Skip to content

SK-2871: Upgrade and prune Java dependencies#340

Open
Devesh-Skyflow wants to merge 1 commit into
release/26.6.25from
devesh/sk-2871-fix-outdated-dependencies
Open

SK-2871: Upgrade and prune Java dependencies#340
Devesh-Skyflow wants to merge 1 commit into
release/26.6.25from
devesh/sk-2871-fix-outdated-dependencies

Conversation

@Devesh-Skyflow

@Devesh-Skyflow Devesh-Skyflow commented Jun 22, 2026

Copy link
Copy Markdown
Collaborator
  • Bump jackson-datatype-jdk8/jsr310 2.17.2 -> 2.18.6 (align with jackson-databind)
  • Bump dotenv-java 2.2.0 -> 3.2.0
  • Migrate commons-codec Base64 -> java.util.Base64 (Token, Utils); drop commons-codec
  • Remove unused compile-scoped deps: jsr305, gson-fire, logging-interceptor, jaxb-api, jakarta.annotation-api, and their orphaned version properties

Verified: mvn clean test compiles clean; the 5 remaining failures are pre-existing env-dependent tests (require local .env/credentials) and also fail on clean HEAD.

- Bump jackson-datatype-jdk8/jsr310 2.17.2 -> 2.18.6 (align with jackson-databind)
- Bump dotenv-java 2.2.0 -> 3.2.0
- Migrate commons-codec Base64 -> java.util.Base64 (Token, Utils); drop commons-codec
- Remove unused compile-scoped deps: jsr305, gson-fire, logging-interceptor,
  jaxb-api, jakarta.annotation-api, and their orphaned version properties

Verified: mvn clean test compiles clean; the 5 remaining failures are
pre-existing env-dependent tests (require local .env/credentials) and also
fail on clean HEAD.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@github-actions

Copy link
Copy Markdown

Gitleaks Findings: No secrets detected. Safe to proceed!

@github-actions

Copy link
Copy Markdown

Semgrep Findings: Issues with Error level severity are found (Error is Highest severity in Semgrep), Please resolve the issues before merging.

@Devesh-Skyflow Devesh-Skyflow changed the base branch from main to release/26.6.25 June 25, 2026 03:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant