Skip to content

spline #1419 Upgrade to Apache Configuration 2 due to CVE-2025-46392#1420

Merged
wajda merged 1 commit into
release/0.7from
bugfix/spline-1419-conf2
Jun 8, 2025
Merged

spline #1419 Upgrade to Apache Configuration 2 due to CVE-2025-46392#1420
wajda merged 1 commit into
release/0.7from
bugfix/spline-1419-conf2

Conversation

@wajda

@wajda wajda commented May 21, 2025

Copy link
Copy Markdown
Contributor

Resolves #1419

  • Migrate from Apache Commons Configuration version 1 to version 2
  • Move two utility classes from the ABSA Commons to the local Commons module to be able to upgrade.

@wajda wajda requested a review from cerveada as a code owner May 21, 2025 22:43
@wajda wajda requested a review from Copilot May 21, 2025 22:43

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot wasn't able to review any files in this pull request.

Files not reviewed (12)
  • .sdkmanrc: Language not supported
  • admin/src/main/scala/za/co/absa/spline/admin/AppConfig.scala: Language not supported
  • build/parent-pom/pom.xml: Language not supported
  • commons/pom.xml: Language not supported
  • commons/src/main/scala/org/apache/commons/configuration2/ConfigurationImplicits.scala: Language not supported
  • commons/src/main/scala/za/co/absa/spline/common/TimeTracingUtils.scala: Language not supported
  • commons/src/main/scala/za/co/absa/spline/common/config/DefaultConfigurationStack.scala: Language not supported
  • commons/src/main/scala/za/co/absa/spline/common/config/UpperSnakeCaseEnvironmentConfiguration.scala: Language not supported
  • commons/src/test/scala/za/co/absa/spline/common/config/ConfigurationImplicitsSpec.scala: Language not supported
  • commons/src/test/scala/za/co/absa/spline/common/config/UpperSnakeCaseEnvironmentConfigurationSpec.scala: Language not supported
  • kafka-gateway/src/main/scala/za/co/absa/spline/gateway/kafka/KafkaGatewayConfig.scala: Language not supported
  • persistence/src/main/scala/za/co/absa/spline/persistence/ArangoRepoConfig.scala: Language not supported

@wajda

wajda commented May 21, 2025

Copy link
Copy Markdown
Contributor Author

Snyk checks have failed. 11 issues have been found so far.

Icon Severity Issues
Critical 0
High 11
Medium 0
Low 0

security/snyk check is complete. 11 issues have been found. (View Details)

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@wajda wajda linked an issue May 21, 2025 that may be closed by this pull request
* limitations under the License.
*/

package org.apache.commons.configuration2

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is it necessary to use apaches package?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes, to allow access to a method with a package visibility.

@wajda wajda force-pushed the bugfix/spline-1419-conf2 branch from 343e833 to a7a3cb2 Compare June 8, 2025 13:27
@sonarqubecloud

sonarqubecloud Bot commented Jun 8, 2025

Copy link
Copy Markdown

@wajda wajda merged commit 688c839 into release/0.7 Jun 8, 2025
4 of 7 checks passed
@wajda wajda deleted the bugfix/spline-1419-conf2 branch June 8, 2025 14:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Upgrade to Apache Configuration 2 due to CVE-2025-46392

3 participants