From 5bd9485854689dde6dd282e54d1dc84ddc395837 Mon Sep 17 00:00:00 2001
From: nva <anovikov@apache.org>
Date: Fri, 16 Jan 2026 14:54:09 +0700
Subject: [PATCH 1/5] IGNITE-27532 Get rid of the use of vulnerable
 commons-lang, Spring.

---
 modules/spring-data-ext/examples/pom.xml    |  4 ++--
 modules/spring-data-ext/spring-data/pom.xml | 10 +++++-----
 modules/spring-session-ext/pom.xml          |  6 +++---
 modules/spring-tx-ext/examples/pom.xml      |  6 +++---
 modules/spring-tx-ext/spring-tx/pom.xml     |  6 +++---
 parent-internal/pom.xml                     |  7 ++++---
 6 files changed, 20 insertions(+), 19 deletions(-)

diff --git a/modules/spring-data-ext/examples/pom.xml b/modules/spring-data-ext/examples/pom.xml
index 27d3a452f..e5d593445 100644
--- a/modules/spring-data-ext/examples/pom.xml
+++ b/modules/spring-data-ext/examples/pom.xml
@@ -65,13 +65,13 @@
         <dependency>
             <groupId>org.springframework</groupId>
             <artifactId>spring-tx</artifactId>
-            <version>${spring61.version}</version>
+            <version>${spring6.version}</version>
         </dependency>
 
         <dependency>
             <groupId>org.springframework</groupId>
             <artifactId>spring-context</artifactId>
-            <version>${spring61.version}</version>
+            <version>${spring6.version}</version>
         </dependency>
 
         <dependency>
diff --git a/modules/spring-data-ext/spring-data/pom.xml b/modules/spring-data-ext/spring-data/pom.xml
index 2ed39979a..2c784c4f2 100644
--- a/modules/spring-data-ext/spring-data/pom.xml
+++ b/modules/spring-data-ext/spring-data/pom.xml
@@ -59,14 +59,14 @@
         <dependency>
             <groupId>org.springframework</groupId>
             <artifactId>spring-context</artifactId>
-            <version>${spring61.version}</version>
+            <version>${spring6.version}</version>
             <scope>provided</scope>
         </dependency>
 
         <dependency>
             <groupId>org.springframework</groupId>
             <artifactId>spring-tx</artifactId>
-            <version>${spring61.version}</version>
+            <version>${spring6.version}</version>
             <scope>provided</scope>
         </dependency>
 
@@ -85,9 +85,9 @@
         </dependency>
 
         <dependency>
-            <groupId>commons-lang</groupId>
-            <artifactId>commons-lang</artifactId>
-            <version>${commons.lang.version}</version>
+            <groupId>org.apache.commons</groupId>
+            <artifactId>commons-lang3</artifactId>
+            <version>${commons.lang3.version}</version>
         </dependency>
 
         <dependency>
diff --git a/modules/spring-session-ext/pom.xml b/modules/spring-session-ext/pom.xml
index b80fcd00d..7c6d41db0 100644
--- a/modules/spring-session-ext/pom.xml
+++ b/modules/spring-session-ext/pom.xml
@@ -37,8 +37,8 @@
         <maven.compiler.source>17</maven.compiler.source>
         <maven.compiler.target>17</maven.compiler.target>
 
-        <spring.session.version>3.2.2</spring.session.version>
-        <spring.security.version>6.2.4</spring.security.version>
+        <spring.session.version>3.5.4</spring.session.version>
+        <spring.security.version>6.5.7</spring.security.version>
         <jakarta.annotation.version>3.0.0</jakarta.annotation.version>
         <assertj.version>3.20.0</assertj.version>
         <junit.jupiter.version>5.10.2</junit.jupiter.version>
@@ -51,7 +51,7 @@
             <dependency>
                 <groupId>org.springframework</groupId>
                 <artifactId>spring-framework-bom</artifactId>
-                <version>${spring61.version}</version>
+                <version>${spring6.version}</version>
                 <type>pom</type>
                 <scope>import</scope>
             </dependency>
diff --git a/modules/spring-tx-ext/examples/pom.xml b/modules/spring-tx-ext/examples/pom.xml
index b79e4d9b7..4d057f7d2 100644
--- a/modules/spring-tx-ext/examples/pom.xml
+++ b/modules/spring-tx-ext/examples/pom.xml
@@ -69,19 +69,19 @@
         <dependency>
             <groupId>org.springframework</groupId>
             <artifactId>spring-context</artifactId>
-            <version>${spring61.version}</version>
+            <version>${spring6.version}</version>
         </dependency>
 
         <dependency>
             <groupId>org.springframework</groupId>
             <artifactId>spring-jdbc</artifactId>
-            <version>${spring61.version}</version>
+            <version>${spring6.version}</version>
         </dependency>
 
         <dependency>
             <groupId>org.springframework</groupId>
             <artifactId>spring-tx</artifactId>
-            <version>${spring61.version}</version>
+            <version>${spring6.version}</version>
         </dependency>
 
         <dependency>
diff --git a/modules/spring-tx-ext/spring-tx/pom.xml b/modules/spring-tx-ext/spring-tx/pom.xml
index 6ee594898..c17c88fb3 100644
--- a/modules/spring-tx-ext/spring-tx/pom.xml
+++ b/modules/spring-tx-ext/spring-tx/pom.xml
@@ -57,21 +57,21 @@
         <dependency>
             <groupId>org.springframework</groupId>
             <artifactId>spring-context</artifactId>
-            <version>${spring61.version}</version>
+            <version>${spring6.version}</version>
             <scope>provided</scope>
         </dependency>
 
         <dependency>
             <groupId>org.springframework</groupId>
             <artifactId>spring-tx</artifactId>
-            <version>${spring61.version}</version>
+            <version>${spring6.version}</version>
             <scope>provided</scope>
         </dependency>
 
         <dependency>
             <groupId>org.springframework</groupId>
             <artifactId>spring-jdbc</artifactId>
-            <version>${spring61.version}</version>
+            <version>${spring6.version}</version>
             <optional>true</optional>
         </dependency>
 
diff --git a/parent-internal/pom.xml b/parent-internal/pom.xml
index e6f5e7012..869d2bea3 100644
--- a/parent-internal/pom.xml
+++ b/parent-internal/pom.xml
@@ -35,13 +35,14 @@
     <version>1</version>
 
     <properties>
-        <spring-boot.version>3.2.12</spring-boot.version>
-        <spring.data.version>3.2.12</spring.data.version>
-        <spring61.version>6.1.15</spring61.version>
+        <spring-boot.version>3.5.9</spring-boot.version>
+        <spring.data.version>3.5.7</spring.data.version>
+        <spring6.version>6.2.15</spring6.version>
         <activemq.version>5.12.0</activemq.version>
         <aspectj.version>1.8.13</aspectj.version>
         <embedded.postgres.version>2.0.3</embedded.postgres.version>
         <commons.dbcp2.version>2.13.0</commons.dbcp2.version>
+        <commons.lang3.version>3.20.0</commons.lang3.version>
 
         <!--
             NOTE: The dependency versions below must be changed in the release branch up to

From 0bbe007336f1fb23882f1dc5351367fb41f32b74 Mon Sep 17 00:00:00 2001
From: nva <anovikov@apache.org>
Date: Fri, 16 Jan 2026 15:35:19 +0700
Subject: [PATCH 2/5] IGNITE-27532 Fixed compilation.

---
 .../springdata/repository/query/IgniteRepositoryQuery.java    | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/modules/spring-data-ext/spring-data/src/main/java/org/apache/ignite/springdata/repository/query/IgniteRepositoryQuery.java b/modules/spring-data-ext/spring-data/src/main/java/org/apache/ignite/springdata/repository/query/IgniteRepositoryQuery.java
index ff2aaf6ec..1fdf9438c 100644
--- a/modules/spring-data-ext/spring-data/src/main/java/org/apache/ignite/springdata/repository/query/IgniteRepositoryQuery.java
+++ b/modules/spring-data-ext/spring-data/src/main/java/org/apache/ignite/springdata/repository/query/IgniteRepositoryQuery.java
@@ -38,8 +38,8 @@
 import java.util.stream.Collectors;
 import java.util.stream.Stream;
 import javax.cache.Cache;
-import org.apache.commons.lang.ArrayUtils;
-import org.apache.commons.lang.reflect.FieldUtils;
+import org.apache.commons.lang3.ArrayUtils;
+import org.apache.commons.lang3.reflect.FieldUtils;
 import org.apache.ignite.IgniteException;
 import org.apache.ignite.cache.query.FieldsQueryCursor;
 import org.apache.ignite.cache.query.Query;

From 3338893e19de7fb505237ba9eac097f580dcee8b Mon Sep 17 00:00:00 2001
From: nva <anovikov@apache.org>
Date: Fri, 16 Jan 2026 17:22:33 +0700
Subject: [PATCH 3/5] IGNITE-27532 Fixed config.

---
 .../ignite/cache/spring/spring-caching-ignite-spring-bean.xml   | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/modules/spring-cache-ext/src/test/java/org/apache/ignite/cache/spring/spring-caching-ignite-spring-bean.xml b/modules/spring-cache-ext/src/test/java/org/apache/ignite/cache/spring/spring-caching-ignite-spring-bean.xml
index 2671a5ddb..3331a89af 100644
--- a/modules/spring-cache-ext/src/test/java/org/apache/ignite/cache/spring/spring-caching-ignite-spring-bean.xml
+++ b/modules/spring-cache-ext/src/test/java/org/apache/ignite/cache/spring/spring-caching-ignite-spring-bean.xml
@@ -27,6 +27,8 @@
     <bean id="mySpringBean" class="org.apache.ignite.IgniteSpringBean">
         <property name="configuration">
             <bean id="ignite.cfg" class="org.apache.ignite.configuration.IgniteConfiguration">
+                <property name="localHost" value="127.0.0.1"/>
+
                 <property name="peerClassLoadingEnabled" value="true"/>
                 <property name="igniteInstanceName" value="testGrid"/>
 

From 75bb192cc2be2a54e4106c3f430b18f97d0a5574 Mon Sep 17 00:00:00 2001
From: nva <anovikov@apache.org>
Date: Fri, 16 Jan 2026 17:41:26 +0700
Subject: [PATCH 4/5] IGNITE-27532 Fixed script name.

---
 DEVNOTES.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/DEVNOTES.md b/DEVNOTES.md
index 2bf1bca65..b3d47b498 100644
--- a/DEVNOTES.md
+++ b/DEVNOTES.md
@@ -71,11 +71,11 @@ of the Apache Software Foundation release process for better understanding the w
    git push origin release/ignite-aws-ext-1.0.0
    ```
 
-- Update Extension parent reference version and the extension module version using the `scripts/update-versions.sh`.
+- Update Extension parent reference version and the extension module version using the `scripts/vote_\[git\]_update_versions.sh`.
 
    ```shell
-   # Usage: scripts/update-versions.sh [<ignite-parent-version>] <module-path> <module-release-version>
-   scripts/update-versions.sh [2.13.0] modules/asw-ext/ 1.0.0
+   # Usage: scripts/vote_\[git\]_update_versions.sh [<ignite-parent-version>] <module-path> <module-release-version>
+   scripts/vote_\[git\]_update_versions.sh [2.13.0] modules/asw-ext/ 1.0.0
    ```
   
 - Run the [Extension Prepare Release Candidate][7] GitHub Action using the release branch as job source 

From ac6eb54e2a7c0be5a1ab2527bed47f12ba14b442 Mon Sep 17 00:00:00 2001
From: nva <anovikov@apache.org>
Date: Mon, 19 Jan 2026 09:57:41 +0700
Subject: [PATCH 5/5] IGNITE-27532 Fixed tests.

---
 .../autoconfigure/IgniteClientAutoConfigureTest.java | 12 ++++++------
 modules/spring-data-ext/examples/pom.xml             |  1 -
 modules/spring-data-ext/spring-data/pom.xml          |  1 -
 .../spring-transactions-ignite-spring-bean.xml       |  6 ++++++
 .../java/org/apache/ignite/spring-injection-test.xml |  6 ++++++
 5 files changed, 18 insertions(+), 8 deletions(-)

diff --git a/modules/spring-boot-thin-client-autoconfigure-ext/spring-boot-thin-client-autoconfigure/src/test/java/org/apache/ignite/springframework/boot/autoconfigure/IgniteClientAutoConfigureTest.java b/modules/spring-boot-thin-client-autoconfigure-ext/spring-boot-thin-client-autoconfigure/src/test/java/org/apache/ignite/springframework/boot/autoconfigure/IgniteClientAutoConfigureTest.java
index 642768b32..97d321121 100644
--- a/modules/spring-boot-thin-client-autoconfigure-ext/spring-boot-thin-client-autoconfigure/src/test/java/org/apache/ignite/springframework/boot/autoconfigure/IgniteClientAutoConfigureTest.java
+++ b/modules/spring-boot-thin-client-autoconfigure-ext/spring-boot-thin-client-autoconfigure/src/test/java/org/apache/ignite/springframework/boot/autoconfigure/IgniteClientAutoConfigureTest.java
@@ -38,7 +38,6 @@
 
 import static org.assertj.core.api.Assertions.assertThat;
 import static org.junit.Assert.assertEquals;
-import static org.junit.jupiter.api.Assertions.assertTrue;
 
 /** Tests {@link IgniteClientAutoConfiguration} feature. */
 @ExtendWith(SpringExtension.class)
@@ -81,7 +80,7 @@ public void beforeTest() {
 
     /** Tests that Ignite node start without explicit configuration. */
     @Test
-    public void testIgniteClientStarts() throws Exception {
+    public void testIgniteClientStarts() {
         contextRunner
             .withPropertyValues("ignite-client.addresses=" + DEFAULT_ADDR)
             .run(this::checkContext);
@@ -89,7 +88,7 @@ public void testIgniteClientStarts() throws Exception {
 
     /** Tests that Ignite node will use configuration provided in {@link BeanFactory}. */
     @Test
-    public void testIgniteClientUseProvidedConfiguration() throws Exception {
+    public void testIgniteClientUseProvidedConfiguration() {
         contextRunner
             .withBean(ClientConfiguration.class, () -> new ClientConfiguration().setAddresses(DEFAULT_ADDR))
             .run(this::checkContext);
@@ -97,7 +96,7 @@ public void testIgniteClientUseProvidedConfiguration() throws Exception {
 
     /** Tests that Spring will use {@link IgniteClientConfigurer} to customize {@link ClientConfiguration}. */
     @Test
-    public void testIgniteClientConfigurer() throws Exception {
+    public void testIgniteClientConfigurer() {
         contextRunner
             .withBean(IgniteClientConfigurer.class, () -> cfg -> cfg.setAddresses(DEFAULT_ADDR))
             .run(this::checkContext);
@@ -108,7 +107,7 @@ public void testIgniteClientConfigurer() throws Exception {
      * provided by {@link IgniteClientConfigurer}.
      */
     @Test
-    public void testApplicationPropertiesOverridesConfigurer() throws Exception {
+    public void testApplicationPropertiesOverridesConfigurer() {
         contextRunner
             .withPropertyValues("ignite-client.addresses=" + DEFAULT_ADDR)
             .withBean(IgniteClientConfigurer.class,
@@ -130,6 +129,7 @@ private void checkContext(AssertableApplicationContext context) {
 
         IgniteClient cli = context.getBean(IgniteClient.class);
 
-        assertTrue(CACHES.containsAll(cli.cacheNames()));
+        assertThat(cli.cacheNames())
+            .containsExactlyInAnyOrderElementsOf(CACHES);
     }
 }
diff --git a/modules/spring-data-ext/examples/pom.xml b/modules/spring-data-ext/examples/pom.xml
index e5d593445..8e126a199 100644
--- a/modules/spring-data-ext/examples/pom.xml
+++ b/modules/spring-data-ext/examples/pom.xml
@@ -33,7 +33,6 @@
     </parent>
 
     <artifactId>ignite-spring-data-ext-examples</artifactId>
-    <version>${project.parent.version}</version>
 
     <url>https://ignite.apache.org</url>
 
diff --git a/modules/spring-data-ext/spring-data/pom.xml b/modules/spring-data-ext/spring-data/pom.xml
index 2c784c4f2..8c3c157c1 100644
--- a/modules/spring-data-ext/spring-data/pom.xml
+++ b/modules/spring-data-ext/spring-data/pom.xml
@@ -33,7 +33,6 @@
     </parent>
 
     <artifactId>ignite-spring-data-ext</artifactId>
-    <version>${project.parent.version}</version>
 
     <url>https://ignite.apache.org</url>
 
diff --git a/modules/spring-tx-ext/spring-tx/src/test/java/config/spring-transactions-ignite-spring-bean.xml b/modules/spring-tx-ext/spring-tx/src/test/java/config/spring-transactions-ignite-spring-bean.xml
index 69918b102..bbf5ab151 100644
--- a/modules/spring-tx-ext/spring-tx/src/test/java/config/spring-transactions-ignite-spring-bean.xml
+++ b/modules/spring-tx-ext/spring-tx/src/test/java/config/spring-transactions-ignite-spring-bean.xml
@@ -41,6 +41,12 @@
                     </list>
                 </property>
 
+                <property name="transactionConfiguration">
+                    <bean class="org.apache.ignite.configuration.TransactionConfiguration">
+                        <property name="txSerializableEnabled" value="false"/>
+                    </bean>
+                </property>
+
                 <property name="localHost" value="127.0.0.1"/>
 
                 <property name="discoverySpi">
diff --git a/modules/spring-tx-ext/spring-tx/src/test/java/org/apache/ignite/spring-injection-test.xml b/modules/spring-tx-ext/spring-tx/src/test/java/org/apache/ignite/spring-injection-test.xml
index 14072ff09..b4cafdb6a 100644
--- a/modules/spring-tx-ext/spring-tx/src/test/java/org/apache/ignite/spring-injection-test.xml
+++ b/modules/spring-tx-ext/spring-tx/src/test/java/org/apache/ignite/spring-injection-test.xml
@@ -38,6 +38,12 @@
 
         <property name="localHost" value="127.0.0.1"/>
 
+        <property name="transactionConfiguration">
+            <bean class="org.apache.ignite.configuration.TransactionConfiguration">
+                <property name="txSerializableEnabled" value="false"/>
+            </bean>
+        </property>
+
         <property name="igniteInstanceName" value="springInjectionTest"/>
     </bean>
 </beans>