Skip to content

SK-2871: Upgrade and prune Java dependencies - #340

Merged
Devesh-Skyflow merged 1 commit into
release/26.6.25from
devesh/sk-2871-fix-outdated-dependencies
Jul 8, 2026
Merged

SK-2871: Upgrade and prune Java dependencies#340
Devesh-Skyflow merged 1 commit into
release/26.6.25from
devesh/sk-2871-fix-outdated-dependencies

Conversation

@Devesh-Skyflow

@Devesh-Skyflow Devesh-Skyflow commented Jun 22, 2026

Copy link
Copy Markdown
Collaborator
  • Bump jackson-datatype-jdk8/jsr310 2.17.2 -> 2.18.6 (align with jackson-databind)
  • Bump dotenv-java 2.2.0 -> 3.2.0
  • Migrate commons-codec Base64 -> java.util.Base64 (Token, Utils); drop commons-codec
  • Remove unused compile-scoped deps: jsr305, gson-fire, logging-interceptor, jaxb-api, jakarta.annotation-api, and their orphaned version properties

Verified: mvn clean test compiles clean; the 5 remaining failures are pre-existing env-dependent tests (require local .env/credentials) and also fail on clean HEAD.

- Bump jackson-datatype-jdk8/jsr310 2.17.2 -> 2.18.6 (align with jackson-databind)
- Bump dotenv-java 2.2.0 -> 3.2.0
- Migrate commons-codec Base64 -> java.util.Base64 (Token, Utils); drop commons-codec
- Remove unused compile-scoped deps: jsr305, gson-fire, logging-interceptor,
  jaxb-api, jakarta.annotation-api, and their orphaned version properties

Verified: mvn clean test compiles clean; the 5 remaining failures are
pre-existing env-dependent tests (require local .env/credentials) and also
fail on clean HEAD.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@github-actions

Copy link
Copy Markdown

Gitleaks Findings: No secrets detected. Safe to proceed!

@github-actions

Copy link
Copy Markdown

Semgrep Findings: Issues with Error level severity are found (Error is Highest severity in Semgrep), Please resolve the issues before merging.

@Devesh-Skyflow
Devesh-Skyflow changed the base branch from main to release/26.6.25 June 25, 2026 03:21
@Devesh-Skyflow
Devesh-Skyflow merged commit 758a994 into release/26.6.25 Jul 8, 2026
17 of 18 checks passed
Devesh-Skyflow added a commit that referenced this pull request Jul 14, 2026
* SK-2871: Upgrade and prune Java dependencies (#340)

- Bump jackson-datatype-jdk8/jsr310 2.17.2 -> 2.18.6 (align with jackson-databind)
- Bump dotenv-java 2.2.0 -> 3.2.0
- Migrate commons-codec Base64 -> java.util.Base64 (Token, Utils); drop commons-codec
- Remove unused compile-scoped deps: jsr305, gson-fire, logging-interceptor,
  jaxb-api, jakarta.annotation-api, and their orphaned version properties

Verified: mvn clean test compiles clean; the 5 remaining failures are
pre-existing env-dependent tests (require local .env/credentials) and also
fail on clean HEAD.

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* [AUTOMATED] Private Release 1.15.1-dev-758a994

---------

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Co-authored-by: Devesh-Skyflow <Devesh-Skyflow@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants