diff --git a/apache-commons-io-build.xml b/apache-commons-io-build.xml
index f257017..b572f57 100644
--- a/apache-commons-io-build.xml
+++ b/apache-commons-io-build.xml
@@ -10,7 +10,7 @@
 
   <property name="project.groupId" value="commons-io"/>
   <property name="project.artifactId" value="commons-io"/>
-  <property name="project.version" value="2.17.0"/>
+  <property name="project.version" value="2.18.0"/>
   <property name="project.name" value="Apache Commons IO"/>
   <property name="project.description" value="The Apache Commons IO library 
 contains utility classes, stream implementations, file filters, 
diff --git a/apache-commons-io.changes b/apache-commons-io.changes
index 08647ba..92f4382 100644
--- a/apache-commons-io.changes
+++ b/apache-commons-io.changes
@@ -1,3 +1,72 @@
+-------------------------------------------------------------------
+Fri Jan 24 15:08:26 UTC 2025 - Gus Kenion <gus.kenion@suse.com>
+
+- Upgrade to 2.18.0
+  * New features
+    + Add @FunctionalInterface to ClassNameMatcher.
+    + Add ValidatingObjectInputStream.Builder and
+      ValidatingObjectInputStream.builder().
+    + Add a "Safe Deserialization" section to the User Guide for
+      the site.
+    + Add IORandomAccessFile.
+    + Add RandomAccessFileMode.io(String).
+    + Add FileAlterationObserver.Builder() and deprecate most
+      constructors.
+    + Add IOUtils.readLines(CharSequence).
+    + Add ValidatingObjectInputStream.ObjectStreamClassPredicate to
+      allow configuration reuse.
+    + Add RandomAccessFileMode.accept(Path,
+      IOConsumer<RandomAccessFile>).
+    + Add RandomAccessFileMode.apply(Path,
+      IOFunction<RandomAccessFile>, T).
+    + Add IOIntConsumer.
+    + Add ProxyInputStream.AbstractBuilder. Supports setting a
+      consumer for ProxyInputStream.afterRead(int).
+    + Add support to AutoCloseInputStream for setting a consumer
+      for ProxyInputStream.afterRead(int).
+    + Add support to BOMInputStream for setting a consumer for
+      ProxyInputStream.afterRead(int).
+    + Add support to BoundedInputStream for setting a consumer for
+      ProxyInputStream.afterRead(int).
+    + Add support to BoundedInputStream for setting a consumer for
+      BoundedInputStream.onMaxLength(long, long).
+    + Add support to ChecksumInputStream for setting a consumer for
+      ProxyInputStream.afterRead(int).
+    + Add support to ThrottledInputStream for setting a consumer
+      for ProxyInputStream.afterRead(int).
+    + Add support to ObservableInputStream for setting a consumer
+      for ProxyInputStream.afterRead(int).
+    + Add support to MessageDigestCalculatingInputStream for
+      setting a consumer for ProxyInputStream.afterRead(int).
+    + Add support to MessageDigestInputStream for setting a
+      consumer for ProxyInputStream.afterRead(int).
+  * Fixed Bugs
+    + Clean ups in unit tests.
+    + Fix some Javadoc issues.
+    + RandomAccessFileMode.toString() is more helpful for debugging
+      when it inherits from Enum.
+    + Fix implicit narrowing conversion in compound assignment in
+      UnsynchronizedBufferedReader.skip(long).
+    + IO-860:  Missing reserved file names in FileSystem.WINDOWS
+      (superscript digits for COM and LPT).
+    + IO-856:  FileUtils.listFiles(final File, String[], boolean)
+      can throw NoSuchFileException #697, #699.
+    + IO-859:  FileUtils.forceDelete on non-existent file on Windows
+      throws IOException rather than FileNotFoundException.
+    + Use Unicode escapes for superscript characters. #701.
+    + IO-863:  Recent incompatible change to FileUtils.listFiles re
+      extensions, see also IO-856.
+    + IO-857:  Javadoc: Update details for PathUtils "clean"
+      behavior.
+  * Changes
+    + Bump org.apache.commons:commons-parent from 74 to 78 #670,
+      #676, #679, #688.
+    + Bump commons.bytebuddy.version from 1.15.1 to 1.15.10 #672,
+      #673, #685, #686, #694, #696, #698.
+    + Update AbstractStreamBuilder getters from protected to
+      public.
+
+
 -------------------------------------------------------------------
 Fri Oct  4 19:23:58 UTC 2024 - Fridrich Strba <fstrba@suse.com>
 
diff --git a/apache-commons-io.spec b/apache-commons-io.spec
index 298cc19..86884b1 100644
--- a/apache-commons-io.spec
+++ b/apache-commons-io.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package apache-commons-io
 #
-# Copyright (c) 2024 SUSE LLC
+# Copyright (c) 2025 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -19,7 +19,7 @@
 %define base_name  io
 %define short_name commons-%{base_name}
 Name:           apache-%{short_name}
-Version:        2.17.0
+Version:        2.18.0
 Release:        0
 Summary:        Utilities to assist with developing IO functionality
 License:        Apache-2.0
diff --git a/commons-io-2.17.0-src.tar.gz b/commons-io-2.17.0-src.tar.gz
deleted file mode 100644
index a3b09d8..0000000
--- a/commons-io-2.17.0-src.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:3d7c1772c6eb5a884f3a813702fbaabaac6581980bfae1984f2b4a51026e2227
-size 652908
diff --git a/commons-io-2.17.0-src.tar.gz.asc b/commons-io-2.17.0-src.tar.gz.asc
deleted file mode 100644
index edf1191..0000000
--- a/commons-io-2.17.0-src.tar.gz.asc
+++ /dev/null
@@ -1,11 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQEzBAABCgAdFiEELbTx7w+nYezE6pNchv3H4qESYssFAmbm/bkACgkQhv3H4qES
-YssuLgf/RX7rznHl4Wdk3xT2mhKcxsAtm5y80GfAHtk1iqU7lDzhMxiN5jPQlyz1
-AJCYeNqTwn6734cmEzNyvgIUOX3ogyscxBI22PPI+I3VSgw2k2gXOPu/3X06WoRU
-3EM9ADaRzh5kME0T/hujKl9rnSbq4Oz6b1FeedS9Odi5wR4SvujhjcBEoHZP2fkj
-0Ky3Yt7MMm+St3C+yXdU8ffes/hhiG6xbMC1LaYFNUSOz1Fg42EJh4DXUk5HIPgG
-dz8sCsr/3f3Uj68AjTdiN7y8BDkDAlxN5v7mu2bIw+MEWIDMfma1QR/wZjMj0mlK
-M/ZNSDC9KF5098mR0PcCIeTJMUJoJg==
-=DEko
------END PGP SIGNATURE-----
diff --git a/commons-io-2.18.0-src.tar.gz b/commons-io-2.18.0-src.tar.gz
new file mode 100644
index 0000000..fbaccf5
--- /dev/null
+++ b/commons-io-2.18.0-src.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:c4652dd7ebce9f5e0d3cdd89ad199ab101d490680d37b696f98fccd5a0cf2933
+size 670984
diff --git a/commons-io-2.18.0-src.tar.gz.asc b/commons-io-2.18.0-src.tar.gz.asc
new file mode 100644
index 0000000..e9975ab
--- /dev/null
+++ b/commons-io-2.18.0-src.tar.gz.asc
@@ -0,0 +1,11 @@
+-----BEGIN PGP SIGNATURE-----
+
+iQEzBAABCgAdFiEELbTx7w+nYezE6pNchv3H4qESYssFAmc4ucQACgkQhv3H4qES
+YsukGggAiXozeW54LgOGltf0kzgCmFCU0nbAgpaWh3VEl0Xwi+i33HkDVk6chC91
+XwA3gNsrGJcRX2ka6TlYm1kjGBaoyhRGOECrUadzWWR1vRpFke7PQuNp+fVAuZ2Y
+js1w4ow7/mbBodujDfh2fLsv/kmoRTQlWcN2S9rfbKU5okq1qB0JDqnQjnRQVfsF
++UEr1kQ+BoHtPvxBg9pgS6N4xrgvntpBMKLHXPuCJDH7VcZbxxbnT7HBmgkPll19
+qkpTEtc77QDvPhD4SSpnpPK6bnlTLOjEG4SQejoB8IJIXYQ9Z+VejfAiVrXXSGvn
+MF2o4rAv45iXIroYwSftXLzR3txULQ==
+=0ngH
+-----END PGP SIGNATURE-----