[Git][clojure-team/trapperkeeper-metrics-clojure][upstream] New upstream version 1.5.0

[Jérôme Charaoui (@lavamind)]

Jérôme Charaoui pushed to branch upstream at Debian Clojure Maintainers / trapperkeeper-metrics-clojure


Commits:
263c73c8 by Jérôme Charaoui at 2022-10-21T08:26:50-04:00
New upstream version 1.5.0
- - - - -


5 changed files:

- + .github/workflows/snyk_merge.yaml
- .travis.yml
- CHANGELOG.md
- CODEOWNERS
- project.clj


Changes:

=====================================
.github/workflows/snyk_merge.yaml
=====================================
@@ -0,0 +1,29 @@
+---
+name: Snyk Clojure Merge
+
+on: push
+
+jobs:
+ snyk_clojure:
+   runs-on: ubuntu-latest
+   steps:
+    - name: Connect to Twingate
+      uses: twingate/github-action at v1
+      with:
+        service-key: ${{ secrets.TWINGATE_PUBLIC_REPO_KEY }}
+    - name: checkout the current head
+      uses: actions/checkout at v2
+      with:
+        fetch-depth: 1
+        persist-credentials: false
+    - name: Run Clojure Snyk Scan
+      id: scan
+      uses: puppetlabs/security-snyk-clojure-action at v2
+      with:
+        snykToken: ${{ secrets.SNYK_PE_TOKEN }}
+        snykOrg: 'puppet-enterprise'
+        snykProject: 'trapperkeeper-metrics'
+        snykPolicy: '.snyk'
+    - name: Check output
+      if: steps.scan.outputs.vulns != ''
+      run: echo "Vulnerabilities detected; ${{ steps.scan.outputs.vulns }}" && exit 1


=====================================
.travis.yml
=====================================
@@ -1,5 +1,5 @@
 language: clojure
-lein: 2.9.1
+lein: 2.9.10
 jobs:
   include:
     - stage: jdk8


=====================================
CHANGELOG.md
=====================================
@@ -1,3 +1,7 @@
+## 1.5.0
+
+* update clj-parent to 5.2.6 to allow use of bouncy-castle libs `18on` that replaced the `15on` naming 
+
 ## 1.4.3 (1.4.2 release failed, do not use)
 
 * Update project specification to work correctly in FIPS mode.


=====================================
CODEOWNERS
=====================================
@@ -1,4 +1 @@
-# This will cause the puppetserver-maintainers group to be assigned
-# review of any opened PRs against the branches containing this file.
-
-* @puppetlabs/puppetserver-maintainers
+* @puppetlabs/dumpling


=====================================
project.clj
=====================================
@@ -1,4 +1,4 @@
-(defproject puppetlabs/trapperkeeper-metrics "1.4.3"
+(defproject puppetlabs/trapperkeeper-metrics "1.5.0"
   :description "Trapperkeeper Metrics Service"
   :url "http://github.com/puppetlabs/trapperkeeper-metrics"
 
@@ -6,7 +6,7 @@
 
   :pedantic? :abort
 
-  :parent-project {:coords [puppetlabs/clj-parent "4.6.29"]
+  :parent-project {:coords [puppetlabs/clj-parent "5.2.6"]
                    :inherit [:managed-dependencies]}
 
   :dependencies [[org.clojure/clojure]
@@ -50,7 +50,7 @@
                         :resource-paths ["dev-resources"]}
 
              :dev [:defaults
-                   {:dependencies [[org.bouncycastle/bcpkix-jdk15on]]}]
+                   {:dependencies [[org.bouncycastle/bcpkix-jdk18on]]}]
 
              :fips [:defaults
                     {:dependencies [[org.bouncycastle/bcpkix-fips]
@@ -70,7 +70,7 @@
 
              ;; per https://github.com/technomancy/leiningen/issues/1907
              ;; the provided profile is necessary for lein jar / lein install
-             :provided {:dependencies [[org.bouncycastle/bcpkix-jdk15on]]
+             :provided {:dependencies [[org.bouncycastle/bcpkix-jdk18on]]
                         :resource-paths ["dev-resources"]}
 
              :testutils {:source-paths ^:replace ["test"]



View it on GitLab: https://salsa.debian.org/clojure-team/trapperkeeper-metrics-clojure/-/commit/263c73c8fb5343424382af060789a8a9ddd40cdb

-- 
View it on GitLab: https://salsa.debian.org/clojure-team/trapperkeeper-metrics-clojure/-/commit/263c73c8fb5343424382af060789a8a9ddd40cdb
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-java-commits/attachments/20221021/ff32c573/attachment.htm>