This is an automated email from the ASF dual-hosted git repository.
yesamer pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/incubator-kie.git
The following commit(s) were added to refs/heads/main by this push:
new c8ec7d1c0fc [NO-ISSUE] fix(deps): Fix Netty versions and Keycloak to
address CVEs (#7098)
c8ec7d1c0fc is described below
commit c8ec7d1c0fc3bb6ce4ecd2bd0007c77b88728637
Author: Yeser Amer <[email protected]>
AuthorDate: Thu Sep 10 16:57:22 2026 +0200
[NO-ISSUE] fix(deps): Fix Netty versions and Keycloak to address CVEs
(#7098)
* netty versions synchronized.
* Keyclock
* Reverted netty + other updates
* minor
* Test envirnoment fixed
* Revert "Test envirnoment fixed"
This reverts commit 09da8be6037e68abe5ae74e8da8c1735a31ddd41.
---
kie-parent/pom.xml | 6 +++---
kogito-quarkus/bom/pom.xml | 1 -
2 files changed, 3 insertions(+), 4 deletions(-)
diff --git a/kie-parent/pom.xml b/kie-parent/pom.xml
index cc9fece515f..c559adba499 100644
--- a/kie-parent/pom.xml
+++ b/kie-parent/pom.xml
@@ -100,7 +100,7 @@
<version.com.github.victools>4.37.0</version.com.github.victools>
<version.com.google.collections>1.0</version.com.google.collections>
<version.com.google.gson>2.13.2</version.com.google.gson>
- <version.com.google.guava>33.4.8-jre</version.com.google.guava>
+ <version.com.google.guava>33.5.0-jre</version.com.google.guava>
<version.com.google.protobuf>3.25.5</version.com.google.protobuf>
<version.com.graphql-java>25.0</version.com.graphql-java>
<version.com.graphql-java-extended-scalars>24.0</version.com.graphql-java-extended-scalars>
@@ -144,7 +144,7 @@
<version.io.fabric8.kubernetes-client>7.3.1</version.io.fabric8.kubernetes-client>
<version.io.grpc>1.76.0</version.io.grpc>
<version.io.micrometer>1.16.6</version.io.micrometer>
- <version.io.netty>4.2.16.Final</version.io.netty>
+ <version.io.netty>4.1.137.Final</version.io.netty>
<version.io.opentelemetry>1.0.0-alpha</version.io.opentelemetry>
<version.io.rest-assured>5.5.6</version.io.rest-assured>
<version.io.smallrye-config>3.13.4</version.io.smallrye-config>
@@ -273,7 +273,7 @@
<version.org.json-unit-assertj>2.9.0</version.org.json-unit-assertj>
<!-- JUnit 6: single version property for jupiter + platform + vintage
artifacts. See version.junit above for the legacy JUnit 4 API. -->
<version.org.junit>6.0.3</version.org.junit>
- <version.org.keycloak>26.1.0</version.org.keycloak>
+ <version.org.keycloak>26.1.5</version.org.keycloak>
<version.org.mapstruct>1.5.5.Final</version.org.mapstruct>
<version.org.mockito>5.18.0</version.org.mockito>
<version.org.mongo>5.3.1</version.org.mongo>
diff --git a/kogito-quarkus/bom/pom.xml b/kogito-quarkus/bom/pom.xml
index aa0c07f0afc..d905ad7c19d 100644
--- a/kogito-quarkus/bom/pom.xml
+++ b/kogito-quarkus/bom/pom.xml
@@ -43,7 +43,6 @@
change what the Spring Boot side resolves. -->
<version.io.grpc>1.81.0</version.io.grpc>
<version.io.smallrye.reactive.messaging.in.memory>4.33.0</version.io.smallrye.reactive.messaging.in.memory>
- <version.com.google.guava>33.5.0-jre</version.com.google.guava>
<version.io.smallrye.mutiny>3.1.1</version.io.smallrye.mutiny>
<version.org.hibernate>7.2.19.Final</version.org.hibernate>
<version.org.postgresql>42.7.13</version.org.postgresql>
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
