Repository navigation
docs(#2000): SolrJ 10 operator release notes + Dependabot major freeze - #2075
Merged
Merged
Conversation
Parent #1788 slice 5 — docs/closure only (no solr.version re-bump; already 10.0.0 on main via #2009). - Operator release notes peer to Derby 548 style under docs/ai-generated/tasks/1788-solrj-10/release-notes-8.2-solrj-10.md (server matrix 9.x vs 10.x, base URL /solr, HTTP-only / no ZK, extract + Tika Server on Solr 10; links inventory + verification plan) - Cross-link slice tables in 00-inventory.md and 01-verification-plan.md - Dependabot: ignore org.apache.solr:* semver-major after intentional 10.x so bare major bumps like #1777 do not reopen; patch/minor still allowed Gates: docs + dependabot.yml only (no Maven module clean install). Spotless apply then check; commit in-scope only (out-of-scope Spotless hits left uncommitted). Fixes #2000 Related #1788 #1777 #2009 #2010 > Co-Authored by Grok Build using grok-4.5 with agent main.
natechadwick-intsof
added
operator:grok
This was referenced Aug 5, 2026
![kilo-code-bot[bot]](https://avatars.githubusercontent.com/in/2193792?s=60&v=4){kind=small}
Contributor
Code Review SummaryStatus: 1 Issue Found | Recommendation: Address before merge Overview
Issue Details (click to expand)SUGGESTION
Files Reviewed (4 files)
Fix these issues in Kilo Cloud Reviewed by step-3.7-flash · Input: 98.7K · Output: 19.4K · Cached: 1.6M Review guidance: REVIEW.md from base branch |
natechadwick
approved these changes
Aug 5, 2026
natechadwick
approved these changes
Aug 5, 2026
This was referenced Aug 5, 2026
This was referenced Sep 18, 2026
natechadwick
pushed a commit
that referenced
this pull request
Sep 18, 2026
…4578) * fix(security): CodeQL #2063–#2075 path-injection residuals (#4577) Add ObjectStore ApplicationFile store tests under a thread RxDir so exists/rename/delete stay inside requireUnderBase. Document #2074–#2075 as residual of #2046–#2062. Do not re-edit annotated sinks. Partial #4577 > Co-Authored by Grok Build 1.0.34 using grok-4.6 with agent night-issue-prs-security. * fix(security): keep ApplicationFileAdaptor sink line numbers Drop extra javadoc so CodeQL does not re-fingerprint annotated exists/move/delete sinks (#2063–#2073). > Co-Authored by Grok Build 1.0.34 using grok-4.6 with agent night-issue-prs-security.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Parent tracker: #1788 (slice 5 / last — docs + Dependabot disposition).
SolrJ 10.0.0 is already on
mainvia intentional PRs #2009 (client cutover + packaging + version pin) and #2010 (verification plan + mock tests). This PR does not re-bumpsolr.version.docs/ai-generated/tasks/1788-solrj-10/release-notes-8.2-solrj-10.md/solr/update/extract+ Tika Server requirement on Solr 10org.apache.solr:*semver-major after intentional 10.x so bare major bumps (class of build(deps): bump org.apache.solr:solr-solrj from 9.10.1 to 10.0.0 #1777) do not reopen; patch/minor within 10.x still allowedDependabot #1777: already CLOSED (Dependabot: up-to-date after #2009). Supersede comment will be posted pointing at #2009 / #2010 / this PR.
Test plan
.github/dependabot.yml— no production Java / no live Solrmvnw spotless:applythenmvnw spotless:check(BUILD SUCCESS)Gates evidence
Fixes
Fixes #2000
Related #1788 #1777 #2009 #2010 #1996 #1997 #1998 #1999
Operator: Grok: night-issue-prs (model grok-4.5)