Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SDCSRM-185 Fix Dependabot test failures in rh-service #54

Merged
merged 1 commit into from
Apr 2, 2024

Conversation

ryangrundy7
Copy link
Contributor

Motivation and Context

There's a few dependabot PRs that need to be updated, especially after we've upgraded to spring boot 3

What has changed

  • Updated dependencies
  • JSONObject from nimbus-jose-jwt was removed since they've moved to Gson instead. From the looks of it, the Payload doesn't need a JSONObject wrapper and we can just pass in the claims as a HashMap<String, Object>

How to test?

  • Run the branch against the ATs
  • Get a launch token from rh-ui and run it against the decrypt_token.sh script in ssdc-rm-dev-tools. The output should match what you'd expect from before this change.

Links

Trello
Jira

@ryangrundy7 ryangrundy7 added the patch A non-feature change, e.g. bug or issue fix label Mar 26, 2024
@ryangrundy7 ryangrundy7 changed the title Updating dependencies from dependabot alerts SDCSRM-185 Fix Dependabot test failures Mar 26, 2024
@ryangrundy7 ryangrundy7 changed the title SDCSRM-185 Fix Dependabot test failures SDCSRM-185-fix-dependabot-test-failures Mar 26, 2024
@ryangrundy7 ryangrundy7 changed the title SDCSRM-185-fix-dependabot-test-failures SDCSRM Fix Dependabot test failures in rh-service (5) Mar 26, 2024
Copy link

codecov bot commented Mar 26, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 85.90%. Comparing base (5cb62be) to head (498c93e).

Additional details and impacted files
@@             Coverage Diff              @@
##               main      #54      +/-   ##
============================================
+ Coverage     82.28%   85.90%   +3.62%     
- Complexity      210      215       +5     
============================================
  Files            45       45              
  Lines           666      667       +1     
  Branches         33       33              
============================================
+ Hits            548      573      +25     
+ Misses          102       81      -21     
+ Partials         16       13       -3     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@ryangrundy7 ryangrundy7 changed the title SDCSRM Fix Dependabot test failures in rh-service (5) SDCSRM Fix Dependabot test failures in rh-service Mar 26, 2024
@ryangrundy7 ryangrundy7 changed the title SDCSRM Fix Dependabot test failures in rh-service SDCSRM 185 Fix Dependabot test failures in rh-service Mar 26, 2024
@ryangrundy7 ryangrundy7 changed the title SDCSRM 185 Fix Dependabot test failures in rh-service SDCSRM-185 Fix Dependabot test failures in rh-service Mar 26, 2024
@ryangrundy7
Copy link
Contributor Author

@ryangrundy7 ryangrundy7 merged commit e7ebeb8 into main Apr 2, 2024
4 checks passed
@ryangrundy7 ryangrundy7 deleted the SDCSRM-185-fix-dependabot-test-failures branch April 2, 2024 13:09
Copy link

@islas104 islas104 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I've reviewed the changes made in this PR, and I'm approving it for merge for the following reasons:

Dependency Updates: The updates to spring-boot-starter-parent, spring-cloud-gcp-dependencies, nimbus-jose-jwt, maven-pmd-plugin, and fmt-maven-plugin are aligned with the latest stable versions. This not only addresses the Dependabot test failures but also ensures that our project dependencies remain up-to-date and secure.

Code Quality and Simplification: The removal of unnecessary imports and adjustments in EncodeJws.java simplifies the code and removes dependencies on deprecated or unnecessary classes, such as the direct use of JSONObject from nimbus-jose-jwt.

Code Clarity Improvement: The changes in LaunchDataFieldSetter.java, specifically the addition of line breaks and clearer structuring of method calls, improve code readability and maintainability. It demonstrates attention to code quality and readability, which is crucial for ongoing project health.

Adherence to Project Standards: The modifications are consistent with our coding standards and best practices. The PR not only addresses the immediate issues flagged by Dependabot but also contributes to the overall quality and maintainability of the project.

In conclusion, this PR effectively addresses the identified Dependabot test failures while also making significant strides towards improving code quality, security, and maintainability. Excellent work on ensuring that our dependencies are current and that our code base remains clean and well-organized.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
patch A non-feature change, e.g. bug or issue fix
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants