From bf1eeaf6243b00c4a4eb0b7889bb556cc3e051fd Mon Sep 17 00:00:00 2001
From: Ruben Romero Montes <rromerom@redhat.com>
Date: Tue, 31 Mar 2026 00:13:58 +0200
Subject: [PATCH] chore: update vulnerability expectations for new CVE
 discoveries

Update provider-level vulnerability counts in spec.yaml files to match
current OSV database state. New CVEs were added affecting npm/pnpm/yarn
(+1 low severity transitive), gradle-groovy (+1 high severity transitive),
and python-pip (+1 medium severity direct).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 scenarios/gradle-groovy/simple/spec.yaml | 10 +++++-----
 scenarios/npm/simple/spec.yaml           |  6 +++---
 scenarios/pnpm/simple/spec.yaml          |  6 +++---
 scenarios/python-pip/simple/spec.yaml    | 14 +++++++-------
 scenarios/yarn-berry/simple/spec.yaml    |  6 +++---
 scenarios/yarn-classic/simple/spec.yaml  |  6 +++---
 6 files changed, 24 insertions(+), 24 deletions(-)

diff --git a/scenarios/gradle-groovy/simple/spec.yaml b/scenarios/gradle-groovy/simple/spec.yaml
index 3536c5d..2fa341b 100644
--- a/scenarios/gradle-groovy/simple/spec.yaml
+++ b/scenarios/gradle-groovy/simple/spec.yaml
@@ -10,15 +10,15 @@ stack_analysis:
   rhtpa:
     osv-github:
       direct: 8
-      transitive: 26
-      total: 34
+      transitive: 27
+      total: 35
       dependencies: 21
       critical: 5
-      high: 9
+      high: 10
       medium: 19
       low: 1
-      remediations: 14
-      recommendations: 115
+      remediations: 2
+      recommendations: 52
       unscanned: 0
     redhat-csaf:
       direct: 4
diff --git a/scenarios/npm/simple/spec.yaml b/scenarios/npm/simple/spec.yaml
index 33fcf4c..84e0091 100644
--- a/scenarios/npm/simple/spec.yaml
+++ b/scenarios/npm/simple/spec.yaml
@@ -10,13 +10,13 @@ stack_analysis:
   rhtpa:
     osv-github:
       direct: 6
-      transitive: 8
-      total: 14
+      transitive: 9
+      total: 15
       dependencies: 9
       critical: 0
       high: 7
       medium: 6
-      low: 1
+      low: 2
       remediations: 0
       recommendations: 0
       unscanned: 0
diff --git a/scenarios/pnpm/simple/spec.yaml b/scenarios/pnpm/simple/spec.yaml
index e9343c1..a12c7b1 100644
--- a/scenarios/pnpm/simple/spec.yaml
+++ b/scenarios/pnpm/simple/spec.yaml
@@ -10,13 +10,13 @@ stack_analysis:
   rhtpa:
     osv-github:
       direct: 6
-      transitive: 8
-      total: 14
+      transitive: 9
+      total: 15
       dependencies: 9
       critical: 0
       high: 7
       medium: 6
-      low: 1
+      low: 2
       remediations: 0
       recommendations: 0
       unscanned: 0
diff --git a/scenarios/python-pip/simple/spec.yaml b/scenarios/python-pip/simple/spec.yaml
index 3dcd942..ac81c45 100644
--- a/scenarios/python-pip/simple/spec.yaml
+++ b/scenarios/python-pip/simple/spec.yaml
@@ -9,17 +9,17 @@ stack_analysis:
     transitive: 9
   rhtpa:
     osv-github:
-      direct: 2
+      direct: 3
       transitive: 0
-      total: 2
+      total: 3
       dependencies: 1
       critical: 0
       high: 0
-      medium: 2
+      medium: 3
       low: 0
       remediations: 0
       recommendations: 0
-      unscanned: 0 
+      unscanned: 0
 component_analysis:
   scanned:
     total: 3
@@ -27,13 +27,13 @@ component_analysis:
     transitive: 0
   rhtpa:
     osv-github:
-      direct: 2
+      direct: 3
       transitive: 0
-      total: 2
+      total: 3
       dependencies: 1
       critical: 0
       high: 0
-      medium: 2
+      medium: 3
       low: 0
       remediations: 0
       recommendations: 0
diff --git a/scenarios/yarn-berry/simple/spec.yaml b/scenarios/yarn-berry/simple/spec.yaml
index b7db67b..88381a0 100644
--- a/scenarios/yarn-berry/simple/spec.yaml
+++ b/scenarios/yarn-berry/simple/spec.yaml
@@ -10,13 +10,13 @@ stack_analysis:
   rhtpa:
     osv-github:
       direct: 6
-      transitive: 8
-      total: 14
+      transitive: 9
+      total: 15
       dependencies: 9
       critical: 0
       high: 7
       medium: 6
-      low: 1
+      low: 2
       remediations: 0
       recommendations: 0
       unscanned: 0
diff --git a/scenarios/yarn-classic/simple/spec.yaml b/scenarios/yarn-classic/simple/spec.yaml
index 4ce301a..4a4cdd1 100644
--- a/scenarios/yarn-classic/simple/spec.yaml
+++ b/scenarios/yarn-classic/simple/spec.yaml
@@ -10,13 +10,13 @@ stack_analysis:
   rhtpa:
     osv-github:
       direct: 6
-      transitive: 8
-      total: 14
+      transitive: 9
+      total: 15
       dependencies: 9
       critical: 0
       high: 7
       medium: 6
-      low: 1
+      low: 2
       remediations: 0
       recommendations: 0
       unscanned: 0