From 26f9e111d8500d3b21827c46841acb46781da9ac Mon Sep 17 00:00:00 2001 From: JinwooHwang Date: Wed, 21 Oct 2026 18:37:28 -0400 Subject: [PATCH] GEODE-10681: Upgrade hibernate-validator to 8.0.6.Final --- .../apache/geode/gradle/plugins/DependencyConstraints.groovy | 4 ++++ .../src/integrationTest/resources/assembly_content.txt | 2 +- .../integrationTest/resources/gfsh_dependency_classpath.txt | 2 +- .../src/integrationTest/resources/dependency_classpath.txt | 2 +- 4 files changed, 7 insertions(+), 3 deletions(-) diff --git a/build-tools/geode-dependency-management/src/main/groovy/org/apache/geode/gradle/plugins/DependencyConstraints.groovy b/build-tools/geode-dependency-management/src/main/groovy/org/apache/geode/gradle/plugins/DependencyConstraints.groovy index 00a4d29ef6a..6cb8c77ede3 100644 --- a/build-tools/geode-dependency-management/src/main/groovy/org/apache/geode/gradle/plugins/DependencyConstraints.groovy +++ b/build-tools/geode-dependency-management/src/main/groovy/org/apache/geode/gradle/plugins/DependencyConstraints.groovy @@ -53,6 +53,8 @@ class DependencyConstraints { deps.put("shiro.version", "3.0.0") // GEODE-10583: Pin Bouncy Castle (transitive via shiro-crypto-hash) to a fixed version deps.put("bouncycastle.version", "1.85") + // GEODE-10681: Pin hibernate-validator to a fixed version + deps.put("hibernate-validator.version", "8.0.6.Final") deps.put("slf4j-api.version", "2.0.18") deps.put("jakarta.transaction-api.version", "2.0.1") deps.put("jboss-modules.version", "1.11.0.Final") @@ -200,6 +202,8 @@ class DependencyConstraints { // GEODE-10583: Pin Bouncy Castle provider (pulled in via shiro-crypto-hash) to 1.84 api(group: 'org.bouncycastle', name: 'bcprov-jdk18on', version: get('bouncycastle.version')) api(group: 'org.bouncycastle', name: 'bcpkix-jdk18on', version: get('bouncycastle.version')) + // GEODE-10681: Pin hibernate-validator to a fixed version + api(group: 'org.hibernate.validator', name: 'hibernate-validator', version: get('hibernate-validator.version')) api(group: 'org.assertj', name: 'assertj-core', version: '3.22.0') api(group: 'org.awaitility', name: 'awaitility', version: '4.2.0') api(group: 'org.buildobjects', name: 'jproc', version: '2.8.0') diff --git a/geode-assembly/src/integrationTest/resources/assembly_content.txt b/geode-assembly/src/integrationTest/resources/assembly_content.txt index 5a5e6b377b4..1b25cde232a 100644 --- a/geode-assembly/src/integrationTest/resources/assembly_content.txt +++ b/geode-assembly/src/integrationTest/resources/assembly_content.txt @@ -961,7 +961,7 @@ lib/geode-tcp-server-0.0.0.jar lib/geode-unsafe-0.0.0.jar lib/geode-wan-0.0.0.jar lib/gfsh-dependencies.jar -lib/hibernate-validator-8.0.2.Final.jar +lib/hibernate-validator-8.0.6.Final.jar lib/httpclient5-5.6.4.jar lib/httpcore5-5.4.3.jar lib/httpcore5-h2-5.4.3.jar diff --git a/geode-assembly/src/integrationTest/resources/gfsh_dependency_classpath.txt b/geode-assembly/src/integrationTest/resources/gfsh_dependency_classpath.txt index 5fb05c3e4a1..a6c8ab1f160 100644 --- a/geode-assembly/src/integrationTest/resources/gfsh_dependency_classpath.txt +++ b/geode-assembly/src/integrationTest/resources/gfsh_dependency_classpath.txt @@ -140,7 +140,7 @@ reactive-streams-1.0.4.jar jline-native-3.30.17.jar antlr-runtime-3.5.2.jar tomcat-embed-el-10.1.42.jar -hibernate-validator-8.0.2.Final.jar +hibernate-validator-8.0.6.Final.jar jakarta.enterprise.lang-model-4.0.1.jar jakarta.validation-api-3.0.2.jar jboss-logging-3.4.3.Final.jar diff --git a/geode-server-all/src/integrationTest/resources/dependency_classpath.txt b/geode-server-all/src/integrationTest/resources/dependency_classpath.txt index 9be949332c8..bcc48599b5c 100644 --- a/geode-server-all/src/integrationTest/resources/dependency_classpath.txt +++ b/geode-server-all/src/integrationTest/resources/dependency_classpath.txt @@ -141,7 +141,7 @@ reactive-streams-1.0.4.jar jline-native-3.30.17.jar antlr-runtime-3.5.2.jar tomcat-embed-el-10.1.42.jar -hibernate-validator-8.0.2.Final.jar +hibernate-validator-8.0.6.Final.jar jakarta.el-api-5.0.0.jar jakarta.inject-api-2.0.1.jar jakarta.validation-api-3.0.2.jar