[SCA] Security upgrade @org.apache.commons:commons-lang3 from 3.11 to 3.20.0

[gwnlng]

This is a PR from Snyk, initiated by the Security team, to fix 1 vulnerabilities in the dependencies of this project.

Snyk changed the following file(s):

• log4shell-goof/log4shell-server/pom.xml

Important

• This PR was automatically generated by our security tool to help you fix known vulnerabilities in your project's third-party libraries more efficiently. However, there is a possibility that these changes could introduce functional regressions or breakages. Please ensure you test this PR thoroughly before merging.
• If you have any questions or concerns, please seek support in the #sca-support Slack channel.

References:

1. Latest project report in Snyk
2. How to access Snyk via SSO?
3. Snyk knowledge base

[gwnlng]

This upgrade of org.apache.commons:commons-lang3 from version 3.11 to 3.20.0 introduces several API deprecations that developers should be aware of, but no immediate breaking changes.

Key Changes:

• StringUtils Deprecations (from v3.18.0): Several static methods in StringUtils have been deprecated. The library now favors using singleton instances for case-sensitive (Strings.CS) or case-insensitive (Strings.CI) operations. While your code will still compile and run, it will generate deprecation warnings.
• Constructor Deprecations (from v3.15.0): Constructors for several utility classes (like ArraySort, CharEncoding, Conversion, EntityArrays) have been deprecated to enforce the pattern of not instantiating utility classes.
• Java Version: The minimum required Java version remains Java 8, which was the same for version 3.11.

Recommendation:
While this upgrade is not expected to break your application, it is recommended to review the usage of StringUtils and plan to migrate to the new Strings.CS and Strings.CI APIs to eliminate deprecation warnings and align with the library's intended design.

Source: Apache Commons Lang Release Notes

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

[gwnlng]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.