[Snyk] Security upgrade io.quarkiverse.artemis:quarkus-artemis-jms from 2.1.1 to 3.1.1 #3306

yurake · 2023-10-03T06:26:08Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `maven` dependencies of this project.

Changes included in this PR

Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- application/consumer-activemq-quarkus/pom.xml

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Upgrade	Breaking Change	Exploit Maturity	Reachability
	438/1000 Why? Has a fix available, CVSS 5.6	Improper Certificate Validation SNYK-JAVA-IONETTY-1042268	`io.quarkiverse.artemis:quarkus-artemis-jms:` `2.1.1 -> 3.1.1`	Yes	No Known Exploit	No Path Found

(*) Note that the real score may have changed since the PR was raised.

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

…ilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-IONETTY-1042268

what-the-diff · 2023-10-03T06:26:23Z

PR Summary

Updated Quarkus-Artemis version
This PR updates the version of Quarkus-Artemis used in our project. It changes the version from 2.1.1 to the more recent 3.1.1. This ensures our application takes advantage of the latest updates, improvements and security enhancements that come with the upgraded version.

codeclimate · 2023-10-03T06:26:31Z

Code Climate has analyzed commit 3f079b6 and detected 0 issues on this pull request.

View more on Code Climate.

sonarqubecloud · 2023-10-03T06:26:38Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
0.0% Duplication

codecov · 2023-10-03T06:29:07Z

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 95.60%. Comparing base (8571a4b) to head (3f079b6).
Report is 187 commits behind head on master.

Additional details and impacted files

@@              Coverage Diff              @@
##              master    #3306      +/-   ##
=============================================
- Coverage     100.00%   95.60%   -4.41%     
- Complexity         0       30      +30     
=============================================
  Files              8       50      +42     
  Lines             99      750     +651     
  Branches           2       25      +23     
=============================================
+ Hits              99      717     +618     
- Misses             0       28      +28     
- Partials           0        5       +5

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

sonarqubecloud · 2023-10-03T06:29:10Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

datadog-github-app-for-yurake · 2023-10-03T06:31:28Z

Datadog Report

All test runs 67e82df 🔗

✅ 22 Total Test Services: 0 Failed, 0 with New Flaky, 22 Passed

Test Services

Service Name	Passed	Wall Time	Branch View
`consumer-hazelcast-quarkus`	4	1.68s	Link
`consumer-kafka-quarkus`	2	2.81s	Link
`consumer-rabbitmq-quarkus`	1	2.1s	Link
`consumer-redis-quarkus`	1	1.68s	Link
`converter-kafka-quarkus`	1	4.75s	Link
`converter-rabbitmq-quarkus`	1	2.28s	Link
`jaxrs-activemq-quarkus`	16	2.48s	Link
`jaxrs-cassandra-quarkus`	14	1.78s	Link
`jaxrs-grpc-quarkus`	2	3.83s	Link
`jaxrs-hazelcast-quarkus`	45	6.45s	Link

sonarqubecloud · 2023-10-03T06:34:11Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarqubecloud · 2023-10-03T06:34:27Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarqubecloud · 2023-10-03T06:34:33Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarqubecloud · 2023-10-03T06:34:43Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarqubecloud · 2023-10-03T06:35:00Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarqubecloud · 2023-10-03T06:35:17Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarqubecloud · 2023-10-03T06:35:25Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarqubecloud · 2023-10-03T06:35:28Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarqubecloud · 2023-10-03T06:35:34Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarqubecloud · 2023-10-03T06:35:38Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarqubecloud · 2023-10-03T06:37:39Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarqubecloud · 2023-10-03T06:38:01Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarqubecloud · 2023-10-03T06:38:25Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarqubecloud · 2023-10-03T06:38:43Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarqubecloud · 2023-10-03T06:38:46Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarqubecloud · 2023-10-03T06:39:11Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarqubecloud · 2023-10-03T06:39:45Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarqubecloud · 2023-10-03T06:40:04Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarqubecloud · 2023-10-03T06:40:32Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarqubecloud · 2023-10-03T06:42:54Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarqubecloud · 2023-10-03T06:43:15Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

fix: application/consumer-activemq-quarkus/pom.xml to reduce vulnerab…

3f079b6

…ilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-IONETTY-1042268

pull-request-size bot added the size/XS label Oct 3, 2023

github-actions bot added quarkus someone for quarkus java Pull requests that update Java code labels Oct 3, 2023

yurake closed this Sep 15, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Security upgrade io.quarkiverse.artemis:quarkus-artemis-jms from 2.1.1 to 3.1.1 #3306

[Snyk] Security upgrade io.quarkiverse.artemis:quarkus-artemis-jms from 2.1.1 to 3.1.1 #3306

yurake commented Oct 3, 2023

what-the-diff bot commented Oct 3, 2023

codeclimate bot commented Oct 3, 2023

sonarqubecloud bot commented Oct 3, 2023

codecov bot commented Oct 3, 2023 •

edited

Loading

sonarqubecloud bot commented Oct 3, 2023

datadog-github-app-for-yurake bot commented Oct 3, 2023 •

edited

Loading

sonarqubecloud bot commented Oct 3, 2023

sonarqubecloud bot commented Oct 3, 2023

sonarqubecloud bot commented Oct 3, 2023

sonarqubecloud bot commented Oct 3, 2023

sonarqubecloud bot commented Oct 3, 2023

sonarqubecloud bot commented Oct 3, 2023

sonarqubecloud bot commented Oct 3, 2023

sonarqubecloud bot commented Oct 3, 2023

sonarqubecloud bot commented Oct 3, 2023

sonarqubecloud bot commented Oct 3, 2023

sonarqubecloud bot commented Oct 3, 2023

sonarqubecloud bot commented Oct 3, 2023

sonarqubecloud bot commented Oct 3, 2023

sonarqubecloud bot commented Oct 3, 2023

sonarqubecloud bot commented Oct 3, 2023

sonarqubecloud bot commented Oct 3, 2023

sonarqubecloud bot commented Oct 3, 2023

sonarqubecloud bot commented Oct 3, 2023

sonarqubecloud bot commented Oct 3, 2023

sonarqubecloud bot commented Oct 3, 2023

sonarqubecloud bot commented Oct 3, 2023

[Snyk] Security upgrade io.quarkiverse.artemis:quarkus-artemis-jms from 2.1.1 to 3.1.1 #3306

[Snyk] Security upgrade io.quarkiverse.artemis:quarkus-artemis-jms from 2.1.1 to 3.1.1 #3306

Conversation

yurake commented Oct 3, 2023

Snyk has created this PR to fix one or more vulnerable packages in the `maven` dependencies of this project.

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:

what-the-diff bot commented Oct 3, 2023

PR Summary

codeclimate bot commented Oct 3, 2023

sonarqubecloud bot commented Oct 3, 2023

codecov bot commented Oct 3, 2023 • edited Loading

Codecov Report

sonarqubecloud bot commented Oct 3, 2023

datadog-github-app-for-yurake bot commented Oct 3, 2023 • edited Loading

Datadog Report

sonarqubecloud bot commented Oct 3, 2023

sonarqubecloud bot commented Oct 3, 2023

sonarqubecloud bot commented Oct 3, 2023

sonarqubecloud bot commented Oct 3, 2023

sonarqubecloud bot commented Oct 3, 2023

sonarqubecloud bot commented Oct 3, 2023

sonarqubecloud bot commented Oct 3, 2023

sonarqubecloud bot commented Oct 3, 2023

sonarqubecloud bot commented Oct 3, 2023

sonarqubecloud bot commented Oct 3, 2023

sonarqubecloud bot commented Oct 3, 2023

sonarqubecloud bot commented Oct 3, 2023

sonarqubecloud bot commented Oct 3, 2023

sonarqubecloud bot commented Oct 3, 2023

sonarqubecloud bot commented Oct 3, 2023

sonarqubecloud bot commented Oct 3, 2023

sonarqubecloud bot commented Oct 3, 2023

sonarqubecloud bot commented Oct 3, 2023

sonarqubecloud bot commented Oct 3, 2023

sonarqubecloud bot commented Oct 3, 2023

sonarqubecloud bot commented Oct 3, 2023

codecov bot commented Oct 3, 2023 •

edited

Loading

datadog-github-app-for-yurake bot commented Oct 3, 2023 •

edited

Loading