From cb39d4d73b33badc85ea4749e08968dc57f73c7c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 16 May 2026 07:03:39 +0000
Subject: [PATCH 1/2] Bump org.apache.commons:commons-configuration2 from
 2.14.0 to 2.15.0

Bumps org.apache.commons:commons-configuration2 from 2.14.0 to 2.15.0.

---
updated-dependencies:
- dependency-name: org.apache.commons:commons-configuration2
  dependency-version: 2.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 172dd9ff9fa..1ebea6a7806 100644
--- a/pom.xml
+++ b/pom.xml
@@ -51,7 +51,7 @@
     <commons-codec.version>1.22.0</commons-codec.version>
     <commons-collections.version>4.5.0</commons-collections.version>
     <commons-compress.version>1.28.0</commons-compress.version>
-    <commons-configuration2.version>2.14.0</commons-configuration2.version>
+    <commons-configuration2.version>2.15.0</commons-configuration2.version>
     <commons-csv.version>1.14.1</commons-csv.version>
     <commons-fileupload.version>1.6.0</commons-fileupload.version>
     <commons-io.version>2.22.0</commons-io.version>

From a36d9534a55b2d2af492e0157df4c04ab69c4d7b Mon Sep 17 00:00:00 2001
From: "Doroszlai, Attila" <adoroszlai@apache.org>
Date: Sat, 16 May 2026 11:15:18 +0200
Subject: [PATCH 2/2] commons-configuration2 2.15.0 needs commons-io

- https://github.com/apache/commons-configuration/commit/c9be15366278781477c7ba643938214e0c7326c7
- https://github.com/apache/commons-configuration/commit/f4118174063a576e8f442ef0639cf4279cd71ee2
---
 hadoop-hdds/hadoop-dependency-client/pom.xml | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/hadoop-hdds/hadoop-dependency-client/pom.xml b/hadoop-hdds/hadoop-dependency-client/pom.xml
index e3801003e69..25032b40eb4 100644
--- a/hadoop-hdds/hadoop-dependency-client/pom.xml
+++ b/hadoop-hdds/hadoop-dependency-client/pom.xml
@@ -100,10 +100,6 @@
             <groupId>commons-collections</groupId>
             <artifactId>commons-collections</artifactId>
           </exclusion>
-          <exclusion>
-            <groupId>commons-io</groupId>
-            <artifactId>commons-io</artifactId>
-          </exclusion>
           <exclusion>
             <groupId>commons-logging</groupId>
             <artifactId>commons-logging</artifactId>