Skip to content

fix: pin score_devcontainer to 1.11.2 (1.11.1 yanked upstream) - #81

Merged
michaelsaborov merged 1 commit into
eclipse-score:mainfrom
Chahult:fix/pin-devcontainer-1.11.2
Oct 15, 2026
Merged

michaelsaborov merged 1 commit into
eclipse-score:mainfrom
Chahult:fix/pin-devcontainer-1.11.2

Conversation

@Chahult

@Chahult Chahult commented Oct 15, 2026 •

Copy link
Copy Markdown
Contributor

As we are using the QNX YAML configuration from Logging, and Logging is not affected, we confirmed that score_devcontainer does not appear anywhere in MODULE.bazel.lock.

Our analysis: Logging pins score_tooling@1.2.0, which is much older than Config Management's score_tooling@2.2.1. The transitive dependency on score_devcontainer was apparently introduced in a newer release line (2.x) that Logging does not use yet. As a result, Logging's dependency graph does not resolve or fetch score_devcontainer, so the issue with the yanked 1.11.1 version does not apply to Logging.

@github-actions

Copy link
Copy Markdown

License Check Results

🚀 The license check job ran with the Bazel command:

bazel run //:license-check

Status: ⚠️ Needs Review

Click to expand output
[License Check Output]
Extracting Bazel installation...
Starting local Bazel server (8.6.0) and connecting to it...
INFO: Invocation ID: 5f3f9990-636c-445e-b7f9-e5979468f74d
Computing main repo mapping: 
Computing main repo mapping: 
WARNING: For repository 'platforms', the root module requires module version platforms@1.0.0, but got platforms@1.1.0 in the resolved dependency graph. Please update the version in your MODULE.bazel or set --check_direct_dependencies=off
WARNING: For repository 'rules_rust', the root module requires module version rules_rust@0.68.1-score, but got rules_rust@0.68.2-score in the resolved dependency graph. Please update the version in your MODULE.bazel or set --check_direct_dependencies=off
WARNING: For repository 'rules_cc', the root module requires module version rules_cc@0.2.17, but got rules_cc@0.2.22 in the resolved dependency graph. Please update the version in your MODULE.bazel or set --check_direct_dependencies=off
WARNING: For repository 'score_tooling', the root module requires module version score_tooling@2.2.1, but got score_tooling@2.2.2 in the resolved dependency graph. Please update the version in your MODULE.bazel or set --check_direct_dependencies=off
WARNING: For repository 'aspect_rules_lint', the root module requires module version aspect_rules_lint@2.3.0, but got aspect_rules_lint@2.5.0 in the resolved dependency graph. Please update the version in your MODULE.bazel or set --check_direct_dependencies=off
WARNING: For repository 'grpc-java', the root module requires module version grpc-java@1.70.0, but got grpc-java@1.78.0 in the resolved dependency graph. Please update the version in your MODULE.bazel or set --check_direct_dependencies=off
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
Loading: 
Loading: 3 packages loaded
Analyzing: target //:license-check (4 packages loaded, 0 targets configured)
Analyzing: target //:license-check (4 packages loaded, 0 targets configured)

Analyzing: target //:license-check (43 packages loaded, 10 targets configured)

Analyzing: target //:license-check (94 packages loaded, 10 targets configured)

Analyzing: target //:license-check (148 packages loaded, 755 targets configured)

Analyzing: target //:license-check (170 packages loaded, 3328 targets configured)

Analyzing: target //:license-check (173 packages loaded, 5364 targets configured)

Analyzing: target //:license-check (178 packages loaded, 9661 targets configured)

Analyzing: target //:license-check (178 packages loaded, 9662 targets configured)

Analyzing: target //:license-check (178 packages loaded, 9662 targets configured)

Analyzing: target //:license-check (181 packages loaded, 9799 targets configured)

Analyzing: target //:license-check (185 packages loaded, 11804 targets configured)

Analyzing: target //:license-check (185 packages loaded, 11804 targets configured)

INFO: Analyzed target //:license-check (186 packages loaded, 19271 targets configured).
[8 / 16] Creating runfiles tree bazel-out/k8-opt-exec-ST-d57f47055a04/bin/external/score_tooling+/dash/tool/formatters/dash_format_converter.runfiles [for tool]; 0s local ... (2 actions, 1 running)
INFO: From Generating Dash formatted dependency file ...:
INFO: Successfully converted 2 packages from Cargo.lock to bazel-out/k8-fastbuild/bin/formatted.txt
[14 / 16] [Prepa] JavaToolchainCompileBootClasspath external/rules_java+/toolchains/platformclasspath.jar
[15 / 16] Building license.check.license_check.jar (); 0s disk-cache, multiplex-worker
INFO: Found 1 target...
Target //:license.check.license_check up-to-date:
  bazel-bin/license.check.license_check
  bazel-bin/license.check.license_check.jar
INFO: Elapsed time: 199.828s, Critical Path: 2.55s
INFO: 16 processes: 12 internal, 3 processwrapper-sandbox, 1 worker.
INFO: Build completed successfully, 16 total actions
INFO: Running command line: bazel-bin/license.check.license_check ./formatted.txt <args omitted>
usage: org.eclipse.dash.licenses.cli.Main [-batch <int>] [-cd <url>]
       [-confidence <int>] [-ef <url>] [-excludeSources <sources>] [-help] [-lic
       <url>] [-project <shortname>] [-repo <url>] [-review] [-summary <file>]
       [-timeout <seconds>] [-token <token>]

@github-actions

Copy link
Copy Markdown

The created documentation from the pull request is available at: docu-html

@michaelsaborov
michaelsaborov merged commit b5e44b7 into eclipse-score:main Oct 15, 2026
15 checks passed

This branch was successfully deployed

1 active deployment
workflow-approval — 35fedba6 Deployed Oct 15, 2026 by Chahult via Build and Test arm64-qnx / approval #123
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Development

Successfully merging this pull request may close these issues.

2 participants