Skip to content

chore(deps): eol minor upgrades — 5 packages (minor: 3 · patch: 2) #606

Closed
gh-worker-campaigns-3e9aa4[bot] wants to merge 1 commit intomasterfrom
engraver-auto-version-upgrade/minorpatch/maven/0-1775089601
Closed

chore(deps): eol minor upgrades — 5 packages (minor: 3 · patch: 2) #606
gh-worker-campaigns-3e9aa4[bot] wants to merge 1 commit intomasterfrom
engraver-auto-version-upgrade/minorpatch/maven/0-1775089601

Conversation

@gh-worker-campaigns-3e9aa4
Copy link
Copy Markdown
Contributor

Summary: Security update — 5 packages upgraded (MINOR changes included)

Manifests changed:

  • . (maven)

✅ Action Required: Please review the changes below. If they look good, approve and merge this PR.


Updates

Package From To Type Vulnerabilities Fixed
com.beust:jcommander 1.35 1.82 minor -
com.datadoghq:java-dogstatsd-client 2.10.5 2.13.1 minor -
org.yaml:snakeyaml 2.0 2.6 minor -
org.slf4j:slf4j-api 1.7.32 1.7.36 patch -
org.slf4j:slf4j-jdk14 1.7.32 1.7.36 patch -

Packages marked with "-" are updated due to dependency constraints.


Security Details

⚠️ Dependencies that have Reached EOL (4)
Dependency Unsafe Version EOL Date New Version Path
com.beust:jcommander 1.35 - 1.82 pom.xml
com.datadoghq:java-dogstatsd-client 2.10.5 Nov 19, 2025 2.13.1 pom.xml
org.slf4j:slf4j-api 1.7.32 - 1.7.36 pom.xml
org.slf4j:slf4j-jdk14 1.7.32 - 1.7.36 pom.xml

Review Checklist

Standard review:

  • Review changes for compatibility with your code
  • Check for breaking changes in release notes
  • Run tests locally or wait for CI
  • Approve and merge this PR

Update Mode: EOL Remediation

🤖 Generated by DataDog Automated Dependency Management System

@carlosroman
Copy link
Copy Markdown
Contributor

No thank you as this breaks our supported versions of Java.

@carlosroman carlosroman deleted the engraver-auto-version-upgrade/minorpatch/maven/0-1775089601 branch April 13, 2026 11:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant