Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Fix for 3 vulnerabilities #22

Open
wants to merge 44 commits into
base: main
Choose a base branch
from
Open

[Snyk] Fix for 3 vulnerabilities #22

wants to merge 44 commits into from

Commits on May 30, 2024

  1. refactor(project): Remove liferay frontend 

    Signed-off-by: Helio Chissini de Castro <[email protected]>
    @heliocastro
    heliocastro committed May 30, 2024
    Configuration menu
    Copy the full SHA
    4743d31 View commit details
    Browse the repository at this point in the history

  2. refactor(java): Move to Java 17 

    Signed-off-by: Helio Chissini de Castro <[email protected]>
    @heliocastro
    heliocastro committed May 30, 2024
    Configuration menu
    Copy the full SHA
    86bbd27 View commit details
    Browse the repository at this point in the history

  3. refactor(project): Adjust dependencies for Java 17 and Liferay removal 

    - Thrift updated to version 2020s compatible with Java 17+
- Set the default Tomcat base to be used now
- Removed Liferay and Java version specifics

Signed-off-by: Helio Chissini de Castro <[email protected]>
    @heliocastro
    heliocastro committed May 30, 2024
    Configuration menu
    Copy the full SHA
    0e69da3 View commit details
    Browse the repository at this point in the history

  4. refactor(project): Remove flatten maven plugin 

    Signed-off-by: Helio Chissini de Castro <[email protected]>
    @heliocastro
    heliocastro committed May 30, 2024
    Configuration menu
    Copy the full SHA
    425da38 View commit details
    Browse the repository at this point in the history

  5. refactor(project): Remove log4j-osgi-support 

    Signed-off-by: Helio Chissini de Castro <[email protected]>
    @heliocastro
    heliocastro committed May 30, 2024
    Configuration menu
    Copy the full SHA
    6839d36 View commit details
    Browse the repository at this point in the history

  6. refactor(project): Remove liferay properties 

    Signed-off-by: Helio Chissini de Castro <[email protected]>
    @heliocastro
    heliocastro committed May 30, 2024
    Configuration menu
    Copy the full SHA
    819c2c5 View commit details
    Browse the repository at this point in the history

  7. refactor(project): Remove unused Jenkins build files 

    Signed-off-by: Helio Chissini de Castro <[email protected]>
    @heliocastro
    heliocastro committed May 30, 2024
    Configuration menu
    Copy the full SHA
    0ed5a12 View commit details
    Browse the repository at this point in the history

  8. refactor(datahandler): Update for modern thrift and Java 17 

    - Change Thrift code to use httpclient5
- Remove OSGI bn

Signed-off-by: Helio Chissini de Castro <[email protected]>
    @heliocastro
    heliocastro committed May 30, 2024
    Configuration menu
    Copy the full SHA
    8d02ed2 View commit details
    Browse the repository at this point in the history

  9. fix(deps): Remove duplicate json dependency version 

    Signed-off-by: Helio Chissini de Castro <[email protected]>
    @heliocastro
    heliocastro committed May 30, 2024
    Configuration menu
    Copy the full SHA
    5e046ea View commit details
    Browse the repository at this point in the history

  10. refactor(thirdparty): Remove old couchdb-lucene 

    Signed-off-by: Helio Chissini de Castro <[email protected]>
    @heliocastro
    heliocastro committed May 30, 2024
    Configuration menu
    Copy the full SHA
    7e5c60e View commit details
    Browse the repository at this point in the history

  11. refactor(scripts): Set default to newer Thrift 

    Signed-off-by: Helio Chissini de Castro <[email protected]>
    @heliocastro
    heliocastro committed May 30, 2024
    Configuration menu
    Copy the full SHA
    876945b View commit details
    Browse the repository at this point in the history

  12. refactor(project): Move enforcer plugin to proper location 

    Signed-off-by: Helio Chissini de Castro <[email protected]>
    @heliocastro
    heliocastro committed May 30, 2024
    Configuration menu
    Copy the full SHA
    aff9aff View commit details
    Browse the repository at this point in the history

  13. refactor(linter): Remove spotless as not used 

    Spotless was a good idea, but never been properly used or implemented.
The solution should be revisited as the new codebase is active.

Signed-off-by: Helio Chissini de Castro <[email protected]>
    @heliocastro
    heliocastro committed May 30, 2024
    Configuration menu
    Copy the full SHA
    c073cd6 View commit details
    Browse the repository at this point in the history

  14. refactor(project): Remove jacoco maven plugin 

    Data of code coverage is not used all and should be better represented
on the next codebase.

Related to discussion on eclipse-sw360#2452

Signed-off-by: Helio Chissini de Castro <[email protected]>
    @heliocastro
    heliocastro committed May 30, 2024
    Configuration menu
    Copy the full SHA
    bb385fa View commit details
    Browse the repository at this point in the history

  15. refactor(project): Remove unused buildnumber maven plugin 

    Signed-off-by: Helio Chissini de Castro <[email protected]>
    @heliocastro
    heliocastro committed May 30, 2024
    Configuration menu
    Copy the full SHA
    c626191 View commit details
    Browse the repository at this point in the history

  16. refactor(project): Remove unused versions maven plugin 

    Signed-off-by: Helio Chissini de Castro <[email protected]>
    @heliocastro
    heliocastro committed May 30, 2024
    Configuration menu
    Copy the full SHA
    1e1bc29 View commit details
    Browse the repository at this point in the history

  17. refactor(frontend): Remove frontend references 

    Signed-off-by: Helio Chissini de Castro <[email protected]>
    @heliocastro
    heliocastro committed May 30, 2024
    Configuration menu
    Copy the full SHA
    681ab69 View commit details
    Browse the repository at this point in the history

  18. refactor(libraries): Remove OSGI bundle from CommonIO 

    Signed-off-by: Helio Chissini de Castro <[email protected]>
    @heliocastro
    heliocastro committed May 30, 2024
    Configuration menu
    Copy the full SHA
    f0ee317 View commit details
    Browse the repository at this point in the history

  19. refactor(libraries): Remove OSGI bundle from exporters 

    Signed-off-by: Helio Chissini de Castro <[email protected]>
    @heliocastro
    heliocastro committed May 30, 2024
    Configuration menu
    Copy the full SHA
    3d54efb View commit details
    Browse the repository at this point in the history

  20. refactor(libraries): Remove OSGI bundle from importers 

    Signed-off-by: Helio Chissini de Castro <[email protected]>
    @heliocastro
    heliocastro committed May 30, 2024
    Configuration menu
    Copy the full SHA
    9979a85 View commit details
    Browse the repository at this point in the history

  21. refactor(project): Remove OSGI bundle plugin 

    Signed-off-by: Helio Chissini de Castro <[email protected]>
    @heliocastro
    heliocastro committed May 30, 2024
    Configuration menu
    Copy the full SHA
    3083c2d View commit details
    Browse the repository at this point in the history

  22. refactor(project): Start transition to Jakarta API 

    Signed-off-by: Helio Chissini de Castro <[email protected]>
    @heliocastro
    heliocastro committed May 30, 2024
    Configuration menu
    Copy the full SHA
    3e69647 View commit details
    Browse the repository at this point in the history

  23. refactor(project): Add maven-git-versioning extension 

    Ref: https://github.com/qoomon/maven-git-versioning-extension

Signed-off-by: Helio Chissini de Castro <[email protected]>
    @heliocastro
    heliocastro committed May 30, 2024
    Configuration menu
    Copy the full SHA
    9e13651 View commit details
    Browse the repository at this point in the history

  24. refactor(docker): Initial docker refactor with Tomcat only 

    Signed-off-by: Helio Chissini de Castro <[email protected]>
    @heliocastro
    heliocastro committed May 30, 2024
    Configuration menu
    Copy the full SHA
    4b891be View commit details
    Browse the repository at this point in the history

  25. chore(vscode): Improve Java buildsystem handling 

    Signed-off-by: Helio Chissini de Castro <[email protected]>
    @heliocastro
    heliocastro committed May 30, 2024
    Configuration menu
    Copy the full SHA
    4f79c63 View commit details
    Browse the repository at this point in the history

  26. refactor(rest): Make old authorization-server compile 

    Signed-off-by: Helio Chissini de Castro <[email protected]>
    @heliocastro
    heliocastro committed May 30, 2024
    Configuration menu
    Copy the full SHA
    8d32e8f View commit details
    Browse the repository at this point in the history

  27. refactor(workflows): Build new codebase 

    Signed-off-by: Helio Chissini de Castro <[email protected]>
    @heliocastro
    heliocastro committed May 30, 2024
    Configuration menu
    Copy the full SHA
    6010914 View commit details
    Browse the repository at this point in the history

  28. feat(docker): Add couchdb-test properties 

    Signed-off-by: Helio Chissini de Castro <[email protected]>
    @heliocastro
    heliocastro committed May 30, 2024
    Configuration menu
    Copy the full SHA
    c80ddfc View commit details
    Browse the repository at this point in the history

  29. refactor(project): Remove pontual build references on Liferay 

    Signed-off-by: Helio Chissini de Castro <[email protected]>
    @heliocastro
    heliocastro committed May 30, 2024
    Configuration menu
    Copy the full SHA
    d8cabf8 View commit details
    Browse the repository at this point in the history

  30. refactor(readme): Remove some liferay references 

    Signed-off-by: Helio Chissini de Castro <[email protected]>
    @heliocastro
    heliocastro committed May 30, 2024
    Configuration menu
    Copy the full SHA
    fa9c857 View commit details
    Browse the repository at this point in the history

  31. build(deps): bump org.apache.commons:commons-compress 

    Bumps org.apache.commons:commons-compress from 1.21 to 1.26.0.

---
updated-dependencies:
- dependency-name: org.apache.commons:commons-compress
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
    @dependabot @heliocastro
    dependabot[bot] authored and heliocastro committed May 30, 2024
    Configuration menu
    Copy the full SHA
    b523c6e View commit details
    Browse the repository at this point in the history

Commits on May 31, 2024

  1. feat(workflow): Upload test results in case of failure 

    Signed-off-by: Helio Chissini de Castro <[email protected]>
    @heliocastro
    heliocastro committed May 31, 2024
    Configuration menu
    Copy the full SHA
    330c1be View commit details
    Browse the repository at this point in the history

  2. fix(tests): Make partial importer tests pass 

    - Refactored exceptions

- Commented testImportOnEmptyDb, void testImportTwiceWithOnlyAPart,
testImportTwiceIsANoOp as need to be refactored

- Add Siemens no-liferay branch fixes

Signed-off-by: Helio Chissini de Castro <[email protected]>
    @heliocastro
    heliocastro committed May 31, 2024
    Configuration menu
    Copy the full SHA
    88b0c05 View commit details
    Browse the repository at this point in the history

  3. refactor(project): Disable client library temporary 

    Signed-off-by: Helio Chissini de Castro <[email protected]>
    @heliocastro
    heliocastro committed May 31, 2024
    Configuration menu
    Copy the full SHA
    4e2377f View commit details
    Browse the repository at this point in the history

  4. refactor(couchdb): Remove old lucene patch 

    Signed-off-by: Helio Chissini de Castro <[email protected]>
    @heliocastro
    heliocastro committed May 31, 2024
    Configuration menu
    Copy the full SHA
    d168113 View commit details
    Browse the repository at this point in the history

  5. refactor(docker): Enable new codebase 

    Signed-off-by: Helio Chissini de Castro <[email protected]>
    @heliocastro
    heliocastro committed May 31, 2024
    Configuration menu
    Copy the full SHA
    21e31e5 View commit details
    Browse the repository at this point in the history

Commits on Jun 2, 2024

  1. fix(tests): Fix codebase to match springboot series 2.x 

    - Upgrade to latest series 2.x springboot release
- Revert the rest functionality to javax required by the current
  codebase

Signed-off-by: Helio Chissini de Castro <[email protected]>
    @heliocastro
    heliocastro committed Jun 2, 2024
    Configuration menu
    Copy the full SHA
    5c272bb View commit details
    Browse the repository at this point in the history

  2. fix(project): Normalize version and deploy properties 

    Signed-off-by: Helio Chissini de Castro <[email protected]>
    @heliocastro
    heliocastro committed Jun 2, 2024
    Configuration menu
    Copy the full SHA
    9012a62 View commit details
    Browse the repository at this point in the history

  3. fix(project): Adjust version to match maven requirements 

    Version is set now by git versioning plugin, but maven requires a static
defined entry to validate builds. Fixed on 18.99.0 as mark for post 18
development.

Signed-off-by: Helio Chissini de Castro <[email protected]>
    @heliocastro
    heliocastro committed Jun 2, 2024
    Configuration menu
    Copy the full SHA
    c1c5307 View commit details
    Browse the repository at this point in the history

  4. fix(project): Adjust to use properties in main pom.xml 

    Signed-off-by: Helio Chissini de Castro <[email protected]>
    @heliocastro
    heliocastro committed Jun 2, 2024
    Configuration menu
    Copy the full SHA
    30851ec View commit details
    Browse the repository at this point in the history

  5. fix(tests): Update to Java 17 compatible libraries 

    Signed-off-by: Helio Chissini de Castro <[email protected]>
    @heliocastro
    heliocastro committed Jun 2, 2024
    Configuration menu
    Copy the full SHA
    01ecf1f View commit details
    Browse the repository at this point in the history

  6. fix(tests): Temporary disable client tests 

    Signed-off-by: Helio Chissini de Castro <[email protected]>
    @heliocastro
    heliocastro committed Jun 2, 2024
    Configuration menu
    Copy the full SHA
    7f3241a View commit details
    Browse the repository at this point in the history

  7. chore(project): Ignore/exclude git-versioned 

    Signed-off-by: Helio Chissini de Castro <[email protected]>
    @heliocastro
    heliocastro committed Jun 2, 2024
    Configuration menu
    Copy the full SHA
    30b714f View commit details
    Browse the repository at this point in the history

Commits on Jun 26, 2024

  1. fix: pom.xml to reduce vulnerabilities 

    The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-6261586
- https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-6444790
- https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-6597980
    @snyk-bot
    snyk-bot committed Jun 26, 2024
    Configuration menu
    Copy the full SHA
    821f2e7 View commit details
    Browse the repository at this point in the history