Skip to content
CodeQL JAVA

Bump cxf.version from 3.6.8 to 4.2.2 #1604

Sign in to view logs

Bump cxf.version from 3.6.8 to 4.2.2

Bump cxf.version from 3.6.8 to 4.2.2 #1604

Triggered via pull request July 21, 2026 19:02
@dependabotdependabot[bot]
opened #835
dependabot/maven/cxf.version-4.2.2
Status Failure
Total duration 4m 56s
Artifacts –

codeql-analysis-java.yml

on: pull_request
Analyze
4m 52s
Analyze
Fit to window
Zoom out
Zoom in

Annotations

10 errors and 13 warnings
Analyze: extensions/geonames/rest/src/main/java/org/apache/unomi/geonames/rest/GeonamesEndPoint.java#L75
cannot find symbol
Analyze: extensions/geonames/rest/src/main/java/org/apache/unomi/geonames/rest/GeonamesEndPoint.java#L75
cannot find symbol
Analyze: extensions/geonames/rest/src/main/java/org/apache/unomi/geonames/rest/GeonamesEndPoint.java#L40
cannot find symbol
Analyze: extensions/geonames/rest/src/main/java/org/apache/unomi/geonames/rest/GeonamesEndPoint.java#L30
package javax.ws.rs does not exist
Analyze: extensions/geonames/rest/src/main/java/org/apache/unomi/geonames/rest/GeonamesEndPoint.java#L114
cannot find symbol
Analyze: extensions/geonames/rest/src/main/java/org/apache/unomi/geonames/rest/GeonamesEndPoint.java#L93
cannot find symbol
Analyze: extensions/geonames/rest/src/main/java/org/apache/unomi/geonames/rest/GeonamesEndPoint.java#L45
cannot find symbol
Analyze: extensions/geonames/rest/src/main/java/org/apache/unomi/geonames/rest/GeonamesEndPoint.java#L40
cannot find symbol
Analyze: extensions/geonames/rest/src/main/java/org/apache/unomi/geonames/rest/GeonamesEndPoint.java#L32
package javax.ws.rs.core does not exist
Analyze: extensions/geonames/rest/src/main/java/org/apache/unomi/geonames/rest/GeonamesEndPoint.java#L31
package javax.ws.rs.core does not exist
Analyze
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: github/codeql-action/init@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Analyze: services/src/main/java/org/apache/unomi/services/mergers/AddPropertyMergeStrategyExecutor.java#L33
Integer(int) in java.lang.Integer has been deprecated and marked for removal
Analyze: services-common/src/main/java/org/apache/unomi/services/common/security/KarafSecurityService.java#L243
getSubject(java.security.AccessControlContext) in javax.security.auth.Subject has been deprecated and marked for removal
Analyze: services-common/src/main/java/org/apache/unomi/services/common/security/KarafSecurityService.java#L243
java.security.AccessController in java.security has been deprecated and marked for removal
Analyze: services-common/src/main/java/org/apache/unomi/services/common/security/KarafSecurityService.java#L205
getSubject(java.security.AccessControlContext) in javax.security.auth.Subject has been deprecated and marked for removal
Analyze: services-common/src/main/java/org/apache/unomi/services/common/security/KarafSecurityService.java#L205
java.security.AccessController in java.security has been deprecated and marked for removal
Analyze: services-common/src/main/java/org/apache/unomi/services/common/security/KarafSecurityService.java#L143
getSubject(java.security.AccessControlContext) in javax.security.auth.Subject has been deprecated and marked for removal
Analyze: services-common/src/main/java/org/apache/unomi/services/common/security/KarafSecurityService.java#L143
java.security.AccessController in java.security has been deprecated and marked for removal
Analyze: persistence-opensearch/core/src/main/java/org/apache/unomi/persistence/opensearch/OpenSearchPersistenceServiceImpl.java#L2782
Double(double) in java.lang.Double has been deprecated and marked for removal
Analyze: common/src/main/java/org/apache/unomi/common/DataTable.java#L241
non-varargs call of varargs method with inexact argument type for last parameter;
Analyze: api/src/main/java/org/apache/unomi/api/services/EventService.java#L81
deprecated item is not annotated with @deprecated
Analyze
Cannot build an overlay database because build-mode is set to "undefined" instead of "none". Falling back to creating a normal full database instead.
Analyze
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/