Repository navigation
build(deps): combine open Dependabot updates - #39
Merged
Merged
Conversation
Merges Dependabot PRs #3-#7, #9-#12, #15, #20-#25 in one change. - Adapt operaton-embedded and operaton-remote Kotlin code to the nullability annotations of Operaton 2.2.0 - Hold back @miragon/bpmnlint-plugin-rules at the current version in six examples: 0.16.0 adds async-continuations, which requires camunda:asyncBefore changes in the BPMN models - Leave out typescript 7.0.2 (#16): typescript-eslint does not support it yet
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Why
17 Dependabot PRs were open, and ten of them were red. This PR lands every update that can go in now, all in one change, and holds back the ones that need a decision first.
What
Included: #3, #4, #5, #6, #7, #9, #10, #11, #12, #15, #20, #21, #22, #23, #24, #25 (Spring Boot 4.1.2, Gradle 9.8.2, Operaton 2.2.0, Kotlin 2.4.21, Konsist 0.18.1, bpmnlint 12.0.0, GitHub Actions, …).
Code changes for Operaton 2.2.0: Operaton now ships nullability annotations, so Kotlin reads
processInstanceId,singleResult()and the variable maps as nullable/non-null-valued.TaskInboxAdapterskips tasks that have no process instance id (mapNotNull). The test helpers now userequireNotNull/!!andMap<String, Any>.Held back:
@miragon/bpmnlint-plugin-rules0.16.0 stays at the current version in cibseven-embedded, cibseven-process-engine-api, cibseven-remote, operaton-embedded, operaton-process-engine-api and operaton-remote. The newasync-continuationsrule asks forcamunda:asyncBeforeon start events, service tasks and joins. That moves transaction boundaries in the models, which is a modelling decision and not part of a dependency update. Dependabot will propose the bump again.typescript7.0.2 (build(deps-dev): bump typescript from 6.0.3 to 7.0.2 in /examples/fullstack-cibseven-embedded/frontend #16) is not included.typescript-eslint8.72 does not accept TypeScript 7 yet (ERESOLVE).After the merge, Dependabot will close the PRs that are included here, and it keeps #16 and the plugin bumps open.
Verification
Run locally after rebasing on
main:./gradlew buildand./mvnw verifyfor cibseven-process-engine-api, cibseven-remote, fluxnova-embedded, operaton-embedded, operaton-remote and zeebe-vanillabp: all greennpm run lint:bpmnin all 10 examples: greennpm run generate:check,npm run drift,scripts/check-owner.sh: greenNot run locally: Bruno/Playwright end-to-end and the standalone starter builds. CI covers those.