Bump io.quarkiverse.wiremock:quarkus-wiremock from 1.6.1 to 1.6.3 by dependabot[bot] · Pull Request #514 · project-ncl/causeway

dependabot · 2026-05-16T22:22:29Z

Bumps io.quarkiverse.wiremock:quarkus-wiremock from 1.6.1 to 1.6.3.

Release notes

Sourced from io.quarkiverse.wiremock:quarkus-wiremock's releases.

1.6.3

What's Changed

Release 1.6.3 by @wjglerum in quarkiverse/quarkus-wiremock#261

Full Changelog: quarkiverse/quarkus-wiremock@1.6.2...1.6.3

1.6.2

What's Changed

Reduce workflow permissions by @gastaldi in quarkiverse/quarkus-wiremock#257

Reuse Ecosystem workflow by @gastaldi in quarkiverse/quarkus-wiremock#258

chore(deps): bump quarkus.version from 3.33.0 to 3.33.1 by @dependabot[bot] in quarkiverse/quarkus-wiremock#256

chore(deps): bump quarkus.version from 3.33.1 to 3.33.1.1 by @dependabot[bot] in quarkiverse/quarkus-wiremock#259

Drop custom JsonRPC service, use built-in devServicesConfig by @wjglerum in quarkiverse/quarkus-wiremock#260

Full Changelog: quarkiverse/quarkus-wiremock@1.6.1...1.6.2

Commits

31aef43 [maven-release-plugin] prepare release 1.6.3
bc779b0 Update the latest release version 1.6.3 in documentation
e53916c Merge pull request #261 from quarkiverse/release-1.6.3
d88e782 Release 1.6.3
be269df Merge pull request #260 from wjglerum/devui-use-devservices-config
133927b Simplify mapping url
b3721e8 refactor: drop custom JsonRPC service, use built-in devServicesConfig
fd6b4f9 Merge pull request #259 from quarkiverse/dependabot/maven/quarkus.version-3.3...
b6f6d7d chore(deps): bump quarkus.version from 3.33.1 to 3.33.1.1
1dd82c1 Merge pull request #256 from quarkiverse/dependabot/maven/quarkus.version-3.33.1
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [io.quarkiverse.wiremock:quarkus-wiremock](https://github.com/quarkiverse/quarkus-wiremock) from 1.6.1 to 1.6.3. - [Release notes](https://github.com/quarkiverse/quarkus-wiremock/releases) - [Commits](quarkiverse/quarkus-wiremock@1.6.1...1.6.3) --- updated-dependencies: - dependency-name: io.quarkiverse.wiremock:quarkus-wiremock dependency-version: 1.6.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-05-16T22:26:53Z

Mend Scan Results

Status: ⚠️ Findings detected

⚠️ SCA findings detected

SCA scan output

/github.com/netty/netty.git - netty-4.1.133.Final, |
|          |                                       |                | io.netty:netty-codec-http:4.2.13.Final                                                             |
+----------+---------------------------------------+----------------+----------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-codec-http-4.1.132.Final.jar    | CVE-2026-42585 | Upgrade to version io.netty:netty-codec-http:4.2.13.Final,io.netty:netty-codec-http:4.1.133.Final  |
+----------+---------------------------------------+----------------+----------------------------------------------------------------------------------------------------+
| MEDIUM   | netty-handler-proxy-4.1.132.Final.jar | CVE-2026-42578 | Upgrade to version  https://github.com/netty/netty.git - netty-4.2.13.Final,                       |
|          |                                       |                | https://github.com/netty/netty.git - netty-4.1.133.Final                                           |
+----------+---------------------------------------+----------------+----------------------------------------------------------------------------------------------------+
| MEDIUM   | opentelemetry-api-1.60.1.jar          | CVE-2026-45292 | io.opentelemetry:opentelemetry-api:1.62.0                                                          |
+----------+---------------------------------------+----------------+----------------------------------------------------------------------------------------------------+
| MEDIUM   | reload4j-1.2.19.jar                   | WS-2022-0467   | Upgrade to version ch.qos.reload4j:reload4j:1.2.22,fiji - 20231211,mases.knetcli - 2.0.0,          |
|          |                                       |                | mases.knetconnect - 2.0.0,mases.knet - 2.0.0,interproscan - no_fix                                 |
+----------+---------------------------------------+----------------+----------------------------------------------------------------------------------------------------+


Paths at risk

P = policy violation
MSC = malicious vulnerability
CRITICAL/HIGH/MEDIUM/LOW = vulnerability severity

quarkus-micrometer-3.35.2.jar
|-- micrometer-registry-prometheus-simpleclient-1.16.5.jar
	|-- simpleclient_common-0.16.0.jar
		|-- simpleclient-0.16.0.jar
			|-- simpleclient_tracer_otel-0.16.0.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- simpleclient_tracer_otel_agent-0.16.0.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
quarkus-oidc-3.35.2.jar
|-- quarkus-vertx-3.35.2.jar
	|-- netty-codec-haproxy-4.1.132.Final.jar
		|-- netty-codec-4.1.132.Final.jar [1 HIGH]
	|-- quarkus-netty-3.35.2.jar
		|-- netty-codec-http2-4.1.132.Final.jar [1 HIGH]
		|-- netty-codec-http-4.1.132.Final.jar [2 HIGH, 4 MEDIUM]
		|-- netty-codec-4.1.132.Final.jar [1 HIGH]
quarkus-scheduler-3.35.2.jar
|-- quarkus-scheduler-kotlin-3.35.2.jar
	|-- quarkus-scheduler-common-3.35.2.jar
		|-- opentelemetry-instrumentation-api-2.26.1.jar
			|-- opentelemetry-api-incubator-1.60.1-alpha.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
quarkus-smallrye-fault-tolerance-3.35.2.jar
|-- smallrye-fault-tolerance-mutiny-6.11.1.jar
	|-- smallrye-fault-tolerance-core-6.11.1.jar
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
|-- smallrye-fault-tolerance-6.11.1.jar
	|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
quarkus-logging-kafka-3.0.4.jar
|-- kafka-log4j-appender-3.9.2.jar
	|-- slf4j-reload4j-1.7.36.jar
		|-- reload4j-1.2.19.jar [1 MEDIUM]
pnc-common-3.5.0-jakarta.jar
|-- opentelemetry-ext-cli-java-2.0.0.jar
	|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- opentelemetry-exporter-otlp-1.60.1.jar
		|-- opentelemetry-exporter-sender-okhttp-1.60.1.jar
			|-- opentelemetry-exporter-common-1.60.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-sdk-logs-1.60.1.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-sdk-metrics-1.60.1.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- opentelemetry-sdk-1.60.1.jar
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-sdk-common-1.60.1.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-sdk-trace-1.60.1.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- opentelemetry-semconv-1.29.0-alpha.jar
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
|-- jsoup-1.22.2.jar
	|-- netty-codec-http-4.1.132.Final.jar [2 HIGH, 4 MEDIUM]
		|-- netty-codec-4.1.132.Final.jar [1 HIGH]
	|-- netty-handler-4.1.132.Final.jar
		|-- netty-codec-4.1.132.Final.jar [1 HIGH]
rest-client-jakarta-3.4.5.jar
|-- common-3.4.5-jakarta.jar
	|-- opentelemetry-instrumentation-annotations-2.26.1.jar
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
rest-client-3.4.5-jakarta.jar
|-- vertx-core-4.5.26.jar
	|-- netty-codec-http2-4.1.132.Final.jar [1 HIGH]
		|-- netty-codec-http-4.1.132.Final.jar [2 HIGH, 4 MEDIUM]
		|-- netty-codec-4.1.132.Final.jar [1 HIGH]
	|-- netty-codec-http-4.1.132.Final.jar [2 HIGH, 4 MEDIUM]
	|-- netty-handler-proxy-4.1.132.Final.jar [1 MEDIUM]
		|-- netty-codec-http-4.1.132.Final.jar [2 HIGH, 4 MEDIUM]
		|-- netty-codec-socks-4.1.132.Final.jar
			|-- netty-codec-4.1.132.Final.jar [1 HIGH]
		|-- netty-codec-4.1.132.Final.jar [1 HIGH]
	|-- netty-resolver-dns-4.1.132.Final.jar
		|-- netty-codec-dns-4.1.132.Final.jar [1 HIGH]
			|-- netty-codec-4.1.132.Final.jar [1 HIGH]
		|-- netty-codec-4.1.132.Final.jar [1 HIGH]


No Policy violations were detected

Project 'causeway' was updated, for more information, visit the Mend platform: https://ibmets.whitesourcesoftware.com/app/orgs/Enterprise%20Applications/applications/summary?project=d5e99a5a-e396-44cb-9d0f-cc14b315af2a
Or the Core UI: https://ibmets.whitesourcesoftware.com/Wss/WSS.html#!project;token=d940c18893904b398e45a8ef2f9d6c2f194752a83389440b9aeaf7a2fa06fc63

Mend AI scan succeeded.

Support Token: 205654354bcda4db2bef7919b8c579e201778970363748

SAST scan output

*no findings*

Full logs and artifacts

dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels May 16, 2026

thescouser89 merged commit f0bc139 into master May 19, 2026
2 checks passed

dependabot Bot deleted the dependabot/maven/io.quarkiverse.wiremock-quarkus-wiremock-1.6.3 branch May 19, 2026 14:52

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump io.quarkiverse.wiremock:quarkus-wiremock from 1.6.1 to 1.6.3#514

Bump io.quarkiverse.wiremock:quarkus-wiremock from 1.6.1 to 1.6.3#514
thescouser89 merged 1 commit into
masterfrom
dependabot/maven/io.quarkiverse.wiremock-quarkus-wiremock-1.6.3

dependabot Bot commented on behalf of github May 16, 2026

Uh oh!

github-actions Bot commented May 16, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github May 16, 2026

1.6.3

What's Changed

1.6.2

What's Changed

Uh oh!

github-actions Bot commented May 16, 2026

Mend Scan Results

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant