Accepting request 1286671 from Java:packages

minimal fix to mess up the green colour of staging

OBS-URL: https://build.opensuse.org/request/show/1286671
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apache-commons-fileupload?expand=0&rev=5

apache-commons-fileupload-build.xml

@@ -8,7 +8,7 @@
 
   <property file="build.properties"/>
 
-  <property name="build.finalName" value="commons-fileupload-1.5"/>
+  <property name="build.finalName" value="commons-fileupload-1.6.0"/>
   <property name="build.dir" value="target"/>
   <property name="build.outputDir" value="${build.dir}/classes"/>
   <property name="build.srcDir.0" value="src/main/java"/>
@@ -220,21 +220,21 @@
 		<attribute name="Bundle-Name" value="Apache Commons FileUpload"/>
 		<attribute name="Bundle-SymbolicName" value="org.apache.commons.fileupload"/>
 		<attribute name="Bundle-Vendor" value="The Apache Software Foundation"/>
-		<attribute name="Bundle-Version" value="1.5.0"/>
+		<attribute name="Bundle-Version" value="1.6.0"/>
 		<attribute name="DynamicImport-Package" value="javax.portlet"/>
-		<attribute name="Export-Package" value="org.apache.commons.fileupload;version=&quot;1.5&quot;,org.apache.commons.fileupload.disk;version=&quot;1.5&quot;,org.apache.commons.fileupload.portlet;version=&quot;1.5&quot;,org.apache.commons.fileupload.servlet;version=&quot;1.5&quot;,org.apache.commons.fileupload.util;version=&quot;1.5&quot;"/>
+		<attribute name="Export-Package" value="org.apache.commons.fileupload;version=&quot;1.6.0&quot;,org.apache.commons.fileupload.disk;version=&quot;1.6.0&quot;,org.apache.commons.fileupload.portlet;version=&quot;1.6.0&quot;,org.apache.commons.fileupload.servlet;version=&quot;1.6.0&quot;,org.apache.commons.fileupload.util;version=&quot;1.6.0&quot;"/>
 		<attribute name="Implementation-Title" value="Apache Commons FileUpload"/>
 		<attribute name="Implementation-URL" value="http://commons.apache.org/proper/commons-fileupload/"/>
 		<attribute name="Implementation-Vendor" value="The Apache Software Foundation"/>
 		<attribute name="Implementation-Vendor-Id" value="org.apache"/>
-		<attribute name="Implementation-Version" value="1.5"/>
+		<attribute name="Implementation-Version" value="1.6.0"/>
 		<attribute name="Import-Package" value="javax.servlet,javax.servlet.http,org.apache.commons.io,org.apache.commons.io.output"/>
 		<attribute name="Include-Resource" value="META-INF/NOTICE.txt=NOTICE.txt,META-INF/LICENSE.txt=LICENSE.txt"/>
 		<attribute name="Private-Package" value="org.apache.commons.fileupload.util.mime"/>
 		<attribute name="Require-Capability" value="osgi.ee;filter:=&quot;(&amp;(osgi.ee=JavaSE)(version=1.8))&quot;"/>
 		<attribute name="Specification-Title" value="Apache Commons FileUpload"/>
 		<attribute name="Specification-Vendor" value="The Apache Software Foundation"/>
-		<attribute name="Specification-Version" value="1.5"/>
+		<attribute name="Specification-Version" value="1.6"/>
       </manifest>
     </jar>
   </target>

apache-commons-fileupload.changes

@@ -1,3 +1,41 @@
+-------------------------------------------------------------------
+Tue Jun 17 16:04:25 UTC 2025 - Fridrich Strba <fstrba@suse.com>
+
+- Upgrade to upstream version 1.6.0
+  * Fixes bsc#1244657, CVE-2025-48976
+  * New features:
+    + [1.x] Enable multipart/related on FileUpload #314.
+    + Add JApiCmp to the default Maven goal.
+    + Add partHeaderSizeMax, a new limit that sets a maximum number
+      of bytes for each individual multipart header. The default is
+      512 bytes.
+  * Fixed Bugs:
+    + Replace use of Locale.ENGLISH with Locale.ROOT.
+    + Remove unused exception from FileUploadBase.createItem(Map,
+      boolean).
+    + Migrate from deprecated API in DiskFileItem.getOutputStream().
+    + Use try-with-resources.
+    + Port to Java 1.4 Throwable APIs (!).
+    + Remove -nouses directive from maven-bundle-plugin. OSGi
+      package imports now state 'uses' definitions for package
+      imports, this doesn't affect JPMS (from
+      org.apache.commons:commons-parent:80).
+    + DiskFileItem.getInputStream() now uses NIO.
+    + Last statement in DiskFileItem.finalize() method should be a
+      call to super.finalize().
+    + org.apache.commons.fileupload.FileUploadBase
+      .FileUploadIOException is now a proper Java 1.4-style
+      exception (propagates its cause to super).
+    + Use java.util.Base64 instead of custom code.
+  * Changes:
+    + Bump Java from 6 to 8.
+    + Bump org.apache.commons:commons-parent from 62 to 84, upgrades
+      Doxia from 1 to 2.
+    + Bump commons-io from 2.11.0 to 2.19.0.
+    + Bump javax.servlet:servlet-api from 2.4 to 2.5.
+    + Bump JUnit from junit:junit:4.13.2
+      org.junit.vintage:junit-vintage-engine from parent POM.
+
 -------------------------------------------------------------------
 Wed Oct  2 15:31:16 UTC 2024 - Fridrich Strba <fstrba@suse.com>
 

apache-commons-fileupload.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package apache-commons-fileupload
 #
-# Copyright (c) 2024 SUSE LLC
+# Copyright (c) 2025 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -20,13 +20,13 @@
 %global short_name commons-%{base_name}
 %bcond_without  portlet
 Name:           apache-%{short_name}
-Version:        1.5
+Version:        1.6.0
 Release:        0
 Summary:        API to work with HTML file upload
 License:        Apache-2.0
 Group:          Development/Libraries/Java
 URL:            https://commons.apache.org/fileupload/
-Source0:        http://archive.apache.org/dist/commons/fileupload/source/commons-fileupload-%{version}-src.tar.gz
+Source0:        https://archive.apache.org/dist/commons/fileupload/source/commons-fileupload-%{version}-src.tar.gz
 Source1:        %{name}-build.xml
 BuildRequires:  ant
 BuildRequires:  apache-commons-io
@@ -57,7 +57,7 @@ Group:          Documentation/HTML
 This package contains the API documentation for %{name}.
 
 %prep
-%setup -q -n commons-fileupload-%{version}-src
+%setup -q -n %{short_name}-%{version}-src
 cp %{SOURCE1} build.xml
 sed -i 's/\r//' LICENSE.txt
 sed -i 's/\r//' NOTICE.txt

commons-fileupload-1.5-src.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:bb2d61657c82d9f728d09be99fee0b665ef85428d98cabc45579037c831449ca
-size 1108028

commons-fileupload-1.6.0-src.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:2e5b90da7bbf53529022fdbe020a072619fad7aed1f8efa8b7f9eb09081f0738
+size 3412034