Bump io.smallrye:jandex-maven-plugin from 3.5.3 to 3.6.0 by dependabot[bot] · Pull Request #349 · project-ncl/reqour

dependabot · 2026-06-09T22:44:44Z

Bumps io.smallrye:jandex-maven-plugin from 3.5.3 to 3.6.0.

Release notes

Sourced from io.smallrye:jandex-maven-plugin's releases.

3.6.0

What's Changed

Bump io.quarkus.gizmo:gizmo2 from 2.0.0.Beta10 to 2.0.0.CR1 by @dependabot[bot] in smallrye/jandex#628

fix handling of wrong type annotation path emitted by Kotlin by @Ladicek in smallrye/jandex#630

Bump io.quarkus.gizmo:gizmo2 from 2.0.0.CR1 to 2.0.0 by @dependabot[bot] in smallrye/jandex#631

Bump actions/upload-artifact from 5 to 6 by @dependabot[bot] in smallrye/jandex#632

Bump version.maven from 3.9.11 to 3.9.12 by @dependabot[bot] in smallrye/jandex#634

Bump net.bytebuddy:byte-buddy from 1.18.2 to 1.18.3 by @dependabot[bot] in smallrye/jandex#635

Bump org.codehaus.mojo:exec-maven-plugin from 3.6.2 to 3.6.3 by @dependabot[bot] in smallrye/jandex#636

improve performance of BitTricks.isAsciiOnly() on Java 8 by @Ladicek in smallrye/jandex#638

Bump net.bytebuddy:byte-buddy from 1.18.3 to 1.18.4 by @dependabot[bot] in smallrye/jandex#640

Bump org.apache.maven.plugins:maven-compiler-plugin from 3.14.1 to 3.15.0 by @dependabot[bot] in smallrye/jandex#643

Bump io.quarkus.gizmo:gizmo2 from 2.0.0 to 2.1.0 by @dependabot[bot] in smallrye/jandex#644

Bump io.quarkus.gizmo:gizmo2 from 2.1.0 to 2.1.1 by @dependabot[bot] in smallrye/jandex#645

improve javadoc by @Ladicek in smallrye/jandex#646

Bump net.bytebuddy:byte-buddy from 1.18.4 to 1.18.5 by @dependabot[bot] in smallrye/jandex#648

Bump actions/upload-artifact from 6 to 7 by @dependabot[bot] in smallrye/jandex#650

Bump net.bytebuddy:byte-buddy from 1.18.5 to 1.18.7 by @dependabot[bot] in smallrye/jandex#651

Bump version.maven from 3.9.12 to 3.9.13 by @dependabot[bot] in smallrye/jandex#652

Bump version.maven from 3.9.13 to 3.9.14 by @dependabot[bot] in smallrye/jandex#653

Bump actions/create-github-app-token from 2 to 3 by @dependabot[bot] in smallrye/jandex#654

Bump org.codehaus.plexus:plexus-utils from 4.0.2 to 4.0.3 by @dependabot[bot] in smallrye/jandex#655

bump Groovy to 4.0.31 by @Ladicek in smallrye/jandex#657

fix equivalence of array types by @Ladicek in smallrye/jandex#658

Bump net.bytebuddy:byte-buddy from 1.18.7 to 1.18.8 by @dependabot[bot] in smallrye/jandex#659

Bump org.apache.ant:ant from 1.10.15 to 1.10.16 by @dependabot[bot] in smallrye/jandex#660

Bump io.quarkus.gizmo:gizmo2 from 2.1.1 to 2.2.0 by @dependabot[bot] in smallrye/jandex#661

Bump org.apache.ant:ant from 1.10.16 to 1.10.17 by @dependabot[bot] in smallrye/jandex#662

Bump version.maven from 3.9.14 to 3.9.15 by @dependabot[bot] in smallrye/jandex#664

Bump com.google.code.gson:gson from 2.13.2 to 2.14.0 by @dependabot[bot] in smallrye/jandex#666

Bump org.apache.maven.plugins:maven-invoker-plugin from 3.9.1 to 3.10.0 by @dependabot[bot] in smallrye/jandex#668

Bump org.postgresql:postgresql from 42.7.2 to 42.7.11 in /maven-plugin/src/it/someLibraries by @dependabot[bot] in smallrye/jandex#669

Bump org.apache.maven.plugins:maven-invoker-plugin from 3.10.0 to 3.10.1 by @dependabot[bot] in smallrye/jandex#670

Bump version.groovy from 4.0.31 to 4.0.32 by @dependabot[bot] in smallrye/jandex#671

Bump version.maven from 3.9.15 to 3.9.16 by @dependabot[bot] in smallrye/jandex#673

Bump org.knowm.xchart:xchart from 3.8.8 to 3.9.0 by @dependabot[bot] in smallrye/jandex#674

Bump org.knowm.xchart:xchart from 3.9.0 to 4.0.0 by @dependabot[bot] in smallrye/jandex#677

add access to repeatable annotations that doesn't require an index by @Ladicek in smallrye/jandex#678

improve CI by @Ladicek in smallrye/jandex#679

add utility for working with Kotlin code by @Ladicek in smallrye/jandex#680

Bump version.kotlin from 2.3.21 to 2.4.0 by @dependabot[bot] in smallrye/jandex#682

add ClassInfo.hashCode() by @Ladicek in smallrye/jandex#683

release 3.6.0 by @Ladicek in smallrye/jandex#684

Full Changelog: smallrye/jandex@3.5.3...3.6.0

Commits

566fc2e [maven-release-plugin] prepare release 3.6.0
93720a2 Amendments before release
a1e2c8c release 3.6.0
3d3ba51 add Jandex 3.6.x to the persistent format version table
9408680 add ClassInfo.hashCode()
bc4ba87 Bump version.kotlin from 2.3.21 to 2.4.0
5e419de add utility for working with Kotlin code
54ecba3 replace Byte Buddy with raw ASM
631619d improve CI
4319fda add access to repeatable annotations that doesn't require an index
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [io.smallrye:jandex-maven-plugin](https://github.com/smallrye/jandex) from 3.5.3 to 3.6.0. - [Release notes](https://github.com/smallrye/jandex/releases) - [Changelog](https://github.com/smallrye/jandex/blob/main/RELEASE_PROCEDURE.md) - [Commits](smallrye/jandex@3.5.3...3.6.0) --- updated-dependencies: - dependency-name: io.smallrye:jandex-maven-plugin dependency-version: 3.6.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-06-09T23:01:02Z

Mend Scan Results

Status: ⚠️ Findings detected

⚠️ SCA findings detected

SCA scan output

4j-reload4j-1.7.36.jar
				|-- reload4j-1.2.19.jar [1 MEDIUM]
	|-- pnc-common-3.5.0-jakarta.jar
		|-- jsoup-1.22.2.jar
			|-- netty-handler-4.1.133.Final.jar [2 HIGH]
reqour-core-3.5.3-SNAPSHOT.jar
|-- netty-codec-http-4.1.133.Final.jar
	|-- netty-handler-4.1.133.Final.jar [2 HIGH]
|-- quarkus-logging-json-3.5.0.jar
	|-- quarkus-jackson-3.36.0.jar
		|-- vertx-core-4.5.27.jar
			|-- netty-codec-haproxy-4.1.133.Final.jar [1 HIGH]
			|-- netty-codec-http2-4.1.133.Final.jar [1 MEDIUM]
				|-- netty-handler-4.1.133.Final.jar [2 HIGH]
			|-- netty-handler-proxy-4.1.133.Final.jar
				|-- netty-handler-4.1.133.Final.jar [2 HIGH]
			|-- netty-handler-4.1.133.Final.jar [2 HIGH]
			|-- netty-resolver-dns-4.1.133.Final.jar [2 HIGH, 1 MEDIUM]
				|-- netty-handler-4.1.133.Final.jar [2 HIGH]
|-- quarkus-oidc-client-3.36.0.jar
	|-- quarkus-vertx-3.36.0.jar
		|-- netty-codec-haproxy-4.1.133.Final.jar [1 HIGH]
		|-- quarkus-netty-3.36.0.jar
			|-- netty-codec-http2-4.1.133.Final.jar [1 MEDIUM]
			|-- netty-handler-4.1.133.Final.jar [2 HIGH]
|-- quarkus-smallrye-fault-tolerance-3.36.0.jar
	|-- smallrye-fault-tolerance-mutiny-6.11.1.jar
		|-- smallrye-fault-tolerance-core-6.11.1.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- smallrye-fault-tolerance-6.11.1.jar
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
|-- quarkus-logging-kafka-3.0.4.jar
	|-- kafka-log4j-appender-3.9.2.jar
		|-- kafka-clients-4.2.0.jar [1 MEDIUM]
		|-- slf4j-reload4j-1.7.36.jar
			|-- reload4j-1.2.19.jar [1 MEDIUM]
|-- pnc-common-3.5.0-jakarta.jar
	|-- opentelemetry-ext-cli-java-2.0.0.jar
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-exporter-otlp-1.60.1.jar
			|-- opentelemetry-exporter-otlp-common-1.60.1.jar
				|-- opentelemetry-exporter-common-1.60.1.jar
					|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-sdk-logs-1.60.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-sdk-metrics-1.60.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-sdk-1.60.1.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-sdk-common-1.60.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-sdk-trace-1.60.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-semconv-1.29.0-alpha.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- jsoup-1.22.2.jar
		|-- netty-handler-4.1.133.Final.jar [2 HIGH]
reqour-rest-3.5.3-SNAPSHOT.jar
|-- quarkus-opentelemetry-3.36.0.jar
	|-- opentelemetry-instrumentation-annotations-support-2.26.1-alpha.jar
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- opentelemetry-instrumentation-annotations-2.26.1.jar
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- opentelemetry-instrumentation-api-2.26.1.jar
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- opentelemetry-jdbc-2.26.1-alpha.jar
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- opentelemetry-runtime-telemetry-java17-2.26.1-alpha.jar
		|-- opentelemetry-runtime-telemetry-2.26.1-alpha.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- opentelemetry-api-incubator-1.60.1-alpha.jar
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- opentelemetry-exporter-otlp-common-1.60.1.jar
		|-- opentelemetry-exporter-common-1.60.1.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- opentelemetry-sdk-1.60.1.jar
		|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-sdk-common-1.60.1.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-sdk-logs-1.60.1.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-sdk-metrics-1.60.1.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- opentelemetry-sdk-trace-1.60.1.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- quarkus-grpc-common-3.36.0.jar
		|-- vertx-grpc-4.5.27.jar
			|-- grpc-netty-1.81.0.jar
				|-- netty-codec-http2-4.1.133.Final.jar [1 MEDIUM]
	|-- quarkus-vertx-3.36.0.jar
		|-- netty-codec-haproxy-4.1.133.Final.jar [1 HIGH]
		|-- quarkus-netty-3.36.0.jar
			|-- netty-codec-http2-4.1.133.Final.jar [1 MEDIUM]
				|-- netty-handler-4.1.133.Final.jar [2 HIGH]
			|-- netty-handler-4.1.133.Final.jar [2 HIGH]
		|-- smallrye-fault-tolerance-vertx-6.11.1.jar
			|-- smallrye-fault-tolerance-core-6.11.1.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- smallrye-common-vertx-context-2.17.0.jar
		|-- vertx-core-4.5.27.jar
			|-- netty-codec-haproxy-4.1.133.Final.jar [1 HIGH]
			|-- netty-codec-http2-4.1.133.Final.jar [1 MEDIUM]
			|-- netty-handler-proxy-4.1.133.Final.jar
				|-- netty-handler-4.1.133.Final.jar [2 HIGH]
			|-- netty-handler-4.1.133.Final.jar [2 HIGH]
			|-- netty-resolver-dns-4.1.133.Final.jar [2 HIGH, 1 MEDIUM]
				|-- netty-handler-4.1.133.Final.jar [2 HIGH]
|-- reqour-core-3.5.3-SNAPSHOT.jar
	|-- netty-codec-http-4.1.133.Final.jar
		|-- netty-handler-4.1.133.Final.jar [2 HIGH]
	|-- quarkus-smallrye-fault-tolerance-3.36.0.jar
		|-- smallrye-fault-tolerance-6.11.1.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
	|-- quarkus-logging-kafka-3.0.4.jar
		|-- kafka-log4j-appender-3.9.2.jar
			|-- kafka-clients-4.2.0.jar [1 MEDIUM]
			|-- slf4j-reload4j-1.7.36.jar
				|-- reload4j-1.2.19.jar [1 MEDIUM]
	|-- pnc-common-3.5.0-jakarta.jar
		|-- opentelemetry-ext-cli-java-2.0.0.jar
			|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
			|-- opentelemetry-semconv-1.29.0-alpha.jar
				|-- opentelemetry-api-1.60.1.jar [1 MEDIUM]
		|-- jsoup-1.22.2.jar
			|-- netty-handler-4.1.133.Final.jar [2 HIGH]


No Policy violations were detected

Project 'reqour' was updated, for more information, visit the Mend platform: https://ibmets.whitesourcesoftware.com/app/orgs/Enterprise%20Applications/applications/summary?project=f431aad9-9460-46b3-b3eb-677bf83ee360
Or the Core UI: https://ibmets.whitesourcesoftware.com/Wss/WSS.html#!project;token=422537de190243159a22de2ea487cb28df2e499972f34f1481f455b690290cb7

Mend AI scan succeeded.

Support Token: 225928237ed944562b238d79333798bbb1781046022245

SAST scan output

*no findings*

Full logs and artifacts

dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jun 9, 2026

thescouser89 merged commit a0f523a into main Jun 10, 2026
2 checks passed

dependabot Bot deleted the dependabot/maven/io.smallrye-jandex-maven-plugin-3.6.0 branch June 10, 2026 20:07

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump io.smallrye:jandex-maven-plugin from 3.5.3 to 3.6.0#349

Bump io.smallrye:jandex-maven-plugin from 3.5.3 to 3.6.0#349
thescouser89 merged 1 commit into
mainfrom
dependabot/maven/io.smallrye-jandex-maven-plugin-3.6.0

dependabot Bot commented on behalf of github Jun 9, 2026

Uh oh!

github-actions Bot commented Jun 9, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Jun 9, 2026

3.6.0

What's Changed

Uh oh!

github-actions Bot commented Jun 9, 2026

Mend Scan Results

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant