From 3e6ee9e44d0edb9a147a287fc5ecd6b20dfbdfae Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 25 Jun 2026 12:16:18 +0000
Subject: [PATCH 1/3] Bump com.github.jknack:handlebars in
 /custom-scripted-connector-bundler

Bumps [com.github.jknack:handlebars](https://github.com/jknack/handlebars.java) from 4.4.0 to 4.5.2.
- [Release notes](https://github.com/jknack/handlebars.java/releases)
- [Commits](https://github.com/jknack/handlebars.java/compare/v4.4.0...v4.5.2)

---
updated-dependencies:
- dependency-name: com.github.jknack:handlebars
  dependency-version: 4.5.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 custom-scripted-connector-bundler/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/custom-scripted-connector-bundler/pom.xml b/custom-scripted-connector-bundler/pom.xml
index a26e99cda..48b50eaef 100644
--- a/custom-scripted-connector-bundler/pom.xml
+++ b/custom-scripted-connector-bundler/pom.xml
@@ -94,7 +94,7 @@
         <dependency>
             <groupId>com.github.jknack</groupId>
             <artifactId>handlebars</artifactId>
-            <version>4.4.0</version>
+            <version>4.5.2</version>
         </dependency>
         <dependency>
             <groupId>org.slf4j</groupId>

From d883f144bda2d18a5db542c68d57a5a7991ed0fb Mon Sep 17 00:00:00 2001
From: Valera V Harseko <vharseko@3a-systems.ru>
Date: Thu, 25 Jun 2026 16:07:36 +0300
Subject: [PATCH 2/3] Pin commons-lang3 to 3.20.0 for handlebars 4.5.2 OSGi
 requirement

handlebars 4.5.x requires org.apache.commons.lang3 [3.20.0,4.0.0), but the
distribution shipped commons-lang3 3.18.0 (managed transitively), so the
handlebars OSGi bundle failed to resolve at runtime and OpenIDM did not start.
---
 legal/THIRDPARTYREADME.txt | 2 +-
 pom.xml                    | 6 ++++++
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/legal/THIRDPARTYREADME.txt b/legal/THIRDPARTYREADME.txt
index 0d97c222f..bca8469b7 100644
--- a/legal/THIRDPARTYREADME.txt
+++ b/legal/THIRDPARTYREADME.txt
@@ -59,7 +59,7 @@ Copyright: Copyright 2002-2013 The Apache Software Foundation
 Version: commons-io-2.4.jar
 Copyright: Copyright 2002-2012 The Apache Software Foundation
 
-Version: commons-lang3-3.18.jar
+Version: commons-lang3-3.20.jar
 Copyright: Copyright 2001-2013 The Apache Software Foundation
 
 Version: commons-beanutils-1.8.0.jar
diff --git a/pom.xml b/pom.xml
index bda365857..3f2b11253 100644
--- a/pom.xml
+++ b/pom.xml
@@ -400,6 +400,12 @@
                 <artifactId>commons-codec</artifactId>
                 <version>${apache.commons-codec.version}</version>
             </dependency>
+            <!-- handlebars 4.5.x requires commons-lang3 >= 3.20.0 (OSGi import [3.20.0,4.0.0)) -->
+            <dependency>
+                <groupId>org.apache.commons</groupId>
+                <artifactId>commons-lang3</artifactId>
+                <version>3.20.0</version>
+            </dependency>
 
             <!-- Java EE -->
             <dependency>

From d92f7883da6db540f47f926521daf36109054fb0 Mon Sep 17 00:00:00 2001
From: Valera V Harseko <vharseko@3a-systems.ru>
Date: Thu, 25 Jun 2026 18:37:27 +0300
Subject: [PATCH 3/3] Pin commons-text to 1.15.0 for handlebars 4.5.2 OSGi
 requirement

handlebars 4.5.x requires org.apache.commons.text [1.15.0,2.0.0), but the
commons parent manages commons-text to 1.12.0, so the version bundled into
the distribution exported org.apache.commons.text;version=1.12.0 and the
handlebars OSGi bundle failed to resolve at runtime (OpenIDM started but the
log contained a SEVERE FrameworkEvent ERROR, failing the CI smoke test).
---
 legal/THIRDPARTYREADME.txt | 3 +++
 pom.xml                    | 7 +++++++
 2 files changed, 10 insertions(+)

diff --git a/legal/THIRDPARTYREADME.txt b/legal/THIRDPARTYREADME.txt
index bca8469b7..d78c95a54 100644
--- a/legal/THIRDPARTYREADME.txt
+++ b/legal/THIRDPARTYREADME.txt
@@ -62,6 +62,9 @@ Copyright: Copyright 2002-2012 The Apache Software Foundation
 Version: commons-lang3-3.20.jar
 Copyright: Copyright 2001-2013 The Apache Software Foundation
 
+Version: commons-text-1.15.jar
+Copyright: Copyright 2014-2024 The Apache Software Foundation
+
 Version: commons-beanutils-1.8.0.jar
 Copyright: Copyright 2000-2008 The Apache Software Foundation
 
diff --git a/pom.xml b/pom.xml
index 3f2b11253..ac7aaf60e 100644
--- a/pom.xml
+++ b/pom.xml
@@ -406,6 +406,13 @@
                 <artifactId>commons-lang3</artifactId>
                 <version>3.20.0</version>
             </dependency>
+            <!-- handlebars 4.5.x requires commons-text >= 1.15.0 (OSGi import [1.15.0,2.0.0));
+                 the commons parent manages it to 1.12.0, so pin it up to satisfy the bundle -->
+            <dependency>
+                <groupId>org.apache.commons</groupId>
+                <artifactId>commons-text</artifactId>
+                <version>1.15.0</version>
+            </dependency>
 
             <!-- Java EE -->
             <dependency>