Skip to content

AS-5461: Added sonarqube scanning to PR, commit and workflows - #1249

Closed
sandeep-ctds wants to merge 60 commits into
streamnative:masterfrom
datastax:AS-5461-sonarqube-mig
Closed

AS-5461: Added sonarqube scanning to PR, commit and workflows#1249
sandeep-ctds wants to merge 60 commits into
streamnative:masterfrom
datastax:AS-5461-sonarqube-mig

Conversation

@sandeep-ctds

Copy link
Copy Markdown

(If this PR fixes a github issue, please add Fixes #<xyz>.)

Fixes #
https://datastax.jira.com/browse/AS-5461

(or if this PR is one task of a github issue, please add Master Issue: #<xyz> to link to the master issue.)

Master Issue: #

Motivation

Explain here the context, and why you're making that change. What is the problem you're trying to solve.

Modifications

Describe the modifications you've done.

Verifying this change

  • Make sure that the change passes the CI checks.

(Please pick either of the following options)

This change is a trivial rework / code cleanup without any test coverage.

(or)

This change is already covered by existing tests, such as (please describe tests).

(or)

This change added tests and can be verified as follows:

(example:)

  • Added integration tests for end-to-end deployment with large payloads (10MB)
  • Extended integration test for recovery after broker failure

Documentation

Check the box below.

Need to update docs?

  • doc-required

    (If you need help on updating docs, create a doc issue)

  • no-need-doc

    (Please explain why)

  • doc

    (If this PR contains doc changes)

yaalsn and others added 30 commits January 26, 2024 14:52
Bumps [json-smart](https://github.com/netplex/json-smart-v2) from 2.4.7 to 2.4.9.
- [Release notes](https://github.com/netplex/json-smart-v2/releases)
- [Commits](https://github.com/netplex/json-smart-v2/commits/2.4.9)

---
updated-dependencies:
- dependency-name: net.minidev:json-smart
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit 5ed32bd)
Bumps [jackson-databind](https://github.com/FasterXML/jackson) from 2.13.4.1 to 2.13.4.2.
- [Release notes](https://github.com/FasterXML/jackson/releases)
- [Commits](https://github.com/FasterXML/jackson/commits)

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit d198b0a)
…ative#892)

Bumps org.apache.commons:commons-compress from 1.21 to 1.26.0.

---
updated-dependencies:
- dependency-name: org.apache.commons:commons-compress
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit 351fc8c)
* Added user-specified S3 path

* Optimized the implementation

* Variables renamed

* Logic moved to Partitioner & Added unit tests with all the flags about the partitions with all the combinations

* Removed unnecessary checks

(cherry picked from commit 2a66206)
This reverts commit 21c3ad3.
* [fix]: fix Parquet/Avro format with separated key value avro-avro messages (#3)

(cherry picked from commit 37a5c85)
(cherry picked from commit 8802a76)

* [improve] Allow user-specified S3 path (#5)

* Added user-specified S3 path

* Optimized the implementation

* Variables renamed

* Logic moved to Partitioner & Added unit tests with all the flags about the partitions with all the combinations

* Removed unnecessary checks

(cherry picked from commit 2a66206)
(cherry picked from commit 2696f0d)

* Fix checkstyle

(cherry picked from commit 21c3ad3)

* Added ds-release.yml

* Removed System.out.println from PulsarTestBase.java

---------

Co-authored-by: Nicolò Boschi <boschi1997@gmail.com>
Co-authored-by: Mukesh Kumar <65598381+mukesh154@users.noreply.github.com>
…2024-53990 (#11)

* Upgrade protobuf3 to 3.25.5 to address CVE-2024-7254

* Include async-http-client with updated version to fix vulnerable transitive dependency.

* Add explanation comment and scope.

---------

Co-authored-by: ganesh-ctds <ext-ganesh.saladi@datastax.com>
ganesh-ctds and others added 25 commits May 6, 2025 15:51
AS-4121: Update pom.xml to resolve vulnerabilities
* Upgrade dependencies to resolve vulnerabilities & Remove duplicate dependencies

* Revert netty.version back to resolve failing integration tests
* bump netty version & override aircompressor version

* Update pulsar version to 3.1.4.22 to fix CI failures.

* bump netty version.

* bump jackson version.
@sandeep-ctds
sandeep-ctds requested a review from a team as a code owner August 20, 2026 12:09
@github-actions

Copy link
Copy Markdown

@sandeep-ctds:Thanks for your contribution. For this PR, do we need to update docs?
(The PR template contains info about doc, which helps others know more about the changes. Can you provide doc-related info in this and future PR descriptions? Thanks)

@github-actions github-actions Bot added the doc-info-missing This pr needs to mark a document option in description label Aug 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

doc-info-missing This pr needs to mark a document option in description

Projects

None yet

Development

Successfully merging this pull request may close these issues.

9 participants