Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix #260: Commons BeanUtils2 #488

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Conversation

melloware
Copy link

@melloware melloware commented Oct 18, 2024

Fix #260: Commons BeanUtils2

  • Removes the CVE on Commons Collections 3.2
  • Simplifies by removing this dependency from Hibernate it was being used for 1 single Constant which was deprecated and removed from BeanUtils2
  • Allows you to simply change the dependency to Apache Commons BeanUtils2 (if it ever comes out been waiting 5 years)

@melloware
Copy link
Author

After 6 long years Apache Commons BeanUtils2 finally has a release on Maven Central and this PR is updated

@teodord
Copy link
Collaborator

teodord commented Jan 7, 2025

I see the 2.0.0-M1 version being published, but there is no official announcement on the project website at Apache.org.
I assume M1 stands for "milestone 1". Not sure what this means. Is it final release or just an early preview?

@melloware
Copy link
Author

It was just released today its an M1 but its finally in central and so far in all my prod apps its working great. I definitely understand not want to use M1 but thought I would update this PR.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Remove use of commons collections 3 coming via beanutils
2 participants