This is an automated email from the ASF dual-hosted git repository. rzo1 pushed a commit to branch tomee-10.x in repository https://gitbox.apache.org/repos/asf/tomee.git
commit ecc7775b7e984936e15416b9b038b9ea2214418a Author: Richard Zowalla <[email protected]> AuthorDate: Sun Sep 20 20:55:40 2026 +0200 TOMEE-4678 update micrometer to 1.15.12 Fixes CVE-2026-40984, which has no patch in the 1.12 line. Micrometer 1.13 moved PrometheusMeterRegistry to io.micrometer.prometheusmetrics, while smallrye-metrics 5.1.0 still uses io.micrometer.prometheus, so the registry artifact becomes micrometer-registry-prometheus-simpleclient, which keeps that package. MicroProfile Metrics TCK passes, 178 tests. --- pom.xml | 2 +- tomee/tomee-microprofile/mp-common/pom.xml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/pom.xml b/pom.xml index 65164dfdfc..5798d11cd6 100644 --- a/pom.xml +++ b/pom.xml @@ -168,7 +168,7 @@ <maven.compiler.target>17</maven.compiler.target> <maven.compiler.release>17</maven.compiler.release> - <version.micrometer>1.12.5</version.micrometer> + <version.micrometer>1.15.12</version.micrometer> <!-- Micro Profile APIs (6.1) --> <version.microprofile.config>3.1</version.microprofile.config> <version.microprofile.fault-tolerance>4.0.2</version.microprofile.fault-tolerance> diff --git a/tomee/tomee-microprofile/mp-common/pom.xml b/tomee/tomee-microprofile/mp-common/pom.xml index a5c56ce733..6bc8811c67 100644 --- a/tomee/tomee-microprofile/mp-common/pom.xml +++ b/tomee/tomee-microprofile/mp-common/pom.xml @@ -244,7 +244,7 @@ <dependency> <groupId>io.micrometer</groupId> - <artifactId>micrometer-registry-prometheus</artifactId> + <artifactId>micrometer-registry-prometheus-simpleclient</artifactId> <version>${version.micrometer}</version> </dependency>
