GH-782: Implement ability to use sanctioned executable paths#783
Conversation
ad9a5d8 to
0b388f4
Compare
|
Windows failures are caused by https://bugs.openjdk.org/browse/JDK-8315405. Looks like I'm going to have to maybe make a separate fix to deal with this first to reduce directory name length, or have a caveat that long path names are not supported on Windows. One to do separately. I believe https://bugs.openjdk.org/browse/JDK-8348664 would avoid this eventually should it get implemented. |
aeeed70 to
a68234f
Compare
a68234f to
1362f4e
Compare
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #783 +/- ##
==========================================
+ Coverage 91.60% 91.80% +0.21%
==========================================
Files 58 60 +2
Lines 1772 1817 +45
Branches 118 121 +3
==========================================
+ Hits 1623 1668 +45
Misses 111 111
Partials 38 38
🚀 New features to boost your workflow:
|
If you operate in an overly locked-down corporate environment that disallows running shell/batch scripts or native executables outside sanctioned locations on your local file system, you can specify the path here either via this configuration parameter or via a property such that any executables are first moved to a directory within this location. This is designed to be able to be used within a Maven profile if desired.
1362f4e to
359c74f
Compare
6071d83 to
933c08b
Compare
|
@ascopes any plans to release this or is there still something blocking it? |
|
A couple of unit tests still need writing, but I probably wont have time to look at this until Saturday as I am working all week. Edit: apologies if this sent several times. GitHub appears to be playing up. |
|
No hurry. ;)
Il mar 2 set 2025, 10:07 Ash ***@***.***> ha scritto:
… *ascopes* left a comment (ascopes/protobuf-maven-plugin#783)
<#783 (comment)>
A couple of unit tests still need writing, but I probably wont have time
to look at this until Saturday as I am working all week.
—
Reply to this email directly, view it on GitHub
<#783 (comment)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/ACAZGWHGSNAE6UBBN5YDMED3QVF3HAVCNFSM6AAAAACFGVZCAWVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZTENBUGI2DONZQG4>
.
You are receiving this because you commented.Message ID:
***@***.***>
|
|
@cdprete what I will do for now is merge this as the test I need to write is already being covered by an integration test. I'll get 3.9.0 released now and then finish that bit when I have time. That should unblock you. Expect a release on Maven Central by approx 8:00 GMT today 👍🏻 Thanks for baring with me. |
|
Thanks to you for fixing this so fast. 😀
Il mer 3 set 2025, 09:16 Ash ***@***.***> ha scritto:
… *ascopes* left a comment (ascopes/protobuf-maven-plugin#783)
<#783 (comment)>
@cdprete <https://github.com/cdprete> what I will do for now is merge
this as the test I need to write is already being covered by an integration
test. I'll get 3.9.0 released now and then finish that bit when I have time.
That should unblock you. Expect a release on Maven Central by approx 8:00
GMT today 👍🏻
Thanks for baring with me.
—
Reply to this email directly, view it on GitHub
<#783 (comment)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/ACAZGWEWDX4BIJ5TLDYKVYD3Q2ITHAVCNFSM6AAAAACFGVZCAWVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZTENBXHE4DKMJUGQ>
.
You are receiving this because you were mentioned.Message ID:
***@***.***>
|
…to 3.9.0 [skip ci] Bumps [io.github.ascopes:protobuf-maven-plugin](https://github.com/ascopes/protobuf-maven-plugin) from 3.8.0 to 3.9.0. Release notes *Sourced from [io.github.ascopes:protobuf-maven-plugin's releases](https://github.com/ascopes/protobuf-maven-plugin/releases).* > v3.9.0 > ------ > > What's Changed > -------------- > > * Log non-fatal dependency warnings as debug warnings by [`@ascopes`](https://github.com/ascopes) in [ascopes/protobuf-maven-plugin#787](https://redirect.github.com/ascopes/protobuf-maven-plugin/pull/787) > * [GH-782](https://redirect.github.com/ascopes/protobuf-maven-plugin/issues/782): Implement ability to use sanctioned executable paths by [`@ascopes`](https://github.com/ascopes) in [ascopes/protobuf-maven-plugin#783](https://redirect.github.com/ascopes/protobuf-maven-plugin/pull/783) > > **Full Changelog**: <ascopes/protobuf-maven-plugin@v3.8.2...v3.9.0> > > v3.8.2 > ------ > > What's Changed > -------------- > > * Enable parallel test execution in junit-platform.properties by [`@ascopes`](https://github.com/ascopes) in [ascopes/protobuf-maven-plugin#779](https://redirect.github.com/ascopes/protobuf-maven-plugin/pull/779) > * Fix a bug in digest hex representations for byte values <10 by [`@ascopes`](https://github.com/ascopes) in [ascopes/protobuf-maven-plugin#784](https://redirect.github.com/ascopes/protobuf-maven-plugin/pull/784) > * At the time of writing, two OpenJDK bugs exist that cause us hassle on Windows by [`@ascopes`](https://github.com/ascopes) in [ascopes/protobuf-maven-plugin#786](https://redirect.github.com/ascopes/protobuf-maven-plugin/pull/786) > > **Full Changelog**: <ascopes/protobuf-maven-plugin@v3.8.1...v3.8.2> > > v3.8.1 > ------ > > What's Changed > -------------- > > * Bump com.google.protobuf:protobuf-bom from 4.31.1 to 4.32.0 by [`@dependabot`](https://github.com/dependabot)[bot] in [ascopes/protobuf-maven-plugin#767](https://redirect.github.com/ascopes/protobuf-maven-plugin/pull/767) > * Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.11.2 to 3.11.3 by [`@dependabot`](https://github.com/dependabot)[bot] in [ascopes/protobuf-maven-plugin#768](https://redirect.github.com/ascopes/protobuf-maven-plugin/pull/768) > * Bump kotlin.version from 2.2.0 to 2.2.10 in /protobuf-maven-plugin/src/it/setup by [`@dependabot`](https://github.com/dependabot)[bot] in [ascopes/protobuf-maven-plugin#770](https://redirect.github.com/ascopes/protobuf-maven-plugin/pull/770) > * Bump org.mockito:mockito-bom from 5.18.0 to 5.19.0 by [`@dependabot`](https://github.com/dependabot)[bot] in [ascopes/protobuf-maven-plugin#769](https://redirect.github.com/ascopes/protobuf-maven-plugin/pull/769) > * Fix parameter naming in IncrementalCacheManager.java by [`@ascopes`](https://github.com/ascopes) in [ascopes/protobuf-maven-plugin#771](https://redirect.github.com/ascopes/protobuf-maven-plugin/pull/771) > * [GH-772](https://redirect.github.com/ascopes/protobuf-maven-plugin/issues/772): Pin resolver API to v1.9.24 by [`@ascopes`](https://github.com/ascopes) in [ascopes/protobuf-maven-plugin#773](https://redirect.github.com/ascopes/protobuf-maven-plugin/pull/773) > * Bump actions/setup-java from 4 to 5 by [`@dependabot`](https://github.com/dependabot)[bot] in [ascopes/protobuf-maven-plugin#774](https://redirect.github.com/ascopes/protobuf-maven-plugin/pull/774) > * Group dependabot PRs to a single PR by [`@ascopes`](https://github.com/ascopes) in [ascopes/protobuf-maven-plugin#778](https://redirect.github.com/ascopes/protobuf-maven-plugin/pull/778) > * Bump io.grpc:grpc-bom from 1.74.0 to 1.75.0 in /protobuf-maven-plugin/src/it/setup by [`@dependabot`](https://github.com/dependabot)[bot] in [ascopes/protobuf-maven-plugin#777](https://redirect.github.com/ascopes/protobuf-maven-plugin/pull/777) > * Bump com.google.api.grpc:proto-google-common-protos from 2.60.0 to 2.61.0 in /protobuf-maven-plugin/src/it/setup by [`@dependabot`](https://github.com/dependabot)[bot] in [ascopes/protobuf-maven-plugin#776](https://redirect.github.com/ascopes/protobuf-maven-plugin/pull/776) > * Bump actions/upload-pages-artifact from 3 to 4 by [`@dependabot`](https://github.com/dependabot)[bot] in [ascopes/protobuf-maven-plugin#775](https://redirect.github.com/ascopes/protobuf-maven-plugin/pull/775) > > **Full Changelog**: <ascopes/protobuf-maven-plugin@v3.8.0...v3.8.1> Commits * [`f9a5918`](ascopes/protobuf-maven-plugin@f9a5918) [maven-release-plugin] prepare release v3.9.0 * [`c8d66be`](ascopes/protobuf-maven-plugin@c8d66be) Merge pull request [#783](https://redirect.github.com/ascopes/protobuf-maven-plugin/issues/783) from ascopes/feature/gh-782-sanctioned-executable-paths * [`933c08b`](ascopes/protobuf-maven-plugin@933c08b) [GH-782](https://redirect.github.com/ascopes/protobuf-maven-plugin/issues/782): Update user guide with details on using sanctioned executable paths * [`606afc3`](ascopes/protobuf-maven-plugin@606afc3) [GH-782](https://redirect.github.com/ascopes/protobuf-maven-plugin/issues/782): Add test for sanctionedExecutablePath to AbstractGenerateMojo tests * [`980fcbe`](ascopes/protobuf-maven-plugin@980fcbe) [GH-782](https://redirect.github.com/ascopes/protobuf-maven-plugin/issues/782): Document that sanctioned executables reside in subdirectories * [`a5642e8`](ascopes/protobuf-maven-plugin@a5642e8) [GH-782](https://redirect.github.com/ascopes/protobuf-maven-plugin/issues/782): Fix logged path for sanctioned executable paths * [`359c74f`](ascopes/protobuf-maven-plugin@359c74f) [GH-782](https://redirect.github.com/ascopes/protobuf-maven-plugin/issues/782): Implement ability to use sanctioned executable paths. * [`07025ed`](ascopes/protobuf-maven-plugin@07025ed) Merge pull request [#787](https://redirect.github.com/ascopes/protobuf-maven-plugin/issues/787) from ascopes/task/log-non-fatal-dependency-warnings-a... * [`41fc11b`](ascopes/protobuf-maven-plugin@41fc11b) Log non-fatal dependency warnings as debug warnings * [`1146a23`](ascopes/protobuf-maven-plugin@1146a23) [maven-release-plugin] prepare for next development iteration * Additional commits viewable in [compare view](ascopes/protobuf-maven-plugin@v3.8.0...v3.9.0) [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
If you operate in an overly locked-down corporate environment that disallows running shell/batch scripts or native executables outside sanctioned locations on your local file system, you can specify the path here either via this configuration parameter or via a property such that any executables are first moved to a directory within this location. This is designed to be able to be used within a Maven profile if desired.
Addresses GH-782.
TODO:
AbstractGenerateMojounit testsTemporarySpaceunit testsAbstractTemporaryLocationProviderunit testsSanctionedExecutableTransformerunit tests