Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Switch to latest gradle and update dependencies #118

Merged
merged 3 commits into from Feb 5, 2022
Merged

Switch to latest gradle and update dependencies #118

merged 3 commits into from Feb 5, 2022

Conversation

deiteris
Copy link
Member

@deiteris deiteris commented Feb 5, 2022

Successfully builds and works (tested most of the functionality, so nothing seems to be borken, but feel free to re-check). Few questions/notes though:

  1. I removed com.illposed.osc:javaosc-core because it's not used anywhere + introduces log4j vulnerabilities (see https://mvnrepository.com/artifact/com.illposed.osc/javaosc-core/0.8). Do we need it at all?
  2. Do we need com.google.guava:guava anywhere? Removing it from this project and slime-java-commons would reduce the binary size by 4-5mb and doesn't seem to affect anything.
  3. org.slf4j:slf4j-simple was added since I removed com.illposed.osc:javaosc-core that was exposing logging via slf4j.
  4. We still target java 8, while java 11 is our minimum. Should we change targetCompatibility and sourceCompatibility?
  5. org.yaml:snakeyaml was removed since it is already provided by slime-java-commons.

Related PR: Eirenliel/slime-java-commons#3

@Eirenliel
Copy link
Member

com.illposed.osc was planned to use for future OSC support. I don't think we are vulnerable to l4j, there aren't really any third-party data being processed?

@deiteris
Copy link
Member Author

deiteris commented Feb 5, 2022

Okay, then I'll add it back. We might want to keep an eye on this issue anyway.
hoijui/JavaOSC#62

@Eirenliel Eirenliel merged commit 658fd29 into SlimeVR:main Feb 5, 2022
@hoijui
Copy link

hoijui commented Mar 18, 2022

Okay, then I'll add it back. We might want to keep an eye on this issue anyway. hoijui/JavaOSC#62

It's fixed now; there is no more logging implementation in com.illposed.osc:javaosc-core anymore, as it should always have been, sorry!

@Eirenliel
Copy link
Member

nice @hoijui 😄 we should probably bump our version to the latest..

@hoijui
Copy link

hoijui commented Mar 19, 2022

ohh.. it is not released yet. would you need that?
I just released 0.9-SNAPSHOT for testing, if that works for you.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants