Merge pull request #1944 from josephgrm/security/patch-tika-vulnerability

Security: bump apache-tika to 3.2.3 to patch CVE-2025-66516

Author: navaronbracke

CHANGELOG.md

@@ -1,3 +1,11 @@
+## 10.3.9
+
+#### Android
+
+- Updated Apache Tika to 3.2.3 to address CVE-2025-66516 and
+  CVE-2025-54988 (Critical XXE vulnerability).
+- Support Gradle 9
+
 ## 10.3.8
 ### iOS
 - Rename FileUtils to FilePickerUtils [#1921](https://github.com/miguelpruivo/flutter_file_picker/issues/1921)

android/build.gradle

@@ -46,7 +46,7 @@ android {
         implementation 'androidx.core:core:1.15.0'
         implementation 'androidx.annotation:annotation:1.9.1'
         implementation "androidx.lifecycle:lifecycle-runtime:2.8.7"
-        implementation "org.apache.tika:tika-core:3.2.0"
+        implementation "org.apache.tika:tika-core:3.2.3"
     }
 
     if (project.android.hasProperty("namespace")) {

pubspec.yaml

@@ -3,7 +3,7 @@ description: A package that allows you to use a native file explorer to pick sin
 homepage: https://github.com/miguelpruivo/plugins_flutter_file_picker
 repository: https://github.com/miguelpruivo/flutter_file_picker
 issue_tracker: https://github.com/miguelpruivo/flutter_file_picker/issues
-version: 10.3.8
+version: 10.3.9
 
 dependencies:
   flutter: