Skip to content

[Backport 2.19] Bump tika from 2.9.2 to 3.2.2#19242

Merged
cwperks merged 5 commits intoopensearch-project:2.19from
prudhvigodithi:2.19-changes
Sep 5, 2025
Merged

[Backport 2.19] Bump tika from 2.9.2 to 3.2.2#19242
cwperks merged 5 commits intoopensearch-project:2.19from
prudhvigodithi:2.19-changes

Conversation

@prudhvigodithi
Copy link
Copy Markdown
Member

Description

Backport of #19125

Related Issues

Resolves https://nvd.nist.gov/vuln/detail/CVE-2025-54988

Check List

  • Functionality includes testing.
  • API changes companion pull request created, if applicable.
  • Public documentation issue/PR created, if applicable.

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

* Fix tika CVE

Signed-off-by: Prudhvi Godithi <pgodithi@amazon.com>

* Update CHANGELOG.md

Signed-off-by: Prudhvi Godithi <pgodithi@amazon.com>

* fix html parser

Signed-off-by: Prudhvi Godithi <pgodithi@amazon.com>

* fix html parser

Signed-off-by: Prudhvi Godithi <pgodithi@amazon.com>

* fix html parser

Signed-off-by: Prudhvi Godithi <pgodithi@amazon.com>

* Add license

Signed-off-by: Prudhvi Godithi <pgodithi@amazon.com>

* Add license

Signed-off-by: Prudhvi Godithi <pgodithi@amazon.com>

* Update checksums

Signed-off-by: Prudhvi Godithi <pgodithi@amazon.com>

* Update shas

Signed-off-by: Prudhvi Godithi <pgodithi@amazon.com>

* Add pdf box license

Signed-off-by: Prudhvi Godithi <pgodithi@amazon.com>

* Fix tests

Signed-off-by: Prudhvi Godithi <pgodithi@amazon.com>

* Update security fonts permission

Signed-off-by: Prudhvi Godithi <pgodithi@amazon.com>

* Add dummy fonts

Signed-off-by: Prudhvi Godithi <pgodithi@amazon.com>

* Upstream fetch

Signed-off-by: Prudhvi Godithi <pgodithi@amazon.com>

* Fix license check error

Signed-off-by: Prudhvi Godithi <pgodithi@amazon.com>

* Fix license check error

Signed-off-by: Prudhvi Godithi <pgodithi@amazon.com>

---------

Signed-off-by: Prudhvi Godithi <pgodithi@amazon.com>
@prudhvigodithi prudhvigodithi requested a review from a team as a code owner September 5, 2025 15:29
Signed-off-by: Prudhvi Godithi <pgodithi@amazon.com>
@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Sep 5, 2025

❌ Gradle check result for 7bdf4e8: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

Signed-off-by: Prudhvi Godithi <pgodithi@amazon.com>
Signed-off-by: Prudhvi Godithi <pgodithi@amazon.com>
@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Sep 5, 2025

❌ Gradle check result for 0273290: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

Signed-off-by: Prudhvi Godithi <pgodithi@amazon.com>
@prudhvigodithi prudhvigodithi self-assigned this Sep 5, 2025
@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Sep 5, 2025

❌ Gradle check result for 9ab3311: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Sep 5, 2025

❕ Gradle check result for 9ab3311: UNSTABLE

Please review all flaky tests that succeeded after retry and create an issue if one does not already exist to track the flaky failure.

@codecov
Copy link
Copy Markdown

codecov bot commented Sep 5, 2025

Codecov Report

❌ Patch coverage is 56.25000% with 7 lines in your changes missing coverage. Please review.
✅ Project coverage is 71.99%. Comparing base (859602f) to head (9ab3311).
⚠️ Report is 1 commits behind head on 2.19.

Files with missing lines Patch % Lines
...ava/org/opensearch/ingest/attachment/TikaImpl.java 56.25% 5 Missing and 2 partials ⚠️
Additional details and impacted files
@@             Coverage Diff              @@
##               2.19   #19242      +/-   ##
============================================
- Coverage     72.01%   71.99%   -0.02%     
+ Complexity    66000    65983      -17     
============================================
  Files          5341     5341              
  Lines        307244   307260      +16     
  Branches      44838    44842       +4     
============================================
- Hits         221253   221218      -35     
- Misses        67489    67584      +95     
+ Partials      18502    18458      -44     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@cwperks cwperks merged commit 7dfdd5b into opensearch-project:2.19 Sep 5, 2025
44 of 47 checks passed
sokdak pushed a commit to sokdak/OpenSearch that referenced this pull request Oct 15, 2025
* Bump tika from 2.9.2 to 3.2.2 (opensearch-project#19125)

* Fix tika CVE

Signed-off-by: Prudhvi Godithi <pgodithi@amazon.com>

* Update CHANGELOG.md

Signed-off-by: Prudhvi Godithi <pgodithi@amazon.com>

* fix html parser

Signed-off-by: Prudhvi Godithi <pgodithi@amazon.com>

* fix html parser

Signed-off-by: Prudhvi Godithi <pgodithi@amazon.com>

* fix html parser

Signed-off-by: Prudhvi Godithi <pgodithi@amazon.com>

* Add license

Signed-off-by: Prudhvi Godithi <pgodithi@amazon.com>

* Add license

Signed-off-by: Prudhvi Godithi <pgodithi@amazon.com>

* Update checksums

Signed-off-by: Prudhvi Godithi <pgodithi@amazon.com>

* Update shas

Signed-off-by: Prudhvi Godithi <pgodithi@amazon.com>

* Add pdf box license

Signed-off-by: Prudhvi Godithi <pgodithi@amazon.com>

* Fix tests

Signed-off-by: Prudhvi Godithi <pgodithi@amazon.com>

* Update security fonts permission

Signed-off-by: Prudhvi Godithi <pgodithi@amazon.com>

* Add dummy fonts

Signed-off-by: Prudhvi Godithi <pgodithi@amazon.com>

* Upstream fetch

Signed-off-by: Prudhvi Godithi <pgodithi@amazon.com>

* Fix license check error

Signed-off-by: Prudhvi Godithi <pgodithi@amazon.com>

* Fix license check error

Signed-off-by: Prudhvi Godithi <pgodithi@amazon.com>

---------

Signed-off-by: Prudhvi Godithi <pgodithi@amazon.com>

* Update changelog

Signed-off-by: Prudhvi Godithi <pgodithi@amazon.com>

* remove old sha

Signed-off-by: Prudhvi Godithi <pgodithi@amazon.com>

* Update changlog

Signed-off-by: Prudhvi Godithi <pgodithi@amazon.com>

* Remove ingestion-kafka

Signed-off-by: Prudhvi Godithi <pgodithi@amazon.com>

---------

Signed-off-by: Prudhvi Godithi <pgodithi@amazon.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants