Skip to content

Conversation

@ibbem
Copy link
Collaborator

@ibbem ibbem commented Jun 9, 2025

This is part of #157 and fixes https://github.com/VariantSync/DiffDetective/security/dependabot/6.

Apart from the actual dependency updates (all of which are updates to the newest stable releases), I also added cache invalidation for our Maven dependencies when using Nix (idea by Peter Kolloch).

ibbem added 3 commits June 9, 2025 12:46
Credits for this approach go to Peter Kolloch. See his blog entry about
this idea:
https://blog.eigenvalue.net/nix-rerunning-fixed-output-derivations/
During the update of dependencies, Maven advised to do this. Version
3.6.3 of Maven is technically already "end of life" but, "currently,
plugins provide Maven API compatibility down to 3.6.3"
(https://maven.apache.org/docs/history.html 205-06-04) so we do this
too. Note that we do not currently have any requirement to use any
later version so this is totally fine.
Copy link
Member

@pmbittner pmbittner left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Great! Thanks!

@pmbittner pmbittner added the bm_work ibbem is paid for working on this label Jun 9, 2025
@ibbem ibbem merged commit 19a8518 into develop Jun 9, 2025
2 checks passed
@ibbem ibbem deleted the update-dependencies branch June 9, 2025 12:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bm_work ibbem is paid for working on this

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants