From 1573f12a55859b243b4cf38c086bca3baf8ab31b Mon Sep 17 00:00:00 2001
From: labkey-tchad <tchad@labkey.com>
Date: Tue, 25 Aug 2026 09:54:32 -0700
Subject: [PATCH] Suppress false-positive for pgvector

---
 dependencyCheckSuppression.xml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/dependencyCheckSuppression.xml b/dependencyCheckSuppression.xml
index e8926bd673..eb6c6bab29 100644
--- a/dependencyCheckSuppression.xml
+++ b/dependencyCheckSuppression.xml
@@ -488,4 +488,16 @@
         <cve>CVE-2026-66299</cve>
     </suppress>
 
+    <!--
+    [FP]: pgvector java library matching CPE for pgvector postgres extension
+    https://github.com/dependency-check/DependencyCheck/issues/8769
+    -->
+    <suppress>
+        <notes><![CDATA[
+    file name: pgvector-0.1.6.jar
+    ]]></notes>
+        <packageUrl regex="true">^pkg:maven/com\.pgvector/pgvector@.*$</packageUrl>
+        <cpe>cpe:/a:pgvector_project:pgvector</cpe>
+    </suppress>
+
 </suppressions>