From 09ef7ddc00a4eb690f98256acd78496b7c9b70ec Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 16 Mar 2026 14:02:59 +0000 Subject: [PATCH 1/3] Bump com.sun.xml.bind:jaxb-impl in /plugins/discovery-azure-classic Bumps com.sun.xml.bind:jaxb-impl from 4.0.6 to 4.0.7. --- updated-dependencies: - dependency-name: com.sun.xml.bind:jaxb-impl dependency-version: 4.0.7 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- plugins/discovery-azure-classic/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/plugins/discovery-azure-classic/build.gradle b/plugins/discovery-azure-classic/build.gradle index f4fc7be6de2f5..b0c0dc5f2035f 100644 --- a/plugins/discovery-azure-classic/build.gradle +++ b/plugins/discovery-azure-classic/build.gradle @@ -60,7 +60,7 @@ dependencies { api "com.sun.jersey:jersey-core:${versions.jersey}" api "com.sun.jersey:jersey-json:${versions.jersey}" api "org.codehaus.jettison:jettison:${versions.jettison}" - api 'com.sun.xml.bind:jaxb-impl:4.0.6' + api 'com.sun.xml.bind:jaxb-impl:4.0.7' // HACK: javax.xml.bind was removed from default modules in java 9, so we pull the api in here, // and allowlist this hack in JarHell From 067f3e6d3559f0bf189395ac38e3a1154564c195 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 16 Mar 2026 14:05:40 +0000 Subject: [PATCH 2/3] Updating SHAs Signed-off-by: dependabot[bot] --- .../discovery-azure-classic/licenses/jaxb-impl-4.0.6.jar.sha1 | 1 - .../discovery-azure-classic/licenses/jaxb-impl-4.0.7.jar.sha1 | 1 + 2 files changed, 1 insertion(+), 1 deletion(-) delete mode 100644 plugins/discovery-azure-classic/licenses/jaxb-impl-4.0.6.jar.sha1 create mode 100644 plugins/discovery-azure-classic/licenses/jaxb-impl-4.0.7.jar.sha1 diff --git a/plugins/discovery-azure-classic/licenses/jaxb-impl-4.0.6.jar.sha1 b/plugins/discovery-azure-classic/licenses/jaxb-impl-4.0.6.jar.sha1 deleted file mode 100644 index 332ae274fc618..0000000000000 --- a/plugins/discovery-azure-classic/licenses/jaxb-impl-4.0.6.jar.sha1 +++ /dev/null @@ -1 +0,0 @@ -e81f27d58c769414bbc1ce88ddfb2cf822c8fa20 \ No newline at end of file diff --git a/plugins/discovery-azure-classic/licenses/jaxb-impl-4.0.7.jar.sha1 b/plugins/discovery-azure-classic/licenses/jaxb-impl-4.0.7.jar.sha1 new file mode 100644 index 0000000000000..87b2a9b7d1dda --- /dev/null +++ b/plugins/discovery-azure-classic/licenses/jaxb-impl-4.0.7.jar.sha1 @@ -0,0 +1 @@ +58eef1bac3b2617da05d0d2b318b1a5050f47735 \ No newline at end of file From 096551f889bedabcd3ad8d6c3e527ca26e102952 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 16 Mar 2026 14:06:42 +0000 Subject: [PATCH 3/3] Update changelog Signed-off-by: dependabot[bot] --- CHANGELOG.md | 1 + 1 file changed, 1 insertion(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 81d29509ac65c..d24073786c307 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -74,6 +74,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), - Bump `org.jline:jline` from 3.30.6 to 4.0.0 ([#20800](https://github.com/opensearch-project/OpenSearch/pull/20800)) - Bump `com.netflix.nebula.ospackage-base` from 12.2.0 to 12.3.0 ([#20799](https://github.com/opensearch-project/OpenSearch/pull/20799)) - Bump `com.netflix.nebula:gradle-info-plugin` to 16.2.1 ([#20825](https://github.com/opensearch-project/OpenSearch/pull/20825)) +- Bump `com.sun.xml.bind:jaxb-impl` from 4.0.6 to 4.0.7 ([#20886](https://github.com/opensearch-project/OpenSearch/pull/20886)) ### Removed