[GitHub] [directory-project] dependabot[bot] opened a new pull request, #7: Bump build-helper-maven-plugin from 3.3.0 to 3.4.0
dependabot[bot] opened a new pull request, #7:
URL: https://github.com/apache/directory-project/pull/7
Bumps
[build-helper-maven-plugin](https://github.com/mojohaus/build-helper-maven-plugin)
from 3.3.0 to 3.4.0.
Release notes
Sourced from https://github.com/mojohaus/build-helper-maven-plugin/releases";>build-helper-maven-plugin's
releases.
3.4.0
Changes
🚀 New features and improvements
Get rid of ArtifactRepository - ${localRepository} (https://redirect.github.com/mojohaus/build-helper-maven-plugin/pull/179";>#179)
https://github.com/slawekjaranowski";>@slawekjaranowski
Added a property name to the "sources" parameter for CLI usage
(https://redirect.github.com/mojohaus/build-helper-maven-plugin/pull/157";>#157)
https://github.com/gjd6640";>@gjd6640
🐛 Bug Fixes
Use UTF-8 for the pom (https://redirect.github.com/mojohaus/build-helper-maven-plugin/pull/173";>#173)
https://github.com/gnodet";>@gnodet
📦 Dependency updates
Bump maven-plugin-annotations from 3.8.1 to 3.8.2 (https://redirect.github.com/mojohaus/build-helper-maven-plugin/pull/177";>#177)
https://github.com/dependabot";>@dependabot
Bump parent from 72 to 74 (https://redirect.github.com/mojohaus/build-helper-maven-plugin/pull/175";>#175)
https://github.com/slawekjaranowski";>@slawekjaranowski
Bump maven-invoker-plugin to 3.5.1 - add support to run its with Java 20
(https://redirect.github.com/mojohaus/build-helper-maven-plugin/pull/172";>#172)
https://github.com/slachiewicz";>@slachiewicz
Bump actions/stale from 7 to 8 (https://redirect.github.com/mojohaus/build-helper-maven-plugin/pull/171";>#171)
https://github.com/dependabot";>@dependabot
Bump maven-plugin-annotations from 3.7.1 to 3.8.1 (https://redirect.github.com/mojohaus/build-helper-maven-plugin/pull/169";>#169)
https://github.com/dependabot";>@dependabot
Bump plexus-utils from 3.5.0 to 3.5.1 (https://redirect.github.com/mojohaus/build-helper-maven-plugin/pull/170";>#170)
https://github.com/dependabot";>@dependabot
Bump mojo-parent from 70 to 72 (https://redirect.github.com/mojohaus/build-helper-maven-plugin/pull/165";>#165)
https://github.com/dependabot";>@dependabot
Bump assertj-core from 3.24.1 to 3.24.2 (https://redirect.github.com/mojohaus/build-helper-maven-plugin/pull/164";>#164)
https://github.com/dependabot";>@dependabot
Bump maven-plugin-annotations from 3.7.0 to 3.7.1 (https://redirect.github.com/mojohaus/build-helper-maven-plugin/pull/163";>#163)
https://github.com/dependabot";>@dependabot
Bump assertj-core from 3.24.0 to 3.24.1 (https://redirect.github.com/mojohaus/build-helper-maven-plugin/pull/162";>#162)
https://github.com/dependabot";>@dependabot
Bump assertj-core from 3.23.1 to 3.24.0 (https://redirect.github.com/mojohaus/build-helper-maven-plugin/pull/161";>#161)
https://github.com/dependabot";>@dependabot
Bump actions/stale from 6 to 7 (https://redirect.github.com/mojohaus/build-helper-maven-plugin/pull/160";>#160)
https://github.com/dependabot";>@dependabot
Bump maven-plugin-annotations from 3.6.4 to 3.7.0 (https://redirect.github.com/mojohaus/build-helper-maven-plugin/pull/158";>#158)
https://github.com/dependabot";>@dependabot
Bump plexus-utils from 3.4.2 to 3.5.0 (https://redirect.github.com/mojohaus/build-helper-maven-plugin/pull/151";>#151)
https://github.com/dependabot";>@dependabot
Bump mojo-parent from 69 to 70 (https://redirect.github.com/mojohaus/build-helper-maven-plugin/pull/141";>#141)
https://github.com/dependabot";>@dependabot
Bump mojo-parent from 68 to 69 (https://redirect.github.com/mojohaus/build-helper-maven-plugin/pull/140";>#140)
https://github.com/dependabot";>@dependabot
Bump mojo-parent from 67 to 68 (https://redirect.github.com/mojohaus/build-helper-maven-plugin/pull/138";>#138)
https://github.com/dependabot";>@dependabot
Bump assertj-core from 3.22.0 to 3.23.1 (https://redirect.github.com/mojohaus/build-helper-maven-plugin/pull/137";>#137)
https://github.com/dependabot";>@dependabot
Bump plexus-utils from 3.4.1 to 3.4.2 (https://redirect.github.com/mojohaus/build-helper-maven-plugin/pull/135";>#135)
https://github.com/dependabot";>@dependabot
Bump actions/stale from 4 to 5 (https://redirect.github.com/mojohaus/build-helper-maven-plugin/pull/132";>#132)
https://github.com/dependabot";>@dependabot
Bump actions/setup-java from 2 to 3 (https://redirect.github.com/mojohaus/build-helper-maven-plugin/pull/133";>#133)
https://github.com/dependabot";>@dependabot
Bump mojo-parent from 65 to 67 (https://redirect.github.com/mojohaus/build-helper-maven-plugin/pull/130";>#130)
https://github.com/dependabot";>@dependabot
Bump actions/checkout from 2 to 3 (https://redirect.github.com/mojohaus/build-helper-maven-plugin/pull/128";>#128)
https://github.com/dependabot";>@dependabot
Bump maven-plugin-annotations from 3.6.2 to 3.6.4 (https://redirect.github.com/mojohaus/build-h
[GitHub] [directory-project] dependabot[bot] opened a new pull request, #6: Bump checkstyle from 9.3 to 10.12.0
dependabot[bot] opened a new pull request, #6: URL: https://github.com/apache/directory-project/pull/6 Bumps [checkstyle](https://github.com/checkstyle/checkstyle) from 9.3 to 10.12.0. Release notes Sourced from https://github.com/checkstyle/checkstyle/releases";>checkstyle's releases. checkstyle-10.12.0 Checkstyle 10.12.0 - https://checkstyle.org/releasenotes.html#Release_10.12.0";>https://checkstyle.org/releasenotes.html#Release_10.12.0 New: https://redirect.github.com/checkstyle/checkstyle/issues/12507";>#12507 - Support record patterns (preview-feature in Java 19) as described by JEP 405 checkstyle-10.11.0 Checkstyle 10.11.0 - https://checkstyle.org/releasenotes.html#Release_10.11.0";>https://checkstyle.org/releasenotes.html#Release_10.11.0 New: https://redirect.github.com/checkstyle/checkstyle/issues/11109";>#11109 - False Negative: UnnecessaryParenthesesCheck Bug fixes: https://redirect.github.com/checkstyle/checkstyle/issues/11968";>#11968 - VariableDeclarationUsageDistance not able to handle try with resources properly https://redirect.github.com/checkstyle/checkstyle/issues/12864";>#12864 - Not last return javadoc tag cause parse error checkstyle-10.10.0 Checkstyle 10.10.0 - https://checkstyle.org/releasenotes.html#Release_10.10.0";>https://checkstyle.org/releasenotes.html#Release_10.10.0 New: https://redirect.github.com/checkstyle/checkstyle/issues/11939";>#11939 - New filter: SuppressWithNearbyTextFilter to suppress checks with inline comments in any file type ... (truncated) Commits https://github.com/checkstyle/checkstyle/commit/eae0c5e815e4bf79befc63e0b98c0ae49190eb01";>eae0c5e [maven-release-plugin] prepare release checkstyle-10.12.0 https://github.com/checkstyle/checkstyle/commit/fede0401fe0aa8cf042244d067e16de4ea7dd9fe";>fede040 doc: release notes for 10.12.0 https://github.com/checkstyle/checkstyle/commit/a3d6286a2bb7864820e7ed0f47accf923b0d95fe";>a3d6286 minor: update Pitest to latest version https://github.com/checkstyle/checkstyle/commit/b35c2e6536eaa143fa0d6bde66806e3435532ef5";>b35c2e6 Issue https://redirect.github.com/checkstyle/checkstyle/issues/11514";>#11514: Delete unused comments in ParseTreeTableModelTest https://github.com/checkstyle/checkstyle/commit/a10e153407b833f1b4ed08023937346b11043960";>a10e153 Issue https://redirect.github.com/checkstyle/checkstyle/issues/13059";>#13059: Broken Link: Github search links are broken in documentation https://github.com/checkstyle/checkstyle/commit/1af308f6e19d7d79bace1d4e2fb436898b6233ef";>1af308f dependency: bump maven-dependency-plugin from 3.5.0 to 3.6.0 https://github.com/checkstyle/checkstyle/commit/40af44ac446c7b9c66285e553ebc4106cb8b899f";>40af44a Issue https://redirect.github.com/checkstyle/checkstyle/issues/13005";>#13005: LineLength check documentation incorrectly shows how to work wi... https://github.com/checkstyle/checkstyle/commit/2f55e67d08dd414a2fa77a81d763008a6967167e";>2f55e67 Issue https://redirect.github.com/checkstyle/checkstyle/issues/11514";>#11514: Update pom.xml and fix variable name https://github.com/checkstyle/checkstyle/commit/154ee54bcc13607a3c66ff4a75cb9f444308c785";>154ee54 Issue https://redirect.github.com/checkstyle/checkstyle/issues/11514";>#11514: Added Test cases to TreeTableTest.java for TreeTebleModelAdapte... https://github.com/checkstyle/checkstyle/commit/70946a8f01ae95c5debf3f7ea10557daadea1cd6";>70946a8 Issue https://redirect.github.com/checkstyle/checkstyle/issues/13007";>#13007: Update doc for UnusedImports Additional commits viewable in https://github.com/checkstyle/checkstyle/compare/checkstyle-9.3...checkstyle-10.12.0";>compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed -
[GitHub] [directory-project] elecharny merged pull request #5: Add dependabot configuration to project to keep deps updated
elecharny merged PR #5: URL: https://github.com/apache/directory-project/pull/5 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[GitHub] [directory-project] elecharny commented on pull request #5: Add dependabot configuration to project to keep deps updated
elecharny commented on PR #5: URL: https://github.com/apache/directory-project/pull/5#issuecomment-1570965111 Merged the PR. Thanks Brian! -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[GitHub] [directory-scimple] bdemers merged pull request #316: Make SCIMple artifacts reproducible
bdemers merged PR #316: URL: https://github.com/apache/directory-scimple/pull/316 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[GitHub] [directory-scimple] bdemers merged pull request #311: Bump guava from 31.1-android to 32.0.0-android
bdemers merged PR #311: URL: https://github.com/apache/directory-scimple/pull/311 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[GitHub] [directory-scimple] bdemers merged pull request #264: Enable parallel Maven builds
bdemers merged PR #264: URL: https://github.com/apache/directory-scimple/pull/264 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[GitHub] [directory-scimple] bdemers merged pull request #308: Bump version.antlr4 from 4.12.0 to 4.13.0
bdemers merged PR #308: URL: https://github.com/apache/directory-scimple/pull/308 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[GitHub] [directory-scimple] bdemers merged pull request #312: Bump lombok from 1.18.26 to 1.18.28
bdemers merged PR #312: URL: https://github.com/apache/directory-scimple/pull/312 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[GitHub] [directory-scimple] bdemers opened a new pull request, #316: Make SCIMple artifacts reproducible
bdemers opened a new pull request, #316: URL: https://github.com/apache/directory-scimple/pull/316 Removing timestamps from jar manifest -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[GitHub] [directory-scimple] bdemers merged pull request #310: Bump docker-maven-plugin from 0.42.1 to 0.43.0
bdemers merged PR #310: URL: https://github.com/apache/directory-scimple/pull/310 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[GitHub] [directory-scimple] bdemers merged pull request #313: Bump version.resteasy from 6.2.3.Final to 6.2.4.Final
bdemers merged PR #313: URL: https://github.com/apache/directory-scimple/pull/313 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[GitHub] [directory-scimple] bdemers merged pull request #314: Bump jackson-bom from 2.15.0 to 2.15.1
bdemers merged PR #314: URL: https://github.com/apache/directory-scimple/pull/314 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[GitHub] [directory-scimple] bdemers merged pull request #315: Bump jersey-bom from 3.1.1 to 3.1.2
bdemers merged PR #315: URL: https://github.com/apache/directory-scimple/pull/315 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[GitHub] [directory-project] bdemers closed pull request #4: Remove unmaintained Geronimo tools plugin
bdemers closed pull request #4: Remove unmaintained Geronimo tools plugin URL: https://github.com/apache/directory-project/pull/4 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[GitHub] [directory-project] bdemers opened a new pull request, #5: Add dependabot configuration to project to keep deps updated
bdemers opened a new pull request, #5: URL: https://github.com/apache/directory-project/pull/5 (no comment) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[GitHub] [directory-server] bdemers opened a new pull request, #86: Reduce scope of junit in service module
bdemers opened a new pull request, #86: URL: https://github.com/apache/directory-server/pull/86 JUnit is included in the shaded jar because due to the previous scope of `compile` -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
[jira] [Commented] (DIR-344) Use of shade plugin replaces files required for distribution
[
https://issues.apache.org/jira/browse/DIR-344?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17728058#comment-17728058
]
Emmanuel Lécharny commented on DIR-344:
---
Hi,
FTR, the parent's LICENSE file is supposed to contain all the gathered licenses:
{noformat}
Apache License
Version 2.0, January 2004
http://www.apache.org/licenses/
TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
Apache License
Version 2.0, January 2004
http://www.apache.org/licenses/
TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
...
==
OpenLDAP license
--
The OpenLDAP Public License
Version 2.8, 17 August 2003
...
==
The Internet Society license
--
Portions Copyright (C) The Internet Society (1997-2003).
All Rights Reserved.
...
==
The Legion Of Bouncy Castle license
--
Copyright (c) 2000 - 2011 The Legion Of The Bouncy Castle
(http://www.bouncycastle.org)
...
==
slf4j 1.7.10 license
--
Copyright (c) 2004-2013 QOS.ch
All rights reserved.
...
==
For the AVL Set code : http://bobah.net/d4d/source-code/misc/java-avl-tree
--
Copyright 2001-2014 Vladimir Lysyy
...
==
JDBM LICENSE v1.00
--
Redistribution and use of this software and associated documentation
("Software"), with or without modification, are permitted provided
that the following conditions are met:
...
==
ANTLR 2 License
--
We reserve no legal rights to the ANTLR--it is fully in the public domain. An
individual or company
...
==
TANUKI License
--
Copyright (c) 1999, 2004 Tanuki Software
...
==
LOGBACK License
--
Logback: the reliable, generic, fast and flexible logging framework.
Copyright (C) 1999-2022, QOS.ch. All rights reserved.
...
{noformat}
This is what get included by the shade plugin. I would say it's complete.
We don't process recursive dependencies (ie, if a dependency has a LICENSE file
which does not gather or contain its dependencies LICENSE files, we don't do
the work.)
Regarding the Java Module System, we are still stuck with JAVA 8.
That being said, We need to investigate more because we will not stay stuck
with Java 8 forever.
Thanks !
> Use of shade plugin replaces files required for distribution
>
>
> Key: DIR-344
> URL: https://issues.apache.org/jira/browse/DIR-344
> Project: Directory
> Issue Type: Bug
>Reporter: Brian Demers
>Assignee: Emmanuel Lécharny
>Priority: Major
>
> The use of the shade plugin causes a handful of warnings in the `service`
> module's build.
> Some of these may have legal concerns. For example, only one
> `META-INF/NOTICE` file is present in most of the dependencies, but only the
> one from this project is present.
> There are multiple LICENSE files
> - LICENSE (Apache v2.0)
> - LICENSE-notice.md (refers to other non-existent license files)
> - LICENSE.md - (EPL)
> - LICENSE.txt (Apache v2.0)
> Shading doesn't work with the Java Module System.
> And also remove many security constraints that may be in place.
> - Removes signatures
> - Module isolation - Java Module System
> - Cannot easily verify the provenance of included artifacts.
> {noformat}
> [WARNING] Discovered module-info.class. Shading will break its strong
> encapsulation.
> [WARNING] jetty-http-9.4.51.v20230217.jar, jetty-io-9.4.51.v20230217.jar,
> jetty-security-9.4.51.v20230217.jar, jetty-server-9.4.51.v20230217.jar,
> jetty
