Bump org.jboss.pnc:bifrost-upload-client from 3.5.0 to 3.5.1 by dependabot[bot] · Pull Request #371 · project-ncl/reqour

dependabot · 2026-07-07T22:42:57Z

Bumps org.jboss.pnc:bifrost-upload-client from 3.5.0 to 3.5.1.

Release notes

Sourced from org.jboss.pnc:bifrost-upload-client's releases.

3.5.1

What's Changed

🐛 Fixes / 🚀 Enhancements

NCL-9661 Update release labels by @rnc in project-ncl/bifrost-upload-client#64

Bump shared-github-actions to v0.0.21 by @patrikk0123 in project-ncl/bifrost-upload-client#74

Update httpclient5 to 5.6.2 by @jomrazek in project-ncl/bifrost-upload-client#75

👒 Project Dependencies

Bump org.junit.jupiter:junit-jupiter from 6.0.3 to 6.1.0 by @dependabot[bot] in project-ncl/bifrost-upload-client#65

Bump com.fasterxml.jackson.core:jackson-databind from 2.21.3 to 2.22.0 by @dependabot[bot] in project-ncl/bifrost-upload-client#66

Bump org.jboss.pnc:pnc-api from 3.5.0 to 3.5.1 by @dependabot[bot] in project-ncl/bifrost-upload-client#73

Bump org.sonatype.central:central-publishing-maven-plugin from 0.10.0 to 0.11.0 by @dependabot[bot] in project-ncl/bifrost-upload-client#71

👒 CI Dependencies

Bump project-ncl/shared-github-actions/.github/workflows/maven-release.yml from 0.0.17 to 0.0.18 by @dependabot[bot] in project-ncl/bifrost-upload-client#63

Bump project-ncl/shared-github-actions/.github/workflows/maven-set-version.yml from 0.0.17 to 0.0.18 by @dependabot[bot] in project-ncl/bifrost-upload-client#61

Bump project-ncl/shared-github-actions/.github/workflows/validate-gh-action.yml from 0.0.17 to 0.0.18 by @dependabot[bot] in project-ncl/bifrost-upload-client#60

Bump project-ncl/shared-github-actions/.github/workflows/maven-snapshot.yml from 0.0.17 to 0.0.18 by @dependabot[bot] in project-ncl/bifrost-upload-client#62

Bump project-ncl/shared-github-actions/.github/workflows/validate-gh-action.yml from 0.0.18 to 0.0.19 by @dependabot[bot] in project-ncl/bifrost-upload-client#72

Bump project-ncl/shared-github-actions/.github/workflows/maven-ci.yml from 0.0.18 to 0.0.19 by @dependabot[bot] in project-ncl/bifrost-upload-client#70

Bump project-ncl/shared-github-actions/.github/workflows/maven-snapshot.yml from 0.0.18 to 0.0.19 by @dependabot[bot] in project-ncl/bifrost-upload-client#69

Bump project-ncl/shared-github-actions/.github/workflows/mend-ci.yml from 0.0.18 to 0.0.19 by @dependabot[bot] in project-ncl/bifrost-upload-client#68

Bump project-ncl/shared-github-actions/.github/workflows/maven-release.yml from 0.0.18 to 0.0.19 by @dependabot[bot] in project-ncl/bifrost-upload-client#67

New Contributors

@rnc made their first contribution in project-ncl/bifrost-upload-client#64

Full Changelog: project-ncl/bifrost-upload-client@3.5.0...3.5.1

Commits

5407cc7 [maven-release-plugin] prepare release 3.5.1
5b0cbb6 Spotless missing during release (#76)
87879b6 Update httpclient5 to 5.6.2 (#75)
00f02cf Bump shared-github-actions to v0.0.21
edb8359 Bump project-ncl/shared-github-actions/.github/workflows/maven-release.yml (#67)
2d1ffc6 Bump project-ncl/shared-github-actions/.github/workflows/mend-ci.yml (#68)
adc4266 Bump project-ncl/shared-github-actions/.github/workflows/maven-snapshot.yml (...
23cc784 Bump project-ncl/shared-github-actions/.github/workflows/maven-ci.yml (#70)
daf5040 Bump org.sonatype.central:central-publishing-maven-plugin (#71)
07d2fd8 Bump project-ncl/shared-github-actions/.github/workflows/validate-gh-action.y...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.jboss.pnc:bifrost-upload-client](https://github.com/project-ncl/bifrost-upload-client) from 3.5.0 to 3.5.1. - [Release notes](https://github.com/project-ncl/bifrost-upload-client/releases) - [Commits](project-ncl/bifrost-upload-client@3.5.0...3.5.1) --- updated-dependencies: - dependency-name: org.jboss.pnc:bifrost-upload-client dependency-version: 3.5.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-07-07T23:00:22Z

Mend Scan Results

Status: ⚠️ Findings detected

⚠️ SCA findings detected

SCA scan output

 opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-semconv-1.29.0-alpha.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- pnc-api-3.5.1.jar
		|-- jackson-databind-2.21.4.jar [1 MEDIUM]
|-- github-api-1.330.jar
	|-- jackson-databind-2.21.4.jar [1 MEDIUM]
reqour-rest-3.5.6-SNAPSHOT.jar
|-- quarkus-micrometer-opentelemetry-3.36.3.jar
	|-- opentelemetry-micrometer-1.5-2.26.1-alpha.jar
		|-- opentelemetry-instrumentation-api-2.26.1.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- quarkus-micrometer-3.36.3.jar
		|-- micrometer-core-1.16.6.jar
			|-- HdrHistogram-2.2.2.jar [4 LOW]
			|-- LatencyUtils-2.0.3.jar
				|-- HdrHistogram-2.2.2.jar [4 LOW]
		|-- resteasy-reactive-client-3.36.3.jar
			|-- vertx-core-4.5.28.jar
				|-- jackson-databind-2.21.4.jar [1 MEDIUM]
	|-- quarkus-opentelemetry-3.36.3.jar
		|-- opentelemetry-instrumentation-annotations-support-2.26.1-alpha.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-instrumentation-annotations-2.26.1.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-jdbc-2.26.1-alpha.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-runtime-telemetry-java17-2.26.1-alpha.jar
			|-- opentelemetry-runtime-telemetry-2.26.1-alpha.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-api-incubator-1.60.1-alpha.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-exporter-otlp-common-1.60.1.jar
			|-- opentelemetry-exporter-common-1.60.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-exporter-otlp-1.60.1.jar
			|-- opentelemetry-sdk-logs-1.60.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-sdk-1.60.1.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-sdk-common-1.60.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-sdk-metrics-1.60.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-sdk-trace-1.60.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
|-- quarkus-oidc-3.36.3.jar
	|-- quarkus-oidc-common-3.36.3.jar
		|-- smallrye-mutiny-vertx-web-client-3.22.2.jar
			|-- jackson-databind-2.21.4.jar [1 MEDIUM]
	|-- quarkus-vertx-http-3.36.3.jar
		|-- jackson-databind-2.21.4.jar [1 MEDIUM]
		|-- vertx-web-4.5.28.jar
			|-- jackson-databind-2.21.4.jar [1 MEDIUM]
	|-- quarkus-vertx-3.36.3.jar
		|-- jackson-databind-2.21.4.jar [1 MEDIUM]
		|-- smallrye-mutiny-vertx-core-3.22.2.jar
			|-- jackson-databind-2.21.4.jar [1 MEDIUM]
|-- quarkus-openshift-client-3.36.3.jar
	|-- openshift-client-7.7.0.jar
		|-- kubernetes-client-api-7.7.0.jar
			|-- jackson-databind-2.21.4.jar [1 MEDIUM]
			|-- kubernetes-model-core-7.7.0.jar
				|-- kubernetes-model-common-7.7.0.jar
					|-- jackson-databind-2.21.4.jar [1 MEDIUM]
	|-- quarkus-kubernetes-client-3.36.3.jar
		|-- kubernetes-client-7.7.0.jar
			|-- zjsonpatch-7.7.0.jar
				|-- jackson-databind-2.21.4.jar [1 MEDIUM]
		|-- kubernetes-httpclient-vertx-7.7.0.jar
			|-- vertx-web-client-4.5.28.jar
				|-- jackson-databind-2.21.4.jar [1 MEDIUM]
|-- quarkus-rest-jackson-3.36.3.jar
	|-- quarkus-rest-jackson-common-3.36.3.jar
		|-- quarkus-jackson-3.36.3.jar
			|-- jackson-databind-2.21.4.jar [1 MEDIUM]
	|-- quarkus-rest-3.36.3.jar
		|-- jackson-databind-2.21.4.jar [1 MEDIUM]
|-- quarkus-smallrye-openapi-3.36.3.jar
	|-- smallrye-open-api-core-4.3.3.jar
		|-- jackson-databind-2.21.4.jar [1 MEDIUM]
		|-- jackson-dataformat-yaml-2.21.4.jar
			|-- jackson-databind-2.21.4.jar [1 MEDIUM]
|-- reqour-core-3.5.6-SNAPSHOT.jar
	|-- quarkus-rest-client-jackson-3.36.3.jar
		|-- resteasy-reactive-jackson-3.36.3.jar
			|-- jackson-databind-2.21.4.jar [1 MEDIUM]
	|-- quarkus-smallrye-fault-tolerance-3.36.3.jar
		|-- smallrye-fault-tolerance-6.11.1.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- smallrye-fault-tolerance-core-6.11.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- gitlab4j-api-6.3.0.jar
		|-- gitlab4j-models-6.3.0.jar
			|-- jackson-databind-2.21.4.jar [1 MEDIUM]
		|-- jersey-media-json-jackson-3.1.10.jar
			|-- jackson-databind-2.21.4.jar [1 MEDIUM]
			|-- jackson-module-jakarta-xmlbind-annotations-2.21.4.jar
				|-- jackson-databind-2.21.4.jar [1 MEDIUM]
	|-- quarkus-logging-kafka-deployment-3.0.5.jar
		|-- quarkus-arc-deployment-3.36.3.jar
			|-- quarkus-core-deployment-3.36.3.jar
				|-- readline-2.6.jar
					|-- jansi-2.4.0.jar [1 LOW]
	|-- bifrost-upload-client-3.5.1.jar
		|-- jackson-databind-2.21.4.jar [1 MEDIUM]
		|-- pnc-api-3.5.1.jar
			|-- jackson-databind-2.21.4.jar [1 MEDIUM]
	|-- pnc-api-3.5.0-jakarta.jar
		|-- jackson-databind-2.21.4.jar [1 MEDIUM]
	|-- pnc-common-3.5.1-jakarta.jar
		|-- jackson-databind-2.21.4.jar [1 MEDIUM]
		|-- jackson-datatype-jdk8-2.21.4.jar
			|-- jackson-databind-2.21.4.jar [1 MEDIUM]
		|-- jackson-datatype-jsr310-2.21.4.jar
			|-- jackson-databind-2.21.4.jar [1 MEDIUM]
		|-- jackson-module-parameter-names-2.21.4.jar
			|-- jackson-databind-2.21.4.jar [1 MEDIUM]
		|-- pom-manipulation-common-lite-5.3.jar
			|-- jackson-databind-2.21.4.jar [1 MEDIUM]
			|-- reports-model-2.6.9.jar
				|-- jackson-databind-2.21.4.jar [1 MEDIUM]
		|-- opentelemetry-ext-cli-java-2.1.0.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-semconv-1.29.0-alpha.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- github-api-1.330.jar
		|-- jackson-databind-2.21.4.jar [1 MEDIUM]


No Policy violations were detected

Project 'reqour' was updated, for more information, visit the Mend platform: https://ibmets.whitesourcesoftware.com/app/orgs/Enterprise%20Applications/applications/summary?project=f431aad9-9460-46b3-b3eb-677bf83ee360
Or the Core UI: https://ibmets.whitesourcesoftware.com/Wss/WSS.html#!project;token=422537de190243159a22de2ea487cb28df2e499972f34f1481f455b690290cb7

Mend AI scan succeeded.

Support Token: 112b029a7347c44c38fd048706977067d1783465157483

SAST scan output

*no findings*

Full logs and artifacts

dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jul 7, 2026

Navigation Menu

Uh oh!

Bump org.jboss.pnc:bifrost-upload-client from 3.5.0 to 3.5.1 - #371

Bump org.jboss.pnc:bifrost-upload-client from 3.5.0 to 3.5.1#371
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/org.jboss.pnc-bifrost-upload-client-3.5.1

dependabot Bot commented on behalf of github Jul 7, 2026

Uh oh!

github-actions Bot commented Jul 7, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 7, 2026

3.5.1

What's Changed

🐛 Fixes / 🚀 Enhancements

👒 Project Dependencies

👒 CI Dependencies

New Contributors

Uh oh!

github-actions Bot commented Jul 7, 2026

Mend Scan Results

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants