From 8750d35f095a15eba703518c1756e10234fcace7 Mon Sep 17 00:00:00 2001
From: Joe Di Pol <joe.dipol@oracle.com>
Date: Tue, 27 Feb 2024 16:06:13 -0800
Subject: [PATCH 1/2] Upgrade various apache-commons libraries

---
 pom.xml | 25 +++++++++++++++++++++++--
 1 file changed, 23 insertions(+), 2 deletions(-)

diff --git a/pom.xml b/pom.xml
index 73538ef2e..ec2820605 100644
--- a/pom.xml
+++ b/pom.xml
@@ -121,7 +121,10 @@
 
         Changing these version requires approval for a new third party dependency!
         -->
-        <version.lib.apache-commons>3.10</version.lib.apache-commons>
+        <version.lib.apache-commons-lang3>3.10</version.lib.apache-commons-lang3>
+        <version.lib.apache-commons-collections>3.2.2</version.lib.apache-commons-collections>
+        <version.lib.apache-commons-compress>1.26.0</version.lib.apache-commons-compress>
+        <version.lib.apache-commons-io>2.9.0</version.lib.apache-commons-io>
         <version.lib.archetype-common>3.2.0</version.lib.archetype-common>
         <version.lib.asciidoctorj>2.5.2</version.lib.asciidoctorj>
         <version.lib.asm>7.2</version.lib.asm>
@@ -845,7 +848,25 @@
             <dependency>
                 <groupId>org.apache.commons</groupId>
                 <artifactId>commons-lang3</artifactId>
-                <version>${version.lib.apache-commons}</version>
+                <version>${version.lib.apache-commons-lang3}</version>
+            </dependency>
+            <dependency>
+                <!-- force upgrade -->
+                <groupId>commons-collections</groupId>
+                <artifactId>commons-collections</artifactId>
+                <version>${version.lib.apache-commons-collections}</version>
+            </dependency>
+            <dependency>
+                <!-- force upgrade -->
+                <groupId>org.apache.commons</groupId>
+                <artifactId>commons-compress</artifactId>
+                <version>${version.lib.apache-commons-compress}</version>
+            </dependency>
+            <dependency>
+                <!-- force upgrade -->
+                <groupId>commons-io</groupId>
+                <artifactId>commons-io</artifactId>
+                <version>${version.lib.apache-commons-io}</version>
             </dependency>
             <dependency>
                 <groupId>org.eclipse.lsp4j</groupId>

From 086e0242b5fa6126a9a71b29a673da6cf2fd52b3 Mon Sep 17 00:00:00 2001
From: Joe Di Pol <joe.dipol@oracle.com>
Date: Tue, 27 Feb 2024 16:35:30 -0800
Subject: [PATCH 2/2] Upgrade commons io to 2.15.0

---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index ec2820605..ed8733737 100644
--- a/pom.xml
+++ b/pom.xml
@@ -124,7 +124,7 @@
         <version.lib.apache-commons-lang3>3.10</version.lib.apache-commons-lang3>
         <version.lib.apache-commons-collections>3.2.2</version.lib.apache-commons-collections>
         <version.lib.apache-commons-compress>1.26.0</version.lib.apache-commons-compress>
-        <version.lib.apache-commons-io>2.9.0</version.lib.apache-commons-io>
+        <version.lib.apache-commons-io>2.15.0</version.lib.apache-commons-io>
         <version.lib.archetype-common>3.2.0</version.lib.archetype-common>
         <version.lib.asciidoctorj>2.5.2</version.lib.asciidoctorj>
         <version.lib.asm>7.2</version.lib.asm>