Merge branch 'master' of https://gitbox.apache.org/repos/asf/commons-jcs

.github/workflows/codeql-analysis.yml

@@ -55,13 +55,13 @@ jobs:
         restore-keys: |
           ${{ runner.os }}-maven-
     - name: Setup Java JDK
-      uses: actions/setup-java@v3.13.0
+      uses: actions/setup-java@v4.0.0
       with:
         distribution: 'temurin'
         java-version: '17'
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@407ffafae6a767df3e0230c3df91b6443ae8df75 # v2.22.8
+      uses: github/codeql-action/init@c0d1daa7f7e14667747d73a7dbbe8c074bc8bfe2 # v2.22.9
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -72,7 +72,7 @@ jobs:
     # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@407ffafae6a767df3e0230c3df91b6443ae8df75 # v2.22.8
+      uses: github/codeql-action/autobuild@c0d1daa7f7e14667747d73a7dbbe8c074bc8bfe2 # v2.22.9
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 https://git.io/JvXDl
@@ -86,4 +86,4 @@ jobs:
     #   make release
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@407ffafae6a767df3e0230c3df91b6443ae8df75 # v2.22.8
+      uses: github/codeql-action/analyze@c0d1daa7f7e14667747d73a7dbbe8c074bc8bfe2 # v2.22.9

.github/workflows/coverage.yml

@@ -39,7 +39,7 @@ jobs:
         restore-keys: |
           ${{ runner.os }}-maven-
     - name: Set up JDK ${{ matrix.java }}
-      uses: actions/setup-java@v3.13.0 # v3.12.0
+      uses: actions/setup-java@v4.0.0 # v3.12.0
       with:
         distribution: 'temurin'
         java-version: ${{ matrix.java }}

.github/workflows/maven.yml

@@ -50,7 +50,7 @@ jobs:
         restore-keys: |
           ${{ runner.os }}-maven-
     - name: Set up JDK ${{ matrix.java }}
-      uses: actions/setup-java@v3.13.0 # v3.12.0
+      uses: actions/setup-java@v4.0.0 # v3.12.0
       with:
         distribution: 'temurin'
         java-version: ${{ matrix.java }}

.github/workflows/scorecards-analysis.yml

@@ -64,6 +64,6 @@ jobs:
           retention-days: 5
 
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@407ffafae6a767df3e0230c3df91b6443ae8df75    # 2.22.8
+        uses: github/codeql-action/upload-sarif@c0d1daa7f7e14667747d73a7dbbe8c074bc8bfe2    # 2.22.9
         with:
           sarif_file: results.sarif

README.md

@@ -55,7 +55,7 @@ Documentation
 
 More information can be found on the [Apache Commons JCS homepage](https://commons.apache.org/proper/commons-jcs).
 The [Javadoc](https://commons.apache.org/proper/commons-jcs/apidocs) can be browsed.
-Questions related to the usage of Apache Commons JCS should be posted to the [user mailing list][ml].
+Questions related to the usage of Apache Commons JCS should be posted to the [user mailing list](https://commons.apache.org/mail-lists.html).
 
 Where can I get the latest release?
 -----------------------------------

commons-jcs3-core/pom.xml

@@ -59,7 +59,7 @@
     <dependency>
       <groupId>org.apache.logging.log4j</groupId>
       <artifactId>log4j-api</artifactId>
-      <version>2.21.1</version>
+      <version>2.22.0</version>
       <optional>true</optional>
     </dependency>
 
@@ -205,7 +205,7 @@
         <dependency>
           <groupId>org.apache.logging.log4j</groupId>
           <artifactId>log4j-core</artifactId>
-          <version>2.21.1</version>
+          <version>2.22.0</version>
           <scope>test</scope>
         </dependency>
       </dependencies>

commons-jcs3-jcache-extras/pom.xml

@@ -89,7 +89,7 @@
     <dependency>
       <groupId>commons-io</groupId>
       <artifactId>commons-io</artifactId>
-      <version>2.15.0</version>
+      <version>2.15.1</version>
       <scope>test</scope>
     </dependency>
   </dependencies>

commons-jcs3-sandbox/commons-jcs3-yajcache/pom.xml

@@ -40,14 +40,17 @@
     <dependency>
       <groupId>org.apache.commons</groupId>
       <artifactId>commons-lang3</artifactId>
+      <version>3.14.0</version>
     </dependency>
     <dependency>
       <groupId>commons-logging</groupId>
       <artifactId>commons-logging</artifactId>
+      <version>1.3.0</version>
     </dependency>
     <dependency>
       <groupId>log4j</groupId>
       <artifactId>log4j</artifactId>
+      <version>1.2.17</version>
     </dependency>
     <dependency>
       <groupId>junit</groupId>

pom.xml

@@ -21,7 +21,7 @@
   <parent>
     <groupId>org.apache.commons</groupId>
     <artifactId>commons-parent</artifactId>
-    <version>64</version>
+    <version>65</version>
   </parent>
 
   <artifactId>commons-jcs3</artifactId>

src/changes/changes.xml

@@ -52,14 +52,20 @@
                Bump org.apache.commons:commons-dbcp2 from 2.9.0 to 2.11.0.
             </action>
             <action type="update" dev="ggregory" due-to="Gary Gregory">
-               Bump commons-io from 2.13.0 to 2.15.0 #11.
+               Bump commons-io from 2.13.0 to 2.15.1 #11.
             </action>
-            <action type="update" dev="ggregory" due-to="Gary Gregory">
-               Bump org.apache.commons:commons-parent from 59 to 64.
+            <action type="update" dev="ggregory" due-to="Gary Gregory, Dependabot">
+               Bump org.apache.commons:commons-parent from 59 to 65 #189.
             </action>
             <action type="update" dev="ggregory" due-to="Gary Gregory">
                Bump commons-text from 1.10.0 to 1.11.0.
             </action>
+            <action type="update" dev="ggregory" due-to="Dependabot">
+               Bump org.apache.logging.log4j:log4j-core from 2.21.1 to 2.22.0 #190.
+            </action>
+            <action type="update" dev="ggregory" due-to="Dependabot">
+               Bump org.apache.logging.log4j:log4j-api from 2.21.1 to 2.22.0 #191.
+            </action>
         </release>
         <release version="3.2" date="2023-08-22">
             <action dev="tv" type="fix" issue="JCS-234" due-to="Chris Lake">