Giter Club home page Giter Club logo

apex-ast-serializer's Introduction

Speak, Friend, and Enter 🚪

Dang Mai (Mai Hải Đăng - He/Him)

LinkedIn LinkedIn Goodreads Keybase

CURRENT
  • 💻 Staff Engineer at Twilio.
  • ✍️ Open Source software developer and advocate.
  • 👋 Swing Dancing instructor at Boston Lindy Hop.
BIO
  • 🇺🇸 Currently based in the Bay Area.
  • 🇻🇳 Originally from Ha Noi, Viet Nam.

apex-ast-serializer's People

Contributors

dangmai avatar dependabot-preview[bot] avatar dependabot[bot] avatar github-actions[bot] avatar renovate-bot avatar renovate[bot] avatar

Stargazers

avatar avatar avatar avatar avatar avatar avatar avatar avatar

Watchers

avatar

Forkers

yeikel

apex-ast-serializer's Issues

Unable to run apex-ast-serializer-http

Since c26775e, apex-ast-serializer-http fails to run (Java 8):

$ bin/apex-ast-serializer-http
Unrecognized option: --add-opens=java.base/java.lang=ALL-UNNAMED
Error: Could not create the Java Virtual Machine.
Error: A fatal exception has occurred. Program will exit.
$ java -version                                                                                                                
openjdk version "1.8.0_212"
OpenJDK Runtime Environment (Zulu 8.38.0.10-SA-macosx) (build 1.8.0_212-b04)
OpenJDK 64-Bit Server VM (Zulu 8.38.0.10-SA-macosx) (build 25.212-b04, mixed mode)

Note: this bug also breaks prettier-plugin-apex (1.9.0)

Overwrite Jetty version of Jackson temporarily to fix `Sonatype-2022-6438`

Currently, the Jackson version bundled with jersey is vulnerable to Sonatype-2022-6438. See FasterXML/jackson-core#861 (Jackson is a transitive dependency)

This is currently under discussion here eclipse-ee4j/jersey#5283 but it is unclear when that will be resolved

Sadly, due to this vulnerability , we cannot use prettier-plugin-apex in our environment because this dependency is pulling Jackson 2.14.1

Would you be open to temporarily overwrite the version of Jackson?

We should be able to exclude it from jetty and define Jackson 2.15 explicitly

https://github.com/dangmai/apex-ast-serializer/blob/master/build.gradle#L117

Current dependency tree:

org.glassfish.jersey.media:jersey-media-json-jackson:3.1.3
|    +--- org.glassfish.jersey.core:jersey-common:3.1.3 (*)
|    +--- org.glassfish.jersey.ext:jersey-entity-filtering:3.1.3
|    |    \--- jakarta.ws.rs:jakarta.ws.rs-api:3.1.0
|    +--- com.fasterxml.jackson.core:jackson-annotations:2.14.1
|    |    \--- com.fasterxml.jackson:jackson-bom:2.14.1
|    |         +--- com.fasterxml.jackson.core:jackson-annotations:2.14.1 (c)
|    |         +--- com.fasterxml.jackson.core:jackson-core:2.14.1 (c)
|    |         +--- com.fasterxml.jackson.core:jackson-databind:2.14.1 (c)
|    |         \--- com.fasterxml.jackson.module:jackson-module-jakarta-xmlbind-annotations:2.14.1 (c)
|    +--- com.fasterxml.jackson.core:jackson-databind:2.14.1
|    |    +--- com.fasterxml.jackson.core:jackson-annotations:2.14.1 (*)
|    |    +--- com.fasterxml.jackson.core:jackson-core:2.14.1
|    |    |    \--- com.fasterxml.jackson:jackson-bom:2.14.1 (*)
|    |    \--- com.fasterxml.jackson:jackson-bom:2.14.1 (*)
|    +--- com.fasterxml.jackson.module:jackson-module-jakarta-xmlbind-annotations:2.14.1
|    |    +--- com.fasterxml.jackson.core:jackson-annotations:2.14.1 (*)
|    |    +--- com.fasterxml.jackson.core:jackson-core:2.14.1 (*)
|    |    +--- com.fasterxml.jackson.core:jackson-databind:2.14.1 (*)
|    |    \--- com.fasterxml.jackson:jackson-bom:2.14.1 (*)
|    \--- jakarta.xml.bind:jakarta.xml.bind-api:4.0.0
|         \--- jakarta.activation:jakarta.activation-api:2.1.0 -> 2.1.2

We can volunteer and send a pull request with that change if accepted

Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

Detected dependencies

asdf
.tool-versions
github-actions
.github/workflows/pr.yml
  • pascalgn/automerge-action v0.16.2
.github/workflows/test-release.yml
  • actions/checkout v4
  • graalvm/setup-graalvm v1
  • ncipollo/release-action v1
  • actions/checkout v4
  • graalvm/setup-graalvm v1
  • actions/upload-release-asset v1
  • actions/upload-release-asset v1
.github/workflows/update-jorje.yml
  • actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11
  • actions/setup-java v3
  • peter-evans/create-pull-request v5.0.2
gradle
settings.gradle
parser/build.gradle
  • org.graalvm.buildtools.native 0.10.0
  • com.thoughtworks.xstream:xstream 1.4.20
  • commons-cli:commons-cli 1.6.0
  • commons-io:commons-io 2.15.1
  • org.junit.jupiter:junit-jupiter-api 5.10.2
  • org.junit.jupiter:junit-jupiter-engine 5.10.2
  • org.json:json 20231013
  • io.github.classgraph:classgraph 4.8.165
server/build.gradle
  • cz.habarta.typescript-generator:typescript-generator-gradle-plugin 3.2.1263
  • javax.xml.bind:jaxb-api 2.3.1
  • org.slf4j:slf4j-api 2.0.12
  • org.slf4j:slf4j-simple 2.0.12
  • org.eclipse.jetty:jetty-server 11.0.20
  • org.eclipse.jetty:jetty-servlet 11.0.20
  • org.eclipse.jetty:jetty-servlets 11.0.20
  • org.glassfish.jersey.core:jersey-server 3.1.3
  • org.glassfish.jersey.containers:jersey-container-servlet-core 3.1.3
  • org.glassfish.jersey.containers:jersey-container-jetty-http 3.1.3
  • org.glassfish.jersey.media:jersey-media-json-jackson 3.1.3
  • org.glassfish.jersey.inject:jersey-hk2 3.1.3
  • jakarta.activation:jakarta.activation-api 2.1.2
  • org.glassfish.jaxb:jaxb-runtime 4.0.4
  • org.junit.jupiter:junit-jupiter-api 5.10.2
  • org.junit.jupiter:junit-jupiter-engine 5.10.2
  • cz.habarta.typescript-generator:typescript-generator-core 3.2.1263
gradle-wrapper
gradle/wrapper/gradle-wrapper.properties
  • gradle 8.6
  • Check this box to trigger a request for Renovate to run again on this repository

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.