Skip to content

Conversation

@aaron-steinfeld
Copy link
Contributor

Update to use BOM to pick up latest vuln fixes.

@aaron-steinfeld aaron-steinfeld requested a review from a team as a code owner July 22, 2025 14:27
@github-actions
Copy link

Test Results

32 tests  ±0   32 ✅ ±0   16s ⏱️ ±0s
 9 suites ±0    0 💤 ±0 
 9 files   ±0    0 ❌ ±0 

Results for commit 5d9d7d8. ± Comparison against base commit 4f3975c.

@@ -1,3 +1,32 @@
[versions]
hypertrace-grpcutils = "0.13.14"
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Some of these can move to the shared BOM, but in this change I just inlined everything that wasn't already there.

implementation(projects.platformMetrics)
implementation(commonLibs.grpc.inprocess)
implementation(commonLibs.grpc.netty)
implementation(commonLibs.slf4j2.api)
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Note we are moving this to slf4j2 here. We've already upgraded this pretty much everywhere, so it seems like it's about time but this is a breaking change.

@aaron-steinfeld aaron-steinfeld merged commit 1cd0e5b into main Jul 22, 2025
4 checks passed
@aaron-steinfeld aaron-steinfeld deleted the bom branch July 22, 2025 14:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants