-
Notifications
You must be signed in to change notification settings - Fork 1k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
chore(dependencies): remove dependency on groovy-all where straightforward #5840
Conversation
…rward with a specific goal to get org.testng:testng:7.4.0 out of shipping code, since it's vulnerable to CVE-2022-4065. Note: groovy-all and testng remain in clouddriver-yandex, but they're gone (besides test configurations) elsewhere.
@@ -3,7 +3,7 @@ dependencies { | |||
|
|||
implementation "org.slf4j:slf4j-api" | |||
implementation "com.fasterxml.jackson.core:jackson-annotations" | |||
implementation "org.codehaus.groovy:groovy-all" | |||
implementation "org.codehaus.groovy:groovy" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
IF we change this to API, it should expose it downstream (aka cats-core being a java librayr, no need for implementation downstream)
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Going ahead and approving - can discuss dep locations/transitive deps/etc. in future, as it isn't wrong to be explicit on the dependency on groovy.
…rward (spinnaker#5840) with a specific goal to get org.testng:testng:7.4.0 out of shipping code, since it's vulnerable to CVE-2022-4065. Note: groovy-all and testng remain in clouddriver-yandex, but they're gone (besides test configurations) elsewhere. test(integration): test red/black deployment test(integration): test blue/green deployment
) * feat(k8s): Add Deployment Kind support for Blue/Green deployments * test(integration): test red/black deployment * test(integration): test blue/green deployment * refactor(web): Clean up redundant spring property in gradle file (#5834) The property spring.config.additional-location is redundant in clouddriver-web.gradle file. This property is set by class com.netflix.spinnaker.kork.boot.DefaultPropertiesBuilder in com.netflix.spinnaker.clouddriver.Main. So removing it from gradle file. * feat(kubernetes): add endpoints to allow k8s tasks to be retried by orca (#5833) Co-authored-by: Apoorv Mahajan <amahaja3@ncsu.edu> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com> * chore(dependencies): Autobump korkVersion (#5836) Co-authored-by: root <root@923768a73b79> * chore(dependencies): Autobump korkVersion (#5837) Co-authored-by: root <root@460f62b24dfe> * chore(dependencies): Autobump korkVersion (#5838) Co-authored-by: root <root@bd924b84c45e> * chore(dependencies): Autobump korkVersion (#5839) Co-authored-by: root <root@c0db2dce1dda> * chore(dependencies): remove dependency on groovy-all where straightforward (#5840) with a specific goal to get org.testng:testng:7.4.0 out of shipping code, since it's vulnerable to CVE-2022-4065. Note: groovy-all and testng remain in clouddriver-yandex, but they're gone (besides test configurations) elsewhere. test(integration): test red/black deployment test(integration): test blue/green deployment Co-authored-by: Sandesh <30489233+j-sandy@users.noreply.github.com> Co-authored-by: David Byron <82477955+dbyron-sf@users.noreply.github.com> Co-authored-by: Apoorv Mahajan <amahaja3@ncsu.edu> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com> Co-authored-by: spinnakerbot <spinbot@spinnaker.io> Co-authored-by: root <root@923768a73b79> Co-authored-by: root <root@460f62b24dfe> Co-authored-by: root <root@bd924b84c45e> Co-authored-by: root <root@c0db2dce1dda>
with a specific goal to get org.testng:testng:7.4.0 out of shipping code, since it's vulnerable to CVE-2022-4065.
Note: groovy-all and testng remain in clouddriver-yandex, but they're gone (besides test configurations) elsewhere.