Bump org.jboss.pnc:pnc-api from 3.5.0 to 3.5.2 by dependabot[bot] · Pull Request #376 · project-ncl/reqour

dependabot · 2026-07-14T22:44:22Z

Bumps org.jboss.pnc:pnc-api from 3.5.0 to 3.5.2.

Release notes

Sourced from org.jboss.pnc:pnc-api's releases.

3.5.2

Full Changelog: project-ncl/pnc-api@3.5.1...3.5.2

3.5.1

What's Changed

🐛 Fixes / 🚀 Enhancements

NCL-9508 - Add taillines to bifrost by @polacektomas in project-ncl/pnc-api#308

bump version to 3.4.2-SNAPSHOT by @michalovjan in project-ncl/pnc-api#309

no shapshot pls by @michalovjan in project-ncl/pnc-api#310

[NCL-9535]: Slsa Provenance has invalid digest key (commit) by @vibe13 in project-ncl/pnc-api#311

bump version to 3.4.3-SNAPSHOT by @michalovjan in project-ncl/pnc-api#316

[NCLSUP-1366] Accept URL with slashes at the end by @akridl in project-ncl/pnc-api#317

bump version to new minor 3.5.0-SNAPSHOT by @michalovjan in project-ncl/pnc-api#318

[cyclic-dependency] move internal classes back to orch and remove cyclic dependency by @michalovjan in project-ncl/pnc-api#319

Reference dto by @michalovjan in project-ncl/pnc-api#320

[NCL-9428] add attachment types by @michalovjan in project-ncl/pnc-api#321

NCL-9545 - Remove Alignment 2 by @rnc in project-ncl/pnc-api#323

NCL-9421 - Change error message format by @polacektomas in project-ncl/pnc-api#325

[NCL-9532] add RPM RepositoryType and BuildType by @michalovjan in project-ncl/pnc-api#322

NCL-9564 Remove GA/GAV classes by @rnc in project-ncl/pnc-api#329

[NCL-9275] Add ExceptionResolution to ReqourCallback by @patrikk0123 in project-ncl/pnc-api#332

Zizmorify github actions by @thescouser89 in project-ncl/pnc-api#338

Add RPM Artifact by @polacektomas in project-ncl/pnc-api#339

Bump gh-action to v0.0.14 and fix typo by @thescouser89 in project-ncl/pnc-api#340

[NCL-9557] create Bifrost FinalLog /checksums endpoint by @michalovjan in project-ncl/pnc-api#341

add Builder and Jacksonized to Checksums by @michalovjan in project-ncl/pnc-api#343

Add keys to enhance the provenance attestations and map build environ… by @vibe13 in project-ncl/pnc-api#342

Update release workflow to main which fixes releases by @thescouser89 in project-ncl/pnc-api#349

Add potential values for a BC parameter key by @akridl in project-ncl/pnc-api#353

[NCL-9667] Remove AUTO as a possible build category by @akridl in project-ncl/pnc-api#350

[NCL-9656,NCL-9657,NCL-9661] Add release,exclude,and validate ghaction by @thescouser89 in project-ncl/pnc-api#351

[NCL-9668] Introduce build categories for IBM and Red Hat suffixing by @akridl in project-ncl/pnc-api#354

[NCL-9665] Fix description for BUILD_CATEGORY by @akridl in project-ncl/pnc-api#356

IBM instance changes only by @akridl in project-ncl/pnc-api#364

Use jboss-parent and revert to JDK8 API. Update gh-actions. by @rnc in project-ncl/pnc-api#363

Remove redundant plugin and property overrides by @rnc in project-ncl/pnc-api#365

Define name for child modules by @akridl in project-ncl/pnc-api#366

NCL-9648 Add Mend CLI scan workflows by @patrikk0123 in project-ncl/pnc-api#355

NCL-9661 Update release labels by @rnc in project-ncl/pnc-api#368

[NCL-9785] Add BuildCategory to RepositoryCreateRequest by @thescouser89 in project-ncl/pnc-api#375

[NCL-9782] Add Lightwell build category by @thescouser89 in project-ncl/pnc-api#376

[NCL-9447] Define tracking-service API by @pkocandr in project-ncl/pnc-api#331

[NCL-9782] Add LIGHTWELL_UPSTREAM build category by @thescouser89 in project-ncl/pnc-api#377

Rename package trackingservice to tracker by @pkocandr in project-ncl/pnc-api#378

... (truncated)

Commits

d42ed80 [maven-release-plugin] prepare release 3.5.2
4c1782c [NCL-9834] Add LIGHTWELL_NOVEL build category
b12920d [maven-release-plugin] prepare for next development iteration
a5e850d [maven-release-plugin] prepare release 3.5.1
f147078 Revert "Creating a commit for snapshot job to run"
f52bc31 Build snapshot version for v3.5.x branch also
ff3a5d9 Creating a commit for snapshot job to run
a01c310 Bump version to 3.5.1-SNAPSHOT
92606ef Rename package trackingservice to tracker
0e269c3 [NCL-9782] Add LIGHTWELL_UPSTREAM build category
Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [org.jboss.pnc:pnc-api](https://github.com/project-ncl/pnc-api) from 3.5.0 to 3.5.2. - [Release notes](https://github.com/project-ncl/pnc-api/releases) - [Commits](project-ncl/pnc-api@3.5.0...3.5.2) --- updated-dependencies: - dependency-name: org.jboss.pnc:pnc-api dependency-version: 3.5.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-07-14T23:01:17Z

Mend Scan Results

Status: ⚠️ Findings detected

⚠️ SCA findings detected

SCA scan output

[1 MEDIUM]
		|-- opentelemetry-exporter-otlp-1.60.1.jar
			|-- opentelemetry-sdk-trace-1.60.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-sdk-1.60.1.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-sdk-common-1.60.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-sdk-logs-1.60.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-sdk-metrics-1.60.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- quarkus-grpc-common-3.36.3.jar
			|-- vertx-grpc-server-4.5.28.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-grpc-4.5.28.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
		|-- vertx-grpc-client-4.5.28.jar
			|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-grpc-common-4.5.28.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
|-- quarkus-oidc-3.36.3.jar
	|-- quarkus-oidc-common-3.36.3.jar
		|-- quarkus-tls-registry-3.36.3.jar
			|-- smallrye-private-key-pem-parser-0.9.3.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
		|-- smallrye-mutiny-vertx-web-client-3.22.2.jar
			|-- jackson-databind-2.21.4.jar [1 MEDIUM]
			|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-web-client-4.5.28.jar [1 HIGH]
	|-- quarkus-vertx-3.36.3.jar
		|-- jackson-databind-2.21.4.jar [1 MEDIUM]
		|-- quarkus-virtual-threads-3.36.3.jar
			|-- vertx-core-4.5.28.jar [1 HIGH]
		|-- smallrye-common-vertx-context-2.17.0.jar
			|-- vertx-core-4.5.28.jar [1 HIGH]
		|-- smallrye-mutiny-vertx-core-3.22.2.jar
			|-- jackson-databind-2.21.4.jar [1 MEDIUM]
			|-- smallrye-mutiny-vertx-runtime-3.22.2.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-core-4.5.28.jar [1 HIGH]
		|-- smallrye-fault-tolerance-vertx-6.11.1.jar
			|-- smallrye-fault-tolerance-core-6.11.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- vertx-core-4.5.28.jar [1 HIGH]
|-- quarkus-openshift-client-3.36.3.jar
	|-- openshift-client-7.7.0.jar
		|-- kubernetes-client-api-7.7.0.jar
			|-- jackson-databind-2.21.4.jar [1 MEDIUM]
			|-- kubernetes-model-core-7.7.0.jar
				|-- kubernetes-model-common-7.7.0.jar
					|-- jackson-databind-2.21.4.jar [1 MEDIUM]
	|-- quarkus-kubernetes-client-3.36.3.jar
		|-- kubernetes-client-7.7.0.jar
			|-- zjsonpatch-7.7.0.jar
				|-- jackson-databind-2.21.4.jar [1 MEDIUM]
		|-- kubernetes-httpclient-vertx-7.7.0.jar
			|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-web-client-4.5.28.jar [1 HIGH]
				|-- jackson-databind-2.21.4.jar [1 MEDIUM]
				|-- vertx-core-4.5.28.jar [1 HIGH]
				|-- vertx-uri-template-4.5.28.jar
					|-- vertx-core-4.5.28.jar [1 HIGH]
		|-- quarkus-jackson-3.36.3.jar
			|-- jackson-databind-2.21.4.jar [1 MEDIUM]
			|-- vertx-core-4.5.28.jar [1 HIGH]
				|-- jackson-databind-2.21.4.jar [1 MEDIUM]
|-- quarkus-rest-jackson-3.36.3.jar
	|-- quarkus-rest-3.36.3.jar
		|-- jackson-databind-2.21.4.jar [1 MEDIUM]
		|-- resteasy-reactive-vertx-3.36.3.jar
			|-- vertx-web-client-4.5.28.jar [1 HIGH]
|-- quarkus-smallrye-health-3.36.3.jar
	|-- quarkus-vertx-http-3.36.3.jar
		|-- jackson-databind-2.21.4.jar [1 MEDIUM]
		|-- vertx-web-4.5.28.jar
			|-- jackson-databind-2.21.4.jar [1 MEDIUM]
			|-- vertx-auth-common-4.5.28.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-bridge-common-4.5.28.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-core-4.5.28.jar [1 HIGH]
			|-- vertx-web-common-4.5.28.jar
				|-- vertx-core-4.5.28.jar [1 HIGH]
|-- quarkus-smallrye-openapi-3.36.3.jar
	|-- smallrye-open-api-core-4.3.3.jar
		|-- jackson-databind-2.21.4.jar [1 MEDIUM]
		|-- jackson-dataformat-yaml-2.21.4.jar
			|-- jackson-databind-2.21.4.jar [1 MEDIUM]
|-- reqour-core-3.5.6-SNAPSHOT.jar
	|-- quarkus-rest-client-jackson-3.36.3.jar
		|-- resteasy-reactive-jackson-3.36.3.jar
			|-- jackson-databind-2.21.4.jar [1 MEDIUM]
	|-- quarkus-smallrye-fault-tolerance-3.36.3.jar
		|-- smallrye-fault-tolerance-6.11.1.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- gitlab4j-api-6.3.0.jar
		|-- gitlab4j-models-6.3.0.jar
			|-- jackson-databind-2.21.4.jar [1 MEDIUM]
		|-- jersey-media-json-jackson-3.1.10.jar
			|-- jackson-databind-2.21.4.jar [1 MEDIUM]
			|-- jackson-module-jakarta-xmlbind-annotations-2.21.4.jar
				|-- jackson-databind-2.21.4.jar [1 MEDIUM]
	|-- quarkus-logging-kafka-deployment-3.0.5.jar
		|-- quarkus-arc-deployment-3.36.3.jar
			|-- quarkus-core-deployment-3.36.3.jar
				|-- readline-2.6.jar
					|-- jansi-2.4.0.jar [1 LOW]
	|-- bifrost-upload-client-3.5.0.jar
		|-- jackson-databind-2.21.4.jar [1 MEDIUM]
		|-- httpclient5-5.6.1.jar
			|-- httpcore5-h2-5.4.jar [1 HIGH]
				|-- httpcore5-5.4.jar [1 HIGH]
			|-- httpcore5-5.4.jar [1 HIGH]
		|-- pnc-api-3.5.0.jar
			|-- jackson-databind-2.21.4.jar [1 MEDIUM]
	|-- pnc-api-3.5.2-jakarta.jar
		|-- jackson-databind-2.21.4.jar [1 MEDIUM]
	|-- pnc-common-3.5.1-jakarta.jar
		|-- jackson-databind-2.21.4.jar [1 MEDIUM]
		|-- jackson-datatype-jdk8-2.21.4.jar
			|-- jackson-databind-2.21.4.jar [1 MEDIUM]
		|-- jackson-datatype-jsr310-2.21.4.jar
			|-- jackson-databind-2.21.4.jar [1 MEDIUM]
		|-- jackson-module-parameter-names-2.21.4.jar
			|-- jackson-databind-2.21.4.jar [1 MEDIUM]
		|-- pom-manipulation-common-lite-5.3.jar
			|-- jackson-databind-2.21.4.jar [1 MEDIUM]
			|-- reports-model-2.6.9.jar
				|-- jackson-databind-2.21.4.jar [1 MEDIUM]
		|-- opentelemetry-ext-cli-java-2.1.0.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-semconv-1.29.0-alpha.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- github-api-1.330.jar
		|-- jackson-databind-2.21.4.jar [1 MEDIUM]


No Policy violations were detected

Project 'reqour' was updated, for more information, visit the Mend platform: https://ibmets.whitesourcesoftware.com/app/orgs/Enterprise%20Applications/applications/summary?project=f431aad9-9460-46b3-b3eb-677bf83ee360
Or the Core UI: https://ibmets.whitesourcesoftware.com/Wss/WSS.html#!project;token=422537de190243159a22de2ea487cb28df2e499972f34f1481f455b690290cb7

Mend AI scan succeeded.

Support Token: 2dfa74dc8686642349da45bbef09c3bf81784070028594

SAST scan output

*no findings*

Full logs and artifacts

dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jul 14, 2026

Navigation Menu

Uh oh!

Bump org.jboss.pnc:pnc-api from 3.5.0 to 3.5.2 - #376

Bump org.jboss.pnc:pnc-api from 3.5.0 to 3.5.2#376
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/org.jboss.pnc-pnc-api-3.5.2

dependabot Bot commented on behalf of github Jul 14, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jul 14, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

3.5.2

3.5.1

What's Changed

🐛 Fixes / 🚀 Enhancements

Uh oh!

github-actions Bot commented Jul 14, 2026

Mend Scan Results

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 14, 2026 •

edited

Loading