Update managed AssertJ from 3.27.3 to 3.27.7, the patched version for GHSA-rqfh-9r24-8c9r. Both modules retain test scope; no runtime dependency changes.
Validation: all 28 existing tests pass without failures, errors or skips, using an initially empty isolated Maven repository and the byte-verified public qbit-build-parent2.0.0. Independent review confirms AssertJ and accompanying Byte Buddy changes are test-only and absent from runtime classpaths. The existing parent-model warning remains in baseline and patched runs; both resolve successfully.
Update managed AssertJ from 3.27.3 to 3.27.7, the patched version for GHSA-rqfh-9r24-8c9r. Both modules retain test scope; no runtime dependency changes.
Validation: all 28 existing tests pass without failures, errors or skips, using an initially empty isolated Maven repository and the byte-verified public qbit-build-parent2.0.0. Independent review confirms AssertJ and accompanying Byte Buddy changes are test-only and absent from runtime classpaths. The existing parent-model warning remains in baseline and patched runs; both resolve successfully.
Refs QRun-IO/qqq#945.
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Update managed AssertJ from 3.27.3 to 3.27.7, the patched version for GHSA-rqfh-9r24-8c9r. Both modules retain test scope; no runtime dependency changes.
Validation: all 28 existing tests pass without failures, errors or skips, using an initially empty isolated Maven repository and the byte-verified public qbit-build-parent2.0.0. Independent review confirms AssertJ and accompanying Byte Buddy changes are test-only and absent from runtime classpaths. The existing parent-model warning remains in baseline and patched runs; both resolve successfully.
Refs QRun-IO/qqq#945.