Skip to content

[NCL-10059] Align spotless formatter and import sort configuration - #40

Merged
rnc merged 1 commit into
project-ncl:mainfrom
patrikk0123:ncl10059
Oct 13, 2026
Merged

rnc merged 1 commit into
project-ncl:mainfrom
patrikk0123:ncl10059

Conversation

@patrikk0123

@patrikk0123 patrikk0123 commented Oct 9, 2026 •

Copy link
Copy Markdown
Member

No description provided.

@github-actions

github-actions Bot commented Oct 9, 2026 •

Copy link
Copy Markdown

Mend Scan Results

Status: ⚠️ Findings detected

⚠️ SCA findings detected

SCA scan output



Identified 244 dependencies

Detected 4 vulnerabilities (0 Critical, 2 High, 2 Medium, 0 Low)

+----------+---------------------------------------+-----------------+-----------------------------------------------------------------------------------------------------+
| SEVERITY |                LIBRARY                |       ID        |                                               TOP FIX                                               |
+----------+---------------------------------------+-----------------+-----------------------------------------------------------------------------------------------------+
| HIGH     | guava-33.6.0-jre.jar                  | CVE-2026-102554 | Upgrade to version com.google.guava:guava:33.7.2, https://github.com/google/guava.git - v33.7.2     |
+----------+---------------------------------------+-----------------+-----------------------------------------------------------------------------------------------------+
| HIGH     | netty-codec-haproxy-4.1.138.Final.jar | CVE-2026-93564  | Upgrade to version io.netty:netty-codec-haproxy:4.1.138.Final, https://github.com/netty/netty.git - |
|          |                                       |                 | netty-4.1.138.Final, https://github.com/netty/netty.git - netty-4.2.18.Final,                       |
|          |                                       |                 | io.netty:netty-codec-haproxy:4.2.18.Final,io.netty:netty-all:4.1.138.Final                          |
+----------+---------------------------------------+-----------------+-----------------------------------------------------------------------------------------------------+
| MEDIUM   | bcprov-jdk18on-1.86.jar               | CVE-2026-97873  | N/A                                                                                                 |
+----------+---------------------------------------+-----------------+-----------------------------------------------------------------------------------------------------+
| MEDIUM   | okio-2.10.0.jar                       | CVE-2023-3635   | Upgrade to version com.squareup.okio:okio-jvm:3.4.0                                                 |
+----------+---------------------------------------+-----------------+-----------------------------------------------------------------------------------------------------+


Paths at risk

P = policy violation
MSC = malicious vulnerability
CRITICAL/HIGH/MEDIUM/LOW = vulnerability severity

okhttp-4.12.0.jar
|-- okio-2.10.0.jar [1 MEDIUM]
okio-2.10.0.jar [1 MEDIUM]
micrometer-registry-prometheus-1.17.1.jar
|-- micrometer-core-1.17.1.jar
	|-- guava-33.6.0-jre.jar [1 HIGH]
|-- prometheus-metrics-core-1.7.0.jar
	|-- guava-33.6.0-jre.jar [1 HIGH]
quarkus-jackson-3.40.1.jar
|-- vertx-core-4.5.34.jar
	|-- netty-codec-haproxy-4.1.138.Final.jar [1 HIGH]
quarkus-opentelemetry-3.40.1.jar
|-- quarkus-grpc-common-3.40.1.jar
	|-- grpc-core-1.81.0.jar
		|-- guava-33.6.0-jre.jar [1 HIGH]
	|-- vertx-grpc-4.5.34.jar
		|-- guava-33.6.0-jre.jar [1 HIGH]
		|-- grpc-netty-1.81.0.jar
			|-- guava-33.6.0-jre.jar [1 HIGH]
			|-- grpc-util-1.81.0.jar
				|-- guava-33.6.0-jre.jar [1 HIGH]
		|-- grpc-protobuf-1.81.0.jar
			|-- guava-33.6.0-jre.jar [1 HIGH]
			|-- grpc-protobuf-lite-1.81.0.jar
				|-- guava-33.6.0-jre.jar [1 HIGH]
|-- quarkus-tls-registry-3.40.1.jar
	|-- smallrye-private-key-pem-parser-0.9.4.jar
		|-- bcprov-jdk18on-1.86.jar [1 MEDIUM]
|-- vertx-grpc-client-4.5.34.jar
	|-- grpc-api-1.81.0.jar
		|-- guava-33.6.0-jre.jar [1 HIGH]
	|-- grpc-stub-1.81.0.jar
		|-- guava-33.6.0-jre.jar [1 HIGH]
	|-- vertx-grpc-common-4.5.34.jar
		|-- guava-33.6.0-jre.jar [1 HIGH]
quarkus-vertx-3.40.1.jar
|-- netty-codec-haproxy-4.1.138.Final.jar [1 HIGH]
	|-- gson-2.14.0.jar
		|-- guava-33.6.0-jre.jar [1 HIGH]
bcpkix-jdk18on-1.86.jar
|-- bcutil-jdk18on-1.86.jar
	|-- bcprov-jdk18on-1.86.jar [1 MEDIUM]


No Policy violations were detected

Project 'generic-http-proxy-pr' was updated, for more information, visit the Mend platform: https://ibmets.whitesourcesoftware.com/app/orgs/Enterprise%20Applications/applications/summary?project=1d0ad24f-108a-4726-a6ae-2e0672d80029
Or the Core UI: https://ibmets.whitesourcesoftware.com/Wss/WSS.html#!project;token=91b869161bbf4af7a3b77c7cb54fdc82985b2475b795470c954b91886bc5ba6d

Mend AI scan succeeded.

Support Token: 13c799a846a8b4de7965ab14cd55dfe9d1791908331435
SAST scan output
*no findings*

Full logs and artifacts

@rnc
rnc merged commit 12119ef into project-ncl:main Oct 13, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants