From 7d1bfd80ac23e94c5954a1a668700accecc9c65c Mon Sep 17 00:00:00 2001
From: sgrampone <sgrampone@genexus.com>
Date: Tue, 25 Nov 2025 14:21:18 -0300
Subject: [PATCH] Bump common-compress to version 1.28.0 (latest) and overwrite
 commons-lang3 on azureblob

---
 gxcloudstorage-azureblob/pom.xml | 6 ++++++
 gxcompress/pom.xml               | 2 +-
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/gxcloudstorage-azureblob/pom.xml b/gxcloudstorage-azureblob/pom.xml
index 09980d77b..ae2d9af06 100644
--- a/gxcloudstorage-azureblob/pom.xml
+++ b/gxcloudstorage-azureblob/pom.xml
@@ -42,5 +42,11 @@
             <artifactId>jackson-core</artifactId>
             <version>${jackson.version}</version>
         </dependency>
+        <!-- overwrite azure-storage commons-lang3 dependency due to CVEs -->
+        <dependency>
+            <groupId>org.apache.commons</groupId>
+            <artifactId>commons-lang3</artifactId>
+            <version>${commons.lang3.version}</version>
+        </dependency>
 	</dependencies>
 </project>
diff --git a/gxcompress/pom.xml b/gxcompress/pom.xml
index ebeb9b276..03b08d325 100644
--- a/gxcompress/pom.xml
+++ b/gxcompress/pom.xml
@@ -16,7 +16,7 @@
         <dependency>
             <groupId>org.apache.commons</groupId>
             <artifactId>commons-compress</artifactId>
-            <version>1.27.1</version>
+            <version>1.28.0</version>
         </dependency>
         <dependency>
             <groupId>org.tukaani</groupId>