Skip to content

dependencies update#75

Open
lumber1000 wants to merge 5 commits intodev-version-4from
deps-update
Open

dependencies update#75
lumber1000 wants to merge 5 commits intodev-version-4from
deps-update

Conversation

@lumber1000
Copy link

No description provided.

gradle updated
workflows updated
transitive dependency substitution (mina-core)
Comment on lines +5 to +9
id 'com.palantir.docker' version '0.36.0' apply false
id 'org.owasp.dependencycheck' version '10.0.4'
id 'com.gorylenko.gradle-git-properties' version '2.4.2' apply false
id 'com.github.jk1.dependency-license-report' version '2.9' apply false
id 'de.undercouch.download' version '5.6.0' apply false
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

suggestion: While we are here it is worth migrating to th2 gradle plugin - it should simplify our life in future

@@ -1,5 +1,5 @@
#Tue Apr 14 11:21:33 MSK 2020
distributionUrl=https\://services.gradle.org/distributions/gradle-7.6-all.zip
distributionUrl=https\://services.gradle.org/distributions/gradle-8.7-bin.zip
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

note: this would be the right way to update gradle wrapper version

./gradlew wrapper --gradle-version 8.7

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please add information about suppression and explanation why was this done

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

There is a note in suppressions.xml file.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This suppression isn't usual and we should explain our decision to user / client obviously

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants