Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bom #147

Merged
merged 6 commits into from
Nov 5, 2023
Merged

Bom #147

merged 6 commits into from
Nov 5, 2023

Conversation

aaron-steinfeld
Copy link
Contributor

Description

Migrate project to use common BOM

@aaron-steinfeld aaron-steinfeld requested a review from a team as a code owner November 1, 2023 23:46
Copy link

github-actions bot commented Nov 2, 2023

Test Results

110 tests  ±0   110 ✔️ ±0   1m 17s ⏱️ +28s
  38 suites ±0       0 💤 ±0 
  38 files   ±0       0 ±0 

Results for commit 6ecfdcb. ± Comparison against base commit eee2612.

♻️ This comment has been updated with latest results.

Copy link

codecov bot commented Nov 2, 2023

Codecov Report

Merging #147 (6ecfdcb) into main (eee2612) will not change coverage.
The diff coverage is n/a.

@@            Coverage Diff            @@
##               main     #147   +/-   ##
=========================================
  Coverage     57.57%   57.57%           
  Complexity      264      264           
=========================================
  Files            91       91           
  Lines          1445     1445           
  Branches         42       42           
=========================================
  Hits            832      832           
  Misses          583      583           
  Partials         30       30           
Flag Coverage Δ
unit 57.57% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more

io.grpc:grpc-api:1.57.2=runtimeClasspath
io.grpc:grpc-bom:1.57.2=compileClasspath,runtimeClasspath
io.grpc:grpc-context:1.57.2=runtimeClasspath
io.grpc:grpc-core:1.57.2=runtimeClasspath
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This could be tangential but does this grpc version have the fix for RST stream vulnerability?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

transport level concern, but netty does as of 100:
https://netty.io/news/2023/10/10/4-1-100-Final.html

we constrain to at least that version via the BOM (see
hypertrace-core-graphql-service/gradle.lockfile lines 55-66)

@aaron-steinfeld aaron-steinfeld merged commit 6f68e95 into main Nov 5, 2023
8 checks passed
@aaron-steinfeld aaron-steinfeld deleted the bom branch November 5, 2023 12:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants