Skip to content

bump org.apache.commons:commons-lang3 from 3.20.0 to 3.21.0 - #3789

Open
spmallette wants to merge 1 commit into
apache:masterfrom
spmallette:tp-deps-commons-lang3-3.21.0
Open

spmallette wants to merge 1 commit into
apache:masterfrom
spmallette:tp-deps-commons-lang3-3.21.0

Conversation

@spmallette

Copy link
Copy Markdown
Contributor
  • Bump: org.apache.commons:commons-lang3 3.20.0 → 3.21.0 (JVM core, maven)
  • Why: Routine minor update of a core Apache Commons utility library TinkerPop uses directly (65 source files across gremlin-core, gremlin-driver, gremlin-groovy, tinkergraph-gremlin); no linked CVE. Selected via mvn-versions fallback — every open dependabot PR was already attempted or out of scope.
  • Target: master only (routine minor; not a security fix or a fix to our code, so no backport per the rubric)
  • Tested: ✅ master — staged (mvn clean install -DskipTests: BUILD SUCCESS), then full reactor mvn install (tests ON, all four GLV .glv touched incl. docker-compose integration, gremlin-go GOPROXY override): BUILD SUCCESS · module test totals all Failures: 0 Errors: 0 (gremlin-core 15327, gremlin-server 13748, gremlin-test 10307, tinkergraph 4370, …) · GLVs JS/Python/Go/.NET all SUCCESS
  • LICENSE: none required — commons-lang3's Console NOTICE entry carries no version string and it is absent from the binary LICENSE version-enumerated list, so a minor bump changes no version string and adds no bundled content or license change
  • Risk: Low — minor bump of a backwards-compatible Apache Commons library
  • Verdict: TAKE (direct core dep · low-risk minor · full reactor + all GLVs build clean)

🤖 Agent assisted PR.

@codecov-commenter

codecov-commenter commented Nov 9, 2026 •

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 77.58%. Comparing base (a28cd1f) to head (83f9abc).
⚠️ Report is 975 commits behind head on master.

Additional details and impacted files
@@             Coverage Diff              @@
##             master    #3789      +/-   ##
============================================
+ Coverage     76.35%   77.58%   +1.22%     
- Complexity    13424    15032    +1608     
============================================
  Files          1012     1050      +38     
  Lines         60341    67007    +6666     
  Branches       7075     8004     +929     
============================================
+ Hits          46076    51986    +5910     
- Misses        11548    11818     +270     
- Partials       2717     3203     +486     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants