Bump org.jboss.pnc:pnc-api from 3.0.5 to 3.5.2 by dependabot[bot] · Pull Request #194 · project-ncl/rex

dependabot · 2026-08-24T08:52:39Z

Bumps org.jboss.pnc:pnc-api from 3.0.5 to 3.5.2.

Release notes

Sourced from org.jboss.pnc:pnc-api's releases.

3.5.2

Full Changelog: project-ncl/pnc-api@3.5.1...3.5.2

3.5.1

What's Changed

🐛 Fixes / 🚀 Enhancements

NCL-9508 - Add taillines to bifrost by @polacektomas in project-ncl/pnc-api#308

bump version to 3.4.2-SNAPSHOT by @michalovjan in project-ncl/pnc-api#309

no shapshot pls by @michalovjan in project-ncl/pnc-api#310

[NCL-9535]: Slsa Provenance has invalid digest key (commit) by @vibe13 in project-ncl/pnc-api#311

bump version to 3.4.3-SNAPSHOT by @michalovjan in project-ncl/pnc-api#316

[NCLSUP-1366] Accept URL with slashes at the end by @akridl in project-ncl/pnc-api#317

bump version to new minor 3.5.0-SNAPSHOT by @michalovjan in project-ncl/pnc-api#318

[cyclic-dependency] move internal classes back to orch and remove cyclic dependency by @michalovjan in project-ncl/pnc-api#319

Reference dto by @michalovjan in project-ncl/pnc-api#320

[NCL-9428] add attachment types by @michalovjan in project-ncl/pnc-api#321

NCL-9545 - Remove Alignment 2 by @rnc in project-ncl/pnc-api#323

NCL-9421 - Change error message format by @polacektomas in project-ncl/pnc-api#325

[NCL-9532] add RPM RepositoryType and BuildType by @michalovjan in project-ncl/pnc-api#322

NCL-9564 Remove GA/GAV classes by @rnc in project-ncl/pnc-api#329

[NCL-9275] Add ExceptionResolution to ReqourCallback by @patrikk0123 in project-ncl/pnc-api#332

Zizmorify github actions by @thescouser89 in project-ncl/pnc-api#338

Add RPM Artifact by @polacektomas in project-ncl/pnc-api#339

Bump gh-action to v0.0.14 and fix typo by @thescouser89 in project-ncl/pnc-api#340

[NCL-9557] create Bifrost FinalLog /checksums endpoint by @michalovjan in project-ncl/pnc-api#341

add Builder and Jacksonized to Checksums by @michalovjan in project-ncl/pnc-api#343

Add keys to enhance the provenance attestations and map build environ… by @vibe13 in project-ncl/pnc-api#342

Update release workflow to main which fixes releases by @thescouser89 in project-ncl/pnc-api#349

Add potential values for a BC parameter key by @akridl in project-ncl/pnc-api#353

[NCL-9667] Remove AUTO as a possible build category by @akridl in project-ncl/pnc-api#350

[NCL-9656,NCL-9657,NCL-9661] Add release,exclude,and validate ghaction by @thescouser89 in project-ncl/pnc-api#351

[NCL-9668] Introduce build categories for IBM and Red Hat suffixing by @akridl in project-ncl/pnc-api#354

[NCL-9665] Fix description for BUILD_CATEGORY by @akridl in project-ncl/pnc-api#356

IBM instance changes only by @akridl in project-ncl/pnc-api#364

Use jboss-parent and revert to JDK8 API. Update gh-actions. by @rnc in project-ncl/pnc-api#363

Remove redundant plugin and property overrides by @rnc in project-ncl/pnc-api#365

Define name for child modules by @akridl in project-ncl/pnc-api#366

NCL-9648 Add Mend CLI scan workflows by @patrikk0123 in project-ncl/pnc-api#355

NCL-9661 Update release labels by @rnc in project-ncl/pnc-api#368

[NCL-9785] Add BuildCategory to RepositoryCreateRequest by @thescouser89 in project-ncl/pnc-api#375

[NCL-9782] Add Lightwell build category by @thescouser89 in project-ncl/pnc-api#376

[NCL-9447] Define tracking-service API by @pkocandr in project-ncl/pnc-api#331

[NCL-9782] Add LIGHTWELL_UPSTREAM build category by @thescouser89 in project-ncl/pnc-api#377

Rename package trackingservice to tracker by @pkocandr in project-ncl/pnc-api#378

... (truncated)

Commits

d42ed80 [maven-release-plugin] prepare release 3.5.2
4c1782c [NCL-9834] Add LIGHTWELL_NOVEL build category
b12920d [maven-release-plugin] prepare for next development iteration
a5e850d [maven-release-plugin] prepare release 3.5.1
f147078 Revert "Creating a commit for snapshot job to run"
f52bc31 Build snapshot version for v3.5.x branch also
ff3a5d9 Creating a commit for snapshot job to run
a01c310 Bump version to 3.5.1-SNAPSHOT
92606ef Rename package trackingservice to tracker
0e269c3 [NCL-9782] Add LIGHTWELL_UPSTREAM build category
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.jboss.pnc:pnc-api](https://github.com/project-ncl/pnc-api) from 3.0.5 to 3.5.2. - [Release notes](https://github.com/project-ncl/pnc-api/releases) - [Commits](project-ncl/pnc-api@3.0.5...3.5.2) --- updated-dependencies: - dependency-name: org.jboss.pnc:pnc-api dependency-version: 3.5.2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-08-24T08:59:32Z

Mend Scan Results

Status: ⚠️ Findings detected

⚠️ SCA findings detected

SCA scan output




Identified 345 dependencies

Detected 10 vulnerabilities (1 Critical, 4 High, 5 Medium, 0 Low)

+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| SEVERITY |                    LIBRARY                    |       ID       |                                               TOP FIX                                                |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| CRITICAL | netty-handler-4.1.136.Final.jar               | CVE-2026-75595 | Upgrade to version io.netty:netty-handler:4.2.17.Final,io.netty:netty-handler:4.1.137.Final,         |
|          |                                               |                | https://github.com/netty/netty.git - netty-4.1.137.Final, https://github.com/netty/netty.git -       |
|          |                                               |                | netty-4.2.17.Final                                                                                   |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-handler-4.1.136.Final.jar               | CVE-2026-62243 | Upgrade to version io.netty:netty-handler:4.1.137.Final,io.netty:netty-handler:4.2.17.Final          |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | netty-handler-4.1.136.Final.jar               | CVE-2026-75596 | Upgrade to version io.netty:netty-handler:4.2.17.Final,io.netty:netty-handler:4.1.137.Final,         |
|          |                                               |                | https://github.com/netty/netty.git - netty-4.2.17.Final, https://github.com/netty/netty.git -        |
|          |                                               |                | netty-4.1.137.Final                                                                                  |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | sshd-common-2.18.0.jar                        | CVE-2026-56624 | Upgrade to version org.apache.sshd:sshd-core:3.0.0-M5,org.apache.sshd:sshd-common:2.19.0,            |
|          |                                               |                | https://github.com/apache/mina-sshd.git - sshd-2.19.0,org.apache.sshd:sshd-common:3.0.0-M5,          |
|          |                                               |                | org.apache.sshd:sshd-core:2.19.0, https://github.com/apache/mina-sshd.git - sshd-3.0.0-M5            |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | wildfly-elytron-password-impl-2.9.2.Final.jar | CVE-2026-19611 | N/A                                                                                                  |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | jackson-databind-2.22.0.jar                   | CVE-2026-54515 | Upgrade to version  https://github.com/FasterXML/jackson-databind.git - jackson-databind-3.1.4,      |
|          |                                               |                | com.fasterxml.jackson.core:jackson-databind:2.21.5,                                                  |
|          |                                               |                | com.fasterxml.jackson.core:jackson-databind:2.22.1,                                                  |
|          |                                               |                | https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.18.9,                         |
|          |                                               |                | https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.21.5,                         |
|          |                                               |                | https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.22.1                          |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | jackson-databind-2.22.0.jar                   | CVE-2026-59889 | Upgrade to version com.fasterxml.jackson.core:jackson-databind:2.21.5,                               |
|          |                                               |                | tools.jackson.core:jackson-databind:3.2.1,tools.jackson.core:jackson-databind:3.1.5,                 |
|          |                                               |                | com.fasterxml.jackson.core:jackson-databind:2.22.1                                                   |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | micrometer-core-1.17.0.jar                    | CVE-2026-59296 | Upgrade to version io.micrometer:micrometer-registry-statsd:1.16.7,                                  |
|          |                                               |                | io.micrometer:micrometer-registry-statsd:1.17.1,                                                     |
|          |                                               |                | https://github.com/micrometer-metrics/micrometer.git - v1.16.7,io.micrometer:micrometer-core:1.17.1, |
|          |                                               |                | io.micrometer:micrometer-core:1.16.7, https://github.com/micrometer-metrics/micrometer.git - v1.17.1 |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-http-4.1.136.Final.jar            | CVE-2026-59903 | Upgrade to version  https://github.com/netty/netty.git - netty-4.1.137.Final,                        |
|          |                                               |                | https://github.com/netty/netty.git - netty-4.2.17.Final                                              |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-socks-4.1.136.Final.jar           | CVE-2026-62380 | Upgrade to version io.netty:netty-codec-socks:4.2.17.Final,io.netty:netty-codec-socks:4.1.137.Final  |
+----------+-----------------------------------------------+----------------+------------------------------------------------------------------------------------------------------+


Paths at risk

P = policy violation
MSC = malicious vulnerability
CRITICAL/HIGH/MEDIUM/LOW = vulnerability severity

rest-client-1.2.4-SNAPSHOT.jar
|-- quarkus-openapi-generator-2.23.0.jar
	|-- quarkus-oidc-common-3.38.1.jar
		|-- smallrye-mutiny-vertx-web-client-3.23.0.jar
			|-- jackson-databind-2.22.0.jar [2 MEDIUM]
			|-- smallrye-mutiny-vertx-core-3.23.0.jar
				|-- jackson-databind-2.22.0.jar [2 MEDIUM]
			|-- vertx-core-4.5.30.jar
				|-- jackson-databind-2.22.0.jar [2 MEDIUM]
				|-- netty-codec-http2-4.1.136.Final.jar
					|-- netty-codec-http-4.1.136.Final.jar [1 MEDIUM]
					|-- netty-handler-4.1.136.Final.jar [1 CRITICAL, 2 HIGH]
				|-- netty-codec-http-4.1.136.Final.jar [1 MEDIUM]
					|-- netty-handler-4.1.136.Final.jar [1 CRITICAL, 2 HIGH]
				|-- netty-handler-proxy-4.1.136.Final.jar
					|-- netty-codec-http-4.1.136.Final.jar [1 MEDIUM]
					|-- netty-codec-socks-4.1.136.Final.jar [1 MEDIUM]
					|-- netty-handler-4.1.136.Final.jar [1 CRITICAL, 2 HIGH]
				|-- netty-handler-4.1.136.Final.jar [1 CRITICAL, 2 HIGH]
				|-- netty-resolver-dns-4.1.136.Final.jar
					|-- netty-handler-4.1.136.Final.jar [1 CRITICAL, 2 HIGH]
			|-- vertx-web-client-4.5.30.jar
				|-- jackson-databind-2.22.0.jar [2 MEDIUM]
	|-- quarkus-qute-3.38.1.jar
		|-- quarkus-vertx-3.38.1.jar
			|-- jackson-databind-2.22.0.jar [2 MEDIUM]
			|-- quarkus-netty-3.38.1.jar
				|-- netty-codec-http-4.1.136.Final.jar [1 MEDIUM]
				|-- netty-handler-4.1.136.Final.jar [1 CRITICAL, 2 HIGH]
|-- quarkus-rest-client-jackson-3.38.1.jar
	|-- resteasy-reactive-jackson-3.38.1.jar
		|-- jackson-databind-2.22.0.jar [2 MEDIUM]
	|-- quarkus-rest-jackson-common-3.38.1.jar
		|-- quarkus-jackson-3.38.1.jar
			|-- jackson-databind-2.22.0.jar [2 MEDIUM]
			|-- jackson-datatype-jdk8-2.22.0.jar
				|-- jackson-databind-2.22.0.jar [2 MEDIUM]
			|-- jackson-datatype-jsr310-2.22.0.jar
				|-- jackson-databind-2.22.0.jar [2 MEDIUM]
			|-- jackson-module-parameter-names-2.22.0.jar
				|-- jackson-databind-2.22.0.jar [2 MEDIUM]
|-- quarkus-resteasy-client-oidc-filter-3.38.1.jar
	|-- quarkus-resteasy-client-3.38.1.jar
		|-- quarkus-resteasy-common-3.38.1.jar
			|-- jackson-databind-2.22.0.jar [2 MEDIUM]
|-- pnc-api-3.5.2-jakarta.jar
	|-- jackson-databind-2.22.0.jar [2 MEDIUM]
rex-api-1.2.4-SNAPSHOT.jar
|-- quarkus-smallrye-openapi-3.38.1.jar
	|-- quarkus-vertx-http-3.38.1.jar
		|-- jackson-databind-2.22.0.jar [2 MEDIUM]
		|-- quarkus-vertx-3.38.1.jar
			|-- jackson-databind-2.22.0.jar [2 MEDIUM]
			|-- quarkus-netty-3.38.1.jar
				|-- netty-codec-http-4.1.136.Final.jar [1 MEDIUM]
				|-- netty-handler-4.1.136.Final.jar [1 CRITICAL, 2 HIGH]
		|-- smallrye-mutiny-vertx-web-3.23.0.jar
			|-- smallrye-mutiny-vertx-core-3.23.0.jar
				|-- jackson-databind-2.22.0.jar [2 MEDIUM]
		|-- vertx-web-4.5.30.jar
			|-- jackson-databind-2.22.0.jar [2 MEDIUM]
			|-- vertx-core-4.5.30.jar
				|-- jackson-databind-2.22.0.jar [2 MEDIUM]
				|-- netty-codec-http2-4.1.136.Final.jar
					|-- netty-codec-http-4.1.136.Final.jar [1 MEDIUM]
					|-- netty-handler-4.1.136.Final.jar [1 CRITICAL, 2 HIGH]
				|-- netty-codec-http-4.1.136.Final.jar [1 MEDIUM]
					|-- netty-handler-4.1.136.Final.jar [1 CRITICAL, 2 HIGH]
				|-- netty-handler-proxy-4.1.136.Final.jar
					|-- netty-codec-http-4.1.136.Final.jar [1 MEDIUM]
					|-- netty-codec-socks-4.1.136.Final.jar [1 MEDIUM]
					|-- netty-handler-4.1.136.Final.jar [1 CRITICAL, 2 HIGH]
				|-- netty-handler-4.1.136.Final.jar [1 CRITICAL, 2 HIGH]
				|-- netty-resolver-dns-4.1.136.Final.jar
					|-- netty-handler-4.1.136.Final.jar [1 CRITICAL, 2 HIGH]
	|-- smallrye-open-api-core-4.3.5.jar
		|-- jackson-databind-2.22.0.jar [2 MEDIUM]
		|-- jackson-dataformat-yaml-2.22.0.jar
			|-- jackson-databind-2.22.0.jar [2 MEDIUM]
|-- rex-dto-1.2.4-SNAPSHOT.jar
	|-- pnc-api-3.5.2-jakarta.jar
		|-- jackson-databind-2.22.0.jar [2 MEDIUM]
rex-common-1.2.4-SNAPSHOT.jar
|-- quarkus-infinispan-client-3.38.1.jar
	|-- quarkus-elytron-security-common-3.38.1.jar
		|-- wildfly-elytron-password-impl-2.9.2.Final.jar [1 HIGH]
	|-- quarkus-netty-3.38.1.jar
		|-- netty-codec-http2-4.1.136.Final.jar
			|-- netty-codec-http-4.1.136.Final.jar [1 MEDIUM]
			|-- netty-handler-4.1.136.Final.jar [1 CRITICAL, 2 HIGH]
		|-- netty-codec-http-4.1.136.Final.jar [1 MEDIUM]
			|-- netty-handler-4.1.136.Final.jar [1 CRITICAL, 2 HIGH]
		|-- netty-handler-4.1.136.Final.jar [1 CRITICAL, 2 HIGH]
	|-- infinispan-client-hotrod-16.0.14.jar
		|-- netty-handler-4.1.136.Final.jar [1 CRITICAL, 2 HIGH]
		|-- netty-resolver-dns-4.1.136.Final.jar
			|-- netty-handler-4.1.136.Final.jar [1 CRITICAL, 2 HIGH]
		|-- wildfly-elytron-password-impl-2.9.2.Final.jar [1 HIGH]
	|-- wildfly-elytron-ssh-util-2.9.2.Final.jar
		|-- sshd-common-2.18.0.jar [1 HIGH]
rex-core-1.2.4-SNAPSHOT.jar
|-- quarkus-elytron-security-ldap-3.38.1.jar
	|-- quarkus-elytron-security-3.38.1.jar
		|-- wildfly-elytron-password-impl-2.9.2.Final.jar [1 HIGH]
		|-- wildfly-elytron-realm-2.9.2.Final.jar
			|-- wildfly-elytron-auth-util-2.9.2.Final.jar
				|-- sshd-common-2.18.0.jar [1 HIGH]
			|-- wildfly-elytron-password-impl-2.9.2.Final.jar [1 HIGH]
	|-- wildfly-elytron-realm-ldap-2.9.2.Final.jar
		|-- wildfly-elytron-client-2.9.2.Final.jar
			|-- wildfly-elytron-credential-source-impl-2.9.2.Final.jar
				|-- wildfly-elytron-password-impl-2.9.2.Final.jar [1 HIGH]
			|-- wildfly-elytron-credential-store-2.9.2.Final.jar
				|-- wildfly-elytron-password-impl-2.9.2.Final.jar [1 HIGH]
			|-- wildfly-elytron-password-impl-2.9.2.Final.jar [1 HIGH]
|-- quarkus-hibernate-validator-3.38.1.jar
	|-- quarkus-vertx-http-3.38.1.jar
		|-- jackson-databind-2.22.0.jar [2 MEDIUM]
		|-- vertx-web-4.5.30.jar
			|-- jackson-databind-2.22.0.jar [2 MEDIUM]
|-- quarkus-infinispan-client-3.38.1.jar
	|-- quarkus-elytron-security-common-3.38.1.jar
		|-- wildfly-elytron-password-impl-2.9.2.Final.jar [1 HIGH]
	|-- quarkus-netty-3.38.1.jar
		|-- netty-codec-http-4.1.136.Final.jar [1 MEDIUM]
			|-- netty-handler-4.1.136.Final.jar [1 CRITICAL, 2 HIGH]
		|-- netty-handler-4.1.136.Final.jar [1 CRITICAL, 2 HIGH]
	|-- protostream-processor-6.0.7.jar
		|-- protostream-6.0.7.jar
			|-- jackson-databind-2.22.0.jar [2 MEDIUM]
	|-- infinispan-client-hotrod-16.0.14.jar
		|-- micrometer-core-1.17.0.jar [1 MEDIUM]
		|-- netty-handler-4.1.136.Final.jar [1 CRITICAL, 2 HIGH]
		|-- infinispan-commons-16.0.14.jar
			|-- micrometer-core-1.17.0.jar [1 MEDIUM]
		|-- wildfly-elytron-password-impl-2.9.2.Final.jar [1 HIGH]
	|-- wildfly-elytron-ssh-util-2.9.2.Final.jar
		|-- sshd-common-2.18.0.jar [1 HIGH]
|-- quarkus-micrometer-opentelemetry-3.38.1.jar
	|-- quarkus-micrometer-3.38.1.jar
		|-- micrometer-core-1.17.0.jar [1 MEDIUM]
|-- quarkus-rest-jackson-3.38.1.jar
	|-- quarkus-rest-jackson-common-3.38.1.jar
		|-- resteasy-reactive-jackson-3.38.1.jar
			|-- jackson-databind-2.22.0.jar [2 MEDIUM]
		|-- quarkus-jackson-3.38.1.jar
			|-- jackson-databind-2.22.0.jar [2 MEDIUM]
			|-- jackson-datatype-jdk8-2.22.0.jar
				|-- jackson-databind-2.22.0.jar [2 MEDIUM]
			|-- jackson-datatype-jsr310-2.22.0.jar
				|-- jackson-databind-2.22.0.jar [2 MEDIUM]
			|-- jackson-module-parameter-names-2.22.0.jar
				|-- jackson-databind-2.22.0.jar [2 MEDIUM]
	|-- quarkus-rest-3.38.1.jar
		|-- jackson-databind-2.22.0.jar [2 MEDIUM]
|-- quarkus-smallrye-fault-tolerance-3.38.1.jar
	|-- smallrye-fault-tolerance-6.11.2.jar
		|-- micrometer-core-1.17.0.jar [1 MEDIUM]
		|-- smallrye-fault-tolerance-core-6.11.2.jar
			|-- micrometer-core-1.17.0.jar [1 MEDIUM]
|-- quarkus-smallrye-openapi-3.38.1.jar
	|-- smallrye-open-api-core-4.3.5.jar
		|-- jackson-databind-2.22.0.jar [2 MEDIUM]
|-- quarkus-vertx-3.38.1.jar
	|-- jackson-databind-2.22.0.jar [2 MEDIUM]
	|-- smallrye-mutiny-vertx-core-3.23.0.jar
		|-- jackson-databind-2.22.0.jar [2 MEDIUM]
		|-- jackson-dataformat-yaml-2.22.0.jar
			|-- jackson-databind-2.22.0.jar [2 MEDIUM]
|-- smallrye-mutiny-vertx-web-client-3.23.0.jar
	|-- jackson-databind-2.22.0.jar [2 MEDIUM]
	|-- vertx-core-4.5.30.jar
		|-- jackson-databind-2.22.0.jar [2 MEDIUM]
		|-- netty-codec-http2-4.1.136.Final.jar
			|-- netty-codec-http-4.1.136.Final.jar [1 MEDIUM]
			|-- netty-handler-4.1.136.Final.jar [1 CRITICAL, 2 HIGH]
		|-- netty-codec-http-4.1.136.Final.jar [1 MEDIUM]
		|-- netty-handler-proxy-4.1.136.Final.jar
			|-- netty-codec-http-4.1.136.Final.jar [1 MEDIUM]
			|-- netty-codec-socks-4.1.136.Final.jar [1 MEDIUM]
			|-- netty-handler-4.1.136.Final.jar [1 CRITICAL, 2 HIGH]
		|-- netty-handler-4.1.136.Final.jar [1 CRITICAL, 2 HIGH]
		|-- netty-resolver-dns-4.1.136.Final.jar
			|-- netty-handler-4.1.136.Final.jar [1 CRITICAL, 2 HIGH]
	|-- vertx-web-client-4.5.30.jar
		|-- jackson-databind-2.22.0.jar [2 MEDIUM]
|-- rex-model-1.2.4-SNAPSHOT.jar
	|-- jackson-databind-2.22.0.jar [2 MEDIUM]
|-- pnc-api-3.5.2-jakarta.jar
	|-- jackson-databind-2.22.0.jar [2 MEDIUM]
rex-dto-1.2.4-SNAPSHOT.jar
|-- pnc-api-3.5.2-jakarta.jar
	|-- jackson-databind-2.22.0.jar [2 MEDIUM]
rex-model-1.2.4-SNAPSHOT.jar
|-- jackson-databind-2.22.0.jar [2 MEDIUM]
|-- quarkus-infinispan-client-3.38.1.jar
	|-- quarkus-elytron-security-common-3.38.1.jar
		|-- wildfly-elytron-password-impl-2.9.2.Final.jar [1 HIGH]
	|-- quarkus-netty-3.38.1.jar
		|-- netty-codec-http2-4.1.136.Final.jar
			|-- netty-codec-http-4.1.136.Final.jar [1 MEDIUM]
			|-- netty-handler-4.1.136.Final.jar [1 CRITICAL, 2 HIGH]
		|-- netty-codec-http-4.1.136.Final.jar [1 MEDIUM]
			|-- netty-handler-4.1.136.Final.jar [1 CRITICAL, 2 HIGH]
		|-- netty-handler-4.1.136.Final.jar [1 CRITICAL, 2 HIGH]
	|-- protostream-processor-6.0.7.jar
		|-- protostream-6.0.7.jar
			|-- jackson-databind-2.22.0.jar [2 MEDIUM]
	|-- infinispan-client-hotrod-16.0.14.jar
		|-- netty-handler-4.1.136.Final.jar [1 CRITICAL, 2 HIGH]
		|-- netty-resolver-dns-4.1.136.Final.jar
			|-- netty-handler-4.1.136.Final.jar [1 CRITICAL, 2 HIGH]
		|-- wildfly-elytron-password-impl-2.9.2.Final.jar [1 HIGH]
	|-- wildfly-elytron-ssh-util-2.9.2.Final.jar
		|-- sshd-common-2.18.0.jar [1 HIGH]
|-- pnc-api-3.5.2-jakarta.jar
	|-- jackson-databind-2.22.0.jar [2 MEDIUM]


No Policy violations were detected

Project 'rex' was updated, for more information, visit the Mend platform: https://ibmets.whitesourcesoftware.com/app/orgs/Enterprise%20Applications/applications/summary?project=766c84d5-a404-4216-979c-40342589cd82
Or the Core UI: https://ibmets.whitesourcesoftware.com/Wss/WSS.html#!project;token=b645225f79df407c96d99a7765e3ee896145b2166ed7433faa7b5eadcad58f7f

Mend AI scan succeeded.

Support Token: 0ba17b62e9e98498bbb1b7eac0e33c9f71787561907159

SAST scan output

*no findings*

Full logs and artifacts

dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Aug 24, 2026

dependabot Bot mentioned this pull request Aug 24, 2026

Bump org.jboss.pnc:pnc-api from 3.0.5 to 3.5.1 #186

Closed

Navigation Menu

Uh oh!

Bump org.jboss.pnc:pnc-api from 3.0.5 to 3.5.2 - #194

Bump org.jboss.pnc:pnc-api from 3.0.5 to 3.5.2#194
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/org.jboss.pnc-pnc-api-3.5.2

dependabot Bot commented on behalf of github Aug 24, 2026

Uh oh!

github-actions Bot commented Aug 24, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 24, 2026

3.5.2

3.5.1

What's Changed

🐛 Fixes / 🚀 Enhancements

Uh oh!

github-actions Bot commented Aug 24, 2026

Mend Scan Results

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants