(jmeter) branch master updated: fix(deps): update org.jsoup:jsoup to v1.23.1

[mi...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

milamberspace pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/jmeter.git


The following commit(s) were added to refs/heads/master by this push:
     new 1144ffefa9 fix(deps): update org.jsoup:jsoup to v1.23.1
1144ffefa9 is described below

commit 1144ffefa92253890abcc49414be689e0a3b63a9
Author: Milamber <mi...@apache.org>
AuthorDate: Wed Sep 30 23:00:22 2026 +0300

    fix(deps): update org.jsoup:jsoup to v1.23.1
    
    Bump jsoup from 1.21.2 to 1.23.1 and regenerate the expected release
    jar list.
    
    jsoup 1.23.1 fixes CVE-2026-71497 (Cleaner with a custom Safelist
    permitting raw-text elements). JMeter does not use Cleaner or Safelist,
    only Jsoup.parse and selectors, so it is not affected.
    
    Supersedes #6744, which did not update expected_release_jars.csv.
    
    Generated-by: Claude Code 2.1.286 (Claude Opus 5.5)
---
 src/bom-thirdparty/build.gradle.kts         | 2 +-
 src/dist/src/dist/expected_release_jars.csv | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/bom-thirdparty/build.gradle.kts b/src/bom-thirdparty/build.gradle.kts
index b0ed709924..0ea3902200 100644
--- a/src/bom-thirdparty/build.gradle.kts
+++ b/src/bom-thirdparty/build.gradle.kts
@@ -135,7 +135,7 @@ dependencies {
         api("org.jodd:jodd-lagarto:6.0.6")
         api("org.jodd:jodd-log:5.1.6")
         api("org.jodd:jodd-props:6.0.2")
-        api("org.jsoup:jsoup:1.21.2")
+        api("org.jsoup:jsoup:1.23.1")
         api("org.mozilla:rhino:1.9.1")
         api("org.mozilla:rhino-engine:1.9.1")
         api("org.neo4j.driver:neo4j-java-driver:6.0.2")
diff --git a/src/dist/src/dist/expected_release_jars.csv b/src/dist/src/dist/expected_release_jars.csv
index 8dbcaa6e9e..bb9ec0b83c 100644
--- a/src/dist/src/dist/expected_release_jars.csv
+++ b/src/dist/src/dist/expected_release_jars.csv
@@ -88,7 +88,7 @@
 337315,jodd-util-6.1.0.jar
 279148,json-path-2.10.0.jar
 122808,json-smart-2.6.0.jar
-500363,jsoup-1.21.2.jar
+529560,jsoup-1.23.1.jar
 3819,jspecify-1.0.0.jar
 723652,jsvg-2.0.0.jar
 249924,jtidy-r938.jar