Skip to content

build(deps): update test SnakeYAML to 2.6#793

Open
jbeckwith-oai wants to merge 1 commit into
mainfrom
codex/update-test-snakeyaml
Open

build(deps): update test SnakeYAML to 2.6#793
jbeckwith-oai wants to merge 1 commit into
mainfrom
codex/update-test-snakeyaml

Conversation

@jbeckwith-oai

Copy link
Copy Markdown
Contributor

Summary

  • constrain the Spring Boot starter's test-only transitive SnakeYAML dependency from 1.30 to 2.6
  • keep Spring Boot 2.7.18 and every published dependency unchanged
  • exercise Spring Boot's real YAML loader, configuration binding, and auto-configured client in a compatibility test

This addresses Dependabot alerts #1, #2, #3, #4, #5, #7, and #8. Alert #8 requires SnakeYAML 2.0 or newer.

Compatibility analysis

  • Maven Central identifies 2.6 as the current stable release. Its published POM targets Java 8, its manifest requires JavaSE 1.8, and its base classes use Java 8 bytecode (class-file major version 52).
  • Spring Boot added SnakeYAML 2.x loader compatibility in its 2.7.10 line; this module remains on 2.7.18. The new test verifies 2.7.18 with 2.6 by parsing YAML through YamlPropertySourceLoader, adding it to an ApplicationContextRunner, binding OpenAIClientProperties, and constructing OpenAIClient.
  • The constraint exists only on testImplementation. runtimeClasspath contains no SnakeYAML, and the generated published POM contains no SnakeYAML dependency or constraint.
  • Against an origin/main publication baseline, the generated POM and sources JAR are byte-identical. Every file inside the main JAR is byte-identical. Normalized Gradle module metadata has identical variants and dependencies; raw archive checksums differ only because a fresh JAR rebuild records new ZIP timestamps.
  • There are no production source, public API, runtime dependency, or consumer metadata changes. This is patch-level release material and does not require a minor or major version bump.

References: SnakeYAML Maven metadata, SnakeYAML 2.6 POM, Spring Boot 2.7 compatibility fix.

Verification

  • :openai-java-spring-boot-starter:dependencyInsight --configuration testRuntimeClasspath --dependency org.yaml:snakeyaml (selects 2.6)
  • :openai-java-spring-boot-starter:dependencyInsight --configuration runtimeClasspath --dependency org.yaml:snakeyaml (no match)
  • targeted Spring Boot YAML/config binding compatibility test
  • ./scripts/lint
  • ./scripts/build
  • ./scripts/test (including ProGuard and R8)
  • ./scripts/detect-breaking-changes origin/main
  • local publication comparison against origin/main

@jbeckwith-oai jbeckwith-oai requested a review from a team as a code owner July 15, 2026 23:22
@openai-sdks

openai-sdks Bot commented Jul 15, 2026

Copy link
Copy Markdown

OkTest Summary

237/237 SDK tests passed in 16.755s for Java SDK PR #793.

Test results — 42 files
Test Result Time
tests/chat-completions-complex-body.test.ts ✅ Passed 725ms
tests/chat-completions-create.test.ts ✅ Passed 559ms
tests/chat-completions-stream.test.ts ✅ Passed 343ms
tests/files-content-binary.test.ts ✅ Passed 241ms
tests/files-create-multipart.test.ts ✅ Passed 322ms
tests/files-list-pagination.test.ts ✅ Passed 258ms
tests/initialize-config.test.ts ✅ Passed 210ms
tests/instance-isolation.test.ts ✅ Passed 190ms
tests/models-list.test.ts ✅ Passed 170ms
tests/responses-background-lifecycle.test.ts ✅ Passed 307ms
tests/responses-body-method-errors.test.ts ✅ Passed 537ms
tests/responses-cancel-timeout.test.ts ✅ Passed 230ms
tests/responses-cancel.test.ts ✅ Passed 379ms
tests/responses-compact-retries.test.ts ✅ Passed 367ms
tests/responses-compact.test.ts ✅ Passed 254ms
tests/responses-create-advanced-stream.test.ts ✅ Passed 702ms
tests/responses-create-advanced.test.ts ✅ Passed 1.381s
tests/responses-create-disconnect.test.ts ✅ Passed 1.183s
tests/responses-create-errors.test.ts ✅ Passed 356ms
tests/responses-create-malformed-api-responses.test.ts ✅ Passed 344ms
tests/responses-create-retries.test.ts ✅ Passed 258ms
tests/responses-create-stream-failures.test.ts ✅ Passed 282ms
tests/responses-create-stream-timeout.test.ts ✅ Passed 224ms
tests/responses-create-stream-wire.test.ts ✅ Passed 6.155s
tests/responses-create-stream.test.ts ✅ Passed 96ms
tests/responses-create-terminal-states.test.ts ✅ Passed 359ms
tests/responses-create-timeout.test.ts ✅ Passed 256ms
tests/responses-create.test.ts ✅ Passed 285ms
tests/responses-delete.test.ts ✅ Passed 257ms
tests/responses-input-items-errors.test.ts ✅ Passed 276ms
tests/responses-input-items-list.test.ts ✅ Passed 416ms
tests/responses-input-items-options.test.ts ✅ Passed 367ms
tests/responses-input-tokens-count-timeout.test.ts ✅ Passed 246ms
tests/responses-input-tokens-count.test.ts ✅ Passed 551ms
tests/responses-malformed-inputs.test.ts ✅ Passed 5.102s
tests/responses-not-found-errors.test.ts ✅ Passed 369ms
tests/responses-parse.test.ts ✅ Passed 554ms
tests/responses-retrieve-retries.test.ts ✅ Passed 937ms
tests/responses-retrieve.test.ts ✅ Passed 354ms
tests/responses-stored-method-errors.test.ts ✅ Passed 1.056s
tests/retry-behavior.test.ts ✅ Passed 3.468s
tests/sdk-error-shape.test.ts ✅ Passed 457ms

View OkTest run #29462769361

SDK merge (bb55ba806bc9) · head (88d9f58175c5) · base (845b2bc87fb0) · OkTest (fd7a761c81c1)

@jbeckwith-oai jbeckwith-oai force-pushed the codex/update-test-snakeyaml branch from d6bc8d2 to 88d9f58 Compare July 16, 2026 00:55
@jbeckwith-oai jbeckwith-oai changed the title fix(deps): update test SnakeYAML to 2.6 build(deps): update test SnakeYAML to 2.6 Jul 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant