build(deps): update test Commons IO to 2.22.0

[jbeckwith-oai]

Summary

• constrain WireMock 2.35.2's test-only Commons IO dependency from 2.11.0 to 2.22.0 in both openai-java-core and openai-java-client-okhttp
• remediate Dependabot alert 30 (GHSA-78wr-2p64-hpwj / CVE-2024-47554)
• leave WireMock 2.35.2 and the Jackson 2.14.0 compatibility floor unchanged

The alert's patched floor is Commons IO 2.14.0. Commons IO 2.22.0 is the current stable release and still requires Java 8. The resolved artifact has Java 8 classfile level 52, and the focused WireMock tests pass with it under both Jackson compatibility lines.

Downstream compatibility

This is limited to testImplementation constraints. Generated Maven POMs and Gradle module metadata for both published modules contain neither Commons IO nor WireMock. There are no production source, bytecode, public API, runtime dependency, or Java baseline changes for SDK consumers.

Validation

• dependency insight for both testRuntimeClasspath graphs and core's jacksonPublishedRuntime resolves Commons IO to 2.22.0
• focused WireMock tests in core and okhttp pass under Jackson 2.14.0 and 2.18.9
• all repository test tasks, ProGuard/R8 checks, and testJacksonPublished pass (external generated-API mock-server tests skipped locally)
• ./scripts/build --no-configuration-cache
• ./scripts/lint
• ./scripts/detect-breaking-changes origin/main
• generated Maven POM and Gradle module metadata inspection for both affected modules
• Java 8 classfile and WireMock bytecode-reference inspection

[openai-sdks]

OkTest Summary

❌ 235/237 SDK tests passed in 19.751s for Java SDK PR #788.

Test results — 42 files

Test	Result	Time
tests/chat-completions-complex-body.test.ts	✅ Passed	554ms
tests/chat-completions-create.test.ts	✅ Passed	1.286s
tests/chat-completions-stream.test.ts	✅ Passed	553ms
tests/files-content-binary.test.ts	✅ Passed	288ms
tests/files-create-multipart.test.ts	✅ Passed	275ms
tests/files-list-pagination.test.ts	✅ Passed	331ms
tests/initialize-config.test.ts	✅ Passed	186ms
tests/instance-isolation.test.ts	✅ Passed	289ms
tests/models-list.test.ts	✅ Passed	202ms
tests/responses-background-lifecycle.test.ts	✅ Passed	308ms
tests/responses-body-method-errors.test.ts	✅ Passed	546ms
tests/responses-cancel-timeout.test.ts	✅ Passed	219ms
tests/responses-cancel.test.ts	✅ Passed	464ms
tests/responses-compact-retries.test.ts	✅ Passed	522ms
tests/responses-compact.test.ts	✅ Passed	348ms
tests/responses-create-advanced-stream.test.ts	✅ Passed	756ms
tests/responses-create-advanced.test.ts	✅ Passed	1.47s
tests/responses-create-disconnect.test.ts	✅ Passed	1.113s
tests/responses-create-errors.test.ts	✅ Passed	339ms
tests/responses-create-malformed-api-responses.test.ts	✅ Passed	200ms
tests/responses-create-retries.test.ts	✅ Passed	313ms
tests/responses-create-stream-failures.test.ts	✅ Passed	1.048s
tests/responses-create-stream-timeout.test.ts	✅ Passed	303ms
tests/responses-create-stream-wire.test.ts	❌ Failed	8.601s
tests/responses-create-stream.test.ts	✅ Passed	267ms
tests/responses-create-terminal-states.test.ts	✅ Passed	441ms
tests/responses-create-timeout.test.ts	✅ Passed	212ms
tests/responses-create.test.ts	✅ Passed	337ms
tests/responses-delete.test.ts	✅ Passed	258ms
tests/responses-input-items-errors.test.ts	✅ Passed	301ms
tests/responses-input-items-list.test.ts	✅ Passed	511ms
tests/responses-input-items-options.test.ts	✅ Passed	333ms
tests/responses-input-tokens-count-timeout.test.ts	✅ Passed	272ms
tests/responses-input-tokens-count.test.ts	✅ Passed	428ms
tests/responses-malformed-inputs.test.ts	✅ Passed	6.628s
tests/responses-not-found-errors.test.ts	✅ Passed	443ms
tests/responses-parse.test.ts	✅ Passed	677ms
tests/responses-retrieve-retries.test.ts	✅ Passed	391ms
tests/responses-retrieve.test.ts	✅ Passed	317ms
tests/responses-stored-method-errors.test.ts	✅ Passed	926ms
tests/retry-behavior.test.ts	✅ Passed	3.545s
tests/sdk-error-shape.test.ts	✅ Passed	397ms

View OkTest run #29537925157

_{SDK merge (89ca5833480a) · head (cc427a687bae) · base (a30161d495ac) · OkTest (fd7a761c81c1)}

[HAYDEN-OAI]

looks good, thanks for the careful validation!

[HAYDEN-OAI]

looks good, thanks! verified the current head is limited to testImplementation constraints in core and okhttp, so published api/pom and java 8 consumer behavior stay unchanged. commons io 2.22.0 still targets java 8, and the current checks are green.

[HAYDEN-OAI]

looks good, thanks! rechecked the current head and it stays test-only with green checks.