Repository navigation
build: bump org.jetbrains.kotlin:kotlin-gradle-plugin in / - #1138
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
OkTest Summary❌ Failed for Java SDK PR #1138. SDK merge ( |
Castiron custom codeEvaluated main: ✅ No new custom-code files detected. 113 mixed files remain; 0 existing customizations changed. Compared 113 existing customizations unchanged
73 more in the full report. A changed generated baseline means this report cannot reliably identify which handwritten lines changed. Inspect the custom-code diffDownload the exact patch produced by this run (requires repository access): gh run download 38795599427 --repo openai/openai-java \
--name castiron-custom-code-38795599427-1 --dir /tmp/castiron-custom-code-38795599427-1
git apply --stat /tmp/castiron-custom-code-38795599427-1/custom-code.patch
cat /tmp/castiron-custom-code-38795599427-1/custom-code.patchOr reproduce it from an SDK checkout containing the vendored reporter: git fetch --no-tags origin 0b3dcaaad10b6d303956e989f6a980de2bead5af 68486a4e330e5045950dc7e1fbfa2678c5e856de
python3 scripts/castiron/custom_code_report.py report \
--base 0b3dcaaad10b6d303956e989f6a980de2bead5af \
--head 68486a4e330e5045950dc7e1fbfa2678c5e856de --fetch --require-head-hash --public \
--out /tmp/castiron-custom-code-68486a4e330e
cat /tmp/castiron-custom-code-68486a4e330e/custom-code.patchThis is the current full custom patch for mixed files, not an attribution of only the handwritten lines changed by this PR. |
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: ac89cc338a
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
|
|
||
| dependencies { | ||
| implementation("org.jetbrains.kotlin:kotlin-gradle-plugin:2.2.21") | ||
| implementation("org.jetbrains.kotlin:kotlin-gradle-plugin:2.4.20") |
There was a problem hiding this comment.
The kotlin("jvm") plugin declaration on line 3 remains at 2.2.21, so configuring and compiling buildSrc still loads the vulnerable Kotlin Gradle plugin despite the implementation dependency being updated. The repository's security model explicitly identifies 2.4.20 as the stable remediation and requires both declarations in buildSrc to be upgraded (docs/architecture/security-model.md:119-126); update the plugin declaration together with this dependency.
Useful? React with 👍 / 👎.
Bumps [org.jetbrains.kotlin:kotlin-gradle-plugin](https://github.com/JetBrains/kotlin) in `/` from 2.2.21 to 2.4.20. Updates `org.jetbrains.kotlin:kotlin-gradle-plugin` from 2.2.21 to 2.4.20 - [Release notes](https://github.com/JetBrains/kotlin/releases) - [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md) - [Commits](JetBrains/kotlin@v2.2.21...v2.4.20) --- updated-dependencies: - dependency-name: org.jetbrains.kotlin:kotlin-gradle-plugin dependency-version: 2.4.20 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: sdk-dependencies/org.jetbrains.kotlin:kotlin-gradle-plugin ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
changed the title
ac89cc3 to
68486a4
Compare
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
Bumps org.jetbrains.kotlin:kotlin-gradle-plugin in
/from 2.2.21 to 2.4.20.Updates
org.jetbrains.kotlin:kotlin-gradle-pluginfrom 2.2.21 to 2.4.20Release notes
Sourced from org.jetbrains.kotlin:kotlin-gradle-plugin's releases.
... (truncated)
Changelog
Sourced from org.jetbrains.kotlin:kotlin-gradle-plugin's changelog.
... (truncated)
Commits
890ac1dAdd Changelog for 2.4.20-RC38860aed🍒 [FIR] Fix suspend conversion when expected type is nullable (#7769)ab5bcd9Edit ChangeLog for 2.4.20-RC29464edcAdd ChangeLog for 2.4.20-RC20261e43Cherry-pick "FixasBodyAndResultVarcall in `visitInlinedLambdaInComposable...0763513[box-tests] Workaround for klib compatibility tests (#7626)045aec6[Wasm] Append scripts from webpack.config.d in the end of the file (#7615)cd7173b🍒 [2.4.20] [K/JS] Keep associated obj annotation only if getInstance survives...d36a2ffCastsOptimizationPass: break aliases cycles (#7578)8664983[CLI] Restore custom IC search scope creation