Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(dependencies): remove dependency on groovy-all where straightforward #5840

Merged
merged 1 commit into from
Dec 9, 2022

Conversation

dbyron-sf
Copy link
Contributor

with a specific goal to get org.testng:testng:7.4.0 out of shipping code, since it's vulnerable to CVE-2022-4065.

Note: groovy-all and testng remain in clouddriver-yandex, but they're gone (besides test configurations) elsewhere.

…rward

with a specific goal to get org.testng:testng:7.4.0 out of shipping code, since it's vulnerable to
CVE-2022-4065.

Note: groovy-all and testng remain in clouddriver-yandex, but they're gone (besides test
configurations) elsewhere.
@@ -3,7 +3,7 @@ dependencies {

implementation "org.slf4j:slf4j-api"
implementation "com.fasterxml.jackson.core:jackson-annotations"
implementation "org.codehaus.groovy:groovy-all"
implementation "org.codehaus.groovy:groovy"
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

IF we change this to API, it should expose it downstream (aka cats-core being a java librayr, no need for implementation downstream)

Copy link
Member

@jasonmcintosh jasonmcintosh left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Going ahead and approving - can discuss dep locations/transitive deps/etc. in future, as it isn't wrong to be explicit on the dependency on groovy.

@dbyron-sf dbyron-sf added the ready to merge Approved and ready for a merge label Dec 9, 2022
@mergify mergify bot added the auto merged Merged automatically by a bot label Dec 9, 2022
@mergify mergify bot merged commit cd5a7ff into spinnaker:master Dec 9, 2022
@dbyron-sf dbyron-sf deleted the remove-groovy-all branch December 9, 2022 18:31
ciurescuraul pushed a commit to armory-io/clouddriver that referenced this pull request Dec 15, 2022
…rward (spinnaker#5840)

with a specific goal to get org.testng:testng:7.4.0 out of shipping code, since it's vulnerable to
CVE-2022-4065.

Note: groovy-all and testng remain in clouddriver-yandex, but they're gone (besides test
configurations) elsewhere.

test(integration): test red/black deployment

test(integration): test blue/green deployment
mergify bot added a commit that referenced this pull request Dec 15, 2022
)

* feat(k8s): Add Deployment Kind support for Blue/Green deployments

* test(integration): test red/black deployment

* test(integration): test blue/green deployment

* refactor(web): Clean up redundant spring property in gradle file (#5834)

The property spring.config.additional-location is redundant in clouddriver-web.gradle file. This property is set by class com.netflix.spinnaker.kork.boot.DefaultPropertiesBuilder in com.netflix.spinnaker.clouddriver.Main. So removing it from gradle file.

* feat(kubernetes): add endpoints to allow k8s tasks to be retried by orca (#5833)

Co-authored-by: Apoorv Mahajan <amahaja3@ncsu.edu>
Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>

* chore(dependencies): Autobump korkVersion (#5836)

Co-authored-by: root <root@923768a73b79>

* chore(dependencies): Autobump korkVersion (#5837)

Co-authored-by: root <root@460f62b24dfe>

* chore(dependencies): Autobump korkVersion (#5838)

Co-authored-by: root <root@bd924b84c45e>

* chore(dependencies): Autobump korkVersion (#5839)

Co-authored-by: root <root@c0db2dce1dda>

* chore(dependencies): remove dependency on groovy-all where straightforward (#5840)

with a specific goal to get org.testng:testng:7.4.0 out of shipping code, since it's vulnerable to
CVE-2022-4065.

Note: groovy-all and testng remain in clouddriver-yandex, but they're gone (besides test
configurations) elsewhere.

test(integration): test red/black deployment

test(integration): test blue/green deployment

Co-authored-by: Sandesh <30489233+j-sandy@users.noreply.github.com>
Co-authored-by: David Byron <82477955+dbyron-sf@users.noreply.github.com>
Co-authored-by: Apoorv Mahajan <amahaja3@ncsu.edu>
Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
Co-authored-by: spinnakerbot <spinbot@spinnaker.io>
Co-authored-by: root <root@923768a73b79>
Co-authored-by: root <root@460f62b24dfe>
Co-authored-by: root <root@bd924b84c45e>
Co-authored-by: root <root@c0db2dce1dda>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
auto merged Merged automatically by a bot ready to merge Approved and ready for a merge target-release/1.30
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants