Skip to content

Conversation

@purejava
Copy link
Contributor

FlatpakUpdateAndRestart 1.1.1 contains dbus-java 5.2.0

@coderabbitai
Copy link

coderabbitai bot commented Jan 10, 2026

Walkthrough

This pull request updates the flatpakupdateportal.version property in pom.xml from version 1.1.0 to 1.1.1. This is a dependency version bump with no other modifications to the project configuration or code.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

Suggested reviewers

  • infeo
🚥 Pre-merge checks | ✅ 3
✅ Passed checks (3 passed)
Check name Status Explanation
Title check ✅ Passed The title accurately describes the main change: updating the FlatpakUpdateAndRestart dependency to the latest version (1.1.1).
Description check ✅ Passed The description is directly related to the changeset, providing relevant context about the dependency update and the dbus-java version included.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.


📜 Recent review details

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between a79c14f and 6820cf1.

📒 Files selected for processing (1)
  • pom.xml
🔇 Additional comments (1)
pom.xml (1)

47-47: Verify the dependency version exists and check for security advisories.

The version bump from 1.1.0 to 1.1.1 appears straightforward. Please verify that version 1.1.1 of flatpak-update-portal exists and check for any security advisories affecting this version or its transitive dependency dbus-java 5.2.0.

Run the following script to verify the dependency version and check for security advisories:

#!/bin/bash
# Verify flatpak-update-portal version 1.1.1 exists on Maven Central
echo "=== Checking flatpak-update-portal version 1.1.1 on Maven Central ==="
curl -s "https://search.maven.org/solrsearch/select?q=g:org.purejava+AND+a:flatpak-update-portal&rows=20&wt=json" | jq -r '.response.docs[] | select(.v == "1.1.1") | "Version: \(.v), Timestamp: \(.timestamp)"'

echo -e "\n=== Available versions of flatpak-update-portal ==="
curl -s "https://search.maven.org/solrsearch/select?q=g:org.purejava+AND+a:flatpak-update-portal&rows=20&wt=json" | jq -r '.response.docs[] | "Version: \(.v)"' | sort -V

echo -e "\n=== Checking for security advisories for flatpak-update-portal ==="
gh api graphql -f query='
{
  securityVulnerabilities(first: 10, ecosystem: MAVEN, package: "org.purejava:flatpak-update-portal") {
    nodes {
      advisory {
        summary
        severity
        publishedAt
      }
      vulnerableVersionRange
      firstPatchedVersion {
        identifier
      }
    }
  }
}'

echo -e "\n=== Checking for security advisories for dbus-java ==="
gh api graphql -f query='
{
  securityVulnerabilities(first: 10, ecosystem: MAVEN, package: "com.github.hypfvieh:dbus-java") {
    nodes {
      advisory {
        summary
        severity
        publishedAt
      }
      vulnerableVersionRange
      firstPatchedVersion {
        identifier
      }
    }
  }
}'

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@purejava
Copy link
Contributor Author

This is a dependency version bump, that does not break anything

@purejava
Copy link
Contributor Author

For the record: Flatpak Update functionality is still working with FlatpakUpdateAndRestart 1.1.1.

This was tested with purejava/Flatpak-Testdrive@9af2f33 and purejava/Flatpak-Testdrive@b571732.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants