This is an automated email from the ASF dual-hosted git repository.

houston pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/solr.git


The following commit(s) were added to refs/heads/main by this push:
     new 1f584ae712b Revert "SOLR-16796: Add Maven SBOMs via cyclonedx (#1203)"
1f584ae712b is described below

commit 1f584ae712babe3383184eba526b6d2347516596
Author: Houston Putman <[email protected]>
AuthorDate: Thu Jun 13 13:44:15 2024 -0500

    Revert "SOLR-16796: Add Maven SBOMs via cyclonedx (#1203)"
    
    This reverts commit a42c605fb916439222a086356f368f02cf80304a.
---
 build.gradle                       |  2 --
 gradle/maven/cyclonedx-bom.gradle  | 61 --------------------------------------
 gradle/maven/defaults-maven.gradle |  4 ---
 solr/CHANGES.txt                   |  2 --
 4 files changed, 69 deletions(-)

diff --git a/build.gradle b/build.gradle
index c9193bd7b6b..9da30ad4bf7 100644
--- a/build.gradle
+++ b/build.gradle
@@ -28,7 +28,6 @@ plugins {
   id 'net.ltgt.errorprone' version '3.1.0' apply false
   id 'com.diffplug.spotless' version '6.5.2' apply false
   id 'com.github.node-gradle.node' version '7.0.1' apply false
-  id 'org.cyclonedx.bom' version '1.8.2' apply false
 }
 
 // Declare default Java versions for the entire project and for SolrJ 
separately
@@ -135,7 +134,6 @@ apply from: 
file('gradle/testing/alternative-jdk-support.gradle')
 apply from: file('gradle/java/jar-manifest.gradle')
 
 // Publishing and releasing
-apply from: file('gradle/maven/cyclonedx-bom.gradle')
 apply from: file('gradle/maven/defaults-maven.gradle')
 
 // IDE support, settings and specials.
diff --git a/gradle/maven/cyclonedx-bom.gradle 
b/gradle/maven/cyclonedx-bom.gradle
deleted file mode 100644
index 6daa502b30c..00000000000
--- a/gradle/maven/cyclonedx-bom.gradle
+++ /dev/null
@@ -1,61 +0,0 @@
-/*
- * Licensed to the Apache Software Foundation (ASF) under one or more
- * contributor license agreements.  See the NOTICE file distributed with
- * this work for additional information regarding copyright ownership.
- * The ASF licenses this file to You under the Apache License, Version 2.0
- * (the "License"); you may not use this file except in compliance with
- * the License.  You may obtain a copy of the License at
- *
- *     http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-
-// This adds CycloneDX BOM (SBOM) generation for all Solr Maven artifacts
-
-allprojects { prj ->
-  plugins.withType(JavaPlugin) {
-    prj.apply plugin: 'org.cyclonedx.bom'
-
-    ext {
-      sbomDir = layout.buildDirectory.dir("sbom")
-    }
-
-    configurations {
-      sbom
-    }
-
-    def baseName = prj.archivesBaseName + "-" + version + "-cyclonedx"
-
-    cyclonedxBom {
-      includeConfigs = ["runtimeClasspath"]
-      skipConfigs = ["compileClasspath", "testCompileClasspath"]
-      projectType = "library"
-      destination = sbomDir.map(Directory::getAsFile)
-      outputName = baseName
-      outputFormat = "all"
-      includeBomSerialNumber = true
-      componentVersion = version
-    }
-    assemble.dependsOn cyclonedxBom
-
-    ext {
-      sbomXmlArtifact = artifacts.add('sbom', sbomDir.map(d -> d.file(baseName 
+ ".xml"))) {
-        type 'cyclonedx'
-        extension = 'xml'
-        classifier = 'cyclonedx'
-        builtBy cyclonedxBom
-      }
-      sbomJsonArtifact = artifacts.add('sbom', sbomDir.map(d -> 
d.file(baseName + ".json"))) {
-        type 'cyclonedx'
-        extension = 'json'
-        classifier = 'cyclonedx'
-        builtBy cyclonedxBom
-      }
-    }
-  }
-}
\ No newline at end of file
diff --git a/gradle/maven/defaults-maven.gradle 
b/gradle/maven/defaults-maven.gradle
index 14860a688c5..96e82dcc1c4 100644
--- a/gradle/maven/defaults-maven.gradle
+++ b/gradle/maven/defaults-maven.gradle
@@ -149,10 +149,6 @@ configure(subprojects.findAll { it.path in 
rootProject.published }) { prj ->
             artifact sourcesJar
             artifact javadocJar
 
-            // Include SBOM artifacts
-            artifact(sbomXmlArtifact)
-            artifact(sbomJsonArtifact)
-
             pom(configurePom)
 
             pom({
diff --git a/solr/CHANGES.txt b/solr/CHANGES.txt
index 6126565f4d4..be2cba6139f 100644
--- a/solr/CHANGES.txt
+++ b/solr/CHANGES.txt
@@ -176,8 +176,6 @@ Other Changes
 
 * SOLR-16503: Use Jetty HTTP2 for SyncStrategy and PeerSyncWithLeader for 
"recovery" operations (Sanjay Dutt, David Smiley)
 
-* SOLR-16796: Include cyclonedx SBOMs with maven artifacts (Arnout Engelen, 
Houston Putman, Kevin Risden)
-
 ==================  9.6.1 ==================
 Bug Fixes
 ---------------------

Reply via email to