Skip to content

Pin checkstyle version to 13.9.0 (flow-framework) - #1453

Merged
peterzhuamazon merged 1 commit into
opensearch-project:mainfrom
peterzhuamazon:pin-checkstyle-version
Aug 1, 2026
Merged

Pin checkstyle version to 13.9.0 (flow-framework)#1453
peterzhuamazon merged 1 commit into
opensearch-project:mainfrom
peterzhuamazon:pin-checkstyle-version

Conversation

@peterzhuamazon

@peterzhuamazon peterzhuamazon commented Aug 1, 2026

Copy link
Copy Markdown
Member

Description

Pin checkstyle version to 13.9.0 (flow-framework)

Issues Resolved

opensearch-project/opensearch-build#6278 (comment)

@peterzhuamazon
Pin checkstyle version to 13.9.0
d9a8cdc 
Signed-off-by: Peter Zhu <zhujiaxi@amazon.com>
@peterzhuamazon peterzhuamazon self-assigned this Aug 1, 2026
@github-actions

github-actions Bot commented Aug 1, 2026

Copy link
Copy Markdown
Contributor

PR Code Analyzer ❗

AI-powered 'Code-Diff-Analyzer' found issues on commit d9a8cdc.

⛔ Hard block: Issues at High severity or above will block this PR from merging.

PathLineSeverityDescription
build.gradle122highCheckstyle build plugin version changed from 'latest.release' to a pinned version '13.9.0'. Per mandatory policy, all build plugin/dependency version changes must be flagged. Additionally, checkstyle's published version series is in the 10.x range; version 13.9.0 does not correspond to any known legitimate checkstyle release, raising the possibility of a typosquatted or non-existent artifact being resolved from a misconfigured or malicious repository. Maintainers should verify this version exists in the intended artifact registry before merging.

The table above displays the top 10 most important findings.

Total: 1 | Critical: 0 | High: 1 | Medium: 0 | Low: 0

Pull Requests Author(s): Please update your Pull Request according to the report above.

Repository Maintainer(s): You can bypass diff analyzer by adding label skip-diff-analyzer after reviewing the changes carefully, then re-run failed actions. To re-enable the analyzer, remove the label, then re-run all actions.

⚠️ Note: The Code-Diff-Analyzer helps protect against potentially harmful code patterns. Please ensure you have thoroughly reviewed the changes beforehand.

Thanks.

@peterzhuamazon peterzhuamazon added skip-changelog skip-diff-analyzer Maintainer to skip code-diff-analyzer check, after reviewing issues in AI analysis. enhancement New feature or request labels Aug 1, 2026
@peterzhuamazon peterzhuamazon moved this from Backlog to In review in OpenSearch Engineering Effectiveness Aug 1, 2026
@peterzhuamazon peterzhuamazon mentioned this pull request Aug 1, 2026
Closed
65 tasks
@codecov

codecov Bot commented Aug 1, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 78.57%. Comparing base (784c075) to head (d9a8cdc).

Additional details and impacted files 
@@            Coverage Diff            @@
##               main    #1453   +/-   ##
=========================================
  Coverage     78.57%   78.57%           
  Complexity     1315     1315           
=========================================
  Files           106      106           
  Lines          6045     6045           
  Branches        647      647           
=========================================
  Hits           4750     4750           
  Misses         1004     1004           
  Partials        291      291

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@peterzhuamazon peterzhuamazon added release v3.8.0 Issues and PRs related to version v3.8.0 labels Aug 1, 2026
@peterzhuamazon
peterzhuamazon merged commit 5ff55cd into opensearch-project:main Aug 1, 2026
68 of 77 checks passed
@github-project-automation github-project-automation Bot moved this from 👀 In Review to ✅ Done in Engineering Effectiveness Board Aug 1, 2026
@peterzhuamazon
peterzhuamazon deleted the pin-checkstyle-version branch August 1, 2026 17:33
@opensearch-ci-bot opensearch-ci-bot mentioned this pull request Aug 1, 2026
Merged
peterzhuamazon added a commit that referenced this pull request Aug 1, 2026
@opensearch-ci-bot @peterzhuamazon
[Backport 3.8] Pin checkstyle version to 13.9.0 (flow-framework) (#1454)
1b68374 
Pin checkstyle version to 13.9.0 (flow-framework) (#1453)

Pin checkstyle version to 13.9.0


(cherry picked from commit 5ff55cd)

Signed-off-by: Peter Zhu <zhujiaxi@amazon.com>
Signed-off-by: opensearch-ci-bot <opensearch-infra@amazon.com>
Co-authored-by: Peter Zhu <zhujiaxi@amazon.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@rishabh6788 rishabh6788 rishabh6788 approved these changes
@dbwiddis dbwiddis Awaiting requested review from dbwiddis dbwiddis is a code owner
@owaiskazi19 owaiskazi19 Awaiting requested review from owaiskazi19 owaiskazi19 is a code owner
@joshpalis joshpalis Awaiting requested review from joshpalis joshpalis is a code owner
@ohltyler ohltyler Awaiting requested review from ohltyler ohltyler is a code owner
@amitgalitz amitgalitz Awaiting requested review from amitgalitz amitgalitz is a code owner
@jackiehanyang jackiehanyang Awaiting requested review from jackiehanyang jackiehanyang is a code owner
@junweid62 junweid62 Awaiting requested review from junweid62 junweid62 is a code owner

Assignees

@peterzhuamazon peterzhuamazon

Labels

backport 3.8 enhancement New feature or request release skip-changelog skip-diff-analyzer Maintainer to skip code-diff-analyzer check, after reviewing issues in AI analysis. v3.8.0 Issues and PRs related to version v3.8.0

Projects

Engineering Effectiveness Board
Status: ✅ Done
OpenSearch Engineering Effectiveness
Status: Done

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@peterzhuamazon @rishabh6788