Skip to content

build: Upgrade Truth-Generator to 0.1.1 for user Subject discovery #332

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
astubbs merged 18 commits into from
Jul 11, 2022
Merged

build: Upgrade Truth-Generator to 0.1.1 for user Subject discovery #332

astubbs merged 18 commits into from
Jul 11, 2022

Conversation

@astubbs
Copy link
Contributor

@astubbs astubbs commented Jul 11, 2022 •
edited
Loading

Blocked by:

astubbs added 16 commits June 29, 2022 15:53
@astubbs
build: Exclude Guava 31.1 from OSSIndex sec scan
72ac264 
- CVE-2020-8908: Files::createTempDir local information disclosure vulnerability #4011
- Only used transitively from tests, and is a deprecated function
- google/guava#4011
@astubbs
...
f905cdb
@astubbs
build: Update to Truth-Generator 0.1.1 for Subject discovery
12dc7cf
@astubbs
build: Only run OSS Index audit on runtime dependencies, not tests
10ac83a 
New issues with WireMocks dep on Jetty BOM ~v9
@astubbs
build: Don't fail for OSSIndex scan - will set up another CI job for …
70a37cd 
…that

Especially given we also use dependabot. If anyone is concerned to that level, they can use the plugin in their end user applications.
@astubbs
fix cherry-pick
f2ec1dd
@astubbs
build: Only enforce requireReleaseDeps when running in CI, not locally
0d2b370
@astubbs
TEMPORARY: use TG 0.1.1 snapshot
00c581a
@astubbs
Merge branch 'exclude-guava-oss-index' into improvements/upgrade-tg
d396e66
@astubbs
remove guava exclude from branch
4f2de5c
@astubbs
cleanse branch
ad5092c
@astubbs
Merge branch 'improvements/allow-snapshots-locally' into improvements…
30ea0c9 
…/upgrade-tg
@astubbs
Merge remote-tracking branch 'antony/improvements/upgrade-tg' into im…
d7267d7 
…provements/upgrade-tg

# Conflicts:
#	pom.xml
@astubbs
test snapshot first
5e0db16
@astubbs
test snapshot first
ac65300
@astubbs
Merge remote-tracking branch 'origin/master' into improvements/upgrad…
dce76c2 
…e-tg

# Conflicts:
#	pom.xml
This was referenced Jul 11, 2022
Merged
Merged
@astubbs astubbs changed the title build: Upgrade Truth-Generator for user Subject discovery build: Upgrade Truth-Generator to 0.1.1 for user Subject discovery Jul 11, 2022
@astubbs astubbs marked this pull request as ready for review July 11, 2022 21:46
@astubbs astubbs merged commit a18a946 into master Jul 11, 2022
@astubbs astubbs deleted the improvements/upgrade-tg branch July 11, 2022 21:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@astubbs