Skip to content

Task 6: Upgrade Test Dependencies (JUnit, REST Assured, json-path)#200

Open
devin-ai-integration[bot] wants to merge 1 commit intomasterfrom
devin/task6-upgrade-test-deps
Open

Task 6: Upgrade Test Dependencies (JUnit, REST Assured, json-path)#200
devin-ai-integration[bot] wants to merge 1 commit intomasterfrom
devin/task6-upgrade-test-deps

Conversation

@devin-ai-integration
Copy link
Copy Markdown

@devin-ai-integration devin-ai-integration Bot commented May 1, 2026

Summary

Upgrades three test dependencies to address security vulnerabilities and modernize the test stack:

JUnit: 4.12 → 4.13.2

  • ftgo-domain/build.gradle — fixes CVE-2020-15250
  • ftgo-test-util/build.gradle

REST Assured: 2.9.0 → 5.4.0

  • gradle.properties — bumped restAssuredVersion to 5.4.0
  • Migrated groupId from com.jayway.restassuredio.rest-assured in:
    • ftgo-consumer-service/build.gradle
    • ftgo-restaurant-service/build.gradle
    • ftgo-end-to-end-tests-common/build.gradle
  • Replaced hardcoded 3.0.6 versions with $restAssuredVersion variable in:
    • ftgo-order-service/build.gradle
    • ftgo-courier-service/build.gradle
  • Updated Java imports from com.jayway.restassured.*io.restassured.* in:
    • AbstractEndToEndTests.java

json-path: 2.3.0 → 2.9.0

  • ftgo-consumer-service/build.gradle
  • ftgo-restaurant-service/build.gradle
  • ftgo-end-to-end-tests-common/build.gradle

Review & Testing Checklist for Human

  • Verify REST Assured 5.4.0 API compatibility — the RestAssuredConfig/ObjectMapperConfig API in AbstractEndToEndTests.java may have breaking changes (e.g. jackson2ObjectMapperFactory signature)
  • Run full end-to-end tests to confirm the io.restassured import migration works at runtime
  • Verify json-path 2.9.0 doesn't introduce breaking API changes in test assertions

Notes

  • Build was verified on modules we changed (compileJava/compileTestJava all pass). The ftgo-end-to-end-tests-common module has a pre-existing unresolvable dependency (eventuate-util-test from deprecated jcenter) that prevents its compilation — this is not related to our changes.
  • 9 files changed, 19 insertions, 19 deletions — a clean 1:1 replacement across all affected files.

Link to Devin session: https://app.devin.ai/sessions/44df9588fabb4884bd68df408ce9c3e9
Requested by: @WesternConcrete


Devin Review

Status Commit
⚪ Not started

Run Devin Review

💡 Connect your GitHub account to enable automatic code reviews.

Open in Devin Review (Staging)
Open in Devin Review

…h 2.9.0

- JUnit: 4.12 -> 4.13.2 (fixes CVE-2020-15250) in ftgo-domain, ftgo-test-util
- REST Assured: 2.9.0 -> 5.4.0 in gradle.properties
  - Updated groupId from com.jayway.restassured to io.rest-assured in
    ftgo-consumer-service, ftgo-restaurant-service, ftgo-end-to-end-tests-common
  - Updated hardcoded 3.0.6 versions to use $restAssuredVersion variable in
    ftgo-order-service, ftgo-courier-service
  - Updated Java imports from com.jayway.restassured to io.restassured in
    AbstractEndToEndTests.java
- json-path: 2.3.0 -> 2.9.0 in ftgo-consumer-service, ftgo-restaurant-service,
  ftgo-end-to-end-tests-common

Co-Authored-By: Wes Convery <2wconvery@gmail.com>
@devin-ai-integration
Copy link
Copy Markdown
Author

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

  • Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
  • Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

  • Disable automatic comment and CI monitoring

Copy link
Copy Markdown
Author

@devin-ai-integration devin-ai-integration Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no potential bugs to report.

View in Devin Review to see 2 additional findings.

Open in Devin Review

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant