From a243f51212b2e05c1e032315c9cdd92807e39648 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 6 Jul 2026 05:15:07 +0000 Subject: [PATCH] Bump org.apache.tika:tika-core from 3.2.2 to 3.3.1 Bumps [org.apache.tika:tika-core](https://github.com/apache/tika) from 3.2.2 to 3.3.1. - [Changelog](https://github.com/apache/tika/blob/3.3.1/CHANGES.txt) - [Commits](https://github.com/apache/tika/compare/3.2.2...3.3.1) --- updated-dependencies: - dependency-name: org.apache.tika:tika-core dependency-version: 3.3.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- build.gradle.kts | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/build.gradle.kts b/build.gradle.kts index 34b00e0..5b4ee7d 100644 --- a/build.gradle.kts +++ b/build.gradle.kts @@ -116,8 +116,8 @@ dependencies { testImplementation("org.apache.logging.log4j:log4j-core:2.25.4") { because("Multiple Log4j Core advisories affect the locked 2.22.0 version") } - testImplementation("org.apache.tika:tika-core:3.2.2") { - because("GHSA-f58c-gq56-vjjf affects tika-core versions before 3.2.2") + testImplementation("org.apache.tika:tika-core:3.3.1") { + because("GHSA-f58c-gq56-vjjf affects tika-core versions before 3.3.1") } testImplementation("org.json:json:20231013") { because("GHSA-4jq9-2xhw-jpx7 affects org.json versions before 20231013") @@ -147,7 +147,7 @@ configurations.configureEach { // GHSA-wxr5-93ph-8wr9: old commons-beanutils pulled in transitively. "commons-beanutils:commons-beanutils:1.11.0", // GHSA-f58c-gq56-vjjf: old tika-core pulled in transitively. - "org.apache.tika:tika-core:3.2.2", + "org.apache.tika:tika-core:3.3.1", // GHSA-3w8q-xq97-5j7x: the constraints-based rhino pin above doesn't reach // transient tool classpaths, so force it globally too. "org.mozilla:rhino:1.7.14.1"