← Back to issue list

build(deps-dev): bump junit:junit from 4.11 to 4.13.1 in /tests/spread/rockcraft/plugin-jlink/base-2404/helloworld

View original Github issue

Metadata

Project
rockcraft
Number
#985
Type
pull request
State
open
Author
dependabot[bot]
Labels
—
Created
Updated
Closed
—

Current evaluation

Dependabot bump of junit 4.11→4.13.1 in a single test-fixture pom.xml (tests/spread/rockcraft/plugin-jlink/base-2404/helloworld). Approved by 2 reviewers, all CI green except one snap-tests entry; idle ~1 year.

Suggested action: needs review

Reason: The diff is a one-line version bump in a Maven pom used only as jlink spread-test fixture data, and review status is 'approved (2 reviewers)' with 'Unresolved review comments: 0' and all fast/slow test, lint, policy and security checks passing. It has sat untouched for ~1 year (last activity 359 days ago) after lengau noted '@bepri I manually had dependabot create this as an experiment', so it needs a maintainer decision to land or dismiss; the lone 'Failing: snap-tests' entry is ambiguous because snap-tests also appears among passing checks, and the pinned HEAD still has junit 4.11, so the change remains applicable and not obsolete.

Evaluated by: mr-cal-bot

Impact: 8 Quick Win: 5 Complexity: 3 Confidence: 78 Actionability: 70

Issue body

Bumps [junit:junit](https://github.com/junit-team/junit4) from 4.11 to 4.13.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/junit-team/junit4/releases">junit:junit's releases</a>.</em></p> <blockquote> <h2>JUnit 4.13.1</h2> <p>Please refer to the <a href="https://github.com/junit-team/junit/blob/HEAD/doc/ReleaseNotes4.13.1.md">release notes</a> for details.</p> <h2>JUnit 4.13</h2> <p>Please refer to the <a href="https://github.com/junit-team/junit/blob/HEAD/doc/ReleaseNotes4.13.md">release notes</a> for details.</p> <h2>JUnit 4.13 RC 2</h2> <p>Please refer to the <a href="https://github.com/junit-team/junit4/wiki/4.13-Release-Notes">release notes</a> for details.</p> <h2>JUnit 4.13 RC 1</h2> <p>Please refer to the <a href="https://github.com/junit-team/junit4/wiki/4.13-Release-Notes">release notes</a> for details.</p> <h2>JUnit 4.13 Beta 3</h2> <p>Please refer to the <a href="https://github.com/junit-team/junit4/wiki/4.13-Release-Notes">release notes</a> for details.</p> <h2>JUnit 4.13 Beta 2</h2> <p>Please refer to the <a href="https://github.com/junit-team/junit4/wiki/4.13-Release-Notes">release notes</a> for details.</p> <h2>JUnit 4.13 Beta 1</h2> <p>Please refer to the <a href="https://github.com/junit-team/junit4/wiki/4.13-Release-Notes">release notes</a> for details.</p> <h2>JUnit 4.12</h2> <p>Please refer to the <a href="https://github.com/junit-team/junit/blob/HEAD/doc/ReleaseNotes4.12.md">release notes</a> for details.</p> <h2>JUnit 4.12 Beta 3</h2> <p>Please refer to the <a href="https://github.com/junit-team/junit/blob/HEAD/doc/ReleaseNotes4.12.md">release notes</a> for details.</p> <h2>JUnit 4.12 Beta 2</h2> <p>No release notes provided.</p> <h2>JUnit 4.12 Beta 1</h2> <p>No release notes provided.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/junit-team/junit4/commit/1b683f4ec07bcfa40149f086d32240f805487e66"><code>1b683f4</code></a> [maven-release-plugin] prepare release r4.13.1</li> <li><a href="https://github.com/junit-team/junit4/commit/ce6ce3aadc070db2902698fe0d3dc6729cd631f2"><code>ce6ce3a</code></a> Draft 4.13.1 release notes</li> <li><a href="https://github.com/junit-team/junit4/commit/c29dd8239d6b353e699397eb090a1fd27411fa24"><code>c29dd82</code></a> Change version to 4.13.1-SNAPSHOT</li> <li><a href="https://github.com/junit-team/junit4/commit/1d174861f0b64f97ab0722bb324a760bfb02f567"><code>1d17486</code></a> Add a link to assertThrows in exception testing</li> <li><a href="https://github.com/junit-team/junit4/commit/543905df72ff10364b94dda27552efebf3dd04e9"><code>543905d</code></a> Use separate line for annotation in Javadoc</li> <li><a href="https://github.com/junit-team/junit4/commit/510e906b391e7e46a346e1c852416dc7be934944"><code>510e906</code></a> Add sub headlines to class Javadoc</li> <li><a href="https://github.com/junit-team/junit4/commit/610155b8c22138329f0723eec22521627dbc52ae"><code>610155b</code></a> Merge pull request from GHSA-269g-pwp5-87pp</li> <li><a href="https://github.com/junit-team/junit4/commit/b6cfd1e3d736cc2106242a8be799615b472c7fec"><code>b6cfd1e</code></a> Explicitly wrap float parameter for consistency (<a href="https://redirect.github.com/junit-team/junit4/issues/1671">#1671</a>)</li> <li><a href="https://github.com/junit-team/junit4/commit/a5d205c7956dbed302b3bb5ecde5ba4299f0b646"><code>a5d205c</code></a> Fix GitHub link in FAQ (<a href="https://redirect.github.com/junit-team/junit4/issues/1672">#1672</a>)</li> <li><a href="https://github.com/junit-team/junit4/commit/3a5c6b4d08f408c8ca6a8e0bae71a9bc5a8f97e8"><code>3a5c6b4</code></a> Deprecated since jdk9 replacing constructor instance of Double and Float (<a href="https://redirect.github.com/junit-team/junit4/issues/1660">#1660</a>)</li> <li>Additional commits viewable in <a href="https://github.com/junit-team/junit4/compare/r4.11...r4.13.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=junit:junit&package-manager=maven&previous-version=4.11&new-version=4.13.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/canonical/rockcraft/network/alerts). </details>

Evaluation history

Date Model Scores Action Summary
stealth/space-bunny-alpha
Impact: 8
Quick Win: 5
Complexity: 3
Confidence: 78
Actionability: 70
needs review Dependabot bump of junit 4.11→4.13.1 in a single test-fixture pom.xml (tests/spread/rockcraft/plugin-jlink/base-2404/helloworld). Approved by 2 reviewers, all CI green except one snap-tests entry; idle ~1 year.
qwen/qwen3.6-35b-a3b
Impact: 10
Quick Win: 4
Complexity: 5
Confidence: 75
Actionability: 40
close stale Dependabot PR bumping junit:junit from 4.11 to 4.13.1 in a test directory. Approved by 2 reviewers but has a failing snap-tests CI check. Created as an experiment per maintainer comment.
qwen/qwen3.8-27b
Impact: 10
Quick Win: 10
Staleness: 70
Complexity: 5
Confidence: 75
needs review Dependabot bump of junit:junit from 4.11 to 4.13.1 in the jlink plugin spread test fixture pom.xml (+1/-1). Approved by 2 reviewers, one failing snap-tests CI check, inactive ~11 months; target file still pins 4.11 at HEAD.
qwen/qwen3.6-35b-a3b
Staleness: 88
Complexity: 5
Confidence: 92
close stale Dependabot PR updating junit:junit from 4.11 to 4.13.1 in a test module. Approved but inactive for over 9 months with a failing CI check.
qwen3.6-35b-a3b-mtp-q6
Staleness: 95
Complexity: 10
Confidence: 90
close stale Bumps junit:junit from 4.11 to 4.13.1 in a test directory. Inactive for 272 days; a maintainer noted it was created as an experiment. No further discussion or CI results.
qwen3.6-35b-a3b-mtp-q6
Staleness: 85
Complexity: 5
Confidence: 80
close stale Dependabot PR bumping JUnit from 4.11 to 4.13.1 in a test directory. Created as a maintainer experiment, inactive for 9 months with no further development or CI results.

Update history

No update history recorded yet.

Related work

  • Related To: canonical/snapcraft#3316 (confidence 55%)

    Analogous merged Dependabot junit bump in a Maven test fixture in the sibling snapcraft repo; same class of low-impact test-data dependency update, not a duplicate of this PR.

Related issues

Issue Project State Summary Similarity
#3316 build(deps-dev): bump junit from 3.8.1 to 4.13.1 in /tests/spread/plugins/v1/maven/snaps/legacy-maven-hello/my-app snapcraft merged Merged PR #3316, upgrading JUnit from 3.8.1 to 4.13.1 in the legacy Maven spread-test fixture via commit 007eea3d2.
83%
#3315 build(deps-dev): bump junit from 3.8.1 to 4.13.1 in /tests/spread/plugins/v1/maven/snaps/maven-hello/my-app snapcraft merged Dependabot PR #3315 merged (commit 44bf0c225, "spread tests: bump junit"), updating junit 3.8.1 -> 4.13.1 in the maven-hello my-app pom.xml spread test fixture. Sibling PR #3316 did the same for legacy-maven-hello.
83%
#1091 build(deps): update dependency junit:junit to v4.13.1 [security] (main) rockcraft closed PR #1091 was closed unmerged without a replacement; both affected test POMs still use JUnit 4.11 at HEAD f56e7f6.
74%