git: aa90efeb409a - main - devel/apache-commons-configuration: deprecate

From: Ronald Klop <ronald_at_FreeBSD.org>
Date: Thu, 26 Feb 2026 10:20:41 UTC
The branch main has been updated by ronald:

URL: https://cgit.FreeBSD.org/ports/commit/?id=aa90efeb409a63622cd04109e6b35772f7a01353

commit aa90efeb409a63622cd04109e6b35772f7a01353
Author:     Ronald Klop <ronald@FreeBSD.org>
AuthorDate: 2026-02-26 10:10:10 +0000
Commit:     Ronald Klop <ronald@FreeBSD.org>
CommitDate: 2026-02-26 10:10:47 +0000

    devel/apache-commons-configuration: deprecate
    
    Multiple reasons to deprecate:
    https://commons.apache.org/proper/commons-configuration/#Commons_Configuration_1.x_and_2.x
    - 'The 1.x codebase no longer receives updates.'
    - 'Denial of service issues that rely on loading untrusted data from
      configuration files, or passing untrusted data to the API, are outside
      the scope of the 1.x security model and will not be fixed.'
    - Version 2 exists since 2016
    - the port just installs the jar, it does not build anything
    - nothing in the ports tree uses this
    - no maintainer
    
    Approved-by:    no maintainer
---
 devel/apache-commons-configuration/Makefile | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/devel/apache-commons-configuration/Makefile b/devel/apache-commons-configuration/Makefile
index 8815de3a7715..2a420da5a3f3 100644
--- a/devel/apache-commons-configuration/Makefile
+++ b/devel/apache-commons-configuration/Makefile
@@ -1,6 +1,6 @@
 PORTNAME=	commons-configuration
 PORTVERSION=	1.10
-PORTREVISION=	2
+PORTREVISION=	3
 CATEGORIES=	devel java
 MASTER_SITES=	APACHE_COMMONS_BINARIES
 PKGNAMEPREFIX=	apache-
@@ -12,6 +12,9 @@ WWW=		https://commons.apache.org/proper/commons-configuration/
 
 LICENSE=	APACHE20
 
+DEPRECATED=	'The 1.x codebase no longer receives updates. Denial of service issues...', no maintainer, no users in the ports tree, https://commons.apache.org/proper/commons-configuration/#Commons_Configuration_1.x_and_2.x
+EXPIRATION_DATE=	2026-07-26
+
 RUN_DEPENDS=	${JAVALIBDIR}/commons-beanutils.jar:java/apache-commons-beanutils \
 		${JAVALIBDIR}/commons-lang.jar:java/apache-commons-lang \
 		${JAVALIBDIR}/commons-logging.jar:java/apache-commons-logging