From c92508d569ec977942247eb75321d7ad1fe1d202 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Mon, 13 Apr 2026 15:46:39 +0000 Subject: [PATCH 1/7] fix(deps): update dependencies --- .github/workflows/release.yaml | 14 +++++++------- .github/workflows/snapshot.yaml | 16 ++++++++-------- .github/workflows/test.yaml | 4 ++-- gradle/wrapper/gradle-wrapper.properties | 2 +- model/build.gradle.kts | 6 +++--- settings.gradle.kts | 2 +- 6 files changed, 22 insertions(+), 22 deletions(-) diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 0427bc8..259b292 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -14,16 +14,16 @@ jobs: outputs: release-version: ${{ steps.version-step.outputs.version }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 - name: Setup Java - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: distribution: 'temurin' java-version: ${{ env.JAVA_VERSION }} - name: Setup Gradle - uses: gradle/actions/setup-gradle@v3 + uses: gradle/actions/setup-gradle@v6 - name: Get DDI-Lifecycle lib version id: version-step @@ -55,10 +55,10 @@ jobs: needs: check-version runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 - name: Setup Java - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: distribution: 'temurin' java-version: ${{ env.JAVA_VERSION }} @@ -86,10 +86,10 @@ jobs: needs: [check-version, publish] runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 - name: Create GitHub release - uses: softprops/action-gh-release@v1 + uses: softprops/action-gh-release@v3 with: tag_name: ${{ needs.check-version.outputs.release-version }} target_commitish: ${{ github.head_ref || github.ref }} diff --git a/.github/workflows/snapshot.yaml b/.github/workflows/snapshot.yaml index ae999c8..0c0ed9d 100644 --- a/.github/workflows/snapshot.yaml +++ b/.github/workflows/snapshot.yaml @@ -15,10 +15,10 @@ jobs: outputs: snapshot-version: ${{ steps.version-step.outputs.version }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 - name: Setup Java - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: distribution: 'temurin' java-version: ${{ env.JAVA_VERSION }} @@ -58,16 +58,16 @@ jobs: needs: check-version runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 - name: Setup Java - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: distribution: 'temurin' java-version: ${{ env.JAVA_VERSION }} - name: Setup Gradle - uses: gradle/actions/setup-gradle@v3 + uses: gradle/actions/setup-gradle@v6 - name: Publish DDI Lifecycle lib on Maven Central run: | @@ -80,7 +80,7 @@ jobs: needs: [check-version, publish-snapshot] runs-on: ubuntu-latest steps: - - uses: actions/github-script@v7 + - uses: actions/github-script@v9 with: script: | github.rest.issues.createComment({ @@ -95,7 +95,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Create tag - uses: actions/github-script@v7 + uses: actions/github-script@v9 with: script: | github.rest.git.createRef({ @@ -108,7 +108,7 @@ jobs: remove-publish-label: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 - uses: actions-ecosystem/action-remove-labels@v1 with: labels: 'publish-snapshot' diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml index aece19b..91e86e2 100644 --- a/.github/workflows/test.yaml +++ b/.github/workflows/test.yaml @@ -16,10 +16,10 @@ jobs: if: ${{ (github.event.pull_request.draft == false) && !contains(github.event.pull_request.labels.*.name, 'publish-snapshot') }} runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 - name: Setup Java - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: distribution: 'temurin' java-version: ${{ env.JAVA_VERSION }} diff --git a/gradle/wrapper/gradle-wrapper.properties b/gradle/wrapper/gradle-wrapper.properties index aaaabb3..c61a118 100644 --- a/gradle/wrapper/gradle-wrapper.properties +++ b/gradle/wrapper/gradle-wrapper.properties @@ -1,6 +1,6 @@ distributionBase=GRADLE_USER_HOME distributionPath=wrapper/dists -distributionUrl=https\://services.gradle.org/distributions/gradle-8.14.4-bin.zip +distributionUrl=https\://services.gradle.org/distributions/gradle-9.4.1-bin.zip networkTimeout=10000 validateDistributionUrl=true zipStoreBase=GRADLE_USER_HOME diff --git a/model/build.gradle.kts b/model/build.gradle.kts index 2519f3e..f59da03 100644 --- a/model/build.gradle.kts +++ b/model/build.gradle.kts @@ -30,11 +30,11 @@ dependencies { // This dependency is used internally, and not exposed to consumers on their own compile classpath. implementation("org.apache.logging.log4j:log4j-core:2.25.4") // - implementation("org.springframework:spring-beans:6.2.17") + implementation("org.springframework:spring-beans:7.0.6") // Use JUnit Jupiter for testing. - testImplementation("org.junit.jupiter:junit-jupiter:5.14.3") - testRuntimeOnly("org.junit.platform:junit-platform-launcher:1.14.3") + testImplementation("org.junit.jupiter:junit-jupiter:6.0.3") + testRuntimeOnly("org.junit.platform:junit-platform-launcher:6.0.3") // XMLUnit testImplementation("org.xmlunit:xmlunit-assertj3:2.11.0") } diff --git a/settings.gradle.kts b/settings.gradle.kts index 89eacae..87f8631 100644 --- a/settings.gradle.kts +++ b/settings.gradle.kts @@ -1,6 +1,6 @@ plugins { // Apply the foojay-resolver plugin to allow automatic download of JDKs - id("org.gradle.toolchains.foojay-resolver-convention") version "0.10.0" + id("org.gradle.toolchains.foojay-resolver-convention") version "1.0.0" } rootProject.name = "DDI-Lifecycle-Java" From 0b3c7ff0be20274dd49599c8b2be15c237af84e0 Mon Sep 17 00:00:00 2001 From: nsenave Date: Mon, 13 Apr 2026 18:18:36 +0200 Subject: [PATCH 2/7] build: java 17 to 21 --- model/build.gradle.kts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/model/build.gradle.kts b/model/build.gradle.kts index f59da03..2d2a844 100644 --- a/model/build.gradle.kts +++ b/model/build.gradle.kts @@ -8,7 +8,7 @@ plugins { java { // Apply a specific Java toolchain to ease working on different environments. toolchain { - languageVersion.set(JavaLanguageVersion.of(17)) + languageVersion.set(JavaLanguageVersion.of(21)) } // Generate javadoc and sources jar for maven central publishing withJavadocJar() From 8c9da66152b78f451e3c2d334df464031833e161 Mon Sep 17 00:00:00 2001 From: nsenave Date: Mon, 13 Apr 2026 18:46:49 +0200 Subject: [PATCH 3/7] fix: upgrade dependencies --- model/build.gradle.kts | 22 +++++++++++++++++----- 1 file changed, 17 insertions(+), 5 deletions(-) diff --git a/model/build.gradle.kts b/model/build.gradle.kts index 2d2a844..f594590 100644 --- a/model/build.gradle.kts +++ b/model/build.gradle.kts @@ -24,19 +24,31 @@ repositories { mavenCentral() } +val lo4jVersion = "2.25.4" +val springVersion = "7.0.6" +val junitVersion = "6.0.3" +val xmlUnitVersion = "2.11.0" +val assertJVersion = "3.27.7" + dependencies { // This dependency is exported to consumers, that is to say found on their compile classpath. api("org.apache.xmlbeans:xmlbeans:5.3.0") // This dependency is used internally, and not exposed to consumers on their own compile classpath. - implementation("org.apache.logging.log4j:log4j-core:2.25.4") + implementation("org.apache.logging.log4j:log4j-core:$lo4jVersion") // - implementation("org.springframework:spring-beans:7.0.6") + implementation("org.springframework:spring-beans:$springVersion") // Use JUnit Jupiter for testing. - testImplementation("org.junit.jupiter:junit-jupiter:6.0.3") - testRuntimeOnly("org.junit.platform:junit-platform-launcher:6.0.3") + testImplementation("org.junit.jupiter:junit-jupiter:$junitVersion") + testRuntimeOnly("org.junit.platform:junit-platform-launcher:$junitVersion") // XMLUnit - testImplementation("org.xmlunit:xmlunit-assertj3:2.11.0") + testImplementation("org.xmlunit:xmlunit-assertj3:$xmlUnitVersion") + + constraints { + testImplementation("org.assertj:assertj-core:$assertJVersion") { + because("Temporary fix for CVE in the assertj-core imported by xmlunit-assertj3.") + } + } } sourceSets { From 0471cd9c43631dd792a5a312507b9b1e1210085e Mon Sep 17 00:00:00 2001 From: nsenave Date: Mon, 13 Apr 2026 18:51:07 +0200 Subject: [PATCH 4/7] refactor: printVersion task metadata --- build.gradle.kts | 2 ++ 1 file changed, 2 insertions(+) diff --git a/build.gradle.kts b/build.gradle.kts index e3888e3..e40e039 100644 --- a/build.gradle.kts +++ b/build.gradle.kts @@ -8,6 +8,8 @@ allprojects { } tasks.register("printVersion") { + description = "Prints the project version in console." + group = JavaBasePlugin.BUILD_TASK_NAME doLast { println(project.version) } From 09c66efb1a0ab9a121b463714ca18434ad938e35 Mon Sep 17 00:00:00 2001 From: nsenave Date: Mon, 13 Apr 2026 18:57:49 +0200 Subject: [PATCH 5/7] chore: bump version --- build.gradle.kts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/build.gradle.kts b/build.gradle.kts index e40e039..5b3ae88 100644 --- a/build.gradle.kts +++ b/build.gradle.kts @@ -4,7 +4,7 @@ plugins { allprojects { group = "fr.insee.ddi" - version = "1.1.1" + version = "2.0.0" } tasks.register("printVersion") { From 3a1b7263681b9e5a384145989496a974f5a25003 Mon Sep 17 00:00:00 2001 From: nsenave Date: Mon, 13 Apr 2026 18:58:57 +0200 Subject: [PATCH 6/7] ci: java 21 --- .github/workflows/release.yaml | 2 +- .github/workflows/snapshot.yaml | 2 +- .github/workflows/test.yaml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 259b292..fecd74b 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -4,7 +4,7 @@ on: workflow_dispatch: env: - JAVA_VERSION: '17' + JAVA_VERSION: '21' jobs: diff --git a/.github/workflows/snapshot.yaml b/.github/workflows/snapshot.yaml index 0c0ed9d..0526bcf 100644 --- a/.github/workflows/snapshot.yaml +++ b/.github/workflows/snapshot.yaml @@ -5,7 +5,7 @@ on: types: [labeled] env: - JAVA_VERSION: '17' + JAVA_VERSION: '21' jobs: diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml index 91e86e2..e75a83f 100644 --- a/.github/workflows/test.yaml +++ b/.github/workflows/test.yaml @@ -9,7 +9,7 @@ on: - 'README.md' env: - JAVA_VERSION: '17' + JAVA_VERSION: '21' jobs: test: From 0d943944b2353bd0207793120bb5609d00dde81c Mon Sep 17 00:00:00 2001 From: nsenave Date: Mon, 13 Apr 2026 18:59:13 +0200 Subject: [PATCH 7/7] docs: readme update --- README.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index 06e699d..824605d 100644 --- a/README.md +++ b/README.md @@ -11,7 +11,7 @@ This library offers deserialization / serialization for DDI objects, using metho ### Requirements -Java 17 or above. +Java 21 or above. ### [Get the dependency](https://mvnrepository.com/artifact/fr.insee.ddi/ddi-lifecycle) @@ -21,14 +21,14 @@ Maven: fr.insee.ddi ddi-lifecycle - 1.1.0 + 2.0.0 ``` Gradle: ```kotlin -implementation("fr.insee.ddi:ddi-lifecycle:1.1.0") +implementation("fr.insee.ddi:ddi-lifecycle:2.0.0") ``` ### Deserialize / serialize DDI objects