Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Upgrade the jar org.apache.commons:commons-text:1.10.0 to 1.13.0 #24467

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Upgrade the jar org.apache.commons:commons-text:1.10.0 to 1.13.0 #24467

wants to merge 1 commit into from

Conversation

sumi-mathew
Copy link
Contributor

@sumi-mathew sumi-mathew commented Jan 31, 2025 •
edited
Loading

Description

Upgrade the org.apache.commons:commons-text dependency from version 1.10.0 to 1.13.0 to avoiding CVE issues.

Motivation and Context

Upgrading the org.apache.commons:commons-text dependency from version 1.10.0 to 1.13.0 to reduce the risk of introducing new security flaws

Impact

Test Plan

Contributor checklist

  • Please make sure your submission complies with our contributing guide, in particular code style and commit standards.
  • PR description addresses the issue accurately and concisely. If the change is non-trivial, a GitHub Issue is referenced.
  • Documented new properties (with its default value), SQL syntax, functions, or other functionality.
  • If release notes are required, they follow the release notes guidelines.
  • Adequate tests were added if applicable.
  • CI passed.

Release Notes

Please follow release notes guidelines and fill in the release notes below.

== RELEASE NOTES ==

General Changes
* Upgrade the org.apache.commons:commons-text dependency from version 1.10.0 to 1.13.0 :pr:`24467`

@prestodb-ci prestodb-ci added the from:IBM PR from IBM label Jan 31, 2025
@linux-foundation-easycla Linux Foundation: EasyCLA
Copy link

linux-foundation-easycla bot commented Jan 31, 2025 •
edited
Loading

CLA Signed

The committers listed above are authorized under a signed CLA.

@sumi-mathew sumi-mathew force-pushed the jar-upgarde-common-txt branch from 492b7a2 to f26d4d7 Compare January 31, 2025 06:47
@sumi-mathew sumi-mathew marked this pull request as ready for review January 31, 2025 08:36
@sumi-mathew sumi-mathew requested a review from a team as a code owner January 31, 2025 08:36
agrawalreetika
agrawalreetika reviewed Feb 1, 2025
View reviewed changes
pom.xml
<exclusion>
<groupId>org.apache.commons</groupId>
<artifactId>commons-lang3</artifactId>
</exclusion>
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why don't we upgrade org.apache.commons:commons-lang3 as well instead of exclusion?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@agrawalreetika agrawalreetika agrawalreetika left review comments

@presto-oss presto-oss Awaiting requested review from presto-oss presto-oss is a code owner automatically assigned from prestodb/committers

At least 1 approving review is required to merge this pull request.

Assignees
No one assigned
Labels
from:IBM PR from IBM
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@sumi-mathew @agrawalreetika @prestodb-ci