[LUCENE-9479] Add forbiddenApis "commons-io-unsafe" bundled signatures to Gradle build

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 9.0
• Fix Version/s: 9.0
• Component/s: general/build
• Lucene Fields: New
• Assignee: Uwe Schindler
• Reporter: Uwe Schindler
• Created: 24/Aug/20 23:06
• Updated: 28/Aug/22 16:06
• Resolved: 25/Aug/20 07:14

Description

LUCENE-9077 added forbiddenapis also to Gradle. The signatures files were selected based on the resolved artifacts.
Solr also uses commons-io (currently version 2.6)but in contrast to Ant build, the signatures shipped with forbiddenapis are not applied. This was an oversight as those signatures are special: we have to check the artifacts and if commons-io is part of configuration, we add the bundled signature.

This can be done at the same place where the dynamic signatures for other libraries are added.

Issue Links

• is part of: LUCENE-9077 Gradle build
• links to: GitHub Pull Request #1780