Uploaded image for project: 'SonarLint For Eclipse'
  1. SonarLint For Eclipse
  2. SLE-485

Replace minimal-json dependency

    XMLWordPrintable

    Details

    • Type: Task
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 7.4
    • Component/s: None
    • Labels:
      None

      Description

      minimal-json is unmaintained. Maybe come back to gson if there is no problem with OSGi

      We should also take the opportunity to stop signing ourselves third party libraries like minimal-json, because we are not the owner of the code anyway. Also, we end up with the same version of minimal-json in different SonarLint repositories, but with a different signature.

      For example:
      https://binaries.sonarsource.com/SonarLint-for-Eclipse/releases/7.2.1.42550/plugins/minimal-json_0.9.5.jar signature expires on 2023-10-19
      while
      https://binaries.sonarsource.com/SonarLint-for-Eclipse/releases/6.1.0.36269/plugins/minimal-json_0.9.5.jar signature already expired on 2021-10-16
      and we don't control the JAR that p2 will download.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              julien.henry Julien Henry
              Reporter:
              julien.henry Julien Henry
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: