This repository has been archived by the owner on Nov 29, 2024. It is now read-only.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
https://github.com/h2oai/mlops/issues/208
Motivation
The sole purpose of this PR is to minimize JAVA MOJO scorer vulnerability, in order to do that Several challenges have been solved.
Upgrade to spring boot 3. However due to the diversity of multiple different subprojects coexist in the same repo and their dependencies tightly coupled through the entire gradle multi-project flows, plus the necessity to update JAVA from 8 to 17 (https://spring.io/blog/2022/05/24/preparing-for-spring-boot-3-0/#upgrade-to-java-17).
The scope of changes is not feasible to be further minimize. Though the scope of changes is not common practice, but the outcome is no question will outweight the rest.
Following changes contribute the PR becomes quick a huge milestone.
Scope of changes
init.gradle
is made, until a permanent solution been decided (either remove jdbc scorer or upgrade to scala 2.13) the current workround serves the purpose of this PR.Vulnerability Result
E2E
http://jenkins:8080/view/Model%20Ops/job/mlops/job/environments-helm/job/jh-helm/job/manual/job/test-golang-21/11/allure/
Console