fix(deps): backport security fixes to 5.6.x - #6701

Open

vlsi wants to merge 13 commits into

apache:release/5.6.xfrom

vlsi:dependency-updates-5.6.x

Commits on May 24, 2026

build: refresh stale checksum entries for xerces and xml-apis
vlsi
committed
aeb5633
fix(deps): bump com.thoughtworks.xstream:xstream to 1.4.21
vlsi
committed
be363a6
fix(deps): bump org.mozilla:rhino to 1.7.14.1
vlsi
committed
edfa915

Commits on Jul 9, 2026

fix(deps): bump net.minidev:{json-smart,accessors-smart} to 2.6.0
vlsi
committed
4e45595
fix(deps): bump com.jayway.jsonpath:json-path to 2.9.0
vlsi
committed
fe9e3bb
fix(deps): bump com.fasterxml.jackson.core:* to 2.18.6
vlsi
committed
6ea280e
fix(deps): bump org.apache.logging.log4j:* to 2.25.4
vlsi
committed
188338b
fix(deps): bump org.apache.xmlgraphics:batik-* to 1.17
vlsi
committed
3cbd52d
fix(deps): bump dnsjava 2.1.9 -> 3.6.5
vlsi
committed
fd33640
fix(deps): bump tika-core to 2.9.4 and drop tika-parsers
vlsi
committed
08cc202
fix(deps): bump org.apache.commons:commons-lang3 to 3.20.0
vlsi
committed
6935b7e
fix(deps): bump com.fasterxml.jackson.core:* to 2.22.1
vlsi
committed
5758ab5
fix(deps): bump org.neo4j.driver:neo4j-java-driver to 4.4.26
vlsi
committed
a7bbaff