Skip to content

Tags: openrewrite/rewrite-third-party

Tags

v0.49.0

Toggle v0.49.0's commit message
Update Gradle wrapper to 9.8.1

Co-authored-by: Moderne <team@moderne.io>

v0.48.0

Toggle v0.48.0's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
[Auto] Aggregational Quarkus migration recipes as of 2026-09-21T0738 (#…

…105)

Co-authored-by: timtebeek <1027334+timtebeek@users.noreply.github.com>

v0.47.0

Toggle v0.47.0's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Resolve org.openrewrite build plugins from the Code Genome Project (#103

)

Co-authored-by: Moderne <team@moderne.io>

v0.46.0

Toggle v0.46.0's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
[Auto] Aggregational Quarkus migration recipes as of 2026-08-25T1122 (#…

…102)

Co-authored-by: timtebeek <1027334+timtebeek@users.noreply.github.com>

v0.45.0

Toggle v0.45.0's commit message
Update Gradle wrapper to 9.7.0

Co-authored-by: Moderne <team@moderne.io>

v0.44.0

Toggle v0.44.0's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Convert jackson-databind and httpcore5 version pins to floor-only con…

…straints (#93)

* Convert jackson-databind and httpcore5 version pins to floor-only constraints

* Also constrain `provided`, and declare the floors inline

Constraints on `implementation` do not reach `provided`, which extends
nothing; `dependencyInsight --configuration provided` resolved
jackson-databind 2.17.3, so the CVE floor was missing on the very
configuration the shaded recipe libraries are declared on, and the one
dependency-check scans. The `resolutionStrategy` hook this replaced had
covered it.

Drop the `cliCompatImplementation` entry: the suite depends on `project`
and inherits the floors through its runtimeElements variant, so it still
resolves 2.21.5 by constraint, and naming the configuration forced the
lazily-registered cliCompat test suite to be realized on every
configuration phase.

v0.43.0

Toggle v0.43.0's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Fix CVE-2026-54399: force httpcore5 group to 5.4.3 (#86)

Refs moderneinc/dependency-vulnerability-reports#1121

v0.42.0

Toggle v0.42.0's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
[Auto] Aggregational Quarkus migration recipes as of 2026-06-23T1342 (#…

…83)

Co-authored-by: timtebeek <1027334+timtebeek@users.noreply.github.com>

v0.41.4

Toggle v0.41.4's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Shade AWS SDK supporting modules into the fat jar (#82)

PR #81 moved the shaded recipe libraries to provided scope so consumers no
longer re-resolve a second standalone copy of their category descriptors.
For software.amazon.awssdk:v2-migration this also dropped its supporting
modules (utils, sdk-core, auth, aws-core, http-client-spi, regions) from
consumers' runtime classpaths, since provided dependencies are not resolved
transitively. The shadowJar only bundled the top-level v2-migration artifact,
so its recipe classes were left referencing classes that are no longer present.

This surfaced as a NoClassDefFoundError for software.amazon.awssdk.utils.ImmutableMap
when initializing software.amazon.awssdk.v2migration.V1SetterToV2, e.g. when the
rewrite-recipe-markdown-generator lists recipe descriptors.

Broaden the shadowJar include to the whole software.amazon.awssdk group so the
fat jar is self-contained, restoring the classes that used to reach consumers
transitively.

v0.41.3

Toggle v0.41.3's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
provided scope for shaded jars (#81)