Skip to content

Upgrade various dependencies to eliminate CVEs: - #7019

Merged
zkirksey merged 1 commit into
masterfrom
upgrade-deps-for-cve
Oct 9, 2026
Merged

zkirksey merged 1 commit into
masterfrom
upgrade-deps-for-cve

Conversation

@zkirksey

@zkirksey zkirksey commented Oct 8, 2026

Copy link
Copy Markdown
Collaborator

c3p0 0.12.0 -> 0.14.2
jsoup 1.18.3 -> 1.23.2
zookeeper 3.8.6 -> 3.8.7
tika 3.2.2 -> 3.3.2

What does this PR do?

Who is reviewing it?

Select relevant component teams:

Ask 2 committers to review/merge the PR and tag them here.

How should this be tested?

Any background context you want to provide?

What are the relevant tickets?

Fixes: #____

Screenshots

Checklist:

  • Documentation Updated
  • Update / Add Threat Dragon models
  • Update / Add Unit Tests
  • Update / Add Integration Tests

Notes on Review Process

Please see Notes on Review Process for further guidance on requirements for merging and abbreviated reviews.

Review Comment Legend:

  • ✏️ (Pencil) This comment is a nitpick or style suggestion, no action required for approval. This comment should provide a suggestion either as an in line code snippet or a gist.
  • ❓ (Question Mark) This comment is to gain a clearer understanding of design or code choices, clarification is required but action may not be necessary for approval.
  • ❗ (Exclamation Mark) This comment is critical and requires clarification or action before approval.

c3p0 0.12.0 -> 0.14.2
jsoup 1.18.3 -> 1.23.2
zookeeper 3.8.6 -> 3.8.7
tika 3.2.2 -> 3.3.2

@jrnorth jrnorth left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Would be nice to have each upgrade in its own commit, but I won't hold this up over it.

@zkirksey
zkirksey merged commit ea58919 into master Oct 9, 2026
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants