mend-for-github-com[bot]

Results 1661 issues of mend-for-github-com[bot]

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [aws-actions/configure-aws-credentials](https://redirect.github.com/aws-actions/configure-aws-credentials) | action | minor | `v4.1.0` -> `v4.2.1` | --- ### Release...

skip-changelog

This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [io.swagger.core.v3:swagger-core](https://redirect.github.com/swagger-api/swagger-core) | `2.2.30` -> `2.2.32` | [![age](https://developer.mend.io/api/mc/badges/age/maven/io.swagger.core.v3:swagger-core/2.2.32?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/maven/io.swagger.core.v3:swagger-core/2.2.32?slim=true)](https://docs.renovatebot.com/merge-confidence/)...

skip-changelog

This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [io.swagger.parser.v3:swagger-parser-v3](http://nexus.sonatype.org/oss-repository-hosting.html) ([source](https://redirect.github.com/swagger-api/swagger-parser)) | `2.1.26` -> `2.1.27` | [![age](https://developer.mend.io/api/mc/badges/age/maven/io.swagger.parser.v3:swagger-parser-v3/2.1.27?slim=true)](https://docs.renovatebot.com/merge-confidence/) |...

skip-changelog

This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [com.diffplug.spotless:spotless-plugin-gradle](https://redirect.github.com/diffplug/spotless) | `7.0.2` -> `7.0.3` | [![age](https://developer.mend.io/api/mc/badges/age/maven/com.diffplug.spotless:spotless-plugin-gradle/7.0.3?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/maven/com.diffplug.spotless:spotless-plugin-gradle/7.0.3?slim=true)](https://docs.renovatebot.com/merge-confidence/)...

skip-changelog

## CVE-2025-1194 - Medium Severity Vulnerability Vulnerable Library - transformers-4.49.0-py3-none-any.whl State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow Library home page: https://files.pythonhosted.org/packages/20/37/1f29af63e9c30156a3ed6ebc2754077016577c094f31de7b2631e5d379eb/transformers-4.49.0-py3-none-any.whl Path to dependency file: /requirements.txt Path to vulnerable...

Mend: dependency security vulnerability

## CVE-2025-2999 - Medium Severity Vulnerability Vulnerable Library - torch-2.5.1-cp39-none-macosx_11_0_arm64.whl Tensors and Dynamic neural networks in Python with strong GPU acceleration Library home page: https://files.pythonhosted.org/packages/25/07/3548a7cfcf69d0eccec2ee79ee3913f1cdaadb27b36946774db86729ee47/torch-2.5.1-cp39-none-macosx_11_0_arm64.whl Path to dependency file: /requirements.txt...

Mend: dependency security vulnerability

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [io.grpc:grpc-netty](https://redirect.github.com/grpc/grpc-java) | dependencies | minor | `1.68.1` -> `1.70.0` | By merging this...

security fix

Vulnerable Library - testcontainers-1.21.0.jar Path to dependency file: /build.gradle.kts Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/org.apache.commons/commons-compress/1.24.0/b4b1b5a3d9573b2970fddab236102c0a4d27d35e/commons-compress-1.24.0.jar Found in HEAD commit: cacf3c64795d67321e801ed28643d7cc1fd29eae ## Vulnerabilities | Vulnerability | Severity | CVSS | Dependency |...

Mend: dependency security vulnerability
untriaged

This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | com.diffplug.spotless | `6.25.0` -> `7.0.3` | [![age](https://developer.mend.io/api/mc/badges/age/maven/com.diffplug.spotless:com.diffplug.spotless.gradle.plugin/7.0.3?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/maven/com.diffplug.spotless:com.diffplug.spotless.gradle.plugin/7.0.3?slim=true)](https://docs.renovatebot.com/merge-confidence/)...

backport 1.x
distinguished-contributor

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [codecov/codecov-action](https://redirect.github.com/codecov/codecov-action) | action | major | `v4` -> `v5` | --- ### Release...

backport 1.x
distinguished-contributor