Details
-
Type:
Task
-
Status: Closed (View Workflow)
-
Priority:
Blocker
-
Resolution: Done
-
Affects Version/s: None
-
Fix Version/s: None
-
Labels:None
-
Story Points:3
-
Epic Link:
-
Sprint:Summer 2 2023 May 29, Summer 4 2023 June 26, Summer 5 2023 July 10, Summer 6 2023 July 24, Summer 7 2023 Aug 7
Description
Situation: As part of IGBF-3310 we updated the com.google.guava dependency on IGB master to a newer version (32.1.1-jre) as the newer version does not have a known vulnerability. However, the Protannot manifest currently specifies an Import-Package for:
com.google.common.base;version="\"[16.0,17)\"", com.google.common.collect;version="\"[16.0,17)\"", com.google.common.eventbus;version="\"[16.0,17)\"",
This prevents ProtAnnot from appearing in the IGB app store while running the current version of master.
Task: Update/Release a new version of Protannot that can use the newer version of com.google.guava. If possible, set it so that Protannot is not dependent on a specific version of com.google.guava.
Attachments
Issue Links
Activity
| Field | Original Value | New Value |
|---|---|---|
| Epic Link | IGBF-1908 [ 17998 ] |
| Sprint | Summer 2 2023 May 29 [ 171 ] | Summer 2 2023 May 29, Summer 3 2023 June 12 [ 171, 172 ] |
| Rank | Ranked higher |
| Sprint | Summer 2 2023 May 29, Summer 3 2023 June 12 [ 171, 172 ] | Summer 2 2023 May 29, Summer 4 2023 June 26 [ 171, 173 ] |
| Assignee | Kaushik Gopu [ kgopu ] |
| Status | To-Do [ 10305 ] | In Progress [ 3 ] |
| Sprint | Summer 2 2023 May 29, Summer 4 2023 June 26 [ 171, 173 ] | Summer 2 2023 May 29, Summer 4 2023 June 26, Summer 5 2023 July 10 [ 171, 173, 174 ] |
| Rank | Ranked higher |
| Status | In Progress [ 3 ] | To-Do [ 10305 ] |
| Description |
Situation: As part of {code} com.google.common.base;version="[16.0,1 7)" {code} This prevents ProtAnnot from appearing in the IGB app store while running the current version of master. Task: Update/Release a new version of Protannot that can use the newer version of com.google.guava. If possible, set it so that Protannot is not dependent on a specific version of com.google.guava. |
Situation: As part of {code} com.google.common.base;version="\"[16.0,17)\"", com.google.common.collect;version="\"[16.0,17)\"", com.google.common.eventbus;version="\"[16.0,17)\"", {code} This prevents ProtAnnot from appearing in the IGB app store while running the current version of master. Task: Update/Release a new version of Protannot that can use the newer version of com.google.guava. If possible, set it so that Protannot is not dependent on a specific version of com.google.guava. |
| Story Points | 2 | 3 |
| Status | To-Do [ 10305 ] | In Progress [ 3 ] |
| Sprint | Summer 2 2023 May 29, Summer 4 2023 June 26, Summer 5 2023 July 10 [ 171, 173, 174 ] | Summer 2 2023 May 29, Summer 4 2023 June 26, Summer 5 2023 July 10, Summer 6 2023 July 24 [ 171, 173, 174, 175 ] |
| Rank | Ranked higher |
| Status | In Progress [ 3 ] | Needs 1st Level Review [ 10005 ] |
| Assignee | Kaushik Gopu [ kgopu ] | Ann Loraine [ aloraine ] |
| Status | Needs 1st Level Review [ 10005 ] | First Level Review in Progress [ 10301 ] |
| Assignee | Ann Loraine [ aloraine ] |
| Status | First Level Review in Progress [ 10301 ] | Needs 1st Level Review [ 10005 ] |
| Status | Needs 1st Level Review [ 10005 ] | First Level Review in Progress [ 10301 ] |
| Assignee | Ann Loraine [ aloraine ] |
| Status | First Level Review in Progress [ 10301 ] | To-Do [ 10305 ] |
| Assignee | Ann Loraine [ aloraine ] | Kaushik Gopu [ kgopu ] |
| Status | To-Do [ 10305 ] | In Progress [ 3 ] |
| Status | In Progress [ 3 ] | Needs 1st Level Review [ 10005 ] |
| Assignee | Kaushik Gopu [ kgopu ] |
| Status | Needs 1st Level Review [ 10005 ] | First Level Review in Progress [ 10301 ] |
| Assignee | Ann Loraine [ aloraine ] |
| Status | First Level Review in Progress [ 10301 ] | Needs 1st Level Review [ 10005 ] |
| Assignee | Ann Loraine [ aloraine ] | Nowlan Freese [ nfreese ] |
| Status | Needs 1st Level Review [ 10005 ] | First Level Review in Progress [ 10301 ] |
| Assignee | Nowlan Freese [ nfreese ] | Kaushik Gopu [ kgopu ] |
| Status | First Level Review in Progress [ 10301 ] | To-Do [ 10305 ] |
| Status | To-Do [ 10305 ] | In Progress [ 3 ] |
| Status | In Progress [ 3 ] | Needs 1st Level Review [ 10005 ] |
| Status | Needs 1st Level Review [ 10005 ] | First Level Review in Progress [ 10301 ] |
| Assignee | Kaushik Gopu [ kgopu ] | Nowlan Freese [ nfreese ] |
| Assignee | Nowlan Freese [ nfreese ] | Kaushik Gopu [ kgopu ] |
| Status | First Level Review in Progress [ 10301 ] | Ready for Pull Request [ 10304 ] |
| Assignee | Kaushik Gopu [ kgopu ] |
| Status | Ready for Pull Request [ 10304 ] | Pull Request Submitted [ 10101 ] |
| Sprint | Summer 2 2023 May 29, Summer 4 2023 June 26, Summer 5 2023 July 10, Summer 6 2023 July 24 [ 171, 173, 174, 175 ] | Summer 2 2023 May 29, Summer 4 2023 June 26, Summer 5 2023 July 10, Summer 6 2023 July 24, Summer 7 2023 Aug 7 [ 171, 173, 174, 175, 176 ] |
| Rank | Ranked higher |
| Summary | Update ProtAnnot for new Google version | Make ProtAnnot specify a single version for "guava" artifact from google |
| Summary | Make ProtAnnot specify a single version for "guava" artifact from google | Remove guava (google) upper bound version requirement for ProtAnnot |
| Status | Pull Request Submitted [ 10101 ] | Reviewing Pull Request [ 10303 ] |
| Status | Reviewing Pull Request [ 10303 ] | Merged Needs Testing [ 10002 ] |
| Assignee | Kaushik Gopu [ kgopu ] |
| Status | Merged Needs Testing [ 10002 ] | Post-merge Testing In Progress [ 10003 ] |
| Resolution | Done [ 10000 ] | |
| Status | Post-merge Testing In Progress [ 10003 ] | Closed [ 6 ] |
After upgrading Guava to the latest version, 31.1-jre, and eliminating outdated imports from the pom.xml file, the ProtAnnot feature is now visible in the master IGB. However, Dr. Freese suggests that including the entire Guava library in Protannot might be excessive, as Protannot only requires a few specific components from Guava. I have uploaded the modified code to the repository for future reference: https://bitbucket.org/kaushik-gopu/kgopu_proant/branch/IGBF-3349