Skip to content

Bump com.netflix.nebula:gradle-info-plugin to 16.2.1#20825

Merged
sandeshkr419 merged 1 commit intoopensearch-project:mainfrom
andrross:bump-nebula-16.2.1
Mar 10, 2026
Merged

Bump com.netflix.nebula:gradle-info-plugin to 16.2.1#20825
sandeshkr419 merged 1 commit intoopensearch-project:mainfrom
andrross:bump-nebula-16.2.1

Conversation

@andrross
Copy link
Member

Check List

  • Functionality includes testing.

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

@andrross andrross requested a review from a team as a code owner March 10, 2026 18:30
Signed-off-by: Andrew Ross <andrross@amazon.com>
@andrross andrross force-pushed the bump-nebula-16.2.1 branch from 0301645 to 008a0a6 Compare March 10, 2026 18:31
@github-actions
Copy link
Contributor

PR Code Analyzer ❗

AI-powered 'Code-Diff-Analyzer' found issues on commit 008a0a6.

PathLineSeverityDescription
buildSrc/build.gradle110mediumgradle-info-plugin jumps 4 major versions (12.1.6 → 16.2.1), an unusually large leap for a routine bump. While possibly legitimate, such a large version skip warrants supply chain verification — confirm the new artifact on Maven Central matches the official Netflix Nebula release and has not been tampered with or typosquatted.

The table above displays the top 10 most important findings.

Total: 1 | Critical: 0 | High: 0 | Medium: 1 | Low: 0


Pull Requests Author(s): Please update your Pull Request according to the report above.

Repository Maintainer(s): You can bypass diff analyzer by adding label skip-diff-analyzer after reviewing the changes carefully, then re-run failed actions. To re-enable the analyzer, remove the label, then re-run all actions.


⚠️ Note: The Code-Diff-Analyzer helps protect against potentially harmful code patterns. Please ensure you have thoroughly reviewed the changes beforehand.

Thanks.

@andrross andrross added the skip-diff-analyzer Maintainer to skip code-diff-analyzer check, after reviewing issues in AI analysis. label Mar 10, 2026
@github-actions
Copy link
Contributor

PR Reviewer Guide 🔍

Here are some key observations to aid the review process:

🧪 No relevant tests
🔒 No security concerns identified
✅ No TODO sections
🔀 No multiple PR themes
⚡ No major issues detected

@andrross
Copy link
Member Author

Just FYI, I added the skip-diff-analyzer label because the jump in major versions seems fine to me. We should keep up with the latest, and it just so happens this plugin has released 4 major versions in the last few years. I encountered no compatibility issues with the latest version.

@sandeshkr419
Copy link
Member

sandeshkr419 commented Mar 10, 2026

@andrross - I'm wondering how are you able to get the gradle check running after adding skip-diff-analyzer label.

I couldn't get it running on #20801

@github-actions
Copy link
Contributor

✅ Gradle check result for 008a0a6: SUCCESS

@sandeshkr419 sandeshkr419 merged commit 8f8f7b5 into opensearch-project:main Mar 10, 2026
40 of 42 checks passed
@codecov
Copy link

codecov bot commented Mar 11, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 73.28%. Comparing base (dcbdefa) to head (008a0a6).
⚠️ Report is 4 commits behind head on main.

Additional details and impacted files
@@             Coverage Diff              @@
##               main   #20825      +/-   ##
============================================
+ Coverage     73.25%   73.28%   +0.03%     
- Complexity    72164    72184      +20     
============================================
  Files          5794     5794              
  Lines        329946   329946              
  Branches      47620    47620              
============================================
+ Hits         241693   241802     +109     
+ Misses        68855    68754     -101     
+ Partials      19398    19390       -8     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@andrross andrross deleted the bump-nebula-16.2.1 branch March 11, 2026 21:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

skip-diff-analyzer Maintainer to skip code-diff-analyzer check, after reviewing issues in AI analysis.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants