Skip to content

Conversation

@RishiRajAnand
Copy link
Member

@RishiRajAnand RishiRajAnand commented Jul 17, 2025

Fixes CVE-2019-10172

Ensemble:
kiegroup/appformer#1453
kiegroup/kie-wb-common#3839
kiegroup/droolsjbpm-integration#3084
kiegroup/kie-wb-distributions#1249
kiegroup/jbpm-wb#1610
kiegroup/jbpm#2468

Thank you for submitting this pull request

JIRA: (please edit the JIRA link if it exists)

link

referenced Pull Requests: (please edit the URLs of referenced pullrequests if they exist)

  • paste the link(s) from GitHub here
  • link 2
  • link 3 etc.

You can check Kiegroup organization repositories CI status from Chain Status webpage

How to replicate CI configuration locally?

Build Chain tool does "simple" maven build(s), the builds are just Maven commands, but because the repositories relates and depends on each other and any change in API or class method could affect several of those repositories there is a need to use build-chain tool to handle cross repository builds and be sure that we always use latest version of the code for each repository.

build-chain tool is a build tool which can be used locally on command line or in Github Actions workflow(s), in case you need to change multiple repositories and send multiple dependent pull requests related with a change you can easily reproduce the same build by executing it on Github hosted environment or locally in your development environment. See local execution details to get more information about it.

A general local execution could be the following one, where the tool clones all dependent projects starting from the -sp one and it locally applies the pull request (if it exists) in order to reproduce a complete build scenario for the provided Pull Request.

Note: the tool considers multiple Pull Requests related to each other if their branches (generally in the forked repositories) have the same name.

$ build-chain-action -df 'https://raw.githubusercontent.com/${GROUP:kiegroup}/droolsjbpm-build-bootstrap/${BRANCH:main}/.ci/pull-request-config.yaml' build pr -url <pull-request-url> -sp kiegroup/kie-wb-distributions [--skipExecution]

Consider changing kiegroup/kie-wb-distributions with the correct starting project.

How to retest this PR or trigger a specific build:
  • a pull request please add comment: Jenkins retest (using this e.g. Jenkins retest this optional but no longer required)

  • for a full downstream build

    • for jenkins job: please add comment: Jenkins run fdb
    • for github actions job: add the label run_fdb
  • a compile downstream build please add comment: Jenkins run cdb

  • a full production downstream build please add comment: Jenkins execute product fdb

  • an upstream build please add comment: Jenkins run upstream

  • for windows-specific os job add the label windows_check

How to backport a pull request to a different branch?

In order to automatically create a backporting pull request please add one or more labels having the following format backport-<branch-name>, where <branch-name> is the name of the branch where the pull request must be backported to (e.g., backport-7.67.x to backport the original PR to the 7.67.x branch).

NOTE: backporting is an action aiming to move a change (usually a commit) from a branch (usually the main one) to another one, which is generally referring to a still maintained release branch. Keeping it simple: it is about to move a specific change or a set of them from one branch to another.

Once the original pull request is successfully merged, the automated action will create one backporting pull request per each label (with the previous format) that has been added.

If something goes wrong, the author will be notified and at this point a manual backporting is needed.

NOTE: this automated backporting is triggered whenever a pull request on main branch is labeled or closed, but both conditions must be satisfied to get the new PR created.

@RishiRajAnand RishiRajAnand requested a review from akumar074 July 17, 2025 06:14
@RishiRajAnand
Copy link
Member Author

jenkins run fdb

@RishiRajAnand
Copy link
Member Author

jenkins run cdb

@RishiRajAnand
Copy link
Member Author

jenkins run fdb

@RishiRajAnand
Copy link
Member Author

jenkins run cdb

1 similar comment
@RishiRajAnand
Copy link
Member Author

jenkins run cdb

@RishiRajAnand
Copy link
Member Author

jenkins run fdb

@RishiRajAnand
Copy link
Member Author

jenkins run cdb

@RishiRajAnand
Copy link
Member Author

jenkins run fdb

pom.xml Outdated
<version.org.jboss.arquillian.graphene>2.3.2</version.org.jboss.arquillian.graphene>
<version.com.google.guava.for-selenium>33.2.1-jre</version.com.google.guava.for-selenium>
<version.org.jboss.errai>4.17.0.Final</version.org.jboss.errai>
<version.org.jboss.errai>4.16.0.Final</version.org.jboss.errai>
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
<version.org.jboss.errai>4.16.0.Final</version.org.jboss.errai>
<version.org.jboss.errai>4.17.0.Final</version.org.jboss.errai>

This can be removed now.

pom.xml Outdated
<groupId>org.jboss.resteasy</groupId>
<artifactId>resteasy-jackson-provider</artifactId>
<version>${version.org.jboss.resteasy}</version>
<scope>test</scope>
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is this change needed here? I think it's just for dependency management for bom, and scope can be defined in other poms.

@RishiRajAnand
Copy link
Member Author

jenkins run cdb

@RishiRajAnand
Copy link
Member Author

jenkins run fdb

1 similar comment
@RishiRajAnand
Copy link
Member Author

jenkins run fdb

@RishiRajAnand
Copy link
Member Author

jenkins run cdb

1 similar comment
@RishiRajAnand
Copy link
Member Author

jenkins run cdb

@RishiRajAnand
Copy link
Member Author

jenklins run cdb

@RishiRajAnand
Copy link
Member Author

jenkins run fdb

@RishiRajAnand
Copy link
Member Author

jenklins run cdb

@RishiRajAnand
Copy link
Member Author

jenkins run fdb

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants