Bump org.commonjava.util:partyline from 2.4 to 2.5

[dependabot]

Bumps org.commonjava.util:partyline from 2.4 to 2.5.

Release notes

Sourced from org.commonjava.util:partyline's releases.

partyline-2.5

What's Changed

🐛 Fixes / 🚀 Enhancements

• Add dependabot/release files by @​rnc in Commonjava/partyline#138
• Integrate shared workflows by @​patrikk0123 in Commonjava/partyline#148
• Prevent weft from major update by @​rnc in Commonjava/partyline#153

👒 Project Dependencies

• Bump byteman.version from 4.0.26 to 4.0.27 by @​dependabot[bot] in Commonjava/partyline#141
• Bump org.commonjava:commonjava from 22 to 23 by @​dependabot[bot] in Commonjava/partyline#152
• Bump org.apache.maven.plugins:maven-surefire-plugin from 2.19.1 to 3.6.0 by @​dependabot[bot] in Commonjava/partyline#149
• Bump org.commonjava.boms:web-commons-bom from 35-SNAPSHOT to 35 by @​dependabot[bot] in Commonjava/partyline#151
• Bump ch.qos.logback:logback-core from 1.2.9 to 1.5.34 in /examples/ispn-dir-copy by @​dependabot[bot] in Commonjava/partyline#146
• Bump ch.qos.logback:logback-classic from 1.2.3 to 1.2.13 in /examples/ispn-dir-copy by @​dependabot[bot] in Commonjava/partyline#120
• Bump org.commonjava.cdi.util:weft from 1.26 to 1.27 by @​dependabot[bot] in Commonjava/partyline#154

👒 CI Dependencies

• Bump s4u/maven-settings-action from 2.8.0 to 4.0.0 by @​dependabot[bot] in Commonjava/partyline#140
• Bump actions/checkout from 4 to 7 by @​dependabot[bot] in Commonjava/partyline#139
• Bump actions/setup-java from 3 to 5 by @​dependabot[bot] in Commonjava/partyline#143

New Contributors

• @​patrikk0123 made their first contribution in Commonjava/partyline#148

Full Changelog: Commonjava/partyline@partyline-2.4...partyline-2.5

Commits

• 886e27b [maven-release-plugin] prepare release partyline-2.5
• 0b438c8 Merge pull request #154 from Commonjava/dependabot/maven/org.commonjava.cdi.u...
• 952d1ea Bump org.commonjava.cdi.util:weft from 1.26 to 1.27
• fc8730e Merge pull request #153 from rnc/BR1
• 768802d Ignore the examples folder
• ec2a54b Prevent weft from major update
• a0123da Merge pull request #120 from Commonjava/dependabot/maven/examples/ispn-dir-co...
• 90e3551 Merge pull request #146 from Commonjava/dependabot/maven/examples/ispn-dir-co...
• 52113e3 Merge pull request #151 from Commonjava/dependabot/maven/org.commonjava.boms-...
• ef9694f Merge pull request #149 from Commonjava/dependabot/maven/org.apache.maven.plu...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Mend Scan Results

Status: ⚠️ Findings detected

⚠️ SCA findings detected

SCA scan output

Identified 113 dependencies

Detected 2 vulnerabilities (0 Critical, 0 High, 1 Medium, 1 Low)

+----------+----------------+---------------+-------------------------------------------------------------------------------------------------+
| SEVERITY |    LIBRARY     |      ID       |                                             TOP FIX                                             |
+----------+----------------+---------------+-------------------------------------------------------------------------------------------------+
| MEDIUM   | guava-19.0.jar | CVE-2023-2976 | Upgrade to version com.google.guava:guava:32.0.1-android,32.0.1-jre                             |
+----------+----------------+---------------+-------------------------------------------------------------------------------------------------+
| LOW      | guava-19.0.jar | CVE-2020-8908 | Upgrade to version com.google.guava:guava:32.0.0-android, https://github.com/google/guava.git - |
|          |                |               | v32.0.0                                                                                         |
+----------+----------------+---------------+-------------------------------------------------------------------------------------------------+


Paths at risk

P = policy violation
MSC = malicious vulnerability
CRITICAL/HIGH/MEDIUM/LOW = vulnerability severity

galley-caches-1.23-SNAPSHOT.pom
|-- galley-cache-path-mapped-1.23-SNAPSHOT.jar
	|-- path-mapped-pathdb-datastax-3.3.jar
		|-- cassandra-driver-core-3.12.1.jar
			|-- guava-19.0.jar [1 MEDIUM, 1 LOW]
		|-- cassandra-driver-mapping-3.12.1.jar
			|-- guava-19.0.jar [1 MEDIUM, 1 LOW]
	|-- path-mapped-storage-3.3.jar
		|-- s3-2.54.14.jar
			|-- aws-core-2.54.14.jar
				|-- guava-19.0.jar [1 MEDIUM, 1 LOW]
			|-- sdk-core-2.54.14.jar
				|-- guava-19.0.jar [1 MEDIUM, 1 LOW]


No Policy violations were detected

Project 'galley' was updated, for more information, visit the Mend platform: https://ibmets.whitesourcesoftware.com/app/orgs/Enterprise%20Applications/applications/summary?project=b669806f-110d-4010-ba08-c7a27f9371e0
Or the Core UI: https://ibmets.whitesourcesoftware.com/Wss/WSS.html#!project;token=d4f29335af524e7286ca3b1fdfd6774223cccd682b424dfd861c54be55307f9a

Mend AI scan succeeded.

Support Token: 3a892a968733043cdb1f70008c9c861de1789720648458

SAST scan output

*no findings*

Full logs and artifacts