Skip to content

Conversation

@jannowotsch
Copy link
Contributor

@jannowotsch jannowotsch commented Dec 12, 2025

Modernise scorre-tooling dependency to follow the recent score practices.
Update pip lock files to include fixes for security vulnerabilities in urllib.

Replace the individual score_* tooling repos with score_tooling, which
is the current method to use score-specific checks.
Update the pip dependency lock files.

The main purpose is to update urllib to 2.6.2, which includes fixes for
security vulnerabilities, reported by pip-audit.
@github-actions
Copy link

License Check Results

🚀 The license check job ran with the Bazel command:

bazel run //:license-check

Status: ⚠️ Needs Review

Click to expand output
[License Check Output]
Extracting Bazel installation...
Starting local Bazel server and connecting to it...
INFO: Invocation ID: 510f8644-9542-4957-a8ea-2b49e33af25c
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
WARNING: For repository 'aspect_rules_lint', the root module requires module version aspect_rules_lint@1.4.4, but got aspect_rules_lint@1.5.3 in the resolved dependency graph.
Loading: 
Loading: 2 packages loaded
Loading: 2 packages loaded
    currently loading: 
Loading: 2 packages loaded
    currently loading: 
Loading: 2 packages loaded
    currently loading: 
Analyzing: target //:license-check (3 packages loaded)
Analyzing: target //:license-check (3 packages loaded, 0 targets configured)
Analyzing: target //:license-check (3 packages loaded, 0 targets configured)

Analyzing: target //:license-check (62 packages loaded, 10 targets configured)

Analyzing: target //:license-check (115 packages loaded, 1325 targets configured)

Analyzing: target //:license-check (117 packages loaded, 2340 targets configured)

Analyzing: target //:license-check (128 packages loaded, 2400 targets configured)

Analyzing: target //:license-check (131 packages loaded, 4530 targets configured)

INFO: Analyzed target //:license-check (132 packages loaded, 4656 targets configured).
[9 / 13] checking cached actions
[9 / 13] [Prepa] JavaToolchainCompileClasses external/rules_java~/toolchains/platformclasspath_classes
[11 / 13] [Prepa] JavaToolchainCompileBootClasspath external/rules_java~/toolchains/platformclasspath.jar
[12 / 13] [Prepa] Building license.check.license_check.jar ()
INFO: Found 1 target...
Target //:license.check.license_check up-to-date:
  bazel-bin/license.check.license_check
  bazel-bin/license.check.license_check.jar
INFO: Elapsed time: 24.910s, Critical Path: 1.75s
INFO: 13 processes: 1 disk cache hit, 9 internal, 2 processwrapper-sandbox, 1 worker.
INFO: Build completed successfully, 13 total actions
INFO: Running command line: bazel-bin/license.check.license_check ./formatted.txt -review -project automotive.score -repo https://github.com/eclipse-score/bazel-tools-python -token
usage: org.eclipse.dash.licenses.cli.Main [-batch <int>] [-cd <url>]
       [-confidence <int>] [-ef <url>] [-excludeSources <sources>] [-help] [-lic
       <url>] [-project <shortname>] [-repo <url>] [-review] [-summary <file>]
       [-timeout <seconds>] [-token <token>]

@antonkri antonkri self-requested a review December 15, 2025 06:08
@antonkri antonkri merged commit 93b8e8d into eclipse-score:main Dec 15, 2025
8 of 9 checks passed
@jannowotsch jannowotsch deleted the modernise branch December 18, 2025 09:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants