updated in-toto-java dependency from 0.3 to 0.4.1 in pom.xml

jenkinsci / in-toto-plugin

A Jenkins plugin to track steps and create in-toto link metadata

https://plugins.jenkins.io/in-toto/

MIT License

10 stars 14 forks source link

updated in-toto-java dependency from 0.3 to 0.4.1 in pom.xml #29

Closed lakshya8066 closed 2 years ago

lakshya8066 commented 2 years ago

[x] Make sure you are opening from a topic/feature/bugfix branch (right side) and not your main branch!
[x] Ensure that the pull request title represents the desired changelog entry
[x] Please describe what you did Updated the in-toto-java dependency from 0.3 to 0.4.1 This will enable us to use the newly added libraries in in-toto-java such as slsa/models
[ ] Link to relevant issues in GitHub or Jira
[ ] Link to relevant pull requests, esp. upstream and downstream changes
[ ] Ensure you have provided tests - that demonstrates feature works or fixes the issue

adityasaky commented 2 years ago

Glad the CI changes kicked in! Side note: we should clean up the commit history on this one before we eventually merge.

lakshya8066 commented 2 years ago

Yes, will do that

lakshya8066 commented 2 years ago

Changing the java.level here to 11 produces an error but it runs fine if it is left to 8

adityasaky commented 2 years ago

I found some similar issues:

I wonder if we can temporarily move forward by disabling test injection. It still seems to be a dependency conflict further down the graph but not a part we directly control. We could try some excludes as one of the threads suggests but...