Skip to content

Commit 0c6e948

Browse files
committed
fix: drop unused commons-vfs2 (CVE-2025-27553, CVE-2025-30474)
1 parent 8428809 commit 0c6e948

14 files changed

Lines changed: 0 additions & 26 deletions

File tree

gestalt-asset-core/gradle.lockfile

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -16,13 +16,11 @@ com.google.j2objc:j2objc-annotations:1.1=annotationProcessor,compileClasspath,ru
1616
com.googlecode.gentyref:gentyref:1.2.0=annotationProcessor,runtimeClasspath,testAnnotationProcessor,testRuntimeClasspath
1717
com.squareup:javapoet:1.13.0=annotationProcessor,testAnnotationProcessor
1818
com.toasttab.android:gummy-bears-api-24:0.15.0=signature
19-
commons-logging:commons-logging:1.2=annotationProcessor,runtimeClasspath,testAnnotationProcessor,testRuntimeClasspath
2019
javax.inject:javax.inject:1=annotationProcessor,compileClasspath,runtimeClasspath,testAnnotationProcessor,testCompileClasspath,testRuntimeClasspath
2120
junit:junit:4.12=testCompileClasspath,testRuntimeClasspath
2221
net.bytebuddy:byte-buddy-agent:1.17.7=testCompileClasspath,testRuntimeClasspath
2322
net.bytebuddy:byte-buddy:1.17.7=testCompileClasspath,testRuntimeClasspath
2423
net.jcip:jcip-annotations:1.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
25-
org.apache.commons:commons-vfs2:2.2=annotationProcessor,runtimeClasspath,testAnnotationProcessor,testRuntimeClasspath
2624
org.checkerframework:checker-compat-qual:2.5.2=annotationProcessor,compileClasspath,runtimeClasspath,testAnnotationProcessor,testCompileClasspath,testRuntimeClasspath
2725
org.codehaus.mojo:animal-sniffer-annotations:1.17=annotationProcessor,compileClasspath,runtimeClasspath,testAnnotationProcessor,testCompileClasspath,testRuntimeClasspath
2826
org.codehaus.mojo:animal-sniffer-annotations:1.24=animalsniffer

gestalt-di/gradle.lockfile

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -16,14 +16,12 @@ com.google.j2objc:j2objc-annotations:1.1=compileClasspath,runtimeClasspath,testA
1616
com.googlecode.gentyref:gentyref:1.2.0=testAnnotationProcessor,testRuntimeClasspath
1717
com.squareup:javapoet:1.13.0=testAnnotationProcessor
1818
com.toasttab.android:gummy-bears-api-24:0.15.0=signature
19-
commons-logging:commons-logging:1.2=testAnnotationProcessor,testRuntimeClasspath
2019
javax.inject:javax.inject:1=compileClasspath,runtimeClasspath,testAnnotationProcessor,testCompileClasspath,testRuntimeClasspath
2120
junit:junit:4.12=testCompileClasspath,testRuntimeClasspath
2221
net.bytebuddy:byte-buddy-agent:1.17.7=testCompileClasspath,testRuntimeClasspath
2322
net.bytebuddy:byte-buddy:1.17.7=testCompileClasspath,testRuntimeClasspath
2423
net.jcip:jcip-annotations:1.0=testRuntimeClasspath
2524
net.sf.trove4j:trove4j:3.0.3=testRuntimeClasspath
26-
org.apache.commons:commons-vfs2:2.2=testAnnotationProcessor,testRuntimeClasspath
2725
org.checkerframework:checker-compat-qual:2.5.2=compileClasspath,runtimeClasspath,testAnnotationProcessor,testCompileClasspath,testRuntimeClasspath
2826
org.codehaus.mojo:animal-sniffer-annotations:1.17=compileClasspath,runtimeClasspath,testAnnotationProcessor,testCompileClasspath,testRuntimeClasspath
2927
org.codehaus.mojo:animal-sniffer-annotations:1.24=animalsniffer

gestalt-entity-system/gradle.lockfile

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -16,14 +16,12 @@ com.google.j2objc:j2objc-annotations:1.1=annotationProcessor,compileClasspath,ru
1616
com.googlecode.gentyref:gentyref:1.2.0=annotationProcessor,runtimeClasspath,testAnnotationProcessor,testRuntimeClasspath
1717
com.squareup:javapoet:1.13.0=annotationProcessor,testAnnotationProcessor
1818
com.toasttab.android:gummy-bears-api-24:0.15.0=signature
19-
commons-logging:commons-logging:1.2=annotationProcessor,runtimeClasspath,testAnnotationProcessor,testRuntimeClasspath
2019
javax.inject:javax.inject:1=annotationProcessor,compileClasspath,runtimeClasspath,testAnnotationProcessor,testCompileClasspath,testRuntimeClasspath
2120
junit:junit:4.12=testCompileClasspath,testRuntimeClasspath
2221
net.bytebuddy:byte-buddy-agent:1.17.7=testCompileClasspath,testRuntimeClasspath
2322
net.bytebuddy:byte-buddy:1.17.7=testCompileClasspath,testRuntimeClasspath
2423
net.jcip:jcip-annotations:1.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
2524
net.sf.trove4j:trove4j:3.0.3=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
26-
org.apache.commons:commons-vfs2:2.2=annotationProcessor,runtimeClasspath,testAnnotationProcessor,testRuntimeClasspath
2725
org.checkerframework:checker-compat-qual:2.5.2=annotationProcessor,compileClasspath,runtimeClasspath,testAnnotationProcessor,testCompileClasspath,testRuntimeClasspath
2826
org.codehaus.mojo:animal-sniffer-annotations:1.17=annotationProcessor,compileClasspath,runtimeClasspath,testAnnotationProcessor,testCompileClasspath,testRuntimeClasspath
2927
org.codehaus.mojo:animal-sniffer-annotations:1.24=animalsniffer

gestalt-es-perf/gradle.lockfile

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -15,14 +15,12 @@ com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava=comp
1515
com.google.j2objc:j2objc-annotations:1.1=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
1616
com.googlecode.gentyref:gentyref:1.2.0=runtimeClasspath,testRuntimeClasspath
1717
com.toasttab.android:gummy-bears-api-24:0.15.0=signature
18-
commons-logging:commons-logging:1.2=runtimeClasspath,testRuntimeClasspath
1918
javax.inject:javax.inject:1=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
2019
junit:junit:4.12=testCompileClasspath,testRuntimeClasspath
2120
net.bytebuddy:byte-buddy-agent:1.17.7=testCompileClasspath,testRuntimeClasspath
2221
net.bytebuddy:byte-buddy:1.17.7=testCompileClasspath,testRuntimeClasspath
2322
net.jcip:jcip-annotations:1.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
2423
net.sf.trove4j:trove4j:3.0.3=runtimeClasspath,testRuntimeClasspath
25-
org.apache.commons:commons-vfs2:2.2=runtimeClasspath,testRuntimeClasspath
2624
org.checkerframework:checker-compat-qual:2.5.2=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
2725
org.codehaus.mojo:animal-sniffer-annotations:1.17=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
2826
org.codehaus.mojo:animal-sniffer-annotations:1.24=animalsniffer

gestalt-inject-java/build.gradle.kts

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,6 @@ dependencies {
88
implementation(project(":gestalt-util"))
99
implementation(libs.guava)
1010
implementation(libs.gson)
11-
implementation("org.apache.commons:commons-vfs2:2.2")
1211
implementation(libs.slf4j.api)
1312
implementation(libs.android.annotation)
1413
implementation("com.github.zafarkhaja:java-semver:0.10.2")

gestalt-inject-java/gradle.lockfile

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -16,12 +16,10 @@ com.google.j2objc:j2objc-annotations:1.1=compileClasspath,runtimeClasspath,testC
1616
com.googlecode.gentyref:gentyref:1.2.0=runtimeClasspath,testRuntimeClasspath
1717
com.squareup:javapoet:1.13.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
1818
com.toasttab.android:gummy-bears-api-24:0.15.0=signature
19-
commons-logging:commons-logging:1.2=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
2019
javax.inject:javax.inject:1=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
2120
junit:junit:4.12=testCompileClasspath,testRuntimeClasspath
2221
net.bytebuddy:byte-buddy-agent:1.17.7=testCompileClasspath,testRuntimeClasspath
2322
net.bytebuddy:byte-buddy:1.17.7=testCompileClasspath,testRuntimeClasspath
24-
org.apache.commons:commons-vfs2:2.2=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
2523
org.checkerframework:checker-compat-qual:2.5.2=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
2624
org.codehaus.mojo:animal-sniffer-annotations:1.17=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
2725
org.codehaus.mojo:animal-sniffer-annotations:1.24=animalsniffer

gestalt-module/build.gradle.kts

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,6 @@ dependencies {
1515

1616
implementation(libs.guava)
1717
implementation(libs.gson)
18-
implementation("org.apache.commons:commons-vfs2:2.2")
1918
implementation(libs.slf4j.api)
2019
implementation(libs.android.annotation)
2120
implementation("com.github.zafarkhaja:java-semver:0.10.2")

gestalt-module/gradle.lockfile

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -16,12 +16,10 @@ com.google.j2objc:j2objc-annotations:1.1=annotationProcessor,compileClasspath,ru
1616
com.googlecode.gentyref:gentyref:1.2.0=annotationProcessor,runtimeClasspath,testAnnotationProcessor,testRuntimeClasspath
1717
com.squareup:javapoet:1.13.0=annotationProcessor,testAnnotationProcessor
1818
com.toasttab.android:gummy-bears-api-24:0.15.0=signature
19-
commons-logging:commons-logging:1.2=annotationProcessor,compileClasspath,runtimeClasspath,testAnnotationProcessor,testCompileClasspath,testRuntimeClasspath
2019
javax.inject:javax.inject:1=annotationProcessor,compileClasspath,runtimeClasspath,testAnnotationProcessor,testCompileClasspath,testRuntimeClasspath
2120
junit:junit:4.12=testCompileClasspath,testRuntimeClasspath
2221
net.bytebuddy:byte-buddy-agent:1.17.7=testCompileClasspath,testRuntimeClasspath
2322
net.bytebuddy:byte-buddy:1.17.7=testCompileClasspath,testRuntimeClasspath
24-
org.apache.commons:commons-vfs2:2.2=annotationProcessor,compileClasspath,runtimeClasspath,testAnnotationProcessor,testCompileClasspath,testRuntimeClasspath
2523
org.checkerframework:checker-compat-qual:2.5.2=annotationProcessor,compileClasspath,runtimeClasspath,testAnnotationProcessor,testCompileClasspath,testRuntimeClasspath
2624
org.codehaus.mojo:animal-sniffer-annotations:1.17=annotationProcessor,compileClasspath,runtimeClasspath,testAnnotationProcessor,testCompileClasspath,testRuntimeClasspath
2725
org.codehaus.mojo:animal-sniffer-annotations:1.24=animalsniffer

testpack/moduleA/gradle.lockfile

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -13,9 +13,7 @@ com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava=anno
1313
com.google.j2objc:j2objc-annotations:1.1=annotationProcessor,runtimeClasspath,testRuntimeClasspath
1414
com.googlecode.gentyref:gentyref:1.2.0=annotationProcessor
1515
com.squareup:javapoet:1.13.0=annotationProcessor
16-
commons-logging:commons-logging:1.2=annotationProcessor
1716
javax.inject:javax.inject:1=annotationProcessor,compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
18-
org.apache.commons:commons-vfs2:2.2=annotationProcessor
1917
org.checkerframework:checker-compat-qual:2.5.2=annotationProcessor,runtimeClasspath,testRuntimeClasspath
2018
org.codehaus.mojo:animal-sniffer-annotations:1.17=annotationProcessor,runtimeClasspath,testRuntimeClasspath
2119
org.slf4j:slf4j-api:1.7.25=annotationProcessor,runtimeClasspath,testRuntimeClasspath

testpack/moduleB/gradle.lockfile

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -13,9 +13,7 @@ com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava=anno
1313
com.google.j2objc:j2objc-annotations:1.1=annotationProcessor,runtimeClasspath,testRuntimeClasspath
1414
com.googlecode.gentyref:gentyref:1.2.0=annotationProcessor
1515
com.squareup:javapoet:1.13.0=annotationProcessor
16-
commons-logging:commons-logging:1.2=annotationProcessor
1716
javax.inject:javax.inject:1=annotationProcessor,compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
18-
org.apache.commons:commons-vfs2:2.2=annotationProcessor
1917
org.checkerframework:checker-compat-qual:2.5.2=annotationProcessor,runtimeClasspath,testRuntimeClasspath
2018
org.codehaus.mojo:animal-sniffer-annotations:1.17=annotationProcessor,runtimeClasspath,testRuntimeClasspath
2119
org.slf4j:slf4j-api:1.7.25=annotationProcessor,runtimeClasspath,testRuntimeClasspath

0 commit comments

Comments
 (0)