From aacbd8da4c4a89c0b80cd51850c8035aee0b6ed1 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 22 Oct 2026 11:13:30 +0000
Subject: [PATCH 1/2] chore: bump org.jacoco:jacoco-maven-plugin from 0.8.14 to
 0.8.15

Bumps [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) from 0.8.14 to 0.8.15.
- [Release notes](https://github.com/jacoco/jacoco/releases)
- [Commits](https://github.com/jacoco/jacoco/compare/v0.8.14...v0.8.15)

---
updated-dependencies:
- dependency-name: org.jacoco:jacoco-maven-plugin
  dependency-version: 0.8.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 5937b6b4c..6de5f71c6 100644
--- a/pom.xml
+++ b/pom.xml
@@ -104,7 +104,7 @@
         <maven-gpg-plugin.version>3.2.1</maven-gpg-plugin.version>
         <aspectj-maven-plugin.version>1.14.1</aspectj-maven-plugin.version>
         <maven-surefire-plugin.version>3.5.5</maven-surefire-plugin.version>
-        <jacoco-maven-plugin.version>0.8.14</jacoco-maven-plugin.version>
+        <jacoco-maven-plugin.version>0.8.15</jacoco-maven-plugin.version>
         <nexus-staging-maven-plugin.version>1.7.0</nexus-staging-maven-plugin.version>
         <maven-javadoc-plugin.version>3.12.0</maven-javadoc-plugin.version>
         <maven-source-plugin.version>3.4.0</maven-source-plugin.version>

From a84b3dd42d38d5f7e13a11f15f53d42e3984402c Mon Sep 17 00:00:00 2001
From: Philipp Page <pagejep@amazon.com>
Date: Fri, 23 Oct 2026 10:41:53 +0200
Subject: [PATCH 2/2] chore(ci): allow jacoco-maven-plugin license in
 dependency review

GitHub reports org.jacoco:jacoco-maven-plugin@0.8.15 as 'EPL-2.0 OR (Apache-2.0 AND EPL-2.0)', which fails the verify check because EPL-2.0 is not in allow-licenses. JaCoCo is a build-time coverage plugin and is not shipped in Powertools artifacts.
---
 .github/dependency-review-config.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/dependency-review-config.yml b/.github/dependency-review-config.yml
index 520956965..c4b2344aa 100644
--- a/.github/dependency-review-config.yml
+++ b/.github/dependency-review-config.yml
@@ -34,4 +34,6 @@ allow-dependencies-licenses:
   - 'pkg:maven/org.graalvm.buildtools/native-maven-plugin'
   # EPL-2.0 (test scope only): https://github.com/junit-team/junit-framework/blob/r6.1.3/LICENSE.md
   - 'pkg:maven/org.junit/junit-bom'
+  # EPL-2.0 (build plugin only, not shipped): https://github.com/jacoco/jacoco/blob/v0.8.15/LICENSE.md
+  - 'pkg:maven/org.jacoco/jacoco-maven-plugin'
 comment-summary-in-pr: on-failure