Skip to content

Remove usage of the commons-lang 2.6 - #317

Merged
reta merged 1 commit into
opensearch-project:mainfrom
reta:remove.commons-lang.2.6
Mar 24, 2026
Merged

Remove usage of the commons-lang 2.6#317
reta merged 1 commit into
opensearch-project:mainfrom
reta:remove.commons-lang.2.6

Conversation

@reta

@reta reta commented Mar 24, 2026

Copy link
Copy Markdown
Collaborator

Description

Remove usage of the commons-lang 2.6

Related Issues

Fixes https://nvd.nist.gov/vuln/detail/CVE-2025-48924

Check List

  • New functionality includes testing.
  • New functionality has been documented.
  • API changes companion pull request created.
  • Commits are signed per the DCO using --signoff.
  • Public documentation issue/PR created.

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

Signed-off-by: Andriy Redko <drreta@gmail.com>
@reta
reta force-pushed the remove.commons-lang.2.6 branch from 7dc4604 to 2f497e0 Compare March 24, 2026 19:37
@reta reta added bug and removed skip-changelog labels Mar 24, 2026
@reta
reta merged commit d7da2f2 into opensearch-project:main Mar 24, 2026
37 of 45 checks passed
@opensearch-trigger-bot

Copy link
Copy Markdown
Contributor

The backport to 3.5 failed:

The process '/usr/bin/git' failed with exit code 1

To backport manually, run these commands in your terminal:

# Fetch latest updates from GitHub
git fetch
# Create a new working tree
git worktree add .worktrees/backport-3.5 3.5
# Navigate to the new working tree
cd .worktrees/backport-3.5
# Create a new branch
git switch --create backport/backport-317-to-3.5
# Cherry-pick the merged commit of this pull request and resolve the conflicts
git cherry-pick -x --mainline 1 d7da2f2609b1a1e35db25ddabbd4818b43e986e4
# Push it to GitHub
git push --set-upstream origin backport/backport-317-to-3.5
# Go back to the original working tree
cd ../..
# Delete the working tree
git worktree remove .worktrees/backport-3.5

Then, create a pull request where the base branch is 3.5 and the compare/head branch is backport/backport-317-to-3.5.

reta added a commit to reta/opensearch-jvector that referenced this pull request Mar 24, 2026
Signed-off-by: Andriy Redko <drreta@gmail.com>
(cherry picked from commit d7da2f2)
reta added a commit to reta/opensearch-jvector that referenced this pull request Mar 24, 2026
Signed-off-by: Andriy Redko <drreta@gmail.com>
(cherry picked from commit d7da2f2)
Signed-off-by: Andriy Redko <drreta@gmail.com>
reta added a commit that referenced this pull request Mar 24, 2026
(cherry picked from commit d7da2f2)

Signed-off-by: Andriy Redko <drreta@gmail.com>
opensearch-trigger-bot Bot pushed a commit that referenced this pull request Mar 24, 2026
(cherry picked from commit d7da2f2)

Signed-off-by: Andriy Redko <drreta@gmail.com>
(cherry picked from commit 136e893)
reta added a commit that referenced this pull request Mar 25, 2026
(cherry picked from commit d7da2f2)


(cherry picked from commit 136e893)

Signed-off-by: Andriy Redko <drreta@gmail.com>
Co-authored-by: Andriy Redko <drreta@gmail.com>
opensearch-trigger-bot Bot added a commit that referenced this pull request Mar 25, 2026
(cherry picked from commit d7da2f2)

(cherry picked from commit 136e893)

Signed-off-by: Andriy Redko <drreta@gmail.com>
Co-authored-by: Andriy Redko <drreta@gmail.com>
(cherry picked from commit d46e2f6)
reta added a commit that referenced this pull request Mar 25, 2026
(cherry picked from commit d7da2f2)

(cherry picked from commit 136e893)



(cherry picked from commit d46e2f6)

Signed-off-by: Andriy Redko <drreta@gmail.com>
Co-authored-by: opensearch-trigger-bot[bot] <98922864+opensearch-trigger-bot[bot]@users.noreply.github.com>
Co-authored-by: Andriy Redko <drreta@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants