Skip to content

merge de master#9

Merged
pedro-chiappani merged 9 commits intoprodfrom
master
Feb 6, 2026
Merged

merge de master#9
pedro-chiappani merged 9 commits intoprodfrom
master

Conversation

@pedro-chiappani
Copy link
Owner

No description provided.

pedro-chiappani and others added 9 commits August 2, 2025 21:33
- Updated Gradle from 7.6.3 to 7.6.4 (latest 7.x, compatible with RN 0.68.2)
- Updated gradle-download-task from 4.1.2 to 5.6.0
- Fixed compileSdk to use rootProject variable for consistency
- Android SDK versions already at 35 (Android 15, latest)

Co-authored-by: pedro-chiappani <49994882+pedro-chiappani@users.noreply.github.com>
Force upgrade assertj-core from vulnerable 3.21.0 to patched 3.27.7.
Addresses XML External Entity (XXE) vulnerability in isXmlEqualTo assertion.

Co-authored-by: pedro-chiappani <49994882+pedro-chiappani@users.noreply.github.com>
Add direct dependency declaration in app build.gradle for extra assurance
that the patched assertj-core 3.27.7 is used, complementing the existing
resolution strategy in root build.gradle.

Co-authored-by: pedro-chiappani <49994882+pedro-chiappani@users.noreply.github.com>
Changed from implementation to testImplementation and androidTestImplementation
to prevent including test library in production APK. The global resolution
strategy in root build.gradle still ensures patched version is used everywhere.

Co-authored-by: pedro-chiappani <49994882+pedro-chiappani@users.noreply.github.com>
…ndroid-version

Update Android build tools to latest compatible versions and fix assertj-core XXE vulnerability
@pedro-chiappani pedro-chiappani merged commit cd23261 into prod Feb 6, 2026
1 of 2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants