Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependencies #253

Merged
merged 26 commits into from
Oct 4, 2024
Merged

Conversation

StepanBrychta
Copy link
Contributor

@StepanBrychta StepanBrychta commented Oct 3, 2024

What does this change?

  • Update dependencies to resolve a few security alerts. This includes the changes from chore(deps): Non-AWS dependency updates #242 and chore(deps): AWS dependency updates #241 so that a new version of scala-libs can be released with the updated dependencies.
  • Add the sierra_typesafe project into all actions (test, report evictions, and release). In the original version this project was left out by accident (project names were copied from the "Test" group of the original Buildkite pipeline, which also omitted this project).

This change should fix all logback-related security alerts across all repos using scala-libs.

Copy link

github-actions bot commented Oct 3, 2024

Suspected binary incompatible evictions across all projects (summary)

  • org.scala-lang:scala-library:2.12.20 is selected over {2.12.19, 2.12.19, 2.12.19, 2.12.15, 2.12.19, 2.12.19, 2.12.19, 2.12.19, 2.12.19, 2.12.19, 2.12.19, 2.12.19, 2.12.19, 2.12.19, 2.12.8, 2.12.18, 2.12.19, 2.12.15, 2.12.19, 2.12.19, 2.12.19, 2.12.19, 2.12.19, 2.12.19, 2.12.19, 2.12.19, 2.12.19}
  • org.scala-lang:scala-library:2.12.20 is selected over {2.12.19, 2.12.19, 2.12.19, 2.12.15, 2.12.19, 2.12.19, 2.12.19, 2.12.19, 2.12.19, 2.12.19, 2.12.19, 2.12.19, 2.12.19, 2.12.19, 2.12.8, 2.12.18, 2.12.19, 2.12.15, 2.12.19, 2.12.19, 2.12.19, 2.12.19, 2.12.19, 2.12.19, 2.12.19, 2.12.19}
  • org.scala-lang:scala-library:2.12.20 is selected over {2.12.19, 2.12.19, 2.12.19, 2.12.15, 2.12.19, 2.12.19, 2.12.19, 2.12.19, 2.12.19, 2.12.19, 2.12.19, 2.12.19, 2.12.19, 2.12.19, 2.12.8, 2.12.18, 2.12.19, 2.12.15, 2.12.19, 2.12.19, 2.12.19, 2.12.19, 2.12.19, 2.12.19, 2.12.19}
  • org.slf4j:slf4j-api:2.0.16 is selected over {2.0.7, 1.7.9, 1.7.30, 1.7.30, 1.7.30, 1.7.30}
  • org.slf4j:slf4j-api:2.0.16 is selected over {2.0.7, 1.7.9, 1.7.30, 1.7.30, 1.7.30}
  • org.slf4j:slf4j-api:2.0.16 is selected over {2.0.7, 2.0.9, 2.0.9, 2.0.9, 2.0.9, 2.0.9, 2.0.9, 2.0.9, 2.0.9, 1.7.9, 1.7.30, 1.7.30, 1.7.30}
  • org.slf4j:slf4j-api:2.0.9 is selected over {1.7.9, 1.7.30, 1.7.30, 1.7.30}

See individual evictions stages for more detail

@StepanBrychta StepanBrychta marked this pull request as ready for review October 3, 2024 09:03
@StepanBrychta StepanBrychta requested a review from a team October 3, 2024 09:04
@StepanBrychta StepanBrychta changed the title Include sierra_typesafe in release action #5780 Update dependencies Oct 3, 2024
@StepanBrychta StepanBrychta force-pushed the Include-sierra_typesafe-in-release-action branch from d9db254 to 0504cf3 Compare October 4, 2024 08:30
@StepanBrychta StepanBrychta force-pushed the Include-sierra_typesafe-in-release-action branch from 0504cf3 to 952cccf Compare October 4, 2024 08:33
@StepanBrychta StepanBrychta force-pushed the Include-sierra_typesafe-in-release-action branch from 952cccf to af7f553 Compare October 4, 2024 08:40
Copy link
Contributor

@paul-butcher paul-butcher left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I've not tried this out, because I know the the proof of this only really comes when this lib gets updated in the applications that use it, and you are about to sort those out.

@StepanBrychta StepanBrychta merged commit e07c8ce into main Oct 4, 2024
30 checks passed
@StepanBrychta StepanBrychta deleted the Include-sierra_typesafe-in-release-action branch October 4, 2024 09:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants