Bump version.maven-surefire-plugin from 3.5.6 to 3.6.0 by dependabot[bot] · Pull Request #402 · project-ncl/reqour

dependabot · 2026-09-08T22:43:57Z

Bumps version.maven-surefire-plugin from 3.5.6 to 3.6.0.
Updates org.apache.maven.plugins:maven-surefire-plugin from 3.5.6 to 3.6.0

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.6.0

Please refer to the main page for what's new https://maven.apache.org/surefire/ And the migration page https://maven.apache.org/surefire/maven-surefire-plugin/whats-new-3-6-0.html

🚀 New features and improvements

Fix #3303: distinguish JUnit 6 ParameterizedClass invocations (#3432) @AzazelSensei

[SUREFIRE-1639] - Add ability to configure JUnit 5 TestExecutionListener (#3438) @pan3793

Issue #838 Implement extension point to run diagnosis tools when forked JVM times out (#3372) @olamy

[SUREFIRE-2148] - Verify recovered BeforeAll does not fail build (#3419) @wilx

[SUREFIRE-823] - Decouple -DskipTests from Failsafe plugin (#3371) @olamy

Use StackWalker in StackTraceProvider when available (Java 9+) (#3374) @olamy

[Issue-3380] Send sourceQualifiedName to forked clients (#3380) (#3381) @fabriciorby

🐛 Bug Fixes

[SUREFIRE-523] - Link all reported tests to source XRef (#3445) @wilx

[SUREFIRE-3446] - Fix direct selection of JUnit Jupiter @Nested classes (#3447) @wilx

Discover tests in a fork when a toolchain JDK is used (#3444) @olamy

[SUREFIRE-2239, SUREFIRE-2241, SUREFIRE-2260, SUREFIRE-2274, SUREFIRE-2300] Preserve JUnit Platform test identity across reruns (#3418) @wilx

Fix #3428: resolve parents via TestPlan.getParent for pre-1.8 platforms (#3429) @kalayciburak

[SUREFIRE-859] - Make random test order reproducible (#3421) @wilx

[SUREFIRE-862, SUREFIRE-3178] Handle missing Failsafe summary files (#3417) @wilx

fix: report AfterAll/AfterClass exceptions as errors again (#3412) (#3413) @arimu1

Fixes #3264 : tests inside @Suite incorrectly classified as flakes (#3342) @mirkoalicastro

Fix Windows flake in CommandChannelDecoderTest (#3400) @ascheman

Fix reportNameSuffix in XML testcase classname (#3379) @goutamadwant

Fix: resolve relative classpath elements against the fork's working dir (#3333) @cwegener-79

📝 Documentation updates

Magnify the home, well at least have something rather than nothing :) (#3377) @olamy

Restore the straight quotes the FAQ conversion turned typographic (#3425) @slachiewicz

Restore the table borders lost in the APT conversion (#3424) @slachiewicz

Convert the FAQ from FML to Markdown (#3423) @slachiewicz

Convert the remaining site documentation from APT to Markdown (#3422) @slachiewicz

javadoc: clarify statelessTestsetReporter, consoleOutputReporter, (#3410) @joshinii

Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#3387) @potiuk

Update documentation we support Junit 6 as well :) (#3370) @olamy

👻 Maintenance

Stop dependabot from updating test fixtures (#3440) @slachiewicz

Migrate legacy plugin Javadoc annotations (#3416) @wilx

Use the resolver's own HTTP transport in the report plugin tests (#3414) @slachiewicz

Pin maven-jar-plugin 3.5.1 in modular IT fixtures (#3398) @ascheman

Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#3387) @potiuk

... (truncated)

Commits

0ff622b [maven-release-plugin] prepare release surefire-3.6.0
bb3932a Let's go for 3.6.0 release
3002a16 Bump mavenVersion from 3.9.14 to 3.9.16
61a531d Bump Maven parent version from 47 to 49 (#3449)
e52ead4 [SUREFIRE-523] Link all reported tests to source XRef (#3445)
45102fa [SUREFIRE-3446] Fix direct selection of JUnit Jupiter @Nested classes (#3447)
b2e1f70 Fix #3303: distinguish JUnit 6 ParameterizedClass invocations (#3432)
c051938 Discover tests in a fork when a toolchain JDK is used (#3444)
db75df8 Bump org.codehaus.plexus:plexus-java from 1.5.2 to 1.6.0 (#3441)
77f2759 Bump org.codehaus.plexus:plexus-interpolation from 1.29 to 1.30.0
Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-failsafe-plugin from 3.5.6 to 3.6.0

Release notes

Sourced from org.apache.maven.plugins:maven-failsafe-plugin's releases.

3.6.0

Please refer to the main page for what's new https://maven.apache.org/surefire/ And the migration page https://maven.apache.org/surefire/maven-surefire-plugin/whats-new-3-6-0.html

🚀 New features and improvements

Fix #3303: distinguish JUnit 6 ParameterizedClass invocations (#3432) @AzazelSensei

[SUREFIRE-1639] - Add ability to configure JUnit 5 TestExecutionListener (#3438) @pan3793

Issue #838 Implement extension point to run diagnosis tools when forked JVM times out (#3372) @olamy

[SUREFIRE-2148] - Verify recovered BeforeAll does not fail build (#3419) @wilx

[SUREFIRE-823] - Decouple -DskipTests from Failsafe plugin (#3371) @olamy

Use StackWalker in StackTraceProvider when available (Java 9+) (#3374) @olamy

[Issue-3380] Send sourceQualifiedName to forked clients (#3380) (#3381) @fabriciorby

🐛 Bug Fixes

[SUREFIRE-523] - Link all reported tests to source XRef (#3445) @wilx

[SUREFIRE-3446] - Fix direct selection of JUnit Jupiter @Nested classes (#3447) @wilx

Discover tests in a fork when a toolchain JDK is used (#3444) @olamy

[SUREFIRE-2239, SUREFIRE-2241, SUREFIRE-2260, SUREFIRE-2274, SUREFIRE-2300] Preserve JUnit Platform test identity across reruns (#3418) @wilx

Fix #3428: resolve parents via TestPlan.getParent for pre-1.8 platforms (#3429) @kalayciburak

[SUREFIRE-859] - Make random test order reproducible (#3421) @wilx

[SUREFIRE-862, SUREFIRE-3178] Handle missing Failsafe summary files (#3417) @wilx

fix: report AfterAll/AfterClass exceptions as errors again (#3412) (#3413) @arimu1

Fixes #3264 : tests inside @Suite incorrectly classified as flakes (#3342) @mirkoalicastro

Fix Windows flake in CommandChannelDecoderTest (#3400) @ascheman

Fix reportNameSuffix in XML testcase classname (#3379) @goutamadwant

Fix: resolve relative classpath elements against the fork's working dir (#3333) @cwegener-79

📝 Documentation updates

Magnify the home, well at least have something rather than nothing :) (#3377) @olamy

Restore the straight quotes the FAQ conversion turned typographic (#3425) @slachiewicz

Restore the table borders lost in the APT conversion (#3424) @slachiewicz

Convert the FAQ from FML to Markdown (#3423) @slachiewicz

Convert the remaining site documentation from APT to Markdown (#3422) @slachiewicz

javadoc: clarify statelessTestsetReporter, consoleOutputReporter, (#3410) @joshinii

Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#3387) @potiuk

Update documentation we support Junit 6 as well :) (#3370) @olamy

👻 Maintenance

Stop dependabot from updating test fixtures (#3440) @slachiewicz

Migrate legacy plugin Javadoc annotations (#3416) @wilx

Use the resolver's own HTTP transport in the report plugin tests (#3414) @slachiewicz

Pin maven-jar-plugin 3.5.1 in modular IT fixtures (#3398) @ascheman

Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#3387) @potiuk

... (truncated)

Commits

0ff622b [maven-release-plugin] prepare release surefire-3.6.0
bb3932a Let's go for 3.6.0 release
3002a16 Bump mavenVersion from 3.9.14 to 3.9.16
61a531d Bump Maven parent version from 47 to 49 (#3449)
e52ead4 [SUREFIRE-523] Link all reported tests to source XRef (#3445)
45102fa [SUREFIRE-3446] Fix direct selection of JUnit Jupiter @Nested classes (#3447)
b2e1f70 Fix #3303: distinguish JUnit 6 ParameterizedClass invocations (#3432)
c051938 Discover tests in a fork when a toolchain JDK is used (#3444)
db75df8 Bump org.codehaus.plexus:plexus-java from 1.5.2 to 1.6.0 (#3441)
77f2759 Bump org.codehaus.plexus:plexus-interpolation from 1.29 to 1.30.0
Additional commits viewable in compare view

github-actions · 2026-09-08T22:59:40Z

Mend Scan Results

Status: ⚠️ Findings detected

⚠️ SCA findings detected

SCA scan output




Identified 468 dependencies

Detected 36 vulnerabilities (2 Critical, 14 High, 19 Medium, 1 Low)

+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| SEVERITY |                    LIBRARY                    |       ID       |                                               TOP FIX                                                |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| CRITICAL | httpclient5-5.6.2.jar                         | CVE-2026-71290 | Upgrade to version  https://github.com/apache/httpcomponents-client.git - rel/v5.6.4,                |
|          |                                               |                | org.apache.httpcomponents.client5:httpclient5:5.6.4                                                  |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| CRITICAL | netty-handler-4.1.135.Final.jar               | CVE-2026-75595 | Upgrade to version io.netty:netty-handler:4.2.17.Final,io.netty:netty-handler:4.1.137.Final,         |
|          |                                               |                | https://github.com/netty/netty.git - netty-4.1.137.Final, https://github.com/netty/netty.git -       |
|          |                                               |                | netty-4.2.17.Final                                                                                   |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | jsoup-1.23.1.jar                              | CVE-2026-75140 | N/A                                                                                                  |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-4.1.135.Final.jar                 | CVE-2026-59901 | io.netty:netty-codec-compression:4.2.16.Final,io.netty:netty-codec:4.1.136.Final                     |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-haproxy-4.1.135.Final.jar         | CVE-2026-55851 | Upgrade to version io.netty:netty-codec-haproxy:4.2.16.Final,                                        |
|          |                                               |                | io.netty:netty-codec-haproxy:4.1.136.Final, https://github.com/netty/netty.git - netty-4.2.16.Final, |
|          |                                               |                | https://github.com/netty/netty.git - netty-4.1.136.Final                                             |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-http-4.1.135.Final.jar            | CVE-2026-55831 | Upgrade to version io.netty:netty-codec-http:4.2.16.Final,io.netty:netty-codec-http:4.1.136.Final    |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-http-4.1.135.Final.jar            | CVE-2026-55833 | Upgrade to version io.netty:netty-codec-http:4.2.16.Final,io.netty:netty-codec-http:4.1.136.Final    |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-http-4.1.135.Final.jar            | CVE-2026-56745 | Upgrade to version io.netty:netty-codec-http:4.2.16.Final,io.netty:netty-codec-http:4.1.136.Final,   |
|          |                                               |                | https://github.com/netty/netty.git - netty-4.1.136.Final, https://github.com/netty/netty.git -       |
|          |                                               |                | netty-4.2.16.Final                                                                                   |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-http2-4.1.135.Final.jar           | CVE-2026-56819 | Upgrade to version io.netty:netty-codec-http2:4.1.136.Final,io.netty:netty-codec-http2:4.2.16.Final, |
|          |                                               |                | https://github.com/netty/netty.git - netty-4.1.136.Final, https://github.com/netty/netty.git -       |
|          |                                               |                | netty-4.2.16.Final                                                                                   |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-http2-4.1.135.Final.jar           | CVE-2026-59900 | Upgrade to version io.netty:netty-codec-http2:4.1.136.Final                                          |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-handler-4.1.135.Final.jar               | CVE-2026-62243 | Upgrade to version io.netty:netty-handler:4.1.137.Final,io.netty:netty-handler:4.2.17.Final          |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-handler-4.1.135.Final.jar               | CVE-2026-75596 | Upgrade to version io.netty:netty-handler:4.2.17.Final,io.netty:netty-handler:4.1.137.Final,         |
|          |                                               |                | https://github.com/netty/netty.git - netty-4.2.17.Final, https://github.com/netty/netty.git -        |
|          |                                               |                | netty-4.1.137.Final                                                                                  |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | sshd-common-2.17.1.jar                        | CVE-2026-56624 | Upgrade to version  https://github.com/apache/mina-sshd.git - sshd-3.0.0-M5,                         |
|          |                                               |                | org.apache.sshd:sshd-core:2.19.0,org.apache.sshd:sshd-common:3.0.0-M5,                               |
|          |                                               |                | org.apache.sshd:sshd-core:3.0.0-M5, https://github.com/apache/mina-sshd.git - sshd-2.19.0,           |
|          |                                               |                | org.apache.sshd:sshd-common:2.19.0                                                                   |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | vertx-core-4.5.28.jar                         | CVE-2026-15075 | Upgrade to version  https://github.com/eclipse-vertx/vert.x.git - 5.1.5,io.vertx:vertx-core:4.5.30,  |
|          |                                               |                | io.vertx:vertx-core:5.1.5, https://github.com/eclipse-vertx/vert.x.git - 4.5.30                      |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | vertx-web-client-4.5.28.jar                   | CVE-2026-15076 | Upgrade to version io.vertx:vertx-web-client:4.5.30, https://github.com/vert-x3/vertx-web.git -      |
|          |                                               |                | 4.5.30, https://github.com/vert-x3/vertx-web.git - 5.1.5,io.vertx:vertx-web-client:5.1.5             |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | wildfly-elytron-password-impl-2.9.1.Final.jar | CVE-2026-19611 | N/A                                                                                                  |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | httpclient5-5.6.2.jar                         | CVE-2026-64607 | Upgrade to version org.apache.httpcomponents.client5:httpclient5:5.6.3                               |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | ivy-2.5.3.jar                                 | CVE-2026-26032 | Upgrade to version org.apache.ivy:ivy:2.6.0, https://github.com/apache/ant-ivy.git - rel/2.6.0       |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | jackson-databind-2.22.0.jar                   | CVE-2026-19032 | Upgrade to version tools.jackson.core:jackson-databind:3.2.2,                                        |
|          |                                               |                | com.fasterxml.jackson.core:jackson-databind:2.22.2,                                                  |
|          |                                               |                | com.fasterxml.jackson.core:jackson-databind:2.21.6,tools.jackson.core:jackson-databind:3.1.6,        |
|          |                                               |                | com.fasterxml.jackson.core:jackson-databind:2.18.10                                                  |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | jackson-databind-2.22.0.jar                   | CVE-2026-54515 | Upgrade to version  https://github.com/FasterXML/jackson-databind.git - jackson-databind-3.1.4,      |
|          |                                               |                | com.fasterxml.jackson.core:jackson-databind:2.21.5,                                                  |
|          |                                               |                | com.fasterxml.jackson.core:jackson-databind:2.22.1,                                                  |
|          |                                               |                | https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.18.9,                         |
|          |                                               |                | https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.21.5,                         |
|          |                                               |                | https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.22.1                          |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | jackson-databind-2.22.0.jar                   | CVE-2026-59889 | Upgrade to version com.fasterxml.jackson.core:jackson-databind:2.21.5,                               |
|          |                                               |                | tools.jackson.core:jackson-databind:3.1.5,tools.jackson.core:jackson-databind:3.2.1,                 |
|          |                                               |                | com.fasterxml.jackson.core:jackson-databind:2.22.1                                                   |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | jackson-databind-2.22.0.jar                   | CVE-2026-77310 | Upgrade to version tools.jackson.core:jackson-databind:3.2.1,                                        |
|          |                                               |                | com.fasterxml.jackson.core:jackson-databind:2.18.9,                                                  |
|          |                                               |                | com.fasterxml.jackson.core:jackson-databind:2.21.5,                                                  |
|          |                                               |                | com.fasterxml.jackson.core:jackson-databind:2.22.1,tools.jackson.core:jackson-databind:3.1.5         |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | jackson-databind-2.22.0.jar                   | CVE-2026-83557 | Upgrade to version tools.jackson.core:jackson-databind:3.1.6,                                        |
|          |                                               |                | com.fasterxml.jackson.core:jackson-databind:2.22.2,                                                  |
|          |                                               |                | com.fasterxml.jackson.core:jackson-databind:2.18.10,                                                 |
|          |                                               |                | com.fasterxml.jackson.core:jackson-databind:2.21.6,tools.jackson.core:jackson-databind:3.2.2         |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | lz4-java-1.10.1.jar                           | CVE-2026-59949 | Upgrade to version  https://github.com/yawkat/lz4-java.git - v1.11.1                                 |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | micrometer-core-1.16.6.jar                    | CVE-2026-59295 | Upgrade to version io.micrometer:micrometer-core:1.17.1,io.micrometer:micrometer-core:1.16.7         |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | micrometer-core-1.16.6.jar                    | CVE-2026-59296 | Upgrade to version io.micrometer:micrometer-registry-statsd:1.16.7,                                  |
|          |                                               |                | io.micrometer:micrometer-registry-statsd:1.17.1,                                                     |
|          |                                               |                | https://github.com/micrometer-metrics/micrometer.git - v1.16.7,io.micrometer:micrometer-core:1.17.1, |
|          |                                               |                | io.micrometer:micrometer-core:1.16.7, https://github.com/micrometer-metrics/micrometer.git - v1.17.1 |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-dns-4.1.135.Final.jar             | CVE-2026-73508 | Upgrade to version  https://github.com/netty/netty.git - netty-4.1.136.Final                         |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-haproxy-4.1.135.Final.jar         | CVE-2026-59919 | io.netty:netty-codec-haproxy:4.1.136.Final,io.netty:netty-codec-haproxy:4.2.16.Final                 |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-http-4.1.135.Final.jar            | CVE-2026-56746 | Upgrade to version io.netty:netty-codec-http:4.2.16.Final,io.netty:netty-codec-http:4.1.136.Final,   |
|          |                                               |                | https://github.com/netty/netty.git - netty-4.1.136.Final, https://github.com/netty/netty.git -       |
|          |                                               |                | netty-4.2.16.Final                                                                                   |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-http-4.1.135.Final.jar            | CVE-2026-59898 | io.netty:netty-codec-http:4.1.136.Final,io.netty:netty-codec-http:4.2.16.Final                       |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-http-4.1.135.Final.jar            | CVE-2026-59899 | io.netty:netty-codec-http:4.2.16.Final,io.netty:netty-codec-http:4.1.136.Final                       |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-http-4.1.135.Final.jar            | CVE-2026-59903 | Upgrade to version  https://github.com/netty/netty.git - netty-4.1.137.Final,                        |
|          |                                               |                | https://github.com/netty/netty.git - netty-4.2.17.Final                                              |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-http-4.1.135.Final.jar            | CVE-2026-59921 | io.netty:netty-codec-http:4.2.16.Final,io.netty:netty-codec-http:4.1.136.Final                       |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-socks-4.1.135.Final.jar           | CVE-2026-62380 | Upgrade to version io.netty:netty-codec-socks:4.2.17.Final,io.netty:netty-codec-socks:4.1.137.Final  |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | opentelemetry-api-1.60.1.jar                  | CVE-2026-45292 | Upgrade to version  https://github.com/open-telemetry/opentelemetry-java.git - v1.62.0,              |
|          |                                               |                | io.opentelemetry:opentelemetry-extension-trace-propagators:1.62.0                                    |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| LOW      | LatencyUtils-2.0.3.jar                        | CVE-2026-82596 | N/A                                                                                                  |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+


Paths at risk

P = policy violation
MSC = malicious vulnerability
CRITICAL/HIGH/MEDIUM/LOW = vulnerability severity

quarkus-micrometer-opentelemetry-3.37.1.jar
|-- opentelemetry-micrometer-1.5-2.26.1-alpha.jar
	|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
|-- quarkus-micrometer-3.37.1.jar
	|-- micrometer-core-1.16.6.jar [2 MEDIUM]
		|-- LatencyUtils-2.0.3.jar [1 LOW]
	|-- quarkus-vertx-http-3.37.1.jar
		|-- smallrye-mutiny-vertx-web-3.22.2.jar
			|-- smallrye-mutiny-vertx-uri-template-3.22.2.jar
				|-- vertx-uri-template-4.5.28.jar
					|-- vertx-core-4.5.28.jar [1 HIGH]
		|-- vertx-web-4.5.28.jar
			|-- vertx-auth-common-4.5.28.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-bridge-common-4.5.28.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-web-common-4.5.28.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
|-- quarkus-opentelemetry-3.37.1.jar
	|-- opentelemetry-instrumentation-annotations-support-2.26.1-alpha.jar
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- opentelemetry-instrumentation-annotations-2.26.1.jar
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- opentelemetry-instrumentation-api-2.26.1.jar
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- opentelemetry-jdbc-2.26.1-alpha.jar
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- opentelemetry-runtime-telemetry-java17-2.26.1-alpha.jar
		|-- opentelemetry-runtime-telemetry-2.26.1-alpha.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- opentelemetry-api-incubator-1.60.1-alpha.jar
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- opentelemetry-exporter-otlp-common-1.60.1.jar
		|-- opentelemetry-exporter-common-1.60.1.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- opentelemetry-exporter-otlp-1.60.1.jar
		|-- opentelemetry-sdk-logs-1.60.1.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- opentelemetry-sdk-1.60.1.jar
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-sdk-common-1.60.1.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-sdk-metrics-1.60.1.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-sdk-trace-1.60.1.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- quarkus-grpc-common-3.37.1.jar
		|-- vertx-grpc-server-4.5.28.jar
			|-- vertx-core-4.5.28.jar [1 HIGH]
		|-- vertx-grpc-4.5.28.jar
			|-- grpc-netty-1.81.0.jar
				|-- netty-codec-http2-4.1.135.Final.jar [2 HIGH]
			|-- vertx-core-4.5.28.jar [1 HIGH]
	|-- quarkus-tls-registry-3.37.1.jar
		|-- smallrye-private-key-pem-parser-0.9.3.jar
			|-- vertx-core-4.5.28.jar [1 HIGH]
	|-- quarkus-vertx-3.37.1.jar
		|-- netty-codec-haproxy-4.1.135.Final.jar [1 HIGH, 1 MEDIUM]
			|-- netty-codec-4.1.135.Final.jar [1 HIGH]
		|-- quarkus-netty-3.37.1.jar
			|-- netty-codec-http2-4.1.135.Final.jar [2 HIGH]
			|-- netty-codec-http-4.1.135.Final.jar [3 HIGH, 5 MEDIUM]
			|-- netty-codec-4.1.135.Final.jar [1 HIGH]
			|-- netty-handler-4.1.135.Final.jar [1 CRITICAL, 2 HIGH]
				|-- netty-codec-4.1.135.Final.jar [1 HIGH]
		|-- quarkus-virtual-threads-3.37.1.jar
			|-- vertx-core-4.5.28.jar [1 HIGH]
		|-- smallrye-mutiny-vertx-core-3.22.2.jar
			|-- smallrye-mutiny-vertx-runtime-3.22.2.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-core-4.5.28.jar [1 HIGH]
		|-- smallrye-fault-tolerance-vertx-6.11.1.jar
			|-- vertx-core-4.5.28.jar [1 HIGH]
	|-- smallrye-common-vertx-context-2.18.1.jar
		|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- netty-codec-haproxy-4.1.135.Final.jar [1 HIGH, 1 MEDIUM]
			|-- netty-codec-http2-4.1.135.Final.jar [2 HIGH]
				|-- netty-codec-http-4.1.135.Final.jar [3 HIGH, 5 MEDIUM]
				|-- netty-codec-4.1.135.Final.jar [1 HIGH]
				|-- netty-handler-4.1.135.Final.jar [1 CRITICAL, 2 HIGH]
			|-- netty-codec-http-4.1.135.Final.jar [3 HIGH, 5 MEDIUM]
				|-- netty-codec-4.1.135.Final.jar [1 HIGH]
				|-- netty-handler-4.1.135.Final.jar [1 CRITICAL, 2 HIGH]
			|-- netty-handler-proxy-4.1.135.Final.jar
				|-- netty-codec-http-4.1.135.Final.jar [3 HIGH, 5 MEDIUM]
				|-- netty-codec-socks-4.1.135.Final.jar [1 MEDIUM]
					|-- netty-codec-4.1.135.Final.jar [1 HIGH]
				|-- netty-codec-4.1.135.Final.jar [1 HIGH]
				|-- netty-handler-4.1.135.Final.jar [1 CRITICAL, 2 HIGH]
			|-- netty-handler-4.1.135.Final.jar [1 CRITICAL, 2 HIGH]
			|-- netty-resolver-dns-4.1.135.Final.jar
				|-- netty-codec-dns-4.1.135.Final.jar [1 MEDIUM]
					|-- netty-codec-4.1.135.Final.jar [1 HIGH]
				|-- netty-codec-4.1.135.Final.jar [1 HIGH]
				|-- netty-handler-4.1.135.Final.jar [1 CRITICAL, 2 HIGH]
	|-- vertx-grpc-client-4.5.28.jar
		|-- vertx-core-4.5.28.jar [1 HIGH]
		|-- vertx-grpc-common-4.5.28.jar
			|-- vertx-core-4.5.28.jar [1 HIGH]
reqour-adjuster-3.5.6-SNAPSHOT.jar
|-- quarkus-micrometer-opentelemetry-3.37.1.jar
	|-- opentelemetry-micrometer-1.5-2.26.1-alpha.jar
		|-- opentelemetry-instrumentation-api-2.26.1.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- quarkus-micrometer-3.37.1.jar
		|-- lz4-java-1.10.1.jar [1 MEDIUM]
		|-- micrometer-core-1.16.6.jar [2 MEDIUM]
			|-- httpclient5-5.6.2.jar [1 CRITICAL, 1 MEDIUM]
			|-- LatencyUtils-2.0.3.jar [1 LOW]
		|-- resteasy-reactive-client-3.37.1.jar
			|-- smallrye-mutiny-vertx-core-3.22.2.jar
				|-- jackson-databind-2.22.0.jar [5 MEDIUM]
				|-- smallrye-mutiny-vertx-runtime-3.22.2.jar
					|-- vertx-core-4.5.28.jar [1 HIGH]
				|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-web-client-4.5.28.jar [1 HIGH]
				|-- jackson-databind-2.22.0.jar [5 MEDIUM]
				|-- vertx-core-4.5.28.jar [1 HIGH]
				|-- vertx-uri-template-4.5.28.jar
					|-- vertx-core-4.5.28.jar [1 HIGH]
				|-- vertx-web-common-4.5.28.jar
					|-- vertx-core-4.5.28.jar [1 HIGH]
		|-- kafka-clients-4.2.1.jar
			|-- lz4-java-1.10.1.jar [1 MEDIUM]
	|-- quarkus-opentelemetry-3.37.1.jar
		|-- opentelemetry-instrumentation-annotations-support-2.26.1-alpha.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-instrumentation-annotations-2.26.1.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-jdbc-2.26.1-alpha.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-runtime-telemetry-java17-2.26.1-alpha.jar
			|-- opentelemetry-runtime-telemetry-2.26.1-alpha.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-api-incubator-1.60.1-alpha.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-exporter-otlp-common-1.60.1.jar
			|-- opentelemetry-exporter-common-1.60.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- quarkus-grpc-common-3.37.1.jar
			|-- vertx-grpc-server-4.5.28.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-grpc-4.5.28.jar
				|-- grpc-netty-1.81.0.jar
					|-- netty-codec-http2-4.1.135.Final.jar [2 HIGH]
				|-- vertx-core-4.5.28.jar [1 HIGH]
		|-- quarkus-tls-registry-3.37.1.jar
			|-- smallrye-private-key-pem-parser-0.9.3.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-web-4.5.28.jar
				|-- jackson-databind-2.22.0.jar [5 MEDIUM]
				|-- vertx-auth-common-4.5.28.jar
					|-- vertx-core-4.5.28.jar [1 HIGH]
				|-- vertx-bridge-common-4.5.28.jar
					|-- vertx-core-4.5.28.jar [1 HIGH]
				|-- vertx-core-4.5.28.jar [1 HIGH]
		|-- smallrye-common-vertx-context-2.18.1.jar
			|-- vertx-core-4.5.28.jar [1 HIGH]
				|-- jackson-databind-2.22.0.jar [5 MEDIUM]
				|-- netty-codec-haproxy-4.1.135.Final.jar [1 HIGH, 1 MEDIUM]
				|-- netty-codec-http2-4.1.135.Final.jar [2 HIGH]
				|-- netty-codec-http-4.1.135.Final.jar [3 HIGH, 5 MEDIUM]
				|-- netty-handler-proxy-4.1.135.Final.jar
					|-- netty-codec-http-4.1.135.Final.jar [3 HIGH, 5 MEDIUM]
					|-- netty-codec-socks-4.1.135.Final.jar [1 MEDIUM]
						|-- netty-codec-4.1.135.Final.jar [1 HIGH]
					|-- netty-codec-4.1.135.Final.jar [1 HIGH]
					|-- netty-handler-4.1.135.Final.jar [1 CRITICAL, 2 HIGH]
				|-- netty-handler-4.1.135.Final.jar [1 CRITICAL, 2 HIGH]
				|-- netty-resolver-dns-4.1.135.Final.jar
					|-- netty-codec-dns-4.1.135.Final.jar [1 MEDIUM]
						|-- netty-codec-4.1.135.Final.jar [1 HIGH]
					|-- netty-codec-4.1.135.Final.jar [1 HIGH]
					|-- netty-handler-4.1.135.Final.jar [1 CRITICAL, 2 HIGH]
		|-- vertx-grpc-client-4.5.28.jar
			|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-grpc-common-4.5.28.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
|-- common-5.4-test-fixtures.jar
	|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- opentelemetry-ext-cli-java-1.5.0.jar
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- ivy-2.5.3.jar [1 MEDIUM]
	|-- groovy-3.0.25.jar
		|-- ivy-2.5.3.jar [1 MEDIUM]
	|-- pom-manipulation-common-5.1.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- pom-manipulation-core-5.1.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
		|-- ivy-2.5.3.jar [1 MEDIUM]
	|-- pom-manipulation-io-5.1.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
		|-- unirest-objectmapper-jackson-3.14.5.jar
			|-- jackson-databind-2.22.0.jar [5 MEDIUM]
|-- pom-manipulation-common-lite-5.7.jar
	|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- reports-model-2.6.9.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
|-- npm-manipulator-npm-1.3.4.jar
	|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- unirest-java-3.14.5.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- opentelemetry-ext-cli-java-2.1.0.jar
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-exporter-otlp-1.60.1.jar
			|-- opentelemetry-sdk-logs-1.60.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-sdk-1.60.1.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-sdk-common-1.60.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-sdk-metrics-1.60.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-sdk-trace-1.60.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-semconv-1.29.0-alpha.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
|-- reqour-core-3.5.6-SNAPSHOT.jar
	|-- netty-codec-http-4.1.135.Final.jar [3 HIGH, 5 MEDIUM]
		|-- netty-codec-4.1.135.Final.jar [1 HIGH]
			|-- lz4-java-1.10.1.jar [1 MEDIUM]
		|-- netty-handler-4.1.135.Final.jar [1 CRITICAL, 2 HIGH]
			|-- netty-codec-4.1.135.Final.jar [1 HIGH]
	|-- quarkus-logging-json-3.5.0.jar
		|-- quarkus-jackson-3.37.1.jar
			|-- jackson-databind-2.22.0.jar [5 MEDIUM]
			|-- vertx-core-4.5.28.jar [1 HIGH]
	|-- quarkus-hibernate-validator-3.37.1.jar
		|-- quarkus-vertx-http-3.37.1.jar
			|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- quarkus-oidc-client-3.37.1.jar
		|-- quarkus-oidc-common-3.37.1.jar
			|-- smallrye-mutiny-vertx-web-client-3.22.2.jar
				|-- jackson-databind-2.22.0.jar [5 MEDIUM]
				|-- vertx-core-4.5.28.jar [1 HIGH]
				|-- vertx-web-client-4.5.28.jar [1 HIGH]
		|-- quarkus-vertx-3.37.1.jar
			|-- jackson-databind-2.22.0.jar [5 MEDIUM]
			|-- netty-codec-haproxy-4.1.135.Final.jar [1 HIGH, 1 MEDIUM]
				|-- netty-codec-4.1.135.Final.jar [1 HIGH]
			|-- quarkus-netty-3.37.1.jar
				|-- netty-codec-http2-4.1.135.Final.jar [2 HIGH]
					|-- netty-codec-http-4.1.135.Final.jar [3 HIGH, 5 MEDIUM]
					|-- netty-codec-4.1.135.Final.jar [1 HIGH]
					|-- netty-handler-4.1.135.Final.jar [1 CRITICAL, 2 HIGH]
				|-- netty-codec-http-4.1.135.Final.jar [3 HIGH, 5 MEDIUM]
				|-- netty-codec-4.1.135.Final.jar [1 HIGH]
				|-- netty-handler-4.1.135.Final.jar [1 CRITICAL, 2 HIGH]
			|-- quarkus-virtual-threads-3.37.1.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- smallrye-fault-tolerance-vertx-6.11.1.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
	|-- quarkus-rest-client-jackson-3.37.1.jar
		|-- resteasy-reactive-jackson-3.37.1.jar
			|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- quarkus-rest-jackson-3.37.1.jar
		|-- quarkus-rest-3.37.1.jar
			|-- jackson-databind-2.22.0.jar [5 MEDIUM]
			|-- resteasy-reactive-vertx-3.37.1.jar
				|-- vertx-web-client-4.5.28.jar [1 HIGH]
	|-- quarkus-smallrye-fault-tolerance-3.37.1.jar
		|-- smallrye-fault-tolerance-mutiny-6.11.1.jar
			|-- smallrye-fault-tolerance-core-6.11.1.jar
				|-- micrometer-core-1.16.6.jar [2 MEDIUM]
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- smallrye-fault-tolerance-6.11.1.jar
			|-- micrometer-core-1.16.6.jar [2 MEDIUM]
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- gitlab4j-api-6.3.0.jar
		|-- gitlab4j-models-6.3.0.jar
			|-- jackson-databind-2.22.0.jar [5 MEDIUM]
		|-- jersey-media-json-jackson-3.1.10.jar
			|-- jackson-databind-2.22.0.jar [5 MEDIUM]
			|-- jackson-module-jakarta-xmlbind-annotations-2.22.0.jar
				|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- bifrost-upload-client-3.5.1.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
		|-- httpclient5-5.6.2.jar [1 CRITICAL, 1 MEDIUM]
		|-- pnc-api-3.5.1-jakarta.jar
			|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- pnc-api-3.5.2-jakarta.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
	|-- pnc-common-3.5.4-jakarta.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
		|-- jackson-datatype-jdk8-2.22.0.jar
			|-- jackson-databind-2.22.0.jar [5 MEDIUM]
		|-- jackson-datatype-jsr310-2.22.0.jar
			|-- jackson-databind-2.22.0.jar [5 MEDIUM]
		|-- jackson-module-parameter-names-2.22.0.jar
			|-- jackson-databind-2.22.0.jar [5 MEDIUM]
		|-- jsoup-1.23.1.jar [1 HIGH]
			|-- netty-codec-http-4.1.135.Final.jar [3 HIGH, 5 MEDIUM]
			|-- netty-handler-4.1.135.Final.jar [1 CRITICAL, 2 HIGH]
	|-- github-api-1.330.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
reqour-core-3.5.6-SNAPSHOT.jar
|-- netty-codec-http-4.1.135.Final.jar [3 HIGH, 5 MEDIUM]
	|-- netty-codec-4.1.135.Final.jar [1 HIGH]
		|-- lz4-java-1.10.1.jar [1 MEDIUM]
	|-- netty-handler-4.1.135.Final.jar [1 CRITICAL, 2 HIGH]
		|-- netty-codec-4.1.135.Final.jar [1 HIGH]
|-- quarkus-logging-json-3.5.0.jar
	|-- quarkus-jackson-3.37.1.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
		|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- jackson-databind-2.22.0.jar [5 MEDIUM]
			|-- netty-codec-haproxy-4.1.135.Final.jar [1 HIGH, 1 MEDIUM]
			|-- netty-codec-http2-4.1.135.Final.jar [2 HIGH]
				|-- netty-codec-http-4.1.135.Final.jar [3 HIGH, 5 MEDIUM]
				|-- netty-codec-4.1.135.Final.jar [1 HIGH]
				|-- netty-handler-4.1.135.Final.jar [1 CRITICAL, 2 HIGH]
			|-- netty-codec-http-4.1.135.Final.jar [3 HIGH, 5 MEDIUM]
			|-- netty-handler-proxy-4.1.135.Final.jar
				|-- netty-codec-http-4.1.135.Final.jar [3 HIGH, 5 MEDIUM]
				|-- netty-codec-socks-4.1.135.Final.jar [1 MEDIUM]
					|-- netty-codec-4.1.135.Final.jar [1 HIGH]
				|-- netty-codec-4.1.135.Final.jar [1 HIGH]
				|-- netty-handler-4.1.135.Final.jar [1 CRITICAL, 2 HIGH]
			|-- netty-handler-4.1.135.Final.jar [1 CRITICAL, 2 HIGH]
			|-- netty-resolver-dns-4.1.135.Final.jar
				|-- netty-codec-dns-4.1.135.Final.jar [1 MEDIUM]
					|-- netty-codec-4.1.135.Final.jar [1 HIGH]
				|-- netty-codec-4.1.135.Final.jar [1 HIGH]
				|-- netty-handler-4.1.135.Final.jar [1 CRITICAL, 2 HIGH]
|-- quarkus-hibernate-validator-3.37.1.jar
	|-- quarkus-vertx-http-3.37.1.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
		|-- vertx-web-4.5.28.jar
			|-- jackson-databind-2.22.0.jar [5 MEDIUM]
			|-- vertx-auth-common-4.5.28.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-bridge-common-4.5.28.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-web-common-4.5.28.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
|-- quarkus-micrometer-opentelemetry-3.37.1.jar
	|-- opentelemetry-micrometer-1.5-2.26.1-alpha.jar
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- quarkus-micrometer-3.37.1.jar
		|-- lz4-java-1.10.1.jar [1 MEDIUM]
		|-- micrometer-core-1.16.6.jar [2 MEDIUM]
			|-- httpclient5-5.6.2.jar [1 CRITICAL, 1 MEDIUM]
			|-- LatencyUtils-2.0.3.jar [1 LOW]
		|-- resteasy-reactive-client-3.37.1.jar
			|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-web-client-4.5.28.jar [1 HIGH]
		|-- kafka-clients-4.2.1.jar
			|-- lz4-java-1.10.1.jar [1 MEDIUM]
	|-- quarkus-opentelemetry-3.37.1.jar
		|-- opentelemetry-instrumentation-annotations-support-2.26.1-alpha.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-instrumentation-annotations-2.26.1.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-instrumentation-api-2.26.1.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-jdbc-2.26.1-alpha.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-runtime-telemetry-java17-2.26.1-alpha.jar
			|-- opentelemetry-runtime-telemetry-2.26.1-alpha.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-api-incubator-1.60.1-alpha.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-exporter-otlp-common-1.60.1.jar
			|-- opentelemetry-exporter-common-1.60.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-exporter-otlp-1.60.1.jar
			|-- opentelemetry-sdk-logs-1.60.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-sdk-metrics-1.60.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- quarkus-grpc-common-3.37.1.jar
			|-- vertx-grpc-server-4.5.28.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-grpc-4.5.28.jar
				|-- grpc-netty-1.81.0.jar
					|-- netty-codec-http2-4.1.135.Final.jar [2 HIGH]
				|-- vertx-core-4.5.28.jar [1 HIGH]
		|-- vertx-grpc-client-4.5.28.jar
			|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-grpc-common-4.5.28.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
|-- quarkus-oidc-client-3.37.1.jar
	|-- quarkus-oidc-common-3.37.1.jar
		|-- quarkus-tls-registry-3.37.1.jar
			|-- smallrye-private-key-pem-parser-0.9.3.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
		|-- smallrye-mutiny-vertx-web-client-3.22.2.jar
			|-- jackson-databind-2.22.0.jar [5 MEDIUM]
			|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-web-client-4.5.28.jar [1 HIGH]
	|-- quarkus-vertx-3.37.1.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
		|-- netty-codec-haproxy-4.1.135.Final.jar [1 HIGH, 1 MEDIUM]
			|-- netty-codec-4.1.135.Final.jar [1 HIGH]
		|-- quarkus-netty-3.37.1.jar
			|-- netty-codec-http2-4.1.135.Final.jar [2 HIGH]
			|-- netty-codec-http-4.1.135.Final.jar [3 HIGH, 5 MEDIUM]
			|-- netty-codec-4.1.135.Final.jar [1 HIGH]
			|-- netty-handler-4.1.135.Final.jar [1 CRITICAL, 2 HIGH]
		|-- smallrye-common-vertx-context-2.18.1.jar
			|-- vertx-core-4.5.28.jar [1 HIGH]
		|-- smallrye-mutiny-vertx-core-3.22.2.jar
			|-- jackson-databind-2.22.0.jar [5 MEDIUM]
			|-- smallrye-mutiny-vertx-runtime-3.22.2.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-core-4.5.28.jar [1 HIGH]
		|-- smallrye-fault-tolerance-vertx-6.11.1.jar
			|-- vertx-core-4.5.28.jar [1 HIGH]
|-- quarkus-rest-client-jackson-3.37.1.jar
	|-- resteasy-reactive-jackson-3.37.1.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
|-- quarkus-rest-jackson-3.37.1.jar
	|-- quarkus-rest-3.37.1.jar
		|-- jackson-databind-2.22.0.jar [5 MEDIUM]
		|-- resteasy-reactive-vertx-3.37.1.jar
			|-- vertx-web-client-4.5.28.jar [1 HIGH]
				|-- jackson-databind-2.22.0.jar [5 MEDIUM]
				|-- vertx-core-4.5.28.jar [1 HIGH]
				|-- vertx-uri-template-4.5.28.jar
					|-- vertx-core-4.5.28.jar [1 HIGH]
		|-- quarkus-virtual-threads-3.37.1.jar
			|-- vertx-core-4.5.28.jar [1 HIGH]
... *truncated, see full logs below*

SAST scan output

*no findings*

Full logs and artifacts

Bumps `version.maven-surefire-plugin` from 3.5.6 to 3.6.0. Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.6 to 3.6.0 - [Release notes](https://github.com/apache/maven-surefire/releases) - [Commits](apache/maven-surefire@surefire-3.5.6...surefire-3.6.0) Updates `org.apache.maven.plugins:maven-failsafe-plugin` from 3.5.6 to 3.6.0 - [Release notes](https://github.com/apache/maven-surefire/releases) - [Commits](apache/maven-surefire@surefire-3.5.6...surefire-3.6.0) --- updated-dependencies: - dependency-name: org.apache.maven.plugins:maven-failsafe-plugin dependency-version: 3.6.0 dependency-type: direct:development update-type: version-update:semver-minor - dependency-name: org.apache.maven.plugins:maven-surefire-plugin dependency-version: 3.6.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Sep 8, 2026

dependabot Bot force-pushed the dependabot/maven/version.maven-surefire-plugin-3.6.0 branch from 54cca1d to 2ac4287 Compare September 9, 2026 08:38

rnc merged commit f87c7a7 into main Sep 11, 2026
3 checks passed

dependabot Bot deleted the dependabot/maven/version.maven-surefire-plugin-3.6.0 branch September 11, 2026 12:10

Navigation Menu

Bump version.maven-surefire-plugin from 3.5.6 to 3.6.0 - #402

Bump version.maven-surefire-plugin from 3.5.6 to 3.6.0#402
rnc merged 1 commit into
mainfrom
dependabot/maven/version.maven-surefire-plugin-3.6.0

dependabot Bot commented on behalf of github Sep 8, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Sep 8, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Sep 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

3.6.0

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

3.6.0

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

Uh oh!

github-actions Bot commented Sep 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Mend Scan Results

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Sep 8, 2026 •

edited

Loading

github-actions Bot commented Sep 8, 2026 •

edited

Loading