Skip to content

NCL-9661 Update release labels#1752

Merged
thescouser89 merged 1 commit into
mainfrom
NCL9661
May 15, 2026
Merged

NCL-9661 Update release labels#1752
thescouser89 merged 1 commit into
mainfrom
NCL9661

Conversation

@rnc
Copy link
Copy Markdown
Contributor

@rnc rnc commented May 14, 2026

Checklist:

  • Have you added a note in the CHANGELOG wiki for your change if user-facing?
  • Have you added unit tests for your change?

@github-actions
Copy link
Copy Markdown

Mend Scan Results

Status: ⚠️ Findings detected

⚠️ SCA findings detected

⚠️ SAST findings detected

SCA scan output
jar
				|-- netty-common-4.1.84.Final.jar [2 MEDIUM]
|-- resteasy-jackson2-provider-3.15.6.Final.jar
	|-- jackson-core-2.19.2.jar [1 HIGH]
	|-- jackson-jaxrs-json-provider-2.11.3.jar
		|-- jackson-jaxrs-base-2.11.3.jar
			|-- jackson-core-2.19.2.jar [1 HIGH]
		|-- jackson-module-jaxb-annotations-2.11.3.jar
			|-- jackson-core-2.19.2.jar [1 HIGH]
	|-- json-patch-1.9.jar
		|-- jackson-coreutils-1.6.jar
			|-- guava-28.1-jre.jar [1 MEDIUM, 1 LOW]
	|-- guava-28.1-jre.jar [1 MEDIUM, 1 LOW]
|-- mapdb-3.1.0.jar
	|-- guava-28.1-jre.jar [1 MEDIUM, 1 LOW]
	|-- lz4-1.3.0.jar [1 CRITICAL, 1 HIGH]
pnc-3.4.1-SNAPSHOT.jar
|-- auth-3.4.1-SNAPSHOT.jar
	|-- jackson-core-2.19.2.jar [1 HIGH]
	|-- unirest-java-3.14.5.jar
		|-- guava-28.1-jre.jar [1 MEDIUM, 1 LOW]
	|-- unirest-objectmapper-jackson-3.14.5.jar
		|-- guava-28.1-jre.jar [1 MEDIUM, 1 LOW]
	|-- keycloak-installed-adapter-25.0.3.jar
		|-- jackson-core-2.19.2.jar [1 HIGH]
		|-- undertow-core-2.2.24.Final.jar [1 CRITICAL, 11 HIGH, 3 MEDIUM]
		|-- bcprov-jdk18on-1.74.jar [2 CRITICAL, 3 HIGH, 4 MEDIUM]
		|-- keycloak-adapter-core-25.0.3.jar [1 MEDIUM]
			|-- jackson-core-2.19.2.jar [1 HIGH]
			|-- bcprov-jdk18on-1.74.jar [2 CRITICAL, 3 HIGH, 4 MEDIUM]
			|-- keycloak-core-25.0.3.jar [1 HIGH, 3 MEDIUM, 2 LOW]
			|-- keycloak-crypto-default-25.0.3.jar
				|-- bcpkix-jdk18on-1.74.jar [2 MEDIUM]
					|-- bcprov-jdk18on-1.74.jar [2 CRITICAL, 3 HIGH, 4 MEDIUM]
					|-- bcutil-jdk18on-1.74.jar
						|-- bcprov-jdk18on-1.74.jar [2 CRITICAL, 3 HIGH, 4 MEDIUM]
				|-- bcprov-jdk18on-1.74.jar [2 CRITICAL, 3 HIGH, 4 MEDIUM]
				|-- keycloak-core-25.0.3.jar [1 HIGH, 3 MEDIUM, 2 LOW]
				|-- keycloak-server-spi-private-25.0.3.jar [1 HIGH, 3 MEDIUM, 1 LOW]
					|-- guava-28.1-jre.jar [1 MEDIUM, 1 LOW]
					|-- keycloak-core-25.0.3.jar [1 HIGH, 3 MEDIUM, 2 LOW]
				|-- keycloak-server-spi-25.0.3.jar
					|-- keycloak-core-25.0.3.jar [1 HIGH, 3 MEDIUM, 2 LOW]
		|-- keycloak-adapter-spi-25.0.3.jar
			|-- bcprov-jdk18on-1.74.jar [2 CRITICAL, 3 HIGH, 4 MEDIUM]
		|-- keycloak-core-25.0.3.jar [1 HIGH, 3 MEDIUM, 2 LOW]
			|-- jackson-core-2.19.2.jar [1 HIGH]
			|-- keycloak-common-25.0.3.jar [2 MEDIUM]
|-- common-3.4.1-SNAPSHOT.jar
	|-- pom-manipulation-common-lite-5.3.jar
		|-- jackson-core-2.19.2.jar [1 HIGH]
|-- config-3.4.1-SNAPSHOT.jar
	|-- jackson-core-2.19.2.jar [1 HIGH]
	|-- jackson-databind-2.19.2.jar
		|-- jackson-core-2.19.2.jar [1 HIGH]
	|-- jackson-dataformat-yaml-2.19.2.jar
		|-- jackson-core-2.19.2.jar [1 HIGH]
|-- rest-client-3.4.5.jar
	|-- jackson-datatype-jdk8-2.12.6.redhat-00001.jar
		|-- jackson-core-2.19.2.jar [1 HIGH]
	|-- jackson-datatype-jsr310-2.19.2.jar
		|-- jackson-core-2.19.2.jar [1 HIGH]
	|-- json-patch-1.13.jar
		|-- guava-28.1-jre.jar [1 MEDIUM, 1 LOW]
	|-- vertx-core-3.9.14.jar [1 MEDIUM]
		|-- jackson-core-2.19.2.jar [1 HIGH]
		|-- netty-buffer-4.1.84.Final.jar
			|-- netty-common-4.1.84.Final.jar [2 MEDIUM]
		|-- netty-codec-http2-4.1.84.Final.jar [4 HIGH, 1 MEDIUM]
			|-- netty-codec-http-4.1.84.Final.jar [3 HIGH, 9 MEDIUM]
			|-- netty-codec-4.1.84.Final.jar [1 HIGH, 1 MEDIUM]
			|-- netty-common-4.1.84.Final.jar [2 MEDIUM]
			|-- netty-handler-4.1.84.Final.jar [1 MEDIUM]
		|-- netty-codec-http-4.1.84.Final.jar [3 HIGH, 9 MEDIUM]
			|-- netty-codec-4.1.84.Final.jar [1 HIGH, 1 MEDIUM]
			|-- netty-common-4.1.84.Final.jar [2 MEDIUM]
			|-- netty-handler-4.1.84.Final.jar [1 MEDIUM]
		|-- netty-common-4.1.84.Final.jar [2 MEDIUM]
		|-- netty-handler-proxy-4.1.84.Final.jar [1 HIGH]
			|-- netty-codec-http-4.1.84.Final.jar [3 HIGH, 9 MEDIUM]
			|-- netty-codec-socks-4.1.84.Final.jar
				|-- netty-codec-4.1.84.Final.jar [1 HIGH, 1 MEDIUM]
				|-- netty-common-4.1.84.Final.jar [2 MEDIUM]
			|-- netty-codec-4.1.84.Final.jar [1 HIGH, 1 MEDIUM]
			|-- netty-common-4.1.84.Final.jar [2 MEDIUM]
			|-- netty-handler-4.1.84.Final.jar [1 MEDIUM]
		|-- netty-handler-4.1.84.Final.jar [1 MEDIUM]
			|-- netty-codec-4.1.84.Final.jar [1 HIGH, 1 MEDIUM]
			|-- netty-common-4.1.84.Final.jar [2 MEDIUM]
			|-- netty-transport-native-unix-common-4.1.84.Final.jar
				|-- netty-common-4.1.84.Final.jar [2 MEDIUM]
		|-- netty-resolver-dns-4.1.84.Final.jar
			|-- netty-codec-dns-4.1.84.Final.jar [1 HIGH]
				|-- netty-codec-4.1.84.Final.jar [1 HIGH, 1 MEDIUM]
				|-- netty-common-4.1.84.Final.jar [2 MEDIUM]
			|-- netty-codec-4.1.84.Final.jar [1 HIGH, 1 MEDIUM]
				|-- netty-common-4.1.84.Final.jar [2 MEDIUM]
			|-- netty-common-4.1.84.Final.jar [2 MEDIUM]
			|-- netty-handler-4.1.84.Final.jar [1 MEDIUM]
		|-- netty-resolver-4.1.84.Final.jar
			|-- netty-common-4.1.84.Final.jar [2 MEDIUM]
		|-- netty-transport-4.1.84.Final.jar
			|-- netty-common-4.1.84.Final.jar [2 MEDIUM]
	|-- dto-3.4.5-patch-builders.jar
		|-- jsoup-1.22.2.jar
			|-- netty-codec-http-4.1.84.Final.jar [3 HIGH, 9 MEDIUM]
			|-- netty-handler-4.1.84.Final.jar [1 MEDIUM]
	|-- rest-api-3.4.5-java-client.jar
		|-- undertow-core-2.2.24.Final.jar [1 CRITICAL, 11 HIGH, 3 MEDIUM]
			|-- xnio-api-3.8.7.Final.jar [2 HIGH]
			|-- xnio-nio-3.8.7.Final.jar
				|-- xnio-api-3.8.7.Final.jar [2 HIGH]
	|-- resteasy-jackson2-provider-3.15.6.Final.jar
		|-- jackson-core-2.19.2.jar [1 HIGH]
		|-- jackson-jaxrs-json-provider-2.11.3.jar
			|-- jackson-jaxrs-base-2.11.3.jar
				|-- jackson-core-2.19.2.jar [1 HIGH]
			|-- jackson-module-jaxb-annotations-2.11.3.jar
				|-- jackson-core-2.19.2.jar [1 HIGH]
		|-- json-patch-1.9.jar
			|-- jackson-coreutils-1.6.jar
				|-- guava-28.1-jre.jar [1 MEDIUM, 1 LOW]
		|-- guava-28.1-jre.jar [1 MEDIUM, 1 LOW]


No Policy violations were detected

Project 'bacon' was updated, for more information, visit the Mend platform: https://ibmets.whitesourcesoftware.com/app/orgs/Enterprise%20Applications/applications/summary?project=f85d9f1a-b4b0-47cd-8126-d6bf70df9ffc
Or the Core UI: https://ibmets.whitesourcesoftware.com/Wss/WSS.html#!project;token=6d0c058f67e84d0886f851d7173c47c7ca091a6fdb1242cdbb51128e57035c41

Mend AI scan succeeded.

Support Token: 017adf2785b22434082b25e164ba17c6c1778748357785
SAST scan output
warning: 'KeycloakClientException' method could be abused to reveal sensitive internal information. (pig/src/main/java/org/jboss/pnc/bacon/pig/impl/addons/camel/TreeParser.java:246)
warning: 'sha1' method of 'hashlib' uses a non-recommended hash algorithm. (bacon_install.py:188)

Full logs and artifacts

@thescouser89 thescouser89 merged commit 6614d00 into main May 15, 2026
4 checks passed
@rnc rnc deleted the NCL9661 branch May 15, 2026 15:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants