From f9493ae7ac6375dd2e1b79844f51226bdf63d216 Mon Sep 17 00:00:00 2001
From: Jack Xu <xulingcom@126.com>
Date: Sat, 14 Feb 2026 11:18:28 +0800
Subject: [PATCH] fix: upgrade dependencies to address some cves

---
 data-agent-management/pom.xml | 50 +++++++++++++++++------------------
 pom.xml                       | 24 ++++++++++-------
 2 files changed, 40 insertions(+), 34 deletions(-)

diff --git a/data-agent-management/pom.xml b/data-agent-management/pom.xml
index 718394e9a..a816c4d75 100644
--- a/data-agent-management/pom.xml
+++ b/data-agent-management/pom.xml
@@ -324,31 +324,31 @@
             <artifactId>httpclient5</artifactId>
         </dependency>
 
-        <dependency>
-            <groupId>org.apache.commons</groupId>
-            <artifactId>commons-compress</artifactId>
-            <scope>compile</scope>
-        </dependency>
-        <dependency>
-            <groupId>com.dameng</groupId>
-            <artifactId>DmJdbcDriver18</artifactId>
-            <scope>runtime</scope>
-        </dependency>
-        <!-- EasyExcel for flexible Excel processing -->
-        <dependency>
-            <groupId>com.alibaba</groupId>
-            <artifactId>easyexcel</artifactId>
-            <version>3.3.4</version>
-        </dependency>
-        <!-- Docker Java Client -->
-        <dependency>
-            <groupId>com.github.docker-java</groupId>
-            <artifactId>docker-java-core</artifactId>
-        </dependency>
-        <dependency>
-            <groupId>com.github.docker-java</groupId>
-            <artifactId>docker-java-transport-zerodep</artifactId>
-        </dependency>
+    <dependency>
+      <groupId>org.apache.commons</groupId>
+      <artifactId>commons-compress</artifactId>
+      <scope>compile</scope>
+    </dependency>
+    <dependency>
+      <groupId>com.dameng</groupId>
+      <artifactId>DmJdbcDriver18</artifactId>
+      <scope>runtime</scope>
+    </dependency>
+    <!-- EasyExcel for flexible Excel processing -->
+    <dependency>
+      <groupId>com.alibaba</groupId>
+      <artifactId>easyexcel</artifactId>
+      <version>4.0.3</version>
+    </dependency>
+    <!-- Docker Java Client -->
+    <dependency>
+      <groupId>com.github.docker-java</groupId>
+      <artifactId>docker-java-core</artifactId>
+    </dependency>
+    <dependency>
+      <groupId>com.github.docker-java</groupId>
+      <artifactId>docker-java-transport-zerodep</artifactId>
+    </dependency>
 
     </dependencies>
     <repositories>
diff --git a/pom.xml b/pom.xml
index aa742d2fe..f2df8a736 100644
--- a/pom.xml
+++ b/pom.xml
@@ -21,7 +21,7 @@
 
   <properties>
     <!-- Spring AI Alibaba Version -->
-    <spring-ai-alibaba.version>1.1.0.0</spring-ai-alibaba.version>
+    <spring-ai-alibaba.version>1.1.2.0</spring-ai-alibaba.version>
     <!-- Spring AI Alibaba DataAgent Version -->
     <revision>1.0.0-SNAPSHOT</revision>
     <!-- DashScope SDK Version -->
@@ -35,11 +35,11 @@
     <maven.compiler.target>${java.version}</maven.compiler.target>
 
     <!-- Spring version -->
-    <spring-ai.version>1.1.0</spring-ai.version>
-    <spring-boot.version>3.4.8</spring-boot.version>
-    <springdoc-openapi.version>2.8.8</springdoc-openapi.version>
+    <spring-ai.version>1.1.2</spring-ai.version>
+    <spring-boot.version>3.5.10</spring-boot.version>
+    <springdoc-openapi.version>2.8.15</springdoc-openapi.version>
     <spring-javaformat-maven-plugin.version>0.0.39</spring-javaformat-maven-plugin.version>
-    <mybatis.version>3.0.4</mybatis.version>
+    <mybatis.version>3.0.5</mybatis.version>
 
     <!-- CheckStyle Maven Plugin -->
     <maven-checkstyle-plugin.version>3.5.0</maven-checkstyle-plugin.version>
@@ -50,13 +50,14 @@
     <!--        spotless version-->
     <spotless-maven-plugin.version>3.1.0</spotless-maven-plugin.version>
     <docker-java.version>3.5.3</docker-java.version>
-    <gpdb.version>3.0.0</gpdb.version>
+    <gpdb.version>4.0.2</gpdb.version>
     <druid.version>1.2.22</druid.version>
-    <postgresql.version>42.4.1</postgresql.version>
-    <commons-collections.version>3.2.1</commons-collections.version>
+    <postgresql.version>42.7.9</postgresql.version>
+    <commons-collections.version>3.2.2</commons-collections.version>
     <commons-io.version>2.18.0</commons-io.version>
+    <commons-lang3.version>3.20.0</commons-lang3.version>
     <commonmark.version>0.17.0</commonmark.version>
-    <httpclient5.version>5.4.1</httpclient5.version>
+    <httpclient5.version>5.5.2</httpclient5.version>
     <commons-compress.version>1.27.1</commons-compress.version>
     <netty-resolver-dns-native-macos.version>4.1.114.Final</netty-resolver-dns-native-macos.version>
     <netty-transport-native-epoll.version>4.1.114.Final</netty-transport-native-epoll.version>
@@ -139,6 +140,11 @@
         <artifactId>commons-io</artifactId>
         <version>${commons-io.version}</version>
       </dependency>
+      <dependency>
+        <groupId>org.apache.commons</groupId>
+        <artifactId>commons-lang3</artifactId>
+        <version>${commons-lang3.version}</version>
+      </dependency>
       <dependency>
         <groupId>com.atlassian.commonmark</groupId>
         <artifactId>commonmark</artifactId>