fix(deps): bump postgresql to 42.7.12 and assertj-core to 3.27.7 in template #2

2026-10-16T20:39:21Z

KofTwentyTwo commented

2026-10-16 20:39:21 +00:00

(Migrated from github.com)

Resolves Dependabot alerts in template/pom.xml:

#2 high GHSA-98qh-xjc8-98pq, org.postgresql:postgresql 42.7.2 -> 42.7.12 (latest patch line, also includes GHSA-j92g-9f8w-j867 fix)
#1 high GHSA-rqfh-9r24-8c9r, org.assertj:assertj-core 3.23.1 -> 3.27.7 (also covered by #1, which only bumps assertj)

The template pom uses placeholder versions for the qqq BOM, so it is not built directly here; the change is limited to the two version strings and the pom was validated as well-formed XML.

🤖 Generated with Claude Code

Resolves Dependabot alerts in template/pom.xml: - #2 high GHSA-98qh-xjc8-98pq, org.postgresql:postgresql 42.7.2 -> 42.7.12 (latest patch line, also includes GHSA-j92g-9f8w-j867 fix) - #1 high GHSA-rqfh-9r24-8c9r, org.assertj:assertj-core 3.23.1 -> 3.27.7 (also covered by #1, which only bumps assertj) The template pom uses placeholder versions for the qqq BOM, so it is not built directly here; the change is limited to the two version strings and the pom was validated as well-formed XML. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

You are not authorized to merge this pull request.

This pull request can be merged automatically.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin feature/security-findings-2026-10:feature/security-findings-2026-10

git checkout feature/security-findings-2026-10

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: QRun-IO/new-qqq-application-template#2