From f9b86bd72f2c602ac82ae7a115d524c50e3ea24a Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 20 May 2026 15:44:52 +0000 Subject: [PATCH 1/4] build(deps): bump org.apache.commons:commons-configuration2 Bumps org.apache.commons:commons-configuration2 from 2.12.0 to 2.15.0. --- updated-dependencies: - dependency-name: org.apache.commons:commons-configuration2 dependency-version: 2.15.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index c1b492ead00..d11dfad5799 100644 --- a/pom.xml +++ b/pom.xml @@ -144,7 +144,7 @@ 1.9.0 4.1 1.18.0 - 2.12.0 + 2.15.0 1.11.0 1.27.1 3.20.0 From c278f95177258d2887e02b8952f6eee7d8327b98 Mon Sep 17 00:00:00 2001 From: Matteo Merli Date: Fri, 11 Sep 2026 09:05:15 -0700 Subject: [PATCH 2/4] Update commons-configuration2 version in license files --- bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt | 4 ++-- bookkeeper-dist/src/main/resources/LICENSE-bkctl.bin.txt | 4 ++-- bookkeeper-dist/src/main/resources/LICENSE-server.bin.txt | 4 ++-- 3 files changed, 6 insertions(+), 6 deletions(-) diff --git a/bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt b/bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt index 870a73d97ed..b6ec2e86cce 100644 --- a/bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt +++ b/bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt @@ -261,7 +261,7 @@ Apache Software License, Version 2. - lib/org.apache.logging.log4j-log4j-core-2.23.1.jar [17] - lib/org.apache.logging.log4j-log4j-slf4j2-impl-2.23.1.jar [17] - lib/org.apache.commons-commons-collections4-4.1.jar [19] -- lib/org.apache.commons-commons-configuration2-2.12.0.jar [7] +- lib/org.apache.commons-commons-configuration2-2.15.0.jar [7] - lib/org.apache.commons-commons-lang3-3.20.0.jar [58] - lib/org.apache.commons-commons-text-1.13.1.jar [61] - lib/org.apache.zookeeper-zookeeper-3.9.5.jar [21] @@ -349,7 +349,7 @@ Apache Software License, Version 2. [4] Source available at https://github.com/google/guava/tree/v32.0.1 [5] Source available at https://github.com/apache/commons-cli/tree/rel/commons-cli-1.9.0 [6] Source available at https://github.com/apache/commons-codec/tree/rel/commons-codec-1.18.0 -[7] Source available at https://github.com/apache/commons-configuration/tree/rel/commons-configuration-2.12.0 +[7] Source available at https://github.com/apache/commons-configuration/tree/rel/commons-configuration-2.15.0 [8] Source available at https://github.com/apache/commons-io/tree/rel/commons-io-2.19.0 [9] Source available at https://github.com/apache/commons-lang/tree/LANG_2_6 [10] Source available at https://github.com/apache/commons-logging/tree/commons-logging-1.3.5 diff --git a/bookkeeper-dist/src/main/resources/LICENSE-bkctl.bin.txt b/bookkeeper-dist/src/main/resources/LICENSE-bkctl.bin.txt index 4ddbf2f3a00..9d409b8aa32 100644 --- a/bookkeeper-dist/src/main/resources/LICENSE-bkctl.bin.txt +++ b/bookkeeper-dist/src/main/resources/LICENSE-bkctl.bin.txt @@ -241,7 +241,7 @@ Apache Software License, Version 2. - lib/org.apache.logging.log4j-log4j-core-2.23.1.jar [16] - lib/org.apache.logging.log4j-log4j-slf4j2-impl-2.23.1.jar [16] - lib/org.apache.commons-commons-collections4-4.1.jar [18] -- lib/org.apache.commons-commons-configuration2-2.12.0.jar [7] +- lib/org.apache.commons-commons-configuration2-2.15.0.jar [7] - lib/org.apache.commons-commons-lang3-3.20.0.jar [55] - lib/org.apache.commons-commons-text-1.13.1.jar [56] - lib/org.apache.zookeeper-zookeeper-3.9.5.jar [20] @@ -282,7 +282,7 @@ Apache Software License, Version 2. [4] Source available at https://github.com/google/guava/tree/v32.0.1 [5] Source available at https://github.com/apache/commons-cli/tree/rel/commons-cli-1.9.0 [6] Source available at https://github.com/apache/commons-codec/tree/rel/commons-codec-1.18.0 -[7] Source available at https://github.com/apache/commons-configuration/tree/rel/commons-configuration-2.12.0 +[7] Source available at https://github.com/apache/commons-configuration/tree/rel/commons-configuration-2.15.0 [8] Source available at https://github.com/apache/commons-io/tree/rel/commons-io-2.19.0 [9] Source available at https://github.com/apache/commons-lang/tree/LANG_2_6 [10] Source available at https://github.com/apache/commons-logging/tree/commons-logging-1.3.5 diff --git a/bookkeeper-dist/src/main/resources/LICENSE-server.bin.txt b/bookkeeper-dist/src/main/resources/LICENSE-server.bin.txt index c2ea5f223ef..415306e703d 100644 --- a/bookkeeper-dist/src/main/resources/LICENSE-server.bin.txt +++ b/bookkeeper-dist/src/main/resources/LICENSE-server.bin.txt @@ -261,7 +261,7 @@ Apache Software License, Version 2. - lib/org.apache.logging.log4j-log4j-core-2.23.1.jar [17] - lib/org.apache.logging.log4j-log4j-slf4j2-impl-2.23.1.jar [17] - lib/org.apache.commons-commons-collections4-4.1.jar [19] -- lib/org.apache.commons-commons-configuration2-2.12.0.jar [7] +- lib/org.apache.commons-commons-configuration2-2.15.0.jar [7] - lib/org.apache.commons-commons-lang3-3.20.0.jar [57] - lib/org.apache.commons-commons-text-1.13.1.jar [60] - lib/org.apache.zookeeper-zookeeper-3.9.5.jar [21] @@ -345,7 +345,7 @@ Apache Software License, Version 2. [4] Source available at https://github.com/google/guava/tree/v32.0.1 [5] Source available at https://github.com/apache/commons-cli/tree/rel/commons-cli-1.9.0 [6] Source available at https://github.com/apache/commons-codec/tree/rel/commons-codec-1.18.0 -[7] Source available at https://github.com/apache/commons-configuration/tree/rel/commons-configuration-2.12.0 +[7] Source available at https://github.com/apache/commons-configuration/tree/rel/commons-configuration-2.15.0 [8] Source available at https://github.com/apache/commons-io/tree/rel/commons-io-2.19.0 [9] Source available at https://github.com/apache/commons-lang/tree/LANG_2_6 [10] Source available at https://github.com/apache/commons-logging/tree/commons-logging-1.3.5 From 001092075cd0277bb6b5712afaea0c1fb3e71512 Mon Sep 17 00:00:00 2001 From: Matteo Merli Date: Fri, 11 Sep 2026 09:25:09 -0700 Subject: [PATCH 3/4] Update transitive commons-text version in license files --- bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt | 4 ++-- bookkeeper-dist/src/main/resources/LICENSE-bkctl.bin.txt | 4 ++-- bookkeeper-dist/src/main/resources/LICENSE-server.bin.txt | 4 ++-- 3 files changed, 6 insertions(+), 6 deletions(-) diff --git a/bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt b/bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt index b6ec2e86cce..1894e7f51e3 100644 --- a/bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt +++ b/bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt @@ -263,7 +263,7 @@ Apache Software License, Version 2. - lib/org.apache.commons-commons-collections4-4.1.jar [19] - lib/org.apache.commons-commons-configuration2-2.15.0.jar [7] - lib/org.apache.commons-commons-lang3-3.20.0.jar [58] -- lib/org.apache.commons-commons-text-1.13.1.jar [61] +- lib/org.apache.commons-commons-text-1.15.0.jar [61] - lib/org.apache.zookeeper-zookeeper-3.9.5.jar [21] - lib/org.apache.zookeeper-zookeeper-jute-3.9.5.jar [21] - lib/org.apache.zookeeper-zookeeper-3.9.5-tests.jar [21] @@ -393,7 +393,7 @@ Apache Software License, Version 2. [58] Source available at https://github.com/apache/commons-lang/tree/rel/commons-lang-3.20.0 [59] Source available at https://github.com/open-telemetry/opentelemetry-java-instrumentation/tree/v2.27.0 [60] Source available at https://github.com/prometheus/client_java/tree/v1.5.1 -[61] Source available at https://github.com/apache/commons-text/tree/rel/commons-text-1.13.1 +[61] Source available at https://github.com/apache/commons-text/tree/rel/commons-text-1.15.0 [62] Source available at https://github.com/apache/commons-beanutils/tree/rel/commons-beanutils-1.11.0 [64] Source available at https://github.com/merlimat/slog/tree/v0.9.9 ------------------------------------------------------------------------------------ diff --git a/bookkeeper-dist/src/main/resources/LICENSE-bkctl.bin.txt b/bookkeeper-dist/src/main/resources/LICENSE-bkctl.bin.txt index 9d409b8aa32..b2621cd82f4 100644 --- a/bookkeeper-dist/src/main/resources/LICENSE-bkctl.bin.txt +++ b/bookkeeper-dist/src/main/resources/LICENSE-bkctl.bin.txt @@ -243,7 +243,7 @@ Apache Software License, Version 2. - lib/org.apache.commons-commons-collections4-4.1.jar [18] - lib/org.apache.commons-commons-configuration2-2.15.0.jar [7] - lib/org.apache.commons-commons-lang3-3.20.0.jar [55] -- lib/org.apache.commons-commons-text-1.13.1.jar [56] +- lib/org.apache.commons-commons-text-1.15.0.jar [56] - lib/org.apache.zookeeper-zookeeper-3.9.5.jar [20] - lib/org.apache.zookeeper-zookeeper-jute-3.9.5.jar [20] - lib/org.apache.zookeeper-zookeeper-3.9.5-tests.jar [20] @@ -311,7 +311,7 @@ Apache Software License, Version 2. [52] Source available at https://github.com/carrotsearch/hppc/tree/0.9.1 [53] Source available at https://github.com/LMAX-Exchange/disruptor/releases/tag/4.0.0 [55] Source available at https://github.com/apache/commons-lang/tree/rel/commons-lang-3.20.0 -[56] Source available at https://github.com/apache/commons-text/tree/rel/commons-text-1.13.1 +[56] Source available at https://github.com/apache/commons-text/tree/rel/commons-text-1.15.0 [57] Source available at https://github.com/apache/commons-beanutils/tree/rel/commons-beanutils-1.11.0 [59] Source available at https://github.com/merlimat/slog/tree/v0.9.9 ------------------------------------------------------------------------------------ diff --git a/bookkeeper-dist/src/main/resources/LICENSE-server.bin.txt b/bookkeeper-dist/src/main/resources/LICENSE-server.bin.txt index 415306e703d..5e5752e0fb5 100644 --- a/bookkeeper-dist/src/main/resources/LICENSE-server.bin.txt +++ b/bookkeeper-dist/src/main/resources/LICENSE-server.bin.txt @@ -263,7 +263,7 @@ Apache Software License, Version 2. - lib/org.apache.commons-commons-collections4-4.1.jar [19] - lib/org.apache.commons-commons-configuration2-2.15.0.jar [7] - lib/org.apache.commons-commons-lang3-3.20.0.jar [57] -- lib/org.apache.commons-commons-text-1.13.1.jar [60] +- lib/org.apache.commons-commons-text-1.15.0.jar [60] - lib/org.apache.zookeeper-zookeeper-3.9.5.jar [21] - lib/org.apache.zookeeper-zookeeper-jute-3.9.5.jar [21] - lib/org.apache.zookeeper-zookeeper-3.9.5-tests.jar [21] @@ -389,7 +389,7 @@ Apache Software License, Version 2. [57] Source available at https://github.com/apache/commons-lang/tree/rel/commons-lang-3.20.0 [58] Source available at https://github.com/open-telemetry/opentelemetry-java-instrumentation/tree/v2.27.0 [59] Source available at https://github.com/prometheus/client_java/tree/v1.5.1 -[60] Source available at https://github.com/apache/commons-text/tree/rel/commons-text-1.13.1 +[60] Source available at https://github.com/apache/commons-text/tree/rel/commons-text-1.15.0 [61] Source available at https://github.com/apache/commons-beanutils/tree/rel/commons-beanutils-1.11.0 [63] Source available at https://github.com/merlimat/slog/tree/v0.9.9 ------------------------------------------------------------------------------------ From a40b91d83e2f8d2a22c558a0e305ba453a40e947 Mon Sep 17 00:00:00 2001 From: Matteo Merli Date: Fri, 11 Sep 2026 10:05:19 -0700 Subject: [PATCH 4/4] Bump commons-configuration2 to 2.15.1 2.15.0 marks commons-io as optional but its FileLocatorUtils static initializer requires it, so modules that do not pull commons-io on their own (bookkeeper-common, stats-api, http-server, distributedlog-common, ...) fail with NoClassDefFoundError on any properties-file load. 2.15.1 makes commons-io a regular dependency (CONFIGURATION-856). --- bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt | 4 ++-- bookkeeper-dist/src/main/resources/LICENSE-bkctl.bin.txt | 4 ++-- bookkeeper-dist/src/main/resources/LICENSE-server.bin.txt | 4 ++-- pom.xml | 2 +- 4 files changed, 7 insertions(+), 7 deletions(-) diff --git a/bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt b/bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt index 1894e7f51e3..f4c4e21d1e2 100644 --- a/bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt +++ b/bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt @@ -261,7 +261,7 @@ Apache Software License, Version 2. - lib/org.apache.logging.log4j-log4j-core-2.23.1.jar [17] - lib/org.apache.logging.log4j-log4j-slf4j2-impl-2.23.1.jar [17] - lib/org.apache.commons-commons-collections4-4.1.jar [19] -- lib/org.apache.commons-commons-configuration2-2.15.0.jar [7] +- lib/org.apache.commons-commons-configuration2-2.15.1.jar [7] - lib/org.apache.commons-commons-lang3-3.20.0.jar [58] - lib/org.apache.commons-commons-text-1.15.0.jar [61] - lib/org.apache.zookeeper-zookeeper-3.9.5.jar [21] @@ -349,7 +349,7 @@ Apache Software License, Version 2. [4] Source available at https://github.com/google/guava/tree/v32.0.1 [5] Source available at https://github.com/apache/commons-cli/tree/rel/commons-cli-1.9.0 [6] Source available at https://github.com/apache/commons-codec/tree/rel/commons-codec-1.18.0 -[7] Source available at https://github.com/apache/commons-configuration/tree/rel/commons-configuration-2.15.0 +[7] Source available at https://github.com/apache/commons-configuration/tree/rel/commons-configuration-2.15.1 [8] Source available at https://github.com/apache/commons-io/tree/rel/commons-io-2.19.0 [9] Source available at https://github.com/apache/commons-lang/tree/LANG_2_6 [10] Source available at https://github.com/apache/commons-logging/tree/commons-logging-1.3.5 diff --git a/bookkeeper-dist/src/main/resources/LICENSE-bkctl.bin.txt b/bookkeeper-dist/src/main/resources/LICENSE-bkctl.bin.txt index b2621cd82f4..796784a8a0a 100644 --- a/bookkeeper-dist/src/main/resources/LICENSE-bkctl.bin.txt +++ b/bookkeeper-dist/src/main/resources/LICENSE-bkctl.bin.txt @@ -241,7 +241,7 @@ Apache Software License, Version 2. - lib/org.apache.logging.log4j-log4j-core-2.23.1.jar [16] - lib/org.apache.logging.log4j-log4j-slf4j2-impl-2.23.1.jar [16] - lib/org.apache.commons-commons-collections4-4.1.jar [18] -- lib/org.apache.commons-commons-configuration2-2.15.0.jar [7] +- lib/org.apache.commons-commons-configuration2-2.15.1.jar [7] - lib/org.apache.commons-commons-lang3-3.20.0.jar [55] - lib/org.apache.commons-commons-text-1.15.0.jar [56] - lib/org.apache.zookeeper-zookeeper-3.9.5.jar [20] @@ -282,7 +282,7 @@ Apache Software License, Version 2. [4] Source available at https://github.com/google/guava/tree/v32.0.1 [5] Source available at https://github.com/apache/commons-cli/tree/rel/commons-cli-1.9.0 [6] Source available at https://github.com/apache/commons-codec/tree/rel/commons-codec-1.18.0 -[7] Source available at https://github.com/apache/commons-configuration/tree/rel/commons-configuration-2.15.0 +[7] Source available at https://github.com/apache/commons-configuration/tree/rel/commons-configuration-2.15.1 [8] Source available at https://github.com/apache/commons-io/tree/rel/commons-io-2.19.0 [9] Source available at https://github.com/apache/commons-lang/tree/LANG_2_6 [10] Source available at https://github.com/apache/commons-logging/tree/commons-logging-1.3.5 diff --git a/bookkeeper-dist/src/main/resources/LICENSE-server.bin.txt b/bookkeeper-dist/src/main/resources/LICENSE-server.bin.txt index 5e5752e0fb5..08e0125e91c 100644 --- a/bookkeeper-dist/src/main/resources/LICENSE-server.bin.txt +++ b/bookkeeper-dist/src/main/resources/LICENSE-server.bin.txt @@ -261,7 +261,7 @@ Apache Software License, Version 2. - lib/org.apache.logging.log4j-log4j-core-2.23.1.jar [17] - lib/org.apache.logging.log4j-log4j-slf4j2-impl-2.23.1.jar [17] - lib/org.apache.commons-commons-collections4-4.1.jar [19] -- lib/org.apache.commons-commons-configuration2-2.15.0.jar [7] +- lib/org.apache.commons-commons-configuration2-2.15.1.jar [7] - lib/org.apache.commons-commons-lang3-3.20.0.jar [57] - lib/org.apache.commons-commons-text-1.15.0.jar [60] - lib/org.apache.zookeeper-zookeeper-3.9.5.jar [21] @@ -345,7 +345,7 @@ Apache Software License, Version 2. [4] Source available at https://github.com/google/guava/tree/v32.0.1 [5] Source available at https://github.com/apache/commons-cli/tree/rel/commons-cli-1.9.0 [6] Source available at https://github.com/apache/commons-codec/tree/rel/commons-codec-1.18.0 -[7] Source available at https://github.com/apache/commons-configuration/tree/rel/commons-configuration-2.15.0 +[7] Source available at https://github.com/apache/commons-configuration/tree/rel/commons-configuration-2.15.1 [8] Source available at https://github.com/apache/commons-io/tree/rel/commons-io-2.19.0 [9] Source available at https://github.com/apache/commons-lang/tree/LANG_2_6 [10] Source available at https://github.com/apache/commons-logging/tree/commons-logging-1.3.5 diff --git a/pom.xml b/pom.xml index d11dfad5799..8f8f1336149 100644 --- a/pom.xml +++ b/pom.xml @@ -144,7 +144,7 @@ 1.9.0 4.1 1.18.0 - 2.15.0 + 2.15.1 1.11.0 1.27.1 3.20.0