Dependency Dashboard

[nanjingfm]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

See Config Migration PR: #21.

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• fix(deps): update dependency org.apache.mina:mina-core to v2.2.4 [security]
• fix(deps): update dependency org.apache.tomcat.embed:tomcat-embed-core to v10.1.42 [security]
• fix(deps): update dependency org.eclipse.jgit:org.eclipse.jgit to v7.0.1.202505221510-r [security]
• fix(deps): update dependency org.postgresql:postgresql to v42.7.7 [security]
• fix(deps): update dependency org.springframework:spring-context to v6.2.7 [security]
• fix(deps): update dependency commons-beanutils:commons-beanutils to v1.11.0 [security]
• Click on this checkbox to rebase all open PRs at once

Vulnerabilities

12/12 CVEs have Renovate fixes.

gradle

source/build.gradle

commons-beanutils:commons-beanutils

• GHSA-wxr5-93ph-8wr9 (fixed in [1.11.0,))

org.apache.mina:mina-core

• GHSA-76h9-2vwh-w278 (fixed in [2.2.4,))

org.apache.tomcat.embed:tomcat-embed-core

• GHSA-3p2h-wqq4-wf4h (fixed in [10.1.40,))
• GHSA-h2fw-rfh5-95r3 (fixed in [10.1.41,))
• GHSA-wc4r-xq3c-5cf3 (fixed in [10.1.42,))
• GHSA-h3gc-qfqq-6h8f (fixed in [10.1.42,))
• GHSA-ff77-26x5-69cr (fixed in [10.1.40,))
• GHSA-83qj-6fr2-vhqg (fixed in [10.1.35,))

org.eclipse.jgit:org.eclipse.jgit

• GHSA-vrpq-qp53-qv56 (fixed in [7.0.1.202505221510-r,))

org.postgresql:postgresql

• GHSA-hq9p-pm7w-8p54 (fixed in [42.7.7,))

org.springframework:spring-context

• GHSA-4wp7-92pw-q264 (fixed in [6.2.7,))

org.apache.velocity:velocity

• GHSA-59j4-wjwp-mw9m (fixed in (1.7,))

Detected dependencies

dockerfile

image/community-build/Dockerfile

image/plugin/Dockerfile

source/.cirrus/Dockerfile

gradle

source/gradle.properties

source/settings.gradle

source/build.gradle

• commons-beanutils:commons-beanutils 1.9.4
• org.apache.mina:mina-core 2.2.3
• org.apache.tomcat.embed:tomcat-embed-core 10.1.34
• org.eclipse.jgit:org.eclipse.jgit 7.0.0.202409031743-r
• org.postgresql:postgresql 42.7.4
• org.springframework:spring-context 6.2.1
• org.apache.velocity:velocity 1.7

source/plugins/build.gradle

source/plugins/sonar-education-plugin/build.gradle

source/plugins/sonar-xoo-plugin/build.gradle

source/server/build.gradle

source/server/sonar-alm-client/build.gradle

source/server/sonar-auth-bitbucket/build.gradle

source/server/sonar-auth-common/build.gradle

source/server/sonar-auth-github/build.gradle

source/server/sonar-auth-gitlab/build.gradle

source/server/sonar-auth-ldap/build.gradle

source/server/sonar-auth-saml/build.gradle

source/server/sonar-ce/build.gradle

source/server/sonar-ce-common/build.gradle

source/server/sonar-ce-task/build.gradle

source/server/sonar-ce-task-projectanalysis/build.gradle

source/server/sonar-db-core/build.gradle

source/server/sonar-db-dao/build.gradle

source/server/sonar-db-migration/build.gradle

source/server/sonar-main/build.gradle

source/server/sonar-process/build.gradle

source/server/sonar-server-common/build.gradle

source/server/sonar-telemetry/build.gradle

source/server/sonar-telemetry-core/build.gradle

source/server/sonar-webserver/build.gradle

source/server/sonar-webserver-api/build.gradle

source/server/sonar-webserver-auth/build.gradle

source/server/sonar-webserver-common/build.gradle

source/server/sonar-webserver-core/build.gradle

source/server/sonar-webserver-es/build.gradle

source/server/sonar-webserver-monitoring/build.gradle

source/server/sonar-webserver-pushapi/build.gradle

source/server/sonar-webserver-webapi/build.gradle

source/server/sonar-webserver-webapi-v2/build.gradle

source/server/sonar-webserver-ws/build.gradle

source/sonar-application/bundled_plugins.gradle

source/sonar-application/build.gradle

source/sonar-core/build.gradle

source/sonar-duplications/build.gradle

source/sonar-markdown/build.gradle

source/sonar-plugin-api-impl/build.gradle

source/sonar-sarif/build.gradle

source/sonar-scanner-engine/build.gradle

source/sonar-scanner-engine-shaded/build.gradle

source/sonar-scanner-protocol/build.gradle

source/sonar-shutdowner/build.gradle

source/sonar-testing-harness/build.gradle

source/sonar-testing-ldap/build.gradle

source/sonar-ws/build.gradle

source/sonar-ws-generator/build.gradle

gradle-wrapper

source/gradle/wrapper/gradle-wrapper.properties

jenkins

image/plugin/plugins.txt

maven

source/sonar-scanner-engine/test-resources/mediumtest/xoo/multi-modules-sample3/module_b/pom.xml