build[SP-7261]: update Hibernate groupId

[joana-fb]

NOTE: This PR was created by Copilot automation.

Backport Information

• SP Issue: SP-7261 - Backport of PPP-6248 - (11.0 Suite) CVE-2026-0603 | pdia-master has a security violation in Hibernate
• Base Case: PPP-6248 - CVE-2026-0603 | pdia-master has a security violation in Hibernate
• Original Master PR: build[PPP-6248]: update Hibernate groupId #1349

Changes

• Cherry-picked PR build[PPP-6248]: update Hibernate groupId #1349 (build[PPP-6248]: update Hibernate groupId).
• Commit: 71f04bb

Conflict Resolution

• No manual conflict resolution required

Target

• Target Branch: 11.0 (11.0 Suite maintenance branch)

[Copilot]

Pull request overview

This PR backports a build/security-mitigation change by updating the Maven coordinates (groupId) used for the hibernate-core test dependency so it resolves from the current Hibernate publishing namespace.

Changes:

• Update hibernate-core dependency groupId from org.hibernate to org.hibernate.orm in the root dependencyManagement.
• Update hibernate-core dependency groupId from org.hibernate to org.hibernate.orm in core module test dependencies.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
pom.xml	Updates dependencyManagement coordinates for hibernate-core to org.hibernate.orm.
core/pom.xml	Aligns the module’s hibernate-core test dependency groupId with the parent-managed coordinates.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[buildguy]

Note:

---

Frogbot also supports Contextual Analysis, Secret Detection, IaC and SAST Vulnerabilities Scanning. This features are included as part of the JFrog Advanced Security package, which isn't enabled on your system.

---

🐸 JFrog Frogbot

[buildguy]

✅ Build finished in 9m 39s

Build command:

mvn clean verify -B -e -Daudit -Djs.no.sandbox

---

👌 All tests passed!

Tests run: 361, Failures: 0, Skipped: 1    Test Results

---

ℹ️ This is an automatic message

[hitachivantarasonarqube]

Quality Gate passed

Issues

• 0 New Issues
• 0 Fixed Issues
• 0 Accepted Issues

Measures

• 0 Security Hotspots
• No data about coverage (26.90% Estimated after merge)
• 0.00% Duplicated Code (5.10% Estimated after merge)

Project ID: pentaho:pentaho-data-access-parent

View in SonarQube