Closed sourcegraph-wk closed 1 year ago
No security relevant content was detected by automated scans.
aviary.yaml
coverage of security relevant codeQuestions or Comments? Reach out on Slack: #support-infosec.
Skynet test results failed initially for this build but were approved by greg.littlefield https://wf-skynet-hrd.appspot.com/apps/test/smithy/4365707/1 Approval message: Ignoring these failures for now
Summary
Frontend Frameworks is updating dependencies! More details at https://wiki.atl.workiva.net/display/CP/Dependency+Upgrades
We've discovered that mockito 5.3.0 is not compatible with analyzer 2x. So as we work to get repos upgraded to analyzer 2, mockito will start to fail to compile. We can avoid this by setting an upper bound to avoid the known bad version. mockito 5.3.1 and higher are ok, but require analyzer 4+
This batch will change the mockito dependency from ^5.0.0 to
'>=5.0.0 <5.3.0'
and may add a dependency_validator ignore for the pinned version of mockito if neccessary.A passing CI is sufficient QA (means mockito compiles and tests run).
For more info, reach out to Rob Becker in
#support-frontend-dx
_Created by Sourcegraph batch change
Workiva/pin_mockito_5
._