-
Notifications
You must be signed in to change notification settings - Fork 42
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Bump org.yaml:snakeyaml from 1.33 to 2.0 in /prime-router #9426
Bump org.yaml:snakeyaml from 1.33 to 2.0 in /prime-router #9426
Conversation
Dependency Review✅ No vulnerabilities or license issues found.Scanned Manifest Files |
94d883f
to
dbe7594
Compare
dbe7594
to
4ceabca
Compare
4ceabca
to
172a28d
Compare
@dependabot rebase |
Bumps [org.yaml:snakeyaml](https://bitbucket.org/snakeyaml/snakeyaml) from 1.33 to 2.0. - [Commits](https://bitbucket.org/snakeyaml/snakeyaml/branches/compare/snakeyaml-2.0..snakeyaml-1.33) --- updated-dependencies: - dependency-name: org.yaml:snakeyaml dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
172a28d
to
d82f1b9
Compare
// Pin snakeyaml since it is getting included regardless of exclude attempts | ||
implementation("org.yaml:snakeyaml:1.33") | ||
implementation("com.github.javafaker:javafaker:1.0.2") { | ||
exclude(group = "org.yaml", module = "snakeyaml") |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
javafaker uses: android
which does not exist for snakeyaml:2.0
@@ -105,7 +105,7 @@ defaultTasks("package") | |||
|
|||
val ktorVersion = "2.3.0" | |||
val kotlinVersion = "1.8.20" | |||
val jacksonVersion = "2.14.1" | |||
val jacksonVersion = "2.15.0" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
first version to support snakeyaml:2.0
@@ -127,7 +126,7 @@ class EmailSenderFunction { | |||
private fun parseBody(requestBody: String, logger: Logger): TosAgreementForm? { | |||
return try { | |||
jacksonObjectMapper().readValue<TosAgreementForm>(requestBody, TosAgreementForm::class.java) | |||
} catch (ex: MissingKotlinParameterException) { | |||
} catch (ex: Exception) { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
'MissingKotlinParameterException' is deprecated. It will be removed in jackson-module-kotlin 2.16. See #617 for details.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
That ticket and the kdoc for MismatchedInputException
makes it seem like we can use the more specific exception name.
Use a more specific exception
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
With the recent changes I cannot find anything broken. There's also just the one version being used which simplifies checking.
Kudos, SonarCloud Quality Gate passed! |
Bumps org.yaml:snakeyaml from 1.33 to 2.0.
Commits
c98ffba
issue 561: add negative test casee2ca740
Use Maven wrapper on github49d91a1
Fix target for github19e331d
Disable toolchain for github42c7812
Cobertura plugin does not work03c82b5
Rename GlobalTagRejectionTest to be run by Maven6e8cd89
Remove coberturad9b0f48
Improve Javadoc519791a
Run install and site goals under docker82f33d2
Merge branch 'master' into add-module-infoDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase
will rebase this PR@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it@dependabot merge
will merge this PR after your CI passes on it@dependabot squash and merge
will squash and merge this PR after your CI passes on it@dependabot cancel merge
will cancel a previously requested merge and block automerging@dependabot reopen
will reopen this PR if it is closed@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot ignore this major version
will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor version
will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependency
will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)