Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump org.yaml:snakeyaml from 1.33 to 2.0 in /prime-router #9426

Merged
merged 11 commits into from
May 31, 2023

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 8, 2023

Bumps org.yaml:snakeyaml from 1.33 to 2.0.

Commits
  • c98ffba issue 561: add negative test case
  • e2ca740 Use Maven wrapper on github
  • 49d91a1 Fix target for github
  • 19e331d Disable toolchain for github
  • 42c7812 Cobertura plugin does not work
  • 03c82b5 Rename GlobalTagRejectionTest to be run by Maven
  • 6e8cd89 Remove cobertura
  • d9b0f48 Improve Javadoc
  • 519791a Run install and site goals under docker
  • 82f33d2 Merge branch 'master' into add-module-info
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels May 8, 2023
@github-actions
Copy link
Contributor

github-actions bot commented May 8, 2023

Dependency Review

✅ No vulnerabilities or license issues found.

Scanned Manifest Files

@dependabot dependabot bot force-pushed the dependabot/gradle/prime-router/org.yaml-snakeyaml-2.0 branch from 94d883f to dbe7594 Compare May 8, 2023 21:49
@dependabot dependabot bot force-pushed the dependabot/gradle/prime-router/org.yaml-snakeyaml-2.0 branch from dbe7594 to 4ceabca Compare May 8, 2023 22:24
oslynn
oslynn previously approved these changes May 9, 2023
@dependabot dependabot bot force-pushed the dependabot/gradle/prime-router/org.yaml-snakeyaml-2.0 branch from 4ceabca to 172a28d Compare May 9, 2023 15:26
@snesm
Copy link
Contributor

snesm commented May 11, 2023

@dependabot rebase

Bumps [org.yaml:snakeyaml](https://bitbucket.org/snakeyaml/snakeyaml) from 1.33 to 2.0.
- [Commits](https://bitbucket.org/snakeyaml/snakeyaml/branches/compare/snakeyaml-2.0..snakeyaml-1.33)

---
updated-dependencies:
- dependency-name: org.yaml:snakeyaml
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/gradle/prime-router/org.yaml-snakeyaml-2.0 branch from 172a28d to d82f1b9 Compare May 11, 2023 19:18
@snesm snesm added the security Work Type label to flag work related to security label May 12, 2023
javafaker uses snakeyaml with the "android" attribute which does not exist in 2.0.
Jackson 2.15 supports 2.0.
Eliminate warning: 'MissingKotlinParameterException' is deprecated. It will be removed in jackson-module-kotlin 2.16
in EmailSenderFunction.kt
@snesm snesm temporarily deployed to staging May 12, 2023 19:01 — with GitHub Actions Inactive
@github-actions
Copy link
Contributor

github-actions bot commented May 12, 2023

Test Results

861 tests  ±0   857 ✔️ ±0   2m 8s ⏱️ +3s
  99 suites ±0       4 💤 ±0 
  99 files   ±0       0 ±0 

Results for commit 6401edb. ± Comparison against base commit efa48a4.

♻️ This comment has been updated with latest results.

@github-actions
Copy link
Contributor

github-actions bot commented May 12, 2023

Integration Test Results

127 tests   127 ✔️  2m 40s ⏱️
  12 suites      0 💤
  12 files        0

Results for commit 6401edb.

♻️ This comment has been updated with latest results.

@snesm snesm requested a review from oslynn May 12, 2023 19:27
@snesm snesm temporarily deployed to staging May 12, 2023 19:28 — with GitHub Actions Inactive
@snesm snesm dismissed oslynn’s stale review May 12, 2023 19:33

significant updates

// Pin snakeyaml since it is getting included regardless of exclude attempts
implementation("org.yaml:snakeyaml:1.33")
implementation("com.github.javafaker:javafaker:1.0.2") {
exclude(group = "org.yaml", module = "snakeyaml")
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

javafaker uses: android
which does not exist for snakeyaml:2.0

@@ -105,7 +105,7 @@ defaultTasks("package")

val ktorVersion = "2.3.0"
val kotlinVersion = "1.8.20"
val jacksonVersion = "2.14.1"
val jacksonVersion = "2.15.0"
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

first version to support snakeyaml:2.0

@@ -127,7 +126,7 @@ class EmailSenderFunction {
private fun parseBody(requestBody: String, logger: Logger): TosAgreementForm? {
return try {
jacksonObjectMapper().readValue<TosAgreementForm>(requestBody, TosAgreementForm::class.java)
} catch (ex: MissingKotlinParameterException) {
} catch (ex: Exception) {
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

'MissingKotlinParameterException' is deprecated. It will be removed in jackson-module-kotlin 2.16. See #617 for details.

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That ticket and the kdoc for MismatchedInputException makes it seem like we can use the more specific exception name.

@snesm snesm temporarily deployed to staging May 15, 2023 14:25 — with GitHub Actions Inactive
@snesm snesm temporarily deployed to staging May 19, 2023 16:06 — with GitHub Actions Inactive
@snesm snesm temporarily deployed to staging May 19, 2023 19:48 — with GitHub Actions Inactive
@snesm snesm temporarily deployed to staging May 23, 2023 17:25 — with GitHub Actions Inactive
@luis-pabon-tf luis-pabon-tf self-assigned this May 26, 2023
@snesm snesm temporarily deployed to staging May 31, 2023 15:10 — with GitHub Actions Inactive
@luis-pabon-tf luis-pabon-tf temporarily deployed to staging May 31, 2023 17:57 — with GitHub Actions Inactive
Copy link
Collaborator

@luis-pabon-tf luis-pabon-tf left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

With the recent changes I cannot find anything broken. There's also just the one version being used which simplifies checking.

@snesm snesm enabled auto-merge (squash) May 31, 2023 18:25
@sonarqubecloud
Copy link

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

0.0% 0.0% Coverage
0.0% 0.0% Duplication

@snesm snesm merged commit e3f2caa into master May 31, 2023
@snesm snesm deleted the dependabot/gradle/prime-router/org.yaml-snakeyaml-2.0 branch May 31, 2023 18:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file java Pull requests that update Java code security Work Type label to flag work related to security
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants