Skip to content

chore(deps): bump gson@2.15.0, patch jackson vulnerabilities - #404

Merged
petruki merged 3 commits into
masterfrom
staging
Oct 27, 2026
Merged

petruki merged 3 commits into
masterfrom
staging

Conversation

@petruki

@petruki petruki commented Oct 27, 2026

Copy link
Copy Markdown
Member

This pull request updates CI workflows, dependencies, and test logic to improve security, compatibility, and test accuracy. The main changes are grouped as follows:

CI/CD Workflow Updates:

  • Updated GitHub Actions to use the latest versions: actions/setup-java and actions/cache are now at v6, improving compatibility and security across all workflow files
  • Added Ko-fi and GitHub sponsorship information to .github/FUNDING.yml.

Dependency and Plugin Upgrades:

  • Upgraded several dependencies and plugins in pom.xml for bug fixes, security patches, and new features, including gson, commons-lang3, slf4j-api, okhttp, maven-compiler-plugin, maven-surefire-plugin, sonar-maven-plugin, and central-publishing-maven-plugin.
  • Updated Jackson dependencies to patch recent security vulnerabilities.

SonarQube Configuration:

  • Added explicit binary and test binary paths for SonarQube analysis in pom.xml to improve code coverage reporting.

Test and Logic Improvements:

  • Improved test logic in SwitcherThrottle1Test and SwitcherThrottle2Test to better validate throttling and caching behavior, including more precise throttle timing and additional assertions.
  • Minor logic fix in SwitcherRequest.java for consistency in type comparison.

…st (#403)

* chore(deps): bump gson@2.15.0, commons-lang3@3.21.0, others, fixed test

* fix(pom): removed unnecessary sonar settings
@petruki petruki added this to the v1.10.2 milestone Oct 27, 2026
@petruki petruki self-assigned this Oct 27, 2026
@petruki petruki added dependencies Pull requests that update a dependency file patch Updating internal dependencies security Security remediation labels Oct 27, 2026
@sonarqubecloud

sonarqubecloud Bot commented Oct 27, 2026 •

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@petruki
petruki merged commit 22d2348 into master Oct 27, 2026
13 checks passed
@petruki
petruki deleted the staging branch October 27, 2026 02:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file patch Updating internal dependencies security Security remediation

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant