Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): Bump json-path to a version 2.9.0 #4132

Merged
merged 1 commit into from
Mar 11, 2024

Conversation

venetrius
Copy link
Member

Related to: #4052

@venetrius venetrius added the bot:java-dependency-check When assigned to a PR, generates SBOMs for the PR and base branch and compares them. label Feb 27, 2024
@venetrius venetrius self-assigned this Feb 27, 2024
@venetrius venetrius added bot:java-dependency-tree ci:jbosseap Runs the builds for the JBoss EAP application server. ci:wildfly Runs the builds for the Wildfly application server. and removed bot:java-dependency-tree labels Feb 27, 2024
@venetrius venetrius marked this pull request as draft February 28, 2024 12:18
@venetrius venetrius force-pushed the 4052-Bump-json-path-to-2_9_0 branch 2 times, most recently from 44cb574 to 5e6ace8 Compare March 7, 2024 12:05
@venetrius venetrius marked this pull request as ready for review March 7, 2024 12:06
@camunda camunda deleted a comment from github-actions bot Mar 7, 2024
@venetrius venetrius added bot:java-dependency-check When assigned to a PR, generates SBOMs for the PR and base branch and compares them. and removed bot:java-dependency-check When assigned to a PR, generates SBOMs for the PR and base branch and compares them. labels Mar 7, 2024
@camunda camunda deleted a comment from github-actions bot Mar 7, 2024
@venetrius venetrius force-pushed the 4052-Bump-json-path-to-2_9_0 branch from 5e6ace8 to a86e15c Compare March 7, 2024 15:26
@venetrius venetrius added bot:java-dependency-check When assigned to a PR, generates SBOMs for the PR and base branch and compares them. and removed bot:java-dependency-check When assigned to a PR, generates SBOMs for the PR and base branch and compares them. labels Mar 7, 2024
Copy link

github-actions bot commented Mar 7, 2024

Java dependency diff

🔄 camunda-root: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
 └─ 🔄 camunda-parent: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
     └─ 🔄 camunda-database-settings: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         ├─ 🔄 camunda-engine-plugins: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   └─ 🔄 camunda-engine-plugin-spin: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │       └─ ⬆ camunda-spin-core: 1.22.0 => 1.23.0  
         ├─ 🔄 camunda-bpm-spring-boot-starter-root: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   ├─ 🔄 camunda-bpm-spring-boot-starter: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   │   ├─ 🔄 camunda-engine-plugin-spin: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   │   │   └─ (Repeating subtree omitted)  
         │   │   └─ ⬆ camunda-spin-dataformat-json-jackson: 1.22.0 => 1.23.0  
         │   │       └─ ⬆ camunda-spin-core: 1.22.0 => 1.23.0  
         │   ├─ 🔄 camunda-bpm-spring-boot-starter-rest: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   │   └─ 🔄 camunda-bpm-spring-boot-starter: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   │       └─ (Repeating subtree omitted)  
         │   ├─ 🔄 camunda-bpm-spring-boot-starter-qa: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   │   ├─ 🔄 qa-simple: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   │   │   └─ 🔄 camunda-bpm-spring-boot-starter: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   │   │       └─ (Repeating subtree omitted)  
         │   │   ├─ 🔄 qa-request-scope: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   │   │   └─ 🔄 camunda-bpm-spring-boot-starter: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   │   │       └─ (Repeating subtree omitted)  
         │   │   ├─ 🔄 qa-plugins: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   │   │   └─ 🔄 qa-plugins-spin: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   │   │       ├─ 🔄 qa-plugins-spin-dataformat-json-jackson: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   │   │       │   ├─ 🔄 camunda-bpm-spring-boot-starter: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   │   │       │   │   └─ (Repeating subtree omitted)  
         │   │   │       │   ├─ 🔄 camunda-engine-plugin-spin: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   │   │       │   │   └─ (Repeating subtree omitted)  
         │   │   │       │   └─ ⬆ camunda-spin-dataformat-json-jackson: 1.22.0 => 1.23.0  
         │   │   │       │       └─ (Repeating subtree omitted)  
         │   │   │       └─ 🔄 qa-plugins-spin-dataformat-all: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   │   │           ├─ 🔄 qa-plugins-spin-dataformat-json-jackson: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   │   │           │   └─ (Repeating subtree omitted)  
         │   │   │           └─ ⬆ camunda-spin-dataformat-all: 1.22.0 => 1.23.0  
         │   │   │               └─ ⬆ camunda-spin-core: 1.22.0 => 1.23.0  
         │   │   ├─ 🔄 qa-liquibase: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   │   │   └─ 🔄 camunda-bpm-spring-boot-starter: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   │   │       └─ (Repeating subtree omitted)  
         │   │   └─ 🔄 qa-webapp: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   │       └─ 🔄 qa-webapp-invoice-example: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   │           └─ 🔄 camunda-bpm-spring-boot-starter-webapp: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   │               └─ 🔄 camunda-bpm-spring-boot-starter-webapp-core: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   │                   └─ 🔄 camunda-bpm-spring-boot-starter: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   │                       └─ (Repeating subtree omitted)  
         │   ├─ 🔄 camunda-bpm-spring-boot-starter-webapp-core: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   │   └─ (Repeating subtree omitted)  
         │   └─ 🔄 camunda-bpm-spring-boot-starter-webapp: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │       └─ (Repeating subtree omitted)  
         ├─ 🔄 camunda-tomcat: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   ├─ 🔄 camunda-tomcat-assembly: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   │   ├─ ⬆ camunda-spin-core: 1.22.0 => 1.23.0  
         │   │   ├─ 🔄 camunda-engine-plugin-spin: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   │   │   └─ (Repeating subtree omitted)  
         │   │   └─ ⬆ camunda-spin-dataformat-all: 1.22.0 => 1.23.0  
         │   │       └─ (Repeating subtree omitted)  
         │   └─ 🔄 camunda-bpm-tomcat: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │       └─ 🔄 camunda-tomcat-assembly: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │           ├─ ⬆ camunda-spin-core: 1.22.0 => 1.23.0  
         │           ├─ 🔄 camunda-engine-plugin-spin: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │           │   └─ (Repeating subtree omitted)  
         │           └─ ⬆ camunda-spin-dataformat-all: 1.22.0 => 1.23.0  
         │               └─ (Repeating subtree omitted)  
         ├─ 🔄 camunda-qa: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   └─ 🔄 camunda-qa-integration-tests-engine-jakarta: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │       ├─ ⬆ camunda-spin-core: 1.22.0 => 1.23.0  
         │       └─ ⬆ camunda-spin-dataformat-json-jackson: 1.22.0 => 1.23.0  
         │           └─ (Repeating subtree omitted)  
         ├─ 🔄 camunda-bpm-run-root: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   ├─ 🔄 camunda-bpm-run-modules: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   │   ├─ 🔄 camunda-bpm-run-modules-rest: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   │   │   └─ 🔄 camunda-bpm-spring-boot-starter-rest: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   │   │       └─ (Repeating subtree omitted)  
         │   │   ├─ 🔄 camunda-bpm-run-modules-example-invoice: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   │   │   └─ 🔄 camunda-bpm-spring-boot-starter-webapp: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   │   │       └─ (Repeating subtree omitted)  
         │   │   └─ 🔄 camunda-bpm-run-modules-webapps: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   │       └─ 🔄 camunda-bpm-spring-boot-starter-webapp: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   │           └─ (Repeating subtree omitted)  
         │   ├─ 🔄 camunda-bpm-run-core: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   │   ├─ 🔄 camunda-bpm-spring-boot-starter: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   │   │   └─ (Repeating subtree omitted)  
         │   │   ├─ 🔄 camunda-engine-plugin-spin: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   │   │   └─ (Repeating subtree omitted)  
         │   │   ├─ ⬆ camunda-spin-dataformat-all: 1.22.0 => 1.23.0  
         │   │   │   └─ (Repeating subtree omitted)  
         │   │   └─ 🔄 camunda-bpm-spring-boot-starter-rest: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   │       └─ (Repeating subtree omitted)  
         │   ├─ 🔄 camunda-bpm-run-assembly: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   │   ├─ 🔄 camunda-bpm-run-modules-rest: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   │   │   └─ (Repeating subtree omitted)  
         │   │   ├─ 🔄 camunda-bpm-run-modules-example-invoice: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   │   │   └─ (Repeating subtree omitted)  
         │   │   └─ 🔄 camunda-bpm-run-core: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   │       └─ (Repeating subtree omitted)  
         │   └─ 🔄 camunda-bpm-run: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │       ├─ 🔄 camunda-bpm-run-assembly: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │       │   ├─ 🔄 camunda-bpm-run-modules-rest: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │       │   │   └─ (Repeating subtree omitted)  
         │       │   ├─ 🔄 camunda-bpm-run-modules-example-invoice: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │       │   │   └─ (Repeating subtree omitted)  
         │       │   └─ 🔄 camunda-bpm-run-core: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │       │       └─ (Repeating subtree omitted)  
         │       └─ 🔄 camunda-bpm-run-modules-webapps: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │           └─ (Repeating subtree omitted)  
         ├─ 🔄 camunda-wildfly: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   ├─ 🔄 camunda-wildfly-modules: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   │   ├─ 🔄 camunda-engine-plugin-spin: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   │   │   └─ (Repeating subtree omitted)  
         │   │   ├─ ⬆ camunda-spin-dataformat-json-jackson: 1.22.0 => 1.23.0  
         │   │   │   └─ (Repeating subtree omitted)  
         │   │   └─ ⬆ camunda-spin-dataformat-xml-dom-jakarta: 1.22.0 => 1.23.0  
         │   │       └─ ⬆ camunda-spin-core: 1.22.0 => 1.23.0  
         │   ├─ 🔄 camunda-wildfly-assembly: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   │   └─ 🔄 camunda-wildfly-modules: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │   │       └─ (Repeating subtree omitted)  
         │   └─ 🔄 camunda-bpm-wildfly: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │       └─ 🔄 camunda-qa: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
         │           └─ (Repeating subtree omitted)  
         └─ 🔄 camunda-wildfly26: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
             └─ 🔄 camunda-wildfly26-modules: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
                 ├─ 🔄 camunda-engine-plugin-spin: 7.21.0-SNAPSHOT => 7.21.0-SNAPSHOT  
                 │   └─ (Repeating subtree omitted)  
                 ├─ ⬆ camunda-spin-dataformat-json-jackson: 1.22.0 => 1.23.0  
                 │   └─ (Repeating subtree omitted)  
                 └─ ⬆ camunda-spin-dataformat-xml-dom: 1.22.0 => 1.23.0  
                     └─ ⬆ camunda-spin-core: 1.22.0 => 1.23.0  

Module details

Checklist

Unique changes

Unique additions

Developer comments

Glossary

Limitations

  • The reported transitive dependencies may not always be accurate in a multi-module project.
    The SBOM file format represents a unique dependency (coordinates + type) only once. In a multi-module
    project a dependency can be declared in multiple locations with different exclusions of transitive dependencies
    or different version overrides for transitive dependencies.

Emojies

  • ✔: All licenses are on the Go list
  • ⚠: (At least one) license is on the Caution list
  • ❌: (At least one) license is on the Stop list
  • ❓: (At least one) license cannot be determined or is unknown
  • ‼: Dependency has multiple licenses declared
  • ⬆: New dependency version is higher than previous
  • ⬇: New dependency version is lower than previous
  • 🔄: Dependency version is equal and the dependencies of this component changed (e.g. when comparing snapshots)
  • 🤷: The change of the dependency version can not be determined further (e.g. because the version does not follow semantic versioning)

@venetrius
Copy link
Member Author

Java dependency diff bot shows that the spin version is updated, but does not elaborate on which transitive dependencies have changed.

Here is the link to the PR that updates Spin with new json-path version
I run mvn dependency:tree locally on this branch and verifyed json-path is updated:

 +- org.camunda.spin:camunda-spin-dataformat-json-jackson:jar:1.23.0:compile
[INFO] |  +- org.camunda.commons:camunda-commons-utils:jar:1.13.0:compile
[INFO] |  +- com.fasterxml.jackson.core:jackson-core:jar:2.15.2:compile
[INFO] |  +- com.fasterxml.jackson.core:jackson-databind:jar:2.15.2:compile
[INFO] |  |  \- com.fasterxml.jackson.core:jackson-annotations:jar:2.15.2:compile
[INFO] |  \- com.jayway.jsonpath:json-path:jar:2.9.0:compile
[INFO] |     \- net.minidev:json-smart:jar:2.5.0:runtime
[INFO] |        \- net.minidev:accessors-smart:jar:2.5.0:runtime

@venetrius venetrius requested a review from tasso94 March 8, 2024 07:36
@venetrius
Copy link
Member Author

Checking failing build step.

@venetrius venetrius requested review from yanavasileva and removed request for tasso94 March 8, 2024 12:30
Copy link
Member

@yanavasileva yanavasileva left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍 Looks good.

@venetrius venetrius merged commit 66260cf into master Mar 11, 2024
5 checks passed
@venetrius venetrius deleted the 4052-Bump-json-path-to-2_9_0 branch March 11, 2024 10:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bot:java-dependency-check When assigned to a PR, generates SBOMs for the PR and base branch and compares them. ci:jbosseap Runs the builds for the JBoss EAP application server. ci:wildfly Runs the builds for the Wildfly application server.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants