[AndreasIgel]

Summary

Removes the dependency-submission.yml workflow (added in #213). It doesn't help the problem it was meant to address and adds confusion.

• It submits a Maven dependency snapshot only on pushes to main. It cannot produce a snapshot for a fork PR's head SHA (that would require building untrusted fork code with a write token), so it does nothing for the "No snapshots were found for the head SHA" warning on PRs.
• The actual fix for that warning is configuration only — comment-summary-in-pr: on-failure in dependency-review.yml (Stop dependency-review from commenting the benign fork-PR snapshot warning #216).
• GitHub's automatic dependency graph already parses pom.xml, so keeping this extra workflow around mostly adds noise/maintenance without a clear benefit for this repo.

Net effect: one fewer workflow to reason about; dependency-review still runs and still gates on vulnerabilities/licenses.

Related

• dependency-review posts benign 'missing snapshots' warning; submit Maven dependency snapshots #212, Submit Maven dependency snapshots; drop counterproductive dependency-review retry #213, Stop dependency-review from commenting the benign fork-PR snapshot warning #216

[github-actions]

⚠️ Deprecation Warning: The deny-licenses option is deprecated for possible removal in the next major release. For more information, see issue 997.

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA 85cd8e8.

Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

Scanned Files

• .github/workflows/dependency-submission.yml

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ All tests successful. No failed tests found.

📢 Thoughts on this report? Let us know!