Re: Tooling update

2018-06-12 Thread Gintautas Grigelionis
Nightlies are publishing Checkstyle, SpotBugs and Simian now. AFAICS there's no plugin for Rat :-( Next, I think of publishing JaCoCo in Matrix builds. And, perhaps, adding build status icons to [1] (what is the status of plans to move the website to Git?) Gintas [1]

Re: Tooling update

2018-06-08 Thread Stefan Bodewig
On 2018-06-08, Gintautas Grigelionis wrote: > Then I was surprised that Dependency Check indicates that the latest > XZ 1.8 has a vulnerability: should we ask them to investigate? That's a false positive. https://www.cvedetails.com/cve/CVE-2015-4035/ applies to the command line tooling and is

Tooling update

2018-06-08 Thread Gintautas Grigelionis
I took the liberty to sync QA tools among Ant, Ivy and IvyDE. A couple of notes: Ant 1.10 having a Java 8 baseline permits migration from FindBugs to SpotBugs; I decided to it now rather than wait for dependency issues [1] to be resolved. Then I was surprised that Dependency Check indicates that