Skip to content

Collection of 3.9.x dependency upgrades - #3172

Open
chibenwa wants to merge 12 commits into
3.9.xfrom
dep-upg-3-9-x
Open

Collection of 3.9.x dependency upgrades#3172
chibenwa wants to merge 12 commits into
3.9.xfrom
dep-upg-3-9-x

Conversation

@chibenwa

@chibenwa chibenwa commented Sep 11, 2026

Copy link
Copy Markdown
Contributor

No description provided.

chibenwa and others added 12 commits September 11, 2026 15:48
@chibenwa
[UPGRADE] Jackson 2.19.1 -> 2.22.2
3d2bb50
@lfurman @chibenwa
[UPGRADE] Upgrade Netty 4.1.126.Final → 4.1.132.Final (CVE-2025-67735)
c93b1d6
@chibenwa
[UPGRADE] Spark 3.0.2 -> 3.0.5
4bf82d1
@dependabot @chibenwa
Bump org.jsoup:jsoup from 1.20.1 to 1.23.1
6638011 
Bumps [org.jsoup:jsoup](https://github.com/jhy/jsoup) from 1.20.1 to 1.23.1.
- [Release notes](https://github.com/jhy/jsoup/releases)
- [Changelog](https://github.com/jhy/jsoup/blob/master/CHANGES.md)
- [Commits](jhy/jsoup@jsoup-1.20.1...jsoup-1.23.1)

---
updated-dependencies:
- dependency-name: org.jsoup:jsoup
  dependency-version: 1.23.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@Arsnael @chibenwa
[Jsoup] null characters (\0) in HTML are replaced/removed during toke…
64254b3 
…nization, not preserved.

HTML-5-spec compliance fix in jsoup: Null characters in the HTML body were not consistently removed; and in foreign content were not correctly replaced. #2395 (jhy/jsoup#2395)
@chibenwa
[UPGRADE] jsoup 1.23.1 -> 1.23.2
dfcdf1b
@chibenwa
[UPGRADE] BouncyCastle 1.82 -> 1.85
dd36d65
@chibenwa
[UPGRADE] amqp-client 5.25.0 -> 5.33.1
beb3a51
@dependabot @chibenwa
Bump org.apache.commons:commons-configuration2 from 2.12.0 to 2.15.0
8dffe4e 
Bumps org.apache.commons:commons-configuration2 from 2.12.0 to 2.15.0.

---
updated-dependencies:
- dependency-name: org.apache.commons:commons-configuration2
  dependency-version: 2.15.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@chibenwa
Pin jackson-annotations to 2.22
1d76893
@chibenwa
[UPGRADE] commons-text 1.13.1 -> 1.15.0
9392053
@chibenwa
MinIO community images were removed
a4820ea
@Arsnael

Arsnael commented Sep 14, 2026

Copy link
Copy Markdown
Contributor

https://ci-builds.apache.org/job/james/job/ApacheJames/job/PR-3172/6/testReport/

java.lang.NoClassDefFoundError: Could not initialize class org.bouncycastle.jcajce.provider.asymmetric.compositesignatures.KeyFactorySpi
	at org.bouncycastle.jcajce.provider.asymmetric.COMPOSITE$Mappings.configure(Unknown Source)
	at org.bouncycastle.jce.provider.BouncyCastleProvider.loadServiceClass(Unknown Source)
	at org.bouncycastle.jce.provider.BouncyCastleProvider.loadAlgorithms(Unknown Source)
	at org.bouncycastle.jce.provider.BouncyCastleProvider.setup(Unknown Source)
	at org.bouncycastle.jce.provider.BouncyCastleProvider.access$000(Unknown Source)
	at org.bouncycastle.jce.provider.BouncyCastleProvider$1.run(Unknown Source)
[...]
Caused by: java.lang.ExceptionInInitializerError: Exception java.lang.NoSuchFieldError: Class org.bouncycastle.asn1.iana.IANAObjectIdentifiers does not have member field 'org.bouncycastle.asn1.ASN1ObjectIdentifier id_MLDSA44_RSA2048_PSS_SHA256' [in thread "main"]
	at org.bouncycastle.jcajce.provider.asymmetric.compositesignatures.KeyFactorySpi.<clinit>(Unknown Source)
	at org.bouncycastle.jcajce.provider.asymmetric.COMPOSITE$Mappings.configure(Unknown Source)\
[..]

related

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Arsnael Arsnael Arsnael approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@chibenwa @Arsnael @lfurman