Skip to content

[Backport 4.2.x] Update commons-beanutils to 1.11.0 - #9484

Merged
juanluisrp merged 1 commit into
4.2.xfrom
backport-9483-to-4.2.x
Aug 15, 2026
Merged

[Backport 4.2.x] Update commons-beanutils to 1.11.0#9484
juanluisrp merged 1 commit into
4.2.xfrom
backport-9483-to-4.2.x

Conversation

@github-actions

Copy link
Copy Markdown
Contributor

Backport #9483
Authored by: @juanluisrp

commons-beanutils enters the build transitively through three
introducers: net.sf.json-lib (1.8.0), commons-digester (1.6) and
less4j (1.8.3). Resolution therefore varied from module to module,
with most modules landing on 1.6 through Maven nearest-wins.

Pin the version in the root dependencyManagement so that every module
resolves 1.11.0, the current release. commons-digester stays at 1.6:
it is needed by jzkit-service, whose published pom declares no
dependencies at all, so GeoNetwork has to supply it by hand.

The direct PropertyUtils.getProperty callers in XslUtil and the
json-lib code paths were checked to behave identically under 1.8.0
and 1.11.0, and the JZKit Spring context still initialises, which
exercises commons-digester 1.6 against the newer beanutils.
@sonarqubecloud

Copy link
Copy Markdown

@juanluisrp
juanluisrp merged commit 6e5f2e5 into 4.2.x Aug 15, 2026
8 checks passed
@juanluisrp
juanluisrp deleted the backport-9483-to-4.2.x branch August 15, 2026 11:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant