[java-parent-project] branch main updated: IDP-2247 Latest commons-compress breaks the plugin installer.

[Rod Widdowson]

This is an automated email from the git hooks/post-receive script.

rdw pushed a commit to branch main
in repository java-parent-project.

View the commit online:
http://git.shibboleth.net/view/?p=java-parent-project.git;a=commit;h=3535d83125ee178ba69f2624b30087c649924201

The following commit(s) were added to refs/heads/main by this push:
     new 3535d83  IDP-2247 Latest commons-compress breaks the plugin installer.
3535d83 is described below

commit 3535d83125ee178ba69f2624b30087c649924201
Author: Rod Widdowson <rdw at steadingsoftware.com>
AuthorDate: Tue Feb 20 15:18:13 2024 +0000

    IDP-2247 Latest commons-compress breaks the plugin installer.
    
    https://shibboleth.atlassian.net/browse/IDP-2247
    
    We have to manage commons-compress ourselves
---
 pom.xml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/pom.xml b/pom.xml
index 096b66c..140a05c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -35,7 +35,9 @@
         <ant.version>1.10.14</ant.version>
         <bouncycastle.version>1.76</bouncycastle.version>
         <bouncycastle.pg.version>1.76</bouncycastle.pg.version>
+        <!-- IMPORTANT: commons-compress and commons-io versions need to be updated with the -io version coming from -compress.  -->
         <commons.compress.version>1.26.0</commons.compress.version>
+        <commons.io.version>2.15.1</commons.io.version>
         <commons.lang3.version>3.13.0</commons.lang3.version>
         <cryptacular.version>1.2.6</cryptacular.version>
         <duoweb.version>1.3</duoweb.version>
@@ -185,6 +187,11 @@
                 <artifactId>commons-compress</artifactId>
                 <version>${commons.compress.version}</version>
             </dependency>
+            <dependency>
+                <groupId>commons-io</groupId>
+                <artifactId>commons-io</artifactId>
+                <version>${commons.io.version}</version>
+            </dependency>
             <dependency>
                 <groupId>com.duosecurity</groupId>
                 <artifactId>DuoWeb</artifactId>

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.