Upgrade dependencies:

re2j: 1.7 to 1.8
commons-io: 2.18 to 2.20
lang3: 3.13 to 3.18 (fix CVE-2025-48924)
hsqldb: 2.7.2 to 2.7.4

Author: arcadmlafon

bundles/aev.core.ui.rcp/META-INF/MANIFEST.MF

@@ -10,7 +10,9 @@ Require-Bundle: org.eclipse.core.runtime,
  com.arcadsoftware.aev.core.ui,
  org.eclipse.core.filesystem,
  org.eclipse.ui.ide,
- org.eclipse.ui.forms
+ org.eclipse.ui.forms,
+ org.apache.commons.commons-io;bundle-version="2.20.0",
+ org.apache.commons.lang3;bundle-version="3.18.0"
 Bundle-Vendor: ARCAD Software
 Export-Package: com.arcadsoftware.aev.core.ui.common,
  com.arcadsoftware.aev.core.ui.rcp.dialogs,
@@ -19,8 +21,6 @@ Bundle-ActivationPolicy: lazy
 Bundle-ClassPath: .
 Bundle-RequiredExecutionEnvironment: JavaSE-1.8
 Import-Package: net.sf.jmimemagic,
- org.apache.commons.io,
- org.apache.commons.lang3;version="3.9.0",
  org.osgi.service.component.annotations;resolution:=optional
 Service-Component: OSGI-INF/com.arcadsoftware.aev.core.ui.rcp.dialogs.RCPDialogConstantFiller.xml,
  OSGI-INF/com.arcadsoftware.aev.core.ui.rcp.tools.FileManagerProvider.xml

bundles/aev.core.ui/META-INF/MANIFEST.MF

@@ -53,7 +53,7 @@ Require-Bundle: com.arcadsoftware.aev.core,
  org.eclipse.ui.forms;resolution:=optional,
  org.eclipse.rap.jface;resolution:=optional,
  org.eclipse.rap.ui;resolution:=optional,
- org.eclipse.rap.ui.forms;resolution:=optional
+ org.eclipse.rap.ui.forms;resolution:=optional,
+ org.apache.commons.lang3;bundle-version="3.18.0"
 Bundle-RequiredExecutionEnvironment: JavaSE-1.8
 Bundle-ActivationPolicy: lazy
-Import-Package: org.apache.commons.lang3

bundles/aev.core/META-INF/MANIFEST.MF

@@ -17,12 +17,10 @@ Export-Package: com.arcadsoftware.aev.core,
  com.arcadsoftware.aev.core.osgi,
  com.arcadsoftware.aev.core.tools
 Require-Bundle: org.eclipse.core.runtime,
- org.eclipse.core.resources
+ org.eclipse.core.resources,
+ org.apache.commons.lang3;bundle-version="3.18.0"
 Bundle-RequiredExecutionEnvironment: JavaSE-1.8
 Import-Package: com.google.re2j,
- org.apache.commons.lang3;version="[3.6.0,4.0.0)",
- org.apache.commons.lang3.math;version="[3.6.0,4.0.0)",
- org.apache.commons.lang3.time;version="[3.6.0,4.0.0)",
  org.osgi.service.component,
  org.osgi.service.component.annotations;resolution:=optional,
  org.w3c.dom

bundles/aev.list.manager/META-INF/MANIFEST.MF

@@ -18,12 +18,9 @@ Export-Package: com.arcadsoftware.mmk.lists,
  com.arcadsoftware.mmk.lists.managers,
  com.arcadsoftware.mmk.lists.metadata,
  com.arcadsoftware.mmk.lists.test
-Import-Package: com.arcadsoftware.ae.core.exceptions,
- com.arcadsoftware.ae.core.logger,
- com.arcadsoftware.ae.core.translation,
- com.arcadsoftware.ae.core.utils,
- com.arcadsoftware.aev.core.messages,
- org.apache.commons.io;version="2.8.0"
+Require-Bundle: com.arcadsoftware.aev.core;bundle-version="12.0.6",
+ com.arcadsoftware.aev.core.services;bundle-version="12.0.6",
+ org.apache.commons.commons-io;bundle-version="2.20.0"
 Bundle-ClassPath: .,
  libs/org.apache.servicemix.bundles.xpp3-1.1.4c_7.jar,
  libs/hsqldb-2.7.1-jdk8.jar

releng/aev.platform/com.arcadsoftware.aev.platform.target

@@ -29,13 +29,13 @@
 				<dependency>
 					<groupId>com.google.re2j</groupId>
 					<artifactId>re2j</artifactId>
-					<version>1.7</version>
+					<version>1.8</version>
 					<type>jar</type>
 				</dependency>
 				<dependency>
 					<groupId>commons-io</groupId>
 					<artifactId>commons-io</artifactId>
-					<version>2.18.0</version>
+					<version>2.20.0</version>
 					<type>jar</type>
 				</dependency>
 				<dependency>
@@ -47,13 +47,13 @@
 				<dependency>
 					<groupId>org.apache.commons</groupId>
 					<artifactId>commons-lang3</artifactId>
-					<version>3.13.0</version>
+					<version>3.18.0</version>
 					<type>jar</type>
 				</dependency>
 				<dependency>
 					<groupId>org.hsqldb</groupId>
 					<artifactId>hsqldb</artifactId>
-					<version>2.7.2</version>
+					<version>2.7.4</version>
 					<type>jar</type>
 				</dependency>
 			</dependencies>