From d8909d0e9045b47c3f3323880487a4df205a9099 Mon Sep 17 00:00:00 2001
From: sgrampone <sgrampone@genexus.com>
Date: Thu, 20 Nov 2025 09:04:01 -0300
Subject: [PATCH] Bump odata to version 5.0.0

---
 common/pom.xml  |  2 +-
 gxodata/pom.xml | 34 +++++++++++++++++++++++++++++-----
 pom.xml         |  1 +
 3 files changed, 31 insertions(+), 6 deletions(-)

diff --git a/common/pom.xml b/common/pom.xml
index b7dfa42ef..9743efb82 100644
--- a/common/pom.xml
+++ b/common/pom.xml
@@ -33,7 +33,7 @@
         <dependency>
             <groupId>org.apache.commons</groupId>
             <artifactId>commons-lang3</artifactId>
-            <version>3.18.0</version>
+            <version>${commons.lang3.version}</version>
         </dependency>
 		<dependency>
 			<groupId>commons-io</groupId>
diff --git a/gxodata/pom.xml b/gxodata/pom.xml
index 4dd38b58a..92ece61cc 100644
--- a/gxodata/pom.xml
+++ b/gxodata/pom.xml
@@ -22,24 +22,48 @@
 		<dependency>
 			<groupId>org.apache.olingo</groupId>
 			<artifactId>odata-commons-api</artifactId>
-			<version>4.9.0</version>
+			<version>5.0.0</version>
 		</dependency>
 		<dependency>
 			<groupId>org.apache.olingo</groupId>
 			<artifactId>odata-commons-core</artifactId>
-			<version>4.9.0</version>
+			<version>5.0.0</version>
 		</dependency>
 		<dependency>
 			<groupId>org.apache.olingo</groupId>
 			<artifactId>odata-client-api</artifactId>
-			<version>4.9.0</version>
+			<version>5.0.0</version>
 		</dependency>
 		<dependency>
 			<groupId>org.apache.olingo</groupId>
 			<artifactId>odata-client-core</artifactId>
-			<version>4.9.0</version>
+			<version>5.0.0</version>
 		</dependency>
-	</dependencies>
+        <!-- overwrite odata-client-core jackson-core dependency due to CVEs -->
+        <dependency>
+            <groupId>com.fasterxml.jackson.core</groupId>
+            <artifactId>jackson-core</artifactId>
+            <version>${jackson.version}</version>
+        </dependency>
+        <!-- overwrite odata-client-core jackson-databind dependency due to CVEs -->
+        <dependency>
+            <groupId>com.fasterxml.jackson.core</groupId>
+            <artifactId>jackson-databind</artifactId>
+            <version>${jackson.version}</version>
+        </dependency>
+        <!-- overwrite odata-client-core commons-io dependency due to CVEs -->
+        <dependency>
+            <groupId>commons-io</groupId>
+            <artifactId>commons-io</artifactId>
+            <version>${commons-io.version}</version>
+        </dependency>
+        <!-- overwrite odata-client-core commons-lang3   dependency due to CVEs -->
+        <dependency>
+            <groupId>org.apache.commons</groupId>
+            <artifactId>commons-lang3</artifactId>
+            <version>${commons.lang3.version}</version>
+        </dependency>
+    </dependencies>
 
 	<build>
 		<finalName>gxodata</finalName>
diff --git a/pom.xml b/pom.xml
index 07596c207..8bc79fba8 100644
--- a/pom.xml
+++ b/pom.xml
@@ -33,6 +33,7 @@
         <commons-codec.version>1.15</commons-codec.version>
         <xmlsec.version>3.0.3</xmlsec.version>
         <jose.version>10.4</jose.version>
+        <commons.lang3.version>3.18.0</commons.lang3.version>
 
 	</properties>