Skip to content

Bump project-ncl/shared-github-actions/.github/workflows/maven-snapshot.yml from 0.0.24 to 0.0.27 - #101

Merged
rnc merged 1 commit into
masterfrom
dependabot/github_actions/project-ncl/shared-github-actions/dot-github/workflows/maven-snapshot.yml-0.0.27
Nov 11, 2026
Merged

rnc merged 1 commit into
masterfrom
dependabot/github_actions/project-ncl/shared-github-actions/dot-github/workflows/maven-snapshot.yml-0.0.27

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 11, 2026

Copy link
Copy Markdown
Contributor

Bumps project-ncl/shared-github-actions/.github/workflows/maven-snapshot.yml from 0.0.24 to 0.0.27.

Release notes

Sourced from project-ncl/shared-github-actions/.github/workflows/maven-snapshot.yml's releases.

v0.0.27

What's Changed

🐛 Fixes / 🚀 Enhancements

👒 CI Dependencies

Full Changelog: project-ncl/shared-github-actions@v0.0.26...v0.0.27

v0.0.26

Note that this release is only compatible with jboss-parent 54 and up. Use 0.0.24 or earlier for jboss-parent <=53.

What's Changed

🐛 Fixes / 🚀 Enhancements

👒 CI Dependencies

Full Changelog: project-ncl/shared-github-actions@v0.0.25...v0.0.26

v0.0.25

What's Changed

Note that this release is only compatible with jboss-parent 54 and up. Use prior releases for jboss-parent <=53.

... (truncated)

Commits
  • e7102dd Revert "Provide empty default for QUARKUS_CONTAINER_IMAGE_USERNAME/PASSWORD"
  • 1ccc374 Always update Maven snapshots
  • 9ad1098 Bump project-ncl/shared-github-actions/.github/actions/gradle-build
  • 25f1d1f Bump project-ncl/shared-github-actions/.github/actions/maven-build
  • 07cdf7c Bump project-ncl/shared-github-actions/.github/actions/npm-build
  • 2d1f7ae Bump project-ncl/shared-github-actions/.github/actions/mend
  • b4d04ea Bump project-ncl/shared-github-actions/.github/actions/sbt-build
  • 1eb33d9 Merge pull request #157 from thescouser89/provide-dummy-values-for-quay-usern...
  • 208ea6c Provide empty default for QUARKUS_CONTAINER_IMAGE_USERNAME/PASSWORD
  • 30dd8ce Use non-deprecated setup-java credential inputs
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

…ot.yml

Bumps [project-ncl/shared-github-actions/.github/workflows/maven-snapshot.yml](https://github.com/project-ncl/shared-github-actions) from 0.0.24 to 0.0.27.
- [Release notes](https://github.com/project-ncl/shared-github-actions/releases)
- [Commits](project-ncl/shared-github-actions@f0ec169...e7102dd)

---
updated-dependencies:
- dependency-name: project-ncl/shared-github-actions/.github/workflows/maven-snapshot.yml
  dependency-version: 0.0.27
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Nov 11, 2026
@github-actions

Copy link
Copy Markdown
Contributor

Mend Scan Results

Status: ⚠️ Findings detected

⚠️ SCA findings detected

SCA scan output



Identified 11 dependencies

Detected 3 vulnerabilities (0 Critical, 1 High, 1 Medium, 1 Low)

+----------+--------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| SEVERITY |         LIBRARY          |       ID        |                                               TOP FIX                                                |
+----------+--------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | commons-codec-1.22.1.jar | CVE-2026-119078 | Upgrade to version commons-codec:commons-codec:1.23.0, https://github.com/apache/commons-codec.git - |
|          |                          |                 | rel/commons-codec-1.23.0                                                                             |
+----------+--------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| MEDIUM   | bcprov-jdk18on-1.86.jar  | CVE-2026-97873  | N/A                                                                                                  |
+----------+--------------------------+-----------------+------------------------------------------------------------------------------------------------------+
| LOW      | commons-codec-1.22.1.jar | CVE-2026-124077 | Upgrade to version  https://github.com/apache/commons-codec.git - rel/commons-codec-1.23.0,          |
|          |                          |                 | commons-codec:commons-codec:1.23.0                                                                   |
+----------+--------------------------+-----------------+------------------------------------------------------------------------------------------------------+


Paths at risk

P = policy violation
MSC = malicious vulnerability
CRITICAL/HIGH/MEDIUM/LOW = vulnerability severity

commons-codec-1.22.1.jar [1 HIGH, 1 LOW]
commons-io-2.22.0.jar
|-- commons-codec-1.22.1.jar [1 HIGH, 1 LOW]
httpclient-4.5.14.jar
|-- commons-codec-1.22.1.jar [1 HIGH, 1 LOW]
bcpkix-jdk18on-1.86.jar
|-- bcutil-jdk18on-1.86.jar
	|-- bcprov-jdk18on-1.86.jar [1 MEDIUM]
bcprov-jdk18on-1.86.jar [1 MEDIUM]


No Policy violations were detected

Project 'jhttpc-pr' was updated, for more information, visit the Mend platform: https://ibmets.whitesourcesoftware.com/app/orgs/Enterprise%20Applications/applications/summary?project=d52001d0-1bad-4891-96a1-51a83117d950
Or the Core UI: https://ibmets.whitesourcesoftware.com/Wss/WSS.html#!project;token=56d9aa7110e444d8a23fc87ecd4f21d0107f4804a0c542af84382357880a504e

Mend AI scan succeeded.

Support Token: 3577e600f8c7a4dc5b74117317ee456ee1794408479361
SAST scan output
*no findings*

Full logs and artifacts

@rnc
rnc merged commit 5d4b527 into master Nov 11, 2026
5 checks passed
@rnc
rnc deleted the dependabot/github_actions/project-ncl/shared-github-actions/dot-github/workflows/maven-snapshot.yml-0.0.27 branch November 11, 2026 15:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant