Jeff Thomas

FYI there is also now a 2.0.0-M1: https://commons.apache.org/proper/commons-beanutils/changes-report.html#a2.0.0-M1 But incompatible changes: "Change packaging from org.apache.commons.beanutils to org.apache.commons.beanutils2."

FYI there is also now a 2.0.0-M1: https://commons.apache.org/proper/commons-beanutils/changes-report.html#a2.0.0-M1

Hi Scott - it finally happened :P https://commons.apache.org/proper/commons-beanutils/changes-report.html#a1.10.0 https://github.com/apache/commons-beanutils/blob/rel/commons-beanutils-1.10.0/pom.xml Its not visible on MVN Repo yet and the BeanUtils page hasn't been fully updatetd yet but Gary sent out the Apache Release Email today. BeanUtils 1.10.0 is now using Commons Collections 4.5.0-M3 So... Happy New Year!!! :P

Hi Scott - it finally happened :P https://commons.apache.org/proper/commons-beanutils/changes-report.html#a1.10.0 https://github.com/apache/commons-beanutils/blob/rel/commons-beanutils-1.10.0/pom.xml Its not visible on MVN Repo yet and the BeanUtils page hasn't been fully updatetd yet but Gary sent out the Apache Release Email today. BeanUtils 1.10.0 is now using Commons Collections 4.5.0-M3

Hi Scott, I actually did message Gary a few months ago and ended up on the Apache mailing list. Gary Gregory announced yesterday via the mailing list that they expect to have a beanutils2 release-candidate in around one month.

Hi Scott, came here looking for this exact ticket because of the CVE vulnerability lighting up in my IDE. Just a hint, the last code changes in beanutils were just 3 days ago. Maybe it is possible to message the maintainer Gary Gregory about a release? :) The master was already switched to commons-collections4 back in September 2023.