From 9167330d0c107754e6e7497f82ceb0e8cc96b7fd Mon Sep 17 00:00:00 2001 From: Tobias Koch Date: Wed, 4 Feb 2026 08:09:01 +0100 Subject: [PATCH] upgrade vaadin to 24.9.10 (#1372) Co-authored-by: KochTobi --- datamanager-app/pom.xml | 4 - .../VariableLevelsInput.java | 3 +- datamanager-bom/pom.xml | 7 +- pgp-keys-override.list | 303 +++++++++--------- pom.xml | 4 +- 5 files changed, 164 insertions(+), 157 deletions(-) diff --git a/datamanager-app/pom.xml b/datamanager-app/pom.xml index 0fd8cfc659..89cf694912 100644 --- a/datamanager-app/pom.xml +++ b/datamanager-app/pom.xml @@ -168,10 +168,6 @@ com.mysql mysql-connector-j - - com.h2database - h2 - commons-io commons-io diff --git a/datamanager-app/src/main/java/life/qbic/datamanager/views/projects/project/experiments/experiment/components/experimentalvariable/VariableLevelsInput.java b/datamanager-app/src/main/java/life/qbic/datamanager/views/projects/project/experiments/experiment/components/experimentalvariable/VariableLevelsInput.java index 1049e5e034..27493ba1ab 100644 --- a/datamanager-app/src/main/java/life/qbic/datamanager/views/projects/project/experiments/experiment/components/experimentalvariable/VariableLevelsInput.java +++ b/datamanager-app/src/main/java/life/qbic/datamanager/views/projects/project/experiments/experiment/components/experimentalvariable/VariableLevelsInput.java @@ -498,7 +498,8 @@ public ShortcutRegistration addFocusShortcut(Key key, KeyModifier... keyModifier public Registration addFocusListener (ComponentEventListener> listener) { return levelValue.addFocusListener( - it -> listener.onComponentEvent(new FocusEvent<>(it.getSource(), it.isFromClient()))); + it -> listener.onComponentEvent( + new FocusEvent<>(it.getSource(), it.isFromClient(), it.isFromClient()))); } public boolean isEmpty() { diff --git a/datamanager-bom/pom.xml b/datamanager-bom/pom.xml index 74c2061a1c..75217bc8e6 100644 --- a/datamanager-bom/pom.xml +++ b/datamanager-bom/pom.xml @@ -20,7 +20,7 @@ https://sonarcloud.io qbicsoftware qbicsoftware_data-manager-app - 24.4.13 + 24.9.10 @@ -205,11 +205,6 @@ cache-api 1.1.1 - - com.h2database - h2 - [2.2.224,) - commons-io commons-io diff --git a/pgp-keys-override.list b/pgp-keys-override.list index 650e7e1e86..d2f32dd8eb 100644 --- a/pgp-keys-override.list +++ b/pgp-keys-override.list @@ -2,94 +2,192 @@ # groupId:artifactId:version = *,any,badSig,noKey,noSig # wildcards * are allowed in artifactId/version -com.github.package-url:packageurl-java:1.4.1 = 0x5D283C23D9D9DC2D9C2130E6AADF2C18DCF95764 +#com.github.package-url:packageurl-java:1.4.1 = 0x5D283C23D9D9DC2D9C2130E6AADF2C18DCF95764 # Cyclone DX for SBOMs -org.cyclonedx:cyclonedx-core-java:8.0.3 = 0x5D283C23D9D9DC2D9C2130E6AADF2C18DCF95764 +#org.cyclonedx:cyclonedx-core-java:8.0.3 = 0x5D283C23D9D9DC2D9C2130E6AADF2C18DCF95764 +org.cyclonedx:cyclonedx-core-java:jar:8.0.3 = 0x5D283C23D9D9DC2D9C2130E6AADF2C18DCF95764 +org.cyclonedx:cyclonedx-core-java:pom:8.0.3 = 0x5D283C23D9D9DC2D9C2130E6AADF2C18DCF95764 org.cyclonedx:cyclonedx-maven-plugin:2.8.0 = 0xFA77DCFEF2EE6EB2DEBEDD2C012579464D01C06A -# H2 database -com.h2database:h2:2.4.240 = 0xCF6FCDD747FD9C32304B180B58BD11D32974088F - # Distributed locking with shedlock net.javacrumbs.shedlock:*:* = 0x0E519FB002B9DE71010C6BA9BBF5AC5A3CDBFD37 -# We have not yet figured out from where this is pulled :( +# Unsigned runtime dep you must keep for now +javax.annotation:jsr250-api:pom:1.0 = noSig + +javax.inject:javax.inject:1 = noSig +javax.inject:javax.inject:jar:1 = noSig +net.rootdev:java-rdfa:pom:0.4.2 = noSig +net.rootdev:java-rdfa:jar:0.4.2 = noSig +org.jgroups:jgroups:pom:5.3.13.Final = noSig +org.jgroups:jgroups:jar:5.3.13.Final = noSig + + + +# We have not yet figured out from where this is pulled; probably pulled through vaadin io.smallrye:jandex:3.2.0 = badSig io.smallrye:jandex:3.2.0:pom = badSig +# Misc seen in log +com.ethlo.time:itu:jar:1.7.0 = 0xB286846C341BB72D1E5F85CAB460E7C4ED66826D #https://keyserver.ubuntu.com/pks/lookup?op=vindex&fingerprint=on&search=0xB286846C341BB72D1E5F85CAB460E7C4ED66826D +com.ethlo.time:itu:pom:1.7.0 = 0xB286846C341BB72D1E5F85CAB460E7C4ED66826D #https://keyserver.ubuntu.com/pks/lookup?op=vindex&fingerprint=on&search=0xB286846C341BB72D1E5F85CAB460E7C4ED66826D +com.github.andrewoma.dexx:collection:jar:0.7 =0x08D55F3D1993D63BF24FE3F008C9559A006FD974 #https://keyserver.ubuntu.com/pks/lookup?op=vindex&fingerprint=on&search=0x08C9559A006FD974 +com.github.andrewoma.dexx:collection:pom:0.7 =0x08D55F3D1993D63BF24FE3F008C9559A006FD974 #https://keyserver.ubuntu.com/pks/lookup?op=vindex&fingerprint=on&search=0x08C9559A006FD974 +com.github.fslev:json-compare:jar:6.12 = 0xDE81641E4B259D19CA96A45EC876E72938D88080 +com.github.fslev:json-compare:pom:6.12 = 0xDE81641E4B259D19CA96A45EC876E72938D88080 +com.github.oshi:oshi-core:jar:6.6.5 = 0x4103C1C3F8E51C6925B5CD346A1E81B00431AB9D +com.github.oshi:oshi-core:pom:6.6.5 = 0x4103C1C3F8E51C6925B5CD346A1E81B00431AB9D +com.github.package-url:packageurl-java:jar:1.4.1 = 0x5D283C23D9D9DC2D9C2130E6AADF2C18DCF95764 #https://keyserver.ubuntu.com/pks/lookup?op=vindex&fingerprint=on&search=0x5D283C23D9D9DC2D9C2130E6AADF2C18DCF95764 +com.github.package-url:packageurl-java:pom:1.4.1 = 0x5D283C23D9D9DC2D9C2130E6AADF2C18DCF95764 #https://keyserver.ubuntu.com/pks/lookup?op=vindex&fingerprint=on&search=0x5D283C23D9D9DC2D9C2130E6AADF2C18DCF95764 +com.helger.commons:ph-commons:jar:11.2.0 = 0x670BE7D076A0C89F5F07625AE57428DA9E879E7D +com.helger.commons:ph-commons:pom:11.2.0 = 0x670BE7D076A0C89F5F07625AE57428DA9E879E7D +com.hierynomus:asn-one:jar:0.6.0 = 0xB200B4AA914DE0340741F598EBE906E1F4ACA3B7 +com.hierynomus:asn-one:pom:0.6.0 = 0xB200B4AA914DE0340741F598EBE906E1F4ACA3B7 +com.networknt:json-schema-validator:jar:1.0.87 = 0xAEB1E1AEC035C66FA39589D13EFC46EE83C40224 #https://keyserver.ubuntu.com/pks/lookup?op=vindex&fingerprint=on&search=0xAEB1E1AEC035C66FA39589D13EFC46EE83C40224 +com.networknt:json-schema-validator:pom:1.0.87 = 0xAEB1E1AEC035C66FA39589D13EFC46EE83C40224 #https://keyserver.ubuntu.com/pks/lookup?op=vindex&fingerprint=on&search=0xAEB1E1AEC035C66FA39589D13EFC46EE83C40224 +com.nimbusds:content-type:jar:2.2 = 0x82F0964816AD7319CB0CCCF93EFD9D223D715E9A +com.nimbusds:content-type:pom:2.2 = 0x82F0964816AD7319CB0CCCF93EFD9D223D715E9A +com.nimbusds:lang-tag:jar:1.7 = 0x82F0964816AD7319CB0CCCF93EFD9D223D715E9A +com.nimbusds:lang-tag:pom:1.7 = 0x82F0964816AD7319CB0CCCF93EFD9D223D715E9A +com.nimbusds:nimbus-jose-jwt:jar:10.3.1 = 0x82F0964816AD7319CB0CCCF93EFD9D223D715E9A +com.nimbusds:nimbus-jose-jwt:jar:9.37.3 = 0x82F0964816AD7319CB0CCCF93EFD9D223D715E9A +com.nimbusds:nimbus-jose-jwt:jar:9.37.4 = 0x82F0964816AD7319CB0CCCF93EFD9D223D715E9A +com.nimbusds:nimbus-jose-jwt:pom:10.3.1 = 0x82F0964816AD7319CB0CCCF93EFD9D223D715E9A +com.nimbusds:nimbus-jose-jwt:pom:9.37.3=0x82F0964816AD7319CB0CCCF93EFD9D223D715E9A +com.nimbusds:nimbus-jose-jwt:pom:9.37.4 = 0x82F0964816AD7319CB0CCCF93EFD9D223D715E9A +com.nimbusds:oauth2-oidc-sdk:jar:9.43.6 = 0x82F0964816AD7319CB0CCCF93EFD9D223D715E9A +com.nimbusds:oauth2-oidc-sdk:pom:9.43.6 = 0x82F0964816AD7319CB0CCCF93EFD9D223D715E9A +de.dentrassi.crypto:pem-keystore:jar:3.0.0 = 0xCAFE8E040FD28E7873171932BBE1070F76B97956 +de.dentrassi.crypto:pem-keystore:pom:3.0.0 = 0xCAFE8E040FD28E7873171932BBE1070F76B97956 +io.github.erdtman:java-json-canonicalization:jar:1.1 = 0x4556208EBE484FBA3984DC3D3D4FA1A9DB2FB4F4 # JJCS. [oai_citation:15‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) +io.github.erdtman:java-json-canonicalization:pom:1.1 = 0x4556208EBE484FBA3984DC3D3D4FA1A9DB2FB4F4 # JJCS. [oai_citation:15‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) +io.github.hakky54:sslcontext-kickstart::jar:9.1.0 = 0xE5138A8E9F2E7E42D38B14D99AEE152CDCCEBFCB # sslcontext-kickstart. [oai_citation:14‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) +io.github.hakky54:sslcontext-kickstart:pom:9.1.0 = 0xE5138A8E9F2E7E42D38B14D99AEE152CDCCEBFCB # sslcontext-kickstart. [oai_citation:14‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) +io.methvin:directory-watcher:jar:0.19.0 = 0xAEE8A343247713A5A198640D4D1670765EF90EAB +io.methvin:directory-watcher:pom:0.19.0 = 0xAEE8A343247713A5A198640D4D1670765EF90EAB +io.perfmark:perfmark-api:jar:0.27.0 = 0xC6F7D1C804C821F49AF3BFC13AD93C3C677A106E +io.perfmark:perfmark-api:pom:0.27.0 = 0xC6F7D1C804C821F49AF3BFC13AD93C3C677A106E +io.swagger.core.v3:swagger-annotations-jakarta:jar:2.2.32 = 0x3E61D8C230332482009D7F0EDB901B24CAD38BC4 +io.swagger.core.v3:swagger-annotations-jakarta:pom:2.2.32 = 0x3E61D8C230332482009D7F0EDB901B24CAD38BC4 +io.swagger.core.v3:swagger-core-jakarta:jar:2.2.32 = 0x3E61D8C230332482009D7F0EDB901B24CAD38BC4 +io.swagger.core.v3:swagger-core-jakarta:pom:2.2.32 = 0x3E61D8C230332482009D7F0EDB901B24CAD38BC4 +io.swagger.core.v3:swagger-models-jakarta:jar:2.2.32 = 0x3E61D8C230332482009D7F0EDB901B24CAD38BC4 +io.swagger.core.v3:swagger-models-jakarta:pom:2.2.32 = 0x3E61D8C230332482009D7F0EDB901B24CAD38BC4 +javax.cache:cache-api:1.1.1 = 0xBE6B997EB563F4898C3C406B8DB9FA0B0718BBF9 +net.engio:mbassador:jar:1.3.2 = 0x5EAF6E9410A71E27B18EB3B90AC90C378C525192 +net.engio:mbassador:pom:1.3.2 =0x5EAF6E9410A71E27B18EB3B90AC90C378C525192 +net.lingala.zip4j:zip4j:jar:2.11.5 = 0x36F4C680FC3E50E14C90FCBFA0B475EFD9448513 +net.lingala.zip4j:zip4j:pom:2.11.5 = 0x36F4C680FC3E50E14C90FCBFA0B475EFD9448513 +org.ehcache:ehcache:3.10.9 = 0x7FCE178313EAC3BDFC4A75A95E1D8523FE7EAC7B +org.ehcache:ehcache:3.10.9:pom = 0x7FCE178313EAC3BDFC4A75A95E1D8523FE7EAC7B +org.jboss.forge.roaster:roaster-api:jar:2.30.1.Final = 0x001A438334F162E6AFB27F3BA9F900C1C0FE3ED9 +org.jboss.forge.roaster:roaster-api:pom:2.30.1.Final = 0x001A438334F162E6AFB27F3BA9F900C1C0FE3ED9 +org.jboss.forge.roaster:roaster-jdt:jar:2.30.1.Final = 0x001A438334F162E6AFB27F3BA9F900C1C0FE3ED9 +org.jboss.forge.roaster:roaster-jdt:pom:2.30.1.Final = 0x001A438334F162E6AFB27F3BA9F900C1C0FE3ED9 +org.jctools:jctools-core:jar:4.0.5 = 0x9B5D41D28D8231A341B6713BC8C127A0EC7665D6 +org.jctools:jctools-core:pom:4.0.5 = 0x9B5D41D28D8231A341B6713BC8C127A0EC7665D6 +org.jetbrains:annotations:jar:13.0 = 0x2E3A1AFFE42B5F53AF19F780BCF4173966770193 #https://keyserver.ubuntu.com/pks/lookup?op=vindex&fingerprint=on&search=0xBCF4173966770193 +org.jetbrains:annotations:pom:13.0 = 0x2E3A1AFFE42B5F53AF19F780BCF4173966770193 #https://keyserver.ubuntu.com/pks/lookup?op=vindex&fingerprint=on&search=0xBCF4173966770193 +org.mariadb.jdbc:mariadb-java-client:3.5.7 = 0x4C470FFFEFC4D3DC59778655CE1A3DD5E3C94F49 +org.mariadb.jdbc:mariadb-java-client:3.5.7:pom = 0x4C470FFFEFC4D3DC59778655CE1A3DD5E3C94F49 +org.nuiton.processor:nuiton-processor:jar:1.3 = 0x8C91FA79AE8556710867A977E9056E22014A6ED2 +org.nuiton.processor:nuiton-processor:pom:1.3 = 0x8C91FA79AE8556710867A977E9056E22014A6ED2 +org.odftoolkit:odfdom-java:jar:0.9.0 = 0x05BE82F3F005BA84597D7F25EAFBA1450EFFB0A1 +org.odftoolkit:odfdom-java:pom:0.9.0 = 0x05BE82F3F005BA84597D7F25EAFBA1450EFFB0A1 +org.plutext:jaxb-svg11:jar:11.4.0 = 0x4F12076DB0F61138303CC361C641C2A9AFA87A3B +org.plutext:jaxb-svg11:pom:11.4.0 = 0x4F12076DB0F61138303CC361C641C2A9AFA87A3B +org.tomlj:tomlj:jar:1.0.0 = 0x80F6D6B0D90C6747753344CAB5A9E81B565E89E0 +org.tomlj:tomlj:pom:1.0.0 = 0x80F6D6B0D90C6747753344CAB5A9E81B565E89E0 +org.zeroturnaround:zt-exec:jar:1.12 = 0x021CBA3549EEF2025397B7F0E8AC268AC97D570F +org.zeroturnaround:zt-exec:pom:1.12 = 0x021CBA3549EEF2025397B7F0E8AC268AC97D570F + + + # Allow your reactor modules (produced in this build) life.qbic:*:* = noSig life.qbic.logging:*:* = noSig life.qbic.datamanager:*:* = noSig -# Unsigned runtime dep you must keep for now +# accept unsigned (documented exceptions) org.jboss.logging:jboss-logging:3.6.1.Final = noSig -net.rootdev:java-rdfa:0.4.2 = noSig -javax.inject:javax.inject:1 = noSig -org.codehaus.plexus:plexus-i18n:1.0-beta-10 = noSig -# accept unsigned (documented exceptions) -org.jboss.logging:jboss-logging:* = noSig -net.rootdev:java-rdfa:* = noSig -# Square / OkHttp / Okio (Square’s signing key) -com.squareup.okhttp3:*:* = 0x1D217F8475EEE9F19AB8DD6B793FD5751A0F0780 # e.g. okhttp-urlconnection/logging-interceptor. [oai_citation:0‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) -com.squareup.okio:*:* = 0x1D217F8475EEE9F19AB8DD6B793FD5751A0F0780 # okio-jvm. [oai_citation:1‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) +# Sigstore (your own plugin/libs) +dev.sigstore:*:* = 0x300b49c14dfa7e0ad9d8515400e008229f5daf37 # sigstore-maven-plugin / sigstore-java. [oai_citation:13‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) + +# GMavenPlus plugin (you use 4.0.1) +org.codehaus.gmavenplus:*:* = 0x0867FACD3788F7B0BB24CD1FD90C38195BEDB15F # gRPC (Google) -io.grpc:*:* = 0xB02335AA54CCF21E52BBF9ABD9C565AA72BA2FDD # grpc-api/core/stub/util/netty-shaded. [oai_citation:2‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) +io.grpc:grpc-api:jar:1.71.0 = 0xB02335AA54CCF21E52BBF9ABD9C565AA72BA2FDD # grpc-api/core/stub/util/netty-shaded. [oai_citation:2‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) +io.grpc:grpc-api:pom:1.71.0 = 0xB02335AA54CCF21E52BBF9ABD9C565AA72BA2FDD # grpc-api/core/stub/util/netty-shaded. [oai_citation:2‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) +io.grpc:grpc-context:jar:1.70.0 = 0xB02335AA54CCF21E52BBF9ABD9C565AA72BA2FDD # grpc-api/core/stub/util/netty-shaded. [oai_citation:2‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) +io.grpc:grpc-context:pom:1.70.0 = 0xB02335AA54CCF21E52BBF9ABD9C565AA72BA2FDD # grpc-api/core/stub/util/netty-shaded. [oai_citation:2‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) +io.grpc:grpc-core:jar:1.71.0 = 0xB02335AA54CCF21E52BBF9ABD9C565AA72BA2FDD # grpc-api/core/stub/util/netty-shaded. [oai_citation:2‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) +io.grpc:grpc-core:pom:1.71.0 = 0xB02335AA54CCF21E52BBF9ABD9C565AA72BA2FDD # grpc-api/core/stub/util/netty-shaded. [oai_citation:2‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) +io.grpc:grpc-netty-shaded:jar:1.71.0 = 0xB02335AA54CCF21E52BBF9ABD9C565AA72BA2FDD # grpc-api/core/stub/util/netty-shaded. [oai_citation:2‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) +io.grpc:grpc-netty-shaded:pom:1.71.0 = 0xB02335AA54CCF21E52BBF9ABD9C565AA72BA2FDD # grpc-api/core/stub/util/netty-shaded. [oai_citation:2‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) +io.grpc:grpc-protobuf-lite:jar:1.71.0 = 0xB02335AA54CCF21E52BBF9ABD9C565AA72BA2FDD # grpc-api/core/stub/util/netty-shaded. [oai_citation:2‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) +io.grpc:grpc-protobuf-lite:pom:1.71.0 = 0xB02335AA54CCF21E52BBF9ABD9C565AA72BA2FDD # grpc-api/core/stub/util/netty-shaded. [oai_citation:2‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) +io.grpc:grpc-protobuf:jar:1.71.0 = 0xB02335AA54CCF21E52BBF9ABD9C565AA72BA2FDD +io.grpc:grpc-protobuf:pom:1.71.0 = 0xB02335AA54CCF21E52BBF9ABD9C565AA72BA2FDD # grpc-api/core/stub/util/netty-shaded. [oai_citation:2‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) +io.grpc:grpc-stub:jar:1.71.0 = 0xB02335AA54CCF21E52BBF9ABD9C565AA72BA2FDD # grpc-api/core/stub/util/netty-shaded. [oai_citation:2‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) +io.grpc:grpc-stub:pom:1.71.0 = 0xB02335AA54CCF21E52BBF9ABD9C565AA72BA2FDD # grpc-api/core/stub/util/netty-shaded. [oai_citation:2‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) +io.grpc:grpc-util:jar:1.71.0 = 0xB02335AA54CCF21E52BBF9ABD9C565AA72BA2FDD # grpc-api/core/stub/util/netty-shaded. [oai_citation:2‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) +io.grpc:grpc-util:pom:1.71.0 = 0xB02335AA54CCF21E52BBF9ABD9C565AA72BA2FDD # grpc-api/core/stub/util/netty-shaded. [oai_citation:2‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) # Google HTTP / OAuth clients -com.google.http-client:*:* = 0x47504B76CF89C15C0512D9AFE16AB52D79FD224F # google-http-client / -gson. [oai_citation:3‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) -com.google.oauth-client:*:* = 0x47504B76CF89C15C0512D9AFE16AB52D79FD224F # google-oauth-client-java6. [oai_citation:4‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) +com.google.api.grpc:proto-google-common-protos:jar:2.51.0 = 0x47504B76CF89C15C0512D9AFE16AB52D79FD224F # google-http-client / -gson. [oai_citation:3‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) +com.google.api.grpc:proto-google-common-protos:pom:2.51.0 = 0x47504B76CF89C15C0512D9AFE16AB52D79FD224F # google-http-client / -gson. [oai_citation:3‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) +com.google.http-client:google-http-client-apache-v2:jar:1.47.1 = 0x47504B76CF89C15C0512D9AFE16AB52D79FD224F # google-http-client / -gson. [oai_citation:3‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) +com.google.http-client:google-http-client-apache-v2:pom:1.47.1 = 0x47504B76CF89C15C0512D9AFE16AB52D79FD224F # google-http-client / -gson. [oai_citation:3‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) +com.google.http-client:google-http-client-gson:jar:1.47.1 = 0x47504B76CF89C15C0512D9AFE16AB52D79FD224F # google-http-client / -gson. [oai_citation:3‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) +com.google.http-client:google-http-client-gson:pom:1.47.1 = 0x47504B76CF89C15C0512D9AFE16AB52D79FD224F # google-http-client / -gson. [oai_citation:3‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) +com.google.http-client:google-http-client:1.47.1 = 0x47504B76CF89C15C0512D9AFE16AB52D79FD224F # google-http-client / -gson. [oai_citation:3‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) +com.google.http-client:google-http-client:jar:1.47.1 = 0x47504B76CF89C15C0512D9AFE16AB52D79FD224F # google-http-client / -gson. [oai_citation:3‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) +com.google.oauth-client:google-oauth-client-java6:jar:1.39.0 = 0x47504B76CF89C15C0512D9AFE16AB52D79FD224F # google-oauth-client-java6. [oai_citation:4‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) +com.google.oauth-client:google-oauth-client-java6:pom:1.39.0 = 0x47504B76CF89C15C0512D9AFE16AB52D79FD224F # google-oauth-client-java6. [oai_citation:4‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) +com.google.oauth-client:google-oauth-client-jetty:jar:1.39.0 = 0x47504B76CF89C15C0512D9AFE16AB52D79FD224F +com.google.oauth-client:google-oauth-client-jetty:pom:1.39.0 = 0x47504B76CF89C15C0512D9AFE16AB52D79FD224F +com.google.oauth-client:google-oauth-client:jar:1.39.0 = 0x47504B76CF89C15C0512D9AFE16AB52D79FD224F # google-oauth-client-java6. [oai_citation:4‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) +com.google.oauth-client:google-oauth-client:pom:1.39.0 = 0x47504B76CF89C15C0512D9AFE16AB52D79FD224F # google-oauth-client-java6. [oai_citation:4‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) -# SonarSource scanner libs + plugin -org.sonarsource.scanner.lib:*:* = 0x679F1EE92B19609DE816FDE81DB198F93525EC1A # download-cache, java-library, etc. [oai_citation:5‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) -org.sonarsource.scanner.maven:*:* = 0x679F1EE92B19609DE816FDE81DB198F93525EC1A # sonar-maven-plugin. [oai_citation:6‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) + +# Square / OkHttp / Okio (Square’s signing key) +com.squareup.okhttp3:logging-interceptor:jar:5.1.0 = 0x1D217F8475EEE9F19AB8DD6B793FD5751A0F0780 # e.g. okhttp-urlconnection/logging-interceptor. [oai_citation:0‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) +com.squareup.okhttp3:logging-interceptor:pom:5.1.0 = 0x1D217F8475EEE9F19AB8DD6B793FD5751A0F0780 # e.g. okhttp-urlconnection/logging-interceptor. [oai_citation:0‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) +com.squareup.okhttp3:okhttp-java-net-cookiejar:jar:5.1.0 = 0x1D217F8475EEE9F19AB8DD6B793FD5751A0F0780 # e.g. okhttp-urlconnection/logging-interceptor. [oai_citation:0‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) +com.squareup.okhttp3:okhttp-java-net-cookiejar:pom:5.1.0 = 0x1D217F8475EEE9F19AB8DD6B793FD5751A0F0780 # e.g. okhttp-urlconnection/logging-interceptor. [oai_citation:0‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) +com.squareup.okhttp3:okhttp-jvm:jar:5.1.0 = 0x1D217F8475EEE9F19AB8DD6B793FD5751A0F0780 # e.g. okhttp-urlconnection/logging-interceptor. [oai_citation:0‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) +com.squareup.okhttp3:okhttp-jvm:pom:5.1.0 = 0x1D217F8475EEE9F19AB8DD6B793FD5751A0F0780 # e.g. okhttp-urlconnection/logging-interceptor. [oai_citation:0‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) +com.squareup.okhttp3:okhttp-urlconnection:jar:5.1.0 = 0x1D217F8475EEE9F19AB8DD6B793FD5751A0F0780 # e.g. okhttp-urlconnection/logging-interceptor. [oai_citation:0‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) +com.squareup.okhttp3:okhttp-urlconnection:pom:5.1.0 = 0x1D217F8475EEE9F19AB8DD6B793FD5751A0F0780 # e.g. okhttp-urlconnection/logging-interceptor. [oai_citation:0‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) +com.squareup.okio:*:* = 0x1D217F8475EEE9F19AB8DD6B793FD5751A0F0780 # okio-jvm. [oai_citation:1‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) + +# Xerces +xerces:xercesImpl:* = 0x6CB87B18A453990EAC9453F87D713008CC07E9AD # xercesImpl. [oai_citation:12‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) +xerces:xercesImpl:pom:2.12.1 = 0x6CB87B18A453990EAC9453F87D713008CC07E9AD # xercesImpl. [oai_citation:12‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) # Apache Jena org.apache.jena:*:* = 0xD99038A1731B8B31B71549EF04C95136D236A58F # jena-base/core/iri/shaded-guava. [oai_citation:7‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) +org.apache.jena:jena-core:pom:3.17.0 = 0xD99038A1731B8B31B71549EF04C95136D236A58F # jena-base/core/iri/shaded-guava. [oai_citation:7‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) +org.apache.jena:jena-base:jar:3.17.0 = 0xD99038A1731B8B31B71549EF04C95136D236A58F # jena-base/core/iri/shaded-guava. [oai_citation:7‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) -# io.perfmark -io.perfmark:perfmark-api:* = 0xC6F7D1C804C821F49AF3BFC13AD93C3C677A106E # perfmark-api. [oai_citation:8‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) +# Google Android annotations +com.google.android:*:* = 0x0F07D1201BDDAB67CFB84EB479752DB6C966F0B8 # Jansi org.fusesource.jansi:jansi:* = 0xEA23DB1360D9029481E7F2EFECDFEA3CB4493B94 # jansi. [oai_citation:9‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) -# JetBrains annotations -org.jetbrains:annotations:* = 0x2E3A1AFFE42B5F53AF19F780BCF4173966770193 # annotations. [oai_citation:10‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) - # Opencensus io.opencensus:*:* = 0x600EA202B1EC682F4A788E5AAC7A514BC9F9BB70 # opencensus-api/contrib-http-util. [oai_citation:11‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) -# Xerces -xerces:xercesImpl:* = 0x6CB87B18A453990EAC9453F87D713008CC07E9AD # xercesImpl. [oai_citation:12‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) - -# Sigstore (your own plugin/libs) -dev.sigstore:*:* = 0x300b49c14dfa7e0ad9d8515400e008229f5daf37 # sigstore-maven-plugin / sigstore-java. [oai_citation:13‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) - -# Misc seen in log -io.github.hakky54:sslcontext-kickstart:* = 0xE5138A8E9F2E7E42D38B14D99AEE152CDCCEBFCB # sslcontext-kickstart. [oai_citation:14‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) -io.github.erdtman:java-json-canonicalization:* = 0x4556208EBE484FBA3984DC3D3D4FA1A9DB2FB4F4 # JJCS. [oai_citation:15‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) - -# Dexx Collections -com.github.andrewoma.dexx:*:* = 0x08D55F3D1993D63BF24FE3F008C9559A006FD974 - -# GMavenPlus plugin (you use 4.0.1) -org.codehaus.gmavenplus:*:* = 0x0867FACD3788F7B0BB24CD1FD90C38195BEDB15F - -# ODF Toolkit (odfdom-java) -org.odftoolkit:*:* = 0x05BE82F3F005BA84597D7F25EAFBA1450EFFB0A1 - -# Nuiton processor -org.nuiton.processor:*:* = 0x8C91FA79AE8556710867A977E9056E22014A6ED2 - -# Google API gRPC protos (Google libraries) -com.google.api.grpc:*:* = 0x47504B76CF89C15C0512D9AFE16AB52D79FD224F - -# Google Android annotations -com.google.android:*:* = 0x0F07D1201BDDAB67CFB84EB479752DB6C966F0B8 +# SonarSource scanner libs + plugin +org.sonarsource.scanner.lib:*:* = 0x679F1EE92B19609DE816FDE81DB198F93525EC1A # download-cache, java-library, etc. [oai_citation:5‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) +org.sonarsource.scanner.lib:sonar-scanner-download-cache:jar:3.4.0.514 = 0x679F1EE92B19609DE816FDE81DB198F93525EC1A # download-cache, java-library, etc. [oai_citation:5‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) +org.sonarsource.scanner.lib:sonar-scanner-java-library:jar:3.4.0.514 = 0x679F1EE92B19609DE816FDE81DB198F93525EC1A # download-cache, java-library, etc. [oai_citation:5‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) +org.sonarsource.scanner.maven:*:* = 0x679F1EE92B19609DE816FDE81DB198F93525EC1A # sonar-maven-plugin. [oai_citation:6‡Untitled.txt](file-service://file-1UbSKN5j1vX3Pe1FvyAMhb) # JobRunr org.jobrunr:*:* = 0x841496C7067739E5EEAE6626031C0B38EEB33EF8 @@ -106,77 +204,27 @@ org.hibernate.orm:*:* = 0x1452F35849B50750F6A3BBB4B54011358B352F85 # --- Apache ActiveMQ Artemis (many modules in your log) --- org.apache.activemq:*:* = 0x28417C95E8906D108392822354A43F3254868410 -# --- JGroups (unsigned in Maven Central) --- -org.jgroups:jgroups:* = noSig -org.jgroups:jgroups:*:pom = noSig - -# --- de.dentrassi crypto / pem-keystore --- -de.dentrassi.crypto:*:* = 0xCAFE8E040FD28E7873171932BBE1070F76B97956 - -# --- JCTools --- -org.jctools:*:* = 0x9B5D41D28D8231A341B6713BC8C127A0EC7665D6 - -# --- ASN.1 (hierynomus) --- -com.hierynomus:*:* = 0xB200B4AA914DE0340741F598EBE906E1F4ACA3B7 - org.xmlunit:xmlunit-core:2.10.4 = 0xBC26C53AF531F8B4B3F5930AAFBD3AF8EAFA72DA -# fslev / json-compare -com.github.fslev:*:* = 0xDE81641E4B259D19CA96A45EC876E72938D88080 - -# net.engio / mbassador -net.engio:*:* = 0x5EAF6E9410A71E27B18EB3B90AC90C378C525192 - # docx4j + shaded apache components (same key) org.docx4j:*:* = 0x4F12076DB0F61138303CC361C641C2A9AFA87A3B org.docx4j.org.apache:*:* = 0x4F12076DB0F61138303CC361C641C2A9AFA87A3B -org.plutext:*:* = 0x4F12076DB0F61138303CC361C641C2A9AFA87A3B - -# Nimbus JOSE + OIDC stack (same signer across modules) -com.nimbusds:*:* = 0x82F0964816AD7319CB0CCCF93EFD9D223D715E9A - -# networknt json-schema-validator -com.networknt:*:* = 0xAEB1E1AEC035C66FA39589D13EFC46EE83C40224 - -# ethlo / itu -com.ethlo.time:*:* = 0xB286846C341BB72D1E5F85CAB460E7C4ED66826D - -# zip4j -net.lingala.zip4j:*:* = 0x36F4C680FC3E50E14C90FCBFA0B475EFD9448513 - -# TEMP: accept revoked sig for this exact coord only (jar + pom) -com.apicatalog:titanium-json-ld:1.3.3 = badSig -com.apicatalog:titanium-json-ld:1.3.3:pom = badSig - - com.apicatalog:titanium-json-ld:1.6.0 = 0x6C3AE02ABF8203EEAC80DC215ACE4C100AABD0E8 - -# apicatalog / titanium-* family (JCS, RDF-API, RDF-N-Quads, JSON-LD >= 1.6.0) -com.apicatalog:*:* = 0x6C3AE02ABF8203EEAC80DC215ACE4C100AABD0E8 +# apicatalog / titanium-* family (JCS, RDF-API, RDF-N-Quads, JSON-LD) +com.apicatalog:*:* = 0x6C3AE02ABF8203EEAC80DC215ACE4C100AABD0E8 edu.kit.datamanager:ro-crate-java:1.1.1 = 0x7F4A46364B8A81FB341BEAA99FA30EAD50347761 org.seleniumhq.selenium:*:* = 0x81BE0C38ACE8AEDC7735A05F4C2AFF633F3A7223 -io.netty.incubator:netty-incubator-codec-native-quic:0.0.74.Final = 0x0D35D3F60078655126908E8AF3D1600878E85A3D - -com.google.gwt:gwt-elemental:2.9.0 = 0xD914EDBEC01F64D70F6F3BB5CDCA6161318BBAD4 - -com.github.oshi:oshi-core:6.4.10 = 0x4103C1C3F8E51C6925B5CD346A1E81B00431AB9D - # Vaadin +com.vaadin.external.atmosphere:*:* = 0xED4D232CC28A17F20CD25CA1C63D0B42CDFB97DA +com.vaadin.external.gwt:*:* = 0xED4D232CC28A17F20CD25CA1C63D0B42CDFB97DA +com.vaadin.external:gentyref:jar:1.2.0.vaadin1 = 0xCC57399D74CD7E4768ED6FA4CA62973FBF0451C0 +com.vaadin.external:gentyref:pom:1.2.0.vaadin1 = 0xCC57399D74CD7E4768ED6FA4CA62973FBF0451C0 +com.vaadin.servletdetector:*:* = 0xED4D232CC28A17F20CD25CA1C63D0B42CDFB97DA com.vaadin:*:* = 0xED4D232CC28A17F20CD25CA1C63D0B42CDFB97DA -javax.cache:cache-api:1.1.1 = 0xBE6B997EB563F4898C3C406B8DB9FA0B0718BBF9 - -# Swagger 2.2.22 -io.swagger.core.v3:swagger-core:2.2.22 = 0x3E61D8C230332482009D7F0EDB901B24CAD38BC4 -io.swagger.core.v3:swagger-core:2.2.22:pom = 0x3E61D8C230332482009D7F0EDB901B24CAD38BC4 -io.swagger.core.v3:swagger-models:2.2.22 = 0x3E61D8C230332482009D7F0EDB901B24CAD38BC4 -io.swagger.core.v3:swagger-models:2.2.22:pom = 0x3E61D8C230332482009D7F0EDB901B24CAD38BC4 -io.swagger.core.v3:swagger-annotations:2.2.22 = 0x3E61D8C230332482009D7F0EDB901B24CAD38BC4 -io.swagger.core.v3:swagger-annotations:2.2.22:pom = 0x3E61D8C230332482009D7F0EDB901B24CAD38BC4 - # OpenTelemetry 1.49.0 (+ semconv 1.25.0-alpha) io.opentelemetry:opentelemetry-context:1.49.0 = 0x3F05DDA9F317301E927136D417A27CE7A60FF5F0 io.opentelemetry:opentelemetry-context:1.49.0:pom = 0x3F05DDA9F317301E927136D417A27CE7A60FF5F0 @@ -201,39 +249,6 @@ io.opentelemetry:opentelemetry-sdk-extension-autoconfigure-spi:1.49.0:pom = 0x3F io.opentelemetry.semconv:opentelemetry-semconv:1.25.0-alpha = 0x3F05DDA9F317301E927136D417A27CE7A60FF5F0 io.opentelemetry.semconv:opentelemetry-semconv:1.25.0-alpha:pom = 0x3F05DDA9F317301E927136D417A27CE7A60FF5F0 -# Vaadin repackaged -com.vaadin.external.atmosphere:atmosphere-runtime:3.0.5.slf4jvaadin1 = 0xED4D232CC28A17F20CD25CA1C63D0B42CDFB97DA -com.vaadin.external.atmosphere:atmosphere-runtime:3.0.5.slf4jvaadin1:pom = 0xED4D232CC28A17F20CD25CA1C63D0B42CDFB97DA -com.vaadin.external.gwt:gwt-elemental:2.8.2.vaadin2 = 0xED4D232CC28A17F20CD25CA1C63D0B42CDFB97DA -com.vaadin.external.gwt:gwt-elemental:2.8.2.vaadin2:pom = 0xED4D232CC28A17F20CD25CA1C63D0B42CDFB97DA -com.vaadin.external:gentyref:1.2.0.vaadin1 = 0xCC57399D74CD7E4768ED6FA4CA62973FBF0451C0 -com.vaadin.external:gentyref:1.2.0.vaadin1:pom = 0xCC57399D74CD7E4768ED6FA4CA62973FBF0451C0 -com.vaadin.servletdetector:throw-if-servlet3:1.0.2 = 0xED4D232CC28A17F20CD25CA1C63D0B42CDFB97DA -com.vaadin.servletdetector:throw-if-servlet3:1.0.2:pom = 0xED4D232CC28A17F20CD25CA1C63D0B42CDFB97DA - # Netty incubator QUIC io.netty.incubator:netty-incubator-codec-classes-quic:0.0.74.Final = 0x0D35D3F60078655126908E8AF3D1600878E85A3D io.netty.incubator:netty-incubator-codec-classes-quic:0.0.74.Final:pom = 0x0D35D3F60078655126908E8AF3D1600878E85A3D - -# Roaster -org.jboss.forge.roaster:roaster-api:2.29.0.Final = 0x001A438334F162E6AFB27F3BA9F900C1C0FE3ED9 -org.jboss.forge.roaster:roaster-api:2.29.0.Final:pom = 0x001A438334F162E6AFB27F3BA9F900C1C0FE3ED9 -org.jboss.forge.roaster:roaster-jdt:2.29.0.Final = 0x001A438334F162E6AFB27F3BA9F900C1C0FE3ED9 -org.jboss.forge.roaster:roaster-jdt:2.29.0.Final:pom = 0x001A438334F162E6AFB27F3BA9F900C1C0FE3ED9 - -# Misc seen in the log -io.methvin:directory-watcher:0.18.0 = 0xAEE8A343247713A5A198640D4D1670765EF90EAB -io.methvin:directory-watcher:0.18.0:pom = 0xAEE8A343247713A5A198640D4D1670765EF90EAB -org.mariadb.jdbc:mariadb-java-client:3.5.7 = 0x4C470FFFEFC4D3DC59778655CE1A3DD5E3C94F49 -org.mariadb.jdbc:mariadb-java-client:3.5.7:pom = 0x4C470FFFEFC4D3DC59778655CE1A3DD5E3C94F49 -com.helger.commons:ph-commons:11.1.5 = 0x670BE7D076A0C89F5F07625AE57428DA9E879E7D -com.helger.commons:ph-commons:11.1.5:pom = 0x670BE7D076A0C89F5F07625AE57428DA9E879E7D -org.tomlj:tomlj:1.0.0 = 0x80F6D6B0D90C6747753344CAB5A9E81B565E89E0 -org.tomlj:tomlj:1.0.0:pom = 0x80F6D6B0D90C6747753344CAB5A9E81B565E89E0 -org.zeroturnaround:zt-exec:1.12 = 0x021CBA3549EEF2025397B7F0E8AC268AC97D570F -org.zeroturnaround:zt-exec:1.12:pom = 0x021CBA3549EEF2025397B7F0E8AC268AC97D570F -org.ehcache:ehcache:3.10.9 = 0x7FCE178313EAC3BDFC4A75A95E1D8523FE7EAC7B -org.ehcache:ehcache:3.10.9:pom = 0x7FCE178313EAC3BDFC4A75A95E1D8523FE7EAC7B - - com.google.auto.service:auto-service-annotations:1.1.1 = 0xC7BE5BCC9FEC15518CFDA882B0F3710FA64900E7 - org.lucee:jcip-annotations:1.0.0 = 0x26BA3E8B6A185070F538B1C15C3F925A060D5930 diff --git a/pom.xml b/pom.xml index 9762e4bf43..1154c87006 100644 --- a/pom.xml +++ b/pom.xml @@ -56,7 +56,7 @@ https://sonarcloud.io qbicsoftware qbicsoftware_data-manager-app - 24.4.13 + 24.9.10 @@ -285,7 +285,7 @@ org.simplify4u pgp-keys-map - 2025.03.15 + 2026.01.20