Update Tagging Notes authored by David Diederich's avatar David Diederich
......@@ -1411,91 +1411,25 @@ However, if it is many commits ahead, it may be that the tag is blocked from pro
## CRS Conversion
**Next Steps:**
| Actor | Action | Details |
| ------------------- | -------------------- | ------- |
| Release Coordinator | Apply tag, `v0.16.2` | |
[![pipeline status](https://community.opengroup.org/osdu/platform/system/reference/crs-conversion-service/badges/release/0.16/pipeline.svg)](https://community.opengroup.org/osdu/platform/system/reference/crs-conversion-service/-/pipelines/release/0.16/latest)
**release/0.16 branch**
_(Ahead by 4 commits)_
| **Maven:** 0.16.2-SNAPSHOT
_(Ahead by 1 commit)_
| **CI:** release/0.16
**Failures:** [fossa-check-notice](https://community.opengroup.org/osdu/platform/system/reference/crs-conversion-service/-/jobs/1410889)
[![pipeline status](https://community.opengroup.org/osdu/platform/system/reference/crs-conversion-service/badges/v0.16.2/pipeline.svg)](https://community.opengroup.org/osdu/platform/system/reference/crs-conversion-service/-/pipelines/v0.16.2/latest)
**v0.16.2 tag**
| **CI:** v0.16.3
**Ignored:** [container_scanning](https://community.opengroup.org/osdu/platform/system/reference/crs-conversion-service/-/jobs/1410895),
[azure_code_coverage](https://community.opengroup.org/osdu/platform/system/reference/crs-conversion-service/-/jobs/1410883)
_Pipeline was still running when this document was generated._
**Includes Patch MRs:** [!212](osdu/platform/system/reference/crs-conversion-service!212) / [!221](osdu/platform/system/reference/crs-conversion-service!221)
<details><summary><i>Dependencies</i></summary>
| Maven Dependencies | _Root_ | provider/crs-converter-gcp/crs-converter-gae/ |
| ------------------------------------------------------- | ---------- | --------------------------------------------- |
| core-lib-azure | 0.15.2 | |
| core-lib-gcp | | 0.15.0 |
| obm | | 0.15.0 |
| oqm | | 0.15.0 |
| os-core-common | 0.15.0 | 0.15.0 |
| os-core-lib-ibm | 0.16.0-rc1 | |
| osm | | 0.15.0 |
| (3rd Party) com.fasterxml.jackson.core.jackson-databind | 2.13.2.2 | 2.13.2.2 |
| (3rd Party) org.springframework.spring-webflux | 5.3.12 | |
| (3rd Party) org.springframework.spring-webmvc | 5.3.22 | 5.3.12 |
</details>
<details><summary>:information_source: Found Vulnerable Spring WebFlux dependency (<5.2.20 || >=5.3.0 <5.3.18)</summary>
> This tag includes a
> [direct commit](https://community.opengroup.org/osdu/platform/system/reference/crs-conversion-service/-/commit/b7408f1d6f31050db5731d63c874f6bdfe7e907f)
> to the release branch that represents the cherry-picked content from
> [!214](https://community.opengroup.org/osdu/platform/system/reference/crs-conversion-service/-/merge_requests/214)
```
└─ _Root_
└─ org.opengroup.osdu.crs-converter-service.crs-converter-aks == 0.16.2-SNAPSHOT
└─ com.azure.spring.azure-spring-boot-starter-active-directory == 3.4.0
└─ org.springframework.boot.spring-boot-starter-webflux == 2.4.12
└─ org.springframework.spring-webflux == 5.3.12
```
</details>
<details><summary>:warning: Found OSDU dependencies from the previous release (these should be maintained at the latest full releases if possible)</summary>
```
├─ _Root_
│ ├─ org.opengroup.osdu.crs-converter-service.crs-converter-core == 0.16.2-SNAPSHOT
│ │ └─ org.opengroup.osdu.os-core-common == 0.15.0
│ ├─ org.opengroup.osdu.crs-converter-service.crs-converter-aks == 0.16.2-SNAPSHOT
│ │ ├─ org.opengroup.osdu.crs-converter-service.crs-converter-core == 0.16.2-SNAPSHOT
│ │ │ └─ org.opengroup.osdu.os-core-common == 0.15.0
│ │ └─ org.opengroup.osdu.core-lib-azure == 0.15.2
│ ├─ org.opengroup.osdu.crs-converter-service.crs-converter-gke == 0.16.2-SNAPSHOT
│ │ └─ org.opengroup.osdu.crs-converter-service.crs-converter-core == 0.16.2-SNAPSHOT
│ │ └─ org.opengroup.osdu.os-core-common == 0.15.0
│ ├─ org.opengroup.osdu.crs-converter-service.crs-converter-aws == 0.16.2-SNAPSHOT
│ │ └─ org.opengroup.osdu.crs-converter-service.crs-converter-core == 0.16.2-SNAPSHOT
│ │ └─ org.opengroup.osdu.os-core-common == 0.15.0
│ └─ org.opengroup.osdu.crs-converter-service.crs-converter-ocp == 0.16.2-SNAPSHOT
│ └─ org.opengroup.osdu.crs-converter-service.crs-converter-core == 0.16.2-SNAPSHOT
│ └─ org.opengroup.osdu.os-core-common == 0.15.0
└─ provider/crs-converter-gcp/crs-converter-gae/
└─ org.opengroup.osdu.crs-converter-service.crs-converter-gae == 0.16.2-SNAPSHOT
├─ org.opengroup.osdu.crs-converter-service.crs-converter-core == 0.16.2-SNAPSHOT
│ └─ org.opengroup.osdu.os-core-common == 0.15.0
└─ org.opengroup.osdu.core-lib-gcp == 0.15.0
├─ org.opengroup.osdu.osm == 0.15.0
├─ org.opengroup.osdu.oqm == 0.15.0
└─ org.opengroup.osdu.obm == 0.15.0
```
</details>
<details><summary>:warning: Found Release Candidate OSDU dependencies (these should be maintained at the latest full releases if possible)</summary>
```
└─ _Root_
└─ org.opengroup.osdu.crs-converter-service.crs-converter-ocp == 0.16.2-SNAPSHOT
└─ org.opengroup.osdu.os-core-lib-ibm == 0.16.0-rc1
```
</details>
<details><summary><i>Older Tags</i></summary>
[![pipeline status](https://community.opengroup.org/osdu/platform/system/reference/crs-conversion-service/badges/v0.16.1/pipeline.svg)](https://community.opengroup.org/osdu/platform/system/reference/crs-conversion-service/-/pipelines/v0.16.1/latest)
**v0.16.1 tag**
......@@ -1578,8 +1512,6 @@ However, if it is many commits ahead, it may be that the tag is blocked from pro
```
</details>
<details><summary><i>Older Tags</i></summary>
[![pipeline status](https://community.opengroup.org/osdu/platform/system/reference/crs-conversion-service/badges/v0.16.0/pipeline.svg)](https://community.opengroup.org/osdu/platform/system/reference/crs-conversion-service/-/pipelines/v0.16.0/latest)
**v0.16.0 tag**
| **Maven:** 0.16.0
......@@ -2164,155 +2096,20 @@ However, if it is many commits ahead, it may be that the tag is blocked from pro
## Storage
**Next Steps:**
| Actor | Action | Details |
| ------------------- | -------------------- | ------- |
| Release Coordinator | Apply tag, `v0.16.2` | |
[![pipeline status](https://community.opengroup.org/osdu/platform/system/storage/badges/release/0.16/pipeline.svg)](https://community.opengroup.org/osdu/platform/system/storage/-/pipelines/release/0.16/latest)
**release/0.16 branch**
_(Ahead by 4 commits)_
| **Maven:** 0.16.2-SNAPSHOT
_(Ahead by 1 commit)_
| **CI:** release/0.16
**Failures:** [azure_test](https://community.opengroup.org/osdu/platform/system/storage/-/jobs/1411069),
[fossa-check-notice](https://community.opengroup.org/osdu/platform/system/storage/-/jobs/1410914),
[aws-mongodb-containerize](https://community.opengroup.org/osdu/platform/system/storage/-/jobs/1410905)
[![pipeline status](https://community.opengroup.org/osdu/platform/system/storage/badges/v0.16.2/pipeline.svg)](https://community.opengroup.org/osdu/platform/system/storage/-/pipelines/v0.16.2/latest)
**v0.16.2 tag**
| **CI:** v0.16.3
**Ignored:** [container_scanning](https://community.opengroup.org/osdu/platform/system/storage/-/jobs/1410922),
[azure_code_coverage](https://community.opengroup.org/osdu/platform/system/storage/-/jobs/1410900)
_Pipeline was still running when this document was generated._
**Includes Remaining Development MRs:** [!462](osdu/platform/system/storage!462) / [!506](osdu/platform/system/storage!506)
<details><summary><i>Dependencies</i></summary>
| Maven Dependencies | _Root_ | provider/storage-aws/src/main/ComplianceTrigger/ComplianceTriggerFunction/ComplianceTriggerFunction/ | testing/ |
| ------------------------------------------------------- | ---------------------- | ---------------------------------------------------------------------------------------------------- | --------------- |
| core-lib-azure | 0.16.2 | | |
| core-lib-gcp | 0.16.0-rc1 | | |
| os-core-lib-aws | 0.16.1 | 0.14.0-rc2 | 0.14.0-rc2 |
| obm | 0.15.0 | | |
| oqm | 0.15.0 | | |
| os-core-common | 0.15.0 | 0.13.0 | 0.13.0 |
| os-core-lib-ibm | 0.16.0-rc1 | | 0.13.0 |
| osm | 0.15.0 | | |
| (3rd Party) com.fasterxml.jackson.core.jackson-databind | 2.13.2.2 | 2.6.7.2 | 2.8.1, 2.13.2.2 |
| (3rd Party) org.apache.logging.log4j.log4j-api | 2.17.1 | 2.13.3 | 2.17.1 |
| (3rd Party) org.apache.logging.log4j.log4j-to-slf4j | 2.17.1 | 2.13.3 | 2.17.1 |
| (3rd Party) org.springframework.spring-webflux | 5.3.22 | | |
| (3rd Party) org.springframework.spring-webmvc | 5.3.22, 5.1.19.RELEASE | 5.3.12 | 5.3.12 |
</details>
<details><summary>:information_source: Found Old OSDU Release dependencies (these should be upgraded to the latest release during the next milestone)</summary>
```
├─ provider/storage-aws/src/main/ComplianceTrigger/ComplianceTriggerFunction/ComplianceTriggerFunction/
│ └─ compliance.compliance == 0.16.2-SNAPSHOT
│ ├─ org.opengroup.osdu.core.aws.os-core-lib-aws == 0.14.0-rc2
│ └─ org.opengroup.osdu.os-core-common == 0.13.0
└─ testing/
├─ org.opengroup.osdu.storage.storage-test-core == 0.16.2-SNAPSHOT
│ └─ org.opengroup.osdu.os-core-common == 0.13.0
├─ org.opengroup.osdu.storage.storage-test-aws == 0.16.2-SNAPSHOT
│ ├─ org.opengroup.osdu.core.aws.os-core-lib-aws == 0.14.0-rc2
│ └─ org.opengroup.osdu.os-core-common == 0.13.0
├─ org.opengroup.osdu.storage.storage-test-azure == 0.16.2-SNAPSHOT
│ └─ org.opengroup.osdu.storage.storage-test-core == 0.16.2-SNAPSHOT
│ └─ org.opengroup.osdu.os-core-common == 0.13.0
├─ org.opengroup.osdu.storage.storage-test-gcp == 0.16.2-SNAPSHOT
│ └─ org.opengroup.osdu.storage.storage-test-core == 0.16.2-SNAPSHOT
│ └─ org.opengroup.osdu.os-core-common == 0.13.0
├─ org.opengroup.osdu.storage.storage-test-ibm == 0.16.2-SNAPSHOT
│ ├─ org.opengroup.osdu.os-core-lib-ibm == 0.13.0
│ └─ org.opengroup.osdu.os-core-common == 0.13.0
└─ org.opengroup.osdu.storage.storage-test-anthos == 0.16.2-SNAPSHOT
└─ org.opengroup.osdu.storage.storage-test-core == 0.16.2-SNAPSHOT
└─ org.opengroup.osdu.os-core-common == 0.13.0
```
</details>
<details><summary>:information_source: Found Vulnerable Spring MVC dependency (<5.2.20 || >=5.3.0 <5.3.18)</summary>
```
├─ _Root_
│ ├─ org.opengroup.osdu.storage-byoc == 0.16.2-SNAPSHOT
│ │ └─ org.opengroup.osdu.storage-core == 0.16.2-SNAPSHOT
│ │ └─ org.springframework.spring-webmvc == 5.1.19.RELEASE
│ └─ org.opengroup.osdu.storage-ibm == 0.16.2-SNAPSHOT
│ └─ org.opengroup.osdu.storage-core == 0.16.2-SNAPSHOT
│ └─ org.springframework.spring-webmvc == 5.1.19.RELEASE
├─ provider/storage-aws/src/main/ComplianceTrigger/ComplianceTriggerFunction/ComplianceTriggerFunction/
│ └─ compliance.compliance == 0.16.2-SNAPSHOT
│ └─ org.opengroup.osdu.os-core-common == 0.13.0
│ └─ org.springframework.boot.spring-boot-starter-web == 2.4.12
│ └─ org.springframework.spring-webmvc == 5.3.12
└─ testing/
├─ org.opengroup.osdu.storage.storage-test-core == 0.16.2-SNAPSHOT
│ └─ org.opengroup.osdu.os-core-common == 0.13.0
│ └─ org.springframework.boot.spring-boot-starter-web == 2.4.12
│ └─ org.springframework.spring-webmvc == 5.3.12
├─ org.opengroup.osdu.storage.storage-test-aws == 0.16.2-SNAPSHOT
│ └─ org.opengroup.osdu.os-core-common == 0.13.0
│ └─ org.springframework.boot.spring-boot-starter-web == 2.4.12
│ └─ org.springframework.spring-webmvc == 5.3.12
├─ org.opengroup.osdu.storage.storage-test-azure == 0.16.2-SNAPSHOT
│ └─ org.opengroup.osdu.storage.storage-test-core == 0.16.2-SNAPSHOT
│ └─ org.opengroup.osdu.os-core-common == 0.13.0
│ └─ org.springframework.boot.spring-boot-starter-web == 2.4.12
│ └─ org.springframework.spring-webmvc == 5.3.12
├─ org.opengroup.osdu.storage.storage-test-gcp == 0.16.2-SNAPSHOT
│ └─ org.opengroup.osdu.storage.storage-test-core == 0.16.2-SNAPSHOT
│ └─ org.opengroup.osdu.os-core-common == 0.13.0
│ └─ org.springframework.boot.spring-boot-starter-web == 2.4.12
│ └─ org.springframework.spring-webmvc == 5.3.12
├─ org.opengroup.osdu.storage.storage-test-ibm == 0.16.2-SNAPSHOT
│ └─ org.opengroup.osdu.os-core-common == 0.13.0
│ └─ org.springframework.boot.spring-boot-starter-web == 2.4.12
│ └─ org.springframework.spring-webmvc == 5.3.12
└─ org.opengroup.osdu.storage.storage-test-anthos == 0.16.2-SNAPSHOT
└─ org.opengroup.osdu.storage.storage-test-core == 0.16.2-SNAPSHOT
└─ org.opengroup.osdu.os-core-common == 0.13.0
└─ org.springframework.boot.spring-boot-starter-web == 2.4.12
└─ org.springframework.spring-webmvc == 5.3.12
```
</details>
<details><summary>:warning: Found OSDU dependencies from the previous release (these should be maintained at the latest full releases if possible)</summary>
```
└─ _Root_
├─ org.opengroup.osdu.storage-core == 0.16.2-SNAPSHOT
│ └─ org.opengroup.osdu.os-core-common == 0.15.0
├─ org.opengroup.osdu.storage-gcp == 0.16.2-SNAPSHOT
│ ├─ org.opengroup.osdu.core-lib-gcp == 0.16.0-rc1
│ │ ├─ org.opengroup.osdu.osm == 0.15.0
│ │ ├─ org.opengroup.osdu.oqm == 0.15.0
│ │ └─ org.opengroup.osdu.obm == 0.15.0
│ └─ org.opengroup.osdu.os-core-common == 0.15.0
├─ org.opengroup.osdu.storage-byoc == 0.16.2-SNAPSHOT
│ └─ org.opengroup.osdu.os-core-common == 0.15.0
├─ org.opengroup.osdu.storage-azure == 0.16.2-SNAPSHOT
│ └─ org.opengroup.osdu.os-core-common == 0.15.0
├─ org.opengroup.osdu.storage-aws == 0.16.2-SNAPSHOT
│ └─ org.opengroup.osdu.os-core-common == 0.15.0
└─ org.opengroup.osdu.storage-ibm == 0.16.2-SNAPSHOT
└─ org.opengroup.osdu.storage-core == 0.16.2-SNAPSHOT
└─ org.opengroup.osdu.os-core-common == 0.15.0
```
</details>
<details><summary>:warning: Found Release Candidate OSDU dependencies (these should be maintained at the latest full releases if possible)</summary>
```
└─ _Root_
├─ org.opengroup.osdu.storage-gcp == 0.16.2-SNAPSHOT
│ └─ org.opengroup.osdu.core-lib-gcp == 0.16.0-rc1
└─ org.opengroup.osdu.storage-ibm == 0.16.2-SNAPSHOT
└─ org.opengroup.osdu.os-core-lib-ibm == 0.16.0-rc1
```
</details>
<details><summary><i>Older Tags</i></summary>
[![pipeline status](https://community.opengroup.org/osdu/platform/system/storage/badges/v0.16.1/pipeline.svg)](https://community.opengroup.org/osdu/platform/system/storage/-/pipelines/v0.16.1/latest)
**v0.16.1 tag**
......@@ -2455,8 +2252,6 @@ However, if it is many commits ahead, it may be that the tag is blocked from pro
```
</details>
<details><summary><i>Older Tags</i></summary>
[![pipeline status](https://community.opengroup.org/osdu/platform/system/storage/badges/v0.16.0/pipeline.svg)](https://community.opengroup.org/osdu/platform/system/storage/-/pipelines/v0.16.0/latest)
**v0.16.0 tag**
| **Maven:** 0.16.0
......@@ -4215,12 +4010,3 @@ However, if it is many commits ahead, it may be that the tag is blocked from pro
</details>
</details>
# Next Steps Summary
## Release Coordinator
| Service | Action | Details |
| -------------- | -------------------- | ------- |
| CRS Conversion | Apply tag, `v0.16.2` | |
| Storage | Apply tag, `v0.16.2` | |