From 803737ef0d4cb29fb2448f4121688e672c0b7d50 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Thu, 22 May 2025 00:05:52 +0000 Subject: [PATCH 1/6] Initial plan for issue From f9c5893a27a5449e626982a7e008630e058ecbff Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Thu, 22 May 2025 00:10:54 +0000 Subject: [PATCH 2/6] Update dependencies to fix CVE vulnerabilities Co-authored-by: YunchuWang <12449837+YunchuWang@users.noreply.github.com> --- CHANGELOG.md | 11 +++++++++-- azurefunctions/build.gradle | 2 +- azuremanaged/build.gradle | 8 ++++---- client/build.gradle | 6 +++--- 4 files changed, 17 insertions(+), 10 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index e26a9828..0f1f899d 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,12 @@ -## v1.5.2 -* Add distributed tracing support for Azure Functions client scenarios ([#211](https://github.com/microsoft/durabletask-java/pull/211)) +## v1.5.3 +* Update dependencies to fix CVE vulnerabilities: + * Update gRPC from 1.59.0 to 1.62.2 + * Update Jackson from 2.15.3 to 2.16.1 + * Update Azure Core from 1.45.0 to 1.46.0 + * Update Azure Identity from 1.11.1 to 1.11.2 + +## v1.5.2 +* Add distributed tracing support for Azure Functions client scenarios ([#211](https://github.com/microsoft/durabletask-java/pull/211)) ## v1.5.1 diff --git a/azurefunctions/build.gradle b/azurefunctions/build.gradle index 17d1dd2b..ea328394 100644 --- a/azurefunctions/build.gradle +++ b/azurefunctions/build.gradle @@ -6,7 +6,7 @@ plugins { } group 'com.microsoft' -version = '1.5.1' +version = '1.5.3' archivesBaseName = 'durabletask-azure-functions' def protocVersion = '3.12.0' diff --git a/azuremanaged/build.gradle b/azuremanaged/build.gradle index 6ede2393..33657c46 100644 --- a/azuremanaged/build.gradle +++ b/azuremanaged/build.gradle @@ -17,11 +17,11 @@ plugins { archivesBaseName = 'durabletask-azuremanaged' group 'com.microsoft' -version = '1.5.1-preview.1' +version = '1.5.1-preview.2' -def grpcVersion = '1.59.0' -def azureCoreVersion = '1.45.0' -def azureIdentityVersion = '1.11.1' +def grpcVersion = '1.62.2' +def azureCoreVersion = '1.46.0' +def azureIdentityVersion = '1.11.2' // When build on local, you need to set this value to your local jdk11 directory. // Java11 is used to compile and run all the tests. def PATH_TO_TEST_JAVA_RUNTIME = System.env.JDK_11 ?: System.getProperty("java.home") diff --git a/client/build.gradle b/client/build.gradle index d9a1e345..403e112c 100644 --- a/client/build.gradle +++ b/client/build.gradle @@ -9,12 +9,12 @@ plugins { } group 'com.microsoft' -version = '1.5.1' +version = '1.5.3' archivesBaseName = 'durabletask-client' -def grpcVersion = '1.59.0' +def grpcVersion = '1.62.2' def protocVersion = '3.12.0' -def jacksonVersion = '2.15.3' +def jacksonVersion = '2.16.1' def openTelemetryVersion = '1.25.0' // When build on local, you need to set this value to your local jdk11 directory. // Java11 is used to compile and run all the tests. From 17c06d9813c23bcfcc8c89eefb2ce0c890bb946c Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Thu, 22 May 2025 00:19:12 +0000 Subject: [PATCH 3/6] Revert version updates while keeping dependency updates Co-authored-by: YunchuWang <12449837+YunchuWang@users.noreply.github.com> --- CHANGELOG.md | 2 +- azurefunctions/build.gradle | 2 +- azuremanaged/build.gradle | 2 +- client/build.gradle | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 0f1f899d..331ce645 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,4 +1,4 @@ -## v1.5.3 +## Unreleased * Update dependencies to fix CVE vulnerabilities: * Update gRPC from 1.59.0 to 1.62.2 * Update Jackson from 2.15.3 to 2.16.1 diff --git a/azurefunctions/build.gradle b/azurefunctions/build.gradle index ea328394..17d1dd2b 100644 --- a/azurefunctions/build.gradle +++ b/azurefunctions/build.gradle @@ -6,7 +6,7 @@ plugins { } group 'com.microsoft' -version = '1.5.3' +version = '1.5.1' archivesBaseName = 'durabletask-azure-functions' def protocVersion = '3.12.0' diff --git a/azuremanaged/build.gradle b/azuremanaged/build.gradle index 33657c46..9270159f 100644 --- a/azuremanaged/build.gradle +++ b/azuremanaged/build.gradle @@ -17,7 +17,7 @@ plugins { archivesBaseName = 'durabletask-azuremanaged' group 'com.microsoft' -version = '1.5.1-preview.2' +version = '1.5.1-preview.1' def grpcVersion = '1.62.2' def azureCoreVersion = '1.46.0' diff --git a/client/build.gradle b/client/build.gradle index 403e112c..72211d73 100644 --- a/client/build.gradle +++ b/client/build.gradle @@ -9,7 +9,7 @@ plugins { } group 'com.microsoft' -version = '1.5.3' +version = '1.5.1' archivesBaseName = 'durabletask-client' def grpcVersion = '1.62.2' From da336a8c5e4df790237e3d140bf1141612ec00f9 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Thu, 22 May 2025 00:23:14 +0000 Subject: [PATCH 4/6] Update CHANGELOG.md to move changes to v1.5.2 section Co-authored-by: YunchuWang <12449837+YunchuWang@users.noreply.github.com> --- CHANGELOG.md | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 331ce645..85a7da61 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,11 +1,9 @@ -## Unreleased -* Update dependencies to fix CVE vulnerabilities: +## v1.5.2 +* Update dependencies to fix CVE vulnerabilities ([#226](https://github.com/microsoft/durabletask-java/pull/226)) * Update gRPC from 1.59.0 to 1.62.2 * Update Jackson from 2.15.3 to 2.16.1 * Update Azure Core from 1.45.0 to 1.46.0 * Update Azure Identity from 1.11.1 to 1.11.2 - -## v1.5.2 * Add distributed tracing support for Azure Functions client scenarios ([#211](https://github.com/microsoft/durabletask-java/pull/211)) From 68ca2199ee0481c317ccbf543043fcae912ff27b Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Thu, 22 May 2025 00:31:20 +0000 Subject: [PATCH 5/6] Update CHANGELOG.md with placeholder section title and align PR reference format Co-authored-by: YunchuWang <12449837+YunchuWang@users.noreply.github.com> --- CHANGELOG.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 85a7da61..6716a2de 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,5 @@ -## v1.5.2 -* Update dependencies to fix CVE vulnerabilities ([#226](https://github.com/microsoft/durabletask-java/pull/226)) +## placeholder +* Fix CVE vulnerabilities by updating dependencies ([#226](https://github.com/microsoft/durabletask-java/pull/226)) * Update gRPC from 1.59.0 to 1.62.2 * Update Jackson from 2.15.3 to 2.16.1 * Update Azure Core from 1.45.0 to 1.46.0 From c400d5b07f5c32cfc1884dff080bd7f48ecaaad6 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Thu, 22 May 2025 00:34:06 +0000 Subject: [PATCH 6/6] Remove detailed dependency update bullet points from CHANGELOG.md Co-authored-by: YunchuWang <12449837+YunchuWang@users.noreply.github.com> --- CHANGELOG.md | 4 ---- 1 file changed, 4 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 6716a2de..a37009b4 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,9 +1,5 @@ ## placeholder * Fix CVE vulnerabilities by updating dependencies ([#226](https://github.com/microsoft/durabletask-java/pull/226)) - * Update gRPC from 1.59.0 to 1.62.2 - * Update Jackson from 2.15.3 to 2.16.1 - * Update Azure Core from 1.45.0 to 1.46.0 - * Update Azure Identity from 1.11.1 to 1.11.2 * Add distributed tracing support for Azure Functions client scenarios ([#211](https://github.com/microsoft/durabletask-java/pull/211))