[1.13.x][RHPAM-4700][CVE-2022-1471] snake-yaml to 2.0 #3199
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Ginxo
changed the title
|
(tests) - kogito-examples job Test results:
Those are the test failures: none See console log: Console Logs[2023-08-30T15:52:19.605Z] [INFO] Generating: org/kie/kogito/queries/LoanUnitQueryFindNotApprovedIdAndAmountEndpoint.java[2023-08-30T15:52:19.605Z] [INFO] Generating: org/kie/kogito/queries/LoanUnitQueryFindNotApprovedIdAndAmount.java [2023-08-30T15:52:19.605Z] [INFO] Generating: org/kie/kogito/queries/LoanUnitRuleUnit.java [2023-08-30T15:52:19.605Z] [INFO] Generating: org/kie/kogito/queries/LoanUnitRuleUnitInstance.java [2023-08-30T15:52:19.605Z] [INFO] Generating: org/kie/kogito/app/Application.java [2023-08-30T15:52:19.605Z] [INFO] Generating: org/kie/kogito/app/RuleUnits.java [2023-08-30T15:52:19.605Z] [INFO] Generating: org/kie/kogito/app/ConfigBean.java [2023-08-30T15:52:19.605Z] [INFO] Generating: org/kie/kogito/app/RuleConfig.java [2023-08-30T15:52:19.605Z] [INFO] Generating: org/kie/kogito/app/ApplicationConfig.java [2023-08-30T15:52:19.605Z] [INFO] Generating: org/kie/kogito/app/GlobalObjectMapper.java [2023-08-30T15:52:19.605Z] [INFO] [2023-08-30T15:52:19.605Z] [INFO] --- maven-compiler-plugin:3.8.1:compile (default-compile-1) @ ruleunit-springboot-example --- [2023-08-30T15:52:19.605Z] [INFO] Changes detected - recompiling the module! [2023-08-30T15:52:19.605Z] [INFO] Compiling 37 source files to /home/jenkins/workspace/KIE/kogito/1.13.x/pullrequest/kogito-runtimes.tests.downstream.kogito-examples/bc/kiegroup_kogito-examples/kogito-examples/ruleunit-springboot-example/target/classes [2023-08-30T15:52:19.860Z] [WARNING] /home/jenkins/workspace/KIE/kogito/1.13.x/pullrequest/kogito-runtimes.tests.downstream.kogito-examples/bc/kiegroup_kogito-examples/kogito-examples/ruleunit-springboot-example/target/generated-sources/kogito/org/kie/kogito/queries/LoanUnitRuleUnitInstance.java:[14,46] unchecked method invocation: method subscribe in interface org.kie.kogito.rules.DataSource is applied to given types [2023-08-30T15:52:19.860Z] required: org.kie.kogito.rules.DataProcessor [2023-08-30T15:52:19.860Z] found: org.kie.kogito.rules.units.EntryPointDataProcessor [2023-08-30T15:52:19.860Z] [WARNING] /home/jenkins/workspace/KIE/kogito/1.13.x/pullrequest/kogito-runtimes.tests.downstream.kogito-examples/bc/kiegroup_kogito-examples/kogito-examples/ruleunit-springboot-example/target/generated-sources/kogito/org/kie/kogito/queries/LoanUnitRuleUnitInstance.java:[14,47] unchecked conversion [2023-08-30T15:52:19.860Z] required: org.kie.kogito.rules.DataProcessor [2023-08-30T15:52:19.860Z] found: org.kie.kogito.rules.units.EntryPointDataProcessor [2023-08-30T15:52:19.860Z] [WARNING] /home/jenkins/workspace/KIE/kogito/1.13.x/pullrequest/kogito-runtimes.tests.downstream.kogito-examples/bc/kiegroup_kogito-examples/kogito-examples/ruleunit-springboot-example/target/generated-sources/kogito/org/kie/kogito/queries/LoanUnitRuleUnitInstance.java:[22,60] unchecked cast [2023-08-30T15:52:19.860Z] required: org.kie.kogito.rules.RuleUnitQuery
|
|
Jenkins kogito-examples : Doesn't seem to be related to this PR. GHA OptaPlanner Build : Seems to be related to this PR. |
mareknovotny
approved these changes
Aug 31, 2023
|
btw the error on Optaplanner PR https://github.com/kiegroup/optaplanner/pull/2945 would imply to upgrade also here https://github.com/kiegroup/kogito-runtimes/blob/main/kogito-build/kogito-dependencies-bom/pom.xml#L21 to 2.7.10 or so? |
|
@Ginxo can you please close this and re-sent to target it to https://github.com/kiegroup/kogito-runtimes/tree/1.13.x ? |
|
created replacement as kiegroup#9 |
|
please close this @Ginxo |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
https://issues.redhat.com/browse/RHPAM-4700
No
org.yaml:snakeyaml:jar:1.33.0traces on optaweb* or kogito-examples projects after related PRsRelated PRs:
How to replicate CI configuration locally?
Build Chain tool does "simple" maven build(s), the builds are just Maven commands, but because the repositories relates and depends on each other and any change in API or class method could affect several of those repositories there is a need to use build-chain tool to handle cross repository builds and be sure that we always use latest version of the code for each repository.
build-chain tool is a build tool which can be used on command line locally or in Github Actions workflow(s), in case you need to change multiple repositories and send multiple dependent pull requests related with a change you can easily reproduce the same build by executing it on Github hosted environment or locally in your development environment. See local execution details to get more information about it.
How to retest this PR or trigger a specific build:
for pull request checks
Please add comment: Jenkins retest this
for a specific pull request check
Please add comment: Jenkins (re)run [kogito-runtimes|kogito-apps|kogito-examples] tests
for quarkus branch checks
Run checks against Quarkus current used branch
Please add comment: Jenkins run quarkus-branch
for a quarkus branch specific check
Run checks against Quarkus current used branch
Please add comment: Jenkins (re)run [kogito-runtimes|kogito-apps|kogito-examples] quarkus-branch
for quarkus main checks
Run checks against Quarkus main branch
Please add comment: Jenkins run quarkus-main
for a specific quarkus main check
Run checks against Quarkus main branch
Please add comment: Jenkins (re)run [kogito-runtimes|kogito-apps|kogito-examples] quarkus-main
for quarkus lts checks
Run checks against Quarkus lts branch
Please add comment: Jenkins run quarkus-lts
for a specific quarkus lts check
Run checks against Quarkus lts branch
Please add comment: Jenkins (re)run [kogito-runtimes|kogito-apps|kogito-examples] quarkus-lts
for native checks
Run native checks
Please add comment: Jenkins run native
for a specific native check
Run native checks
Please add comment: Jenkins (re)run [kogito-runtimes|kogito-apps|kogito-examples] native
for native lts checks
Run native checks against quarkus lts branch
Please add comment: Jenkins run native-lts
for a specific native lts check
Run native checks against quarkus lts branch
Please add comment: Jenkins (re)run [kogito-runtimes|kogito-apps|kogito-examples] native-lts
How to backport a pull request to a different branch?
In order to automatically create a backporting pull request please add one or more labels having the following format
backport-<branch-name>, where<branch-name>is the name of the branch where the pull request must be backported to (e.g.,backport-7.67.xto backport the original PR to the7.67.xbranch).Once the original pull request is successfully merged, the automated action will create one backporting pull request per each label (with the previous format) that has been added.
If something goes wrong, the author will be notified and at this point a manual backporting is needed.
Quarkus-3 PR check is failing ... what to do ?
The Quarkus 3 check is applying patches from the `.ci/environments/quarkus-3/patches`.The first patch, called
0001_before_sh.patch, is generated from Openrewrite.ci/environments/quarkus-3/quarkus3.ymlrecipe. The patch is created to speed up the check. But it may be that some changes in the PR broke this patch.No panic, there is an easy way to regenerate it. You just need to comment on the PR:
and it should, after some minutes (~20/30min) apply a commit on the PR with the patch regenerated.
Other patches were generated manually. If any of it fails, you will need to manually update it... and push your changes.