New Release of Velocity with updated dependencies

--_000_AM8PR06MB7698C2A6D6DB9D04FE15AFBCDC17AAM8PR06MB7698eurp_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

DB Intern / DB internal

Dear all,

as a happy Apache Velocity user I realised these days that there is a secur=
ity issue related to the dependency org.apache.commons:commons-lang3:jar:3.=
17.0 (https://github.com/advisories/GHSA-j288-q9x7-2f5v) in velocity-engine=
-core. This dependency has already been updated in source control, but not =
released so far. Is there already a plan, when the next release is going to=
 be performed?


Many thanks,

Michael

P.S.:  If this message arrives for the second time this is my fault. I firs=
t sent it without subscribing to the list which I then did. However, I coul=
d not see my first email in the archive.

________________________________

Pflichtangaben anzeigen<https://www.deutschebahn.com/pflichtangaben/2025090=
1>

N?here Informationen zur Datenverarbeitung im DB-Konzern finden Sie hier: h=
ttps://www.deutschebahn.com/de/konzern/datenschutz

--_000_AM8PR06MB7698C2A6D6DB9D04FE15AFBCDC17AAM8PR06MB7698eurp_--