Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Sep 12, 2025

Bumps com.unboundid.product.scim:scim-sdk from 1.8.26 to 2.0.0.

Release notes

Sourced from com.unboundid.product.scim:scim-sdk's releases.

SCIM SDK 2.0.0

Changes In This Release

  • The SCIM 1.1 SDK now requires Java 11 or newer.
  • Migrated javax.* namespaces to use jakarta.* namespaces from Jakarta EE.
  • Updated the LDAPSDK to version 7.0.1.
Changelog

Sourced from com.unboundid.product.scim:scim-sdk's changelog.

v2.0.0 - 2025-06-17

  • The UnboundID SCIM 1.1 SDK now requires Java 11 or a later release.

  • Migrated javax.* namespaces to use jakarta.* namespaces from Jakarta EE. If your project uses components that reference javax objects passed into or received from the SCIM 1.1 SDK, these must be updated to use Jakarta instead. The exceptions to this are javax.xml.stream.XMLStreamException and javax.xml.stream.XMLStreamWriter, which come from the Java Development Kit and are not associated with Java EE or Jakarta EE.

  • Dependency changes:

    • com.unboundid:unboundid-ldapsdk was updated to version 7.0.1
    • org.glassfish.jaxb:jaxb-runtime version 4.0.4 was added
Commits
  • 3f9f8da Setting release version 2.0.0
  • 08daab3 Update pom.xml (#39)
  • 545c048 Setting release version 2.0.1-SNAPSHOT
  • 3ff6b33 Setting release version 2.0.0
  • ffc47fc Revert "Setting release version 2.0.0"
  • 55c8c67 Setting release version 2.0.0
  • f46c60f Update copyright years to 2025
  • 3ba0d56 Merge pull request #36 from pingidentity/update-to-jakarta
  • a92d626 Initial Jakarta Migration
  • b6e9b4c Merge pull request #35 from pingidentity/2024-copyright-update
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by cubic

Bump SCIM SDK from 1.8.26 to 2.0.0 to adopt Jakarta namespaces and require Java 11+. This major upgrade may need small import changes where we use the SDK.

  • Migration

    • Java 11+ is required.
    • Update javax.* imports to jakarta.* for SCIM SDK usage (javax.xml.stream.* stays the same).
  • Dependencies

    • Transitives: unboundid-ldapsdk 7.0.1; adds org.glassfish.jaxb:jaxb-runtime 4.0.4.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [com.unboundid.product.scim:scim-sdk](https://github.com/pingidentity/scim) from 1.8.26 to 2.0.0.
- [Release notes](https://github.com/pingidentity/scim/releases)
- [Changelog](https://github.com/pingidentity/scim/blob/master/CHANGELOG.md)
- [Commits](pingidentity/scim@scim-1.8.26...scim-2.0.0)

---
updated-dependencies:
- dependency-name: com.unboundid.product.scim:scim-sdk
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Sep 12, 2025
@kusari-inspector
Copy link

Kusari Inspector

Kusari Analysis Results:

Proceed with these changes

✅ No Flagged Issues Detected
All values appear to be within acceptable risk parameters.

No pinned version dependency changes, code issues or exposed secrets detected!

Note

View full detailed analysis result for more information on the output and the checks that were run.


@kusari-inspector rerun - Trigger a re-analysis of this PR
@kusari-inspector feedback [your message] - Send feedback to our AI and team
See Kusari's documentation for setup and configuration.
Commit: 75b7318, performed at: 2025-09-12T11:03:42Z

Found this helpful? Give it a 👍 or 👎 reaction!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant