upgrade pdfbox

jakelandis · May 1, 2024 · 8ab58f2 · 8ab58f2
1 parent e70b04f
commit 8ab58f2
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 17 deletions.
diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
@@ -2898,29 +2898,19 @@
             <sha256 value="08316826fa2b9357b061e52fa8f19ccae75420c949ebe29e28759d2bddd9b39b" origin="Generated by Gradle"/>
          </artifact>
       </component>
-      <component group="org.apache.pdfbox" name="fontbox" version="2.0.27">
-         <artifact name="fontbox-2.0.27.jar">
-            <sha256 value="dc7429868aaf3d313c524b9aab846a405e89ca4927f35762ca4d1a60bce1d7f4" origin="Generated by Gradle"/>
-         </artifact>
-      </component>
-      <component group="org.apache.pdfbox" name="fontbox" version="2.0.29">
-         <artifact name="fontbox-2.0.29.jar">
-            <sha256 value="a4efc56064dd34caf8f38a192c04b32422c72ef3c964c0fbbbe8a6b4564d2830" origin="Generated by Gradle"/>
+      <component group="org.apache.pdfbox" name="fontbox" version="2.0.31">
+         <artifact name="fontbox-2.0.31.jar">
+            <sha256 value="0d36d14d3a43fd7a7d8d84d317ed8201b9d16fcba75b27e54f6f39775348c032" origin="Generated by Gradle"/>
          </artifact>
       </component>
       <component group="org.apache.pdfbox" name="jempbox" version="1.8.17">
          <artifact name="jempbox-1.8.17.jar">
             <sha256 value="ded9c81038dd1bbcba18f07e1028d70c9ceaf0b48ac56cea8ab6ec2c255fc1b3" origin="Generated by Gradle"/>
          </artifact>
       </component>
-      <component group="org.apache.pdfbox" name="pdfbox" version="2.0.27">
-         <artifact name="pdfbox-2.0.27.jar">
-            <sha256 value="a25ad2a0be6b0bf9eb0e972abd09c34c0e797a3ce2a980d5ff035ff4cf078037" origin="Generated by Gradle"/>
-         </artifact>
-      </component>
-      <component group="org.apache.pdfbox" name="pdfbox" version="2.0.29">
-         <artifact name="pdfbox-2.0.29.jar">
-            <sha256 value="69728a41a6e9feb98399560a31c1fe1b6467a66d1a8e33e677da24fda9263937" origin="Generated by Gradle"/>
+      <component group="org.apache.pdfbox" name="pdfbox" version="2.0.31">
+         <artifact name="pdfbox-2.0.31.jar">
+            <sha256 value="8a8d10b41961e69ffb8b7f6aa8936d34b96a8854aaf47a8cc081f4289120cef3" origin="Generated by Gradle"/>
          </artifact>
       </component>
       <component group="org.apache.poi" name="poi" version="5.2.3">

diff --git a/modules/ingest-attachment/build.gradle b/modules/ingest-attachment/build.gradle
@@ -17,9 +17,10 @@ esplugin {
 
 // this overwrites the 'versions' map from Elasticsearch itself, but indeed we want that -- we're interested in managing our dependencies
 // as we (and tika) demand, and are not interested in, say, having the same version of commons-codec as elasticsearch itself
+// when updating tika, please review it's parent pom and manually update the transitive dependencies here
 def versions = [
   'tika'  : '2.9.2',
-  'pdfbox': '2.0.29',
+  'pdfbox': '2.0.31',
   'poi'   : '5.2.3',
   'mime4j': '0.8.10',
   'commonsCodec': '1.16.1'