skrcode opened a new pull request, #763:
URL: https://github.com/apache/hugegraph-toolchain/pull/763

   Completes #762 by refreshing the checked-in dependency allowlist after the 
Log4j upgrade.
   
   The generated dependency set replaces the three Log4j 2.18.0 artifacts with 
2.25.5 and adds the `slf4j-api` 1.7.36 transitive dependency introduced by the 
upgraded stack. No build or runtime dependency declarations are changed beyond 
the source upgrade.
   
   Verification:
   - `JAVA_HOME=$(/usr/libexec/java_home -v 17) mvn -ntp -pl 
hugegraph-hubble/hubble-be -am install -DskipTests=true` — passed across the 
five-module reactor, including Checkstyle and EditorConfig gates
   - `bash hugegraph-dist/scripts/dependency/regenerate_known_dependencies.sh 
current-dependencies.txt` — passed across all nine modules
   - `bash hugegraph-dist/scripts/dependency/check_dependencies.sh 
current-dependencies.txt` — `All third dependencies is known!`
   - repeated generation produced a byte-identical manifest and passed the 
dependency check again
   - `git diff --check` — passed
   
   Built and verified with [JAIPilot](https://github.com/JAIPilot/jaipilot):
   - Skills: `jaipilot-maintainer-intent`, `jaipilot-fast-execution`, and 
`jaipilot-review-diff`
   - Execution profile: `gpt-5.6-sol · xhigh · fast`


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to