You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pulsar.apache.org by lh...@apache.org on 2025/07/29 13:32:06 UTC
(pulsar) branch master updated: [fix][sec] Remove dependency on out-dated commons-configuration 1.x (#24562)
This is an automated email from the ASF dual-hosted git repository.
lhotari pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/pulsar.git
The following commit(s) were added to refs/heads/master by this push:
new 2e77444cf06 [fix][sec] Remove dependency on out-dated commons-configuration 1.x (#24562)
2e77444cf06 is described below
commit 2e77444cf066c57683faa79a9eb3dd578f1d6f64
Author: Lari Hotari <lh...@users.noreply.github.com>
AuthorDate: Tue Jul 29 16:32:00 2025 +0300
[fix][sec] Remove dependency on out-dated commons-configuration 1.x (#24562)
---
distribution/server/src/assemble/LICENSE.bin.txt | 3 +--
distribution/shell/src/assemble/LICENSE.bin.txt | 2 +-
pom.xml | 14 +++++++-------
pulsar-common/pom.xml | 6 ------
pulsar-functions/localrun-shaded/pom.xml | 4 ----
pulsar-testclient/pom.xml | 5 -----
6 files changed, 9 insertions(+), 25 deletions(-)
diff --git a/distribution/server/src/assemble/LICENSE.bin.txt b/distribution/server/src/assemble/LICENSE.bin.txt
index d7ea2f0af15..c929378d0b7 100644
--- a/distribution/server/src/assemble/LICENSE.bin.txt
+++ b/distribution/server/src/assemble/LICENSE.bin.txt
@@ -285,10 +285,9 @@ The Apache Software License, Version 2.0
- commons-beanutils-commons-beanutils-1.11.0.jar
- commons-cli-commons-cli-1.9.0.jar
- commons-codec-commons-codec-1.18.0.jar
- - commons-configuration-commons-configuration-1.10.jar
- commons-io-commons-io-2.19.0.jar
- commons-lang-commons-lang-2.6.jar
- - commons-logging-commons-logging-1.1.1.jar
+ - commons-logging-commons-logging-1.3.5.jar
- commons-collections-commons-collections-3.2.2.jar
- org.apache.commons-commons-collections4-4.4.jar
- org.apache.commons-commons-compress-1.27.1.jar
diff --git a/distribution/shell/src/assemble/LICENSE.bin.txt b/distribution/shell/src/assemble/LICENSE.bin.txt
index 88052dc06a2..47c57e1df5d 100644
--- a/distribution/shell/src/assemble/LICENSE.bin.txt
+++ b/distribution/shell/src/assemble/LICENSE.bin.txt
@@ -342,7 +342,7 @@ The Apache Software License, Version 2.0
* Apache Commons
- commons-codec-1.18.0.jar
- commons-io-2.19.0.jar
- - commons-logging-1.2.jar
+ - commons-logging-1.3.5.jar
- commons-lang3-3.18.0.jar
- commons-text-1.13.1.jar
- commons-compress-1.27.1.jar
diff --git a/pom.xml b/pom.xml
index 953a8fee7a4..e819cbcf6e9 100644
--- a/pom.xml
+++ b/pom.xml
@@ -256,9 +256,9 @@ flexible messaging model and an intuitive client API.</description>
<aircompressor.version>0.27</aircompressor.version>
<asynchttpclient.version>2.12.4</asynchttpclient.version>
<commons-lang3.version>3.18.0</commons-lang3.version>
- <commons-configuration.version>1.10</commons-configuration.version>
<commons-io.version>2.19.0</commons-io.version>
<commons-codec.version>1.18.0</commons-codec.version>
+ <commons-logging.version>1.3.5</commons-logging.version>
<jakarta.ws.rs-api.version>2.1.6</jakarta.ws.rs-api.version>
<hdrHistogram.version>2.1.9</hdrHistogram.version>
<javax.servlet-api>3.1.0</javax.servlet-api>
@@ -830,18 +830,18 @@ flexible messaging model and an intuitive client API.</description>
<version>${commons-compress.version}</version>
</dependency>
- <dependency>
- <groupId>commons-configuration</groupId>
- <artifactId>commons-configuration</artifactId>
- <version>${commons-configuration.version}</version>
- </dependency>
-
<dependency>
<groupId>commons-io</groupId>
<artifactId>commons-io</artifactId>
<version>${commons-io.version}</version>
</dependency>
+ <dependency>
+ <groupId>commons-logging</groupId>
+ <artifactId>commons-logging</artifactId>
+ <version>${commons-logging.version}</version>
+ </dependency>
+
<dependency>
<groupId>org.apache.commons</groupId>
<artifactId>commons-text</artifactId>
diff --git a/pulsar-common/pom.xml b/pulsar-common/pom.xml
index 0b51d6d033b..b6b4fc911e8 100644
--- a/pulsar-common/pom.xml
+++ b/pulsar-common/pom.xml
@@ -122,12 +122,6 @@
<dependency>
<groupId>org.apache.bookkeeper</groupId>
<artifactId>bookkeeper-common-allocator</artifactId>
- <exclusions>
- <exclusion>
- <groupId>commons-configuration</groupId>
- <artifactId>commons-configuration</artifactId>
- </exclusion>
- </exclusions>
</dependency>
<dependency>
diff --git a/pulsar-functions/localrun-shaded/pom.xml b/pulsar-functions/localrun-shaded/pom.xml
index d28da9140d2..5c8ac2e2ef5 100644
--- a/pulsar-functions/localrun-shaded/pom.xml
+++ b/pulsar-functions/localrun-shaded/pom.xml
@@ -229,10 +229,6 @@
<pattern>net.jpountz</pattern>
<shadedPattern>org.apache.pulsar.functions.runtime.shaded.net.jpountz</shadedPattern>
</relocation>
- <relocation>
- <pattern>commons-configuration</pattern>
- <shadedPattern>org.apache.pulsar.functions.runtime.shaded.commons-configuration</shadedPattern>
- </relocation>
<relocation>
<pattern>org.tukaani</pattern>
<shadedPattern>org.apache.pulsar.functions.runtime.shaded.org.tukaani</shadedPattern>
diff --git a/pulsar-testclient/pom.xml b/pulsar-testclient/pom.xml
index 17f4cb7469f..76485bc1ae6 100644
--- a/pulsar-testclient/pom.xml
+++ b/pulsar-testclient/pom.xml
@@ -90,11 +90,6 @@
<version>${project.version}</version>
</dependency>
- <dependency>
- <groupId>commons-configuration</groupId>
- <artifactId>commons-configuration</artifactId>
- </dependency>
-
<dependency>
<groupId>info.picocli</groupId>
<artifactId>picocli</artifactId>