commons.exec.version>1.6.0</commons.exec.version>
@@ -342,7 +342,7 @@
<dl4j.version>1.0.0-M2</dl4j.version>
<!-- fakeload versions > 0.4.0 require java > 8 -->
<fakeload.version>0.4.0</fakeload.version>
- <guava.version>33.6.0-jre</guava.version>
+ <guava.version>33.7.1-jre</guava.version>
<hdf5.version>1.14.3-1.5.10</hdf5.version>
<httpcomponents.version>4.5.14</httpcomponents.version>
<httpcore.version>4.4.16</httpcore.version>
@@ -351,7 +351,7 @@
<imageio.version>1.4.0</imageio.version>
<!-- jackrabbit 2.21.23 requires java 11 -->
<jackrabbit.version>2.21.22</jackrabbit.version>
- <jackson.version>2.22.1</jackson.version>
+ <jackson.version>2.22.2</jackson.version>
<jackcess.version>4.0.11</jackcess.version>
<jackcess.encrypt.version>4.0.3</jackcess.encrypt.version>
<javax.annotation.version>1.3.2</javax.annotation.version>
@@ -372,7 +372,7 @@
<json.simple.version>1.1.1</json.simple.version>
<junit4.version>4.13.2</junit4.version>
<junit5.version>5.14.4</junit5.version>
- <junrar.version>7.6.0</junrar.version>
+ <junrar.version>8.1.0</junrar.version>
<libpst.version>0.9.3</libpst.version>
<log4j2.version>2.26.1</log4j2.version>
<!-- lucene >= 9.x requires Java 11 -->
@@ -383,7 +383,7 @@
<!-- mockito >= 5 requires jdk11 -->
<mockito.version>4.11.0</mockito.version>
<netcdf-java.version>4.5.5</netcdf-java.version>
- <netty.version>4.2.16.Final</netty.version>
+ <netty.version>4.2.17.Final</netty.version>
<oak.jackrabbit.version>2.4.0</oak.jackrabbit.version>
<openjson.version>1.0.13</openjson.version>
<!-- 2.0.0 doesn't compile with jdk8 -->
@@ -399,7 +399,7 @@
<poi.version>5.5.1</poi.version>
<!-- 2.5.0 needs jakarta.xml.bind 4.0.2 in tika-parser-scientific-module
-->
<quartz.version>2.4.1</quartz.version>
- <reactor.core.version>3.8.6</reactor.core.version>
+ <reactor.core.version>3.8.7</reactor.core.version>
<reactor.netty.version>1.3.6</reactor.netty.version>
<rome.version>2.1.0</rome.version>
<scm.version>2.2.1</scm.version>
@@ -424,7 +424,7 @@
<vorbis.version>0.8</vorbis.version>
<xerces.version>2.12.2</xerces.version>
<xmpcore.version>6.1.11</xmpcore.version>
- <zstd.version>1.5.7-12</zstd.version>
+ <zstd.version>1.5.7-15</zstd.version>
<!-- 4.0.0 doesn't compile with jdk8 -->
<kafka.version>3.9.2</kafka.version>
<snappy.java.version>1.1.10.8</snappy.java.version>
@@ -440,6 +440,13 @@
<dependencyManagement>
<dependencies>
<!-- boms -->
+ <dependency>
+ <groupId>org.bouncycastle</groupId>
+ <artifactId>bc-jdk18on-bom</artifactId>
+ <version>${bouncycastle.version}</version>
+ <type>pom</type>
+ <scope>import</scope>
+ </dependency>
<dependency>
<groupId>com.fasterxml.jackson</groupId>
<artifactId>jackson-bom</artifactId>
@@ -521,7 +528,7 @@
<dependency>
<groupId>com.fasterxml.woodstox</groupId>
<artifactId>woodstox-core</artifactId>
- <version>7.2.1</version>
+ <version>7.2.2</version>
</dependency>
<dependency>
<groupId>com.beust</groupId>
@@ -859,21 +866,6 @@
<artifactId>zookeeper</artifactId>
<version>${zookeeper.version}</version>
</dependency>
- <dependency>
- <groupId>org.bouncycastle</groupId>
- <artifactId>bcmail-jdk18on</artifactId>
- <version>${bouncycastle.version}</version>
- </dependency>
- <dependency>
- <groupId>org.bouncycastle</groupId>
- <artifactId>bcpkix-jdk18on</artifactId>
- <version>${bouncycastle.version}</version>
- </dependency>
- <dependency>
- <groupId>org.bouncycastle</groupId>
- <artifactId>bcprov-jdk18on</artifactId>
- <version>${bouncycastle.version}</version>
- </dependency>
<dependency>
<groupId>org.ccil.cowan.tagsoup</groupId>
<artifactId>tagsoup</artifactId>
@@ -882,12 +874,12 @@
<dependency>
<groupId>org.codehaus.plexus</groupId>
<artifactId>plexus-utils</artifactId>
- <version>4.0.3</version>
+ <version>4.1.0</version>
</dependency>
<dependency>
<groupId>org.codehaus.plexus</groupId>
<artifactId>plexus-classworlds</artifactId>
- <version>2.12.0</version>
+ <version>2.12.1</version>
</dependency>
<dependency>
<groupId>org.freemarker</groupId>
@@ -1039,6 +1031,12 @@
<artifactId>hdf5-platform</artifactId>
<version>${hdf5.version}</version>
</dependency>
+ <!-- TODO try removing with next update of reactor core -->
+ <dependency>
+ <groupId>org.jspecify</groupId>
+ <artifactId>jspecify</artifactId>
+ <version>1.0.1</version>
+ </dependency>
</dependencies>
</dependencyManagement>
