Skip to content

chore(deps): update dependency gradle to v6.9.2#554

Merged
ChristianMurphy merged 1 commit into
masterfrom
renovate/gradle-6.x
Dec 22, 2021
Merged

chore(deps): update dependency gradle to v6.9.2#554
ChristianMurphy merged 1 commit into
masterfrom
renovate/gradle-6.x

Conversation

@renovate

@renovate renovate Bot commented Dec 21, 2021

Copy link
Copy Markdown
Contributor

WhiteSource Renovate

This PR contains the following updates:

Package Update Change
gradle (source) patch 6.9.1 -> 6.9.2

Release Notes

gradle/gradle

v6.9.2

This is a patch release for Gradle 6.9, containing backported bugfixes in Gradle 7.2 to Gradle 6.x.

It fixes the following issues:

  • #​18163 Fix excludes for substituted dependencies
  • #​18164 POSIX shell scripts improvements
  • #​18697 Fix corrupted resolution result from replacement / capability conflict
  • #​19328 Mitigations for log4j vulnerability in Gradle builds
  • #​19372 Multiple transformed artifacts selected

We recommend users upgrade to 6.9.2 instead of 6.9.

Given the context of the Log4Shell vulnerability, make sure you take a look at our blog post on this topic.

Upgrade Instructions

Switch your build to use Gradle 6.9.2 by updating your wrapper:

./gradlew wrapper --gradle-version=6.9.2

See the Gradle 6.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading to Gradle 6.9.2.

Reporting Problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.


Configuration

📅 Schedule: At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, click this checkbox.

This PR has been generated by WhiteSource Renovate. View repository job log here.

@ChristianMurphy ChristianMurphy merged commit a5c6ac9 into master Dec 22, 2021
@ChristianMurphy ChristianMurphy deleted the renovate/gradle-6.x branch December 22, 2021 14:08
bjagg added a commit to bjagg/uPortal-start that referenced this pull request May 14, 2026
Problem: PR uPortal-Project#694's visual-resource-server smoke spec gates on no
/ResourceServingWebapp/ URLs being requested by uPortal core or any
of the deployed portlets. The pins were on versions predating both
the uPortal-side path swaps (uPortal-Project/uPortal#2983, in v5.17.8)
and the portlet-side overlay drops (SimpleContent uPortal-Project#554, Feedback uPortal-Project#112,
NewsReader uPortal-Project#438; in 3.4.3 / 1.3.2 / 5.1.5 respectively). CI's visual
smoke tests therefore stayed red until all five releases shipped
together.

Goal: pick up the Wave 1 portlet releases and the Wave 2 uPortal
release so PR uPortal-Project#694's CI exercises the full post-consolidation stack.

Changes:
- bump uPortalVersion 5.17.7 -> 5.17.8 (uPortal#2983: skin XML + JSP
  path swaps off /ResourceServingWebapp/; drop dead utility-lib
  webjar deps)
- bump simpleContentPortletVersion 3.4.2 -> 3.4.3 (uPortal-Project#554: CKEditor
  4.22.1 webjar; drop resource-server-content overlay)
- bump feedbackPortletVersion 1.3.1 -> 1.3.2 (uPortal-Project#112: drop overlay)
- bump newsReaderPortletVersion 5.1.4 -> 5.1.5 (uPortal-Project#438: native
  mini-template renderer replacing Handlebars 3.0.3; drop overlay)

Notes: validated locally against a fresh portalInit + tomcatStart with
the bumped pins. Five of six visual-resource-server tests pass (guest
welcome, admin home, student home, CKEditor 4 webjar instantiation,
uportal-links config). The news-portlet-renders-without-Handlebars
test was already failing in CI before this commit; not a regression
from the bumps. CalendarPortlet event-fetch is flaky in local
quickstart data; tracked separately.

Refs: uPortal-Project#694
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants