You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@texera.apache.org by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/05 17:25:51 UTC
[PR] fix(deps): bump org.assertj:assertj-core from 3.24.2 to 3.27.7 [texera]
dependabot[bot] opened a new pull request, #6181:
URL: https://github.com/apache/texera/pull/6181
Bumps [org.assertj:assertj-core](https://github.com/assertj/assertj) from 3.24.2 to 3.27.7.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/assertj/assertj/releases">org.assertj:assertj-core's releases</a>.</em></p>
<blockquote>
<h2>v3.27.7</h2>
<h2>:lock: Security</h2>
<h3>Core</h3>
<ul>
<li>Fix XXE vulnerability in <code>isXmlEqualTo</code> assertion (CVE-2026-24400)
<ul>
<li>See GHSA-rqfh-9r24-8c9r for details; many thanks to <a href="https://github.com/wxt201"><code>@wxt201</code></a> and <a href="https://github.com/Song-Li"><code>@Song-Li</code></a> for responsibly reporting it!</li>
</ul>
</li>
</ul>
<h2>:no_entry_sign: Deprecated</h2>
<h3>Core</h3>
<ul>
<li>Deprecate <code>XmlStringPrettyFormatter</code> with no replacement</li>
</ul>
<h2>:bug: Bug Fixes</h2>
<h3>Guava</h3>
<ul>
<li>Navigation to <code>assertj-core</code> or <code>guava</code> types from <code>assertj-guava</code> Javadoc site has unnecessary header <a href="https://redirect.github.com/assertj/assertj/issues/3478">#3478</a></li>
</ul>
<h2>:hammer: Dependency Upgrades</h2>
<h3>Core</h3>
<ul>
<li>Upgrade to Byte Buddy 1.18.3</li>
<li>Upgrade to JUnit BOM 5.14.1</li>
</ul>
<h3>Guava</h3>
<ul>
<li>Upgrade to Guava 33.5.0-jre</li>
</ul>
<h2>v3.27.6</h2>
<h2>:bug: Bug Fixes</h2>
<h3>Core</h3>
<ul>
<li>Add missing export for <code>org.assertj.core.annotation</code> <a href="https://redirect.github.com/assertj/assertj/issues/3951">#3951</a></li>
</ul>
<h2>:heart: Contributors</h2>
<p>Thanks to all the contributors who worked on this release:</p>
<p><a href="https://github.com/duponter"><code>@duponter</code></a></p>
<h2>v3.27.5</h2>
<h2>:zap: Improvements</h2>
<h3>Core</h3>
<ul>
<li>ByteBuddy in AssertJ 3.27.4 not compatible with Java 25 <a href="https://redirect.github.com/assertj/assertj/issues/3946">#3946</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/assertj/assertj/commit/e84071667f5f8f13084af9dfa54cee5fd9db18db"><code>e840716</code></a> [maven-release-plugin] prepare release assertj-build-3.27.7</li>
<li><a href="https://github.com/assertj/assertj/commit/85ca7eb6609bb179c043b85ae7d290523b1ba79a"><code>85ca7eb</code></a> Deprecate <code>XmlStringPrettyFormatter</code></li>
<li><a href="https://github.com/assertj/assertj/commit/77081dc5eb107141df80f95bd0149b468e451341"><code>77081dc</code></a> Merge commit from fork</li>
<li><a href="https://github.com/assertj/assertj/commit/b68fc24a9de28f28a486fc5b887c1b8a003a5823"><code>b68fc24</code></a> Bump github/codeql-action from 4.31.9 to 4.31.10 in the github-actions group ...</li>
<li><a href="https://github.com/assertj/assertj/commit/0cf5bb6c50f6ead3deaa2a2ff50ef1e7d933c8a3"><code>0cf5bb6</code></a> Bump <code>kotlin.version</code> from 2.1.0 to 2.2.21</li>
<li><a href="https://github.com/assertj/assertj/commit/d393ef1f5e48c89d47d7cf6d1eae359ceda0a126"><code>d393ef1</code></a> Abort tests when symbolic links cannot be created (<a href="https://redirect.github.com/assertj/assertj/issues/3788">#3788</a>)</li>
<li><a href="https://github.com/assertj/assertj/commit/22124331e9922af5a43ab50f7a9a25b65be53be1"><code>2212433</code></a> Add IntelliJ custom inspection for test class names</li>
<li><a href="https://github.com/assertj/assertj/commit/5717d025cfe0f4c66de20f3253c0b0ecba259aa1"><code>5717d02</code></a> Update JetBrains icon</li>
<li><a href="https://github.com/assertj/assertj/commit/a8ec20bd42ed01f9cc6f654046c7dd424b0af07c"><code>a8ec20b</code></a> Add icon for JetBrains products</li>
<li><a href="https://github.com/assertj/assertj/commit/c05fb3d052b415fb2d6051df939f3b7903a76afe"><code>c05fb3d</code></a> Bump Maven to 3.9.12 and Wrapper to 3.3.4</li>
<li>Additional commits viewable in <a href="https://github.com/assertj/assertj/compare/assertj-build-3.24.2...assertj-build-3.27.7">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@texera.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] fix(deps): bump org.assertj:assertj-core from 3.24.2 to 3.27.7 [texera]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on PR #6181:
URL: https://github.com/apache/texera/pull/6181#issuecomment-4886952044
<!-- texera-reviewer-suggestion -->
### Automated Reviewer Suggestions
Based on the `git blame` history of the changed files, we recommend the following reviewers:
- **Committers with relevant context:** `@pjfanning`
You can request their reviews formally with `/request-review @pjfanning`.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@texera.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] fix(deps): bump org.assertj:assertj-core from 3.24.2 to 3.27.7 [texera]
Posted by "codecov-commenter (via GitHub)" <gi...@apache.org>.
codecov-commenter commented on PR #6181:
URL: https://github.com/apache/texera/pull/6181#issuecomment-4888231000
## [Codecov](https://app.codecov.io/gh/apache/texera/pull/6181?dropdown=coverage&src=pr&el=h1&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) Report
:white_check_mark: All modified and coverable lines are covered by tests.
:white_check_mark: Project coverage is 59.92%. Comparing base ([`4ef1ddf`](https://app.codecov.io/gh/apache/texera/commit/4ef1ddff68683a8a7cda8ce0bd57f708e0ff94e0?dropdown=coverage&el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache)) to head ([`78acafb`](https://app.codecov.io/gh/apache/texera/commit/78acafb8c0eacce97f44bf9a2b9e9e967713acb9?dropdown=coverage&el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache)).
:white_check_mark: All tests successful. No failed tests found.
<details><summary>Additional details and impacted files</summary>
```diff
@@ Coverage Diff @@
## main #6181 +/- ##
=========================================
Coverage 59.92% 59.92%
Complexity 3306 3306
=========================================
Files 1131 1131
Lines 43805 43805
Branches 4745 4745
=========================================
Hits 26251 26251
Misses 16129 16129
Partials 1425 1425
```
| [Flag](https://app.codecov.io/gh/apache/texera/pull/6181/flags?src=pr&el=flags&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) | Coverage Δ | | *Carryforward flag |
|---|---|---|---|
| [access-control-service](https://app.codecov.io/gh/apache/texera/pull/6181/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) | `70.00% <ø> (ø)` | | Carriedforward from [4ef1ddf](https://app.codecov.io/gh/apache/texera/commit/4ef1ddff68683a8a7cda8ce0bd57f708e0ff94e0?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) |
| [agent-service](https://app.codecov.io/gh/apache/texera/pull/6181/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) | `44.59% <ø> (ø)` | | Carriedforward from [4ef1ddf](https://app.codecov.io/gh/apache/texera/commit/4ef1ddff68683a8a7cda8ce0bd57f708e0ff94e0?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) |
| [amber](https://app.codecov.io/gh/apache/texera/pull/6181/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) | `65.11% <ø> (ø)` | | Carriedforward from [4ef1ddf](https://app.codecov.io/gh/apache/texera/commit/4ef1ddff68683a8a7cda8ce0bd57f708e0ff94e0?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) |
| [computing-unit-managing-service](https://app.codecov.io/gh/apache/texera/pull/6181/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) | `0.00% <ø> (ø)` | | Carriedforward from [4ef1ddf](https://app.codecov.io/gh/apache/texera/commit/4ef1ddff68683a8a7cda8ce0bd57f708e0ff94e0?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) |
| [config-service](https://app.codecov.io/gh/apache/texera/pull/6181/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) | `52.30% <ø> (ø)` | | |
| [file-service](https://app.codecov.io/gh/apache/texera/pull/6181/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) | `62.81% <ø> (ø)` | | Carriedforward from [4ef1ddf](https://app.codecov.io/gh/apache/texera/commit/4ef1ddff68683a8a7cda8ce0bd57f708e0ff94e0?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) |
| [frontend](https://app.codecov.io/gh/apache/texera/pull/6181/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) | `51.48% <ø> (ø)` | | Carriedforward from [4ef1ddf](https://app.codecov.io/gh/apache/texera/commit/4ef1ddff68683a8a7cda8ce0bd57f708e0ff94e0?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) |
| [notebook-migration-service](https://app.codecov.io/gh/apache/texera/pull/6181/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) | `78.57% <ø> (ø)` | | Carriedforward from [4ef1ddf](https://app.codecov.io/gh/apache/texera/commit/4ef1ddff68683a8a7cda8ce0bd57f708e0ff94e0?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) |
| [pyamber](https://app.codecov.io/gh/apache/texera/pull/6181/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) | `91.18% <ø> (ø)` | | Carriedforward from [4ef1ddf](https://app.codecov.io/gh/apache/texera/commit/4ef1ddff68683a8a7cda8ce0bd57f708e0ff94e0?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) |
| [workflow-compiling-service](https://app.codecov.io/gh/apache/texera/pull/6181/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) | `55.14% <ø> (ø)` | | Carriedforward from [4ef1ddf](https://app.codecov.io/gh/apache/texera/commit/4ef1ddff68683a8a7cda8ce0bd57f708e0ff94e0?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) |
*This pull request uses carry forward flags. [Click here](https://docs.codecov.io/docs/carryforward-flags?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) to find out more.
</details>
[:umbrella: View full report in Codecov by Harness](https://app.codecov.io/gh/apache/texera/pull/6181?dropdown=coverage&src=pr&el=continue&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache).
:loudspeaker: Have feedback on the report? [Share it here](https://about.codecov.io/codecov-pr-comment-feedback/?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache).
<details><summary> :rocket: New features to boost your workflow: </summary>
- :package: [JS Bundle Analysis](https://docs.codecov.com/docs/javascript-bundle-analysis): Save yourself from yourself by tracking and limiting bundle sizes in JS merges.
</details>
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@texera.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] fix(deps): bump org.assertj:assertj-core from 3.24.2 to 3.27.7 [texera]
Posted by "Yicong-Huang (via GitHub)" <gi...@apache.org>.
Yicong-Huang merged PR #6181:
URL: https://github.com/apache/texera/pull/6181
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@texera.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] fix(deps): bump org.assertj:assertj-core from 3.24.2 to 3.27.7 [texera]
Posted by "aglinxinyuan (via GitHub)" <gi...@apache.org>.
aglinxinyuan commented on PR #6181:
URL: https://github.com/apache/texera/pull/6181#issuecomment-4888215215
`assertj-core` is test-only (`% Test`) in all five services, so it never ships in the binary distribution — no `LICENSE-binary` sync needed (the green `build / platform` legs confirm the direct-dep license check is happy).
**Local** — bumped `assertjVersion` to `3.27.7` and ran the only spec that touches AssertJ, `WorkflowCompilationResourceSpec` (workflow-compiling-service):
```
[info] * assertj-core-3.27.7.jar
[info] Run completed in 3 seconds, 210 milliseconds.
[info] Tests: succeeded 3, failed 0, canceled 0, ignored 0, pending 0
[info] All tests passed.
```
The only API in use is `assertThat(...).isEqualTo(...)` / `.isTrue`, unchanged across 3.24 → 3.27, so nothing else in the tree is affected.
**CI** — the red `Required Checks` wasn't a real failure. The labeler's `labeled` event started a second `pull_request` run that superseded the first via `cancel-in-progress`, and the cancelled run's `always()` aggregation reported failure off the cancelled `precheck`. The live run had already passed everything; I re-ran the superseded run (and the stale `Benchmarks` cancel) so both go green.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@texera.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org