Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Release #278

Merged
merged 26 commits into from
Apr 13, 2020
Merged

Release #278

merged 26 commits into from
Apr 13, 2020

Conversation

landonreed
Copy link
Contributor

@landonreed landonreed commented Apr 13, 2020

Checklist

  • Appropriate branch selected (all PRs must first be merged to dev before they can be merged to master)
  • Any modified or new methods or classes have helpful JavaDoc and code is thoroughly commented
  • The description lists all applicable issues this PR seeks to resolve
  • The description lists any configuration setting(s) that differ from the default settings
  • All tests and CI builds passing
  • The description lists all relevant PRs included in this release (remove this if not merging to master)
  • Code coverage does not significantly worsen (ideally it improves) (remove this if not merging to master)

Description

Contains #279, #276, and #273.

JLLeitschuh and others added 22 commits February 10, 2020 23:27
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.

Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
…_dependencies

[SECURITY] Use HTTPS to resolve dependencies in Maven Build
Some modifications regarding passing additional FeedValidator classes are included.

BREAKING CHANGE: Change in the type of optional arguments for GTFS.validate and Feed.validate
Comment on lines 32 to 33
import java.util.List;
import java.util.function.BiFunction;
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Remove these tow unused imports.

Copy link
Collaborator

@binh-dam-ibigroup binh-dam-ibigroup left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

There is one last-minute unused import instance, but otherwise it is good for me.

@binh-dam-ibigroup
Copy link
Collaborator

I don't know what the deal is with the unresolved dependencies from the build.

The Conveyal maven repo appears to no longer exist, so the GeoJSON Jackson module is no longer
available.
Remove Conveyal geojson module to fix Travis build/dep issue
@codecov-io
Copy link

Codecov Report

Merging #278 into master will increase coverage by 0.28%.
The diff coverage is 96.92%.

Impacted file tree graph

@@             Coverage Diff              @@
##             master     #278      +/-   ##
============================================
+ Coverage     64.99%   65.27%   +0.28%     
- Complexity      866      879      +13     
============================================
  Files           134      135       +1     
  Lines          6725     6742      +17     
  Branches        789      794       +5     
============================================
+ Hits           4371     4401      +30     
+ Misses         2055     2040      -15     
- Partials        299      301       +2     
Impacted Files Coverage Δ Complexity Δ
src/main/java/com/conveyal/gtfs/GTFSMain.java 85.10% <ø> (ø) 6.00 <0.00> (ø)
.../java/com/conveyal/gtfs/util/json/JsonManager.java 55.55% <ø> (-1.59%) 2.00 <0.00> (ø)
...conveyal/gtfs/validator/ReversedTripValidator.java 8.77% <ø> (+0.43%) 3.00 <0.00> (ø)
src/main/java/com/conveyal/gtfs/loader/Feed.java 74.13% <66.66%> (-1.73%) 7.00 <0.00> (+1.00) ⬇️
...java/com/conveyal/gtfs/validator/MTCValidator.java 95.00% <95.00%> (ø) 10.00 <10.00> (?)
src/main/java/com/conveyal/gtfs/GTFS.java 55.55% <100.00%> (ø) 12.00 <0.00> (ø)
...java/com/conveyal/gtfs/error/NewGTFSErrorType.java 100.00% <100.00%> (ø) 2.00 <0.00> (ø)
src/main/java/com/conveyal/gtfs/model/Agency.java 71.42% <0.00%> (+2.04%) 2.00% <0.00%> (+1.00%)
...java/com/conveyal/gtfs/loader/EntityPopulator.java 91.22% <0.00%> (+6.43%) 27.00% <0.00%> (+1.00%)

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 94003ea...7c0af2a. Read the comment docs.

@landonreed landonreed merged commit e676228 into master Apr 13, 2020
@landonreed
Copy link
Contributor Author

🎉 This PR is included in version 6.0.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants