Skip to content

Bump com.h2database:h2 from 2.5.250 to 2.5.252 - #519

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/com.h2database-h2-2.5.252
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/com.h2database-h2-2.5.252

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 6, 2026

Copy link
Copy Markdown
Contributor

Bumps com.h2database:h2 from 2.5.250 to 2.5.252.

Release notes

Sourced from com.h2database:h2's releases.

Version 2.5.252

Commits
  • f986838 in preparation for a release
  • 06c34a7 Merge pull request #4418 from andreitokar/issues-4380-4376
  • 1aef3e0 #4376: Reading INFORMATION_SCHEMA.COLUMNS fails with a NPE while any material...
  • 4bb8aee #4380: creating a MATERIALIZED VIEW makes a persistent database permanently u...
  • 95b6af0 Merge pull request #4417 from andreitokar/issue-4395
  • 6ec30b6 #4395 disallow constraints between temporary and permanent tables
  • 0f0f856 Merge pull request #4416 from andreitokar/issue-4405
  • f718b76 #4405 SecureFileStore.readFully() may skip decryption
  • e231ff7 #4405 SecureFileStore.readFully() may skip
  • 4da0d1d Merge pull request #4415 from jjh75607/fix/log-sql-aarch64
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [com.h2database:h2](https://github.com/h2database/h2database) from 2.5.250 to 2.5.252.
- [Release notes](https://github.com/h2database/h2database/releases)
- [Commits](h2database/h2database@version-2.5.250...version-2.5.252)

---
updated-dependencies:
- dependency-name: com.h2database:h2
  dependency-version: 2.5.252
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Oct 6, 2026
@github-actions

github-actions Bot commented Oct 6, 2026

Copy link
Copy Markdown
Contributor

Mend Scan Results

Status: ⚠️ Findings detected

⚠️ SCA findings detected

SCA scan output



Identified 113 dependencies

Detected 17 vulnerabilities (0 Critical, 8 High, 8 Medium, 1 Low)

+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| SEVERITY |           LIBRARY           |       ID        |                                               TOP FIX                                                |
+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | bcpkix-jdk18on-1.85.jar     | CVE-2026-71888  | Upgrade to version org.bouncycastle:bcpkix-jdk14:1.86,org.bouncycastle:bcpkix-debug-jdk15to18:1.86,  |
|          |                             |                 | org.bouncycastle:bcpkix-jdk15to18:1.86,org.bouncycastle:bcpkix-debug-jdk18on:1.86,                   |
|          |                             |                 | org.bouncycastle:bcpkix-jdk18on:1.86, https://github.com/bcgit/bc-java.git - r1rv86,                 |
|          |                             |                 | org.bouncycastle:bcpkix-lts8on:2.73.13, https://github.com/bcgit/bc-lts-java.git - r2rv73dot13,      |
|          |                             |                 | org.bouncycastle:bcpkix-fips:1.0.13,org.bouncycastle:bcpkix-fips:2.0.13,                             |
|          |                             |                 | org.bouncycastle:bcpkix-fips:2.1.13                                                                  |
+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | bcpkix-jdk18on-1.85.jar     | CVE-2026-71889  | Upgrade to version org.bouncycastle:bcpkix-jdk15to18:1.86,org.bouncycastle:bcpkix-lts8on:2.73.13,    |
|          |                             |                 | org.bouncycastle:bcprov-jdk14:1.86,org.bouncycastle:bcpkix-jdk18on:1.86,                             |
|          |                             |                 | org.bouncycastle:bcprov-debug-jdk18on:1.86,org.bouncycastle:bcpkix-debug-jdk15to18:1.86,             |
|          |                             |                 | org.bouncycastle:bcprov-jdk18on:1.86,org.bouncycastle:bcpkix-debug-jdk18on:1.86,                     |
|          |                             |                 | org.bouncycastle:bcprov-debug-jdk14:1.86,org.bouncycastle:bcprov-jdk15to18:1.86,                     |
|          |                             |                 | org.bouncycastle:bcprov-debug-jdk15to18:1.86, https://github.com/bcgit/bc-lts-java.git - r2rv73dot13 |
|          |                             |                 | , https://github.com/bcgit/bc-java.git - r1rv86,org.bouncycastle:bcpkix-fips:1.0.13,                 |
|          |                             |                 | org.bouncycastle:bcpkix-fips:2.0.13,org.bouncycastle:bcpkix-fips:2.1.13                              |
+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | bcprov-jdk18on-1.85.jar     | CVE-2026-71889  | Upgrade to version org.bouncycastle:bcpkix-jdk15to18:1.86,org.bouncycastle:bcpkix-lts8on:2.73.13,    |
|          |                             |                 | org.bouncycastle:bcprov-jdk14:1.86,org.bouncycastle:bcpkix-jdk18on:1.86,                             |
|          |                             |                 | org.bouncycastle:bcprov-debug-jdk18on:1.86,org.bouncycastle:bcpkix-debug-jdk15to18:1.86,             |
|          |                             |                 | org.bouncycastle:bcprov-jdk18on:1.86,org.bouncycastle:bcpkix-debug-jdk18on:1.86,                     |
|          |                             |                 | org.bouncycastle:bcprov-debug-jdk14:1.86,org.bouncycastle:bcprov-jdk15to18:1.86,                     |
|          |                             |                 | org.bouncycastle:bcprov-debug-jdk15to18:1.86, https://github.com/bcgit/bc-lts-java.git - r2rv73dot13 |
|          |                             |                 | , https://github.com/bcgit/bc-java.git - r1rv86,org.bouncycastle:bcpkix-fips:1.0.13,                 |
|          |                             |                 | org.bouncycastle:bcpkix-fips:2.0.13,org.bouncycastle:bcpkix-fips:2.1.13                              |
+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | jackson-core-2.22.2.jar     | CVE-2026-89407  | Upgrade to version com.fasterxml.jackson.core:jackson-core:2.18.11,                                  |
|          |                             |                 | com.fasterxml.jackson.core:jackson-core:2.21.7,com.fasterxml.jackson.core:jackson-core:2.22.3,       |
|          |                             |                 | tools.jackson.core:jackson-core:3.1.7,tools.jackson.core:jackson-core:3.2.2,                         |
|          |                             |                 | https://github.com/FasterXML/jackson-core.git - jackson-core-2.22.3,                                 |
|          |                             |                 | https://github.com/FasterXML/jackson-core.git - jackson-core-3.2.2,                                  |
|          |                             |                 | https://github.com/FasterXML/jackson-core.git - jackson-core-2.18.11,                                |
|          |                             |                 | https://github.com/FasterXML/jackson-core.git - jackson-core-3.1.7,                                  |
|          |                             |                 | https://github.com/FasterXML/jackson-core.git - jackson-core-2.21.7                                  |
+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | jackson-core-2.22.2.jar     | CVE-2026-89425  | Upgrade to version com.fasterxml.jackson.core:jackson-core:2.18.11,                                  |
|          |                             |                 | com.fasterxml.jackson.core:jackson-core:2.21.7,com.fasterxml.jackson.core:jackson-core:2.22.3,       |
|          |                             |                 | tools.jackson.core:jackson-core:3.1.7,tools.jackson.core:jackson-core:3.2.3,                         |
|          |                             |                 | https://github.com/FasterXML/jackson-core.git - jackson-core-3.2.3,                                  |
|          |                             |                 | https://github.com/FasterXML/jackson-core.git - jackson-core-2.22.3,                                 |
|          |                             |                 | https://github.com/FasterXML/jackson-core.git - jackson-core-2.21.7,                                 |
|          |                             |                 | https://github.com/FasterXML/jackson-core.git - jackson-core-2.18.11,                                |
|          |                             |                 | https://github.com/FasterXML/jackson-core.git - jackson-core-3.1.7                                   |
+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | jackson-databind-2.22.2.jar | CVE-2026-91776  | Upgrade to version com.fasterxml.jackson.core:jackson-databind:2.18.11,                              |
|          |                             |                 | com.fasterxml.jackson.core:jackson-databind:2.21.7,                                                  |
|          |                             |                 | com.fasterxml.jackson.core:jackson-databind:2.22.3,tools.jackson.core:jackson-databind:3.1.7,        |
|          |                             |                 | tools.jackson.core:jackson-databind:3.2.3, https://github.com/FasterXML/jackson-databind.git -       |
|          |                             |                 | jackson-databind-2.22.3, https://github.com/FasterXML/jackson-databind.git -                         |
|          |                             |                 | jackson-databind-2.18.11, https://github.com/FasterXML/jackson-databind.git -                        |
|          |                             |                 | jackson-databind-2.21.7, https://github.com/FasterXML/jackson-databind.git - jackson-databind-3.1.7, |
|          |                             |                 | https://github.com/FasterXML/jackson-databind.git - jackson-databind-3.2.3                           |
+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | jackson-databind-2.22.2.jar | CVE-2026-91777  | Upgrade to version com.fasterxml.jackson.core:jackson-databind:2.18.11,                              |
|          |                             |                 | com.fasterxml.jackson.core:jackson-databind:2.21.7,                                                  |
|          |                             |                 | com.fasterxml.jackson.core:jackson-databind:2.22.3,tools.jackson.core:jackson-databind:3.1.7,        |
|          |                             |                 | tools.jackson.core:jackson-databind:3.2.3, https://github.com/FasterXML/jackson-databind.git -       |
|          |                             |                 | jackson-databind-2.21.7, https://github.com/FasterXML/jackson-databind.git - jackson-databind-3.2.3, |
|          |                             |                 | https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.22.3,                         |
|          |                             |                 | https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.18.11,                        |
|          |                             |                 | https://github.com/FasterXML/jackson-databind.git - jackson-databind-3.1.7                           |
+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | logback-classic-1.6.3.jar   | CVE-2026-104721 | Upgrade to version ch.qos.logback:logback-classic:1.6.5, https://github.com/qos-ch/logback.git -     |
|          |                             |                 | v_1.6.5                                                                                              |
+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | bcpkix-jdk18on-1.85.jar     | CVE-2026-17508  | Upgrade to version org.bouncycastle:bcprov-jdk18on:1.86,org.bouncycastle:bcpkix-debug-jdk18on:1.86,  |
|          |                             |                 | org.bouncycastle:bcprov-debug-jdk14:1.86, https://github.com/bcgit/bc-lts-java.git - r2rv73dot13,    |
|          |                             |                 | org.bouncycastle:bcpkix-jdk15to18:1.86,org.bouncycastle:bcprov-jdk14:1.86,                           |
|          |                             |                 | org.bouncycastle:bcpkix-lts8on:2.73.13, https://github.com/bcgit/bc-java.git - r1rv86,               |
|          |                             |                 | org.bouncycastle:bcprov-jdk15to18:1.86,org.bouncycastle:bcprov-debug-lts8on:2.73.13,                 |
|          |                             |                 | org.bouncycastle:bcpkix-jdk14:1.86,org.bouncycastle:bcpkix-jdk18on:1.86,                             |
|          |                             |                 | org.bouncycastle:bcprov-lts8on:2.73.13,org.bouncycastle:bcprov-debug-jdk18on:1.86,                   |
|          |                             |                 | org.bouncycastle:bcprov-debug-jdk15to18:1.86,org.bouncycastle:bcpkix-debug-jdk15to18:1.86,           |
|          |                             |                 | org.bouncycastle:bcpkix-fips:2.0.13,org.bouncycastle:bcpkix-fips:2.1.13                              |
+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | bcpkix-jdk18on-1.85.jar     | CVE-2026-71892  | Upgrade to version org.bouncycastle:bcpkix-lts8on:2.73.13,org.bouncycastle:bcpkix-jdk14:1.86,        |
|          |                             |                 | org.bouncycastle:bcpkix-jdk15to18:1.86, https://github.com/bcgit/bc-lts-java.git - r2rv73dot13,      |
|          |                             |                 | org.bouncycastle:bcpkix-jdk18on:1.86,org.bouncycastle:bcpkix-debug-jdk15to18:1.86,                   |
|          |                             |                 | org.bouncycastle:bcpkix-debug-jdk18on:1.86, https://github.com/bcgit/bc-java.git - r1rv86,           |
|          |                             |                 | org.bouncycastle:bcpkix-fips:2.0.13,org.bouncycastle:bcpkix-fips:2.1.13                              |
+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | bcprov-jdk18on-1.85.jar     | CVE-2026-17508  | Upgrade to version org.bouncycastle:bcprov-jdk18on:1.86,org.bouncycastle:bcpkix-debug-jdk18on:1.86,  |
|          |                             |                 | org.bouncycastle:bcprov-debug-jdk14:1.86, https://github.com/bcgit/bc-lts-java.git - r2rv73dot13,    |
|          |                             |                 | org.bouncycastle:bcpkix-jdk15to18:1.86,org.bouncycastle:bcprov-jdk14:1.86,                           |
|          |                             |                 | org.bouncycastle:bcpkix-lts8on:2.73.13, https://github.com/bcgit/bc-java.git - r1rv86,               |
|          |                             |                 | org.bouncycastle:bcprov-jdk15to18:1.86,org.bouncycastle:bcprov-debug-lts8on:2.73.13,                 |
|          |                             |                 | org.bouncycastle:bcpkix-jdk14:1.86,org.bouncycastle:bcpkix-jdk18on:1.86,                             |
|          |                             |                 | org.bouncycastle:bcprov-lts8on:2.73.13,org.bouncycastle:bcprov-debug-jdk18on:1.86,                   |
|          |                             |                 | org.bouncycastle:bcprov-debug-jdk15to18:1.86,org.bouncycastle:bcpkix-debug-jdk15to18:1.86,           |
|          |                             |                 | org.bouncycastle:bcpkix-fips:2.0.13,org.bouncycastle:bcpkix-fips:2.1.13                              |
+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | bcprov-jdk18on-1.85.jar     | CVE-2026-18036  | Upgrade to version org.bouncycastle:bcprov-debug-jdk18on:1.86,org.bouncycastle:bcprov-jdk18on:1.85.2 |
|          |                             |                 | , https://github.com/bcgit/bc-java.git - r1rv85v2,org.bouncycastle:bcprov-debug-jdk14:1.86,          |
|          |                             |                 | org.bouncycastle:bcprov-debug-jdk15to18:1.86,org.bouncycastle:bcprov-jdk14:1.85.2,                   |
|          |                             |                 | org.bouncycastle:bcprov-jdk15to18:1.85.2                                                             |
+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | bcprov-jdk18on-1.85.jar     | CVE-2026-18040  | Upgrade to version org.bouncycastle:bcprov-jdk15to18:1.85.2,org.bouncycastle:bcprov-debug-jdk14:1.86 |
|          |                             |                 | ,org.bouncycastle:bcprov-debug-jdk15to18:1.86,org.bouncycastle:bcprov-jdk18on:1.85.2,                |
|          |                             |                 | org.bouncycastle:bcprov-debug-jdk18on:1.86, https://github.com/bcgit/bc-java.git - r1rv85v2,         |
|          |                             |                 | org.bouncycastle:bcprov-jdk14:1.85.2                                                                 |
+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | bcprov-jdk18on-1.85.jar     | CVE-2026-71891  | Upgrade to version org.bouncycastle:bcprov-jdk18on:1.86, https://github.com/bcgit/bc-java.git -      |
|          |                             |                 | r1rv86,org.bouncycastle:bcprov-jdk15to18:1.86,org.bouncycastle:bcprov-debug-jdk18on:1.86,            |
|          |                             |                 | org.bouncycastle:bcprov-debug-jdk15to18:1.86                                                         |
+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | bcprov-jdk18on-1.85.jar     | CVE-2026-97873  | N/A                                                                                                  |
+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | guava-19.0.jar              | CVE-2023-2976   | Upgrade to version com.google.guava:guava:32.0.1-android,32.0.1-jre                                  |
+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| LOW      | guava-19.0.jar              | CVE-2020-8908   | Upgrade to version com.google.guava:guava:32.0.0-android, https://github.com/google/guava.git -      |
|          |                             |                 | v32.0.0                                                                                              |
+----------+-----------------------------+-----------------+------------------------------------------------------------------------------------------------------+


Paths at risk

P = policy violation
MSC = malicious vulnerability
CRITICAL/HIGH/MEDIUM/LOW = vulnerability severity

atlas-identities-1.2.3.jar
|-- logback-classic-1.6.3.jar [1 HIGH]
galley-api-1.24-SNAPSHOT.jar
|-- atlas-identities-1.2.3.jar
	|-- logback-classic-1.6.3.jar [1 HIGH]
galley-caches-1.24-SNAPSHOT.pom
|-- atlas-identities-1.2.3.jar
	|-- logback-classic-1.6.3.jar [1 HIGH]
|-- galley-cache-partyline-1.24-SNAPSHOT.jar
	|-- atlas-identities-1.2.3.jar
		|-- logback-classic-1.6.3.jar [1 HIGH]
	|-- partyline-2.5.jar
		|-- logback-classic-1.6.3.jar [1 HIGH]
		|-- weft-1.27.jar
			|-- logback-classic-1.6.3.jar [1 HIGH]
		|-- jboss-logging-3.6.3.Final.jar
			|-- logback-classic-1.6.3.jar [1 HIGH]
|-- galley-cache-path-mapped-1.24-SNAPSHOT.jar
	|-- atlas-identities-1.2.3.jar
		|-- logback-classic-1.6.3.jar [1 HIGH]
			|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- galley-core-1.24-SNAPSHOT.jar
		|-- weft-1.27.jar
			|-- logback-classic-1.6.3.jar [1 HIGH]
	|-- path-mapped-pathdb-datastax-3.3.jar
		|-- netty-handler-4.1.138.Final.jar
			|-- logback-classic-1.6.3.jar [1 HIGH]
			|-- netty-transport-4.1.138.Final.jar
				|-- logback-classic-1.6.3.jar [1 HIGH]
		|-- cassandra-driver-core-3.12.1.jar
			|-- jackson-databind-2.22.2.jar [2 HIGH]
				|-- jackson-core-2.22.2.jar [2 HIGH]
			|-- guava-19.0.jar [1 MEDIUM, 1 LOW]
		|-- cassandra-driver-mapping-3.12.1.jar
			|-- guava-19.0.jar [1 MEDIUM, 1 LOW]
	|-- path-mapped-storage-3.3.jar
		|-- netty-common-4.1.138.Final.jar
			|-- logback-classic-1.6.3.jar [1 HIGH]
		|-- s3-2.54.14.jar
			|-- aws-core-2.54.14.jar
				|-- guava-19.0.jar [1 MEDIUM, 1 LOW]
			|-- sdk-core-2.54.14.jar
				|-- guava-19.0.jar [1 MEDIUM, 1 LOW]
|-- galley-cache-tck-1.24-SNAPSHOT.jar
	|-- atlas-identities-1.2.3.jar
		|-- logback-classic-1.6.3.jar [1 HIGH]
galley-cdi-embedder-1.24-SNAPSHOT.jar
|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- jackson-core-2.22.2.jar [2 HIGH]
|-- atlas-bindings-jackson-identities-1.2.3.jar
	|-- logback-classic-1.6.3.jar [1 HIGH]
	|-- jackson-core-2.22.2.jar [2 HIGH]
	|-- jackson-databind-2.22.2.jar [2 HIGH]
|-- atlas-identities-1.2.3.jar
	|-- logback-classic-1.6.3.jar [1 HIGH]
|-- weft-1.27.jar
	|-- logback-classic-1.6.3.jar [1 HIGH]
		|-- jackson-databind-2.22.2.jar [2 HIGH]
|-- galley-cache-partyline-1.24-SNAPSHOT.jar
	|-- partyline-2.5.jar
		|-- logback-classic-1.6.3.jar [1 HIGH]
		|-- jboss-logging-3.6.3.Final.jar
			|-- logback-classic-1.6.3.jar [1 HIGH]
|-- galley-maven-1.24-SNAPSHOT.jar
	|-- atlas-relationships-api-1.2.3.jar
		|-- logback-classic-1.6.3.jar [1 HIGH]
		|-- jackson-core-2.22.2.jar [2 HIGH]
		|-- jackson-databind-2.22.2.jar [2 HIGH]
|-- galley-transport-httpclient-1.24-SNAPSHOT.jar
	|-- jackson-core-2.22.2.jar [2 HIGH]
	|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- jhttpc-1.18.jar
		|-- logback-classic-1.6.3.jar [1 HIGH]
		|-- bcpkix-jdk18on-1.85.jar [2 HIGH, 2 MEDIUM]
			|-- bcutil-jdk18on-1.85.jar
				|-- bcprov-jdk18on-1.85.jar [1 HIGH, 5 MEDIUM]
		|-- bcprov-jdk18on-1.85.jar [1 HIGH, 5 MEDIUM]
galley-core-1.24-SNAPSHOT.jar
|-- atlas-identities-1.2.3.jar
	|-- logback-classic-1.6.3.jar [1 HIGH]
|-- weft-1.27.jar
	|-- logback-classic-1.6.3.jar [1 HIGH]
galley-maven-1.24-SNAPSHOT.jar
|-- atlas-identities-1.2.3.jar
	|-- logback-classic-1.6.3.jar [1 HIGH]
|-- atlas-relationships-api-1.2.3.jar
	|-- logback-classic-1.6.3.jar [1 HIGH]
		|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- jackson-core-2.22.2.jar [2 HIGH]
	|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- jackson-core-2.22.2.jar [2 HIGH]
	|-- atlas-bindings-jackson-identities-1.2.3.jar
		|-- logback-classic-1.6.3.jar [1 HIGH]
		|-- jackson-core-2.22.2.jar [2 HIGH]
		|-- jackson-databind-2.22.2.jar [2 HIGH]
|-- galley-core-1.24-SNAPSHOT.jar
	|-- weft-1.27.jar
		|-- logback-classic-1.6.3.jar [1 HIGH]
galley-testing-1.24-SNAPSHOT.pom
|-- atlas-identities-1.2.3.jar
	|-- logback-classic-1.6.3.jar [1 HIGH]
|-- galley-test-harness-api-1.24-SNAPSHOT.jar
	|-- atlas-identities-1.2.3.jar
		|-- logback-classic-1.6.3.jar [1 HIGH]
	|-- weft-1.27.jar
		|-- logback-classic-1.6.3.jar [1 HIGH]
|-- galley-test-harness-core-1.24-SNAPSHOT.jar
	|-- atlas-identities-1.2.3.jar
		|-- logback-classic-1.6.3.jar [1 HIGH]
	|-- weft-1.27.jar
		|-- logback-classic-1.6.3.jar [1 HIGH]
|-- galley-test-harness-maven-1.24-SNAPSHOT.jar
	|-- atlas-identities-1.2.3.jar
		|-- logback-classic-1.6.3.jar [1 HIGH]
	|-- weft-1.27.jar
		|-- logback-classic-1.6.3.jar [1 HIGH]
			|-- jackson-databind-2.22.2.jar [2 HIGH]
				|-- jackson-core-2.22.2.jar [2 HIGH]
	|-- galley-maven-1.24-SNAPSHOT.jar
		|-- atlas-relationships-api-1.2.3.jar
			|-- logback-classic-1.6.3.jar [1 HIGH]
			|-- jackson-core-2.22.2.jar [2 HIGH]
			|-- jackson-databind-2.22.2.jar [2 HIGH]
			|-- atlas-bindings-jackson-identities-1.2.3.jar
				|-- logback-classic-1.6.3.jar [1 HIGH]
				|-- jackson-core-2.22.2.jar [2 HIGH]
				|-- jackson-databind-2.22.2.jar [2 HIGH]
galley-transports-1.24-SNAPSHOT.pom
|-- atlas-identities-1.2.3.jar
	|-- logback-classic-1.6.3.jar [1 HIGH]
|-- galley-transport-filearc-1.24-SNAPSHOT.jar
	|-- atlas-identities-1.2.3.jar
		|-- logback-classic-1.6.3.jar [1 HIGH]
|-- galley-transport-httpclient-1.24-SNAPSHOT.jar
	|-- jackson-core-2.22.2.jar [2 HIGH]
	|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- jackson-core-2.22.2.jar [2 HIGH]
	|-- atlas-identities-1.2.3.jar
		|-- logback-classic-1.6.3.jar [1 HIGH]
	|-- jhttpc-1.18.jar
		|-- logback-classic-1.6.3.jar [1 HIGH]
			|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- bcpkix-jdk18on-1.85.jar [2 HIGH, 2 MEDIUM]
			|-- bcutil-jdk18on-1.85.jar
				|-- bcprov-jdk18on-1.85.jar [1 HIGH, 5 MEDIUM]
		|-- bcprov-jdk18on-1.85.jar [1 HIGH, 5 MEDIUM]


No Policy violations were detected

Project 'galley-pr' was updated, for more information, visit the Mend platform: https://ibmets.whitesourcesoftware.com/app/orgs/Enterprise%20Applications/applications/summary?project=c3bf3e52-9bc5-446f-ad91-f936410980f9
Or the Core UI: https://ibmets.whitesourcesoftware.com/Wss/WSS.html#!project;token=3293e9a2b318410cb3e9cb4e2caace6d82d023dcee944edfa835841f5a97380c

Mend AI scan succeeded.

Support Token: 2768e0a7c40a041a99b59d1c7377459401791246401800
SAST scan output
*no findings*

Full logs and artifacts

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants