From 773004e6e6dec599c3b873e8b9c1549a4dc18bea Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 2 Jul 2026 22:17:35 +0000
Subject: [PATCH 1/2] Bump org.apache.commons:commons-jexl3 from 3.6.4 to 3.7.0

Bumps org.apache.commons:commons-jexl3 from 3.6.4 to 3.7.0.

---
updated-dependencies:
- dependency-name: org.apache.commons:commons-jexl3
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 967416e87..3409b0bd4 100644
--- a/pom.xml
+++ b/pom.xml
@@ -162,7 +162,7 @@
     <dependency>
       <groupId>org.apache.commons</groupId>
       <artifactId>commons-jexl3</artifactId>
-      <version>3.6.4</version>
+      <version>3.7.0</version>
       <optional>true</optional>
     </dependency>
     <dependency>

From 1fde1eaa2bf2f578f48888d01e3559fd058af964 Mon Sep 17 00:00:00 2001
From: Henrib <hbiestro@gmail.com>
Date: Mon, 6 Jul 2026 15:51:03 +0200
Subject: [PATCH 2/2] SCXML : update JexlEngine to 3.7.0

---
 .../org/apache/commons/scxml2/env/jexl/JexlEvaluator.java     | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/main/java/org/apache/commons/scxml2/env/jexl/JexlEvaluator.java b/src/main/java/org/apache/commons/scxml2/env/jexl/JexlEvaluator.java
index e6024e344..c6ff1658e 100644
--- a/src/main/java/org/apache/commons/scxml2/env/jexl/JexlEvaluator.java
+++ b/src/main/java/org/apache/commons/scxml2/env/jexl/JexlEvaluator.java
@@ -22,6 +22,7 @@
 import org.apache.commons.jexl3.JexlBuilder;
 import org.apache.commons.jexl3.JexlEngine;
 import org.apache.commons.jexl3.JexlExpression;
+import org.apache.commons.jexl3.JexlFeatures;
 import org.apache.commons.jexl3.JexlScript;
 import org.apache.commons.jexl3.introspection.JexlPermissions;
 import org.apache.commons.scxml2.Context;
@@ -90,7 +91,8 @@ protected JexlEngine createJexlEngine() {
         final Map<String, Object> funcs = new HashMap<>();
         funcs.put(null, JexlBuiltin.class);
         final JexlPermissions permissions = JexlPermissions.RESTRICTED.compose("org.apache.commons.scxml2.*");
-        return new JexlBuilder().permissions(permissions).namespaces(funcs).cache(256).create();
+        final JexlFeatures features = JexlFeatures.createDefault();
+        return new JexlBuilder().features(features).permissions(permissions).namespaces(funcs).cache(256).create();
     }
 
     /**