-
-
Notifications
You must be signed in to change notification settings - Fork 8.9k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Stapler 1.253 #3103
Stapler 1.253 #3103
Conversation
This pull request originates from a CloudBees employee. At CloudBees, we require that all pull requests be reviewed by other CloudBees employees before we seek to have the change accepted. If you want to learn more about our process please see this explanation. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🐝 for the integration, but the changelog entry could be improved a bit. E.g. the binary compatibility may worth mentioning
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There are Enforcer issues:
[WARNING] Rule 3: org.apache.maven.plugins.enforcer.RequireUpperBoundDeps failed with message:
Failed while enforcing RequireUpperBoundDeps. The error(s) are [
Require upper bound dependencies error for commons-codec:commons-codec:1.8 paths to dependency are:
+-org.jenkins-ci.main:jenkins-core:2.86-SNAPSHOT
+-commons-codec:commons-codec:1.8
and
+-org.jenkins-ci.main:jenkins-core:2.86-SNAPSHOT
+-org.jenkins-ci.main:cli:2.86-SNAPSHOT
+-commons-codec:commons-codec:1.4
and
+-org.jenkins-ci.main:jenkins-core:2.86-SNAPSHOT
+-commons-httpclient:commons-httpclient:3.1-jenkins-1
+-commons-codec:commons-codec:1.8
and
+-org.jenkins-ci.main:jenkins-core:2.86-SNAPSHOT
+-org.acegisecurity:acegi-security:1.0.7
+-commons-codec:commons-codec:1.3
and
+-org.jenkins-ci.main:jenkins-core:2.86-SNAPSHOT
+-org.kohsuke.stapler:stapler-jrebel:1.253
+-org.kohsuke.stapler:stapler:1.253
+-commons-codec:commons-codec:1.9
]
Commons Codec 1.9 has been introduced by me in jenkinsci/stapler@4d59a74, upper bounds in Stapler |
I did it in the Stapler Core because of the following:
|
@@ -70,7 +70,7 @@ public void generateResponse(StaplerRequest req, StaplerResponse res, Object nod | |||
final ByteArrayOutputStream baos = new ByteArrayOutputStream(); | |||
StaplerResponse temp = new ResponseImpl(req.getStapler(), new HttpServletResponseWrapper(res) { | |||
@Override public ServletOutputStream getOutputStream() throws IOException { | |||
return new FilterServletOutputStream(baos); | |||
return new FilterServletOutputStream(baos, super.getOutputStream()); |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Could it cause issues for downstream deps?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I guess? Ask @jtnord who requested this.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
See discussion: jenkinsci/stapler#131 (comment)
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
this is the wrong change IIUC. that wraps the output stream of the response - which will return false information.
The correct fix is https://github.com/jenkinsci/jenkins/pull/3033/files#diff-8991f368b3f7346bf83c7081c719c809R118
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
FilterServletOutputStream is likely to be removed in a future version - its only there to do home grown GZIP which is causing more harm that good, and other places have abused it to do things like this...
I beleive this is missing other changes for dependencies to align with stapler and servlet 3.x spec |
As I commented on the upstream PR to stapler :`
|
OK. |
Changelog and diffs.
Also Commons Codec changelog.
Proposed changelog entries
Desired reviewers
@jenkinsci/code-reviewers @reviewbybees