EOL DEPENDENCY UPGRADE: minor upgrades — 5 packages (minor: 3 · patch: 2)

[campaigner-prod]

Summary: Security update — 5 packages upgraded (MINOR changes included)

Manifests changed:

• . (maven)

Updates

Package	From	To	Type	Vulnerabilities Fixed
com.beust:jcommander	1.35	1.82	minor	-
com.datadoghq:java-dogstatsd-client	2.10.5	2.13.1	minor	-
org.yaml:snakeyaml	2.0	2.5	minor	-
org.slf4j:slf4j-api	1.7.32	1.7.36	patch	-
org.slf4j:slf4j-jdk14	1.7.32	1.7.36	patch	-

Packages marked with "-" are updated due to dependency constraints.

---

Security Details

⚠️ Dependencies that have Reached EOL (3)

Dependency	Unsafe Version	EOL Date	New Version	Path
com.beust:jcommander	1.35	-	1.82	pom.xml
com.datadoghq:java-dogstatsd-client	2.10.5	Nov 19, 2025	2.13.1	pom.xml
org.slf4j:slf4j-api	1.7.32	-	1.7.36	pom.xml

---

Review Checklist

Standard review:

• Review changes for compatibility with your code
• Check for breaking changes in release notes
• Run tests locally or wait for CI

---

Update Mode: EOL Remediation

🤖 Generated by DataDog Automated Dependency Management System

[carlosroman]

Ignore as this breaks JdK 7 and JDK 8 support so is a no go.