(tomee) 02/02: TOMEE-4678 update micrometer to 1.15.12

[rz...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

rzo1 pushed a commit to branch tomee-10.x
in repository https://gitbox.apache.org/repos/asf/tomee.git

commit ecc7775b7e984936e15416b9b038b9ea2214418a
Author: Richard Zowalla <rz...@apache.org>
AuthorDate: Sun Sep 20 20:55:40 2026 +0200

    TOMEE-4678 update micrometer to 1.15.12
    
    Fixes CVE-2026-40984, which has no patch in the 1.12 line. Micrometer 1.13
    moved PrometheusMeterRegistry to io.micrometer.prometheusmetrics, while
    smallrye-metrics 5.1.0 still uses io.micrometer.prometheus, so the registry
    artifact becomes micrometer-registry-prometheus-simpleclient, which keeps that
    package. MicroProfile Metrics TCK passes, 178 tests.
---
 pom.xml                                    | 2 +-
 tomee/tomee-microprofile/mp-common/pom.xml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/pom.xml b/pom.xml
index 65164dfdfc..5798d11cd6 100644
--- a/pom.xml
+++ b/pom.xml
@@ -168,7 +168,7 @@
     <maven.compiler.target>17</maven.compiler.target>
 
     <maven.compiler.release>17</maven.compiler.release>
-    <version.micrometer>1.12.5</version.micrometer>
+    <version.micrometer>1.15.12</version.micrometer>
     <!-- Micro Profile APIs (6.1)  -->
     <version.microprofile.config>3.1</version.microprofile.config>
     <version.microprofile.fault-tolerance>4.0.2</version.microprofile.fault-tolerance>
diff --git a/tomee/tomee-microprofile/mp-common/pom.xml b/tomee/tomee-microprofile/mp-common/pom.xml
index a5c56ce733..6bc8811c67 100644
--- a/tomee/tomee-microprofile/mp-common/pom.xml
+++ b/tomee/tomee-microprofile/mp-common/pom.xml
@@ -244,7 +244,7 @@
 
     <dependency>
       <groupId>io.micrometer</groupId>
-      <artifactId>micrometer-registry-prometheus</artifactId>
+      <artifactId>micrometer-registry-prometheus-simpleclient</artifactId>
       <version>${version.micrometer}</version>
     </dependency>