spring-cloud-contract

spring-cloud-contract copied to clipboard

This issue is similar to https://github.com/spring-cloud/spring-cloud-contract/issues/354 and apologies for my duplicated comment. The API I am looking at testing with Spring Cloud Contract has multiple non-primitive optional request fields, and...

ltuch

spring cloud contract 4.2.0 bring a dependency which contain vulnerability.

1

version 4.2.0 and under. the lib is pulled from `spring-cloud-contract-verifier` com.rackspace.eclipse.webtools.sourceediting:org.eclipse.wst.xml.xpath2.processor (https://mvnrepository.com/artifact/com.rackspace.eclipse.webtools.sourceediting/org.eclipse.wst.xml.xpath2.processor/2.1.100)

alexisgayte

spring-cloud-starter-contract-stub-runner defines outdated sonatype sisu-inject-plexus version with vulnerability

3

Hi, it seems that the `spring-cloud-starter-contract-stub-runner` has a transitive dependency on `plexus-utils:3.0.18`. This version of plexus-utils seems to be vulnerable: https://avd.aquasec.com/nvd/2022/cve-2022-4244/ From what I can tell, this dependency comes from...

juboe-kion

Slf4j metadata are fetched in each maven command for 4.2.0 Version

2

**Describe the bug** The issue https://github.com/spring-cloud/spring-cloud-contract/issues/2106 has resurfaced again in 4.2.0 version. The plugin tries to download slf4j metadata on every maven command. [INFO] Scanning for projects... Downloading from maven-default-http-blocker:...

varunbh79

Maven plugin should not need <extension>true</extension>

4

I don't see the maven plugin doing anything that would require it to be an extension. The main use case for declaring a plugin as an extension is: > plug-ins...

jakub-bochenski

**Describe the bug** See https://stackoverflow.com/q/79224232/1237617

jakub-bochenski

Missing 4.1.4 docker release.

2

I am trying to use spring-cloud-contract image to perform some tests in a non-java application and I am getting some gradle errors . I'm wondering if using the latest version...

elysrivero99

**Describe the bug** Generated UML diagrams seem to be missing from the reference docs. **Sample** The UML diagram defined here: https://github.com/spring-cloud/spring-cloud-contract/blob/v4.1.4/docs/modules/ROOT/pages/getting-started/three-second-tour.adoc doesn't seem to be rendered here: https://docs.spring.io/spring-cloud-contract/reference/getting-started/three-second-tour.html In fact,...

anno1985

Bumps [actions/cache](https://github.com/actions/cache) from 4 to 5. Release notes Sourced from actions/cache's releases. v5.0.0 [!IMPORTANT] actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1....

dependabot[bot]

Bumps [actions/cache](https://github.com/actions/cache) from 4 to 5. Release notes Sourced from actions/cache's releases. v5.0.0 [!IMPORTANT] actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1....

dependabot[bot]