Update TestNG to latest
Basics
Logistics
Basics
Logistics
Description
Environment
None
Activity
Ian YoungMarch 8, 2024 at 2:08 PM
The new key claims to be for James Ward too, from 2023-01. It’s 4096 bits, the old one being 2048. I’ll contact him for confirmation.
Ian YoungMarch 8, 2024 at 1:59 PM
jquery is a weird one, see JPAR-199 for our previous run-in with it.
The guy who owned the previous key for org.webjars still has the old key on his personal site. I haven’t tracked down the claimed owner of the new key yet.
Ian YoungMarch 8, 2024 at 1:38 PM
The TestNG project repository now has a KEYS file including the key in question, and that part of this issue is resolved.
However, the latest version of TestNG still doesn’t pass validation for us because it pulls in a new version of jquery with a new key of its own.
Rod WiddowsonMarch 6, 2024 at 4:54 PM
unsigned tags too. sigh
Details
Assignee
UnassignedUnassignedReporter
Ian YoungIan Young
Details
Details
Assignee
Unassigned
UnassignedReporter
Ian Young
Ian YoungCreated March 6, 2024 at 4:00 PM
Updated March 8, 2024 at 2:08 PM
We’re several versions behind on TestNG. Obviously this is only a test dependency, but like Mockito it seems like a good idea to stay reasonably up to date nevertheless.
The TestNG dependency we currently use is under a grandfathered key; current versions are signed by an undocumented key and for now I think it’s reasonable to ask them to confirm that rather than taking some alternative steps.
My issue on the TestNG project is [here](https://github.com/testng-team/testng/issues/3084 ).
Anticipating that this might take some time, I’m opening this issue to record progress and not anticipating getting TestNG updated prior to the next release (IdP v5.1). Hopefully, before the next one.