Skip to content

Bump org.apache.maven.plugins:maven-surefire-plugin from 3.6.0 to 3.6.1 - #526

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/org.apache.maven.plugins-maven-surefire-plugin-3.6.1
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/org.apache.maven.plugins-maven-surefire-plugin-3.6.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 3, 2026

Copy link
Copy Markdown
Contributor

Bumps org.apache.maven.plugins:maven-surefire-plugin from 3.6.0 to 3.6.1.

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.6.1

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

  • Clean up deprecated parameters and fix TestNG parallel modes (#3452) (#3519) @​olamy
  • Merge the two timeout extension pages into one. The guide and the example page covered the same things twice. (#3520) @​olamy
  • Drop the Source Xref menu items (#3479) @​slachiewicz

👻 Maintenance

🔧 Build

... (truncated)

Commits
  • 5bf0dcf [maven-release-plugin] prepare release surefire-3.6.1
  • 7f73580 Bump doxiaVersion from 2.1.0 to 2.2.0 (#3542)
  • ab7ce2f Bump org.testng:testng (#3539)
  • ff3b768 Group module path heuristics in ModulePathJpmsArguments (#3541)
  • a343e4d Fix IllegalAccessError when the main module requires JUnit (#3532) (#3538)
  • 907a2e2 Fix groups and excludedGroups being ignored when TestNG is on the classpath (...
  • cc69b3c Use push for PR Automation
  • b119019 Install the JUnit Platform provider for the ITs (#3535)
  • 2cdec2e Don't let runOrder replace JUnit orderers set elsewhere (#3529) (#3530)
  • 1e4f6b9 Use workflow_run for PR check (#3531)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) from 3.6.0 to 3.6.1.
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.6.0...surefire-3.6.1)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.6.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Nov 3, 2026
@github-actions

github-actions Bot commented Nov 3, 2026

Copy link
Copy Markdown
Contributor

Mend Scan Results

Status: ⚠️ Findings detected

⚠️ SCA findings detected

SCA scan output



Identified 113 dependencies

Detected 28 vulnerabilities (1 Critical, 9 High, 16 Medium, 2 Low)

+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| SEVERITY |           LIBRARY           |       ID        |                                               TOP FIX                                                |
+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| CRITICAL | jackson-databind-2.22.2.jar | CVE-2026-110879 | Upgrade to version  https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.18.12,    |
|          |                             |                 | com.fasterxml.jackson.core:jackson-databind:2.22.4,                                                  |
|          |                             |                 | com.fasterxml.jackson.core:jackson-databind:2.21.8,                                                  |
|          |                             |                 | https://github.com/FasterXML/jackson-databind.git - jackson-databind-3.2.4,                          |
|          |                             |                 | tools.jackson.core:jackson-databind:3.1.8,com.fasterxml.jackson.core:jackson-databind:2.18.12,       |
|          |                             |                 | https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.21.8,                         |
|          |                             |                 | tools.jackson.core:jackson-databind:3.2.4, https://github.com/FasterXML/jackson-databind.git -       |
|          |                             |                 | jackson-databind-3.1.8, https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.22.4  |
+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | bcpkix-jdk18on-1.85.jar     | CVE-2026-71888  | Upgrade to version org.bouncycastle:bcpkix-jdk14:1.86,org.bouncycastle:bcpkix-debug-jdk15to18:1.86,  |
|          |                             |                 | org.bouncycastle:bcpkix-jdk15to18:1.86,org.bouncycastle:bcpkix-debug-jdk18on:1.86,                   |
|          |                             |                 | org.bouncycastle:bcpkix-jdk18on:1.86, https://github.com/bcgit/bc-java.git - r1rv86,                 |
|          |                             |                 | org.bouncycastle:bcpkix-lts8on:2.73.13, https://github.com/bcgit/bc-lts-java.git - r2rv73dot13,      |
|          |                             |                 | org.bouncycastle:bcpkix-fips:1.0.13,org.bouncycastle:bcpkix-fips:2.0.13,                             |
|          |                             |                 | org.bouncycastle:bcpkix-fips:2.1.13                                                                  |
+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | bcpkix-jdk18on-1.85.jar     | CVE-2026-71889  | Upgrade to version org.bouncycastle:bcpkix-jdk15to18:1.86,org.bouncycastle:bcpkix-lts8on:2.73.13,    |
|          |                             |                 | org.bouncycastle:bcprov-jdk14:1.86,org.bouncycastle:bcpkix-jdk18on:1.86,                             |
|          |                             |                 | org.bouncycastle:bcprov-debug-jdk18on:1.86,org.bouncycastle:bcpkix-debug-jdk15to18:1.86,             |
|          |                             |                 | org.bouncycastle:bcprov-jdk18on:1.86,org.bouncycastle:bcpkix-debug-jdk18on:1.86,                     |
|          |                             |                 | org.bouncycastle:bcprov-debug-jdk14:1.86,org.bouncycastle:bcprov-jdk15to18:1.86,                     |
|          |                             |                 | org.bouncycastle:bcprov-debug-jdk15to18:1.86, https://github.com/bcgit/bc-lts-java.git - r2rv73dot13 |
|          |                             |                 | , https://github.com/bcgit/bc-java.git - r1rv86,org.bouncycastle:bcpkix-fips:1.0.13,                 |
|          |                             |                 | org.bouncycastle:bcpkix-fips:2.0.13,org.bouncycastle:bcpkix-fips:2.1.13                              |
+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | bcprov-jdk18on-1.85.jar     | CVE-2026-71889  | Upgrade to version org.bouncycastle:bcpkix-jdk15to18:1.86,org.bouncycastle:bcpkix-lts8on:2.73.13,    |
|          |                             |                 | org.bouncycastle:bcprov-jdk14:1.86,org.bouncycastle:bcpkix-jdk18on:1.86,                             |
|          |                             |                 | org.bouncycastle:bcprov-debug-jdk18on:1.86,org.bouncycastle:bcpkix-debug-jdk15to18:1.86,             |
|          |                             |                 | org.bouncycastle:bcprov-jdk18on:1.86,org.bouncycastle:bcpkix-debug-jdk18on:1.86,                     |
|          |                             |                 | org.bouncycastle:bcprov-debug-jdk14:1.86,org.bouncycastle:bcprov-jdk15to18:1.86,                     |
|          |                             |                 | org.bouncycastle:bcprov-debug-jdk15to18:1.86, https://github.com/bcgit/bc-lts-java.git - r2rv73dot13 |
|          |                             |                 | , https://github.com/bcgit/bc-java.git - r1rv86,org.bouncycastle:bcpkix-fips:1.0.13,                 |
|          |                             |                 | org.bouncycastle:bcpkix-fips:2.0.13,org.bouncycastle:bcpkix-fips:2.1.13                              |
+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | guava-19.0.jar              | CVE-2026-102554 | Upgrade to version com.google.guava:guava:33.7.2, https://github.com/google/guava.git - v33.7.2      |
+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | jackson-core-2.22.2.jar     | CVE-2026-89407  | Upgrade to version com.fasterxml.jackson.core:jackson-core:2.18.11,                                  |
|          |                             |                 | com.fasterxml.jackson.core:jackson-core:2.21.7,com.fasterxml.jackson.core:jackson-core:2.22.3,       |
|          |                             |                 | tools.jackson.core:jackson-core:3.1.7, https://github.com/FasterXML/jackson-core.git -               |
|          |                             |                 | jackson-core-2.22.3, https://github.com/FasterXML/jackson-core.git - jackson-core-3.2.2,             |
|          |                             |                 | https://github.com/FasterXML/jackson-core.git - jackson-core-2.18.11,                                |
|          |                             |                 | https://github.com/FasterXML/jackson-core.git - jackson-core-3.1.7,                                  |
|          |                             |                 | https://github.com/FasterXML/jackson-core.git - jackson-core-2.21.7                                  |
+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | jackson-core-2.22.2.jar     | CVE-2026-89425  | Upgrade to version com.fasterxml.jackson.core:jackson-core:2.18.11,                                  |
|          |                             |                 | com.fasterxml.jackson.core:jackson-core:2.21.7,com.fasterxml.jackson.core:jackson-core:2.22.3,       |
|          |                             |                 | tools.jackson.core:jackson-core:3.1.7, https://github.com/FasterXML/jackson-core.git -               |
|          |                             |                 | jackson-core-3.2.3, https://github.com/FasterXML/jackson-core.git - jackson-core-2.22.3,             |
|          |                             |                 | https://github.com/FasterXML/jackson-core.git - jackson-core-2.21.7,                                 |
|          |                             |                 | https://github.com/FasterXML/jackson-core.git - jackson-core-2.18.11,                                |
|          |                             |                 | https://github.com/FasterXML/jackson-core.git - jackson-core-3.1.7                                   |
+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | jackson-databind-2.22.2.jar | CVE-2026-91776  | Upgrade to version com.fasterxml.jackson.core:jackson-databind:2.18.11,                              |
|          |                             |                 | com.fasterxml.jackson.core:jackson-databind:2.21.7,tools.jackson.core:jackson-databind:3.1.7,        |
|          |                             |                 | https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.22.3,                         |
|          |                             |                 | https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.18.11,                        |
|          |                             |                 | https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.21.7,                         |
|          |                             |                 | https://github.com/FasterXML/jackson-databind.git - jackson-databind-3.1.7,                          |
|          |                             |                 | https://github.com/FasterXML/jackson-databind.git - jackson-databind-3.2.3                           |
+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | jackson-databind-2.22.2.jar | CVE-2026-91777  | Upgrade to version com.fasterxml.jackson.core:jackson-databind:2.18.11,                              |
|          |                             |                 | com.fasterxml.jackson.core:jackson-databind:2.21.7,tools.jackson.core:jackson-databind:3.1.7,        |
|          |                             |                 | https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.21.7,                         |
|          |                             |                 | https://github.com/FasterXML/jackson-databind.git - jackson-databind-3.2.3,                          |
|          |                             |                 | https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.22.3,                         |
|          |                             |                 | https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.18.11,                        |
|          |                             |                 | https://github.com/FasterXML/jackson-databind.git - jackson-databind-3.1.7                           |
+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | logback-classic-1.6.3.jar   | CVE-2026-104721 | Upgrade to version ch.qos.logback:logback-classic:1.6.5, https://github.com/qos-ch/logback.git -     |
|          |                             |                 | v_1.6.5                                                                                              |
+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | asm-5.0.4.jar               | CVE-2026-110257 | Upgrade to version org.ow2.asm:asm:9.11, https://gitlab.ow2.org/asm/asm.git - ASM_9_11               |
+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | asm-5.0.4.jar               | CVE-2026-110258 | Upgrade to version org.ow2.asm:asm:9.11, https://gitlab.ow2.org/asm/asm.git - ASM_9_11               |
+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | asm-5.0.4.jar               | CVE-2026-110260 | Upgrade to version org.ow2.asm:asm:9.11, https://gitlab.ow2.org/asm/asm.git - ASM_9_11               |
+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | asm-5.0.4.jar               | CVE-2026-110261 | Upgrade to version org.ow2.asm:asm:9.11, https://gitlab.ow2.org/asm/asm.git - ASM_9_11               |
+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | asm-5.0.4.jar               | CVE-2026-110263 | Upgrade to version org.ow2.asm:asm:9.11, https://gitlab.ow2.org/asm/asm.git - ASM_9_11               |
+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | asm-analysis-5.0.3.jar      | CVE-2026-110591 | Upgrade to version org.ow2.asm:asm-analysis:9.11, https://gitlab.ow2.org/asm/asm.git - ASM_9_11      |
+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | asm-commons-5.0.3.jar       | CVE-2026-110270 | Upgrade to version org.ow2.asm:asm-commons:9.11, https://gitlab.ow2.org/asm/asm.git - ASM_9_11       |
+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | bcpkix-jdk18on-1.85.jar     | CVE-2026-17508  | Upgrade to version org.bouncycastle:bcprov-jdk18on:1.86,org.bouncycastle:bcpkix-debug-jdk18on:1.86,  |
|          |                             |                 | org.bouncycastle:bcprov-debug-jdk14:1.86, https://github.com/bcgit/bc-lts-java.git - r2rv73dot13,    |
|          |                             |                 | org.bouncycastle:bcpkix-jdk15to18:1.86,org.bouncycastle:bcprov-jdk14:1.86,                           |
|          |                             |                 | org.bouncycastle:bcpkix-lts8on:2.73.13, https://github.com/bcgit/bc-java.git - r1rv86,               |
|          |                             |                 | org.bouncycastle:bcprov-jdk15to18:1.86,org.bouncycastle:bcprov-debug-lts8on:2.73.13,                 |
|          |                             |                 | org.bouncycastle:bcpkix-jdk14:1.86,org.bouncycastle:bcpkix-jdk18on:1.86,                             |
|          |                             |                 | org.bouncycastle:bcprov-lts8on:2.73.13,org.bouncycastle:bcprov-debug-jdk18on:1.86,                   |
|          |                             |                 | org.bouncycastle:bcprov-debug-jdk15to18:1.86,org.bouncycastle:bcpkix-debug-jdk15to18:1.86,           |
|          |                             |                 | org.bouncycastle:bcpkix-fips:2.0.13,org.bouncycastle:bcpkix-fips:2.1.13                              |
+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | bcpkix-jdk18on-1.85.jar     | CVE-2026-71892  | Upgrade to version org.bouncycastle:bcpkix-lts8on:2.73.13,org.bouncycastle:bcpkix-jdk14:1.86,        |
|          |                             |                 | org.bouncycastle:bcpkix-jdk15to18:1.86, https://github.com/bcgit/bc-lts-java.git - r2rv73dot13,      |
|          |                             |                 | org.bouncycastle:bcpkix-jdk18on:1.86,org.bouncycastle:bcpkix-debug-jdk15to18:1.86,                   |
|          |                             |                 | org.bouncycastle:bcpkix-debug-jdk18on:1.86, https://github.com/bcgit/bc-java.git - r1rv86,           |
|          |                             |                 | org.bouncycastle:bcpkix-fips:2.0.13,org.bouncycastle:bcpkix-fips:2.1.13                              |
+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | bcprov-jdk18on-1.85.jar     | CVE-2026-17508  | Upgrade to version org.bouncycastle:bcprov-jdk18on:1.86,org.bouncycastle:bcpkix-debug-jdk18on:1.86,  |
|          |                             |                 | org.bouncycastle:bcprov-debug-jdk14:1.86, https://github.com/bcgit/bc-lts-java.git - r2rv73dot13,    |
|          |                             |                 | org.bouncycastle:bcpkix-jdk15to18:1.86,org.bouncycastle:bcprov-jdk14:1.86,                           |
|          |                             |                 | org.bouncycastle:bcpkix-lts8on:2.73.13, https://github.com/bcgit/bc-java.git - r1rv86,               |
|          |                             |                 | org.bouncycastle:bcprov-jdk15to18:1.86,org.bouncycastle:bcprov-debug-lts8on:2.73.13,                 |
|          |                             |                 | org.bouncycastle:bcpkix-jdk14:1.86,org.bouncycastle:bcpkix-jdk18on:1.86,                             |
|          |                             |                 | org.bouncycastle:bcprov-lts8on:2.73.13,org.bouncycastle:bcprov-debug-jdk18on:1.86,                   |
|          |                             |                 | org.bouncycastle:bcprov-debug-jdk15to18:1.86,org.bouncycastle:bcpkix-debug-jdk15to18:1.86,           |
|          |                             |                 | org.bouncycastle:bcpkix-fips:2.0.13,org.bouncycastle:bcpkix-fips:2.1.13                              |
+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | bcprov-jdk18on-1.85.jar     | CVE-2026-18036  | Upgrade to version org.bouncycastle:bcprov-debug-jdk18on:1.86,org.bouncycastle:bcprov-jdk18on:1.85.2 |
|          |                             |                 | , https://github.com/bcgit/bc-java.git - r1rv85v2,org.bouncycastle:bcprov-debug-jdk14:1.86,          |
|          |                             |                 | org.bouncycastle:bcprov-debug-jdk15to18:1.86,org.bouncycastle:bcprov-jdk14:1.85.2,                   |
|          |                             |                 | org.bouncycastle:bcprov-jdk15to18:1.85.2                                                             |
+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | bcprov-jdk18on-1.85.jar     | CVE-2026-18040  | Upgrade to version org.bouncycastle:bcprov-jdk15to18:1.85.2,org.bouncycastle:bcprov-debug-jdk14:1.86 |
|          |                             |                 | ,org.bouncycastle:bcprov-debug-jdk15to18:1.86,org.bouncycastle:bcprov-jdk18on:1.85.2,                |
|          |                             |                 | org.bouncycastle:bcprov-debug-jdk18on:1.86, https://github.com/bcgit/bc-java.git - r1rv85v2,         |
|          |                             |                 | org.bouncycastle:bcprov-jdk14:1.85.2                                                                 |
+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | bcprov-jdk18on-1.85.jar     | CVE-2026-71891  | Upgrade to version org.bouncycastle:bcprov-jdk18on:1.86, https://github.com/bcgit/bc-java.git -      |
|          |                             |                 | r1rv86,org.bouncycastle:bcprov-jdk15to18:1.86,org.bouncycastle:bcprov-debug-jdk18on:1.86,            |
|          |                             |                 | org.bouncycastle:bcprov-debug-jdk15to18:1.86                                                         |
+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | bcprov-jdk18on-1.85.jar     | CVE-2026-97873  | N/A                                                                                                  |
+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | guava-19.0.jar              | CVE-2018-10237  | Upgrade to version 24.1.1-jre, 24.1.1-android                                                        |
+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | guava-19.0.jar              | CVE-2023-2976   | Upgrade to version com.google.guava:guava:32.0.1-android,32.0.1-jre                                  |
+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| LOW      | asm-commons-5.0.3.jar       | CVE-2026-110262 | Upgrade to version org.ow2.asm:asm-commons:9.11, https://gitlab.ow2.org/asm/asm.git - ASM_9_11       |
+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| LOW      | guava-19.0.jar              | CVE-2020-8908   | Upgrade to version  https://github.com/google/guava.git - v32.0.0                                    |
+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+


Paths at risk

P = policy violation
MSC = malicious vulnerability
CRITICAL/HIGH/MEDIUM/LOW = vulnerability severity

atlas-identities-1.2.3.jar
|-- logback-classic-1.6.3.jar [1 HIGH]
galley-api-1.24-SNAPSHOT.jar
|-- atlas-identities-1.2.3.jar
	|-- logback-classic-1.6.3.jar [1 HIGH]
galley-caches-1.24-SNAPSHOT.pom
|-- atlas-identities-1.2.3.jar
	|-- logback-classic-1.6.3.jar [1 HIGH]
|-- galley-cache-partyline-1.24-SNAPSHOT.jar
	|-- atlas-identities-1.2.3.jar
		|-- logback-classic-1.6.3.jar [1 HIGH]
	|-- partyline-2.5.jar
		|-- logback-classic-1.6.3.jar [1 HIGH]
		|-- weft-1.27.jar
			|-- logback-classic-1.6.3.jar [1 HIGH]
		|-- jboss-logging-3.6.3.Final.jar
			|-- logback-classic-1.6.3.jar [1 HIGH]
|-- galley-cache-path-mapped-1.24-SNAPSHOT.jar
	|-- atlas-identities-1.2.3.jar
		|-- logback-classic-1.6.3.jar [1 HIGH]
			|-- jackson-databind-2.22.2.jar [1 CRITICAL, 2 HIGH]
				|-- jackson-core-2.22.2.jar [2 HIGH]
	|-- galley-core-1.24-SNAPSHOT.jar
		|-- weft-1.27.jar
			|-- logback-classic-1.6.3.jar [1 HIGH]
	|-- path-mapped-pathdb-datastax-3.3.jar
		|-- cassandra-driver-core-3.12.1.jar
			|-- jackson-databind-2.22.2.jar [1 CRITICAL, 2 HIGH]
			|-- jnr-ffi-2.1.7.jar
				|-- asm-analysis-5.0.3.jar [1 MEDIUM]
				|-- asm-commons-5.0.3.jar [1 MEDIUM, 1 LOW]
				|-- asm-tree-5.0.3.jar
					|-- asm-5.0.4.jar [5 MEDIUM]
				|-- asm-5.0.4.jar [5 MEDIUM]
			|-- guava-19.0.jar [1 HIGH, 2 MEDIUM, 1 LOW]
		|-- cassandra-driver-mapping-3.12.1.jar
			|-- guava-19.0.jar [1 HIGH, 2 MEDIUM, 1 LOW]
			|-- asm-5.0.4.jar [5 MEDIUM]
	|-- path-mapped-storage-3.3.jar
		|-- netty-common-4.1.138.Final.jar
			|-- logback-classic-1.6.3.jar [1 HIGH]
		|-- netty-handler-4.1.138.Final.jar
			|-- logback-classic-1.6.3.jar [1 HIGH]
			|-- netty-transport-4.1.138.Final.jar
				|-- logback-classic-1.6.3.jar [1 HIGH]
		|-- s3-2.54.14.jar
			|-- aws-core-2.54.14.jar
				|-- guava-19.0.jar [1 HIGH, 2 MEDIUM, 1 LOW]
			|-- sdk-core-2.54.14.jar
				|-- guava-19.0.jar [1 HIGH, 2 MEDIUM, 1 LOW]
|-- galley-cache-tck-1.24-SNAPSHOT.jar
	|-- atlas-identities-1.2.3.jar
		|-- logback-classic-1.6.3.jar [1 HIGH]
galley-cdi-embedder-1.24-SNAPSHOT.jar
|-- jackson-databind-2.22.2.jar [1 CRITICAL, 2 HIGH]
	|-- jackson-core-2.22.2.jar [2 HIGH]
|-- atlas-bindings-jackson-identities-1.2.3.jar
	|-- logback-classic-1.6.3.jar [1 HIGH]
	|-- jackson-core-2.22.2.jar [2 HIGH]
	|-- jackson-databind-2.22.2.jar [1 CRITICAL, 2 HIGH]
|-- atlas-identities-1.2.3.jar
	|-- logback-classic-1.6.3.jar [1 HIGH]
|-- weft-1.27.jar
	|-- logback-classic-1.6.3.jar [1 HIGH]
		|-- jackson-databind-2.22.2.jar [1 CRITICAL, 2 HIGH]
|-- galley-cache-partyline-1.24-SNAPSHOT.jar
	|-- partyline-2.5.jar
		|-- logback-classic-1.6.3.jar [1 HIGH]
		|-- jboss-logging-3.6.3.Final.jar
			|-- logback-classic-1.6.3.jar [1 HIGH]
|-- galley-maven-1.24-SNAPSHOT.jar
	|-- atlas-relationships-api-1.2.3.jar
		|-- logback-classic-1.6.3.jar [1 HIGH]
		|-- jackson-core-2.22.2.jar [2 HIGH]
		|-- jackson-databind-2.22.2.jar [1 CRITICAL, 2 HIGH]
|-- galley-transport-httpclient-1.24-SNAPSHOT.jar
	|-- jackson-core-2.22.2.jar [2 HIGH]
	|-- jackson-databind-2.22.2.jar [1 CRITICAL, 2 HIGH]
	|-- jhttpc-1.18.jar
		|-- logback-classic-1.6.3.jar [1 HIGH]
		|-- bcpkix-jdk18on-1.85.jar [2 HIGH, 2 MEDIUM]
			|-- bcutil-jdk18on-1.85.jar
				|-- bcprov-jdk18on-1.85.jar [1 HIGH, 5 MEDIUM]
		|-- bcprov-jdk18on-1.85.jar [1 HIGH, 5 MEDIUM]
galley-core-1.24-SNAPSHOT.jar
|-- atlas-identities-1.2.3.jar
	|-- logback-classic-1.6.3.jar [1 HIGH]
|-- weft-1.27.jar
	|-- logback-classic-1.6.3.jar [1 HIGH]
galley-maven-1.24-SNAPSHOT.jar
|-- atlas-identities-1.2.3.jar
	|-- logback-classic-1.6.3.jar [1 HIGH]
|-- atlas-relationships-api-1.2.3.jar
	|-- logback-classic-1.6.3.jar [1 HIGH]
		|-- jackson-databind-2.22.2.jar [1 CRITICAL, 2 HIGH]
	|-- jackson-core-2.22.2.jar [2 HIGH]
	|-- jackson-databind-2.22.2.jar [1 CRITICAL, 2 HIGH]
		|-- jackson-core-2.22.2.jar [2 HIGH]
	|-- atlas-bindings-jackson-identities-1.2.3.jar
		|-- logback-classic-1.6.3.jar [1 HIGH]
		|-- jackson-core-2.22.2.jar [2 HIGH]
		|-- jackson-databind-2.22.2.jar [1 CRITICAL, 2 HIGH]
|-- galley-core-1.24-SNAPSHOT.jar
	|-- weft-1.27.jar
		|-- logback-classic-1.6.3.jar [1 HIGH]
galley-testing-1.24-SNAPSHOT.pom
|-- atlas-identities-1.2.3.jar
	|-- logback-classic-1.6.3.jar [1 HIGH]
|-- galley-test-harness-api-1.24-SNAPSHOT.jar
	|-- atlas-identities-1.2.3.jar
		|-- logback-classic-1.6.3.jar [1 HIGH]
	|-- weft-1.27.jar
		|-- logback-classic-1.6.3.jar [1 HIGH]
|-- galley-test-harness-core-1.24-SNAPSHOT.jar
	|-- atlas-identities-1.2.3.jar
		|-- logback-classic-1.6.3.jar [1 HIGH]
	|-- weft-1.27.jar
		|-- logback-classic-1.6.3.jar [1 HIGH]
|-- galley-test-harness-maven-1.24-SNAPSHOT.jar
	|-- atlas-identities-1.2.3.jar
		|-- logback-classic-1.6.3.jar [1 HIGH]
	|-- weft-1.27.jar
		|-- logback-classic-1.6.3.jar [1 HIGH]
			|-- jackson-databind-2.22.2.jar [1 CRITICAL, 2 HIGH]
	|-- galley-maven-1.24-SNAPSHOT.jar
		|-- atlas-relationships-api-1.2.3.jar
			|-- logback-classic-1.6.3.jar [1 HIGH]
			|-- jackson-core-2.22.2.jar [2 HIGH]
			|-- jackson-databind-2.22.2.jar [1 CRITICAL, 2 HIGH]
				|-- jackson-core-2.22.2.jar [2 HIGH]
			|-- atlas-bindings-jackson-identities-1.2.3.jar
				|-- logback-classic-1.6.3.jar [1 HIGH]
				|-- jackson-core-2.22.2.jar [2 HIGH]
				|-- jackson-databind-2.22.2.jar [1 CRITICAL, 2 HIGH]
galley-transports-1.24-SNAPSHOT.pom
|-- atlas-identities-1.2.3.jar
	|-- logback-classic-1.6.3.jar [1 HIGH]
|-- galley-transport-filearc-1.24-SNAPSHOT.jar
	|-- atlas-identities-1.2.3.jar
		|-- logback-classic-1.6.3.jar [1 HIGH]
|-- galley-transport-httpclient-1.24-SNAPSHOT.jar
	|-- jackson-core-2.22.2.jar [2 HIGH]
	|-- jackson-databind-2.22.2.jar [1 CRITICAL, 2 HIGH]
		|-- jackson-core-2.22.2.jar [2 HIGH]
	|-- atlas-identities-1.2.3.jar
		|-- logback-classic-1.6.3.jar [1 HIGH]
	|-- jhttpc-1.18.jar
		|-- logback-classic-1.6.3.jar [1 HIGH]
			|-- jackson-databind-2.22.2.jar [1 CRITICAL, 2 HIGH]
		|-- bcpkix-jdk18on-1.85.jar [2 HIGH, 2 MEDIUM]
			|-- bcutil-jdk18on-1.85.jar
				|-- bcprov-jdk18on-1.85.jar [1 HIGH, 5 MEDIUM]
		|-- bcprov-jdk18on-1.85.jar [1 HIGH, 5 MEDIUM]


No Policy violations were detected

Project 'galley-pr' was updated, for more information, visit the Mend platform: https://ibmets.whitesourcesoftware.com/app/orgs/Enterprise%20Applications/applications/summary?project=c3bf3e52-9bc5-446f-ad91-f936410980f9
Or the Core UI: https://ibmets.whitesourcesoftware.com/Wss/WSS.html#!project;token=3293e9a2b318410cb3e9cb4e2caace6d82d023dcee944edfa835841f5a97380c

Mend AI scan succeeded.

Support Token: 1d7d68c7786a440e9bd310d1597ddcbc91793665574978
SAST scan output
*no findings*

Full logs and artifacts

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants