Bump org.apache.maven.plugins:maven-compiler-plugin from 3.15.0 to 3.16.0 by dependabot[bot] · Pull Request #482 · project-ncl/dingrogu

dependabot · 2026-09-08T10:05:14Z

Bumps org.apache.maven.plugins:maven-compiler-plugin from 3.15.0 to 3.16.0.

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.16.0

🚀 New features and improvements

Recompile when dependencies change (#1102) @wilx

Fix incremental detection of empty sources, 3.x (#1075) @wilx

🐛 Bug Fixes

[MCOMPILER-578] - Track outputs across compiler executions (#1091) @wilx

Build fails when annotation processor list is empty (but present) (#1077) @wilx

[MCOMPILER-374] - Unable to compile MR-JAR code against older directories when module-info.java is present (#1093) @wilx

Make mcompiler-120 IT locale independent (#1063) @anilvdl

📝 Documentation updates

[MCOMPILER-569] - Document implicitly compiled excluded sources (#1092) @wilx

Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#1074) @potiuk

👻 Maintenance

Avoid using deprecated method CompilerConfiguration.setCompilerVersion (#1121) @slawekjaranowski

Replace adopt-openj9 by semeru JDK distribution on GH (#1122) @slawekjaranowski

Port the site documentation from APT to Markdown (#1110) @slachiewicz

Verify against Maven 4.0.0-rc-6 (#1105) @slachiewicz

Fix tests on Jenkins (#1100) @slawekjaranowski

Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#1074) @potiuk

Refactor compiler mojo to use dependency injection and improve string… (#1066) @slachiewicz

Fix ITs for Maven 3.10.x (#1061) @slawekjaranowski

Update maven-surefire-plugin version to 3.x in the MCOMPILER-481 IT (#1035) @cdouillard

📦 Dependency updates

Bump plexusCompilerVersion from 2.16.2 to 2.17.0 (#1112) @dependabot[bot]

Bump org.codehaus.plexus:plexus-java from 1.5.2 to 1.6.0 (#1113) @dependabot[bot]

use latest Maven 4 (#1045) @hboutemy

Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml from 4 to 5 (#1083) @dependabot[bot]

Bump apache/maven-gh-actions-shared/.github/workflows/pr-automation.yml from 4 to 5 (#1082) @dependabot[bot]

Bump apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml from 4 to 5 (#1084) @dependabot[bot]

Bump org.apache.maven.plugins:maven-plugins from 48 to 49 (#1068) @dependabot[bot]

Bump org.apache.maven.plugins:maven-invoker-plugin from 3.9.1 to 3.10.1 (#1047) @dependabot[bot]

Bump org.apache.maven.plugins:maven-plugins from 47 to 48 (#1050) @dependabot[bot]

Bump mavenVersion from 3.9.14 to 3.9.16 (#1054) @dependabot[bot]

Bump org.ow2.asm:asm from 9.10 to 9.10.1 (#1059) @dependabot[bot]

Bump org.ow2.asm:asm from 9.9.1 to 9.10 (#1053) @dependabot[bot]

Bump mavenVersion from 3.9.13 to 3.9.14 (#1041) @dependabot[bot]

Bump mavenVersion from 3.9.12 to 3.9.13 (#1038) @dependabot[bot]

Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness from 3.5.0 to 3.5.1 (#1032) @dependabot[bot]

Commits

e7bba6e [maven-release-plugin] prepare release maven-compiler-plugin-3.16.0
c906809 Avoid using deprecated method CompilerConfiguration.setCompilerVersion
ad74fee Replace adopt-openj9 by semeru JDK distribution on GH
beb0eda Recompile when dependencies change (#1102)
a0b689e [MCOMPILER-578] Track outputs across compiler executions (#1091)
2e81228 Fix incremental detection of empty sources, 3.x (#1075)
2132f5b configure ATR project
5992b77 Build fails when annotation processor list is empty (but present) (#1077)
acccef7 Bump plexusCompilerVersion from 2.16.2 to 2.17.0
72bc445 Bump org.codehaus.plexus:plexus-java from 1.5.2 to 1.6.0
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) from 3.15.0 to 3.16.0. - [Release notes](https://github.com/apache/maven-compiler-plugin/releases) - [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.15.0...maven-compiler-plugin-3.16.0) --- updated-dependencies: - dependency-name: org.apache.maven.plugins:maven-compiler-plugin dependency-version: 3.16.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-09-08T10:11:27Z

Mend Scan Results

Status: ⚠️ Findings detected

⚠️ SCA findings detected

SCA scan output




Identified 375 dependencies

Detected 14 vulnerabilities (0 Critical, 4 High, 9 Medium, 1 Low)

+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| SEVERITY |                    LIBRARY                    |       ID       |                                               TOP FIX                                                |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | jsoup-1.21.2.jar                              | CVE-2026-75140 | N/A                                                                                                  |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | jsoup-1.23.1.jar                              | CVE-2026-75140 | N/A                                                                                                  |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | sshd-common-2.18.0.jar                        | CVE-2026-56624 | Upgrade to version  https://github.com/apache/mina-sshd.git - sshd-3.0.0-M5,                         |
|          |                                               |                | org.apache.sshd:sshd-common:2.19.0, https://github.com/apache/mina-sshd.git - sshd-2.19.0,           |
|          |                                               |                | org.apache.sshd:sshd-core:3.0.0-M5,org.apache.sshd:sshd-common:3.0.0-M5,                             |
|          |                                               |                | org.apache.sshd:sshd-core:2.19.0                                                                     |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | wildfly-elytron-password-impl-2.9.2.Final.jar | CVE-2026-19611 | N/A                                                                                                  |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | jackson-databind-2.22.0.jar                   | CVE-2026-19032 | Upgrade to version com.fasterxml.jackson.core:jackson-databind:2.22.2,                               |
|          |                                               |                | tools.jackson.core:jackson-databind:3.2.2,com.fasterxml.jackson.core:jackson-databind:2.18.10,       |
|          |                                               |                | com.fasterxml.jackson.core:jackson-databind:2.21.6,tools.jackson.core:jackson-databind:3.1.6         |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | jackson-databind-2.22.0.jar                   | CVE-2026-54515 | Upgrade to version  https://github.com/FasterXML/jackson-databind.git - jackson-databind-3.1.4,      |
|          |                                               |                | com.fasterxml.jackson.core:jackson-databind:2.21.5,                                                  |
|          |                                               |                | com.fasterxml.jackson.core:jackson-databind:2.22.1,                                                  |
|          |                                               |                | https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.18.9,                         |
|          |                                               |                | https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.21.5,                         |
|          |                                               |                | https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.22.1                          |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | jackson-databind-2.22.0.jar                   | CVE-2026-59889 | Upgrade to version com.fasterxml.jackson.core:jackson-databind:2.21.5,                               |
|          |                                               |                | tools.jackson.core:jackson-databind:3.1.5,tools.jackson.core:jackson-databind:3.2.1,                 |
|          |                                               |                | com.fasterxml.jackson.core:jackson-databind:2.22.1                                                   |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | jackson-databind-2.22.0.jar                   | CVE-2026-77310 | Upgrade to version tools.jackson.core:jackson-databind:3.2.1,                                        |
|          |                                               |                | com.fasterxml.jackson.core:jackson-databind:2.18.9,                                                  |
|          |                                               |                | com.fasterxml.jackson.core:jackson-databind:2.21.5,                                                  |
|          |                                               |                | com.fasterxml.jackson.core:jackson-databind:2.22.1,tools.jackson.core:jackson-databind:3.1.5         |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | jackson-databind-2.22.0.jar                   | CVE-2026-83557 | Upgrade to version tools.jackson.core:jackson-databind:3.1.6,                                        |
|          |                                               |                | com.fasterxml.jackson.core:jackson-databind:2.22.2,                                                  |
|          |                                               |                | com.fasterxml.jackson.core:jackson-databind:2.18.10,                                                 |
|          |                                               |                | com.fasterxml.jackson.core:jackson-databind:2.21.6,tools.jackson.core:jackson-databind:3.2.2         |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | jsoup-1.21.2.jar                              | CVE-2026-71497 | Upgrade to version  https://github.com/jhy/jsoup.git - jsoup-1.23.1,org.jsoup:jsoup:1.23.1           |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | lz4-java-1.10.1.jar                           | CVE-2026-59949 | Upgrade to version  https://github.com/yawkat/lz4-java.git - v1.11.1                                 |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | micrometer-core-1.17.0.jar                    | CVE-2026-59295 | Upgrade to version io.micrometer:micrometer-core:1.17.1,io.micrometer:micrometer-core:1.16.7         |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | micrometer-core-1.17.0.jar                    | CVE-2026-59296 | Upgrade to version  https://github.com/micrometer-metrics/micrometer.git - v1.17.1,                  |
|          |                                               |                | io.micrometer:micrometer-core:1.16.7, https://github.com/micrometer-metrics/micrometer.git - v1.16.7 |
|          |                                               |                | ,io.micrometer:micrometer-registry-statsd:1.17.1,io.micrometer:micrometer-registry-statsd:1.16.7,    |
|          |                                               |                | io.micrometer:micrometer-core:1.17.1                                                                 |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| LOW      | LatencyUtils-2.0.3.jar                        | CVE-2026-82596 | N/A                                                                                                  |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+


Paths at risk

P = policy violation
MSC = malicious vulnerability
CRITICAL/HIGH/MEDIUM/LOW = vulnerability severity

api-3.5.7-SNAPSHOT.jar
|-- converter-jackson-3.0.0.jar
	|-- jackson-databind-2.22.0.jar [5 MEDIUM]
|-- quarkus-oidc-client-3.38.2.jar
	|-- quarkus-oidc-common-3.38.2.jar
		|-- quarkus-tls-registry-3.38.2.jar
			|-- vertx-web-4.5.32.jar
				|-- jackson-databind-2.22.0.jar [5 MEDIUM]
		|-- smallrye-mutiny-vertx-web-client-3.23.0.jar
			|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- quarkus-vertx-3.38.2.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
		|-- smallrye-common-vertx-context-2.19.0.jar
			|-- vertx-core-4.5.32.jar
				|-- jackson-databind-2.22.0.jar [5 MEDIUM]
		|-- smallrye-mutiny-vertx-core-3.23.0.jar
			|-- jackson-databind-2.22.0.jar [5 MEDIUM]
|-- quarkus-rest-client-jackson-3.38.2.jar
	|-- resteasy-reactive-jackson-3.38.2.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
|-- quarkus-rest-jackson-3.38.2.jar
	|-- quarkus-rest-jackson-common-3.38.2.jar
		|-- quarkus-jackson-3.38.2.jar
			|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- quarkus-rest-3.38.2.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
		|-- resteasy-reactive-vertx-3.38.2.jar
			|-- vertx-web-client-4.5.32.jar
				|-- jackson-databind-2.22.0.jar [5 MEDIUM]
		|-- quarkus-vertx-http-3.38.2.jar
			|-- jackson-databind-2.22.0.jar [5 MEDIUM]
|-- common-3.5.7-SNAPSHOT.jar
	|-- common-3.5.15-jakarta.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- pnc-common-3.5.4-jakarta.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
		|-- jackson-module-parameter-names-2.22.0.jar
			|-- jackson-databind-2.22.0.jar [5 MEDIUM]
		|-- pom-manipulation-common-lite-5.5.jar
			|-- jackson-databind-2.22.0.jar [5 MEDIUM]
			|-- reports-model-2.6.9.jar
				|-- jackson-databind-2.22.0.jar [5 MEDIUM]
		|-- jsoup-1.21.2.jar [1 HIGH, 1 MEDIUM]
|-- rex-model-1.2.3.jar
	|-- jackson-databind-2.22.0.jar [5 MEDIUM]
|-- dto-3.5.15-patch-builders.jar
	|-- jsoup-1.21.2.jar [1 HIGH, 1 MEDIUM]
|-- pnc-api-3.6.0-SNAPSHOT-jakarta.jar
	|-- jackson-databind-2.22.0.jar [5 MEDIUM]
|-- spi-3.5.15.jar
	|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- jackson-datatype-jdk8-2.22.0.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- jackson-datatype-jsr310-2.22.0.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
application-3.5.7-SNAPSHOT.jar
|-- quarkus-elytron-security-ldap-3.38.2.jar
	|-- quarkus-elytron-security-3.38.2.jar
		|-- quarkus-elytron-security-common-3.38.2.jar
			|-- wildfly-elytron-password-impl-2.9.2.Final.jar [1 HIGH]
		|-- wildfly-elytron-password-impl-2.9.2.Final.jar [1 HIGH]
	|-- wildfly-elytron-realm-ldap-2.9.2.Final.jar
		|-- wildfly-elytron-client-2.9.2.Final.jar
			|-- wildfly-elytron-credential-source-impl-2.9.2.Final.jar
				|-- wildfly-elytron-password-impl-2.9.2.Final.jar [1 HIGH]
			|-- wildfly-elytron-credential-store-2.9.2.Final.jar
				|-- wildfly-elytron-password-impl-2.9.2.Final.jar [1 HIGH]
			|-- wildfly-elytron-password-impl-2.9.2.Final.jar [1 HIGH]
			|-- wildfly-elytron-ssh-util-2.9.2.Final.jar
				|-- sshd-common-2.18.0.jar [1 HIGH]
		|-- wildfly-elytron-realm-2.9.2.Final.jar
			|-- wildfly-elytron-auth-util-2.9.2.Final.jar
				|-- sshd-common-2.18.0.jar [1 HIGH]
			|-- wildfly-elytron-password-impl-2.9.2.Final.jar [1 HIGH]
|-- quarkus-micrometer-opentelemetry-3.38.2.jar
	|-- quarkus-micrometer-3.38.2.jar
		|-- lz4-java-1.10.1.jar [1 MEDIUM]
		|-- micrometer-core-1.17.0.jar [2 MEDIUM]
		|-- LatencyUtils-2.0.3.jar [1 LOW]
|-- quarkus-oidc-client-3.38.2.jar
	|-- quarkus-oidc-common-3.38.2.jar
		|-- smallrye-mutiny-vertx-web-client-3.23.0.jar
			|-- jackson-databind-2.22.0.jar [5 MEDIUM]
|-- quarkus-oidc-3.38.2.jar
	|-- quarkus-vertx-http-3.38.2.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
		|-- vertx-web-4.5.32.jar
			|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- quarkus-vertx-3.38.2.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
		|-- quarkus-netty-3.38.2.jar
			|-- netty-codec-4.1.137.Final.jar
				|-- lz4-java-1.10.1.jar [1 MEDIUM]
		|-- smallrye-common-vertx-context-2.19.0.jar
			|-- vertx-core-4.5.32.jar
				|-- jackson-databind-2.22.0.jar [5 MEDIUM]
		|-- smallrye-mutiny-vertx-core-3.23.0.jar
			|-- jackson-databind-2.22.0.jar [5 MEDIUM]
|-- quarkus-smallrye-openapi-3.38.2.jar
	|-- smallrye-open-api-core-4.3.5.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
		|-- jackson-dataformat-yaml-2.22.0.jar
			|-- jackson-databind-2.22.0.jar [5 MEDIUM]
|-- api-3.5.7-SNAPSHOT.jar
	|-- converter-jackson-3.0.0.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- quarkus-rest-client-jackson-3.38.2.jar
		|-- resteasy-reactive-jackson-3.38.2.jar
			|-- jackson-databind-2.22.0.jar [5 MEDIUM]
		|-- quarkus-rest-jackson-common-3.38.2.jar
			|-- quarkus-jackson-3.38.2.jar
				|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- rex-model-1.2.3.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- spi-3.5.15.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
|-- common-3.5.7-SNAPSHOT.jar
	|-- quarkus-rest-3.38.2.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
		|-- resteasy-reactive-vertx-3.38.2.jar
			|-- vertx-web-client-4.5.32.jar
				|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- pnc-api-3.6.0-SNAPSHOT-jakarta.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- pnc-common-3.5.4-jakarta.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
		|-- jackson-module-parameter-names-2.22.0.jar
			|-- jackson-databind-2.22.0.jar [5 MEDIUM]
		|-- pom-manipulation-common-lite-5.5.jar
			|-- jackson-databind-2.22.0.jar [5 MEDIUM]
			|-- reports-model-2.6.9.jar
				|-- jackson-databind-2.22.0.jar [5 MEDIUM]
		|-- jsoup-1.21.2.jar [1 HIGH, 1 MEDIUM]
|-- rest-adapter-3.5.7-SNAPSHOT.jar
	|-- unirest-modules-jackson-4.6.0.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- quarkus-smallrye-fault-tolerance-3.38.2.jar
		|-- smallrye-fault-tolerance-6.11.2.jar
			|-- micrometer-core-1.17.0.jar [2 MEDIUM]
			|-- smallrye-fault-tolerance-core-6.11.2.jar
				|-- micrometer-core-1.17.0.jar [2 MEDIUM]
	|-- dto-3.5.15-patch-builders.jar
		|-- jsoup-1.21.2.jar [1 HIGH, 1 MEDIUM]
|-- quarkus-logging-kafka-3.0.5.jar
	|-- kafka-log4j-appender-3.9.2.jar
		|-- kafka-clients-4.2.1.jar
			|-- lz4-java-1.10.1.jar [1 MEDIUM]
|-- common-3.5.15-jakarta.jar
	|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- jackson-datatype-jdk8-2.22.0.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- jackson-datatype-jsr310-2.22.0.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
common-3.5.7-SNAPSHOT.jar
|-- quarkus-rest-3.38.2.jar
	|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- resteasy-reactive-vertx-3.38.2.jar
		|-- smallrye-mutiny-vertx-core-3.23.0.jar
			|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- quarkus-vertx-http-3.38.2.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
		|-- quarkus-vertx-3.38.2.jar
			|-- jackson-databind-2.22.0.jar [5 MEDIUM]
		|-- vertx-web-4.5.32.jar
			|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- quarkus-virtual-threads-3.38.2.jar
		|-- vertx-core-4.5.32.jar
			|-- jackson-databind-2.22.0.jar [5 MEDIUM]
|-- rex-model-1.2.3.jar
	|-- jackson-databind-2.22.0.jar [5 MEDIUM]
|-- common-3.5.15-jakarta.jar
	|-- jackson-databind-2.22.0.jar [5 MEDIUM]
|-- pnc-api-3.6.0-SNAPSHOT-jakarta.jar
	|-- jackson-databind-2.22.0.jar [5 MEDIUM]
|-- pnc-common-3.5.4-jakarta.jar
	|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- pom-manipulation-common-lite-5.5.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
		|-- reports-model-2.6.9.jar
			|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- jsoup-1.23.1.jar [1 HIGH]
rest-adapter-3.5.7-SNAPSHOT.jar
|-- unirest-modules-jackson-4.6.0.jar
	|-- jackson-databind-2.22.0.jar [5 MEDIUM]
|-- quarkus-rest-jackson-3.38.2.jar
	|-- quarkus-rest-jackson-common-3.38.2.jar
		|-- quarkus-jackson-3.38.2.jar
			|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- quarkus-rest-3.38.2.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
		|-- resteasy-reactive-vertx-3.38.2.jar
			|-- vertx-web-client-4.5.32.jar
				|-- jackson-databind-2.22.0.jar [5 MEDIUM]
		|-- quarkus-vertx-http-3.38.2.jar
			|-- jackson-databind-2.22.0.jar [5 MEDIUM]
			|-- vertx-web-4.5.32.jar
				|-- jackson-databind-2.22.0.jar [5 MEDIUM]
		|-- quarkus-virtual-threads-3.38.2.jar
			|-- vertx-core-4.5.32.jar
				|-- jackson-databind-2.22.0.jar [5 MEDIUM]
|-- api-3.5.7-SNAPSHOT.jar
	|-- converter-jackson-3.0.0.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- quarkus-oidc-client-3.38.2.jar
		|-- quarkus-oidc-common-3.38.2.jar
			|-- smallrye-mutiny-vertx-web-client-3.23.0.jar
				|-- jackson-databind-2.22.0.jar [5 MEDIUM]
		|-- quarkus-vertx-3.38.2.jar
			|-- jackson-databind-2.22.0.jar [5 MEDIUM]
			|-- smallrye-mutiny-vertx-core-3.23.0.jar
				|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- quarkus-rest-client-jackson-3.38.2.jar
		|-- resteasy-reactive-jackson-3.38.2.jar
			|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- pnc-api-3.6.0-SNAPSHOT-jakarta.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- spi-3.5.15.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
|-- rex-model-1.2.3.jar
	|-- jackson-databind-2.22.0.jar [5 MEDIUM]
|-- common-3.5.15-jakarta.jar
	|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- jackson-datatype-jsr310-2.22.0.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
|-- dto-3.5.15-patch-builders.jar
	|-- jsoup-1.21.2.jar [1 HIGH, 1 MEDIUM]
|-- pnc-common-3.5.4-jakarta.jar
	|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- jackson-datatype-jdk8-2.22.0.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- jackson-module-parameter-names-2.22.0.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- pom-manipulation-common-lite-5.5.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
		|-- reports-model-2.6.9.jar
			|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- jsoup-1.21.2.jar [1 HIGH, 1 MEDIUM]
rest-workflow-3.5.7-SNAPSHOT.jar
|-- quarkus-rest-jackson-3.38.2.jar
	|-- quarkus-rest-jackson-common-3.38.2.jar
		|-- quarkus-jackson-3.38.2.jar
			|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- quarkus-rest-3.38.2.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
		|-- resteasy-reactive-vertx-3.38.2.jar
			|-- vertx-web-client-4.5.32.jar
				|-- jackson-databind-2.22.0.jar [5 MEDIUM]
		|-- quarkus-vertx-http-3.38.2.jar
			|-- jackson-databind-2.22.0.jar [5 MEDIUM]
			|-- vertx-web-4.5.32.jar
				|-- jackson-databind-2.22.0.jar [5 MEDIUM]
		|-- quarkus-virtual-threads-3.38.2.jar
			|-- vertx-core-4.5.32.jar
				|-- jackson-databind-2.22.0.jar [5 MEDIUM]
|-- api-3.5.7-SNAPSHOT.jar
	|-- converter-jackson-3.0.0.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- quarkus-oidc-client-3.38.2.jar
		|-- quarkus-oidc-common-3.38.2.jar
			|-- smallrye-mutiny-vertx-web-client-3.23.0.jar
				|-- jackson-databind-2.22.0.jar [5 MEDIUM]
		|-- quarkus-vertx-3.38.2.jar
			|-- jackson-databind-2.22.0.jar [5 MEDIUM]
			|-- smallrye-mutiny-vertx-core-3.23.0.jar
				|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- quarkus-rest-client-jackson-3.38.2.jar
		|-- resteasy-reactive-jackson-3.38.2.jar
			|-- jackson-databind-2.22.0.jar [5 MEDIUM]
|-- common-3.5.7-SNAPSHOT.jar
	|-- pnc-api-3.6.0-SNAPSHOT-jakarta.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
|-- rest-adapter-3.5.7-SNAPSHOT.jar
	|-- unirest-modules-jackson-4.6.0.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- common-3.5.15-jakarta.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- dto-3.5.15-patch-builders.jar
		|-- jsoup-1.23.1.jar [1 HIGH]
|-- rex-model-1.2.3.jar
	|-- jackson-databind-2.22.0.jar [5 MEDIUM]
|-- pnc-common-3.5.4-jakarta.jar
	|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- jackson-datatype-jsr310-2.22.0.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- jackson-module-parameter-names-2.22.0.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- pom-manipulation-common-lite-5.5.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
		|-- reports-model-2.6.9.jar
			|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- jsoup-1.23.1.jar [1 HIGH]
|-- spi-3.5.15.jar
	|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- jackson-datatype-jdk8-2.22.0.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]


No Policy violations were detected

Project 'dingrogu-pr' was updated, for more information, visit the Mend platform: https://ibmets.whitesourcesoftware.com/app/orgs/Enterprise%20Applications/applications/summary?project=960ce4f2-52eb-442f-a85e-6d5ed132b2d7
Or the Core UI: https://ibmets.whitesourcesoftware.com/Wss/WSS.html#!project;token=068fd496424f444ea07efc0bde267e16bbc324f77bae44169bc308ed0ceec190

Mend AI scan succeeded.

Support Token: 329a57853c37548bda3d6af066b259c351788862211906

SAST scan output

*no findings*

Full logs and artifacts

dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Sep 8, 2026

rnc merged commit 38b783f into main Sep 9, 2026
5 checks passed

rnc deleted the dependabot/maven/org.apache.maven.plugins-maven-compiler-plugin-3.16.0 branch September 9, 2026 10:08

Navigation Menu

Uh oh!

Bump org.apache.maven.plugins:maven-compiler-plugin from 3.15.0 to 3.16.0 - #482

Bump org.apache.maven.plugins:maven-compiler-plugin from 3.15.0 to 3.16.0#482
rnc merged 1 commit into
mainfrom
dependabot/maven/org.apache.maven.plugins-maven-compiler-plugin-3.16.0

dependabot Bot commented on behalf of github Sep 8, 2026

Uh oh!

github-actions Bot commented Sep 8, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 8, 2026

3.16.0

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

Uh oh!

github-actions Bot commented Sep 8, 2026

Mend Scan Results

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant