Bump quarkus.platform.version from 3.36.3 to 3.37.1 by dependabot[bot] · Pull Request #375 · project-ncl/reqour

dependabot · 2026-07-14T22:43:07Z

Bumps quarkus.platform.version from 3.36.3 to 3.37.1.
Updates io.quarkus.platform:quarkus-bom from 3.36.3 to 3.37.1

Commits

2d51155 [maven-release-plugin] prepare release 3.37.1
9da81fa Merge pull request #2042 from quarkusio/quarkus-3.37.1
c3da25d Merge pull request #2038 from quarkusio/update-automation/3.37-quarkus-flow-0...
481bc22 Upgrade to Quarkus 3.37.1
fba84a5 Update Quarkus Flow to 0.11.0
f648c1f [maven-release-plugin] prepare for next development iteration
acd4665 [maven-release-plugin] prepare release 3.37.0
ee4cd81 Merge pull request #2035 from ppalaga/qcxf-3.37.0
4fa57b0 Update CXF to 3.37.0
f269932 Merge pull request #2032 from quarkusio/dependabot/github_actions/actions/che...
Additional commits viewable in compare view

Updates io.quarkus.platform:quarkus-maven-plugin from 3.36.3 to 3.37.1

Commits

2d51155 [maven-release-plugin] prepare release 3.37.1
9da81fa Merge pull request #2042 from quarkusio/quarkus-3.37.1
c3da25d Merge pull request #2038 from quarkusio/update-automation/3.37-quarkus-flow-0...
481bc22 Upgrade to Quarkus 3.37.1
fba84a5 Update Quarkus Flow to 0.11.0
f648c1f [maven-release-plugin] prepare for next development iteration
acd4665 [maven-release-plugin] prepare release 3.37.0
ee4cd81 Merge pull request #2035 from ppalaga/qcxf-3.37.0
4fa57b0 Update CXF to 3.37.0
f269932 Merge pull request #2032 from quarkusio/dependabot/github_actions/actions/che...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps `quarkus.platform.version` from 3.36.3 to 3.37.1. Updates `io.quarkus.platform:quarkus-bom` from 3.36.3 to 3.37.1 - [Commits](quarkusio/quarkus-platform@3.36.3...3.37.1) Updates `io.quarkus.platform:quarkus-maven-plugin` from 3.36.3 to 3.37.1 - [Commits](quarkusio/quarkus-platform@3.36.3...3.37.1) --- updated-dependencies: - dependency-name: io.quarkus.platform:quarkus-bom dependency-version: 3.37.1 dependency-type: direct:production update-type: version-update:semver-minor - dependency-name: io.quarkus.platform:quarkus-maven-plugin dependency-version: 3.37.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-07-14T22:59:36Z

Mend Scan Results

Status: ⚠️ Findings detected

⚠️ SCA findings detected

SCA scan output


			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-exporter-otlp-common-1.60.1.jar
			|-- opentelemetry-exporter-common-1.60.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-exporter-otlp-1.60.1.jar
			|-- opentelemetry-sdk-logs-1.60.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-sdk-trace-1.60.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-sdk-1.60.1.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-sdk-common-1.60.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-sdk-metrics-1.60.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- quarkus-grpc-common-3.37.1.jar
			|-- vertx-grpc-server-4.5.28.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-grpc-4.5.28.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
		|-- smallrye-common-vertx-context-2.18.1.jar
			|-- vertx-core-4.5.28.jar [1 HIGH]
		|-- vertx-grpc-client-4.5.28.jar
			|-- vertx-core-4.5.28.jar [1 HIGH]
				|-- jackson-databind-2.22.0.jar [1 MEDIUM]
			|-- vertx-grpc-common-4.5.28.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
|-- quarkus-oidc-3.37.1.jar
	|-- quarkus-oidc-common-3.37.1.jar
		|-- smallrye-mutiny-vertx-web-client-3.22.2.jar
			|-- jackson-databind-2.22.0.jar [1 MEDIUM]
			|-- smallrye-mutiny-vertx-uri-template-3.22.2.jar
				|-- vertx-uri-template-4.5.28.jar
					|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-web-client-4.5.28.jar [1 HIGH]
	|-- quarkus-vertx-3.37.1.jar
		|-- jackson-databind-2.22.0.jar [1 MEDIUM]
		|-- smallrye-mutiny-vertx-core-3.22.2.jar
			|-- jackson-databind-2.22.0.jar [1 MEDIUM]
			|-- smallrye-mutiny-vertx-runtime-3.22.2.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-core-4.5.28.jar [1 HIGH]
		|-- smallrye-fault-tolerance-vertx-6.11.1.jar
			|-- vertx-core-4.5.28.jar [1 HIGH]
|-- quarkus-openshift-client-3.37.1.jar
	|-- openshift-client-7.7.0.jar
		|-- kubernetes-client-api-7.7.0.jar
			|-- jackson-databind-2.22.0.jar [1 MEDIUM]
			|-- kubernetes-model-core-7.7.0.jar
				|-- kubernetes-model-common-7.7.0.jar
					|-- jackson-databind-2.22.0.jar [1 MEDIUM]
	|-- quarkus-kubernetes-client-3.37.1.jar
		|-- kubernetes-client-7.7.0.jar
			|-- zjsonpatch-7.7.0.jar
				|-- jackson-databind-2.22.0.jar [1 MEDIUM]
		|-- kubernetes-httpclient-vertx-7.7.0.jar
			|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-web-client-4.5.28.jar [1 HIGH]
|-- quarkus-rest-jackson-3.37.1.jar
	|-- quarkus-rest-3.37.1.jar
		|-- jackson-databind-2.22.0.jar [1 MEDIUM]
		|-- resteasy-reactive-vertx-3.37.1.jar
			|-- vertx-web-client-4.5.28.jar [1 HIGH]
		|-- quarkus-virtual-threads-3.37.1.jar
			|-- vertx-core-4.5.28.jar [1 HIGH]
|-- quarkus-smallrye-health-3.37.1.jar
	|-- quarkus-vertx-http-3.37.1.jar
		|-- jackson-databind-2.22.0.jar [1 MEDIUM]
		|-- quarkus-tls-registry-3.37.1.jar
			|-- smallrye-private-key-pem-parser-0.9.3.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
		|-- vertx-web-4.5.28.jar
			|-- jackson-databind-2.22.0.jar [1 MEDIUM]
			|-- vertx-auth-common-4.5.28.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-bridge-common-4.5.28.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-web-common-4.5.28.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
|-- quarkus-smallrye-openapi-3.37.1.jar
	|-- smallrye-open-api-core-4.3.3.jar
		|-- jackson-databind-2.22.0.jar [1 MEDIUM]
		|-- jackson-dataformat-yaml-2.22.0.jar
			|-- jackson-databind-2.22.0.jar [1 MEDIUM]
|-- reqour-core-3.5.6-SNAPSHOT.jar
	|-- quarkus-logging-json-3.5.0.jar
		|-- quarkus-jackson-3.37.1.jar
			|-- jackson-databind-2.22.0.jar [1 MEDIUM]
			|-- vertx-core-4.5.28.jar [1 HIGH]
	|-- quarkus-rest-client-jackson-3.37.1.jar
		|-- resteasy-reactive-jackson-3.37.1.jar
			|-- jackson-databind-2.22.0.jar [1 MEDIUM]
	|-- quarkus-smallrye-fault-tolerance-3.37.1.jar
		|-- smallrye-fault-tolerance-6.11.1.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- smallrye-fault-tolerance-core-6.11.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- gitlab4j-api-6.3.0.jar
		|-- gitlab4j-models-6.3.0.jar
			|-- jackson-databind-2.22.0.jar [1 MEDIUM]
		|-- jersey-media-json-jackson-3.1.10.jar
			|-- jackson-databind-2.22.0.jar [1 MEDIUM]
			|-- jackson-module-jakarta-xmlbind-annotations-2.22.0.jar
				|-- jackson-databind-2.22.0.jar [1 MEDIUM]
	|-- bifrost-upload-client-3.5.0.jar
		|-- jackson-databind-2.22.0.jar [1 MEDIUM]
		|-- httpclient5-5.6.1.jar
			|-- httpcore5-h2-5.4.jar [1 HIGH]
				|-- httpcore5-5.4.jar [1 HIGH]
			|-- httpcore5-5.4.jar [1 HIGH]
		|-- pnc-api-3.5.0.jar
			|-- jackson-databind-2.22.0.jar [1 MEDIUM]
	|-- pnc-api-3.5.0-jakarta.jar
		|-- jackson-databind-2.22.0.jar [1 MEDIUM]
	|-- pnc-common-3.5.1-jakarta.jar
		|-- jackson-databind-2.22.0.jar [1 MEDIUM]
		|-- jackson-datatype-jdk8-2.22.0.jar
			|-- jackson-databind-2.22.0.jar [1 MEDIUM]
		|-- jackson-datatype-jsr310-2.22.0.jar
			|-- jackson-databind-2.22.0.jar [1 MEDIUM]
		|-- jackson-module-parameter-names-2.22.0.jar
			|-- jackson-databind-2.22.0.jar [1 MEDIUM]
		|-- pom-manipulation-common-lite-5.3.jar
			|-- jackson-databind-2.22.0.jar [1 MEDIUM]
			|-- reports-model-2.6.9.jar
				|-- jackson-databind-2.22.0.jar [1 MEDIUM]
		|-- opentelemetry-ext-cli-java-2.1.0.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-semconv-1.29.0-alpha.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- github-api-1.330.jar
		|-- jackson-databind-2.22.0.jar [1 MEDIUM]


No Policy violations were detected

Project 'reqour' was updated, for more information, visit the Mend platform: https://ibmets.whitesourcesoftware.com/app/orgs/Enterprise%20Applications/applications/summary?project=f431aad9-9460-46b3-b3eb-677bf83ee360
Or the Core UI: https://ibmets.whitesourcesoftware.com/Wss/WSS.html#!project;token=422537de190243159a22de2ea487cb28df2e499972f34f1481f455b690290cb7

Mend AI scan succeeded.

Support Token: 231320d47ac744571842d3ab76dde35e31784069928839

SAST scan output

*no findings*

Full logs and artifacts

dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jul 14, 2026

dependabot Bot mentioned this pull request Jul 14, 2026

Bump quarkus.platform.version from 3.36.3 to 3.37.0 #372

Closed

Navigation Menu

Uh oh!

Bump quarkus.platform.version from 3.36.3 to 3.37.1 - #375

Bump quarkus.platform.version from 3.36.3 to 3.37.1#375
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/quarkus.platform.version-3.37.1

dependabot Bot commented on behalf of github Jul 14, 2026

Uh oh!

github-actions Bot commented Jul 14, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 14, 2026

Uh oh!

github-actions Bot commented Jul 14, 2026

Mend Scan Results

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants