Skip to content

chore(deps): bump org.apache.activemq:activemq-client from 6.2.7 to 6.3.0 - #80

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/org.apache.activemq-activemq-client-6.3.0
Open

chore(deps): bump org.apache.activemq:activemq-client from 6.2.7 to 6.3.0#80
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/org.apache.activemq-activemq-client-6.3.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown
Contributor

Bumps org.apache.activemq:activemq-client from 6.2.7 to 6.3.0.

Release notes

Sourced from org.apache.activemq:activemq-client's releases.

Apache ActiveMQ 6.3.0

What's Changed

... (truncated)

Commits
  • 41b169c [maven-release-plugin] prepare release activemq-6.3.0
  • 3fa38e0 Fix javadoc on activemq-osgi
  • 413bdf9 Fix reactor build for sources
  • 76b878a build(deps): bump spring-version from 6.2.19 to 7.0.8 (#2102)
  • cea5c09 [AMQ-9687] Add metrics about error and reconnect counts to network connector ...
  • d74a6a1 #2230 KahaDB optionally use a isolatedIterator with isolatedCursor
  • 8d56cff Bump default JVM heap and add OOM diagnostics (#2044)
  • 6035aea build(deps): bump actions/stale from 10.3.0 to 10.4.0 (#2212)
  • dce599f Fix network bridge silent death when transport exception occurs during broker...
  • 467ef36 [#] Fix flaky test TopicSubscriptionEnableExpiryTest.java
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.apache.activemq:activemq-client](https://github.com/apache/activemq) from 6.2.7 to 6.3.0.
- [Release notes](https://github.com/apache/activemq/releases)
- [Commits](apache/activemq@activemq-6.2.7...activemq-6.3.0)

---
updated-dependencies:
- dependency-name: org.apache.activemq:activemq-client
  dependency-version: 6.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependency-upgrade Dependency upgrade is needed label Aug 3, 2026
@github-actions

github-actions Bot commented Aug 3, 2026

Copy link
Copy Markdown
Contributor

📦 Artifacts

Name Size Updated Expiration
jar 4.91 MB Aug 3, 26, 8:09:21 AM UTC Aug 10, 26, 8:09:20 AM UTC

🛡 Trivy

Vulnerability in: Java

Vulnerability Severity Package Installed Version Fixed Version
CVE-2026-10532 LOW ch.qos.logback:logback-core 1.5.32 1.5.34
CVE-2026-9828 LOW ch.qos.logback:logback-core 1.5.32 1.5.33
GHSA-r7wm-3cxj-wff9 HIGH com.fasterxml.jackson.core:jackson-core 2.21.1 2.18.8, 2.21.4, 2.22.1
CVE-2026-54512 HIGH com.fasterxml.jackson.core:jackson-databind 2.21.1 2.18.8, 3.1.4, 2.21.4
CVE-2026-54513 HIGH com.fasterxml.jackson.core:jackson-databind 2.21.1 2.18.8, 2.21.4, 3.1.4
CVE-2026-54514 MEDIUM com.fasterxml.jackson.core:jackson-databind 2.21.1 2.18.8, 2.21.4, 3.1.4
CVE-2026-54515 MEDIUM com.fasterxml.jackson.core:jackson-databind 2.21.1 3.1.4, 2.18.9, 2.21.5, 2.22.1
CVE-2026-54516 MEDIUM com.fasterxml.jackson.core:jackson-databind 2.21.1 2.21.4, 3.1.4
CVE-2026-54517 MEDIUM com.fasterxml.jackson.core:jackson-databind 2.21.1 2.21.4, 3.1.4
CVE-2026-54518 MEDIUM com.fasterxml.jackson.core:jackson-databind 2.21.1 2.21.4
CVE-2026-59888 MEDIUM com.fasterxml.jackson.core:jackson-databind 2.21.1 2.18.8, 2.21.4
CVE-2026-59889 MEDIUM com.fasterxml.jackson.core:jackson-databind 2.21.1 2.21.5, 2.18.9, 2.22.1
GHSA-mhm7-754m-9p8w MEDIUM com.fasterxml.jackson.core:jackson-databind 2.21.1 2.18.9, 2.21.5

🧪 Java Unit Tests

TestsPassed ✅SkippedFailedTime ⏱
Java Tests Report14 ran14 ✅0 ⚠️0 ❌13s 771ms

🔁 Unreleased Commits

✅ No unreleased commits found.

@github-actions

github-actions Bot commented Aug 3, 2026

Copy link
Copy Markdown
Contributor

Tests report quick summary:

success ✅ > tests: 14, success: 14, skipped: 0, failed: 0

unfold for details
Project Status Success Skipped Failed
plugin-jms success ✅ 14 0 0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependency-upgrade Dependency upgrade is needed

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants