[Copilot]

Addresses SMTP injection vulnerability (CVE-2025-7962, CVSS 7.5) in javax.mail 1.6.2 where \r and \n characters enable arbitrary SMTP command injection.

Changes

• Updated dependency in gradle/libs.versions.toml:
  • From: com.sun.mail:javax.mail:1.6.2
  • To: com.sun.mail:jakarta.mail:1.6.4

Notes

Starting with 1.6.4, the Maven artifact was renamed from javax.mail to jakarta.mail, but the package namespace remains javax.mail for backward compatibility. No code changes required.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• https://api.github.com/repos/getyourguide/openapi-validation-java/dependabot/alerts/31
  • Triggering command: /usr/bin/curl curl -s -H Accept: application/vnd.github+json REDACTED (http block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

[pboos]

complete miss 🤦