Changes

Page history
Update GitLab 15 Breaking Changes authored by Ben Prescott (ex-GitLab)'s avatar Ben Prescott (ex-GitLab)
Show whitespace changes
Inline Side-by-side
GitLab-15-Breaking-Changes.md
View page @ a9ef67b7
...@@ -653,11 +653,9 @@ Announced in 14.10 ...@@ -653,11 +653,9 @@ Announced in 14.10
For Dependency Scanning, the default version of Java that the scanner expects will be updated from 11 to 17. Java 17 is [the most up-to-date Long Term Support (LTS) version](https://en.wikipedia.org/wiki/Java_version_history). Dependency Scanning continues to support the same [range of versions (8, 11, 13, 14, 15, 16, 17)](https://docs.gitlab.com/ee/user/application_security/dependency_scanning/#supported-languages-and-package-managers), only the default version is changing. If your project uses the previous default of Java 11, be sure to [set the `DS_JAVA_VERSION` variable to match](https://docs.gitlab.com/ee/user/application_security/dependency_scanning/#configuring-specific-analyzers-used-by-dependency-scanning). Please note that consequently the default version of Gradle is now 7.3.3. For Dependency Scanning, the default version of Java that the scanner expects will be updated from 11 to 17. Java 17 is [the most up-to-date Long Term Support (LTS) version](https://en.wikipedia.org/wiki/Java_version_history). Dependency Scanning continues to support the same [range of versions (8, 11, 13, 14, 15, 16, 17)](https://docs.gitlab.com/ee/user/application_security/dependency_scanning/#supported-languages-and-package-managers), only the default version is changing. If your project uses the previous default of Java 11, be sure to [set the `DS_JAVA_VERSION` variable to match](https://docs.gitlab.com/ee/user/application_security/dependency_scanning/#configuring-specific-analyzers-used-by-dependency-scanning). Please note that consequently the default version of Gradle is now 7.3.3.
#### :ballot_box_with_check: find projects that might be affected :gem: :gear: [-TODO-] #### :ballot_box_with_check: DS projects can be located via their artifacs :gem:
- Might be possible to locate dependency scanning jobs by name [use the same code aas above to locate affected projects](#ballot_box_with_check-rails-code-to-find-ds-projects-gem)
- Might then be possible to will isolate affected projects to check for this environment variable
- If they're using old java, they'll need to set `DS_JAVA_VERSION`
--- ---
...@@ -670,11 +668,9 @@ For those using Dependency Scanning for Python projects, we are removing support ...@@ -670,11 +668,9 @@ For those using Dependency Scanning for Python projects, we are removing support
- [Issue](https://gitlab.com/gitlab-org/gitlab/-/issues/351503) - [Issue](https://gitlab.com/gitlab-org/gitlab/-/issues/351503)
#### :ballot_box_with_check: find projects that might be affected :gem: :gear: [-TODO-] #### :ballot_box_with_check: DS projects can be located via their artifacs :gem:
- Might be possible to locate dependency scanning jobs (gemnasium) by name [use the same code aas above to locate affected projects](#ballot_box_with_check-rails-code-to-find-ds-projects-gem)
- Might then be possible to will isolate affected projects to check for this environment variable
- Python projects might be affected?
--- ---
...@@ -689,10 +685,9 @@ If you have explicitly excluded retire.js using the `DS_EXCLUDED_ANALYZERS` vari ...@@ -689,10 +685,9 @@ If you have explicitly excluded retire.js using the `DS_EXCLUDED_ANALYZERS` vari
- [Issue](https://gitlab.com/gitlab-org/gitlab/-/issues/289830) - [Issue](https://gitlab.com/gitlab-org/gitlab/-/issues/289830)
#### :ballot_box_with_check: find projects that might be affected :gem: :gear: [-TODO-] #### :ballot_box_with_check: DS projects can be located via their artifacs :gem:
- Might be possible to locate dependency scanning jobs (`retire-js-dependency_scanning`) by name [use the same code aas above to locate affected projects](#ballot_box_with_check-rails-code-to-find-ds-projects-gem)
- Might then be possible to will isolate affected projects to check for this environment variable
--- ---
...@@ -707,10 +702,9 @@ If you have explicitly excluded bundler-audit using the `DS_EXCLUDED_ANALYZERS` ...@@ -707,10 +702,9 @@ If you have explicitly excluded bundler-audit using the `DS_EXCLUDED_ANALYZERS`
- [Issue](https://gitlab.com/gitlab-org/gitlab/-/issues/347491) - [Issue](https://gitlab.com/gitlab-org/gitlab/-/issues/347491)
#### :ballot_box_with_check: find projects that might be affected :gem: :gear: [-TODO-] #### :ballot_box_with_check: DS projects can be located via their artifacs :gem:
- Might be possible to locate dependency scanning jobs (`bundler-audit-dependency_scanning`) by name [use the same code aas above to locate affected projects](#ballot_box_with_check-rails-code-to-find-ds-projects-gem)
- Might then be possible to will isolate affected projects to check for this environment variable
--- ---
... ...
......