Remove commons-validator as a dependency

Author: oschwald

CHANGELOG.md

@@ -1,6 +1,15 @@
 CHANGELOG
 =========
 
+3.8.0
+------------------
+
+* `commons-validator` has been removed as a dependency. This module now does
+  its own email and domain name validation. This was done to reduce the number
+  of dependencies and any security vulnerabilities in them. The new email
+  validation of the local part is somewhat more lax than the previous
+  validation.
+
 3.7.2 (2025-05-28)
 ------------------
 

pom.xml

@@ -62,11 +62,6 @@
             <artifactId>geoip2</artifactId>
             <version>4.3.1</version>
         </dependency>
-        <dependency>
-            <groupId>commons-validator</groupId>
-            <artifactId>commons-validator</artifactId>
-            <version>1.9.0</version>
-        </dependency>
         <dependency>
             <groupId>org.junit.jupiter</groupId>
             <artifactId>junit-jupiter</artifactId>

src/main/java/module-info.java

@@ -7,7 +7,6 @@
     requires com.fasterxml.jackson.databind;
     requires com.fasterxml.jackson.datatype.jsr310;
     requires transitive com.maxmind.geoip2;
-    requires org.apache.commons.validator;
     requires java.net.http;
 
     exports com.maxmind.minfraud;