Merge pull request #10 from configcat/secu-202508

Security fix - 2025-08

Author: novalisdenahi

build.gradle

@@ -22,7 +22,7 @@ plugins {
 }
 
 group = 'com.configcat'
-version = '2.0.0'
+version = '2.0.1'
 
 sourceCompatibility = JavaVersion.VERSION_1_8
 targetCompatibility = JavaVersion.VERSION_1_8

build.sbt

@@ -13,7 +13,7 @@ lazy val root = (project in file(".")).
       "com.squareup.okhttp3" % "okhttp" % "4.12.0",
       "com.squareup.okhttp3" % "logging-interceptor" % "4.12.0",
       "com.google.code.gson" % "gson" % "2.9.1",
-      "org.apache.commons" % "commons-lang3" % "3.12.0",
+      "org.apache.commons" % "commons-lang3" % "3.18.0",
       "javax.ws.rs" % "jsr311-api" % "1.1.1",
       "javax.ws.rs" % "javax.ws.rs-api" % "2.1.1",
       "org.openapitools" % "jackson-databind-nullable" % "0.2.6",

gradle/libs.versions.toml

@@ -12,7 +12,7 @@ javax-jsr-api = "1.1.1"
 javax-rs-api = "2.1.1"
 jackson-databind-nullable = "0.2.6"
 jackson-core = "2.15.0-rc1"
-commons-lang3 = "3.12.0"
+commons-lang3 = "3.18.0"
 jakarta_annotation_version = "1.3.5"
 junit-jupiter = "5.10.2"
 mockito-core = "3.12.4"