Update dependency-review.yml

.github/workflows/dependency-review.yml

@@ -11,4 +11,4 @@ jobs:
       contents: read
       pull-requests: write
     steps:
-      - uses: it-at-m/lhm_actions/action-templates/actions/action-dependency-review@94f7e40aa557a2790abfa98a9cc9186d260b94f8 # v1.0.27
+      - uses: it-at-m/lhm_actions/action-templates/actions/action-dependency-review@bug/356-prs-blocked-because-of-cves-being-reported-by-dependency-review-action

.trivyignore

@@ -0,0 +1,2 @@
+CVE-2025-10492
+CVE-2026-6009

backend/pom.xml

@@ -86,6 +86,13 @@
     </properties>
 
     <dependencies>
+
+        <dependency>
+            <groupId>net.sf.jasperreports</groupId>
+            <artifactId>jasperreports</artifactId>
+            <version>6.21.4</version>
+        </dependency>
+
         <!-- Spring Boot -->
         <dependency>
             <groupId>org.springframework.boot</groupId>