Phoenix Security Bot: automated remediation - partial_patch_manual_review (d1af66df-faf6-4912-8e39-251b731e66ba)

[demo-agent-remediator]

Automated fix proposed by Phoenix's remediation agent.

Warnings:

• 0199306e-a979-7131-acee-10232d585e9c: stale_finding_version_not_in_dependency_graph: org.yaml:snakeyaml@1.26; resolved_versions=1.27; skipped
• 0199306e-a9e2-7aba-938e-83b8416897cb: stale_finding_version_not_in_dependency_graph: org.yaml:snakeyaml@1.26; resolved_versions=1.27; skipped
• 0199306e-aa33-7106-ad7d-9dade55d98ac: stale_finding_version_not_in_dependency_graph: org.hibernate:hibernate-core@5.4.17.Final; resolved_versions=5.4.30.Final; skipped
• 0199306e-aa46-7cc8-9880-e6408d1e7221: stale_finding_version_not_in_dependency_graph: org.springframework.boot:spring-boot@2.3.1.RELEASE; resolved_versions=2.4.5; skipped
• 0199306e-aa73-79b6-a50f-045d08dc13ee: stale_finding_version_not_in_dependency_graph: org.hibernate:hibernate-core@5.4.17.Final; resolved_versions=5.4.30.Final; skipped
• 0199306e-aa85-794f-93dd-463be5afcd7b: stale_finding_version_not_in_dependency_graph: org.yaml:snakeyaml@1.26; resolved_versions=1.27; skipped
• 0199306e-aa98-75ac-b121-d229ebdc92c7: stale_finding_version_not_in_dependency_graph: org.apache.commons:commons-lang3@3.9; resolved_versions=3.11; skipped
• 0199306e-aad4-7b3d-a4f3-167289f889d2: stale_finding_version_not_in_dependency_graph: org.yaml:snakeyaml@1.26; resolved_versions=1.27; skipped
• 0199306e-aae8-7f4e-99da-a8149319134f: stale_finding_version_not_in_dependency_graph: org.yaml:snakeyaml@1.26; resolved_versions=1.27; skipped
• 0199306e-aafb-7578-9527-09c10518b6df: stale_finding_version_not_in_dependency_graph: org.yaml:snakeyaml@1.26; resolved_versions=1.27; skipped
• 0199306e-ab36-7b74-82a2-540440bb1779: stale_finding_version_not_in_dependency_graph: org.yaml:snakeyaml@1.26; resolved_versions=1.27; skipped
• 0199306e-abf9-7bbf-94c2-ab62ff4f41d6: stale_finding_version_not_in_dependency_graph: org.springframework.boot:spring-boot-autoconfigure@2.3.1.RELEASE; resolved_versions=2.4.5; skipped
• ::compileClasspath: unresolved_dependency: org.sasanlabs:vulnerable-shared-lib:1.0.0
• ::runtimeClasspath: unresolved_dependency: org.sasanlabs:vulnerable-shared-lib:1.0.0
• ::testCompileClasspath: unresolved_dependency: org.sasanlabs:vulnerable-shared-lib:1.0.0
• ::testRuntimeClasspath: unresolved_dependency: org.sasanlabs:vulnerable-shared-lib:1.0.0
• graph.root_node_not_marked_direct: commons-io:commons-io@2.7: resolver root node was promoted to direct
• manifest.direct_declaration_promoted_graph_node: commons-io:commons-io@2.7: static manifest declaration was used as direct dependency evidence
• graph.root_node_not_marked_direct: org.springframework.boot:spring-boot-starter-data-jpa@2.3.1.RELEASE: resolver root node was promoted to direct
• manifest.direct_declaration_promoted_graph_node: org.springframework.boot:spring-boot-starter-data-jpa@2.3.1.RELEASE: static manifest declaration was used as direct dependency evidence
• graph.root_node_not_marked_direct: org.springframework.boot:spring-boot-starter-web@2.4.5: resolver root node was promoted to direct
• compatibility_preflight_applied: gradle.bootJar.baseName.archiveBaseName
• gradle_wrapper_properties_present
• gradle_wrapper_metadata_rejected:missing_distribution_sha256_for_uncached_distribution
• gradle_execution_strategy:pinned_gradle_8
• gradle_attempt_failed:pinned_gradle_8:compatibility
• gradle_fallback_selected:pinned_gradle_7
• gradle_execution_strategy:pinned_gradle_7_fallback
• gradle_java_home_selected:pinned_gradle_7_fallback:gradle_7