[Snyk] Security upgrade io.quarkiverse.artemis:quarkus-artemis-jms from 2.1.1 to 3.1.1 #3307

yurake · 2023-10-11T17:01:19Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `maven` dependencies of this project.

Changes included in this PR

Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- application/consumer-activemq-quarkus/pom.xml

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Upgrade	Breaking Change	Exploit Maturity	Reachability
	725/1000 Why? Mature exploit, Recently disclosed, Has a fix available, CVSS 7.5	Denial of Service (DoS) SNYK-JAVA-IONETTY-5953332	`io.quarkiverse.artemis:quarkus-artemis-jms:` `2.1.1 -> 3.1.1`	Yes	Mature	No Path Found

(*) Note that the real score may have changed since the PR was raised.

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Denial of Service (DoS)

…ilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-IONETTY-5953332

what-the-diff · 2023-10-11T17:01:38Z

PR Summary

Update of Quarkus Artemis version
The Quarkus Artemis software version used in this project has been elevated from 2.1.1 to 3.1.1. This ensures we have the latest security patches, more reliable performance and potential new features made available in the updated version.

codeclimate · 2023-10-11T17:01:48Z

Code Climate has analyzed commit 019aee0 and detected 0 issues on this pull request.

View more on Code Climate.

sonarqubecloud · 2023-10-11T17:02:00Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
0.0% Duplication

sonarqubecloud · 2023-10-11T17:07:58Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

codecov · 2023-10-11T17:09:05Z

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 96.01%. Comparing base (8571a4b) to head (019aee0).
Report is 187 commits behind head on master.

Additional details and impacted files

@@              Coverage Diff              @@
##              master    #3307      +/-   ##
=============================================
- Coverage     100.00%   96.01%   -3.99%     
- Complexity         0       30      +30     
=============================================
  Files              8       58      +50     
  Lines             99      904     +805     
  Branches           2       28      +26     
=============================================
+ Hits              99      868     +769     
- Misses             0       30      +30     
- Partials           0        6       +6

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

datadog-github-app-for-yurake · 2023-10-11T17:10:36Z

Datadog Report

All test runs ecd614a 🔗

✅ 22 Total Test Services: 0 Failed, 0 with New Flaky, 22 Passed

Test Services

This report shows up to 10 services

Service Name	Passed	Wall Time	Branch View
`consumer-hazelcast-quarkus`	4	2.06s	Link
`consumer-kafka-quarkus`	2	3.09s	Link
`consumer-rabbitmq-quarkus`	1	2.19s	Link
`consumer-redis-quarkus`	1	2.47s	Link
`converter-kafka-quarkus`	1	5.29s	Link
`converter-rabbitmq-quarkus`	1	1.62s	Link
`jaxrs-activemq-quarkus`	16	1.8s	Link
`jaxrs-cassandra-quarkus`	14	2.03s	Link
`jaxrs-grpc-quarkus`	2	3.2s	Link
`jaxrs-hazelcast-quarkus`	45	6.71s	Link

sonarqubecloud · 2023-10-11T17:13:08Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarqubecloud · 2023-10-11T17:13:47Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarqubecloud · 2023-10-11T17:13:47Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarqubecloud · 2023-10-11T17:13:54Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarqubecloud · 2023-10-11T17:14:05Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarqubecloud · 2023-10-11T17:14:10Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarqubecloud · 2023-10-11T17:14:11Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarqubecloud · 2023-10-11T17:15:21Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarqubecloud · 2023-10-11T17:16:22Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarqubecloud · 2023-10-11T17:16:27Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarqubecloud · 2023-10-11T17:17:11Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarqubecloud · 2023-10-11T17:17:13Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarqubecloud · 2023-10-11T17:17:23Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarqubecloud · 2023-10-11T17:17:29Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarqubecloud · 2023-10-11T17:17:33Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarqubecloud · 2023-10-11T17:18:27Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarqubecloud · 2023-10-11T17:18:51Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarqubecloud · 2023-10-11T17:19:09Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarqubecloud · 2023-10-11T17:19:15Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarqubecloud · 2023-10-11T17:19:36Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

sonarqubecloud · 2023-10-11T17:22:05Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

fix: application/consumer-activemq-quarkus/pom.xml to reduce vulnerab…

019aee0

…ilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-IONETTY-5953332

pull-request-size bot added the size/XS label Oct 11, 2023

github-actions bot added quarkus someone for quarkus java Pull requests that update Java code labels Oct 11, 2023

yurake closed this Sep 15, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Security upgrade io.quarkiverse.artemis:quarkus-artemis-jms from 2.1.1 to 3.1.1 #3307

[Snyk] Security upgrade io.quarkiverse.artemis:quarkus-artemis-jms from 2.1.1 to 3.1.1 #3307

yurake commented Oct 11, 2023

what-the-diff bot commented Oct 11, 2023

codeclimate bot commented Oct 11, 2023

sonarqubecloud bot commented Oct 11, 2023

sonarqubecloud bot commented Oct 11, 2023

codecov bot commented Oct 11, 2023 •

edited

Loading

datadog-github-app-for-yurake bot commented Oct 11, 2023 •

edited

Loading

sonarqubecloud bot commented Oct 11, 2023

sonarqubecloud bot commented Oct 11, 2023

sonarqubecloud bot commented Oct 11, 2023

sonarqubecloud bot commented Oct 11, 2023

sonarqubecloud bot commented Oct 11, 2023

sonarqubecloud bot commented Oct 11, 2023

sonarqubecloud bot commented Oct 11, 2023

sonarqubecloud bot commented Oct 11, 2023

sonarqubecloud bot commented Oct 11, 2023

sonarqubecloud bot commented Oct 11, 2023

sonarqubecloud bot commented Oct 11, 2023

sonarqubecloud bot commented Oct 11, 2023

sonarqubecloud bot commented Oct 11, 2023

sonarqubecloud bot commented Oct 11, 2023

sonarqubecloud bot commented Oct 11, 2023

sonarqubecloud bot commented Oct 11, 2023

sonarqubecloud bot commented Oct 11, 2023

sonarqubecloud bot commented Oct 11, 2023

sonarqubecloud bot commented Oct 11, 2023

sonarqubecloud bot commented Oct 11, 2023

sonarqubecloud bot commented Oct 11, 2023

[Snyk] Security upgrade io.quarkiverse.artemis:quarkus-artemis-jms from 2.1.1 to 3.1.1 #3307

[Snyk] Security upgrade io.quarkiverse.artemis:quarkus-artemis-jms from 2.1.1 to 3.1.1 #3307

Conversation

yurake commented Oct 11, 2023

Snyk has created this PR to fix one or more vulnerable packages in the `maven` dependencies of this project.

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:

what-the-diff bot commented Oct 11, 2023

PR Summary

codeclimate bot commented Oct 11, 2023

sonarqubecloud bot commented Oct 11, 2023

sonarqubecloud bot commented Oct 11, 2023

codecov bot commented Oct 11, 2023 • edited Loading

Codecov Report

datadog-github-app-for-yurake bot commented Oct 11, 2023 • edited Loading

Datadog Report

sonarqubecloud bot commented Oct 11, 2023

sonarqubecloud bot commented Oct 11, 2023

sonarqubecloud bot commented Oct 11, 2023

sonarqubecloud bot commented Oct 11, 2023

sonarqubecloud bot commented Oct 11, 2023

sonarqubecloud bot commented Oct 11, 2023

sonarqubecloud bot commented Oct 11, 2023

sonarqubecloud bot commented Oct 11, 2023

sonarqubecloud bot commented Oct 11, 2023

sonarqubecloud bot commented Oct 11, 2023

sonarqubecloud bot commented Oct 11, 2023

sonarqubecloud bot commented Oct 11, 2023

sonarqubecloud bot commented Oct 11, 2023

sonarqubecloud bot commented Oct 11, 2023

sonarqubecloud bot commented Oct 11, 2023

sonarqubecloud bot commented Oct 11, 2023

sonarqubecloud bot commented Oct 11, 2023

sonarqubecloud bot commented Oct 11, 2023

sonarqubecloud bot commented Oct 11, 2023

sonarqubecloud bot commented Oct 11, 2023

sonarqubecloud bot commented Oct 11, 2023

codecov bot commented Oct 11, 2023 •

edited

Loading

datadog-github-app-for-yurake bot commented Oct 11, 2023 •

edited

Loading