Skip to content

Upgrading container tooling

David Diederich requested to merge upgrade-maven-base-image into main

This upgrades the tooling present in the fossa-with-cache container.

Maven, Java

The base image is now maven 3.9.3, and is built using Eclipse Temurin JDK 17. This change supports generating dependencies on Java 17 projects, but also works on Java 8 projects -- at least, on the ones that I tested with.

Python

The python available from the apt repository is 3.10.6 (as of this MR), which is sufficiently high. We no longer need to build Python from source. Previously, we were building from source because the base image referenced a very old apt repository.

Node.js

The nodejs version in the apt repository is still quite old. Continue installing this directly, but upgrade the version to the latest LTS.

Testing

OSDU Testing -- Multi Project

Seems to work reasonably well, despite the failed pipelines. Lots of fossa-check-notice failures, but those are due to outdated NOTICE files, not failures in the container. csv-parser has a bad CI definition related to pruning out part of the stages, and OPC UA doesn't compile on master, either. Legal's fossa-analyze failure is due to a licensing issue.

Edited by David Diederich

Merge request reports