Skip to content

chore(deps): bump the apache-commons group with 6 updates#1224

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/apache-commons-f9b5880cb0
Open

chore(deps): bump the apache-commons group with 6 updates#1224
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/apache-commons-f9b5880cb0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 29, 2026

Bumps the apache-commons group with 6 updates:

Package From To
commons-io:commons-io 2.14.0 2.22.0
org.apache.commons:commons-configuration2 2.10.1 2.14.0
org.apache.commons:commons-lang3 3.18.0 3.20.0
org.apache.commons:commons-collections4 4.2 4.5.0
org.apache.commons:commons-csv 1.4 1.14.1
commons-validator:commons-validator 1.6 1.10.1

Updates commons-io:commons-io from 2.14.0 to 2.22.0

Updates org.apache.commons:commons-configuration2 from 2.10.1 to 2.14.0

Updates org.apache.commons:commons-lang3 from 3.18.0 to 3.20.0

Updates org.apache.commons:commons-collections4 from 4.2 to 4.5.0

Updates org.apache.commons:commons-csv from 1.4 to 1.14.1

Changelog

Sourced from org.apache.commons:commons-csv's changelog.

Apache Commons CSV 1.14.1 Release Notes

The Apache Commons CSV team is pleased to announce the release of Apache Commons CSV 1.14.1.

This document contains the release notes for the 1.14.1 version of Apache Commons CSV. Commons CSV reads and writes files in Comma Separated Value (CSV) format variations.

Commons CSV requires at least Java 8.

The Apache Commons CSV library provides a simple interface for reading and writing CSV files of various types.

This is a feature and maintenance release. Java 8 or later is required.

Changes in this version include:

Fixed Bugs

  • CSV-318: CSVPrinter.printRecord(Stream) hangs if given a parallel stream. Thanks to Joseph Shraibman, Gary Gregory.
  • CSV-318: CSVPrinter now uses an internal lock instead of synchronized methods. Thanks to Joseph Shraibman, Gary Gregory.
  •       org.apache.commons.csv.CSVPrinter.printRecords(ResultSet) now writes one record at a time using a lock. Thanks to Gary Gregory.
    

Changes

  •       Bump org.apache.commons:commons-parent from 81 to 85 [#542](https://github.com/apache/commons-csv/issues/542). Thanks to Gary Gregory, Dependabot.
    
  •       Bump commons-io:commons-io from 2.18.0 to 2.20.0. Thanks to Gary Gregory.
    
  •       Bump com.opencsv:opencsv from 5.10 to 5.11.2 [#545](https://github.com/apache/commons-csv/issues/545), [#551](https://github.com/apache/commons-csv/issues/551), [#553](https://github.com/apache/commons-csv/issues/553). Thanks to Gary Gregory, Dependabot.
    
  •       Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.18.0 [#556](https://github.com/apache/commons-csv/issues/556). Thanks to Gary Gregory, Dependabot.
    
  •       Bump commons-codec:commons-codec from 1.18.0 to 1.19.0. Thanks to Gary Gregory.
    

Historical list of changes: https://commons.apache.org/proper/commons-csv/changes.html

For complete information on Apache Commons CSV, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons CSV website:

https://commons.apache.org/proper/commons-csv/

Download page: https://commons.apache.org/proper/commons-csv/download_csv.cgi

Have fun! -Apache Commons CSV team


Apache Commons CSV 1.14.0 Release Notes

... (truncated)

Commits
  • e14ef86 Ignore macOS file
  • d8724bf Prepare for the release candidate 1.14.1 RC1
  • b76971c Prepare for the next release candidate
  • b66814e Merge pull request #557 from apache/dependabot/github_actions/github/codeql-a...
  • 9c95e92 Bump github/codeql-action from 3.29.2 to 3.29.4
  • 1fb3716 Bump commons-codec:commons-codec from 1.18.0 to 1.19.0
  • 7b72c50 Merge some string literals
  • 9658373 Update the GitHub pull request template for AI
  • 67192a9 Bump commons-io:commons-io from 2.19.0 to 2.20.0
  • 59164c8 Bump com.opencsv:opencsv from 5.11.1 to 5.11.2 #553
  • Additional commits viewable in compare view

Updates commons-validator:commons-validator from 1.6 to 1.10.1

Changelog

Sourced from commons-validator:commons-validator's changelog.

Apache Commons Validator 1.10.1 RELEASE NOTES

The Apache Commons Validator team is pleased to announce the release of Apache Commons Validator 1.10.1.

Apache Commons Validator provides the building blocks for both client-side and server-side data validation. It may be used standalone or with a framework like Struts.

This is a feature and maintenance release. Java 8 or later is required.

For complete information on Apache Commons Validator, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons Validator website:

https://commons.apache.org/proper/commons-validator/

Download page: https://commons.apache.org/proper/commons-validator/download_validator.cgi

Changes in this version

Fixed Bugs

  • VALIDATOR-502: Circular dependency in static initialization causes NullPointerException in GenericValidator.isCreditCard(). Thanks to Mark Miller, Gary Gregory.

Changes

  •             Bump org.apache.commons:commons-parent from 85 to 92 [#361](https://github.com/apache/commons-validator/issues/361), [#370](https://github.com/apache/commons-validator/issues/370). Thanks to Gary Gregory, Dependabot.
    
  •             Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.19.0 [#346](https://github.com/apache/commons-validator/issues/346). Thanks to Dependabot, Gary Gregory.
    
  •             Bump org.apache.commons:commons-csv from 1.14.0 to 1.14.0. Thanks to Dependabot, Gary Gregory.
    

Historical list of changes: https://commons.apache.org/proper/commons-validator/changes.html

Enjoy! -Apache Commons Validator team


Apache Commons Validator 1.10.0 RELEASE NOTES

The Apache Commons Validator team is pleased to announce the release of Apache Commons Validator 1.10.0.

Apache Commons Validator provides the building blocks for both client-side and server-side data validation. It may be used standalone or with a framework like Struts.

This is a maintenance and bug fix release; requires Java 8.

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the apache-commons group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| commons-io:commons-io | `2.14.0` | `2.22.0` |
| org.apache.commons:commons-configuration2 | `2.10.1` | `2.14.0` |
| org.apache.commons:commons-lang3 | `3.18.0` | `3.20.0` |
| org.apache.commons:commons-collections4 | `4.2` | `4.5.0` |
| [org.apache.commons:commons-csv](https://github.com/apache/commons-csv) | `1.4` | `1.14.1` |
| [commons-validator:commons-validator](https://github.com/apache/commons-validator) | `1.6` | `1.10.1` |


Updates `commons-io:commons-io` from 2.14.0 to 2.22.0

Updates `org.apache.commons:commons-configuration2` from 2.10.1 to 2.14.0

Updates `org.apache.commons:commons-lang3` from 3.18.0 to 3.20.0

Updates `org.apache.commons:commons-collections4` from 4.2 to 4.5.0

Updates `org.apache.commons:commons-csv` from 1.4 to 1.14.1
- [Changelog](https://github.com/apache/commons-csv/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-csv@rel/commons-csv-1.4...rel/commons-csv-1.14.1)

Updates `commons-validator:commons-validator` from 1.6 to 1.10.1
- [Changelog](https://github.com/apache/commons-validator/blob/master/RELEASE-NOTES.txt)
- [Commits](https://github.com/apache/commons-validator/commits/rel/commons-validator-1.10.1)

---
updated-dependencies:
- dependency-name: commons-io:commons-io
  dependency-version: 2.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: apache-commons
- dependency-name: org.apache.commons:commons-configuration2
  dependency-version: 2.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: apache-commons
- dependency-name: org.apache.commons:commons-lang3
  dependency-version: 3.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: apache-commons
- dependency-name: org.apache.commons:commons-collections4
  dependency-version: 4.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: apache-commons
- dependency-name: org.apache.commons:commons-csv
  dependency-version: 1.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: apache-commons
- dependency-name: commons-validator:commons-validator
  dependency-version: 1.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: apache-commons
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Apr 29, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants