Skip to content

Bump atlasVersion from 1.2.2 to 1.2.3 - #508

Merged
rnc merged 1 commit into
masterfrom
dependabot/maven/atlasVersion-1.2.3
Sep 16, 2026
Merged

Bump atlasVersion from 1.2.2 to 1.2.3#508
rnc merged 1 commit into
masterfrom
dependabot/maven/atlasVersion-1.2.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 16, 2026

Copy link
Copy Markdown
Contributor

Bumps atlasVersion from 1.2.2 to 1.2.3.
Updates org.commonjava.atlas:atlas-identities from 1.2.2 to 1.2.3

Release notes

Sourced from org.commonjava.atlas:atlas-identities's releases.

atlas-parent-1.2.3

What's Changed

🐛 Fixes / 🚀 Enhancements

👒 Project Dependencies

👒 CI Dependencies

New Contributors

Full Changelog: Commonjava/atlas@atlas-parent-1.2.2...atlas-parent-1.2.3

Commits
  • e40d3ea [maven-release-plugin] prepare release atlas-parent-1.2.3
  • d77fbd8 Merge pull request #135 from rnc/BR1
  • 8327f53 Correct token password
  • c9fef7d Merge pull request #134 from rnc/BR1
  • dd4f874 Correct token name
  • 1755107 Merge pull request #133 from patrikk0123/fix-release-workflow
  • e3eda84 Add release command to maven release workflow
  • 5662765 Merge pull request #131 from Commonjava/dependabot/maven/org.commonjava.boms-...
  • 036211b Merge pull request #132 from Commonjava/dependabot/maven/org.commonjava-commo...
  • c7d2d90 Bump org.commonjava:commonjava from 22 to 23
  • Additional commits viewable in compare view

Updates org.commonjava.atlas:atlas-relationships-api from 1.2.2 to 1.2.3

Release notes

Sourced from org.commonjava.atlas:atlas-relationships-api's releases.

atlas-parent-1.2.3

What's Changed

🐛 Fixes / 🚀 Enhancements

👒 Project Dependencies

👒 CI Dependencies

New Contributors

Full Changelog: Commonjava/atlas@atlas-parent-1.2.2...atlas-parent-1.2.3

Commits
  • e40d3ea [maven-release-plugin] prepare release atlas-parent-1.2.3
  • d77fbd8 Merge pull request #135 from rnc/BR1
  • 8327f53 Correct token password
  • c9fef7d Merge pull request #134 from rnc/BR1
  • dd4f874 Correct token name
  • 1755107 Merge pull request #133 from patrikk0123/fix-release-workflow
  • e3eda84 Add release command to maven release workflow
  • 5662765 Merge pull request #131 from Commonjava/dependabot/maven/org.commonjava.boms-...
  • 036211b Merge pull request #132 from Commonjava/dependabot/maven/org.commonjava-commo...
  • c7d2d90 Bump org.commonjava:commonjava from 22 to 23
  • Additional commits viewable in compare view

Updates org.commonjava.atlas:atlas-bindings-jackson-identities from 1.2.2 to 1.2.3

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
Bump atlasVersion from 1.2.2 to 1.2.3
916dbae 
Bumps `atlasVersion` from 1.2.2 to 1.2.3.

Updates `org.commonjava.atlas:atlas-identities` from 1.2.2 to 1.2.3
- [Release notes](https://github.com/Commonjava/atlas/releases)
- [Commits](Commonjava/atlas@atlas-parent-1.2.2...atlas-parent-1.2.3)

Updates `org.commonjava.atlas:atlas-relationships-api` from 1.2.2 to 1.2.3
- [Release notes](https://github.com/Commonjava/atlas/releases)
- [Commits](Commonjava/atlas@atlas-parent-1.2.2...atlas-parent-1.2.3)

Updates `org.commonjava.atlas:atlas-bindings-jackson-identities` from 1.2.2 to 1.2.3

---
updated-dependencies:
- dependency-name: org.commonjava.atlas:atlas-identities
  dependency-version: 1.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.commonjava.atlas:atlas-relationships-api
  dependency-version: 1.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.commonjava.atlas:atlas-bindings-jackson-identities
  dependency-version: 1.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Sep 16, 2026
@github-actions

github-actions Bot commented Sep 16, 2026

Copy link
Copy Markdown
Contributor

Mend Scan Results

Status: ⚠️ Findings detected

⚠️ SCA findings detected

SCA scan output 



Identified 113 dependencies

Detected 2 vulnerabilities (0 Critical, 0 High, 1 Medium, 1 Low)

+----------+----------------+---------------+-------------------------------------------------------------------------------------------------+
| SEVERITY |    LIBRARY     |      ID       |                                             TOP FIX                                             |
+----------+----------------+---------------+-------------------------------------------------------------------------------------------------+
| MEDIUM   | guava-19.0.jar | CVE-2023-2976 | Upgrade to version com.google.guava:guava:32.0.1-android,32.0.1-jre                             |
+----------+----------------+---------------+-------------------------------------------------------------------------------------------------+
| LOW      | guava-19.0.jar | CVE-2020-8908 | Upgrade to version com.google.guava:guava:32.0.0-android, https://github.com/google/guava.git - |
|          |                |               | v32.0.0                                                                                         |
+----------+----------------+---------------+-------------------------------------------------------------------------------------------------+


Paths at risk

P = policy violation
MSC = malicious vulnerability
CRITICAL/HIGH/MEDIUM/LOW = vulnerability severity

galley-caches-1.23-SNAPSHOT.pom
|-- galley-cache-path-mapped-1.23-SNAPSHOT.jar
	|-- path-mapped-pathdb-datastax-3.3-SNAPSHOT.jar
		|-- cassandra-driver-core-3.12.1.jar
			|-- guava-19.0.jar [1 MEDIUM, 1 LOW]
		|-- cassandra-driver-mapping-3.12.1.jar
			|-- guava-19.0.jar [1 MEDIUM, 1 LOW]
	|-- path-mapped-storage-3.3-SNAPSHOT.jar
		|-- s3-2.54.14.jar
			|-- aws-core-2.54.14.jar
				|-- guava-19.0.jar [1 MEDIUM, 1 LOW]
			|-- sdk-core-2.54.14.jar
				|-- guava-19.0.jar [1 MEDIUM, 1 LOW]


No Policy violations were detected

Project 'galley' was updated, for more information, visit the Mend platform: https://ibmets.whitesourcesoftware.com/app/orgs/Enterprise%20Applications/applications/summary?project=b669806f-110d-4010-ba08-c7a27f9371e0
Or the Core UI: https://ibmets.whitesourcesoftware.com/Wss/WSS.html#!project;token=d4f29335af524e7286ca3b1fdfd6774223cccd682b424dfd861c54be55307f9a

Mend AI scan succeeded.

Support Token: 19d3134b412414084bb4bef87fd0eff281789569188869
SAST scan output 
*no findings*

Full logs and artifacts

@rnc
rnc merged commit 4b5f71d into master Sep 16, 2026
3 checks passed
@rnc
rnc deleted the dependabot/maven/atlasVersion-1.2.3 branch September 16, 2026 14:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@rnc rnc rnc approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@rnc