Merge branch 'master' of https://github.com/Alfresco/alfresco-sdk into fix/PRODSEC-9642-commons-io-vulnerability

[APPS-3094] remove 70 tests (#692 )
[PRODSEC-9642] fix commons-io vulnerability
2026-09-16 18:13:23 +00:00 · 2024-11-06 15:31:58 +05:30 · 2024-11-06 15:17:01 +05:30 · 2024-11-04 10:37:37 +05:30 · 2024-10-23 13:11:15 +05:30 · 2024-09-24 17:41:59 +02:00
8 changed files with 33 additions and 63 deletions
@@ -20,13 +20,12 @@ env:
  MAVEN_PASSWORD: ${{ secrets.NEXUS_PASSWORD }}
  MAVEN_CENTRAL_USERNAME: ${{ secrets.OSS_SONATYPE_USERNAME }}
  MAVEN_CENTRAL_PASSWORD: ${{ secrets.OSS_SONATYPE_PASSWORD }}
-  MAVEN_CLI_OPTS: "-B -q -e -fae -V -DinstallAtEnd=true -U"

 jobs:
  pre_commit:
    runs-on: ubuntu-latest
    steps:
-      - uses: Alfresco/alfresco-build-tools/.github/actions/pre-commit@v1.35.0
+      - uses: Alfresco/alfresco-build-tools/.github/actions/pre-commit@v7.0.0

  veracode_sca:
    name: "Veracode - Source Clear Scan (SCA)"
@@ -35,12 +34,12 @@ jobs:
      github.ref_name == 'master' ||
      github.event_name == 'pull_request'
    steps:
-      - uses: actions/checkout@v3
-      - uses: Alfresco/alfresco-build-tools/.github/actions/get-build-info@v1.34.0
-      - uses: Alfresco/alfresco-build-tools/.github/actions/setup-java-build@v1.34.0
+      - uses: actions/checkout@v4
+      - uses: Alfresco/alfresco-build-tools/.github/actions/get-build-info@v7.0.0
+      - uses: Alfresco/alfresco-build-tools/.github/actions/setup-java-build@v7.0.0
      - name: "Clean-up SNAPSHOT artifacts"
        run: find "${HOME}/.m2/repository/" -type d -name "*-SNAPSHOT*" | xargs -r -l rm -rf
-      - uses: Alfresco/alfresco-build-tools/.github/actions/veracode@v1.34.0
+      - uses: Alfresco/alfresco-build-tools/.github/actions/veracode@v7.0.0
        continue-on-error: true
        with:
          srcclr-api-token: ${{ secrets.SRCCLR_API_TOKEN }}
@@ -50,9 +49,12 @@ jobs:
    runs-on: ubuntu-latest
    needs: [pre_commit]
    if: "!contains(github.event.head_commit.message, '[skip tests]')"
+    env:
+      MAVEN_CLI_OPTS: >
+        -B -q -e -fae -V -DinstallAtEnd=true -U
    steps:
-      - uses: actions/checkout@v3
-      - uses: Alfresco/alfresco-build-tools/.github/actions/setup-java-build@v1.35.0
+      - uses: actions/checkout@v4
+      - uses: Alfresco/alfresco-build-tools/.github/actions/setup-java-build@v7.0.0
      - name: "Build"
        run: mvn install -DskipTests=true -Dmaven.javadoc.skip=true -B -V
      - name: "Verify"
@@ -125,25 +127,19 @@ jobs:
          - name: "7.1 Community"
            java-version: 11
            suite: -Pcommunity-71-tests
-          - name: "7.0 Enterprise"
-            java-version: 11
-            suite: -Penterprise-70-tests
-          - name: "7.0 Community"
-            java-version: 11
-            suite: -Pcommunity-70-tests
    steps:
-      - uses: actions/checkout@v3
-      - uses: Alfresco/alfresco-build-tools/.github/actions/get-build-info@v1.35.0
-      - uses: Alfresco/alfresco-build-tools/.github/actions/setup-java-build@v1.35.0
+      - uses: actions/checkout@v4
+      - uses: Alfresco/alfresco-build-tools/.github/actions/get-build-info@v7.0.0
+      - uses: Alfresco/alfresco-build-tools/.github/actions/setup-java-build@v7.0.0
        with:
          java-version: ${{ matrix.java-version }}
      - name: "Login to Docker Hub"
-        uses: docker/login-action@v2.1.0
+        uses: docker/login-action@v3
        with:
          username: ${{ secrets.DOCKER_USERNAME }}
          password: ${{ secrets.DOCKER_PASSWORD }}
      - name: "Login to Quay.io"
-        uses: docker/login-action@v2.1.0
+        uses: docker/login-action@v3
        with:
          registry: quay.io
          username: ${{ secrets.QUAY_USERNAME }}
@@ -156,12 +152,13 @@ jobs:
    runs-on: ubuntu-latest
    needs: [tests]
    if: >
-      !(failure() || cancelled()) &&
-      github.event_name != 'pull_request'
+      contains(github.event.head_commit.message, '[publish]')
    steps:
-      - uses: actions/checkout@v3
-      - uses: Alfresco/alfresco-build-tools/.github/actions/setup-java-build@v1.35.0
+      - uses: actions/checkout@v4
+      - uses: Alfresco/alfresco-build-tools/.github/actions/get-build-info@v7.0.0
+      - uses: Alfresco/alfresco-build-tools/.github/actions/setup-java-build@v7.0.0
      - name: "Build"
        run: mvn install -DskipTests=true -Dmaven.javadoc.skip=true -B -V
      - name: "Publish"
-        run: mvn $MAVEN_CLI_OPTS deploy -DskipTests
+        timeout-minutes: ${{ fromJSON(env.GITHUB_ACTIONS_DEPLOY_TIMEOUT) }}
+        run: mvn deploy $MAVEN_CLI_OPTS -DskipTests
@@ -11,7 +11,7 @@
  <parent>
    <groupId>org.alfresco.maven</groupId>
    <artifactId>alfresco-sdk-aggregator</artifactId>
-    <version>4.9.0</version>
+    <version>5.0.0-SNAPSHOT</version>
    <relativePath>../../pom.xml</relativePath>
  </parent>

@@ -12,7 +12,7 @@
  <parent>
    <groupId>org.alfresco.maven</groupId>
    <artifactId>alfresco-sdk-aggregator</artifactId>
-    <version>4.9.0</version>
+    <version>5.0.0-SNAPSHOT</version>
    <relativePath>../../pom.xml</relativePath>
  </parent>

@@ -14,7 +14,7 @@
    <parent>
        <groupId>org.alfresco.maven</groupId>
        <artifactId>alfresco-sdk-aggregator</artifactId>
-        <version>4.9.0</version>
+        <version>5.0.0-SNAPSHOT</version>
        <relativePath>../../pom.xml</relativePath>
    </parent>

@@ -17,7 +17,7 @@
    <parent>
        <groupId>org.alfresco.maven</groupId>
        <artifactId>alfresco-sdk-aggregator</artifactId>
-        <version>4.9.0</version>
+        <version>5.0.0-SNAPSHOT</version>
        <relativePath>../../pom.xml</relativePath>
    </parent>

@@ -10,7 +10,7 @@
    <parent>
        <groupId>org.alfresco.maven</groupId>
        <artifactId>alfresco-sdk-aggregator</artifactId>
-        <version>4.9.0</version>
+        <version>5.0.0-SNAPSHOT</version>
        <relativePath>../../pom.xml</relativePath>
    </parent>

@@ -38,7 +38,6 @@
        <dependency>
            <groupId>org.springframework</groupId>
            <artifactId>spring-context</artifactId>
-            <version>5.3.37</version>
        </dependency>

        <!-- Access to JUnit runner classes -->
@@ -8,7 +8,7 @@
    <parent>
        <groupId>org.alfresco.maven</groupId>
        <artifactId>alfresco-sdk-aggregator</artifactId>
-        <version>4.9.0</version>
+        <version>5.0.0-SNAPSHOT</version>
        <relativePath>../../pom.xml</relativePath>
    </parent>

@@ -122,7 +122,7 @@
        <dependency>
            <groupId>commons-io</groupId>
            <artifactId>commons-io</artifactId>
-            <version>2.11.0</version>
+            <version>2.17.0</version>
        </dependency>
        <dependency>
            <groupId>org.alfresco</groupId>
@@ -3,7 +3,7 @@
    <modelVersion>4.0.0</modelVersion>
    <groupId>org.alfresco.maven</groupId>
    <artifactId>alfresco-sdk-aggregator</artifactId>
-    <version>4.9.0</version>
+    <version>5.0.0-SNAPSHOT</version>
    <name>Alfresco SDK</name>
    <description>This aggregator Project builds all modules required for the Alfresco SDK</description>
    <packaging>pom</packaging>
@@ -56,9 +56,9 @@
        <alfresco.sdk.tests.exclude>*/*-enterprise*/*</alfresco.sdk.tests.exclude>

        <alfresco.bomDependency.artifactId>acs-community-packaging</alfresco.bomDependency.artifactId>
-        <alfresco.platform.version>23.3.0</alfresco.platform.version>
+        <alfresco.platform.version>23.4.0-A12</alfresco.platform.version>
        <alfresco.platform.docker.user>alfresco</alfresco.platform.docker.user>
-        <alfresco.share.docker.version>23.3.0</alfresco.share.docker.version>
+        <alfresco.share.docker.version>23.4.0-A12</alfresco.share.docker.version>
        <!--
             The following value is now obtained by looking at the
             - alfresco-community-share.version (eg. https://github.com/Alfresco/acs-community-packaging/blob/23.2.1/pom.xml#L17)
@@ -94,32 +94,6 @@
            </distributionManagement>
        </profile>

-        <!-- 7.0 -->
-        <profile>
-            <id>community-70-tests</id>
-            <properties>
-                <alfresco.bomDependency.artifactId>acs-community-packaging</alfresco.bomDependency.artifactId>
-                <alfresco.platform.version>7.0.1-A7</alfresco.platform.version>
-                <alfresco.share.docker.version>7.0.1.3</alfresco.share.docker.version>
-                <alfresco.share.version>7.0.1.3</alfresco.share.version>
-                <alfresco.platform.docker.image>alfresco/alfresco-content-repository-community</alfresco.platform.docker.image>
-                <alfresco.share.docker.image>alfresco/alfresco-share</alfresco.share.docker.image>
-                <alfresco.platform.docker.user>alfresco</alfresco.platform.docker.user>
-            </properties>
-        </profile>
-        <profile>
-            <id>enterprise-70-tests</id>
-            <properties>
-                <alfresco.bomDependency.artifactId>acs-packaging</alfresco.bomDependency.artifactId>
-                <alfresco.platform.version>7.0.1.7</alfresco.platform.version>
-                <alfresco.share.docker.version>7.0.1.3</alfresco.share.docker.version>
-                <alfresco.share.version>7.0.1.3</alfresco.share.version>
-                <alfresco.platform.docker.image>quay.io/alfresco/alfresco-content-repository</alfresco.platform.docker.image>
-                <alfresco.share.docker.image>quay.io/alfresco/alfresco-share</alfresco.share.docker.image>
-                <alfresco.platform.docker.user>alfresco</alfresco.platform.docker.user>
-            </properties>
-        </profile>
-
        <!-- 7.1 -->
        <profile>
            <id>community-71-tests</id>
@@ -522,8 +496,8 @@

    <distributionManagement>
        <repository>
-            <id>central-releases-staging</id>
-            <url>https://oss.sonatype.org/service/local/staging/deploy/maven2</url>
+            <id>alfresco-public</id>
+            <url>https://artifacts.alfresco.com/nexus/content/groups/public</url>
        </repository>
        <snapshotRepository>
            <id>alfresco-public-snapshots</id>
Author	SHA1	Message	Date
Manish Kumar	218f0f22cf	Merge branch 'master' of https://github.com/Alfresco/alfresco-sdk into fix/PRODSEC-9642-commons-io-vulnerability	2024-11-06 15:31:58 +05:30
Manish Kumar	0985d8b36d	[APPS-3094] remove 70 tests (#692 )	2024-11-06 15:17:01 +05:30
Manish Kumar	27f5f30e34	[PRODSEC-9642] fix commons-io vulnerability	2024-11-04 10:37:37 +05:30
purusothaman-mm	ac09ab3386	[APPS-3043] Upgrade to spring 6.1 (#688 ) * [APPS-3043] Upgrade to spring 6.1 * [APPS-3043] Upgrade to spring 6.1	2024-10-23 13:11:15 +05:30
Aleksandra Onych	7de8c85c0a	[ACS-8676] bump GH actions to the latest version (#686 )	2024-09-24 17:41:59 +02:00
Suneet Gupta	94a085d2bc	[APPS-2991] Prepared for next development iteration (#684 )	2024-09-02 17:05:17 +05:30
SathishK-TandSathish Kumar	db15d4366b	[APPS-2991] Releasing Alfresco SDK 4.9.0 (#683 ) Co-authored-by: Sathish Kumar <ST28@ford.com>	2024-09-02 16:24:48 +05:30