fix: pf4j2 示例升级 org.pf4j 2.2.0 → 3.14.1，修复 CVE-2025-70952（Zip Slip）

- pf4j 3.0 移除了 org.pf4j.PluginException（改为运行时异常
  PluginRuntimeException），同步迁移 pf4j2-plugin-api 中的
  异常声明与 PluginInvokeException 父类
- 替代 Dependabot PR #32（Dependabot 无法处理源码级 API 迁移）

Author: loong10k

spring-boot-sample-pf4j2/pf4j2-plugin-sample/pf4j2-plugin-api/src/main/java/pf4j2/plugin/api/AuthcExtensionPoint.java

@@ -20,15 +20,15 @@
 import javax.servlet.http.HttpServletRequest;
 
 import org.pf4j.ExtensionPoint;
-import org.pf4j.PluginException;
+import org.pf4j.PluginRuntimeException;
 
 public interface AuthcExtensionPoint extends ExtensionPoint {
 
-	String getToken(Map<String, Object> par,HttpServletRequest req) throws PluginException;
+	String getToken(Map<String, Object> par,HttpServletRequest req) throws PluginRuntimeException;
 
-	void handleHeaderParams(Map<String, Object> par,HttpServletRequest req) throws PluginException;
+	void handleHeaderParams(Map<String, Object> par,HttpServletRequest req) throws PluginRuntimeException;
 
-	void handleRequestParams(Map<String, Object> par,HttpServletRequest req) throws PluginException;
+	void handleRequestParams(Map<String, Object> par,HttpServletRequest req) throws PluginRuntimeException;
 
-	Object handleResult(Object res) throws PluginException;
+	Object handleResult(Object res) throws PluginRuntimeException;
 }

spring-boot-sample-pf4j2/pf4j2-plugin-sample/pf4j2-plugin-api/src/main/java/pf4j2/plugin/api/AuthcExtensionPointAdepter.java

@@ -19,25 +19,25 @@
 
 import javax.servlet.http.HttpServletRequest;
 
-import org.pf4j.PluginException;
+import org.pf4j.PluginRuntimeException;
 
 public class AuthcExtensionPointAdepter implements AuthcExtensionPoint{
 
 	@Override
-	public String getToken(Map<String, Object> par, HttpServletRequest req) throws PluginException{
+	public String getToken(Map<String, Object> par, HttpServletRequest req) throws PluginRuntimeException{
 		return null;
 	}
 
 	@Override
-	public void handleHeaderParams(Map<String, Object> par, HttpServletRequest req) throws PluginException {
+	public void handleHeaderParams(Map<String, Object> par, HttpServletRequest req) throws PluginRuntimeException {
 	}
 
 	@Override
-	public void handleRequestParams(Map<String, Object> par, HttpServletRequest req) throws PluginException {
+	public void handleRequestParams(Map<String, Object> par, HttpServletRequest req) throws PluginRuntimeException {
 	}
 
 	@Override
-	public Object handleResult(Object res) throws PluginException {
+	public Object handleResult(Object res) throws PluginRuntimeException {
 		return res;
 	}
 

spring-boot-sample-pf4j2/pf4j2-plugin-sample/pf4j2-plugin-api/src/main/java/pf4j2/plugin/api/exception/PluginInvokeException.java

@@ -15,10 +15,10 @@
  */
 package pf4j2.plugin.api.exception;
 
-import org.pf4j.PluginException;
+import org.pf4j.PluginRuntimeException;
 
 @SuppressWarnings("serial")
-public class PluginInvokeException extends PluginException{
+public class PluginInvokeException extends PluginRuntimeException{
 
 	private String pluginId;
 

spring-boot-sample-pf4j2/pf4j2-plugin-sample/pom.xml

@@ -23,7 +23,7 @@
         <commons-lang.version>2.6</commons-lang.version>
         <fastjson.version>1.2.61</fastjson.version>
         <javax.servlet-api.version>3.1.0</javax.servlet-api.version>
-        <pf4j.version>2.2.0</pf4j.version>
+        <pf4j.version>3.14.1</pf4j.version>
         <pf4j-update.version>2.0.0</pf4j-update.version>
         <pf4j-spring.version>0.4.0</pf4j-spring.version>
         <slf4j.version>1.7.21</slf4j.version>