[hashicorp-vault-sonar-prod]

This PR contains the following updates:

Package	Change	Age	Confidence
org.eclipse.jgit:org.eclipse.jgit	7.8.0.202609011348-r → 7.8.1.202611041320-r

---

Configuration

📅 Schedule: (in timezone CET)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[hashicorp-vault-sonar-prod]

Renovate Jira issue ID: SCAN4NET-1885

[datadog-sonarsource]

_{This comment will be updated automatically if new data arrives.
🔗 Commit SHA: 89ac204 | Docs | Give us feedback!}

[gitar-bot]

Renovate review: org.eclipse.jgit:org.eclipse.jgit 7.8.0.202609011348-r → 7.8.1.202611041320-r

Verdict: Low risk

• Scope: a patch release bump in its/pom.xml only. The dependency is used only by the integration tests.
• Usage impact: MultiLanguageTest.java uses only Git.init(), Git.open(), add().addFilepattern("."), and commit().setMessage(...).setSign(false). These are stable core APIs, and a 7.8.x patch bump is not expected to change them.
• Licensing: JGit is EDL/BSD-3, unchanged by this update, and used only for tests.
• Evidence: I did not fetch the upstream 7.8.1 release notes, so I have not confirmed that none of the fixes affect the commit path.
• CI: I did not review CI results. Merge only after the ITs that use MultiLanguageTest pass.

[gitar-bot]

Renovate safety review: Unable to verify

Update: org.eclipse.jgit:org.eclipse.jgit 7.8.0.202609011348-r → 7.8.1.202611041320-r (patch, its/pom.xml only, test scope for the ITs module).

Usage impact: Only MultiLanguageTest.java uses it, via Git.init() and Git.open(). These are core, stable APIs, and a patch release is unlikely to affect them.

Licensing: No change expected. JGit is EPL-2.0/EDL and is already used by this module.

CI: Some checks are still pending (Compute version), and Datadog reports 2 failed pipeline jobs, including ITs Windows / DEV_MsBuild16. I could not tie those failures to this change.

Uncertainties: I could not retrieve the official 7.8.1 release notes. The CI failures need a rerun or triage to confirm they are unrelated.

Verdict: Unable to verify. I found no identified material risk, but the release notes are missing and CI is not green.

[gitar-bot]

Code Review ✅ Approved 🟡 Medium risk

Upgrading the JGit dependency in its/pom.xml could change Git operation behavior or introduce compatibility issues in integration tests.

Bumps the org.eclipse.jgit:org.eclipse.jgit dependency from 7.8.0.202609011348-r to 7.8.1.202611041320-r. No issues found.

Verification Rules 2/2 met PRs 1 inspected

Functional validation No results

Rules 2 passed 1 action taken 1 not applicable

✅ Internal artifact registries
✅ Repository license compliance
🎸 Review major and minor Renovate updates - Posted advisory summary with verdict 'Unable to verify': patch update with limited Git.init/open usage, but release notes were unavailable and CI is pending or failing.

Broader impact PRs 1 inspected

Cross-PR 1 PR inspected 0 open impacts

PR 3537: BUILD-13564 Resolve sonar-scanner-msbuild dependencies from the production Edge Inspected

Auto-approval Not enabled

Set up

_{For more verification details, comment gitar display:verbose.}

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Showing compact verification results.

Comment with these commands to change the behavior for this request:

Auto-apply	Compact
gitar auto-apply:on	gitar display:verbose

_{Was this helpful? React with 👍 / 👎 | Gitar}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues
0 New dependency risks

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[vdiez]

Auto-approved: Renovate dependency update.