Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

0.2.19 changes #585

Merged
merged 6 commits into from
Jul 15, 2024
Merged

0.2.19 changes #585

merged 6 commits into from
Jul 15, 2024

Conversation

norrisjeremy
Copy link
Contributor

@norrisjeremy norrisjeremy commented Jun 24, 2024

  • Update to latest Maven (3.9.8), Maven Wrapper (3.3.2) & Java (21.0.3) releases.
  • Only execute build once during CI and then run distinct jobs to run tests for each Java version.
    -- This will require changes to the expected checks for PRs.
  • Run tests on Java 22.
    -- I'm envisioning we will update this every 6 months to follow the latest Java release.
  • Harden CI workflows by pinning action versions to specific commit hashes.
    -- See security hardening recommendations.
  • Increase Dependabot open PR limit.
    -- Since there may be a larger volumes of update PRs incoming for GHA workflows now that they are pinned.
  • Enforce DHGEX prime modulus bit length meets configured constraints
    -- This should match OpenSSH behavior, as seen here.

@mwiede mwiede merged commit 1712a9e into mwiede:master Jul 15, 2024
7 checks passed
@norrisjeremy norrisjeremy deleted the 20240624 branch July 15, 2024 15:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants