From aeee2691100dc5d58f2b1b4d47293db628619d8e Mon Sep 17 00:00:00 2001 From: Ankush Kumar Garg Date: Tue, 8 Sep 2026 11:03:36 +0530 Subject: [PATCH 01/20] update versions --- .../cloud-cap-samples-java/pom.xml | 31 ++++++++++++++++++- .../cloud-cap-samples-java/pom.xml | 31 ++++++++++++++++++- .../central-space/demoapp/pom.xml | 31 ++++++++++++++++++- .../personal-space/demoapp/pom.xml | 31 ++++++++++++++++++- pom.xml | 30 ++++++++++++++++++ 5 files changed, 150 insertions(+), 4 deletions(-) diff --git a/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml b/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml index 125460c5..0be9ae20 100644 --- a/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml +++ b/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml @@ -6,7 +6,7 @@ org.springframework.boot spring-boot-starter-parent - 3.2.6 + 3.5.3 @@ -28,6 +28,11 @@ 3.5.0 3.8.3 9.8.0 + + + 4.1.121.Final + 1.80 + 9.48 @@ -37,6 +42,30 @@ + + + io.netty + netty-bom + ${netty.version} + pom + import + + + org.bouncycastle + bcprov-jdk18on + ${bouncycastle.version} + + + org.bouncycastle + bcpkix-jdk18on + ${bouncycastle.version} + + + com.nimbusds + nimbus-jose-jwt + ${nimbus-jose-jwt.version} + + com.sap.cds diff --git a/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml b/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml index c2c6df6a..8f5508ec 100644 --- a/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml +++ b/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml @@ -6,7 +6,7 @@ org.springframework.boot spring-boot-starter-parent - 3.2.6 + 3.5.3 @@ -28,6 +28,11 @@ 3.5.0 3.8.3 9.3.1 + + + 4.1.121.Final + 1.80 + 9.48 @@ -37,6 +42,30 @@ + + + io.netty + netty-bom + ${netty.version} + pom + import + + + org.bouncycastle + bcprov-jdk18on + ${bouncycastle.version} + + + org.bouncycastle + bcpkix-jdk18on + ${bouncycastle.version} + + + com.nimbusds + nimbus-jose-jwt + ${nimbus-jose-jwt.version} + + com.sap.cds diff --git a/app/single-tenant/central-space/demoapp/pom.xml b/app/single-tenant/central-space/demoapp/pom.xml index 272527e3..9b22aafb 100644 --- a/app/single-tenant/central-space/demoapp/pom.xml +++ b/app/single-tenant/central-space/demoapp/pom.xml @@ -18,9 +18,14 @@ 21 4.1.1 - 3.3.1 + 3.5.3 8.0.2 + + 4.1.121.Final + 1.80 + 9.48 + https://nodejs.org/dist/ UTF-8 @@ -48,6 +53,30 @@ pom import + + + + io.netty + netty-bom + ${netty.version} + pom + import + + + org.bouncycastle + bcprov-jdk18on + ${bouncycastle.version} + + + org.bouncycastle + bcpkix-jdk18on + ${bouncycastle.version} + + + com.nimbusds + nimbus-jose-jwt + ${nimbus-jose-jwt.version} + diff --git a/app/single-tenant/personal-space/demoapp/pom.xml b/app/single-tenant/personal-space/demoapp/pom.xml index 272527e3..9b22aafb 100644 --- a/app/single-tenant/personal-space/demoapp/pom.xml +++ b/app/single-tenant/personal-space/demoapp/pom.xml @@ -18,9 +18,14 @@ 21 4.1.1 - 3.3.1 + 3.5.3 8.0.2 + + 4.1.121.Final + 1.80 + 9.48 + https://nodejs.org/dist/ UTF-8 @@ -48,6 +53,30 @@ pom import + + + + io.netty + netty-bom + ${netty.version} + pom + import + + + org.bouncycastle + bcprov-jdk18on + ${bouncycastle.version} + + + org.bouncycastle + bcpkix-jdk18on + ${bouncycastle.version} + + + com.nimbusds + nimbus-jose-jwt + ${nimbus-jose-jwt.version} + diff --git a/pom.xml b/pom.xml index c188cfe7..0fdc47ba 100644 --- a/pom.xml +++ b/pom.xml @@ -39,6 +39,11 @@ 5.15.2 3.27.7 5.15.2 + + + 4.1.121.Final + 1.80 + 9.48 com.sap.cds @@ -56,6 +61,31 @@ + + + io.netty + netty-bom + ${netty.version} + pom + import + + + org.bouncycastle + bcprov-jdk18on + ${bouncycastle.version} + + + org.bouncycastle + bcpkix-jdk18on + ${bouncycastle.version} + + + com.nimbusds + nimbus-jose-jwt + ${nimbus-jose-jwt.version} + + com.sap.cds cds-services-bom From 87bdf381da87fd804620e773292e1fa9ad763865 Mon Sep 17 00:00:00 2001 From: Ankush Kumar Garg Date: Tue, 8 Sep 2026 15:53:10 +0530 Subject: [PATCH 02/20] version update --- app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml | 2 +- app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml | 2 +- app/single-tenant/central-space/demoapp/pom.xml | 2 +- app/single-tenant/personal-space/demoapp/pom.xml | 2 +- pom.xml | 2 +- 5 files changed, 5 insertions(+), 5 deletions(-) diff --git a/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml b/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml index 0be9ae20..490e5fc7 100644 --- a/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml +++ b/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml @@ -31,7 +31,7 @@ 4.1.121.Final - 1.80 + 1.85 9.48 diff --git a/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml b/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml index 8f5508ec..ca1359c1 100644 --- a/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml +++ b/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml @@ -31,7 +31,7 @@ 4.1.121.Final - 1.80 + 1.85 9.48 diff --git a/app/single-tenant/central-space/demoapp/pom.xml b/app/single-tenant/central-space/demoapp/pom.xml index 9b22aafb..83a653dc 100644 --- a/app/single-tenant/central-space/demoapp/pom.xml +++ b/app/single-tenant/central-space/demoapp/pom.xml @@ -23,7 +23,7 @@ 4.1.121.Final - 1.80 + 1.85 9.48 https://nodejs.org/dist/ diff --git a/app/single-tenant/personal-space/demoapp/pom.xml b/app/single-tenant/personal-space/demoapp/pom.xml index 9b22aafb..83a653dc 100644 --- a/app/single-tenant/personal-space/demoapp/pom.xml +++ b/app/single-tenant/personal-space/demoapp/pom.xml @@ -23,7 +23,7 @@ 4.1.121.Final - 1.80 + 1.85 9.48 https://nodejs.org/dist/ diff --git a/pom.xml b/pom.xml index 0fdc47ba..eaed4de9 100644 --- a/pom.xml +++ b/pom.xml @@ -42,7 +42,7 @@ 4.1.121.Final - 1.80 + 1.85 9.48 From f2f44864a17a17302f3c27294833d1357e0291ef Mon Sep 17 00:00:00 2001 From: Ankush Kumar Garg Date: Thu, 10 Sep 2026 09:48:28 +0530 Subject: [PATCH 03/20] Update pom.xml --- sdm/pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sdm/pom.xml b/sdm/pom.xml index fb5a2d34..c7815f30 100644 --- a/sdm/pom.xml +++ b/sdm/pom.xml @@ -44,7 +44,7 @@ 1.18.0 2.18.6 5.15.2 - 5.4.4 + 5.6.4 5.4.3 4.1.5 4.4.16 From b48e8921aa5c03e5ed2970d67c14c44d6487b0c8 Mon Sep 17 00:00:00 2001 From: Ankush Kumar Garg Date: Thu, 10 Sep 2026 11:18:50 +0530 Subject: [PATCH 04/20] =?UTF-8?q?bump=20Spring=20Boot=203.5.3=20=E2=86=92?= =?UTF-8?q?=203.5.16=20and=20Netty=204.1.121=20=E2=86=92=204.2.17=20in=20a?= =?UTF-8?q?pp=20modules?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Addresses Critical/High security findings from BlackDuck scan: - Spring Boot 3.5.16 pulls in clean transitive versions of Spring Framework, Spring Security, Tomcat, Logback, Micrometer, Jackson, OpenTelemetry, and Apache HttpClient5/HttpCore5 (all flagged in BOM at 3.5.3 levels) - Netty bumped explicitly to 4.2.17.Final (was pinned at 4.1.121.Final) Updated apps: single-tenant central-space, single-tenant personal-space, multi-tenant central-space, multi-tenant personal-space --- app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml | 4 ++-- .../personal-space/cloud-cap-samples-java/pom.xml | 4 ++-- app/single-tenant/central-space/demoapp/pom.xml | 4 ++-- app/single-tenant/personal-space/demoapp/pom.xml | 4 ++-- 4 files changed, 8 insertions(+), 8 deletions(-) diff --git a/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml b/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml index 490e5fc7..54e8da97 100644 --- a/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml +++ b/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml @@ -6,7 +6,7 @@ org.springframework.boot spring-boot-starter-parent - 3.5.3 + 3.5.16 @@ -30,7 +30,7 @@ 9.8.0 - 4.1.121.Final + 4.2.17.Final 1.85 9.48 diff --git a/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml b/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml index ca1359c1..58cb2071 100644 --- a/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml +++ b/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml @@ -6,7 +6,7 @@ org.springframework.boot spring-boot-starter-parent - 3.5.3 + 3.5.16 @@ -30,7 +30,7 @@ 9.3.1 - 4.1.121.Final + 4.2.17.Final 1.85 9.48 diff --git a/app/single-tenant/central-space/demoapp/pom.xml b/app/single-tenant/central-space/demoapp/pom.xml index 83a653dc..344c4687 100644 --- a/app/single-tenant/central-space/demoapp/pom.xml +++ b/app/single-tenant/central-space/demoapp/pom.xml @@ -18,11 +18,11 @@ 21 4.1.1 - 3.5.3 + 3.5.16 8.0.2 - 4.1.121.Final + 4.2.17.Final 1.85 9.48 diff --git a/app/single-tenant/personal-space/demoapp/pom.xml b/app/single-tenant/personal-space/demoapp/pom.xml index 83a653dc..344c4687 100644 --- a/app/single-tenant/personal-space/demoapp/pom.xml +++ b/app/single-tenant/personal-space/demoapp/pom.xml @@ -18,11 +18,11 @@ 21 4.1.1 - 3.5.3 + 3.5.16 8.0.2 - 4.1.121.Final + 4.2.17.Final 1.85 9.48 From 2f7e7ae475eeb9827f984e2256df7c99624bbdb5 Mon Sep 17 00:00:00 2001 From: Ankush Kumar Garg Date: Thu, 10 Sep 2026 12:05:08 +0530 Subject: [PATCH 05/20] force clean transitive versions for remaining Black Duck Critical/High findings --- .../cloud-cap-samples-java/pom.xml | 68 +++++++++++++ .../cloud-cap-samples-java/pom.xml | 68 +++++++++++++ .../central-space/demoapp/pom.xml | 96 ++++++++++++++++--- .../personal-space/demoapp/pom.xml | 96 ++++++++++++++++--- 4 files changed, 300 insertions(+), 28 deletions(-) diff --git a/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml b/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml index 54e8da97..28bbefc0 100644 --- a/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml +++ b/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml @@ -33,6 +33,13 @@ 4.2.17.Final 1.85 9.48 + 2.22.2 + 1.17.1 + 1.65.0 + 1.6.3 + 10.1.59 + 5.6.4 + 5.4.3 @@ -50,6 +57,67 @@ pom import + + com.fasterxml.jackson + jackson-bom + ${jackson-bom.version} + pom + import + + + io.micrometer + micrometer-bom + ${micrometer.version} + pom + import + + + io.opentelemetry + opentelemetry-bom + ${opentelemetry.version} + pom + import + + + ch.qos.logback + logback-classic + ${logback.version} + + + ch.qos.logback + logback-core + ${logback.version} + + + org.apache.tomcat.embed + tomcat-embed-core + ${tomcat.version} + + + org.apache.tomcat.embed + tomcat-embed-el + ${tomcat.version} + + + org.apache.tomcat.embed + tomcat-embed-websocket + ${tomcat.version} + + + org.apache.httpcomponents.client5 + httpclient5 + ${httpclient5.version} + + + org.apache.httpcomponents.core5 + httpcore5 + ${httpcore5.version} + + + org.apache.httpcomponents.core5 + httpcore5-h2 + ${httpcore5.version} + org.bouncycastle bcprov-jdk18on diff --git a/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml b/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml index 58cb2071..85dc117c 100644 --- a/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml +++ b/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml @@ -33,6 +33,13 @@ 4.2.17.Final 1.85 9.48 + 2.22.2 + 1.17.1 + 1.65.0 + 1.6.3 + 10.1.59 + 5.6.4 + 5.4.3 @@ -50,6 +57,67 @@ pom import + + com.fasterxml.jackson + jackson-bom + ${jackson-bom.version} + pom + import + + + io.micrometer + micrometer-bom + ${micrometer.version} + pom + import + + + io.opentelemetry + opentelemetry-bom + ${opentelemetry.version} + pom + import + + + ch.qos.logback + logback-classic + ${logback.version} + + + ch.qos.logback + logback-core + ${logback.version} + + + org.apache.tomcat.embed + tomcat-embed-core + ${tomcat.version} + + + org.apache.tomcat.embed + tomcat-embed-el + ${tomcat.version} + + + org.apache.tomcat.embed + tomcat-embed-websocket + ${tomcat.version} + + + org.apache.httpcomponents.client5 + httpclient5 + ${httpclient5.version} + + + org.apache.httpcomponents.core5 + httpcore5 + ${httpcore5.version} + + + org.apache.httpcomponents.core5 + httpcore5-h2 + ${httpcore5.version} + org.bouncycastle bcprov-jdk18on diff --git a/app/single-tenant/central-space/demoapp/pom.xml b/app/single-tenant/central-space/demoapp/pom.xml index 344c4687..1839a467 100644 --- a/app/single-tenant/central-space/demoapp/pom.xml +++ b/app/single-tenant/central-space/demoapp/pom.xml @@ -25,6 +25,13 @@ 4.2.17.Final 1.85 9.48 + 2.22.2 + 1.17.1 + 1.65.0 + 1.6.3 + 10.1.59 + 5.6.4 + 5.4.3 https://nodejs.org/dist/ UTF-8 @@ -36,32 +43,75 @@ - + - com.sap.cds - cds-services-bom - ${cds.services.version} + io.netty + netty-bom + ${netty.version} pom import - - - org.springframework.boot - spring-boot-dependencies - ${spring.boot.version} + com.fasterxml.jackson + jackson-bom + ${jackson-bom.version} pom import - - - io.netty - netty-bom - ${netty.version} + io.micrometer + micrometer-bom + ${micrometer.version} pom import + + io.opentelemetry + opentelemetry-bom + ${opentelemetry.version} + pom + import + + + ch.qos.logback + logback-classic + ${logback.version} + + + ch.qos.logback + logback-core + ${logback.version} + + + org.apache.tomcat.embed + tomcat-embed-core + ${tomcat.version} + + + org.apache.tomcat.embed + tomcat-embed-el + ${tomcat.version} + + + org.apache.tomcat.embed + tomcat-embed-websocket + ${tomcat.version} + + + org.apache.httpcomponents.client5 + httpclient5 + ${httpclient5.version} + + + org.apache.httpcomponents.core5 + httpcore5 + ${httpcore5.version} + + + org.apache.httpcomponents.core5 + httpcore5-h2 + ${httpcore5.version} + org.bouncycastle bcprov-jdk18on @@ -77,6 +127,24 @@ nimbus-jose-jwt ${nimbus-jose-jwt.version} + + + + com.sap.cds + cds-services-bom + ${cds.services.version} + pom + import + + + + + org.springframework.boot + spring-boot-dependencies + ${spring.boot.version} + pom + import + diff --git a/app/single-tenant/personal-space/demoapp/pom.xml b/app/single-tenant/personal-space/demoapp/pom.xml index 344c4687..1839a467 100644 --- a/app/single-tenant/personal-space/demoapp/pom.xml +++ b/app/single-tenant/personal-space/demoapp/pom.xml @@ -25,6 +25,13 @@ 4.2.17.Final 1.85 9.48 + 2.22.2 + 1.17.1 + 1.65.0 + 1.6.3 + 10.1.59 + 5.6.4 + 5.4.3 https://nodejs.org/dist/ UTF-8 @@ -36,32 +43,75 @@ - + - com.sap.cds - cds-services-bom - ${cds.services.version} + io.netty + netty-bom + ${netty.version} pom import - - - org.springframework.boot - spring-boot-dependencies - ${spring.boot.version} + com.fasterxml.jackson + jackson-bom + ${jackson-bom.version} pom import - - - io.netty - netty-bom - ${netty.version} + io.micrometer + micrometer-bom + ${micrometer.version} pom import + + io.opentelemetry + opentelemetry-bom + ${opentelemetry.version} + pom + import + + + ch.qos.logback + logback-classic + ${logback.version} + + + ch.qos.logback + logback-core + ${logback.version} + + + org.apache.tomcat.embed + tomcat-embed-core + ${tomcat.version} + + + org.apache.tomcat.embed + tomcat-embed-el + ${tomcat.version} + + + org.apache.tomcat.embed + tomcat-embed-websocket + ${tomcat.version} + + + org.apache.httpcomponents.client5 + httpclient5 + ${httpclient5.version} + + + org.apache.httpcomponents.core5 + httpcore5 + ${httpcore5.version} + + + org.apache.httpcomponents.core5 + httpcore5-h2 + ${httpcore5.version} + org.bouncycastle bcprov-jdk18on @@ -77,6 +127,24 @@ nimbus-jose-jwt ${nimbus-jose-jwt.version} + + + + com.sap.cds + cds-services-bom + ${cds.services.version} + pom + import + + + + + org.springframework.boot + spring-boot-dependencies + ${spring.boot.version} + pom + import + From c5c6066138a028d31d3bc87f2172f6996435c72d Mon Sep 17 00:00:00 2001 From: Ankush Kumar Garg Date: Thu, 10 Sep 2026 12:38:31 +0530 Subject: [PATCH 06/20] bump Kotlin 1.9.25 -> 2.4.10 to clear remaining Black Duck High finding MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Black Duck's only fix for the flagged Kotlin (1.9.25) is a major-version jump; 2.4.10 is the current stable long-term recommendation. Applied via a kotlin-bom import (declared first) plus the kotlin.version property across all four app modules. Kotlin is transitive-only here (Java/CAP app, no Kotlin sources), and kotlin-stdlib keeps runtime backward compatibility for consumers. Note: httpcore5 stays at 5.4.3 — the newest stable release; its residual High has no stable fix (only 5.5 pre-releases exist). --- .../central-space/cloud-cap-samples-java/pom.xml | 8 ++++++++ .../personal-space/cloud-cap-samples-java/pom.xml | 8 ++++++++ app/single-tenant/central-space/demoapp/pom.xml | 8 ++++++++ app/single-tenant/personal-space/demoapp/pom.xml | 8 ++++++++ 4 files changed, 32 insertions(+) diff --git a/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml b/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml index 28bbefc0..da5359e0 100644 --- a/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml +++ b/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml @@ -40,6 +40,7 @@ 10.1.59 5.6.4 5.4.3 + 2.4.10 @@ -78,6 +79,13 @@ pom import + + org.jetbrains.kotlin + kotlin-bom + ${kotlin.version} + pom + import + ch.qos.logback logback-classic diff --git a/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml b/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml index 85dc117c..a5826373 100644 --- a/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml +++ b/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml @@ -40,6 +40,7 @@ 10.1.59 5.6.4 5.4.3 + 2.4.10 @@ -78,6 +79,13 @@ pom import + + org.jetbrains.kotlin + kotlin-bom + ${kotlin.version} + pom + import + ch.qos.logback logback-classic diff --git a/app/single-tenant/central-space/demoapp/pom.xml b/app/single-tenant/central-space/demoapp/pom.xml index 1839a467..cd870672 100644 --- a/app/single-tenant/central-space/demoapp/pom.xml +++ b/app/single-tenant/central-space/demoapp/pom.xml @@ -32,6 +32,7 @@ 10.1.59 5.6.4 5.4.3 + 2.4.10 https://nodejs.org/dist/ UTF-8 @@ -72,6 +73,13 @@ pom import + + org.jetbrains.kotlin + kotlin-bom + ${kotlin.version} + pom + import + ch.qos.logback logback-classic diff --git a/app/single-tenant/personal-space/demoapp/pom.xml b/app/single-tenant/personal-space/demoapp/pom.xml index 1839a467..cd870672 100644 --- a/app/single-tenant/personal-space/demoapp/pom.xml +++ b/app/single-tenant/personal-space/demoapp/pom.xml @@ -32,6 +32,7 @@ 10.1.59 5.6.4 5.4.3 + 2.4.10 https://nodejs.org/dist/ UTF-8 @@ -72,6 +73,13 @@ pom import + + org.jetbrains.kotlin + kotlin-bom + ${kotlin.version} + pom + import + ch.qos.logback logback-classic From 14df9064245fc49a85495d2ea1ad4e3bb79c5957 Mon Sep 17 00:00:00 2001 From: Ankush Kumar Garg Date: Thu, 10 Sep 2026 13:28:09 +0530 Subject: [PATCH 07/20] fix Black Duck license risk: override commander 2.0.0 -> 2.20.3 in sidecar Add npm overrides block to both mtx/sidecar package.json files to pin the transitive commander dependency from 2.0.0 (Unknown License / HIGH risk) to 2.20.3 (MIT / known-clean). commander is pulled in transitively; npm overrides is the correct mechanism without touching direct dependencies. --- .../cloud-cap-samples-java/mtx/sidecar/package.json | 3 +++ .../cloud-cap-samples-java/mtx/sidecar/package.json | 3 +++ 2 files changed, 6 insertions(+) diff --git a/app/multi-tenant/central-space/cloud-cap-samples-java/mtx/sidecar/package.json b/app/multi-tenant/central-space/cloud-cap-samples-java/mtx/sidecar/package.json index 55d89b3a..e1bff480 100644 --- a/app/multi-tenant/central-space/cloud-cap-samples-java/mtx/sidecar/package.json +++ b/app/multi-tenant/central-space/cloud-cap-samples-java/mtx/sidecar/package.json @@ -21,5 +21,8 @@ "scripts": { "start": "cds-serve", "build": "cds build ../.. --for mtx-sidecar --production && cd gen && npm install" + }, + "overrides": { + "commander": "2.20.3" } } \ No newline at end of file diff --git a/app/multi-tenant/personal-space/cloud-cap-samples-java/mtx/sidecar/package.json b/app/multi-tenant/personal-space/cloud-cap-samples-java/mtx/sidecar/package.json index bc443138..f45fd29e 100644 --- a/app/multi-tenant/personal-space/cloud-cap-samples-java/mtx/sidecar/package.json +++ b/app/multi-tenant/personal-space/cloud-cap-samples-java/mtx/sidecar/package.json @@ -21,5 +21,8 @@ "scripts": { "start": "cds-serve", "build": "cds build ../.. --for mtx-sidecar --production && cd gen && npm install" + }, + "overrides": { + "commander": "2.20.3" } } From 1be7950fc5fdcc0cb657381e0209a158cc71a3d2 Mon Sep 17 00:00:00 2001 From: Ankush Kumar Garg Date: Thu, 10 Sep 2026 13:35:25 +0530 Subject: [PATCH 08/20] bump Kotlin 2.4.10 -> 2.4.20 to clear CVE-2026-53914 (Critical) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit kotlin-stdlib 2.4.20 is a stable GA release on Maven Central that patches CVE-2026-53914 (CVSS 9.8 Critical). Applied via kotlin-bom override across all 4 app poms. Residual findings with no stable fix in current Spring Boot 3.x ecosystem: Spring Framework 6.2.19 — CVE-2026-59313/59283/47892/47891/47890 (Critical) fix requires Spring 7.0.9 / Spring Boot 4.x (not yet GA) Spring Security 6.5.11 — CVE-2026-59270 (Critical) fix requires Spring Security 7.1.1 / Spring Boot 4.x (not yet GA) httpcore5 5.4.3 — BDSA-2026-29026 (High), no stable patch released These three marked REVIEWED in BlackDuck portal. --- app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml | 2 +- app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml | 2 +- app/single-tenant/central-space/demoapp/pom.xml | 2 +- app/single-tenant/personal-space/demoapp/pom.xml | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml b/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml index da5359e0..e491929f 100644 --- a/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml +++ b/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml @@ -40,7 +40,7 @@ 10.1.59 5.6.4 5.4.3 - 2.4.10 + 2.4.20 diff --git a/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml b/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml index a5826373..29987a2c 100644 --- a/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml +++ b/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml @@ -40,7 +40,7 @@ 10.1.59 5.6.4 5.4.3 - 2.4.10 + 2.4.20 diff --git a/app/single-tenant/central-space/demoapp/pom.xml b/app/single-tenant/central-space/demoapp/pom.xml index cd870672..c88da442 100644 --- a/app/single-tenant/central-space/demoapp/pom.xml +++ b/app/single-tenant/central-space/demoapp/pom.xml @@ -32,7 +32,7 @@ 10.1.59 5.6.4 5.4.3 - 2.4.10 + 2.4.20 https://nodejs.org/dist/ UTF-8 diff --git a/app/single-tenant/personal-space/demoapp/pom.xml b/app/single-tenant/personal-space/demoapp/pom.xml index cd870672..c88da442 100644 --- a/app/single-tenant/personal-space/demoapp/pom.xml +++ b/app/single-tenant/personal-space/demoapp/pom.xml @@ -32,7 +32,7 @@ 10.1.59 5.6.4 5.4.3 - 2.4.10 + 2.4.20 https://nodejs.org/dist/ UTF-8 From 95ffba3341566946720b0d5bce98ff2abe8d0f4c Mon Sep 17 00:00:00 2001 From: Ankush Kumar Garg Date: Thu, 10 Sep 2026 14:10:53 +0530 Subject: [PATCH 09/20] upgrade SAP HANA JDBC Driver 2.25.13 -> 2.29.7 to clear Black Duck license finding MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit ngdbc 2.29.7 exists on Maven Central and clears the "Basic Proprietary Commercial License" HIGH risk on the HANA JDBC driver. Added ngdbc.version property and explicit dependencyManagement override in both multi-tenant poms. Remaining license/security findings with no code fix (marked REVIEWED in portal): Security: Spring Framework 6.2.19 / Spring Security 6.5.11 (no 6.x patch, need SB 4.x) httpcore5 5.4.3 (no standard Apache patch) reactor-core 3.7.19 (3.8.x incompatible with Spring Boot 3.x reactor train) nimbus-jose-jwt 9.48 (10.x breaks Spring Security 6.x JOSE internals) HdrHistogram 2.2.2 (2.5.0 not on Maven Central) License: Logback LGPL, emjapi/xssec/egon-cola/H2/Jakarta/Galasa/SonarXoo (known licenses, no version fix available — reviewed in BlackDuck portal) --- .../central-space/cloud-cap-samples-java/pom.xml | 8 ++++++++ .../personal-space/cloud-cap-samples-java/pom.xml | 8 ++++++++ 2 files changed, 16 insertions(+) diff --git a/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml b/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml index e491929f..c2736dd1 100644 --- a/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml +++ b/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml @@ -41,6 +41,7 @@ 5.6.4 5.4.3 2.4.20 + 2.29.7 @@ -177,6 +178,13 @@ 4.0.0 + + + com.sap.cloud.db.jdbc + ngdbc + ${ngdbc.version} + + diff --git a/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml b/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml index 29987a2c..47b49431 100644 --- a/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml +++ b/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml @@ -41,6 +41,7 @@ 5.6.4 5.4.3 2.4.20 + 2.29.7 @@ -177,6 +178,13 @@ 4.0.0 + + + com.sap.cloud.db.jdbc + ngdbc + ${ngdbc.version} + + From a6f919b7e9d0e21eff5dd6b6df289e196e9b58e0 Mon Sep 17 00:00:00 2001 From: Ankush Kumar Garg Date: Tue, 15 Sep 2026 13:21:41 +0530 Subject: [PATCH 10/20] Exclude Vulnerabilities dependency where are safe to exclude --- .../cloud-cap-samples-java/pom.xml | 25 --------- .../cloud-cap-samples-java/srv/pom.xml | 31 ++++++++++ .../cloud-cap-samples-java/pom.xml | 25 --------- .../cloud-cap-samples-java/srv/pom.xml | 31 ++++++++++ .../central-space/demoapp/pom.xml | 52 ----------------- .../central-space/demoapp/srv/pom.xml | 31 ++++++++++ .../personal-space/demoapp/pom.xml | 56 +------------------ .../personal-space/demoapp/srv/pom.xml | 31 ++++++++++ 8 files changed, 126 insertions(+), 156 deletions(-) diff --git a/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml b/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml index 497dfb58..7dec28af 100644 --- a/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml +++ b/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml @@ -29,9 +29,6 @@ 3.8.3 - 4.2.17.Final - 1.85 - 9.48 2.22.2 1.17.1 1.65.0 @@ -52,13 +49,6 @@ - - io.netty - netty-bom - ${netty.version} - pom - import - com.fasterxml.jackson jackson-bom @@ -127,21 +117,6 @@ httpcore5-h2 ${httpcore5.version} - - org.bouncycastle - bcprov-jdk18on - ${bouncycastle.version} - - - org.bouncycastle - bcpkix-jdk18on - ${bouncycastle.version} - - - com.nimbusds - nimbus-jose-jwt - ${nimbus-jose-jwt.version} - diff --git a/app/multi-tenant/central-space/cloud-cap-samples-java/srv/pom.xml b/app/multi-tenant/central-space/cloud-cap-samples-java/srv/pom.xml index e170c32a..ff3aa492 100644 --- a/app/multi-tenant/central-space/cloud-cap-samples-java/srv/pom.xml +++ b/app/multi-tenant/central-space/cloud-cap-samples-java/srv/pom.xml @@ -26,6 +26,21 @@ com.sap.cds cds-adapter-odata-v4 runtime + + + + io.opentelemetry + opentelemetry-api + + + io.opentelemetry + opentelemetry-context + + + io.opentelemetry + opentelemetry-common + + org.apache.commons @@ -41,6 +56,22 @@ com.sap.cds sdm 1.10.1-SNAPSHOT + + + + org.apache.httpcomponents.core5 + httpcore5 + + + org.apache.httpcomponents.core5 + httpcore5-h2 + + + + org.jetbrains.kotlin + kotlin-stdlib + + com.sap.cds diff --git a/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml b/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml index 81ed0ed9..f28432d2 100644 --- a/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml +++ b/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml @@ -29,9 +29,6 @@ 3.8.3 - 4.2.17.Final - 1.85 - 9.48 2.22.2 1.17.1 1.65.0 @@ -52,13 +49,6 @@ - - io.netty - netty-bom - ${netty.version} - pom - import - com.fasterxml.jackson jackson-bom @@ -127,21 +117,6 @@ httpcore5-h2 ${httpcore5.version} - - org.bouncycastle - bcprov-jdk18on - ${bouncycastle.version} - - - org.bouncycastle - bcpkix-jdk18on - ${bouncycastle.version} - - - com.nimbusds - nimbus-jose-jwt - ${nimbus-jose-jwt.version} - diff --git a/app/multi-tenant/personal-space/cloud-cap-samples-java/srv/pom.xml b/app/multi-tenant/personal-space/cloud-cap-samples-java/srv/pom.xml index 8ff37509..24c8b308 100644 --- a/app/multi-tenant/personal-space/cloud-cap-samples-java/srv/pom.xml +++ b/app/multi-tenant/personal-space/cloud-cap-samples-java/srv/pom.xml @@ -26,6 +26,21 @@ com.sap.cds cds-adapter-odata-v4 runtime + + + + io.opentelemetry + opentelemetry-api + + + io.opentelemetry + opentelemetry-context + + + io.opentelemetry + opentelemetry-common + + org.apache.commons @@ -41,6 +56,22 @@ com.sap.cds sdm 1.0.0-RC1 + + + + org.apache.httpcomponents.core5 + httpcore5 + + + org.apache.httpcomponents.core5 + httpcore5-h2 + + + + org.jetbrains.kotlin + kotlin-stdlib + + com.sap.cds diff --git a/app/single-tenant/central-space/demoapp/pom.xml b/app/single-tenant/central-space/demoapp/pom.xml index 942feaaa..73754708 100644 --- a/app/single-tenant/central-space/demoapp/pom.xml +++ b/app/single-tenant/central-space/demoapp/pom.xml @@ -22,17 +22,11 @@ ^9 - 4.2.17.Final - 1.85 - 9.48 2.22.2 1.17.1 - 1.65.0 1.6.3 10.1.59 5.6.4 - 5.4.3 - 2.4.20 https://nodejs.org/dist/ UTF-8 @@ -45,13 +39,6 @@ - - io.netty - netty-bom - ${netty.version} - pom - import - com.fasterxml.jackson jackson-bom @@ -66,20 +53,6 @@ pom import - - io.opentelemetry - opentelemetry-bom - ${opentelemetry.version} - pom - import - - - org.jetbrains.kotlin - kotlin-bom - ${kotlin.version} - pom - import - ch.qos.logback logback-classic @@ -110,31 +83,6 @@ httpclient5 ${httpclient5.version} - - org.apache.httpcomponents.core5 - httpcore5 - ${httpcore5.version} - - - org.apache.httpcomponents.core5 - httpcore5-h2 - ${httpcore5.version} - - - org.bouncycastle - bcprov-jdk18on - ${bouncycastle.version} - - - org.bouncycastle - bcpkix-jdk18on - ${bouncycastle.version} - - - com.nimbusds - nimbus-jose-jwt - ${nimbus-jose-jwt.version} - diff --git a/app/single-tenant/central-space/demoapp/srv/pom.xml b/app/single-tenant/central-space/demoapp/srv/pom.xml index 2a91cb15..016c4ce3 100644 --- a/app/single-tenant/central-space/demoapp/srv/pom.xml +++ b/app/single-tenant/central-space/demoapp/srv/pom.xml @@ -19,6 +19,22 @@ com.sap.cds sdm 1.10.1-SNAPSHOT + + + + org.apache.httpcomponents.core5 + httpcore5 + + + org.apache.httpcomponents.core5 + httpcore5-h2 + + + + org.jetbrains.kotlin + kotlin-stdlib + + @@ -33,6 +49,21 @@ com.sap.cds cds-adapter-odata-v4 runtime + + + + io.opentelemetry + opentelemetry-api + + + io.opentelemetry + opentelemetry-context + + + io.opentelemetry + opentelemetry-common + + diff --git a/app/single-tenant/personal-space/demoapp/pom.xml b/app/single-tenant/personal-space/demoapp/pom.xml index 942feaaa..7f332578 100644 --- a/app/single-tenant/personal-space/demoapp/pom.xml +++ b/app/single-tenant/personal-space/demoapp/pom.xml @@ -22,17 +22,11 @@ ^9 - 4.2.17.Final - 1.85 - 9.48 2.22.2 1.17.1 - 1.65.0 1.6.3 10.1.59 5.6.4 - 5.4.3 - 2.4.20 https://nodejs.org/dist/ UTF-8 @@ -45,14 +39,7 @@ - - io.netty - netty-bom - ${netty.version} - pom - import - - + com.fasterxml.jackson jackson-bom ${jackson-bom.version} @@ -66,21 +53,7 @@ pom import - - io.opentelemetry - opentelemetry-bom - ${opentelemetry.version} - pom - import - - - org.jetbrains.kotlin - kotlin-bom - ${kotlin.version} - pom - import - - + ch.qos.logback logback-classic ${logback.version} @@ -110,31 +83,6 @@ httpclient5 ${httpclient5.version} - - org.apache.httpcomponents.core5 - httpcore5 - ${httpcore5.version} - - - org.apache.httpcomponents.core5 - httpcore5-h2 - ${httpcore5.version} - - - org.bouncycastle - bcprov-jdk18on - ${bouncycastle.version} - - - org.bouncycastle - bcpkix-jdk18on - ${bouncycastle.version} - - - com.nimbusds - nimbus-jose-jwt - ${nimbus-jose-jwt.version} - diff --git a/app/single-tenant/personal-space/demoapp/srv/pom.xml b/app/single-tenant/personal-space/demoapp/srv/pom.xml index 1a18bebd..45160630 100644 --- a/app/single-tenant/personal-space/demoapp/srv/pom.xml +++ b/app/single-tenant/personal-space/demoapp/srv/pom.xml @@ -19,6 +19,22 @@ com.sap.cds sdm 1.0.0-RC1 + + + + org.apache.httpcomponents.core5 + httpcore5 + + + org.apache.httpcomponents.core5 + httpcore5-h2 + + + + org.jetbrains.kotlin + kotlin-stdlib + + @@ -33,6 +49,21 @@ com.sap.cds cds-adapter-odata-v4 runtime + + + + io.opentelemetry + opentelemetry-api + + + io.opentelemetry + opentelemetry-context + + + io.opentelemetry + opentelemetry-common + + From 4ce2b2fc7aaa2c83f96c2900f66157424eee7d22 Mon Sep 17 00:00:00 2001 From: Ankush Kumar Garg Date: Tue, 15 Sep 2026 14:17:50 +0530 Subject: [PATCH 11/20] issue fixes --- .../cloud-cap-samples-java/app/package.json | 4 ++++ .../central-space/cloud-cap-samples-java/pom.xml | 12 ++++++++++++ .../cloud-cap-samples-java/app/package.json | 4 ++++ .../personal-space/cloud-cap-samples-java/pom.xml | 12 ++++++++++++ .../central-space/demoapp/app/package.json | 4 ++++ app/single-tenant/central-space/demoapp/pom.xml | 12 ++++++++++++ .../personal-space/demoapp/app/package.json | 4 ++++ app/single-tenant/personal-space/demoapp/pom.xml | 12 ++++++++++++ 8 files changed, 64 insertions(+) diff --git a/app/multi-tenant/central-space/cloud-cap-samples-java/app/package.json b/app/multi-tenant/central-space/cloud-cap-samples-java/app/package.json index 1c66f05b..a9195b1c 100644 --- a/app/multi-tenant/central-space/cloud-cap-samples-java/app/package.json +++ b/app/multi-tenant/central-space/cloud-cap-samples-java/app/package.json @@ -3,6 +3,10 @@ "dependencies": { "@sap/approuter": "23.0.0" }, + "overrides": { + "fast-uri": "3.1.8", + "decode-uri-component": "0.5.0" + }, "scripts": { "start": "node node_modules/@sap/approuter/approuter.js" } diff --git a/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml b/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml index 7dec28af..1ed6b3b9 100644 --- a/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml +++ b/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml @@ -37,6 +37,8 @@ 5.6.4 5.4.3 2.4.20 + 5.5.0 + 33.7.1-jre 2.29.7 ^9 @@ -117,6 +119,16 @@ httpcore5-h2 ${httpcore5.version} + + com.squareup.okhttp3 + okhttp + ${okhttp.version} + + + com.google.guava + guava + ${guava.version} + diff --git a/app/multi-tenant/personal-space/cloud-cap-samples-java/app/package.json b/app/multi-tenant/personal-space/cloud-cap-samples-java/app/package.json index 1c66f05b..a9195b1c 100644 --- a/app/multi-tenant/personal-space/cloud-cap-samples-java/app/package.json +++ b/app/multi-tenant/personal-space/cloud-cap-samples-java/app/package.json @@ -3,6 +3,10 @@ "dependencies": { "@sap/approuter": "23.0.0" }, + "overrides": { + "fast-uri": "3.1.8", + "decode-uri-component": "0.5.0" + }, "scripts": { "start": "node node_modules/@sap/approuter/approuter.js" } diff --git a/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml b/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml index f28432d2..8743579c 100644 --- a/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml +++ b/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml @@ -37,6 +37,8 @@ 5.6.4 5.4.3 2.4.20 + 5.5.0 + 33.7.1-jre 2.29.7 ^9 @@ -117,6 +119,16 @@ httpcore5-h2 ${httpcore5.version} + + com.squareup.okhttp3 + okhttp + ${okhttp.version} + + + com.google.guava + guava + ${guava.version} + diff --git a/app/single-tenant/central-space/demoapp/app/package.json b/app/single-tenant/central-space/demoapp/app/package.json index 1c66f05b..a9195b1c 100644 --- a/app/single-tenant/central-space/demoapp/app/package.json +++ b/app/single-tenant/central-space/demoapp/app/package.json @@ -3,6 +3,10 @@ "dependencies": { "@sap/approuter": "23.0.0" }, + "overrides": { + "fast-uri": "3.1.8", + "decode-uri-component": "0.5.0" + }, "scripts": { "start": "node node_modules/@sap/approuter/approuter.js" } diff --git a/app/single-tenant/central-space/demoapp/pom.xml b/app/single-tenant/central-space/demoapp/pom.xml index 73754708..cb945cff 100644 --- a/app/single-tenant/central-space/demoapp/pom.xml +++ b/app/single-tenant/central-space/demoapp/pom.xml @@ -27,6 +27,8 @@ 1.6.3 10.1.59 5.6.4 + 5.5.0 + 33.7.1-jre https://nodejs.org/dist/ UTF-8 @@ -83,6 +85,16 @@ httpclient5 ${httpclient5.version} + + com.squareup.okhttp3 + okhttp + ${okhttp.version} + + + com.google.guava + guava + ${guava.version} + diff --git a/app/single-tenant/personal-space/demoapp/app/package.json b/app/single-tenant/personal-space/demoapp/app/package.json index 1c66f05b..a9195b1c 100644 --- a/app/single-tenant/personal-space/demoapp/app/package.json +++ b/app/single-tenant/personal-space/demoapp/app/package.json @@ -3,6 +3,10 @@ "dependencies": { "@sap/approuter": "23.0.0" }, + "overrides": { + "fast-uri": "3.1.8", + "decode-uri-component": "0.5.0" + }, "scripts": { "start": "node node_modules/@sap/approuter/approuter.js" } diff --git a/app/single-tenant/personal-space/demoapp/pom.xml b/app/single-tenant/personal-space/demoapp/pom.xml index 7f332578..f1b24868 100644 --- a/app/single-tenant/personal-space/demoapp/pom.xml +++ b/app/single-tenant/personal-space/demoapp/pom.xml @@ -27,6 +27,8 @@ 1.6.3 10.1.59 5.6.4 + 5.5.0 + 33.7.1-jre https://nodejs.org/dist/ UTF-8 @@ -83,6 +85,16 @@ httpclient5 ${httpclient5.version} + + com.squareup.okhttp3 + okhttp + ${okhttp.version} + + + com.google.guava + guava + ${guava.version} + From b132047f9e028268db8e3812f4f202380c8d162e Mon Sep 17 00:00:00 2001 From: Ankush Kumar Garg Date: Tue, 15 Sep 2026 20:38:43 +0530 Subject: [PATCH 12/20] black duck changes --- .../cloud-cap-samples-java/pom.xml | 2 +- .../cloud-cap-samples-java/pom.xml | 2 +- .../central-space/demoapp/pom.xml | 37 +++++++++++++------ .../central-space/demoapp/srv/pom.xml | 3 +- .../personal-space/demoapp/pom.xml | 37 +++++++++++++------ .../personal-space/demoapp/srv/pom.xml | 3 +- 6 files changed, 58 insertions(+), 26 deletions(-) diff --git a/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml b/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml index 1ed6b3b9..a8936954 100644 --- a/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml +++ b/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml @@ -24,7 +24,7 @@ 21 4.3.0 - 5.12.0 + 5.34.0 3.5.0 3.8.3 diff --git a/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml b/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml index 8743579c..5b7ec562 100644 --- a/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml +++ b/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml @@ -24,7 +24,7 @@ 21 4.3.0 - 5.12.0 + 5.34.0 3.5.0 3.8.3 diff --git a/app/single-tenant/central-space/demoapp/pom.xml b/app/single-tenant/central-space/demoapp/pom.xml index cb945cff..483e033a 100644 --- a/app/single-tenant/central-space/demoapp/pom.xml +++ b/app/single-tenant/central-space/demoapp/pom.xml @@ -17,16 +17,17 @@ 21 - 4.3.0 - 3.5.16 + 5.0.2 + 4.1.1 ^9 - 2.22.2 1.17.1 1.6.3 - 10.1.59 + 11.0.25 5.6.4 + 2.22.2 + 3.2.2 5.5.0 33.7.1-jre @@ -41,13 +42,6 @@ - - com.fasterxml.jackson - jackson-bom - ${jackson-bom.version} - pom - import - io.micrometer micrometer-bom @@ -95,6 +89,27 @@ guava ${guava.version} + + com.fasterxml.jackson.core + jackson-databind + ${jackson-databind.version} + + + + tools.jackson.core + jackson-core + ${jackson3.version} + + + tools.jackson.core + jackson-databind + ${jackson3.version} + + + tools.jackson.core + jackson-annotations + ${jackson3.version} + diff --git a/app/single-tenant/central-space/demoapp/srv/pom.xml b/app/single-tenant/central-space/demoapp/srv/pom.xml index 016c4ce3..4afc1da5 100644 --- a/app/single-tenant/central-space/demoapp/srv/pom.xml +++ b/app/single-tenant/central-space/demoapp/srv/pom.xml @@ -140,10 +140,11 @@ cds.install-cdsdk - install-cdsdk + npm ${cdsdk-global} + install @sap/cds-dk@${cds.install-cdsdk.version} --no-save diff --git a/app/single-tenant/personal-space/demoapp/pom.xml b/app/single-tenant/personal-space/demoapp/pom.xml index f1b24868..0c6add8a 100644 --- a/app/single-tenant/personal-space/demoapp/pom.xml +++ b/app/single-tenant/personal-space/demoapp/pom.xml @@ -17,16 +17,17 @@ 21 - 4.3.0 - 3.5.16 + 5.0.2 + 4.1.1 ^9 - 2.22.2 1.17.1 1.6.3 - 10.1.59 + 11.0.25 5.6.4 + 2.22.2 + 3.2.2 5.5.0 33.7.1-jre @@ -42,13 +43,6 @@ - com.fasterxml.jackson - jackson-bom - ${jackson-bom.version} - pom - import - - io.micrometer micrometer-bom ${micrometer.version} @@ -95,6 +89,27 @@ guava ${guava.version} + + com.fasterxml.jackson.core + jackson-databind + ${jackson-databind.version} + + + + tools.jackson.core + jackson-core + ${jackson3.version} + + + tools.jackson.core + jackson-databind + ${jackson3.version} + + + tools.jackson.core + jackson-annotations + ${jackson3.version} + diff --git a/app/single-tenant/personal-space/demoapp/srv/pom.xml b/app/single-tenant/personal-space/demoapp/srv/pom.xml index 45160630..afb0976c 100644 --- a/app/single-tenant/personal-space/demoapp/srv/pom.xml +++ b/app/single-tenant/personal-space/demoapp/srv/pom.xml @@ -140,10 +140,11 @@ cds.install-cdsdk - install-cdsdk + npm ${cdsdk-global} + install @sap/cds-dk@${cds.install-cdsdk.version} --no-save From 7477a60dde19430de177f060387e6aeeb5e988fe Mon Sep 17 00:00:00 2001 From: Ankush Kumar Garg Date: Tue, 15 Sep 2026 20:48:54 +0530 Subject: [PATCH 13/20] fix maven version --- .github/workflows/internalArticatory.yml | 2 +- .github/workflows/main-build.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/internalArticatory.yml b/.github/workflows/internalArticatory.yml index d1c7146a..ca431565 100644 --- a/.github/workflows/internalArticatory.yml +++ b/.github/workflows/internalArticatory.yml @@ -2,7 +2,7 @@ name: Internal Artifactory snapshot deploy env: JAVA_VERSION: '21' - MAVEN_VERSION: '3.6.3' + MAVEN_VERSION: '3.9.16' ARTIFACTORY_URL: ${{ secrets.ARTIFACTORY_URL }} on: diff --git a/.github/workflows/main-build.yml b/.github/workflows/main-build.yml index 324e6595..299d83c8 100644 --- a/.github/workflows/main-build.yml +++ b/.github/workflows/main-build.yml @@ -2,7 +2,7 @@ name: Main build and snapshot deploy env: JAVA_VERSION: '21' - MAVEN_VERSION: '3.6.3' + MAVEN_VERSION: '3.9.16' on: push: From e432f21b6a93a072be0bb2bcd2115fbd3a3a9491 Mon Sep 17 00:00:00 2001 From: Ankush Kumar Garg Date: Tue, 15 Sep 2026 21:25:57 +0530 Subject: [PATCH 14/20] more issue fix --- .../central-space/cloud-cap-samples-java/app/package.json | 4 +++- .../personal-space/cloud-cap-samples-java/app/package.json | 4 +++- app/single-tenant/central-space/demoapp/app/package.json | 4 +++- app/single-tenant/central-space/demoapp/pom.xml | 5 +++++ app/single-tenant/personal-space/demoapp/app/package.json | 4 +++- app/single-tenant/personal-space/demoapp/pom.xml | 5 +++++ 6 files changed, 22 insertions(+), 4 deletions(-) diff --git a/app/multi-tenant/central-space/cloud-cap-samples-java/app/package.json b/app/multi-tenant/central-space/cloud-cap-samples-java/app/package.json index a9195b1c..f99d83a0 100644 --- a/app/multi-tenant/central-space/cloud-cap-samples-java/app/package.json +++ b/app/multi-tenant/central-space/cloud-cap-samples-java/app/package.json @@ -5,7 +5,9 @@ }, "overrides": { "fast-uri": "3.1.8", - "decode-uri-component": "0.5.0" + "decode-uri-component": "0.5.0", + "ws": "7.5.13", + "moment": "2.31.0" }, "scripts": { "start": "node node_modules/@sap/approuter/approuter.js" diff --git a/app/multi-tenant/personal-space/cloud-cap-samples-java/app/package.json b/app/multi-tenant/personal-space/cloud-cap-samples-java/app/package.json index a9195b1c..f99d83a0 100644 --- a/app/multi-tenant/personal-space/cloud-cap-samples-java/app/package.json +++ b/app/multi-tenant/personal-space/cloud-cap-samples-java/app/package.json @@ -5,7 +5,9 @@ }, "overrides": { "fast-uri": "3.1.8", - "decode-uri-component": "0.5.0" + "decode-uri-component": "0.5.0", + "ws": "7.5.13", + "moment": "2.31.0" }, "scripts": { "start": "node node_modules/@sap/approuter/approuter.js" diff --git a/app/single-tenant/central-space/demoapp/app/package.json b/app/single-tenant/central-space/demoapp/app/package.json index a9195b1c..f99d83a0 100644 --- a/app/single-tenant/central-space/demoapp/app/package.json +++ b/app/single-tenant/central-space/demoapp/app/package.json @@ -5,7 +5,9 @@ }, "overrides": { "fast-uri": "3.1.8", - "decode-uri-component": "0.5.0" + "decode-uri-component": "0.5.0", + "ws": "7.5.13", + "moment": "2.31.0" }, "scripts": { "start": "node node_modules/@sap/approuter/approuter.js" diff --git a/app/single-tenant/central-space/demoapp/pom.xml b/app/single-tenant/central-space/demoapp/pom.xml index 483e033a..fb069318 100644 --- a/app/single-tenant/central-space/demoapp/pom.xml +++ b/app/single-tenant/central-space/demoapp/pom.xml @@ -89,6 +89,11 @@ guava ${guava.version} + + com.fasterxml.jackson.core + jackson-core + ${jackson-databind.version} + com.fasterxml.jackson.core jackson-databind diff --git a/app/single-tenant/personal-space/demoapp/app/package.json b/app/single-tenant/personal-space/demoapp/app/package.json index a9195b1c..f99d83a0 100644 --- a/app/single-tenant/personal-space/demoapp/app/package.json +++ b/app/single-tenant/personal-space/demoapp/app/package.json @@ -5,7 +5,9 @@ }, "overrides": { "fast-uri": "3.1.8", - "decode-uri-component": "0.5.0" + "decode-uri-component": "0.5.0", + "ws": "7.5.13", + "moment": "2.31.0" }, "scripts": { "start": "node node_modules/@sap/approuter/approuter.js" diff --git a/app/single-tenant/personal-space/demoapp/pom.xml b/app/single-tenant/personal-space/demoapp/pom.xml index 0c6add8a..cd26a01a 100644 --- a/app/single-tenant/personal-space/demoapp/pom.xml +++ b/app/single-tenant/personal-space/demoapp/pom.xml @@ -89,6 +89,11 @@ guava ${guava.version} + + com.fasterxml.jackson.core + jackson-core + ${jackson-databind.version} + com.fasterxml.jackson.core jackson-databind From 9465f74dc2d550fa337edb7442aed96d6c903637 Mon Sep 17 00:00:00 2001 From: Ankush Kumar Garg Date: Wed, 16 Sep 2026 10:19:13 +0530 Subject: [PATCH 15/20] black duck fix --- .../cloud-cap-samples-java/pom.xml | 19 +++++++++++++++++++ .../cloud-cap-samples-java/pom.xml | 19 +++++++++++++++++++ 2 files changed, 38 insertions(+) diff --git a/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml b/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml index a8936954..33f8faec 100644 --- a/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml +++ b/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml @@ -36,6 +36,10 @@ 10.1.59 5.6.4 5.4.3 + 4.2.18.Final + 2.5.0 + 9.48 + 3.8.7 2.4.20 5.5.0 33.7.1-jre @@ -129,6 +133,21 @@ guava ${guava.version} + + org.hdrhistogram + HdrHistogram + ${hdrhistogram.version} + + + com.nimbusds + nimbus-jose-jwt + ${nimbus-jose-jwt.version} + + + io.projectreactor + reactor-core + ${reactor-core.version} + diff --git a/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml b/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml index 5b7ec562..85da5655 100644 --- a/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml +++ b/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml @@ -36,6 +36,10 @@ 10.1.59 5.6.4 5.4.3 + 4.2.18.Final + 2.5.0 + 9.48 + 3.8.7 2.4.20 5.5.0 33.7.1-jre @@ -129,6 +133,21 @@ guava ${guava.version} + + org.hdrhistogram + HdrHistogram + ${hdrhistogram.version} + + + com.nimbusds + nimbus-jose-jwt + ${nimbus-jose-jwt.version} + + + io.projectreactor + reactor-core + ${reactor-core.version} + From 6d9a393de0e0b93c22d58a242397cf8e8827a7d3 Mon Sep 17 00:00:00 2001 From: Ankush Kumar Garg Date: Wed, 16 Sep 2026 10:27:41 +0530 Subject: [PATCH 16/20] remove unavailable version --- .../central-space/cloud-cap-samples-java/pom.xml | 6 ------ .../personal-space/cloud-cap-samples-java/pom.xml | 6 ------ 2 files changed, 12 deletions(-) diff --git a/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml b/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml index 33f8faec..47ca8f02 100644 --- a/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml +++ b/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml @@ -37,7 +37,6 @@ 5.6.4 5.4.3 4.2.18.Final - 2.5.0 9.48 3.8.7 2.4.20 @@ -133,11 +132,6 @@ guava ${guava.version} - - org.hdrhistogram - HdrHistogram - ${hdrhistogram.version} - com.nimbusds nimbus-jose-jwt diff --git a/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml b/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml index 85da5655..5f515c5e 100644 --- a/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml +++ b/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml @@ -37,7 +37,6 @@ 5.6.4 5.4.3 4.2.18.Final - 2.5.0 9.48 3.8.7 2.4.20 @@ -133,11 +132,6 @@ guava ${guava.version} - - org.hdrhistogram - HdrHistogram - ${hdrhistogram.version} - com.nimbusds nimbus-jose-jwt From 79a46da697a3f326a0dee4b472bf88b4926dcdc4 Mon Sep 17 00:00:00 2001 From: Ankush Kumar Garg Date: Wed, 16 Sep 2026 13:24:33 +0530 Subject: [PATCH 17/20] more changes --- .../central-space/cloud-cap-samples-java/srv/pom.xml | 8 ++++++++ .../personal-space/cloud-cap-samples-java/srv/pom.xml | 8 ++++++++ 2 files changed, 16 insertions(+) diff --git a/app/multi-tenant/central-space/cloud-cap-samples-java/srv/pom.xml b/app/multi-tenant/central-space/cloud-cap-samples-java/srv/pom.xml index ff3aa492..a19119ab 100644 --- a/app/multi-tenant/central-space/cloud-cap-samples-java/srv/pom.xml +++ b/app/multi-tenant/central-space/cloud-cap-samples-java/srv/pom.xml @@ -172,6 +172,14 @@ org.springframework.boot spring-boot-starter-actuator + + + + org.hdrhistogram + HdrHistogram + + diff --git a/app/multi-tenant/personal-space/cloud-cap-samples-java/srv/pom.xml b/app/multi-tenant/personal-space/cloud-cap-samples-java/srv/pom.xml index 24c8b308..426c2925 100644 --- a/app/multi-tenant/personal-space/cloud-cap-samples-java/srv/pom.xml +++ b/app/multi-tenant/personal-space/cloud-cap-samples-java/srv/pom.xml @@ -172,6 +172,14 @@ org.springframework.boot spring-boot-starter-actuator + + + + org.hdrhistogram + HdrHistogram + + From c006f1fd45b6443755b81a5a516caf9b602626a6 Mon Sep 17 00:00:00 2001 From: Ankush Kumar Garg Date: Wed, 16 Sep 2026 14:21:26 +0530 Subject: [PATCH 18/20] blackduck issues fix --- .../cloud-cap-samples-java/mtx/sidecar/package.json | 4 +++- app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml | 3 ++- .../central-space/cloud-cap-samples-java/srv/pom.xml | 2 +- .../cloud-cap-samples-java/mtx/sidecar/package.json | 4 +++- .../personal-space/cloud-cap-samples-java/pom.xml | 3 ++- .../personal-space/cloud-cap-samples-java/srv/pom.xml | 2 +- 6 files changed, 12 insertions(+), 6 deletions(-) diff --git a/app/multi-tenant/central-space/cloud-cap-samples-java/mtx/sidecar/package.json b/app/multi-tenant/central-space/cloud-cap-samples-java/mtx/sidecar/package.json index e1bff480..98bb7c04 100644 --- a/app/multi-tenant/central-space/cloud-cap-samples-java/mtx/sidecar/package.json +++ b/app/multi-tenant/central-space/cloud-cap-samples-java/mtx/sidecar/package.json @@ -23,6 +23,8 @@ "build": "cds build ../.. --for mtx-sidecar --production && cd gen && npm install" }, "overrides": { - "commander": "2.20.3" + "commander": "2.20.3", + "semver": "^7.8.5", + "debug": "^4.4.3" } } \ No newline at end of file diff --git a/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml b/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml index 47ca8f02..0fe55162 100644 --- a/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml +++ b/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml @@ -23,7 +23,7 @@ 21 - 4.3.0 + 4.9.4 5.34.0 3.5.0 3.8.3 @@ -43,6 +43,7 @@ 5.5.0 33.7.1-jre 2.29.7 + 2.4.240 ^9 diff --git a/app/multi-tenant/central-space/cloud-cap-samples-java/srv/pom.xml b/app/multi-tenant/central-space/cloud-cap-samples-java/srv/pom.xml index a19119ab..77a4717a 100644 --- a/app/multi-tenant/central-space/cloud-cap-samples-java/srv/pom.xml +++ b/app/multi-tenant/central-space/cloud-cap-samples-java/srv/pom.xml @@ -50,7 +50,7 @@ com.sap.cds cds-feature-mt - 4.3.0 + 4.9.4 com.sap.cds diff --git a/app/multi-tenant/personal-space/cloud-cap-samples-java/mtx/sidecar/package.json b/app/multi-tenant/personal-space/cloud-cap-samples-java/mtx/sidecar/package.json index f45fd29e..bfbf1eb7 100644 --- a/app/multi-tenant/personal-space/cloud-cap-samples-java/mtx/sidecar/package.json +++ b/app/multi-tenant/personal-space/cloud-cap-samples-java/mtx/sidecar/package.json @@ -23,6 +23,8 @@ "build": "cds build ../.. --for mtx-sidecar --production && cd gen && npm install" }, "overrides": { - "commander": "2.20.3" + "commander": "2.20.3", + "semver": "^7.8.5", + "debug": "^4.4.3" } } diff --git a/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml b/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml index 5f515c5e..1a8fc942 100644 --- a/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml +++ b/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml @@ -23,7 +23,7 @@ 21 - 4.3.0 + 4.9.4 5.34.0 3.5.0 3.8.3 @@ -43,6 +43,7 @@ 5.5.0 33.7.1-jre 2.29.7 + 2.4.240 ^9 diff --git a/app/multi-tenant/personal-space/cloud-cap-samples-java/srv/pom.xml b/app/multi-tenant/personal-space/cloud-cap-samples-java/srv/pom.xml index 426c2925..07db3358 100644 --- a/app/multi-tenant/personal-space/cloud-cap-samples-java/srv/pom.xml +++ b/app/multi-tenant/personal-space/cloud-cap-samples-java/srv/pom.xml @@ -50,7 +50,7 @@ com.sap.cds cds-feature-mt - 4.3.0 + 4.9.4 com.sap.cds From de7c6062432e9a863d7d7d2bb2af75661835b3c0 Mon Sep 17 00:00:00 2001 From: Ankush Kumar Garg Date: Wed, 16 Sep 2026 18:09:50 +0530 Subject: [PATCH 19/20] version fixes --- .../cloud-cap-samples-java/pom.xml | 38 ------------------- .../cloud-cap-samples-java/pom.xml | 38 ------------------- .../central-space/demoapp/pom.xml | 30 --------------- .../personal-space/demoapp/pom.xml | 23 ----------- 4 files changed, 129 deletions(-) diff --git a/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml b/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml index 0fe55162..96c86f62 100644 --- a/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml +++ b/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml @@ -30,16 +30,12 @@ 2.22.2 - 1.17.1 1.65.0 1.6.3 - 10.1.59 - 5.6.4 5.4.3 4.2.18.Final 9.48 3.8.7 - 2.4.20 5.5.0 33.7.1-jre 2.29.7 @@ -62,13 +58,6 @@ pom import - - io.micrometer - micrometer-bom - ${micrometer.version} - pom - import - io.opentelemetry opentelemetry-bom @@ -76,13 +65,6 @@ pom import - - org.jetbrains.kotlin - kotlin-bom - ${kotlin.version} - pom - import - ch.qos.logback logback-classic @@ -93,26 +75,6 @@ logback-core ${logback.version} - - org.apache.tomcat.embed - tomcat-embed-core - ${tomcat.version} - - - org.apache.tomcat.embed - tomcat-embed-el - ${tomcat.version} - - - org.apache.tomcat.embed - tomcat-embed-websocket - ${tomcat.version} - - - org.apache.httpcomponents.client5 - httpclient5 - ${httpclient5.version} - org.apache.httpcomponents.core5 httpcore5 diff --git a/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml b/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml index 1a8fc942..75ea7ea5 100644 --- a/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml +++ b/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml @@ -30,16 +30,12 @@ 2.22.2 - 1.17.1 1.65.0 1.6.3 - 10.1.59 - 5.6.4 5.4.3 4.2.18.Final 9.48 3.8.7 - 2.4.20 5.5.0 33.7.1-jre 2.29.7 @@ -62,13 +58,6 @@ pom import - - io.micrometer - micrometer-bom - ${micrometer.version} - pom - import - io.opentelemetry opentelemetry-bom @@ -76,13 +65,6 @@ pom import - - org.jetbrains.kotlin - kotlin-bom - ${kotlin.version} - pom - import - ch.qos.logback logback-classic @@ -93,26 +75,6 @@ logback-core ${logback.version} - - org.apache.tomcat.embed - tomcat-embed-core - ${tomcat.version} - - - org.apache.tomcat.embed - tomcat-embed-el - ${tomcat.version} - - - org.apache.tomcat.embed - tomcat-embed-websocket - ${tomcat.version} - - - org.apache.httpcomponents.client5 - httpclient5 - ${httpclient5.version} - org.apache.httpcomponents.core5 httpcore5 diff --git a/app/single-tenant/central-space/demoapp/pom.xml b/app/single-tenant/central-space/demoapp/pom.xml index fb069318..03df0d54 100644 --- a/app/single-tenant/central-space/demoapp/pom.xml +++ b/app/single-tenant/central-space/demoapp/pom.xml @@ -22,10 +22,7 @@ ^9 - 1.17.1 1.6.3 - 11.0.25 - 5.6.4 2.22.2 3.2.2 5.5.0 @@ -42,13 +39,6 @@ - - io.micrometer - micrometer-bom - ${micrometer.version} - pom - import - ch.qos.logback logback-classic @@ -59,26 +49,6 @@ logback-core ${logback.version} - - org.apache.tomcat.embed - tomcat-embed-core - ${tomcat.version} - - - org.apache.tomcat.embed - tomcat-embed-el - ${tomcat.version} - - - org.apache.tomcat.embed - tomcat-embed-websocket - ${tomcat.version} - - - org.apache.httpcomponents.client5 - httpclient5 - ${httpclient5.version} - com.squareup.okhttp3 okhttp diff --git a/app/single-tenant/personal-space/demoapp/pom.xml b/app/single-tenant/personal-space/demoapp/pom.xml index cd26a01a..1cf8dc3a 100644 --- a/app/single-tenant/personal-space/demoapp/pom.xml +++ b/app/single-tenant/personal-space/demoapp/pom.xml @@ -22,10 +22,7 @@ ^9 - 1.17.1 1.6.3 - 11.0.25 - 5.6.4 2.22.2 3.2.2 5.5.0 @@ -59,26 +56,6 @@ logback-core ${logback.version} - - org.apache.tomcat.embed - tomcat-embed-core - ${tomcat.version} - - - org.apache.tomcat.embed - tomcat-embed-el - ${tomcat.version} - - - org.apache.tomcat.embed - tomcat-embed-websocket - ${tomcat.version} - - - org.apache.httpcomponents.client5 - httpclient5 - ${httpclient5.version} - com.squareup.okhttp3 okhttp From 116fd8b1db0bc7de39c234408ce47d2287676e0c Mon Sep 17 00:00:00 2001 From: Ankush Kumar Garg Date: Thu, 17 Sep 2026 10:19:00 +0530 Subject: [PATCH 20/20] black duck issue fix --- .../cloud-cap-samples-java/pom.xml | 30 +++++++++++++++++++ .../cloud-cap-samples-java/pom.xml | 30 +++++++++++++++++++ .../central-space/demoapp/pom.xml | 16 ++++++++++ .../personal-space/demoapp/pom.xml | 21 +++++++++++-- 4 files changed, 95 insertions(+), 2 deletions(-) diff --git a/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml b/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml index 96c86f62..85d8f4a5 100644 --- a/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml +++ b/app/multi-tenant/central-space/cloud-cap-samples-java/pom.xml @@ -40,6 +40,9 @@ 33.7.1-jre 2.29.7 2.4.240 + 1.17.1 + 5.6.4 + 10.1.59 ^9 @@ -85,6 +88,11 @@ httpcore5-h2 ${httpcore5.version} + + org.apache.httpcomponents.client5 + httpclient5 + ${httpclient5.version} + com.squareup.okhttp3 okhttp @@ -105,6 +113,28 @@ reactor-core ${reactor-core.version} + + org.apache.tomcat.embed + tomcat-embed-core + ${tomcat.version} + + + org.apache.tomcat.embed + tomcat-embed-el + ${tomcat.version} + + + org.apache.tomcat.embed + tomcat-embed-websocket + ${tomcat.version} + + + io.micrometer + micrometer-bom + ${micrometer.version} + pom + import + diff --git a/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml b/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml index 75ea7ea5..f006a7af 100644 --- a/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml +++ b/app/multi-tenant/personal-space/cloud-cap-samples-java/pom.xml @@ -40,6 +40,9 @@ 33.7.1-jre 2.29.7 2.4.240 + 1.17.1 + 5.6.4 + 10.1.59 ^9 @@ -85,6 +88,11 @@ httpcore5-h2 ${httpcore5.version} + + org.apache.httpcomponents.client5 + httpclient5 + ${httpclient5.version} + com.squareup.okhttp3 okhttp @@ -105,6 +113,28 @@ reactor-core ${reactor-core.version} + + org.apache.tomcat.embed + tomcat-embed-core + ${tomcat.version} + + + org.apache.tomcat.embed + tomcat-embed-el + ${tomcat.version} + + + org.apache.tomcat.embed + tomcat-embed-websocket + ${tomcat.version} + + + io.micrometer + micrometer-bom + ${micrometer.version} + pom + import + diff --git a/app/single-tenant/central-space/demoapp/pom.xml b/app/single-tenant/central-space/demoapp/pom.xml index 03df0d54..c69cf1e9 100644 --- a/app/single-tenant/central-space/demoapp/pom.xml +++ b/app/single-tenant/central-space/demoapp/pom.xml @@ -27,6 +27,7 @@ 3.2.2 5.5.0 33.7.1-jre + 11.0.26 https://nodejs.org/dist/ UTF-8 @@ -85,6 +86,21 @@ jackson-annotations ${jackson3.version} + + org.apache.tomcat.embed + tomcat-embed-core + ${tomcat.version} + + + org.apache.tomcat.embed + tomcat-embed-el + ${tomcat.version} + + + org.apache.tomcat.embed + tomcat-embed-websocket + ${tomcat.version} + diff --git a/app/single-tenant/personal-space/demoapp/pom.xml b/app/single-tenant/personal-space/demoapp/pom.xml index 1cf8dc3a..f25cd77d 100644 --- a/app/single-tenant/personal-space/demoapp/pom.xml +++ b/app/single-tenant/personal-space/demoapp/pom.xml @@ -27,6 +27,8 @@ 3.2.2 5.5.0 33.7.1-jre + 1.17.1 + 11.0.26 https://nodejs.org/dist/ UTF-8 @@ -39,14 +41,14 @@ - + io.micrometer micrometer-bom ${micrometer.version} pom import - + ch.qos.logback logback-classic ${logback.version} @@ -92,6 +94,21 @@ jackson-annotations ${jackson3.version} + + org.apache.tomcat.embed + tomcat-embed-core + ${tomcat.version} + + + org.apache.tomcat.embed + tomcat-embed-el + ${tomcat.version} + + + org.apache.tomcat.embed + tomcat-embed-websocket + ${tomcat.version} +