From 0656d777a6f200c2010aa0784106f53db9638ab0 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Mon, 21 Oct 2024 17:32:05 +0000 Subject: [PATCH 01/21] build(deps): update junit5 monorepo (#6027) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- spoon-dataflow/build.gradle | 2 +- spoon-pom/pom.xml | 6 +++--- spoon-visualisation/pom.xml | 2 +- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/spoon-dataflow/build.gradle b/spoon-dataflow/build.gradle index 037724dac25..56395cb6fe7 100644 --- a/spoon-dataflow/build.gradle +++ b/spoon-dataflow/build.gradle @@ -24,7 +24,7 @@ dependencies { implementation group: 'fr.inria.gforge.spoon', name: 'spoon-core', version: '+' implementation group: 'commons-cli', name: 'commons-cli', version: '1.9.0' implementation group: 'tools.aqua', name: 'z3-turnkey', version: '4.13.0.1' - testImplementation("org.junit.jupiter:junit-jupiter:5.11.2") + testImplementation("org.junit.jupiter:junit-jupiter:5.11.3") } application { diff --git a/spoon-pom/pom.xml b/spoon-pom/pom.xml index f195fad6fd3..a32cb43fede 100644 --- a/spoon-pom/pom.xml +++ b/spoon-pom/pom.xml @@ -43,19 +43,19 @@ org.junit.jupiter junit-jupiter-engine - 5.11.2 + 5.11.3 test org.junit.jupiter junit-jupiter-params - 5.11.2 + 5.11.3 test org.junit.platform junit-platform-launcher - 1.11.2 + 1.11.3 test diff --git a/spoon-visualisation/pom.xml b/spoon-visualisation/pom.xml index e65b0912e4e..55e7dd89b88 100644 --- a/spoon-visualisation/pom.xml +++ b/spoon-visualisation/pom.xml @@ -149,7 +149,7 @@ org.junit.jupiter junit-jupiter-engine - 5.11.2 + 5.11.3 test From 3f012968b3b1c9336226f8edfb281bf5f260acba Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Mon, 21 Oct 2024 23:10:43 +0000 Subject: [PATCH 02/21] build(deps): update dependency org.apache.maven.plugins:maven-project-info-reports-plugin to v3.8.0 (#6028) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- spoon-pom/pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spoon-pom/pom.xml b/spoon-pom/pom.xml index a32cb43fede..9732d3990d7 100644 --- a/spoon-pom/pom.xml +++ b/spoon-pom/pom.xml @@ -251,7 +251,7 @@ maven-project-info-reports-plugin - 3.7.0 + 3.8.0 maven-release-plugin From 0c30154e327e7d1785387900d1d310ff4916fd95 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Tue, 22 Oct 2024 09:24:14 +0000 Subject: [PATCH 03/21] build(deps): update dependency org.apache.maven.plugins:maven-site-plugin to v3.21.0 (#6029) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- spoon-pom/pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spoon-pom/pom.xml b/spoon-pom/pom.xml index 9732d3990d7..eb788f54692 100644 --- a/spoon-pom/pom.xml +++ b/spoon-pom/pom.xml @@ -263,7 +263,7 @@ maven-site-plugin - 3.20.0 + 3.21.0 maven-surefire-plugin From d9c4d2ec94a695a3ca9ce7806fa96e276c0a3789 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Tue, 22 Oct 2024 16:07:38 +0000 Subject: [PATCH 04/21] build(deps): update actions/cache action to v4.1.2 (#6030) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- .github/actions/setup-tests/action.yml | 2 +- .github/workflows/sbom.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/actions/setup-tests/action.yml b/.github/actions/setup-tests/action.yml index 1b9295f0037..4190fbe04bf 100644 --- a/.github/actions/setup-tests/action.yml +++ b/.github/actions/setup-tests/action.yml @@ -16,7 +16,7 @@ runs: with: fail-mode: true - name: Use Maven dependency cache - uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1 + uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4.1.2 with: path: ~/.m2/repository # We use a unique key and restore from the base one, to ensure that diff --git a/.github/workflows/sbom.yml b/.github/workflows/sbom.yml index 5e89bfb5583..2b2bedf5ee2 100644 --- a/.github/workflows/sbom.yml +++ b/.github/workflows/sbom.yml @@ -34,7 +34,7 @@ jobs: run: echo "date=$(/bin/date -u "+%Y%m%d")" >> $GITHUB_OUTPUT shell: bash - name: Use Maven dependency cache - uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1 + uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4.1.2 with: path: ~/.m2/repository key: ${{ runner.os }}-${{ steps.get-date.outputs.date }}-${{ hashFiles('**/pom.xml') }} From bab9d966d405abc33e1c8803b4d5465b49988475 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Tue, 22 Oct 2024 23:01:02 +0000 Subject: [PATCH 05/21] build(deps): update github/codeql-action digest to 6624720 (#6031) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- .github/workflows/qodana.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/qodana.yml b/.github/workflows/qodana.yml index b1f5c1a3bb5..5cfb1178202 100644 --- a/.github/workflows/qodana.yml +++ b/.github/workflows/qodana.yml @@ -22,7 +22,7 @@ jobs: with: args: --source-directory,./src/main/java , --fail-threshold, 0 post-pr-comment: "false" - - uses: github/codeql-action/upload-sarif@f779452ac5af1c261dce0346a8f964149f49322b # v3 + - uses: github/codeql-action/upload-sarif@662472033e021d55d94146f66f6058822b0b39fd # v3 with: sarif_file: ${{ runner.temp }}/qodana/results/qodana.sarif.json code-quality-spoon-javadoc: @@ -37,7 +37,7 @@ jobs: with: args: --source-directory,./spoon-javadoc/src/main/java , --fail-threshold, 0 post-pr-comment: "false" - - uses: github/codeql-action/upload-sarif@f779452ac5af1c261dce0346a8f964149f49322b # v3 + - uses: github/codeql-action/upload-sarif@662472033e021d55d94146f66f6058822b0b39fd # v3 with: sarif_file: ${{ runner.temp }}/qodana/results/qodana.sarif.json code-quality-spoon-control-flow: @@ -52,6 +52,6 @@ jobs: with: args: --source-directory,./spoon-control-flow/src/main/java , --fail-threshold, 0 post-pr-comment: "false" - - uses: github/codeql-action/upload-sarif@f779452ac5af1c261dce0346a8f964149f49322b # v3 + - uses: github/codeql-action/upload-sarif@662472033e021d55d94146f66f6058822b0b39fd # v3 with: sarif_file: ${{ runner.temp }}/qodana/results/qodana.sarif.json From a123012dad676950b45424913001167a65b8294d Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Wed, 23 Oct 2024 01:02:48 +0000 Subject: [PATCH 06/21] build(deps): update github/codeql-action action to v3.27.0 (#6032) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- .github/workflows/scorecards.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml index aee178c8d31..5149b994d1f 100644 --- a/.github/workflows/scorecards.yml +++ b/.github/workflows/scorecards.yml @@ -71,6 +71,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard. - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@f779452ac5af1c261dce0346a8f964149f49322b # v3.26.13 + uses: github/codeql-action/upload-sarif@662472033e021d55d94146f66f6058822b0b39fd # v3.27.0 with: sarif_file: results.sarif From 7375973647ce88b2bba26ebe46efb78178e979f9 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Wed, 23 Oct 2024 18:44:03 +0000 Subject: [PATCH 07/21] build(deps): update actions/checkout digest to 11bd719 (#6035) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- .github/workflows/jreleaser.yml | 2 +- .github/workflows/tests.yml | 14 +++++++------- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.github/workflows/jreleaser.yml b/.github/workflows/jreleaser.yml index 21b52e7aa89..ed7612e61aa 100644 --- a/.github/workflows/jreleaser.yml +++ b/.github/workflows/jreleaser.yml @@ -12,7 +12,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 with: fetch-depth: 0 token: ${{ secrets.JRELEASER_GITHUB_TOKEN }} diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml index 10631939477..aa078edb209 100644 --- a/.github/workflows/tests.yml +++ b/.github/workflows/tests.yml @@ -35,7 +35,7 @@ jobs: os: [ubuntu-latest] steps: - name: Checkout - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 with: fetch-depth: 0 - name: Setup env @@ -73,7 +73,7 @@ jobs: name: Test with coverage steps: - name: Checkout - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 with: fetch-depth: 0 - name: Setup env @@ -92,7 +92,7 @@ jobs: name: Extra checks steps: - name: Checkout - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 with: fetch-depth: 0 - name: Setup env @@ -111,7 +111,7 @@ jobs: name: Javadoc quality steps: - name: Checkout - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 with: fetch-depth: 0 - name: Setup env @@ -129,7 +129,7 @@ jobs: name: reproducible-builds steps: - name: Checkout - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 with: fetch-depth: 0 - name: Setup env @@ -144,7 +144,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 with: fetch-depth: 0 - name: Setup env @@ -160,7 +160,7 @@ jobs: name: Codegeneration steps: - name: Checkout - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 with: fetch-depth: 0 - name: Setup env From 0887e3de376676d5978245163a396692aa41cedc Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Wed, 23 Oct 2024 22:03:03 +0000 Subject: [PATCH 08/21] build(deps): update actions/checkout action to v4.2.2 (#6036) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- .github/workflows/qodana.yml | 6 +++--- .github/workflows/sbom.yml | 2 +- .github/workflows/scorecards.yml | 2 +- .github/workflows/tests.yml | 2 +- 4 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/qodana.yml b/.github/workflows/qodana.yml index 5cfb1178202..100c3564f62 100644 --- a/.github/workflows/qodana.yml +++ b/.github/workflows/qodana.yml @@ -14,7 +14,7 @@ jobs: runs-on: ubuntu-latest name: code-quality qodana steps: - - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: fetch-depth: 0 - name: 'Qodana Scan' @@ -29,7 +29,7 @@ jobs: runs-on: ubuntu-latest name: code-quality spoon-javadoc qodana steps: - - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: fetch-depth: 0 - name: 'Qodana Scan (spoon-javadoc)' @@ -44,7 +44,7 @@ jobs: runs-on: ubuntu-latest name: code-quality spoon-controlflow qodana steps: - - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: fetch-depth: 0 - name: 'Qodana Scan (spoon-control-flow)' diff --git a/.github/workflows/sbom.yml b/.github/workflows/sbom.yml index 2b2bedf5ee2..19df8061be2 100644 --- a/.github/workflows/sbom.yml +++ b/.github/workflows/sbom.yml @@ -22,7 +22,7 @@ jobs: SSH_AUTH_SOCK: /tmp/ssh_agent.sock name: Generate and store SBOM steps: - - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: fetch-depth: 0 - uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # v4.4.0 diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml index 5149b994d1f..f5107f36fc6 100644 --- a/.github/workflows/scorecards.yml +++ b/.github/workflows/scorecards.yml @@ -36,7 +36,7 @@ jobs: egress-policy: audit - name: "Checkout code" - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: persist-credentials: false diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml index aa078edb209..6929fca9b67 100644 --- a/.github/workflows/tests.yml +++ b/.github/workflows/tests.yml @@ -53,7 +53,7 @@ jobs: - name: Disable Git's autocrlf run: git config --global core.autocrlf false - name: git checkout - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: fetch-depth: 0 - uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # v4 From dd13a47138c965cd52118da39df2fe55df52524b Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Thu, 24 Oct 2024 15:29:40 +0000 Subject: [PATCH 09/21] build(deps): update actions/setup-java action to v4.5.0 (#6037) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- .github/workflows/sbom.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/sbom.yml b/.github/workflows/sbom.yml index 19df8061be2..a041ff08f8c 100644 --- a/.github/workflows/sbom.yml +++ b/.github/workflows/sbom.yml @@ -25,7 +25,7 @@ jobs: - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: fetch-depth: 0 - - uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # v4.4.0 + - uses: actions/setup-java@8df1039502a15bceb9433410b1a100fbe190c53b # v4.5.0 with: java-version: 17 distribution: ${{ env.JAVA_DISTRIBUTION }} From 20142bf161c4a9c51f4bd96eb7d4f0d4c580b4ee Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Thu, 24 Oct 2024 20:27:28 +0000 Subject: [PATCH 10/21] build(deps): update actions/setup-java digest to 8df1039 (#6038) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- .github/workflows/tests.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml index 6929fca9b67..a0746640dfc 100644 --- a/.github/workflows/tests.yml +++ b/.github/workflows/tests.yml @@ -56,7 +56,7 @@ jobs: uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: fetch-depth: 0 - - uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # v4 + - uses: actions/setup-java@8df1039502a15bceb9433410b1a100fbe190c53b # v4 with: distribution: 'temurin' java-version: '17' From 1eaf2b0aa18e2dc00e2cfb6db67513415589e520 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Fri, 25 Oct 2024 21:06:17 +0000 Subject: [PATCH 11/21] build(deps): update dependency org.apache.maven.plugins:maven-dependency-plugin to v3.8.1 (#6040) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- spoon-pom/pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spoon-pom/pom.xml b/spoon-pom/pom.xml index eb788f54692..0716da976ab 100644 --- a/spoon-pom/pom.xml +++ b/spoon-pom/pom.xml @@ -235,7 +235,7 @@ maven-dependency-plugin - 3.8.0 + 3.8.1 maven-deploy-plugin From 5039565d5767e15f2f1a7e3b95637e5aa8fa014e Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Sat, 26 Oct 2024 00:02:03 +0000 Subject: [PATCH 12/21] build(deps): update dependency ch.qos.logback:logback-classic to v1.5.12 (#6042) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index ebd90f67b2e..2e404040095 100644 --- a/pom.xml +++ b/pom.xml @@ -120,7 +120,7 @@ ch.qos.logback logback-classic - 1.5.11 + 1.5.12 test From cf3dafdc96729bef6e66d078843936abe3b93e17 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Sat, 26 Oct 2024 04:20:36 +0000 Subject: [PATCH 13/21] build(deps): update dependency org.apache.maven.plugins:maven-checkstyle-plugin to v3.6.0 (#6041) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- pom.xml | 2 +- spoon-control-flow/pom.xml | 2 +- spoon-decompiler/pom.xml | 2 +- spoon-smpl/pom.xml | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/pom.xml b/pom.xml index 2e404040095..fb40634eb3d 100644 --- a/pom.xml +++ b/pom.xml @@ -198,7 +198,7 @@ org.apache.maven.plugins maven-checkstyle-plugin - 3.5.0 + 3.6.0 true true diff --git a/spoon-control-flow/pom.xml b/spoon-control-flow/pom.xml index 1a4754b75cc..f981ef5865e 100644 --- a/spoon-control-flow/pom.xml +++ b/spoon-control-flow/pom.xml @@ -27,7 +27,7 @@ org.apache.maven.plugins maven-checkstyle-plugin - 3.5.0 + 3.6.0 true ../checkstyle.xml diff --git a/spoon-decompiler/pom.xml b/spoon-decompiler/pom.xml index 86665131f91..186b4440f77 100644 --- a/spoon-decompiler/pom.xml +++ b/spoon-decompiler/pom.xml @@ -82,7 +82,7 @@ org.apache.maven.plugins maven-checkstyle-plugin - 3.5.0 + 3.6.0 true ../checkstyle.xml diff --git a/spoon-smpl/pom.xml b/spoon-smpl/pom.xml index 725f9542e05..89cfa1b71fc 100644 --- a/spoon-smpl/pom.xml +++ b/spoon-smpl/pom.xml @@ -36,7 +36,7 @@ org.apache.maven.plugins maven-checkstyle-plugin - 3.5.0 + 3.6.0 true ../checkstyle.xml From ceb0a3cfb74c334c940cb6dc6b7f9f18d0704e96 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Sat, 26 Oct 2024 21:50:08 +0200 Subject: [PATCH 14/21] build(deps): update jetbrains/qodana-action action to v2024 (#5783) Co-authored-by: Martin Wittlinger --- .github/workflows/qodana.yml | 6 +++--- qodana.yaml | 4 ++++ 2 files changed, 7 insertions(+), 3 deletions(-) diff --git a/.github/workflows/qodana.yml b/.github/workflows/qodana.yml index 100c3564f62..e99e1d163f8 100644 --- a/.github/workflows/qodana.yml +++ b/.github/workflows/qodana.yml @@ -18,7 +18,7 @@ jobs: with: fetch-depth: 0 - name: 'Qodana Scan' - uses: JetBrains/qodana-action@a040a784cc28cb9cabdf884c4e8c32d0aa3fcdb3 # v2023.3.2 + uses: JetBrains/qodana-action@4f04143e8d52028fee27c2a219c8856035094962 # v2024.2.5 with: args: --source-directory,./src/main/java , --fail-threshold, 0 post-pr-comment: "false" @@ -33,7 +33,7 @@ jobs: with: fetch-depth: 0 - name: 'Qodana Scan (spoon-javadoc)' - uses: JetBrains/qodana-action@a040a784cc28cb9cabdf884c4e8c32d0aa3fcdb3 # v2023.3.2 + uses: JetBrains/qodana-action@4f04143e8d52028fee27c2a219c8856035094962 # v2024.2.5 with: args: --source-directory,./spoon-javadoc/src/main/java , --fail-threshold, 0 post-pr-comment: "false" @@ -48,7 +48,7 @@ jobs: with: fetch-depth: 0 - name: 'Qodana Scan (spoon-control-flow)' - uses: JetBrains/qodana-action@a040a784cc28cb9cabdf884c4e8c32d0aa3fcdb3 # v2023.3.2 + uses: JetBrains/qodana-action@4f04143e8d52028fee27c2a219c8856035094962 # v2024.2.5 with: args: --source-directory,./spoon-control-flow/src/main/java , --fail-threshold, 0 post-pr-comment: "false" diff --git a/qodana.yaml b/qodana.yaml index 33065fc35d2..e436b6fd7d0 100644 --- a/qodana.yaml +++ b/qodana.yaml @@ -37,3 +37,7 @@ exclude: - src/main/java/spoon/support/visitor/clone/CloneBuilder.java - src/main/java/spoon/support/visitor/clone/CloneVisitor.java - src/main/java/spoon/reflect/meta/impl/ModelRoleHandlers.java + + +#Specify Qodana linter for analysis (Applied in CI/CD pipeline) +linter: jetbrains/qodana-jvm-community:latest \ No newline at end of file From 51b5032ec09372019b16a9a06194db42f634d7ec Mon Sep 17 00:00:00 2001 From: Rafael Oliveira Date: Sat, 26 Oct 2024 21:55:57 +0200 Subject: [PATCH 15/21] chore: Attest release artifacts with sigstore/cosign (#6016) This ensures all builds are verifiable by https://www.sigstore.dev/. Co-authored-by: ludvigch --- .github/workflows/jreleaser.yml | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/.github/workflows/jreleaser.yml b/.github/workflows/jreleaser.yml index ed7612e61aa..a7d1e1475b7 100644 --- a/.github/workflows/jreleaser.yml +++ b/.github/workflows/jreleaser.yml @@ -7,6 +7,10 @@ on: required: true type: string +permissions: + id-token: write # for verifying identity in attestation process + attestations: write # to push attestation + jobs: jreleaser: runs-on: ubuntu-latest @@ -29,6 +33,11 @@ jobs: JRELEASER_NEXUS2_MAVEN_CENTRAL_USERNAME: ${{ secrets.JRELEASER_NEXUS2_MAVEN_CENTRAL_USERNAME }} JRELEASER_NEXUS2_MAVEN_CENTRAL_PASSWORD: ${{ secrets.JRELEASER_NEXUS2_MAVEN_CENTRAL_PASSWORD }} + - name: Sign artifacts with sigstore/cosign + uses: actions/attest-build-provenance@1c608d11d69870c2092266b3f9a6f3abbf17002c # v1.4.3 + with: + subject-path: './target/staging-deploy/**/*.jar' + # Log failures - name: JReleaser release output if: always() From cbfbed5cfc2303c405dc70b941b2ed1eee50b24a Mon Sep 17 00:00:00 2001 From: GitHub Actions Bot <> Date: Sun, 27 Oct 2024 01:54:00 +0000 Subject: [PATCH 16/21] release: Releasing version 11.1.1-beta-11 --- pom.xml | 4 ++-- spoon-javadoc/pom.xml | 4 ++-- spoon-pom/pom.xml | 4 ++-- 3 files changed, 6 insertions(+), 6 deletions(-) diff --git a/pom.xml b/pom.xml index fb40634eb3d..30486749cd7 100644 --- a/pom.xml +++ b/pom.xml @@ -12,13 +12,13 @@ fr.inria.gforge.spoon spoon-pom - 11.1.1-SNAPSHOT + 11.1.1-beta-11 spoon-pom spoon-core jar - 11.1.1-SNAPSHOT + 11.1.1-beta-11 Spoon Core Spoon is a tool for meta-programming, analysis and transformation of Java programs. https://spoon.gforge.inria.fr/ diff --git a/spoon-javadoc/pom.xml b/spoon-javadoc/pom.xml index 03046612f45..0fee4b8a28d 100644 --- a/spoon-javadoc/pom.xml +++ b/spoon-javadoc/pom.xml @@ -5,14 +5,14 @@ spoon-pom fr.inria.gforge.spoon - 11.1.1-SNAPSHOT + 11.1.1-beta-11 ../spoon-pom 4.0.0 spoon-javadoc jar - 11.1.1-SNAPSHOT + 11.1.1-beta-11 Spoon Javadoc A javadoc parser for the java source code analysis tool spoon. http://spoon.gforge.inria.fr/ diff --git a/spoon-pom/pom.xml b/spoon-pom/pom.xml index 0716da976ab..94c32e3482c 100644 --- a/spoon-pom/pom.xml +++ b/spoon-pom/pom.xml @@ -13,7 +13,7 @@ fr.inria.gforge.spoon spoon-pom pom - 11.1.1-SNAPSHOT + 11.1.1-beta-11 Spoon POM Common Maven config for Spoon modules http://spoon.gforge.inria.fr/ @@ -28,7 +28,7 @@ 17 target/velocity.log UTF-8 - 1723395513 + 1729994033 From 5c5424cafc76cc6380e10bdb7e8dd1306d43ee83 Mon Sep 17 00:00:00 2001 From: GitHub Actions Bot <> Date: Sun, 27 Oct 2024 02:01:27 +0000 Subject: [PATCH 17/21] release: Reverting to SNAPSHOT version 11.1.1-SNAPSHOT --- pom.xml | 4 ++-- spoon-javadoc/pom.xml | 4 ++-- spoon-pom/pom.xml | 4 ++-- 3 files changed, 6 insertions(+), 6 deletions(-) diff --git a/pom.xml b/pom.xml index 30486749cd7..fb40634eb3d 100644 --- a/pom.xml +++ b/pom.xml @@ -12,13 +12,13 @@ fr.inria.gforge.spoon spoon-pom - 11.1.1-beta-11 + 11.1.1-SNAPSHOT spoon-pom spoon-core jar - 11.1.1-beta-11 + 11.1.1-SNAPSHOT Spoon Core Spoon is a tool for meta-programming, analysis and transformation of Java programs. https://spoon.gforge.inria.fr/ diff --git a/spoon-javadoc/pom.xml b/spoon-javadoc/pom.xml index 0fee4b8a28d..03046612f45 100644 --- a/spoon-javadoc/pom.xml +++ b/spoon-javadoc/pom.xml @@ -5,14 +5,14 @@ spoon-pom fr.inria.gforge.spoon - 11.1.1-beta-11 + 11.1.1-SNAPSHOT ../spoon-pom 4.0.0 spoon-javadoc jar - 11.1.1-beta-11 + 11.1.1-SNAPSHOT Spoon Javadoc A javadoc parser for the java source code analysis tool spoon. http://spoon.gforge.inria.fr/ diff --git a/spoon-pom/pom.xml b/spoon-pom/pom.xml index 94c32e3482c..0716da976ab 100644 --- a/spoon-pom/pom.xml +++ b/spoon-pom/pom.xml @@ -13,7 +13,7 @@ fr.inria.gforge.spoon spoon-pom pom - 11.1.1-beta-11 + 11.1.1-SNAPSHOT Spoon POM Common Maven config for Spoon modules http://spoon.gforge.inria.fr/ @@ -28,7 +28,7 @@ 17 target/velocity.log UTF-8 - 1729994033 + 1723395513 From 213180092f57e2a93ca94cc40ebad9ee5d93ff92 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Sun, 27 Oct 2024 23:55:05 +0100 Subject: [PATCH 18/21] build(deps): update dependency org.eclipse.jdt:org.eclipse.jdt.core to v3.39.0 (#5977) * build(deps): update dependency org.eclipse.jdt:org.eclipse.jdt.core to v3.39.0 --------- Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Martin Wittlinger --- pom.xml | 2 +- .../test/java/fr/inria/controlflow/AllBranchesReturnTest.java | 2 +- .../fr/inria/controlflow/ForwardFlowBuilderVisitorTest.java | 2 +- src/test/java/spoon/test/api/NoClasspathTest.java | 2 ++ .../spoon/test/reference/ElasticsearchStackoverflowTest.java | 2 ++ 5 files changed, 7 insertions(+), 3 deletions(-) diff --git a/pom.xml b/pom.xml index fb40634eb3d..288effc0b21 100644 --- a/pom.xml +++ b/pom.xml @@ -34,7 +34,7 @@ org.eclipse.jdt org.eclipse.jdt.core - 3.38.0 + 3.39.0 org.eclipse.platform diff --git a/spoon-control-flow/src/test/java/fr/inria/controlflow/AllBranchesReturnTest.java b/spoon-control-flow/src/test/java/fr/inria/controlflow/AllBranchesReturnTest.java index ef1ea725f6b..04daa5eb769 100644 --- a/spoon-control-flow/src/test/java/fr/inria/controlflow/AllBranchesReturnTest.java +++ b/spoon-control-flow/src/test/java/fr/inria/controlflow/AllBranchesReturnTest.java @@ -121,7 +121,7 @@ public void testSegment(AbstractProcessor processor) throws Exception { // "nestedIfSomeNotReturning", false); Factory factory = new SpoonMetaFactory().buildNewFactory( - this.getClass().getResource("/control-flow").toURI().getPath(), 7); + this.getClass().getResource("/control-flow").toURI().getPath(), 11); ProcessingManager pm = new QueueProcessingManager(factory); pm.addProcessor(processor); pm.process(factory.getModel().getRootPackage()); diff --git a/spoon-control-flow/src/test/java/fr/inria/controlflow/ForwardFlowBuilderVisitorTest.java b/spoon-control-flow/src/test/java/fr/inria/controlflow/ForwardFlowBuilderVisitorTest.java index 9c94d18b7ce..57d1ee19a0e 100644 --- a/spoon-control-flow/src/test/java/fr/inria/controlflow/ForwardFlowBuilderVisitorTest.java +++ b/spoon-control-flow/src/test/java/fr/inria/controlflow/ForwardFlowBuilderVisitorTest.java @@ -46,7 +46,7 @@ public static ControlFlowGraph buildGraph(String folder, final String methodName throws Exception { final ControlFlowBuilder visitor = new ControlFlowBuilder(); - Factory factory = new SpoonMetaFactory().buildNewFactory(folder, 5); + Factory factory = new SpoonMetaFactory().buildNewFactory(folder, 11); ProcessingManager pm = new QueueProcessingManager(factory); pm.addProcessor(new AbstractProcessor() { @Override diff --git a/src/test/java/spoon/test/api/NoClasspathTest.java b/src/test/java/spoon/test/api/NoClasspathTest.java index daf0d98eef4..06974d0cc18 100644 --- a/src/test/java/spoon/test/api/NoClasspathTest.java +++ b/src/test/java/spoon/test/api/NoClasspathTest.java @@ -42,6 +42,7 @@ import spoon.support.visitor.SignaturePrinter; import spoon.test.api.testclasses.Bar; import spoon.testing.assertions.SpoonAssertions; +import spoon.testing.utils.GitHubIssue; import spoon.testing.utils.ModelTest; import static java.util.function.Predicate.not; @@ -209,6 +210,7 @@ public void testInheritanceInNoClassPathWithClasses() { assertTrue(field.getType().isSubtypeOf(myInterfaceReference)); } + @GitHubIssue(issueNumber = 5977, fixed = false) @ModelTest("src/test/resources/noclasspath/issue5591/DiamondConstructorCallTypeInference.java") void testJdtFactoryMethodsForDiamond(CtModel model) { // contract: Leftover methods from JDT's diamond constructor type inference are handled in diff --git a/src/test/java/spoon/test/reference/ElasticsearchStackoverflowTest.java b/src/test/java/spoon/test/reference/ElasticsearchStackoverflowTest.java index b57617c9f56..ad07a7120ab 100644 --- a/src/test/java/spoon/test/reference/ElasticsearchStackoverflowTest.java +++ b/src/test/java/spoon/test/reference/ElasticsearchStackoverflowTest.java @@ -28,6 +28,7 @@ import spoon.reflect.reference.CtTypeReference; import spoon.reflect.visitor.CtScanner; import spoon.reflect.visitor.filter.TypeFilter; +import spoon.testing.utils.GitHubIssue; import static org.junit.jupiter.api.Assertions.assertEquals; import static org.junit.jupiter.api.Assertions.assertFalse; @@ -45,6 +46,7 @@ public void visitCtExecutableReference( } } + @GitHubIssue(issueNumber = 5977, fixed = false) @Test public void testStackOverflow() { Launcher launcher = new Launcher(); From 5854e60dc18e78b1b15ccdb381f692a0e76dd86e Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Mon, 28 Oct 2024 03:06:50 +0000 Subject: [PATCH 19/21] build(deps): lock file maintenance (#6044) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- flake.lock | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/flake.lock b/flake.lock index d052ebff2c3..b03cf135bd9 100644 --- a/flake.lock +++ b/flake.lock @@ -2,11 +2,11 @@ "nodes": { "nixpkgs": { "locked": { - "lastModified": 1729256560, - "narHash": "sha256-/uilDXvCIEs3C9l73JTACm4quuHUsIHcns1c+cHUJwA=", + "lastModified": 1729880355, + "narHash": "sha256-RP+OQ6koQQLX5nw0NmcDrzvGL8HDLnyXt/jHhL1jwjM=", "owner": "NixOS", "repo": "nixpkgs", - "rev": "4c2fcb090b1f3e5b47eaa7bd33913b574a11e0a0", + "rev": "18536bf04cd71abd345f9579158841376fdd0c5a", "type": "github" }, "original": { From ddf0233952ab8e6478bbd39a034b17f3d6724777 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Mon, 28 Oct 2024 15:04:43 +0000 Subject: [PATCH 20/21] build(deps): update jetbrains/qodana-action action to v2024.2.6 (#6047) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- .github/workflows/qodana.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/qodana.yml b/.github/workflows/qodana.yml index e99e1d163f8..221313dc38a 100644 --- a/.github/workflows/qodana.yml +++ b/.github/workflows/qodana.yml @@ -18,7 +18,7 @@ jobs: with: fetch-depth: 0 - name: 'Qodana Scan' - uses: JetBrains/qodana-action@4f04143e8d52028fee27c2a219c8856035094962 # v2024.2.5 + uses: JetBrains/qodana-action@31d6f3309b31c566758e1314a3d9ef0dff75ecbd # v2024.2.6 with: args: --source-directory,./src/main/java , --fail-threshold, 0 post-pr-comment: "false" @@ -33,7 +33,7 @@ jobs: with: fetch-depth: 0 - name: 'Qodana Scan (spoon-javadoc)' - uses: JetBrains/qodana-action@4f04143e8d52028fee27c2a219c8856035094962 # v2024.2.5 + uses: JetBrains/qodana-action@31d6f3309b31c566758e1314a3d9ef0dff75ecbd # v2024.2.6 with: args: --source-directory,./spoon-javadoc/src/main/java , --fail-threshold, 0 post-pr-comment: "false" @@ -48,7 +48,7 @@ jobs: with: fetch-depth: 0 - name: 'Qodana Scan (spoon-control-flow)' - uses: JetBrains/qodana-action@4f04143e8d52028fee27c2a219c8856035094962 # v2024.2.5 + uses: JetBrains/qodana-action@31d6f3309b31c566758e1314a3d9ef0dff75ecbd # v2024.2.6 with: args: --source-directory,./spoon-control-flow/src/main/java , --fail-threshold, 0 post-pr-comment: "false" From 692c4d43fbfc6f07a60ee4d03fee72342bff8c4d Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Tue, 29 Oct 2024 03:20:36 +0000 Subject: [PATCH 21/21] build(deps): update dependency com.fasterxml.jackson.core:jackson-databind to v2.18.1 (#6050) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 288effc0b21..a7e79a98dc8 100644 --- a/pom.xml +++ b/pom.xml @@ -91,7 +91,7 @@ com.fasterxml.jackson.core jackson-databind - 2.18.0 + 2.18.1