Bump org.jboss.pnc.npm-manipulator:npm-manipulator-npm from 1.3.2 to 1.3.4 by dependabot[bot] · Pull Request #326 · project-ncl/reqour

dependabot · 2026-05-13T00:47:31Z

Bumps org.jboss.pnc.npm-manipulator:npm-manipulator-npm from 1.3.2 to 1.3.4.

Release notes

Sourced from org.jboss.pnc.npm-manipulator:npm-manipulator-npm's releases.

1.3.4

What's Changed

🐛 Fixes / 🚀 Enhancements

[NCL-9656,NCL-9657,NCL-9661] Add release,exclude,and validate ghaction by @thescouser89 in project-ncl/npm-manipulator#141

NCL-9664 Move to using jboss-parent by @rnc in project-ncl/npm-manipulator#140

NCL-9648 Add Mend CLI scan workflows by @patrikk0123 in project-ncl/npm-manipulator#142

NCL-9663 Port to PNC opentelemetry-ext-cli-java by @rnc in project-ncl/npm-manipulator#150

Update workflows by @rnc in project-ncl/npm-manipulator#151

Corrections for release by @rnc in project-ncl/npm-manipulator#152

👒 Project Dependencies

Bump project-ncl/shared-github-actions/.github/workflows/maven-set-version.yml from 0.0.15 to 0.0.16 by @dependabot[bot] in project-ncl/npm-manipulator#145

Bump project-ncl/shared-github-actions/.github/workflows/validate-gh-action.yml from 0.0.15 to 0.0.16 by @dependabot[bot] in project-ncl/npm-manipulator#146

Bump project-ncl/shared-github-actions/.github/workflows/maven-snapshot.yml from 0.0.15 to 0.0.16 by @dependabot[bot] in project-ncl/npm-manipulator#147

Bump project-ncl/shared-github-actions/.github/workflows/maven-release.yml from 0.0.15 to 0.0.16 by @dependabot[bot] in project-ncl/npm-manipulator#148

Bump project-ncl/shared-github-actions/.github/workflows/maven-ci.yml from 0.0.15 to 0.0.16 by @dependabot[bot] in project-ncl/npm-manipulator#149

Bump commons-io:commons-io from 2.21.0 to 2.22.0 by @dependabot[bot] in project-ncl/npm-manipulator#143

Bump commons-codec:commons-codec from 1.21.0 to 1.22.0 by @dependabot[bot] in project-ncl/npm-manipulator#144

New Contributors

@patrikk0123 made their first contribution in project-ncl/npm-manipulator#142

Full Changelog: project-ncl/npm-manipulator@1.3.3...1.3.4

Commits

c8318c8 [maven-release-plugin] prepare release 1.3.4
35c3209 Merge pull request #152 from rnc/BR1
223c690 Corrections for release
2e4b17d Merge pull request #151 from rnc/BR1
4ea6546 Update workflows
896d46c Merge pull request #150 from rnc/NCL9663
862c31e NCL-9648 Add Mend CLI scan workflows
af38085 Merge pull request #144 from project-ncl/dependabot/maven/commons-codec-commo...
774de8c Merge pull request #143 from project-ncl/dependabot/maven/commons-io-commons-...
69081eb Merge pull request #149 from project-ncl/dependabot/github_actions/project-nc...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.jboss.pnc.npm-manipulator:npm-manipulator-npm](https://github.com/project-ncl/npm-manipulator) from 1.3.2 to 1.3.4. - [Release notes](https://github.com/project-ncl/npm-manipulator/releases) - [Commits](project-ncl/npm-manipulator@1.3.2...1.3.4) --- updated-dependencies: - dependency-name: org.jboss.pnc.npm-manipulator:npm-manipulator-npm dependency-version: 1.3.4 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-05-13T01:01:35Z

Mend Scan Results

Status: ⚠️ Findings detected

⚠️ SCA findings detected

SCA scan output

- pom-manipulation-io-5.1.jar
		|-- maven-release-api-3.3.0.jar
			|-- plexus-utils-3.6.1.jar [1 HIGH]
		|-- maven-release-manager-3.3.0.jar
			|-- plexus-utils-3.6.1.jar [1 HIGH]
		|-- maven-settings-builder-3.9.12.jar
			|-- plexus-sec-dispatcher-2.0.jar
				|-- plexus-utils-3.6.1.jar [1 HIGH]
			|-- plexus-utils-3.6.1.jar [1 HIGH]
		|-- plexus-utils-3.6.1.jar [1 HIGH]
|-- reqour-core-3.5.1-SNAPSHOT.jar
	|-- netty-codec-http-4.1.132.Final.jar [2 HIGH, 4 MEDIUM]
		|-- netty-codec-4.1.132.Final.jar [1 HIGH]
		|-- netty-handler-4.1.132.Final.jar
			|-- netty-codec-4.1.132.Final.jar [1 HIGH]
	|-- quarkus-hibernate-validator-3.34.6.jar
		|-- quarkus-vertx-http-3.34.6.jar [1 HIGH]
	|-- quarkus-rest-jackson-3.34.6.jar
		|-- quarkus-rest-3.34.6.jar
			|-- quarkus-vertx-http-3.34.6.jar [1 HIGH]
	|-- quarkus-logging-kafka-3.0.4.jar
		|-- kafka-log4j-appender-3.9.2.jar
			|-- slf4j-reload4j-1.7.36.jar
				|-- reload4j-1.2.19.jar [1 MEDIUM]
	|-- bifrost-upload-client-3.3.0.jar
		|-- httpclient5-5.6.jar [1 HIGH]
	|-- pnc-common-3.5.0-jakarta.jar
		|-- jsoup-1.22.2.jar
			|-- netty-codec-http-4.1.132.Final.jar [2 HIGH, 4 MEDIUM]
reqour-core-3.5.1-SNAPSHOT.jar
|-- netty-codec-http-4.1.132.Final.jar [2 HIGH, 4 MEDIUM]
	|-- netty-codec-4.1.132.Final.jar [1 HIGH]
	|-- netty-handler-4.1.132.Final.jar
		|-- netty-codec-4.1.132.Final.jar [1 HIGH]
|-- quarkus-logging-json-3.5.0.jar
	|-- quarkus-jackson-3.34.6.jar
		|-- vertx-core-4.5.26.jar
			|-- netty-codec-http2-4.1.132.Final.jar [1 HIGH]
				|-- netty-codec-http-4.1.132.Final.jar [2 HIGH, 4 MEDIUM]
				|-- netty-codec-4.1.132.Final.jar [1 HIGH]
			|-- netty-codec-http-4.1.132.Final.jar [2 HIGH, 4 MEDIUM]
			|-- netty-handler-proxy-4.1.132.Final.jar [1 HIGH]
				|-- netty-codec-http-4.1.132.Final.jar [2 HIGH, 4 MEDIUM]
				|-- netty-codec-socks-4.1.132.Final.jar
					|-- netty-codec-4.1.132.Final.jar [1 HIGH]
				|-- netty-codec-4.1.132.Final.jar [1 HIGH]
			|-- netty-resolver-dns-4.1.132.Final.jar
				|-- netty-codec-dns-4.1.132.Final.jar [1 HIGH]
					|-- netty-codec-4.1.132.Final.jar [1 HIGH]
				|-- netty-codec-4.1.132.Final.jar [1 HIGH]
|-- quarkus-hibernate-validator-3.34.6.jar
	|-- quarkus-vertx-http-3.34.6.jar [1 HIGH]
|-- quarkus-oidc-client-3.34.6.jar
	|-- quarkus-vertx-3.34.6.jar
		|-- netty-codec-haproxy-4.1.132.Final.jar
			|-- netty-codec-4.1.132.Final.jar [1 HIGH]
		|-- quarkus-netty-3.34.6.jar
			|-- netty-codec-http2-4.1.132.Final.jar [1 HIGH]
			|-- netty-codec-http-4.1.132.Final.jar [2 HIGH, 4 MEDIUM]
			|-- netty-codec-4.1.132.Final.jar [1 HIGH]
|-- quarkus-rest-jackson-3.34.6.jar
	|-- quarkus-rest-3.34.6.jar
		|-- quarkus-vertx-http-3.34.6.jar [1 HIGH]
|-- quarkus-logging-kafka-3.0.4.jar
	|-- kafka-log4j-appender-3.9.2.jar
		|-- slf4j-reload4j-1.7.36.jar
			|-- reload4j-1.2.19.jar [1 MEDIUM]
|-- bifrost-upload-client-3.3.0.jar
	|-- httpclient5-5.6.jar [1 HIGH]
|-- pnc-common-3.5.0-jakarta.jar
	|-- jsoup-1.22.2.jar
		|-- netty-codec-http-4.1.132.Final.jar [2 HIGH, 4 MEDIUM]
reqour-rest-3.5.1-SNAPSHOT.jar
|-- quarkus-elytron-security-ldap-3.34.6.jar
	|-- quarkus-elytron-security-3.34.6.jar
		|-- quarkus-vertx-http-3.34.6.jar [1 HIGH]
|-- quarkus-oidc-3.34.6.jar
	|-- quarkus-vertx-http-3.34.6.jar [1 HIGH]
	|-- quarkus-vertx-3.34.6.jar
		|-- netty-codec-haproxy-4.1.132.Final.jar
			|-- netty-codec-4.1.132.Final.jar [1 HIGH]
		|-- quarkus-netty-3.34.6.jar
			|-- netty-codec-http2-4.1.132.Final.jar [1 HIGH]
			|-- netty-codec-http-4.1.132.Final.jar [2 HIGH, 4 MEDIUM]
			|-- netty-codec-4.1.132.Final.jar [1 HIGH]
|-- quarkus-opentelemetry-3.34.6.jar
	|-- quarkus-grpc-common-3.34.6.jar
		|-- vertx-grpc-4.5.26.jar
			|-- grpc-netty-1.79.0.jar
				|-- netty-codec-http2-4.1.132.Final.jar [1 HIGH]
				|-- netty-handler-proxy-4.1.132.Final.jar [1 HIGH]
	|-- smallrye-common-vertx-context-2.17.0.jar
		|-- vertx-core-4.5.26.jar
			|-- netty-codec-http2-4.1.132.Final.jar [1 HIGH]
				|-- netty-codec-http-4.1.132.Final.jar [2 HIGH, 4 MEDIUM]
				|-- netty-codec-4.1.132.Final.jar [1 HIGH]
			|-- netty-codec-http-4.1.132.Final.jar [2 HIGH, 4 MEDIUM]
			|-- netty-handler-proxy-4.1.132.Final.jar [1 HIGH]
				|-- netty-codec-http-4.1.132.Final.jar [2 HIGH, 4 MEDIUM]
				|-- netty-codec-socks-4.1.132.Final.jar
					|-- netty-codec-4.1.132.Final.jar [1 HIGH]
				|-- netty-codec-4.1.132.Final.jar [1 HIGH]
			|-- netty-resolver-dns-4.1.132.Final.jar
				|-- netty-codec-dns-4.1.132.Final.jar [1 HIGH]
					|-- netty-codec-4.1.132.Final.jar [1 HIGH]
				|-- netty-codec-4.1.132.Final.jar [1 HIGH]
|-- quarkus-rest-jackson-3.34.6.jar
	|-- quarkus-rest-3.34.6.jar
		|-- quarkus-vertx-http-3.34.6.jar [1 HIGH]
|-- quarkus-smallrye-health-3.34.6.jar
	|-- quarkus-vertx-http-3.34.6.jar [1 HIGH]
|-- quarkus-smallrye-openapi-3.34.6.jar
	|-- quarkus-swagger-ui-3.34.6.jar
		|-- quarkus-vertx-http-3.34.6.jar [1 HIGH]
	|-- quarkus-vertx-http-3.34.6.jar [1 HIGH]
|-- reqour-core-3.5.1-SNAPSHOT.jar
	|-- netty-codec-http-4.1.132.Final.jar [2 HIGH, 4 MEDIUM]
		|-- netty-codec-4.1.132.Final.jar [1 HIGH]
		|-- netty-handler-4.1.132.Final.jar
			|-- netty-codec-4.1.132.Final.jar [1 HIGH]
	|-- quarkus-hibernate-validator-3.34.6.jar
		|-- quarkus-vertx-http-3.34.6.jar [1 HIGH]
	|-- quarkus-logging-kafka-3.0.4.jar
		|-- kafka-log4j-appender-3.9.2.jar
			|-- slf4j-reload4j-1.7.36.jar
				|-- reload4j-1.2.19.jar [1 MEDIUM]
	|-- bifrost-upload-client-3.3.0.jar
		|-- httpclient5-5.6.jar [1 HIGH]
	|-- pnc-common-3.5.0-jakarta.jar
		|-- jsoup-1.22.2.jar
			|-- netty-codec-http-4.1.132.Final.jar [2 HIGH, 4 MEDIUM]


No Policy violations were detected

Project 'reqour' was updated, for more information, visit the Mend platform: https://ibmets.whitesourcesoftware.com/app/orgs/Enterprise%20Applications/applications/summary?project=f431aad9-9460-46b3-b3eb-677bf83ee360
Or the Core UI: https://ibmets.whitesourcesoftware.com/Wss/WSS.html#!project;token=422537de190243159a22de2ea487cb28df2e499972f34f1481f455b690290cb7

Mend AI scan succeeded.

Support Token: 2d1d3008eac5d406886d03136ba3752c31778634038516

SAST scan output

*no findings*

Full logs and artifacts

dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels May 13, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump org.jboss.pnc.npm-manipulator:npm-manipulator-npm from 1.3.2 to 1.3.4#326

Bump org.jboss.pnc.npm-manipulator:npm-manipulator-npm from 1.3.2 to 1.3.4#326
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/org.jboss.pnc.npm-manipulator-npm-manipulator-npm-1.3.4

dependabot Bot commented on behalf of github May 13, 2026

Uh oh!

github-actions Bot commented May 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github May 13, 2026

1.3.4

What's Changed

🐛 Fixes / 🚀 Enhancements

👒 Project Dependencies

New Contributors

Uh oh!

github-actions Bot commented May 13, 2026

Mend Scan Results

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants