Release Notes

4th November 2022 - The Apache Ivy project is pleased to announce its 2.5.1 release.

What is Ivy?

Apache Ivy is a tool for managing (recording, tracking, resolving and reporting) project dependencies, characterized by flexibility, configurability, and tight integration with Apache Ant.

Download

You can download this release at https://ant.apache.org/ivy/download.cgi

Issues should either be discussed in the Ivy user mailing list or reported at https://issues.apache.org/jira/browse/IVY

More information about the project can be found on the website https://ant.apache.org/ivy/

Key features in this release

Key features of this 2.5.1 release are:

  • Ivy now requires a minimum of Java 8 runtime.

  • Fixes two Security Vulnerabilities, see the scurity page for details.

List of Changes in this Release

For details about the following changes, check our JIRA install at https://issues.apache.org/jira/browse/IVY

List of changes since Ivy 2.5.0:

  • BREAKING: Removed old fr\jayasoft\ivy\ant\antlib.xml AntLib definition file (IVY-1612)

  • FIX: ResolveEngine resets dictator resolver to null in the global configuration (IVY-1618)

  • FIX: ConcurrentModificationException in MessageLoggerHelper.sumupProblems (IVY-1628)

  • FIX: useOrigin="true" fails with file-based ibiblio (IVY-1616)

  • FIX: ivy:retrieve Ant task didn’t create an empty fileset when no files were retrieved to a non-empty directory (IVY-1631)

  • FIX: ivy:retrieve Ant task relied on the default HTTP header "Accept" which caused problems with servers that interpret it strictly (e.g. AWS CodeArtifact) (IVY-1632)

  • IMPROVEMENT: Ivy command now accepts a URL for the -settings option (IVY-1615)

  • FIX: CVE-2022-37865 allow create/overwrite any file on the system (see https://ant.apache.org/ivy/security.html)

  • FIX: CVE-2022-37866 Path traversal in patterns (see https://ant.apache.org/ivy/security.html)

Committers and Contributors

Here is the list of people who have contributed source code and documentation up to this release. Many thanks to all of them, and also to the whole IvyDE community contributing ideas and feedback, and promoting the use of Apache Ivy !

Committers:

  • Matt Benson

  • Jean-Louis Boudart

  • Maarten Coene

  • Charles Duffy

  • Gintautas Grigelionis

  • Xavier Hanin

  • Nicolas Lalevée

  • Jan Matèrne

  • Jaikiran Pai

  • Jon Schneider

  • Gilles Scokart

  • Stefan Bodewig

Contributors:

  • Ingo Adler

  • Mathieu Anquetin

  • Arseny Aprelev

  • Andreas Axelsson

  • Stéphane Bailliez

  • Karl Baum

  • Andrew Bernhagen

  • Mikkel Bjerg

  • Per Arnold Blaasmo

  • Jeffrey Blattman

  • Jasper Blues

  • Jim Bonanno

  • Joseph Boyd

  • Dave Brosius

  • Matthieu Brouillard

  • Carlton Brown

  • Mirko Bulovic

  • Ed Burcher

  • Jamie Burns

  • Wei Chen

  • Chris Chilvers

  • Kristian Cibulskis

  • Andrea Bernardo Ciddio

  • Archie Cobbs

  • Flavio Coutinho da Costa

  • Stefan De Boey

  • Mykhailo Delegan

  • Charles Duffy

  • Martin Eigenbrodt

  • Alexandr Esaulov

  • Stephen Evanchik

  • Stephan Feder

  • Robin Fernandes

  • Gregory Fernandez

  • Danno Ferrin

  • Riccardo Foschia

  • Benjamin Francisoud

  • Wolfgang Frank

  • Jacob Grydholt Jensen

  • John Gibson

  • Mitch Gitman

  • Evgeny Goldin

  • Scott Goldstein

  • Stephen Haberman

  • Aaron Hachez

  • Ben Hale

  • Peter Hayes

  • Scott Hebert

  • Payam Hekmat

  • Tobias Himstedt

  • Achim Huegen

  • Pierre Hägnestrand

  • Matt Inger

  • Anders Jacobsson

  • Anders Janmyr

  • Steve Jones

  • Christer Jonsson

  • Michael Kebe

  • Matthias Kilian

  • Alexey Kiselev

  • Gregory Kisling

  • Stepan Koltsov

  • Heschi Kreinick

  • Sebastian Krueger

  • Thomas Kurpick

  • Costin Leau

  • Ilya Leoshkevich

  • Tat Leung

  • Antoine Levy-Lambert

  • Tony Likhite

  • Andrey Lomakin

  • William Lyvers

  • Sakari Maaranen

  • Jan Materne

  • Markus M. May

  • Abel Muino

  • J. Lewis Muir

  • Stephen Nesbitt

  • Joshua Nichols

  • Bernard Niset

  • Ales Nosek

  • David Maplesden

  • Glen Marchesani

  • Phil Messenger

  • Steve Miller

  • Mathias Muller

  • Randy Nott

  • Peter Oxenham

  • Douglas Palmer

  • Thomas Pasch

  • Jesper Pedersen

  • Emmanuel Pellereau

  • Greg Perry

  • Carsten Pfeiffer

  • Yanus Poluektovich

  • Roshan Punnoose

  • Aurélien Pupier

  • Jean-Baptiste Quenot

  • Carl Quinn

  • Damon Rand

  • Geoff Reedy

  • Torkild U. Resheim

  • Christian Riege

  • Frederic Riviere

  • Jens Rohloff

  • Andreas Sahlbach

  • Brian Sanders

  • Adrian Sandor

  • Michael Scheetz

  • Ben Schmidt

  • Ruslan Shevchenko

  • John Shields

  • Nihal Sinha

  • Gene Smith

  • Michal Srb

  • Colin Stanfill

  • Simon Steiner

  • Johan Stuyts

  • John Tinetti

  • Erwin Tratar

  • Jason Trump

  • David Turner

  • Ernestas Vaiciukevičius

  • Tjeerd Verhagen

  • Willem Verstraeten

  • Richard Vowles

  • Sven Walter

  • Zhong Wang

  • James P. White

  • Tom Widmer

  • John Williams

  • Chris Wood

  • Patrick Woodworth

  • Jaroslaw Wypychowski

  • Sven Zethelius

  • Aleksey Zhukov

  • Jason A. Guild

  • Berno Langer