AbsaOSS / enceladus

Dynamic Conformance Engine
Apache License 2.0
29 stars 14 forks source link

#2154 CVE fix: Atum updated to v3.9.0 #2155

Closed dk1844 closed 1 year ago

dk1844 commented 1 year ago

This PR increases the version of the Atum library to v3.9.0. (internally, that solves a couple of CVEs - details: https://github.com/AbsaOSS/atum/issues/150)

Test-ran on localhost, _INFO files appearing correctly both in std and conf outputs as expected.

Closes #2154.

dk1844 commented 1 year ago

Could you please pump the jacskon version in Enceladus itself too, please?

@benedeki it is done, but there are some changes in tests due to these. All make sense to me (actually correct behavior). I have also added a 'legacy' deserialization case so that we are sure about possible old content behavior.

Edit: integTests affected, too - reflected.

sonarcloud[bot] commented 1 year ago

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
0.0% 0.0% Duplication

sonarcloud[bot] commented 1 year ago

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
0.0% 0.0% Duplication

dk1844 commented 1 year ago

Rebased on Spark3/Enceladus3 develop, jackson libraries updated to 2.14.1. Reran testing stc+conf, witnessed _INFO files being created.

I have noticed that the jenkins build has failed due to eventually timings, on faster machines, the build succeeds. This problem may be solved in the course of #2158.

@benedeki