Skip to content

Commit

Permalink
fix(deps): resolve conflicting version of MIME4J #9077
Browse files Browse the repository at this point in the history
- Apache Abdera Parser, Apache Tika and RESTeasy (Testing) use MIME4J
- Tika and RESTeasy use newer APIs only present since v0.8+
- Abdera is an abandoned project, uses v0.7.2 and is hopefully
  compatible with newer releases
- v0.8.4 given by Apache Tika relies on vulnerable Apache Commons IO
  2.6, we want 2.11 per dependency management. Upgrading to v0.8.7 as
  earliest version with 2.11 dependency
  • Loading branch information
poikilotherm committed Feb 6, 2024
1 parent 98231c5 commit 54375d5
Showing 1 changed file with 11 additions and 0 deletions.
11 changes: 11 additions & 0 deletions pom.xml
Original file line number Diff line number Diff line change
Expand Up @@ -51,6 +51,17 @@
<artifactId>abdera-i18n</artifactId>
<version>1.1.3</version>
</dependency>
<!-- Dependency for Apache Abdera and Apache Tika. Tika needs newer version. -->
<dependency>
<groupId>org.apache.james</groupId>
<artifactId>apache-mime4j-core</artifactId>
<version>0.8.9</version>
</dependency>
<dependency>
<groupId>org.apache.james</groupId>
<artifactId>apache-mime4j-dom</artifactId>
<version>0.8.9</version>
</dependency>
</dependencies>
</dependencyManagement>
<!-- Declare any DIRECT dependencies here.
Expand Down

0 comments on commit 54375d5

Please sign in to comment.