diff --git a/sonarqube.yaml b/sonarqube.yaml index 08461cc29ae..873d500db6c 100644 --- a/sonarqube.yaml +++ b/sonarqube.yaml @@ -1,7 +1,7 @@ package: name: sonarqube version: "25.6.0.109173" - epoch: 0 + epoch: 1 description: SonarQube is an open source platform for continuous inspection of code quality (Community Build) copyright: - license: LGPL-3.0-or-later @@ -42,6 +42,8 @@ pipeline: tag: ${{package.version}} expected-commit: 1000fd8a984575bcddc80653398655ed48f39fd3 + - uses: maven/pombump + - uses: patch with: patches: sonar-eclipse-GHSA-vrpq-qp53-qv56.patch GHSA-hq9p-pm7w-8p54-remediation.patch diff --git a/sonarqube/pombump-deps.yaml b/sonarqube/pombump-deps.yaml new file mode 100644 index 00000000000..307574cf1fd --- /dev/null +++ b/sonarqube/pombump-deps.yaml @@ -0,0 +1,4 @@ +patches: + - groupId: commons-beanutils + artifactId: commons-beanutils + version: 1.11.0