Skip to content

build(deps): bump org.apache.poi:poi-ooxml from 5.2.5 to 5.5.1 - #129

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/main/org.apache.poi-poi-ooxml-5.5.1
Closed

build(deps): bump org.apache.poi:poi-ooxml from 5.2.5 to 5.5.1#129
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/main/org.apache.poi-poi-ooxml-5.5.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 11, 2026

Copy link
Copy Markdown
Contributor

Bumps org.apache.poi:poi-ooxml from 5.2.5 to 5.5.1.

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
build(deps): bump org.apache.poi:poi-ooxml from 5.2.5 to 5.5.1
2aafe27 
Bumps org.apache.poi:poi-ooxml from 5.2.5 to 5.5.1.

---
updated-dependencies:
- dependency-name: org.apache.poi:poi-ooxml
  dependency-version: 5.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels May 11, 2026
@github-actions

github-actions Bot commented May 11, 2026

Copy link
Copy Markdown

Terraform Plan

  • fmt: failure
  • validate: success
  • plan: success
Show plan 
Acquiring state lock. This may take a few moments...
random_password.jwt_secret: Refreshing state... [id=none]
random_id.db_name_suffix: Refreshing state... [id=ncGEfQ]
random_password.db_password: Refreshing state... [id=none]
google_monitoring_dashboard.ops: Refreshing state... [id=projects/989204813608/dashboards/be31b22d-dea7-49d8-a568-079b87445a6a]
module.analytics_pubsub[0].data.google_project.current: Reading...
google_logging_project_sink.oscal_events: Refreshing state... [id=projects/oscal-hub/sinks/oscal-events-prod]
module.dimsync.google_service_account.dimsync: Refreshing state... [id=projects/oscal-hub/serviceAccounts/dimsync-prod@oscal-hub.iam.gserviceaccount.com]
module.analytics_pubsub[0].google_pubsub_topic.events_dlq: Refreshing state... [id=projects/oscal-hub/topics/otel-events-dlq-prod]
google_project_service.apis["pubsub.googleapis.com"]: Refreshing state... [id=oscal-hub/pubsub.googleapis.com]
google_monitoring_dashboard.cs_pipeline: Refreshing state... [id=projects/989204813608/dashboards/54f9967c-d38c-43e1-a909-f59e41081ce4]
google_project_service.apis["storage.googleapis.com"]: Refreshing state... [id=oscal-hub/storage.googleapis.com]
google_project_service.apis["bigquery.googleapis.com"]: Refreshing state... [id=oscal-hub/bigquery.googleapis.com]
module.analytics_bigquery.google_bigquery_dataset.analytics: Refreshing state... [id=projects/oscal-hub/datasets/analytics_prod]
google_project_service.apis["artifactregistry.googleapis.com"]: Refreshing state... [id=oscal-hub/artifactregistry.googleapis.com]
google_project_service.apis["run.googleapis.com"]: Refreshing state... [id=oscal-hub/run.googleapis.com]
google_project_service.apis["cloudkms.googleapis.com"]: Refreshing state... [id=oscal-hub/cloudkms.googleapis.com]
google_project_service.apis["sql-component.googleapis.com"]: Refreshing state... [id=oscal-hub/sql-component.googleapis.com]
google_project_service.apis["monitoring.googleapis.com"]: Refreshing state... [id=oscal-hub/monitoring.googleapis.com]
module.analytics_pubsub[0].data.google_project.current: Read complete after 0s [id=projects/oscal-hub]
google_project_service.apis["vpcaccess.googleapis.com"]: Refreshing state... [id=oscal-hub/vpcaccess.googleapis.com]
google_project_service.apis["cloudresourcemanager.googleapis.com"]: Refreshing state... [id=oscal-hub/cloudresourcemanager.googleapis.com]
google_project_service.apis["sqladmin.googleapis.com"]: Refreshing state... [id=oscal-hub/sqladmin.googleapis.com]
google_project_service.apis["compute.googleapis.com"]: Refreshing state... [id=oscal-hub/compute.googleapis.com]
google_project_service.apis["secretmanager.googleapis.com"]: Refreshing state... [id=oscal-hub/secretmanager.googleapis.com]
google_project_service.apis["servicenetworking.googleapis.com"]: Refreshing state... [id=oscal-hub/servicenetworking.googleapis.com]
module.analytics_pubsub[0].google_pubsub_topic.events: Refreshing state... [id=projects/oscal-hub/topics/otel-events-prod]
google_project_service.apis["cloudscheduler.googleapis.com"]: Refreshing state... [id=oscal-hub/cloudscheduler.googleapis.com]
google_project_service.apis["cloudtrace.googleapis.com"]: Refreshing state... [id=oscal-hub/cloudtrace.googleapis.com]
google_project_service.apis["cloudbuild.googleapis.com"]: Refreshing state... [id=oscal-hub/cloudbuild.googleapis.com]
module.dimsync.google_project_iam_member.dimsync_sql_client: Refreshing state... [id=oscal-hub/roles/cloudsql.client/serviceAccount:dimsync-prod@oscal-hub.iam.gserviceaccount.com]
google_monitoring_notification_channel.email[0]: Refreshing state... [id=projects/oscal-hub/notificationChannels/9647640884532379542]
module.dimsync.google_project_iam_member.dimsync_job_user: Refreshing state... [id=oscal-hub/roles/bigquery.jobUser/serviceAccount:dimsync-prod@oscal-hub.iam.gserviceaccount.com]
module.analytics_pubsub[0].google_project_iam_member.pubsub_to_bq: Refreshing state... [id=oscal-hub/roles/bigquery.dataEditor/serviceAccount:service-989204813608@gcp-sa-pubsub.iam.gserviceaccount.com]
module.analytics_pubsub[0].google_project_iam_member.pubsub_to_bq_metadata: Refreshing state... [id=oscal-hub/roles/bigquery.metadataViewer/serviceAccount:service-989204813608@gcp-sa-pubsub.iam.gserviceaccount.com]
module.analytics_bigquery.google_bigquery_table.vw_events_enriched: Refreshing state... [id=projects/oscal-hub/datasets/analytics_prod/tables/vw_events_enriched]
module.analytics_bigquery.google_bigquery_table.vw_daily_active_orgs: Refreshing state... [id=projects/oscal-hub/datasets/analytics_prod/tables/vw_daily_active_orgs]
module.analytics_bigquery.google_bigquery_table.events: Refreshing state... [id=projects/oscal-hub/datasets/analytics_prod/tables/events]
module.analytics_bigquery.google_bigquery_table.users: Refreshing state... [id=projects/oscal-hub/datasets/analytics_prod/tables/users]
module.analytics_bigquery.google_bigquery_table.orgs: Refreshing state... [id=projects/oscal-hub/datasets/analytics_prod/tables/orgs]
module.analytics_bigquery.google_bigquery_table.vw_feature_popularity: Refreshing state... [id=projects/oscal-hub/datasets/analytics_prod/tables/vw_feature_popularity]
google_bigquery_dataset_iam_member.events_sink_writer: Refreshing state... [id=projects/oscal-hub/datasets/analytics_prod/roles/bigquery.dataEditor/serviceAccount:service-989204813608@gcp-sa-logging.iam.gserviceaccount.com]
google_bigquery_table.vw_events: Refreshing state... [id=projects/oscal-hub/datasets/analytics_prod/tables/vw_events]
google_monitoring_alert_policy.p99_latency: Refreshing state... [id=projects/oscal-hub/alertPolicies/3666069356665811891]
module.dimsync.google_bigquery_dataset_iam_member.dimsync_editor: Refreshing state... [id=projects/oscal-hub/datasets/analytics_prod/roles/bigquery.dataEditor/serviceAccount:dimsync-prod@oscal-hub.iam.gserviceaccount.com]
google_monitoring_alert_policy.high_5xx_rate: Refreshing state... [id=projects/oscal-hub/alertPolicies/9936227830985567836]
google_monitoring_alert_policy.sql_connection_saturation: Refreshing state... [id=projects/oscal-hub/alertPolicies/12026442270214563461]
google_monitoring_alert_policy.run_cpu_high: Refreshing state... [id=projects/oscal-hub/alertPolicies/11969646277962194902]
module.analytics_pubsub[0].google_pubsub_subscription.events_to_bq: Refreshing state... [id=projects/oscal-hub/subscriptions/otel-events-bq-prod]
module.otel_collector[0].google_service_account.collector: Refreshing state... [id=projects/oscal-hub/serviceAccounts/otel-collector-prod@oscal-hub.iam.gserviceaccount.com]
module.storage.google_storage_bucket.library_bucket: Refreshing state... [id=oscal-tools-library-prod-us-central1]
module.storage.google_storage_bucket.build_bucket: Refreshing state... [id=oscal-tools-build-prod-us-central1]
module.database.google_sql_database_instance.postgres: Refreshing state... [id=oscal-db-prod-9dc1847d]
module.otel_collector[0].google_project_iam_member.log_writer: Refreshing state... [id=oscal-hub/roles/logging.logWriter/serviceAccount:otel-collector-prod@oscal-hub.iam.gserviceaccount.com]
module.otel_collector[0].google_project_iam_member.metric_writer: Refreshing state... [id=oscal-hub/roles/monitoring.metricWriter/serviceAccount:otel-collector-prod@oscal-hub.iam.gserviceaccount.com]
module.otel_collector[0].google_project_iam_member.trace_agent: Refreshing state... [id=oscal-hub/roles/cloudtrace.agent/serviceAccount:otel-collector-prod@oscal-hub.iam.gserviceaccount.com]
module.otel_collector[0].google_pubsub_topic_iam_member.publisher[0]: Refreshing state... [id=projects/oscal-hub/topics/otel-events-prod/roles/pubsub.publisher/serviceAccount:otel-collector-prod@oscal-hub.iam.gserviceaccount.com]
module.otel_collector[0].google_cloud_run_v2_service.collector: Refreshing state... [id=projects/oscal-hub/locations/us-central1/services/otel-collector-prod]
module.database.google_sql_database.database: Refreshing state... [id=projects/oscal-hub/instances/oscal-db-prod-9dc1847d/databases/oscal_production]
module.database.google_sql_user.user: Refreshing state... [id=oscal_user//oscal-db-prod-9dc1847d]
module.dimsync.google_cloud_run_v2_job.dimsync: Refreshing state... [id=projects/oscal-hub/locations/us-central1/jobs/dimsync-prod]
module.dimsync.google_cloud_run_v2_job_iam_member.scheduler_invoker: Refreshing state... [id=projects/oscal-hub/locations/us-central1/jobs/dimsync-prod/roles/run.invoker/serviceAccount:dimsync-prod@oscal-hub.iam.gserviceaccount.com]
module.dimsync.google_cloud_scheduler_job.dimsync_hourly: Refreshing state... [id=projects/oscal-hub/locations/us-central1/jobs/dimsync-prod-hourly]
module.otel_collector[0].google_cloud_run_service_iam_member.all_users_invoker: Refreshing state... [id=v1/projects/oscal-hub/locations/us-central1/services/otel-collector-prod/roles/run.invoker/allUsers]
module.oscal_app.google_service_account.service_account: Refreshing state... [id=projects/oscal-hub/serviceAccounts/oscal-tools-sa-prod@oscal-hub.iam.gserviceaccount.com]
module.otel_collector[0].google_cloud_run_service_iam_member.api_invoker: Refreshing state... [id=v1/projects/oscal-hub/locations/us-central1/services/otel-collector-prod/roles/run.invoker/serviceAccount:oscal-tools-sa-prod@oscal-hub.iam.gserviceaccount.com]
module.oscal_app.google_cloud_run_v2_service.service: Refreshing state... [id=projects/oscal-hub/locations/us-central1/services/oscal-tools-prod]

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place

Terraform will perform the following actions:

  # module.dimsync.google_cloud_run_v2_job.dimsync will be updated in-place
  ~ resource "google_cloud_run_v2_job" "dimsync" {
        id                       = "projects/oscal-hub/locations/us-central1/jobs/dimsync-prod"
        name                     = "dimsync-prod"
        # (25 unchanged attributes hidden)

      ~ template {
            # (4 unchanged attributes hidden)

          ~ template {
                # (5 unchanged attributes hidden)

              ~ containers {
                  ~ image       = "us-central1-docker.pkg.dev/oscal-hub/oscal-tools/oscal-tools:4dc2ed7ebcc293045ed4d40343a1eaeea60fa062" -> "us-central1-docker.pkg.dev/oscal-hub/oscal-tools/oscal-tools:2aafe27433ec8ecb20ece31d8e75b6396df5a150"
                    name        = null
                    # (3 unchanged attributes hidden)

                    # (7 unchanged blocks hidden)
                }
            }
        }
    }

  # module.oscal_app.google_cloud_run_v2_service.service will be updated in-place
  ~ resource "google_cloud_run_v2_service" "service" {
        id                      = "projects/oscal-hub/locations/us-central1/services/oscal-tools-prod"
        name                    = "oscal-tools-prod"
        # (30 unchanged attributes hidden)

      ~ template {
            # (9 unchanged attributes hidden)

          ~ containers {
              ~ image       = "us-central1-docker.pkg.dev/oscal-hub/oscal-tools/oscal-tools:4dc2ed7ebcc293045ed4d40343a1eaeea60fa062" -> "us-central1-docker.pkg.dev/oscal-hub/oscal-tools/oscal-tools:2aafe27433ec8ecb20ece31d8e75b6396df5a150"
                name        = null
                # (4 unchanged attributes hidden)

                # (30 unchanged blocks hidden)
            }

            # (2 unchanged blocks hidden)
        }

        # (1 unchanged block hidden)
    }

Plan: 0 to add, 2 to change, 0 to destroy.

─────────────────────────────────────────────────────────────────────────────

Saved the plan to: tfplan

To perform exactly these actions, run the following command to apply:
    terraform apply "tfplan"

howieavp76 added a commit that referenced this pull request Jul 26, 2026
@howieavp76 @claude
Security scan fixes: patch all high/critical dependency findings
e302117 
Main's Security Scan job has been red since May from CVE drift. This
clears the npm-audit gate (was 7 high + 3 critical) and the Grype image
gate (was 36 high/critical) — verified locally with npm audit and a
grype scan of the rebuilt image, both now zero high/critical.

Frontend (applies open Dependabot PRs #142 #141 #139 #138 #132 #131
#130 #128 #126, which will be closed as superseded):
- @babel/core 7.29.7, js-yaml 4.3.0, vite 7.3.5, vitest/@vitest 4.1.10,
  tailwind-merge 3.6.0, @next/mdx 16.2.6, jsdom 29.1.1, yaml 2.9.0,
  @tailwindcss/postcss 4.3.0, plus npm audit fix for next/ws/etc.
- eslint-config-next 15.5.9 -> 16.2.6 (matches next 16) with the config
  migrated to its native flat exports; eslint stays on 9.x because the
  eslint-plugin-react bundled in config-next still uses context.getFilename
- overrides for advisories with no Dependabot PR: sharp ^0.35.0,
  postcss ^8.5.18 (next's nested pin), minimatch ^10.0.3 (the only line
  carrying the brace-expansion GHSA-mh99-v99m-4gvg fix)
- verified: 390/390 vitest, tsc clean, production next build

Backend (applies Dependabot #129/#109 poi 5.5.1, #127 otel-bom 1.62.0,
 #125 springdoc 3.0.3, #120 maven-compiler-plugin 3.15.0):
- Spring Boot 4.0.6 -> 4.0.7; pinned fix versions for the Grype findings:
  tomcat 11.0.24, netty 4.2.16.Final, jackson 2.21.5 (jackson-2-bom) and
  3.1.5 (jackson-bom), postgresql 42.7.12
- verified: 3181 tests, 0 failures

Image (applies Dependabot #140 curl 8.21.0):
- npm CLI removed from the runtime stage: nothing executes npm at runtime
  (Next runs standalone via node server.js) and its bundled tar/undici/
  brace-expansion were a third of the Grype findings

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
@howieavp76

howieavp76 commented Jul 26, 2026

Copy link
Copy Markdown
Contributor

Superseded by #143 (commit e302117), which applies this bump along with the full security-scan cleanup — verified with the full test suites and a local grype scan of the rebuilt image.

@howieavp76 howieavp76 closed this Jul 26, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 26, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/maven/main/org.apache.poi-poi-ooxml-5.5.1 branch July 26, 2026 14:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@howieavp76