fix(JWT-4288): upgrade spring boot because of cve-2024-22259 #37
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Continuous Integration | |
| on: | |
| push: | |
| branches-ignore: | |
| - 'master' | |
| - 'maintenance/maint-1x' | |
| paths-ignore: | |
| - '**/README.md' | |
| env: | |
| # This will suppress any download for dependencies and plugins or upload messages which would clutter the console log. | |
| # `showDateTime` will show the passed time in milliseconds. You need to specify `--batch-mode` to make this work. | |
| MAVEN_OPTS: "-Dhttps.protocols=TLSv1.2 -Dorg.slf4j.simpleLogger.log.org.apache.maven.cli.transfer.Slf4jMavenTransferListener=WARN -Dorg.slf4j.simpleLogger.showDateTime=true -Djava.awt.headless=true" | |
| # As of Maven 3.3.0 instead of this you may define these options in `.mvn/maven.config` so the same config is used | |
| # when running from the command line. | |
| # `installAtEnd` and `deployAtEnd` are only effective with recent version of the corresponding plugins. | |
| MAVEN_CLI_OPTS: "--batch-mode --errors --fail-at-end --show-version -DinstallAtEnd=true -DdeployAtEnd=true" | |
| jobs: | |
| build: | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 10 | |
| steps: | |
| - uses: actions/checkout@v3 | |
| ## Configure JDK 17 | |
| - name: Set up JDK 17 | |
| uses: actions/setup-java@v3 | |
| with: | |
| distribution: 'temurin' | |
| java-version: '17' | |
| cache: 'maven' | |
| ## Build with maven | |
| - name: Perform build | |
| env: | |
| REPOSITORY_URL: ${{ secrets.LEVIGO_OSS_MAVEN_REPO_URL }} | |
| REPOSITORY_USERID: ${{ secrets.LEVIGO_OSS_MAVEN_REPO_USER }} | |
| REPOSITORY_CREDENTIALS: ${{ secrets.LEVIGO_OSS_MAVEN_REPO_PASSWORD }} | |
| run: mvn verify --settings .github/settings.xml | |
| - name: Notify Developers | |
| uses: 8398a7/action-slack@v3 | |
| with: | |
| username: GitHub | |
| icon_emoji: octocat | |
| channel: ci_jwt | |
| status: ${{ job.status }} | |
| fields: repo,message,commit,author,action,eventName,ref | |
| text: ${{ github.workflow }} ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }} | |
| env: | |
| SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }} | |
| if: ${{ github.actor != 'dependabot[bot]' }} |