Skip to content

build(deps): bump io.github.guacsec:trustify-da-api-model from 2.0.4 to 2.0.7#333

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/maven/io.github.guacsec-trustify-da-api-model-2.0.7
Open

build(deps): bump io.github.guacsec:trustify-da-api-model from 2.0.4 to 2.0.7#333
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/maven/io.github.guacsec-trustify-da-api-model-2.0.7

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 2, 2026

Bumps io.github.guacsec:trustify-da-api-model from 2.0.4 to 2.0.7.

Release notes

Sourced from io.github.guacsec:trustify-da-api-model's releases.

Release 2.0.7

What's Changed

Full Changelog: guacsec/trustify-da-api-spec@v2.0.5...v2.0.7

Release 2.0.5

What's Changed

New Contributors

Full Changelog: guacsec/trustify-da-api-spec@v2.0.2...v2.0.5

Commits
  • 07b74de build(release): release version 2.0.7
  • 92e04bc Merge pull request #102 from guacsec/release/v2.0.5
  • 92185f6 Merge branch 'main' into release/v2.0.5
  • c0e5cc6 Merge pull request #103 from ruromero/fix/publish-release
  • c4999e2 fix: version bump missing update-sources
  • f54c1c8 build(release): bump to next development version
  • 1d981c7 build(release): release version 2.0.5
  • 817898b Merge pull request #101 from ruromero/fix/release-version
  • f62a400 fix: avoid creating unnecessary backup pom
  • d08c39e fix: invalid version bump and body generation
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Mar 2, 2026
@github-actions
Copy link
Contributor

github-actions bot commented Mar 2, 2026

Test Results

335 tests   335 ✅  1m 41s ⏱️
 20 suites    0 💤
 20 files      0 ❌

Results for commit 905fad1.

♻️ This comment has been updated with latest results.

@soul2zimate
Copy link
Contributor

Validating component analysis...
Output structure: {
  "providers": {}
}
Expected structure: {
  "scanned": {
    "total": 4,
    "direct": 4,
    "transitive": 0
  },
  "rhtpa": {
    "osv-github": {
      "direct": 2,
      "transitive": 0,
      "total": 2,
      "dependencies": 1,
      "critical": 0,
      "high": 0,
      "medium": 2,
      "low": 0,
      "remediations": 0,
      "recommendations": 0,
      "unscanned": 0
    }
  }
}
❌ component_analysis output is empty - only contains empty providers
❌ Component analysis validation failed

All non image integration tests fail in this trustify-da-api-model bump. The log indicates that there is zero provider found.

Hi @ruromero I was wondering if you happen to know which related change might have caused these tests to fail.

Bumps [io.github.guacsec:trustify-da-api-model](https://github.com/guacsec/trustify-da-api-spec) from 2.0.4 to 2.0.7.
- [Release notes](https://github.com/guacsec/trustify-da-api-spec/releases)
- [Commits](guacsec/trustify-da-api-spec@v2.0.4...v2.0.7)

---
updated-dependencies:
- dependency-name: io.github.guacsec:trustify-da-api-model
  dependency-version: 2.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/maven/io.github.guacsec-trustify-da-api-model-2.0.7 branch from 0d61c04 to 905fad1 Compare March 4, 2026 00:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant