Update GitLab 15 Breaking Changes authored by Ben Prescott (ex-GitLab)'s avatar Ben Prescott (ex-GitLab)
......@@ -653,11 +653,9 @@ Announced in 14.10
For Dependency Scanning, the default version of Java that the scanner expects will be updated from 11 to 17. Java 17 is [the most up-to-date Long Term Support (LTS) version](https://en.wikipedia.org/wiki/Java_version_history). Dependency Scanning continues to support the same [range of versions (8, 11, 13, 14, 15, 16, 17)](https://docs.gitlab.com/ee/user/application_security/dependency_scanning/#supported-languages-and-package-managers), only the default version is changing. If your project uses the previous default of Java 11, be sure to [set the `DS_JAVA_VERSION` variable to match](https://docs.gitlab.com/ee/user/application_security/dependency_scanning/#configuring-specific-analyzers-used-by-dependency-scanning). Please note that consequently the default version of Gradle is now 7.3.3.
#### :ballot_box_with_check: find projects that might be affected :gem: :gear: [-TODO-]
#### :ballot_box_with_check: DS projects can be located via their artifacs :gem:
- Might be possible to locate dependency scanning jobs by name
- Might then be possible to will isolate affected projects to check for this environment variable
- If they're using old java, they'll need to set `DS_JAVA_VERSION`
[use the same code aas above to locate affected projects](#ballot_box_with_check-rails-code-to-find-ds-projects-gem)
---
......@@ -670,11 +668,9 @@ For those using Dependency Scanning for Python projects, we are removing support
- [Issue](https://gitlab.com/gitlab-org/gitlab/-/issues/351503)
#### :ballot_box_with_check: find projects that might be affected :gem: :gear: [-TODO-]
#### :ballot_box_with_check: DS projects can be located via their artifacs :gem:
- Might be possible to locate dependency scanning jobs (gemnasium) by name
- Might then be possible to will isolate affected projects to check for this environment variable
- Python projects might be affected?
[use the same code aas above to locate affected projects](#ballot_box_with_check-rails-code-to-find-ds-projects-gem)
---
......@@ -689,10 +685,9 @@ If you have explicitly excluded retire.js using the `DS_EXCLUDED_ANALYZERS` vari
- [Issue](https://gitlab.com/gitlab-org/gitlab/-/issues/289830)
#### :ballot_box_with_check: find projects that might be affected :gem: :gear: [-TODO-]
#### :ballot_box_with_check: DS projects can be located via their artifacs :gem:
- Might be possible to locate dependency scanning jobs (`retire-js-dependency_scanning`) by name
- Might then be possible to will isolate affected projects to check for this environment variable
[use the same code aas above to locate affected projects](#ballot_box_with_check-rails-code-to-find-ds-projects-gem)
---
......@@ -707,10 +702,9 @@ If you have explicitly excluded bundler-audit using the `DS_EXCLUDED_ANALYZERS`
- [Issue](https://gitlab.com/gitlab-org/gitlab/-/issues/347491)
#### :ballot_box_with_check: find projects that might be affected :gem: :gear: [-TODO-]
#### :ballot_box_with_check: DS projects can be located via their artifacs :gem:
- Might be possible to locate dependency scanning jobs (`bundler-audit-dependency_scanning`) by name
- Might then be possible to will isolate affected projects to check for this environment variable
[use the same code aas above to locate affected projects](#ballot_box_with_check-rails-code-to-find-ds-projects-gem)
---
......
......