Skip to content

fix(deps): upgrade Bouncy Castle past CVE-2025-14813 (critical) and C… #4632

fix(deps): upgrade Bouncy Castle past CVE-2025-14813 (critical) and C…

fix(deps): upgrade Bouncy Castle past CVE-2025-14813 (critical) and C… #4632

Triggered via push September 1, 2026 15:15
Status Success
Total duration 12m 12s
Artifacts 8

cicd.yml

on: push
Detect changes
16s
Detect changes
Changesets  /  Verify changesets
Changesets / Verify changesets
Matrix: Docker / Agent: Pi / build
Matrix: Docker / App Server / build
Matrix: Docker / Postgres (pg_partman) / build
Matrix: Docker / Webapp / build
Matrix: Quality / quality-gates
Waiting for pending jobs
Actionlint
Actionlint
Zizmor
Zizmor
Docker  /  Tag unchanged images
Docker / Tag unchanged images
Compose  /  Render compose stacks
Compose / Render compose stacks
Security  /  Dependencies, secrets, and policy
Security / Dependencies, secrets, and policy
Test  /  App Server: Integration
Test / App Server: Integration
Test  /  Webapp: Stories
Test / Webapp: Stories
Test  /  App Server: Reactor
Test / App Server: Reactor
Docker  /  ...  /  Create manifest
56s
Docker / Agent: Pi / Create manifest
Docker  /  ...  /  Create manifest
47s
Docker / App Server / Create manifest
Docker  /  ...  /  Create manifest
54s
Docker / Postgres (pg_partman) / Create manifest
Docker  /  ...  /  Create manifest
36s
Docker / Webapp / Create manifest
Test  /  Webapp: E2E
Test / Webapp: E2E
CI Status Gate
6s
CI Status Gate
Fit to window
Zoom out
Zoom in

Annotations

46 warnings
Docker / Postgres (pg_partman) / Build linux/arm64 Docker Image
sentry_project= is not a valid secret
Docker / Postgres (pg_partman) / Build linux/arm64 Docker Image
sentry_org= is not a valid secret
Docker / Postgres (pg_partman) / Build linux/arm64 Docker Image
sentry_auth_token= is not a valid secret
Docker / Postgres (pg_partman) / Build linux/amd64 Docker Image
sentry_project= is not a valid secret
Docker / Postgres (pg_partman) / Build linux/amd64 Docker Image
sentry_org= is not a valid secret
Docker / Postgres (pg_partman) / Build linux/amd64 Docker Image
sentry_auth_token= is not a valid secret
Docker / Postgres (pg_partman) / Create manifest
Please check that the "artifact-metadata:write" permission has been included
Docker / Postgres (pg_partman) / Create manifest
Failed to create storage record: Error: Failed to persist storage record: no artifacts found - https://docs.github.com/rest/orgs/artifact-metadata#create-artifact-metadata-storage-record
Docker / App Server / Build linux/arm64 Docker Image: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/sync/status/GithubIntegrationSyncRunnerTest.java#L240
unchecked generic array creation for varargs parameter of type java.util.List<de.tum.cit.aet.hephaestus.integration.core.spi.SyncTargetProvider.SyncTarget>[]
Docker / App Server / Build linux/arm64 Docker Image: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/sync/status/GithubIntegrationSyncRunnerTest.java#L137
unchecked generic array creation for varargs parameter of type java.util.List<de.tum.cit.aet.hephaestus.integration.core.spi.SyncTargetProvider.SyncTarget>[]
Docker / App Server / Build linux/arm64 Docker Image: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L481
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
Docker / App Server / Build linux/arm64 Docker Image: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L464
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
Docker / App Server / Build linux/arm64 Docker Image: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L441
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
Docker / App Server / Build linux/arm64 Docker Image: server/application/src/test/java/de/tum/cit/aet/hephaestus/core/auth/web/SecurityHeadersIntegrationTest.java#L47
value(java.lang.String,org.hamcrest.Matcher<? super java.lang.String>) in org.springframework.test.web.reactive.server.HeaderAssertions has been deprecated and marked for removal
Docker / App Server / Build linux/arm64 Docker Image: server/application/src/test/java/de/tum/cit/aet/hephaestus/core/auth/dev/DevLoginIntegrationTest.java#L80
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
Docker / App Server / Build linux/arm64 Docker Image: server/application/src/test/java/de/tum/cit/aet/hephaestus/core/audit/ConfigAuditIntegrationTest.java#L414
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
Docker / App Server / Build linux/arm64 Docker Image: server/application/src/test/java/de/tum/cit/aet/hephaestus/core/audit/ConfigAuditIntegrationTest.java#L412
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
Docker / App Server / Build linux/arm64 Docker Image: server/application/src/main/java/de/tum/cit/aet/hephaestus/workspace/WorkspaceService.java#L174
ownerUserId() in de.tum.cit.aet.hephaestus.workspace.dto.CreateWorkspaceRequestDTO has been deprecated and marked for removal
Docker / Agent: Pi / Build linux/amd64 Docker Image
sentry_project= is not a valid secret
Docker / Agent: Pi / Build linux/amd64 Docker Image
sentry_org= is not a valid secret
Docker / Agent: Pi / Build linux/amd64 Docker Image
sentry_auth_token= is not a valid secret
Docker / App Server / Build linux/amd64 Docker Image: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/sync/status/GithubIntegrationSyncRunnerTest.java#L240
unchecked generic array creation for varargs parameter of type java.util.List<de.tum.cit.aet.hephaestus.integration.core.spi.SyncTargetProvider.SyncTarget>[]
Docker / App Server / Build linux/amd64 Docker Image: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/sync/status/GithubIntegrationSyncRunnerTest.java#L137
unchecked generic array creation for varargs parameter of type java.util.List<de.tum.cit.aet.hephaestus.integration.core.spi.SyncTargetProvider.SyncTarget>[]
Docker / App Server / Build linux/amd64 Docker Image: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L481
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
Docker / App Server / Build linux/amd64 Docker Image: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L464
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
Docker / App Server / Build linux/amd64 Docker Image: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L441
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
Docker / App Server / Build linux/amd64 Docker Image: server/application/src/test/java/de/tum/cit/aet/hephaestus/core/auth/web/SecurityHeadersIntegrationTest.java#L47
value(java.lang.String,org.hamcrest.Matcher<? super java.lang.String>) in org.springframework.test.web.reactive.server.HeaderAssertions has been deprecated and marked for removal
Docker / App Server / Build linux/amd64 Docker Image: server/application/src/test/java/de/tum/cit/aet/hephaestus/core/auth/dev/DevLoginIntegrationTest.java#L80
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
Docker / App Server / Build linux/amd64 Docker Image: server/application/src/test/java/de/tum/cit/aet/hephaestus/core/audit/ConfigAuditIntegrationTest.java#L414
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
Docker / App Server / Build linux/amd64 Docker Image: server/application/src/test/java/de/tum/cit/aet/hephaestus/core/audit/ConfigAuditIntegrationTest.java#L412
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
Docker / App Server / Build linux/amd64 Docker Image: server/application/src/main/java/de/tum/cit/aet/hephaestus/workspace/WorkspaceService.java#L174
ownerUserId() in de.tum.cit.aet.hephaestus.workspace.dto.CreateWorkspaceRequestDTO has been deprecated and marked for removal
Docker / Agent: Pi / Build linux/arm64 Docker Image
sentry_project= is not a valid secret
Docker / Agent: Pi / Build linux/arm64 Docker Image
sentry_org= is not a valid secret
Docker / Agent: Pi / Build linux/arm64 Docker Image
sentry_auth_token= is not a valid secret
Docker / App Server / Create manifest
Please check that the "artifact-metadata:write" permission has been included
Docker / App Server / Create manifest
Failed to create storage record: Error: Failed to persist storage record: no artifacts found - https://docs.github.com/rest/orgs/artifact-metadata#create-artifact-metadata-storage-record
Docker / Webapp / Build linux/arm64 Docker Image
sentry_project= is not a valid secret
Docker / Webapp / Build linux/arm64 Docker Image
sentry_org= is not a valid secret
Docker / Webapp / Build linux/arm64 Docker Image
sentry_auth_token= is not a valid secret
Docker / Agent: Pi / Create manifest
Please check that the "artifact-metadata:write" permission has been included
Docker / Agent: Pi / Create manifest
Failed to create storage record: Error: Failed to persist storage record: no artifacts found - https://docs.github.com/rest/orgs/artifact-metadata#create-artifact-metadata-storage-record
Docker / Webapp / Build linux/amd64 Docker Image
sentry_project= is not a valid secret
Docker / Webapp / Build linux/amd64 Docker Image
sentry_org= is not a valid secret
Docker / Webapp / Build linux/amd64 Docker Image
sentry_auth_token= is not a valid secret
Docker / Webapp / Create manifest
Please check that the "artifact-metadata:write" permission has been included
Docker / Webapp / Create manifest
Failed to create storage record: Error: Failed to persist storage record: no artifacts found - https://docs.github.com/rest/orgs/artifact-metadata#create-artifact-metadata-storage-record

Artifacts

Produced during runtime
Name Size Digest
digests-hephaestus-build-agent-pi-linux-amd64 Expired
244 Bytes
sha256:1d27a75c234a3923e7261ab376c56020c17716154eb08896d7d11aad62a9d101
digests-hephaestus-build-agent-pi-linux-arm64 Expired
244 Bytes
sha256:6c5f07ffb99801353f5bf3c63e4008771a18fcb4765aa8d9c598fdd8218b6d89
digests-hephaestus-build-application-server-linux-amd64 Expired
244 Bytes
sha256:53698e6d85bf22ac292cb6d62c7c4d20544f8aaafef49f573b1a356a80facd72
digests-hephaestus-build-application-server-linux-arm64 Expired
244 Bytes
sha256:782cdc8fbe42cb6bbd63d93c55b4a5aaba2180691fb64d39ea7ab514af3ed181
digests-hephaestus-build-postgres-linux-amd64 Expired
244 Bytes
sha256:7db063bca65b866e753552ebbaa5e9415cb7f850adc42925e375fb65150d3de1
digests-hephaestus-build-postgres-linux-arm64 Expired
244 Bytes
sha256:1d1b9ce9566d624ffdce7e44a2e1cff91bed27f9f86638fd0c3da75e33f3ed24
digests-hephaestus-build-webapp-linux-amd64 Expired
244 Bytes
sha256:8d27882126f6fac51f916dc04b69bf1a5d0e0cb15afe7db36f96c0c6797cc18c
digests-hephaestus-build-webapp-linux-arm64 Expired
244 Bytes
sha256:e522c77d0c1119daf9dec071128fd1833dfebac39b042281d327a24cb693505e