fix(deps): depend on the renamed starters through nova-spring-boot-bom 2.0.0 - #8
Merged
Merged
Conversation
…m 2.0.0 ADR-039 renamed the two Spring Boot starters this meta-starter re-exports: nova-mask-starter is now nova-mask-spring-boot-starter and nova-api-standard-starter is now nova-api-standard-spring-boot-starter, both from 2.0.0. The platform BOM moves to 2.0.0, which manages them and also brings Spring Boot 4.0.8 with Tomcat 11.0.26.
…pendencies reusable-owasp-check.yml restores an NVD mirror under 24 hours old, but without autoUpdate = false and data.directory the plugin ignores it, syncs the whole NVD and can run the Gradle daemon out of memory, as happened in nova-java-08. The checkstyle tool's httpcore, httpcore5, commons-beanutils and plexus-utils get the same patched versions as the other starters.
… artifactId ADR-039, rule 5: the component and the SonarCloud key carry the artifactId, nova-spring-boot-starter. Tags carry no component (include-component-in-tag is false), so release-please keeps finding the last release, and SonarCloud has no Nova project yet, so no history is lost.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Qué
El meta-starter reexporta los dos starters de Spring Boot que ADR-039 renombró. Son tres commits:
fix(deps): depende denova-mask-spring-boot-starterynova-api-standard-spring-boot-startera través denova-spring-boot-bom2.0.0, ya publicado. Ese BOM también trae Spring Boot 4.0.8 con Tomcat 11.0.26. Lo hizoops/rename-artifacts.py --phase 2.build: OWASP usa el mirror de NVD que restaura el pipeline, en vez de sincronizar NVD entero y quedarse sin memoria, y las dependencias de la herramienta checkstyle suben a las mismas versiones parcheadas que usan los starters.chore: el componente de release-please y la clave de SonarCloud pasan anova-spring-boot-starter, que es el artifactId (regla 5). Los tags no llevan componente, así que release-please sigue encontrando la última versión.ops/rename-artifacts.py --checkya no lista nada en este repo.Después del merge
release-please abre la 1.0.4 con el componente nuevo. Cuando esté publicada, el BOM sube a 2.0.1 para gestionarla.