Skip to content

Bump cassandraVersion from 3.12.1 to 3.13.0 - #163

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/cassandraVersion-3.13.0
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/cassandraVersion-3.13.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 15, 2026

Copy link
Copy Markdown
Contributor

Bumps cassandraVersion from 3.12.1 to 3.13.0.
Updates org.apache.cassandra:cassandra-driver-core from 3.12.1 to 3.13.0

Release notes

Sourced from org.apache.cassandra:cassandra-driver-core's releases.

3.13.0

Release announcement

Changelog:

  • [bug] CASSJAVA-85: decode custom payload and warnings in correct order
  • [improvement] CASSJAVA-128: Update Netty to 4.1.138 and migrate to Java8
Commits
  • 0f5f0ad [maven-release-plugin] prepare release 3.13.0
  • 663c420 ninja-fix Re-introduce SCM block so as to avoid appending the project artifac...
  • 2558a56 ninja-fix Javadoc updates and cleaning up the parent build
  • 61aa797 Changelog and documentation updates for 3.13.0 release
  • 0d04c85 CASSJAVA-128 Upgrade Netty to 4.1.138 and migrate to Java8
  • 209150c ninja-fix Update Jenkins label to Jammy
  • e863144 ninja-fix Fix agent label on jenkinsfile-datastax
  • 4aee864 Upgrade Netty to 4.1.119
  • ca73827 ninja-fix Port of CASSJAVA-20 changes to 3.x
  • 2b8b221 CASSJAVA-85: decode custom payload and warnings in correct order
  • Additional commits viewable in compare view

Updates org.apache.cassandra:cassandra-driver-mapping from 3.12.1 to 3.13.0

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps `cassandraVersion` from 3.12.1 to 3.13.0.

Updates `org.apache.cassandra:cassandra-driver-core` from 3.12.1 to 3.13.0
- [Release notes](https://github.com/apache/cassandra-java-driver/releases)
- [Commits](apache/cassandra-java-driver@3.12.1...3.13.0)

Updates `org.apache.cassandra:cassandra-driver-mapping` from 3.12.1 to 3.13.0

---
updated-dependencies:
- dependency-name: org.apache.cassandra:cassandra-driver-core
  dependency-version: 3.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: org.apache.cassandra:cassandra-driver-mapping
  dependency-version: 3.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Oct 15, 2026
@github-actions

Copy link
Copy Markdown
Contributor

Mend Scan Results

Status: ⚠️ Findings detected

⚠️ SCA findings detected

SCA scan output



Identified 72 dependencies

Detected 17 vulnerabilities (0 Critical, 5 High, 10 Medium, 2 Low)

+----------+-----------------------------+-----------------+-------------------------------------------------------------------------------------------------+
| SEVERITY |           LIBRARY           |       ID        |                                             TOP FIX                                             |
+----------+-----------------------------+-----------------+-------------------------------------------------------------------------------------------------+
| HIGH     | guava-19.0.jar              | CVE-2026-102554 | Upgrade to version com.google.guava:guava:33.7.2, https://github.com/google/guava.git - v33.7.2 |
+----------+-----------------------------+-----------------+-------------------------------------------------------------------------------------------------+
| HIGH     | jackson-core-2.22.2.jar     | CVE-2026-89407  | Upgrade to version com.fasterxml.jackson.core:jackson-core:2.18.11,                             |
|          |                             |                 | https://github.com/FasterXML/jackson-core.git - jackson-core-2.21.7,                            |
|          |                             |                 | https://github.com/FasterXML/jackson-core.git - jackson-core-3.1.7,                             |
|          |                             |                 | https://github.com/FasterXML/jackson-core.git - jackson-core-2.18.11,                           |
|          |                             |                 | https://github.com/FasterXML/jackson-core.git - jackson-core-3.2.2,                             |
|          |                             |                 | https://github.com/FasterXML/jackson-core.git - jackson-core-2.22.3,                            |
|          |                             |                 | tools.jackson.core:jackson-core:3.1.7,com.fasterxml.jackson.core:jackson-core:2.22.3,           |
|          |                             |                 | com.fasterxml.jackson.core:jackson-core:2.21.7                                                  |
+----------+-----------------------------+-----------------+-------------------------------------------------------------------------------------------------+
| HIGH     | jackson-core-2.22.2.jar     | CVE-2026-89425  | Upgrade to version  https://github.com/FasterXML/jackson-core.git - jackson-core-3.2.3,         |
|          |                             |                 | https://github.com/FasterXML/jackson-core.git - jackson-core-2.18.11,                           |
|          |                             |                 | https://github.com/FasterXML/jackson-core.git - jackson-core-2.21.7,                            |
|          |                             |                 | https://github.com/FasterXML/jackson-core.git - jackson-core-2.22.3,                            |
|          |                             |                 | tools.jackson.core:jackson-core:3.1.7,com.fasterxml.jackson.core:jackson-core:2.22.3,           |
|          |                             |                 | com.fasterxml.jackson.core:jackson-core:2.21.7,com.fasterxml.jackson.core:jackson-core:2.18.11, |
|          |                             |                 | https://github.com/FasterXML/jackson-core.git - jackson-core-3.1.7                              |
+----------+-----------------------------+-----------------+-------------------------------------------------------------------------------------------------+
| HIGH     | jackson-databind-2.22.2.jar | CVE-2026-91776  | Upgrade to version  https://github.com/FasterXML/jackson-databind.git - jackson-databind-3.1.7, |
|          |                             |                 | https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.21.7,                    |
|          |                             |                 | com.fasterxml.jackson.core:jackson-databind:2.18.11,                                            |
|          |                             |                 | com.fasterxml.jackson.core:jackson-databind:2.21.7,tools.jackson.core:jackson-databind:3.1.7,   |
|          |                             |                 | https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.22.3,                    |
|          |                             |                 | https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.18.11,                   |
|          |                             |                 | https://github.com/FasterXML/jackson-databind.git - jackson-databind-3.2.3                      |
+----------+-----------------------------+-----------------+-------------------------------------------------------------------------------------------------+
| HIGH     | jackson-databind-2.22.2.jar | CVE-2026-91777  | Upgrade to version  https://github.com/FasterXML/jackson-databind.git - jackson-databind-3.1.7, |
|          |                             |                 | https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.18.11,                   |
|          |                             |                 | https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.22.3,                    |
|          |                             |                 | https://github.com/FasterXML/jackson-databind.git - jackson-databind-3.2.3,                     |
|          |                             |                 | https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.21.7,                    |
|          |                             |                 | tools.jackson.core:jackson-databind:3.1.7,com.fasterxml.jackson.core:jackson-databind:2.21.7,   |
|          |                             |                 | com.fasterxml.jackson.core:jackson-databind:2.18.11                                             |
+----------+-----------------------------+-----------------+-------------------------------------------------------------------------------------------------+
| MEDIUM   | asm-5.0.3.jar               | CVE-2026-110257 | Upgrade to version org.ow2.asm:asm:9.11, https://gitlab.ow2.org/asm/asm.git - ASM_9_11          |
+----------+-----------------------------+-----------------+-------------------------------------------------------------------------------------------------+
| MEDIUM   | asm-5.0.3.jar               | CVE-2026-110258 | Upgrade to version  https://gitlab.ow2.org/asm/asm.git - ASM_9_11,org.ow2.asm:asm:9.11          |
+----------+-----------------------------+-----------------+-------------------------------------------------------------------------------------------------+
| MEDIUM   | asm-5.0.3.jar               | CVE-2026-110260 | Upgrade to version org.ow2.asm:asm:9.11, https://gitlab.ow2.org/asm/asm.git - ASM_9_11          |
+----------+-----------------------------+-----------------+-------------------------------------------------------------------------------------------------+
| MEDIUM   | asm-5.0.3.jar               | CVE-2026-110261 | Upgrade to version org.ow2.asm:asm:9.11, https://gitlab.ow2.org/asm/asm.git - ASM_9_11          |
+----------+-----------------------------+-----------------+-------------------------------------------------------------------------------------------------+
| MEDIUM   | asm-5.0.3.jar               | CVE-2026-110263 | Upgrade to version org.ow2.asm:asm:9.11, https://gitlab.ow2.org/asm/asm.git - ASM_9_11          |
+----------+-----------------------------+-----------------+-------------------------------------------------------------------------------------------------+
| MEDIUM   | asm-5.0.3.jar               | CVE-2026-110591 | Upgrade to version org.ow2.asm:asm:9.11, https://gitlab.ow2.org/asm/asm.git - ASM_9_11,         |
|          |                             |                 | org.ow2.asm:asm-analysis:9.11                                                                   |
+----------+-----------------------------+-----------------+-------------------------------------------------------------------------------------------------+
| MEDIUM   | asm-analysis-5.0.3.jar      | CVE-2026-110591 | Upgrade to version org.ow2.asm:asm:9.11, https://gitlab.ow2.org/asm/asm.git - ASM_9_11,         |
|          |                             |                 | org.ow2.asm:asm-analysis:9.11                                                                   |
+----------+-----------------------------+-----------------+-------------------------------------------------------------------------------------------------+
| MEDIUM   | asm-commons-5.0.3.jar       | CVE-2026-110270 | Upgrade to version org.ow2.asm:asm-commons:9.11, https://gitlab.ow2.org/asm/asm.git - ASM_9_11  |
+----------+-----------------------------+-----------------+-------------------------------------------------------------------------------------------------+
| MEDIUM   | guava-19.0.jar              | CVE-2018-10237  | Upgrade to version 24.1.1-jre, 24.1.1-android                                                   |
+----------+-----------------------------+-----------------+-------------------------------------------------------------------------------------------------+
| MEDIUM   | guava-19.0.jar              | CVE-2023-2976   | Upgrade to version com.google.guava:guava:32.0.1-android,32.0.1-jre                             |
+----------+-----------------------------+-----------------+-------------------------------------------------------------------------------------------------+
| LOW      | asm-commons-5.0.3.jar       | CVE-2026-110262 | Upgrade to version org.ow2.asm:asm-commons:9.11, https://gitlab.ow2.org/asm/asm.git - ASM_9_11  |
+----------+-----------------------------+-----------------+-------------------------------------------------------------------------------------------------+
| LOW      | guava-19.0.jar              | CVE-2020-8908   | Upgrade to version  https://github.com/google/guava.git - v32.0.0                               |
+----------+-----------------------------+-----------------+-------------------------------------------------------------------------------------------------+


Paths at risk

P = policy violation
MSC = malicious vulnerability
CRITICAL/HIGH/MEDIUM/LOW = vulnerability severity

path-mapped-pathdb-3.4-SNAPSHOT.pom
|-- path-mapped-pathdb-datastax-3.4-SNAPSHOT.jar
	|-- cassandra-driver-core-3.13.0.jar
		|-- jackson-databind-2.22.2.jar [2 HIGH]
			|-- jackson-core-2.22.2.jar [2 HIGH]
		|-- jnr-ffi-2.1.7.jar
			|-- asm-analysis-5.0.3.jar [1 MEDIUM]
			|-- asm-commons-5.0.3.jar [1 MEDIUM, 1 LOW]
			|-- asm-tree-5.0.3.jar
				|-- asm-5.0.3.jar [6 MEDIUM]
			|-- asm-5.0.3.jar [6 MEDIUM]
		|-- guava-19.0.jar [1 HIGH, 2 MEDIUM, 1 LOW]
	|-- cassandra-driver-mapping-3.13.0.jar
		|-- guava-19.0.jar [1 HIGH, 2 MEDIUM, 1 LOW]
		|-- asm-5.0.3.jar [6 MEDIUM]


No Policy violations were detected

Project 'path-mapped-storage-pr' was updated, for more information, visit the Mend platform: https://ibmets.whitesourcesoftware.com/app/orgs/Enterprise%20Applications/applications/summary?project=9730031b-d3fc-4279-98b3-6c66af5ef174
Or the Core UI: https://ibmets.whitesourcesoftware.com/Wss/WSS.html#!project;token=85e3802ea2fe477fbf92a247161a37cdaa39c61bed5542af88a94a63b6706473

Mend AI scan succeeded.

Support Token: 1db5fd8a4cc0442bf98bd4bbd654e80de1792070573141
SAST scan output
*no findings*

Full logs and artifacts

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants