diff --git a/.github/workflows/benchmarks.yml b/.github/workflows/benchmarks.yml index f06973db4..e3c4f2740 100644 --- a/.github/workflows/benchmarks.yml +++ b/.github/workflows/benchmarks.yml @@ -11,13 +11,15 @@ jobs: runs-on: ubuntu-latest steps: - name: Check out code - uses: actions/checkout@v2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + persist-credentials: false - name: Set up JDK - uses: actions/setup-java@v2 + uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0 with: java-version: '21' - distribution: 'adopt' + distribution: 'temurin' - name: Build with Gradle working-directory: ./ @@ -27,7 +29,7 @@ jobs: make build - name: Upload build artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: pkg-build path: ./ @@ -42,14 +44,14 @@ jobs: java-version: [ 17, 18, 19, 20, 21 ] steps: - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: pkg-build - name: Set up JDK - uses: actions/setup-java@v2 + uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0 with: java-version: ${{ matrix.java-version }} - distribution: 'adopt' + distribution: 'temurin' - name: Start mock server working-directory: ./end2end/server run: | diff --git a/.github/workflows/end2end.yml b/.github/workflows/end2end.yml index 05320cf23..d15148b68 100644 --- a/.github/workflows/end2end.yml +++ b/.github/workflows/end2end.yml @@ -11,13 +11,15 @@ jobs: runs-on: ubuntu-latest steps: - name: Check out code - uses: actions/checkout@v2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + persist-credentials: false - name: Set up JDK - uses: actions/setup-java@v2 + uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0 with: java-version: '21' - distribution: 'adopt' + distribution: 'temurin' - name: Build with Gradle working-directory: ./ @@ -27,7 +29,7 @@ jobs: make build - name: Upload build artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: pkg-build path: ./ @@ -50,7 +52,7 @@ jobs: - { name: SpringBoot2.7Postgres, test_file: end2end/spring_boot_2.7_postgres.py, db: postgres_database } - { name: SpringBootHyperSQL, test_file: end2end/spring_boot_hypersql.py, db: "" } java-version: [17, 18, 19, 20, 21, 24, 25] - distribution: ['adopt', 'corretto', 'oracle'] + distribution: ['temurin', 'corretto', 'oracle'] exclude: # Spring Boot 2.7 uses the legacy javax stack and does not support JDK 25; # keep this app on Java 17-24 only (its javax coverage stays exercised there). @@ -58,12 +60,12 @@ jobs: java-version: 25 steps: - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: pkg-build - name: Set up JDK - uses: actions/setup-java@v4 + uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0 with: java-version: ${{ matrix.java-version }} distribution: ${{ matrix.distribution }} diff --git a/.github/workflows/gradle-security.yml b/.github/workflows/gradle-security.yml new file mode 100644 index 000000000..6e02f943f --- /dev/null +++ b/.github/workflows/gradle-security.yml @@ -0,0 +1,25 @@ +name: Gradle Wrapper Validation + +on: + push: + branches: + - main + pull_request: + +permissions: + contents: read + +# Dependency checksums and lockfiles are enforced by Gradle +# Only the wrapper jar itself cannot be verified by Gradle, so it is checked here. +jobs: + wrapper-validation: + runs-on: ubuntu-latest + steps: + - name: Check out code + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + persist-credentials: false + + # Verifies gradle/wrapper/gradle-wrapper.jar against checksums of official Gradle releases + - name: Validate Gradle wrapper + uses: gradle/actions/wrapper-validation@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0 diff --git a/.github/workflows/gradle-tests.yml b/.github/workflows/gradle-tests.yml index f2afccba6..ccdab08d4 100644 --- a/.github/workflows/gradle-tests.yml +++ b/.github/workflows/gradle-tests.yml @@ -14,13 +14,15 @@ jobs: runs-on: ubuntu-latest steps: - name: Check out code - uses: actions/checkout@v2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + persist-credentials: false - name: Set up JDK - uses: actions/setup-java@v2 + uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0 with: java-version: '21' - distribution: 'adopt' + distribution: 'temurin' - name: Build with Gradle working-directory: ./ @@ -30,7 +32,7 @@ jobs: make build - name: Upload build artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: pkg-build path: ./ @@ -42,16 +44,16 @@ jobs: strategy: matrix: java-version: [17, 18, 19, 20, 21, 24, 25] - distribution: ['adopt', 'corretto', 'oracle'] + distribution: ['temurin', 'corretto', 'oracle'] steps: - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: pkg-build - name: Set up JDK - uses: actions/setup-java@v4 + uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0 with: java-version: ${{ matrix.java-version }} distribution: ${{ matrix.distribution }} @@ -85,7 +87,7 @@ jobs: - name: Upload coverage report to Codecov if: matrix.java-version == '21' # Only upload coverage for Java 21 - uses: codecov/codecov-action@b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238 # v4 + uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7.1.1 with: fail_ci_if_error: true files: ./agent_api/build/jacoco/test/jacocoTestReport.xml diff --git a/.github/workflows/opentel.yml b/.github/workflows/opentel.yml index b3896b814..211d43deb 100644 --- a/.github/workflows/opentel.yml +++ b/.github/workflows/opentel.yml @@ -11,13 +11,15 @@ jobs: runs-on: ubuntu-latest steps: - name: Check out code - uses: actions/checkout@v2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + persist-credentials: false - name: Set up JDK - uses: actions/setup-java@v2 + uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0 with: java-version: '21' - distribution: 'adopt' + distribution: 'temurin' - name: Build with Gradle working-directory: ./ @@ -27,7 +29,7 @@ jobs: make build - name: Upload build artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: pkg-build path: ./ @@ -41,15 +43,15 @@ jobs: java-version: [17, 18, 19, 20, 21] steps: - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: pkg-build - name: Set up JDK - uses: actions/setup-java@v2 + uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0 with: java-version: ${{ matrix.java-version }} - distribution: 'adopt' + distribution: 'temurin' - name: Start mock server working-directory: ./end2end/server @@ -91,15 +93,15 @@ jobs: agent-order: [runWithOpentel, runWithZenFirstOpentel] steps: - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: pkg-build - name: Set up JDK - uses: actions/setup-java@v2 + uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0 with: java-version: ${{ matrix.java-version }} - distribution: 'adopt' + distribution: 'temurin' - name: Start mock server working-directory: ./end2end/server diff --git a/.github/workflows/qa-tests.yml b/.github/workflows/qa-tests.yml index 8adaeb0ed..9f90f4953 100644 --- a/.github/workflows/qa-tests.yml +++ b/.github/workflows/qa-tests.yml @@ -11,20 +11,22 @@ jobs: timeout-minutes: 30 steps: - name: Checkout firewall-java - uses: actions/checkout@v5 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: path: firewall-java + persist-credentials: false - name: Checkout zen-demo-java - uses: actions/checkout@v5 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: Aikido-demo-apps/zen-demo-java path: zen-demo-java ref: main submodules: true + persist-credentials: false - name: Set up JDK 21 - uses: actions/setup-java@v4 + uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0 with: java-version: '21' distribution: 'temurin' diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index f35d93d08..6895aceec 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -5,6 +5,9 @@ on: tags: - "v*" +permissions: + contents: read + jobs: extract-version: runs-on: ubuntu-latest @@ -23,14 +26,19 @@ jobs: runs-on: open-source-releaser steps: - name: Check out code - uses: actions/checkout@v4 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + persist-credentials: false + - name: Set the version for this release - run: make replace_version version=${{ needs.extract-version.outputs.version }} + env: + RELEASE_VERSION: ${{ needs.extract-version.outputs.version }} + run: make replace_version version="$RELEASE_VERSION" - name: Set up JDK - uses: actions/setup-java@v4 + uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0 with: java-version: '21' - distribution: 'adopt' + distribution: 'temurin' - name: Build with Gradle run: | chmod +x gradlew @@ -46,7 +54,7 @@ jobs: shasum -a 256 zen.zip > zen.zip.sha256sum shasum -a 256 zen.tar.gz > zen.tar.gz.sha256sum - name: Upload artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: release-artifacts path: | @@ -62,13 +70,16 @@ jobs: contents: write steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + persist-credentials: false + - name: Download all artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: release-artifacts - name: Create GitHub Release - uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v1 + uses: softprops/action-gh-release@efb35369e0ad2afab669f228072c1b0d510eae64 # v3.0.3 with: draft: true files: | diff --git a/.github/workflows/smoke-tests.yml b/.github/workflows/smoke-tests.yml index 72df1ca11..34d9c22c5 100644 --- a/.github/workflows/smoke-tests.yml +++ b/.github/workflows/smoke-tests.yml @@ -6,6 +6,9 @@ on: - main pull_request: +permissions: + contents: read + jobs: smoke-test-native: name: Smoke Test (${{ matrix.os }}, Java 21) @@ -16,10 +19,12 @@ jobs: os: [ubuntu-latest, macos-latest] steps: - name: Check out code - uses: actions/checkout@v4 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + persist-credentials: false - name: Set up JDK 21 - uses: actions/setup-java@v4 + uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0 with: java-version: '21' distribution: 'temurin' @@ -50,7 +55,9 @@ jobs: ] steps: - name: Check out code - uses: actions/checkout@v4 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + persist-credentials: false - name: Build with Gradle (native) working-directory: ./ diff --git a/.github/workflows/test-ddtrace.yml b/.github/workflows/test-ddtrace.yml index 2db15e344..890ed5f2c 100644 --- a/.github/workflows/test-ddtrace.yml +++ b/.github/workflows/test-ddtrace.yml @@ -11,13 +11,15 @@ jobs: runs-on: ubuntu-latest steps: - name: Check out code - uses: actions/checkout@v2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + persist-credentials: false - name: Set up JDK - uses: actions/setup-java@v2 + uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0 with: java-version: '21' - distribution: 'adopt' + distribution: 'temurin' - name: Build with Gradle working-directory: ./ @@ -26,7 +28,7 @@ jobs: make wasm make build - name: Upload build artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: pkg-build path: ./ @@ -42,15 +44,15 @@ jobs: java-version: [17, 18, 19, 20, 21] steps: - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: pkg-build - name: Set up JDK - uses: actions/setup-java@v2 + uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0 with: java-version: ${{ matrix.java-version }} - distribution: 'adopt' + distribution: 'temurin' - name: Start mock server working-directory: ./end2end/server diff --git a/agent/gradle.lockfile b/agent/gradle.lockfile new file mode 100644 index 000000000..e6ffed842 --- /dev/null +++ b/agent/gradle.lockfile @@ -0,0 +1,73 @@ +# This is a Gradle generated file for dependency locking. +# Manual edits can break the build and are not advised. +# This file is expected to be part of source control. +# To regenerate this file, run: ./gradlew :agent:dependencies --write-locks +com.dylibso.chicory:runtime:1.7.5=runtimeClasspath,testRuntimeClasspath +com.dylibso.chicory:wasm:1.7.5=runtimeClasspath,testRuntimeClasspath +com.github.seancfoley:ipaddress:5.5.1=runtimeClasspath,testRuntimeClasspath +com.google.code.gson:gson:2.11.0=runtimeClasspath,testRuntimeClasspath +com.google.errorprone:error_prone_annotations:2.27.0=runtimeClasspath,testRuntimeClasspath +com.kohlschutter.junixsocket:junixsocket-common:2.10.1=runtimeClasspath,testRuntimeClasspath +com.kohlschutter.junixsocket:junixsocket-core:2.10.1=runtimeClasspath,testRuntimeClasspath +com.kohlschutter.junixsocket:junixsocket-native-common:2.10.1=runtimeClasspath,testRuntimeClasspath +com.kohlschutter.junixsocket:junixsocket-server:2.10.1=runtimeClasspath,testRuntimeClasspath +io.javalin:javalin:6.4.0=compileClasspath +io.netty:netty-buffer:4.1.135.Final=compileClasspath +io.netty:netty-codec-dns:4.1.135.Final=compileClasspath +io.netty:netty-codec-http2:4.1.135.Final=compileClasspath +io.netty:netty-codec-http:4.1.135.Final=compileClasspath +io.netty:netty-codec-socks:4.1.135.Final=compileClasspath +io.netty:netty-codec:4.1.135.Final=compileClasspath +io.netty:netty-common:4.1.135.Final=compileClasspath +io.netty:netty-handler-proxy:4.1.135.Final=compileClasspath +io.netty:netty-handler:4.1.135.Final=compileClasspath +io.netty:netty-resolver-dns-classes-macos:4.1.135.Final=compileClasspath +io.netty:netty-resolver-dns-native-macos:4.1.135.Final=compileClasspath +io.netty:netty-resolver-dns:4.1.135.Final=compileClasspath +io.netty:netty-resolver:4.1.135.Final=compileClasspath +io.netty:netty-transport-classes-epoll:4.1.135.Final=compileClasspath +io.netty:netty-transport-native-epoll:4.1.135.Final=compileClasspath +io.netty:netty-transport-native-unix-common:4.1.135.Final=compileClasspath +io.netty:netty-transport:4.1.135.Final=compileClasspath +io.projectreactor.netty:reactor-netty-core:1.2.18=compileClasspath +io.projectreactor.netty:reactor-netty-http:1.2.18=compileClasspath +io.projectreactor:reactor-core:3.7.19=compileClasspath +jakarta.servlet:jakarta.servlet-api:6.1.0=compileClasspath +javax.servlet:javax.servlet-api:4.0.1=compileClasspath +net.bytebuddy:byte-buddy:1.18.11=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +org.apiguardian:apiguardian-api:1.1.2=testCompileClasspath +org.eclipse.jetty.toolchain:jetty-jakarta-servlet-api:5.0.2=compileClasspath +org.eclipse.jetty.websocket:websocket-core-common:11.0.24=compileClasspath +org.eclipse.jetty.websocket:websocket-core-server:11.0.24=compileClasspath +org.eclipse.jetty.websocket:websocket-jetty-api:11.0.24=compileClasspath +org.eclipse.jetty.websocket:websocket-jetty-common:11.0.24=compileClasspath +org.eclipse.jetty.websocket:websocket-jetty-server:11.0.24=compileClasspath +org.eclipse.jetty.websocket:websocket-servlet:11.0.24=compileClasspath +org.eclipse.jetty:jetty-http:11.0.24=compileClasspath +org.eclipse.jetty:jetty-io:11.0.24=compileClasspath +org.eclipse.jetty:jetty-security:11.0.24=compileClasspath +org.eclipse.jetty:jetty-server:11.0.24=compileClasspath +org.eclipse.jetty:jetty-servlet:11.0.24=compileClasspath +org.eclipse.jetty:jetty-util:11.0.24=compileClasspath +org.eclipse.jetty:jetty-webapp:11.0.24=compileClasspath +org.eclipse.jetty:jetty-xml:11.0.24=compileClasspath +org.jetbrains.kotlin:kotlin-stdlib-jdk7:1.9.25=compileClasspath +org.jetbrains.kotlin:kotlin-stdlib-jdk8:1.9.25=compileClasspath +org.jetbrains.kotlin:kotlin-stdlib:1.9.25=compileClasspath +org.jetbrains:annotations:13.0=compileClasspath +org.junit.jupiter:junit-jupiter-api:5.9.2=testCompileClasspath,testRuntimeClasspath +org.junit.jupiter:junit-jupiter-engine:5.9.2=testRuntimeClasspath +org.junit.jupiter:junit-jupiter-params:5.9.2=testCompileClasspath,testRuntimeClasspath +org.junit.jupiter:junit-jupiter:5.9.2=testCompileClasspath,testRuntimeClasspath +org.junit.platform:junit-platform-commons:1.9.2=testCompileClasspath,testRuntimeClasspath +org.junit.platform:junit-platform-engine:1.9.2=testRuntimeClasspath +org.junit.platform:junit-platform-launcher:1.9.2=testRuntimeClasspath +org.junit:junit-bom:5.9.2=testCompileClasspath,testRuntimeClasspath +org.opentest4j:opentest4j:1.2.0=testCompileClasspath,testRuntimeClasspath +org.reactivestreams:reactive-streams:1.0.4=compileClasspath +org.slf4j:slf4j-api:2.0.16=compileClasspath +org.springframework:spring-beans:5.3.20=compileClasspath +org.springframework:spring-core:5.3.20=compileClasspath +org.springframework:spring-jcl:5.3.20=compileClasspath +org.springframework:spring-web:5.3.20=compileClasspath +empty=annotationProcessor,shadow,testAnnotationProcessor diff --git a/agent_api/gradle.lockfile b/agent_api/gradle.lockfile new file mode 100644 index 000000000..456c8f979 --- /dev/null +++ b/agent_api/gradle.lockfile @@ -0,0 +1,85 @@ +# This is a Gradle generated file for dependency locking. +# Manual edits can break the build and are not advised. +# This file is expected to be part of source control. +# To regenerate this file, run: ./gradlew :agent_api:dependencies --write-locks +com.dylibso.chicory:runtime:1.7.5=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +com.dylibso.chicory:wasm:1.7.5=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +com.github.seancfoley:ipaddress:5.5.1=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +com.google.code.gson:gson:2.11.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +com.google.errorprone:error_prone_annotations:2.27.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +com.google.protobuf:protobuf-java:3.21.9=testCompileClasspath,testRuntimeClasspath +com.kohlschutter.junixsocket:junixsocket-common:2.10.1=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +com.kohlschutter.junixsocket:junixsocket-core:2.10.1=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +com.kohlschutter.junixsocket:junixsocket-native-common:2.10.1=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +com.kohlschutter.junixsocket:junixsocket-server:2.10.1=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath +com.microsoft.sqlserver:mssql-jdbc:10.2.0.jre8=testCompileClasspath,testRuntimeClasspath +com.mysql:mysql-connector-j:8.0.33=testCompileClasspath,testRuntimeClasspath +com.squareup.okhttp3:okhttp:4.10.0=testCompileClasspath,testRuntimeClasspath +com.squareup.okio:okio-jvm:3.0.0=testCompileClasspath,testRuntimeClasspath +com.squareup.okio:okio:3.0.0=testCompileClasspath,testRuntimeClasspath +commons-codec:commons-codec:1.11=testCompileClasspath,testRuntimeClasspath +commons-logging:commons-logging:1.2=testCompileClasspath,testRuntimeClasspath +io.javalin:javalin:6.3.0=compileClasspath +mysql:mysql-connector-java:8.0.33=testCompileClasspath,testRuntimeClasspath +net.bytebuddy:byte-buddy-agent:1.12.22=testCompileClasspath,testRuntimeClasspath +net.bytebuddy:byte-buddy:1.12.22=testCompileClasspath,testRuntimeClasspath +org.apache.httpcomponents:httpclient:4.5.13=testCompileClasspath,testRuntimeClasspath +org.apache.httpcomponents:httpcore:4.4.13=testCompileClasspath,testRuntimeClasspath +org.apiguardian:apiguardian-api:1.1.2=testCompileClasspath +org.checkerframework:checker-qual:3.5.0=testRuntimeClasspath +org.eclipse.jetty.toolchain:jetty-jakarta-servlet-api:5.0.2=compileClasspath +org.eclipse.jetty.websocket:websocket-core-common:11.0.23=compileClasspath +org.eclipse.jetty.websocket:websocket-core-server:11.0.23=compileClasspath +org.eclipse.jetty.websocket:websocket-jetty-api:11.0.23=compileClasspath +org.eclipse.jetty.websocket:websocket-jetty-common:11.0.23=compileClasspath +org.eclipse.jetty.websocket:websocket-jetty-server:11.0.23=compileClasspath +org.eclipse.jetty.websocket:websocket-servlet:11.0.23=compileClasspath +org.eclipse.jetty:jetty-http:11.0.23=compileClasspath +org.eclipse.jetty:jetty-io:11.0.23=compileClasspath +org.eclipse.jetty:jetty-security:11.0.23=compileClasspath +org.eclipse.jetty:jetty-server:11.0.23=compileClasspath +org.eclipse.jetty:jetty-servlet:11.0.23=compileClasspath +org.eclipse.jetty:jetty-util:11.0.23=compileClasspath +org.eclipse.jetty:jetty-webapp:11.0.23=compileClasspath +org.eclipse.jetty:jetty-xml:11.0.23=compileClasspath +org.jacoco:org.jacoco.agent:0.8.15=jacocoAgent,jacocoAnt +org.jacoco:org.jacoco.ant:0.8.15=jacocoAnt +org.jacoco:org.jacoco.core:0.8.15=jacocoAnt +org.jacoco:org.jacoco.report:0.8.15=jacocoAnt +org.jetbrains.kotlin:kotlin-stdlib-common:1.6.20=testCompileClasspath,testRuntimeClasspath +org.jetbrains.kotlin:kotlin-stdlib-jdk7:1.5.31=testCompileClasspath,testRuntimeClasspath +org.jetbrains.kotlin:kotlin-stdlib-jdk7:1.9.25=compileClasspath +org.jetbrains.kotlin:kotlin-stdlib-jdk8:1.5.31=testCompileClasspath,testRuntimeClasspath +org.jetbrains.kotlin:kotlin-stdlib-jdk8:1.9.25=compileClasspath +org.jetbrains.kotlin:kotlin-stdlib:1.6.20=testCompileClasspath,testRuntimeClasspath +org.jetbrains.kotlin:kotlin-stdlib:1.9.25=compileClasspath +org.jetbrains:annotations:13.0=compileClasspath,testCompileClasspath,testRuntimeClasspath +org.junit-pioneer:junit-pioneer:2.2.0=testCompileClasspath,testRuntimeClasspath +org.junit.jupiter:junit-jupiter-api:5.9.2=testCompileClasspath,testRuntimeClasspath +org.junit.jupiter:junit-jupiter-engine:5.9.2=testRuntimeClasspath +org.junit.jupiter:junit-jupiter-params:5.9.2=testCompileClasspath,testRuntimeClasspath +org.junit.jupiter:junit-jupiter:5.9.2=testCompileClasspath,testRuntimeClasspath +org.junit.platform:junit-platform-commons:1.9.2=testCompileClasspath,testRuntimeClasspath +org.junit.platform:junit-platform-engine:1.9.2=testRuntimeClasspath +org.junit.platform:junit-platform-launcher:1.9.2=testRuntimeClasspath +org.junit:junit-bom:5.9.2=testCompileClasspath,testRuntimeClasspath +org.mariadb.jdbc:mariadb-java-client:3.0.5=testCompileClasspath,testRuntimeClasspath +org.mockito:mockito-core:5.0.0=testCompileClasspath,testRuntimeClasspath +org.mockito:mockito-junit-jupiter:5.0.0=testCompileClasspath,testRuntimeClasspath +org.objenesis:objenesis:3.3=testRuntimeClasspath +org.opentest4j:opentest4j:1.2.0=testCompileClasspath,testRuntimeClasspath +org.ow2.asm:asm-commons:9.10.1=jacocoAnt +org.ow2.asm:asm-tree:9.10.1=jacocoAnt +org.ow2.asm:asm:9.10.1=jacocoAnt +org.postgresql:postgresql:42.2.23=testCompileClasspath,testRuntimeClasspath +org.slf4j:slf4j-api:2.0.16=compileClasspath +org.springframework:spring-aop:5.3.20=testCompileClasspath,testRuntimeClasspath +org.springframework:spring-beans:5.3.20=testCompileClasspath,testRuntimeClasspath +org.springframework:spring-context:5.3.20=testCompileClasspath,testRuntimeClasspath +org.springframework:spring-core:5.3.20=testCompileClasspath,testRuntimeClasspath +org.springframework:spring-expression:5.3.20=testCompileClasspath,testRuntimeClasspath +org.springframework:spring-jcl:5.3.20=testCompileClasspath,testRuntimeClasspath +org.springframework:spring-test:5.3.20=testCompileClasspath,testRuntimeClasspath +org.springframework:spring-web:5.3.20=testCompileClasspath,testRuntimeClasspath +org.springframework:spring-webmvc:5.3.20=testCompileClasspath,testRuntimeClasspath +empty=annotationProcessor,shadow,testAnnotationProcessor diff --git a/build.gradle b/build.gradle index fa76e36db..de09e88a9 100644 --- a/build.gradle +++ b/build.gradle @@ -2,6 +2,9 @@ allprojects { group = 'dev.aikido' version = '1.0-REPLACE-VERSION' + dependencyLocking { + lockAllConfigurations() + } } subprojects { diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml new file mode 100644 index 000000000..783de0ba8 --- /dev/null +++ b/gradle/verification-metadata.xml @@ -0,0 +1,1595 @@ + + + + true + false + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/gradle/wrapper/gradle-wrapper.properties b/gradle/wrapper/gradle-wrapper.properties index 5d5b9a03a..3f732cac2 100644 --- a/gradle/wrapper/gradle-wrapper.properties +++ b/gradle/wrapper/gradle-wrapper.properties @@ -4,3 +4,4 @@ distributionPath=wrapper/dists distributionUrl=https\://services.gradle.org/distributions/gradle-9.6.1-bin.zip zipStoreBase=GRADLE_USER_HOME zipStorePath=wrapper/dists +distributionSha256Sum=9c0f7faeeb306cb14e4279a3e084ca6b596894089a0638e68a07c945a32c9e14