Skip to content

Release/0.1.3#79

Open
khalilmalla95 wants to merge 53 commits into
mainfrom
release/0.1.3
Open

Release/0.1.3#79
khalilmalla95 wants to merge 53 commits into
mainfrom
release/0.1.3

Conversation

@khalilmalla95

Copy link
Copy Markdown
Collaborator

khalilmalla95 and others added 30 commits March 18, 2026 13:55
Update project version to 0.1.2 in POM files and README examples
…ter-authoredon-placeholder-check-skips-missing-element-inconsistent-with-other-placeholder-validations

Fix null check logic for `<authoredOn>` placeholder validation in `FhirTaskLinter`.
…r usage (#43)

* Add validation for `camunda:versionTag` in BPMN processes and corresponding linting rules.

* Add unit tests for `camunda:versionTag` linting rules in BPMN processes.
….RELEASE in /linter-core (#44)

* build(deps): bump com.fasterxml.jackson.core:jackson-core (#32)

Bumps [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) from 2.18.0 to 2.18.6.
- [Commits](FasterXML/jackson-core@jackson-core-2.18.0...jackson-core-2.18.6)

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson.core:jackson-core
  dependency-version: 2.18.6
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* build(deps): bump org.thymeleaf:thymeleaf in /linter-core

Bumps org.thymeleaf:thymeleaf from 3.1.2.RELEASE to 3.1.4.RELEASE.

---
updated-dependencies:
- dependency-name: org.thymeleaf:thymeleaf
  dependency-version: 3.1.4.RELEASE
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix(linter-core): pin JAXB Jakarta API/runtime to resolve classpath conflict on Java 25

The test/runtime classpath resolved two incompatible JAXB API lines transitively:
`jakarta.xml.bind-api:2.3.3` (via `xmlunit-core`, providing `javax.*`) and
`jakarta.xml.bind-api:4.0.2` (via DSF/Jersey/JAXB runtime, requiring `jakarta.*`).

Maven conflict resolution could select the 2.3.3 API while components expected Jakarta JAXB classes
(e.g. `jakarta/xml/bind/annotation/XmlElement`), causing `NoClassDefFoundError` in linter tests.
Adding explicit `jakarta.xml.bind-api` and `jaxb-runtime` aligns API + runtime to the Jakarta line
and makes classloading deterministic across branches/builds.

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: khalilmalla95 <khalilmalla95@gmail.com>
…pring configuration beans (#53)

* build(deps): bump com.fasterxml.jackson.core:jackson-core (#32)

Bumps [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) from 2.18.0 to 2.18.6.
- [Commits](FasterXML/jackson-core@jackson-core-2.18.0...jackson-core-2.18.6)

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson.core:jackson-core
  dependency-version: 2.18.6
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Add new error type for missing Spring configuration in plugin definitions

* Add support for retrieving Spring configuration classes in plugin definitions

* Add `SpringConfigurationLinter` to validate BPMN delegate and listener classes against registered Spring configuration beans

* Integrate logger into `PluginLintingOrchestrator` and enhance linting with `SpringConfigurationLinter` for BPMN delegate validation.

* Add sample classes for SpringConfigurationLinter integration testing

* Add unit tests for `SpringConfigurationLinter` to validate BPMN delegates against Spring beans

* Add integration tests for `SpringConfigurationLinter` to verify BPMN delegate validation against Spring beans

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* build(deps): bump com.fasterxml.jackson.core:jackson-core (#32)

Bumps [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) from 2.18.0 to 2.18.6.
- [Commits](FasterXML/jackson-core@jackson-core-2.18.0...jackson-core-2.18.6)

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson.core:jackson-core
  dependency-version: 2.18.6
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Replace `URL` constructor with `URI.create()` for improved URL creation safety.

* Remove unused `resourceRootCache` from `ResourceResolutionService`.

* Remove unused `FileNotFoundException` import from `BpmnLoadingTest`.

* Add clarification comment for unreachable API version validation in `BpmnMessageEventImplementationLinter`

* Remove unused `assertLintType` helper method from `BpmnTaskListenerInputParameterTest`.

* Remove unused `Document` handling code from `FhirExtensionUrlTest`.

* Remove unused API version detection legacy classes

`ApiVersionDetector` and its related detection artifacts (`DetectedVersion`, `DetectionSource`)
are no longer part of the active runtime path. API version resolution is now performed
exclusively through plugin adapter typing in `PluginVersionUtils` (`V1Adapter`/`V2Adapter`),
and no remaining production references to rely on the legacy detector flow.

* Refactor resource reference resolution by centralizing logic in `resolveReference` helper

* Centralize placeholder validation logic with `checkPlaceholder` helper in `AbstractFhirInstanceLinter` and refactor linters to use it.

* Downgrade severity of missing questionnaire date placeholder from `ERROR` to `WARN`

* Centralize validation logic with `checkRequiredValue` and `hasAllowedTag` helpers in `AbstractFhirInstanceLinter`, refactor linters to use them.

* Centralize version/date placeholder validation logic with `checkVersionDatePlaceholders` in `AbstractFhirInstanceLinter` and refactor linters to use it.

* trigger codeql

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…set with separate error issues (#45)

* build(deps): bump com.fasterxml.jackson.core:jackson-core (#32)

Bumps [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) from 2.18.0 to 2.18.6.
- [Commits](FasterXML/jackson-core@jackson-core-2.18.0...jackson-core-2.18.6)

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson.core:jackson-core
  dependency-version: 2.18.6
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Expand `LintingType` with additional error types for input coding validation.

* Enhance FHIR cache with ValueSet seeding and system tracking

- Added support for loading ValueSet files and indexing `compose.include.system` URIs.
- Introduced utilities for checking system inclusion in ValueSets and retrieving associated systems.
- Refactored resource scanning logic to handle both CodeSystems and ValueSets.

* Expand `FHIR_TASK_INPUT` validation with terminology and slice binding checks

- Added granular error types to `LintingType` for `Task.input.type.coding` validation.
- Introduced slice cardinality and terminology checks for `Task.input`.
- Refactored `lintInputs` and implemented `lintInputTypeCodingTerminology` to handle `Task.input` coding validation.
- Enhanced profile-loading logic to extract binding metadata and fixed coding constraints.

* Add unit tests for `Task.input.type.coding` terminology validation

- Introduced `FhirTaskLinterInputCodingTerminologyTest` to verify terminology checks.
- Added tests to validate coding system existence and binding context logic for `Task.input`.

* Refine error message for unknown coding systems in `LintingType` and `FhirTaskLinter`.

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…on (#57)

* build(deps): bump com.fasterxml.jackson.core:jackson-core (#32)

Bumps [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) from 2.18.0 to 2.18.6.
- [Commits](FasterXML/jackson-core@jackson-core-2.18.0...jackson-core-2.18.6)

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson.core:jackson-core
  dependency-version: 2.18.6
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Add pull request template to standardize contributions.

* Add bug report template to standardize issue reporting

* Add feature request template to standardize new feature suggestions

* Add issue template configuration to guide users on documentation and support resources

* Add Dependabot configuration for dependency and GitHub Actions updates

* Add CodeQL workflow for security and quality analysis

* Add CodeQL workflow for security and quality analysis

* Update POM files for Maven Central compatibility and improved project metadata

- Refine project groupId and organization details.
- Add SCM and developer metadata.
- Configure Maven plugins for source, Javadoc, and artifact signing.
- Include distribution and release management profiles.
- Update dependency declarations for consistency.

* Add Maven publish workflow for automated artifact deployment to Maven Central

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…sed-in-bpmn-processes (#55)

* build(deps): bump com.fasterxml.jackson.core:jackson-core (#32)

Bumps [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) from 2.18.0 to 2.18.6.
- [Commits](FasterXML/jackson-core@jackson-core-2.18.0...jackson-core-2.18.6)

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson.core:jackson-core
  dependency-version: 2.18.6
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Add new error type for missing Spring configuration in plugin definitions

* Add support for retrieving Spring configuration classes in plugin definitions

* Add `SpringConfigurationLinter` to validate BPMN delegate and listener classes against registered Spring configuration beans

* Integrate logger into `PluginLintingOrchestrator` and enhance linting with `SpringConfigurationLinter` for BPMN delegate validation.

* Add sample classes for SpringConfigurationLinter integration testing

* Add unit tests for `SpringConfigurationLinter` to validate BPMN delegates against Spring beans

* Add integration tests for `SpringConfigurationLinter` to verify BPMN delegate validation against Spring beans

* Add new error types to handle various Spring bean scope validations in `LintingType`

* Enhance `SpringConfigurationLinter` to validate Spring bean scope and mutable state for BPMN-referenced classes.

* Add unit tests to validate Spring bean scope and mutable state with `SpringConfigurationLinter`

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…bilities (#50)

* build(deps): bump com.fasterxml.jackson.core:jackson-core (#32)

Bumps [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) from 2.18.0 to 2.18.6.
- [Commits](FasterXML/jackson-core@jackson-core-2.18.0...jackson-core-2.18.6)

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson.core:jackson-core
  dependency-version: 2.18.6
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Add new linting error codes for unresolved ValueSet bindings and fixedUri/CodeSystem mismatches.

* Add method to check if ValueSet contains a specific URL in FhirResourceExtractor

* Add method to check if ValueSet exists for a given canonical URL in FhirResourceLocator

* Add checks for unresolved binding.valueSet references and fixedUri/CodeSystem mismatches in FhirStructureDefinitionLinter

* Add validation for Task.input fixedUri/fixedCode constraints in FhirTaskLinter

* Change lint severity from INFO to WARN for fixedUri/CodeSystem not found in FhirStructureDefinitionLinter

* Refactor Task input fixed-coding validation to use early continues instead of handled flag

* Refine the code and delete unused parameter.

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* build(deps): bump com.fasterxml.jackson.core:jackson-core (#32)

Bumps [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) from 2.18.0 to 2.18.6.
- [Commits](FasterXML/jackson-core@jackson-core-2.18.0...jackson-core-2.18.6)

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson.core:jackson-core
  dependency-version: 2.18.6
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* build(deps): bump org.thymeleaf:thymeleaf in /linter-core (#58)

Bumps org.thymeleaf:thymeleaf from 3.1.2.RELEASE to 3.1.5.RELEASE.

---
updated-dependencies:
- dependency-name: org.thymeleaf:thymeleaf
  dependency-version: 3.1.5.RELEASE
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Add `ExclusionConfig` to handle linter exclusion rules and exit status behavior.

* Add `ExclusionRule` to define criteria for suppressing lint items in reports.

* Add `ExclusionFilter` to evaluate and manage lint item exclusions based on rules

* Add `ExclusionConfigLoader` to load and validate exclusion configurations for the linter

* Integrate exclusion rule support into linter workflow

* Add `ExclusionFilterTest` to verify exclusion rule handling and filtering logic

* Document exclusion rule usage and configuration in README

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* build(deps): bump com.fasterxml.jackson.core:jackson-core (#32)

Bumps [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) from 2.18.0 to 2.18.6.
- [Commits](FasterXML/jackson-core@jackson-core-2.18.0...jackson-core-2.18.6)

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson.core:jackson-core
  dependency-version: 2.18.6
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* build(deps): bump org.thymeleaf:thymeleaf in /linter-core (#58)

Bumps org.thymeleaf:thymeleaf from 3.1.2.RELEASE to 3.1.5.RELEASE.

---
updated-dependencies:
- dependency-name: org.thymeleaf:thymeleaf
  dependency-version: 3.1.5.RELEASE
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Add `ExclusionConfig` to handle linter exclusion rules and exit status behavior.

* Add `ExclusionRule` to define criteria for suppressing lint items in reports.

* Add `ExclusionFilter` to evaluate and manage lint item exclusions based on rules

* Add `ExclusionConfigLoader` to load and validate exclusion configurations for the linter

* Integrate exclusion rule support into linter workflow

* Add `ExclusionFilterTest` to verify exclusion rule handling and filtering logic

* Document exclusion rule usage and configuration in README

* Revert "Issue/40 feature allow excluding lint issues from reports (#59)"

This reverts commit 05eaa21.

* Add `Logger` field to `PluginLintingOrchestrator` to support logging

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
When linting a remote JAR URL, keep the extraction directory on disk
instead of treating it as temporary. The same URL reuses and overwrites
the existing folder on the next run. Local JAR extractions remain temporary.

Also handle failures when deleting the temporary downloaded JAR file
without aborting a successful lint run.
Pass projectPath into plugin HTML report generation and load referenced
BPMN/FHIR file contents for the in-report viewer.

Pre-compute sourceFile in Java (resourceFile → bpmnFile → fileName) to
avoid unsupported OGNL Elvis syntax in Thymeleaf.

Add highlight targets:
- BPMN: id="<elementId>"
- FHIR: canonical fhirReference without |version suffix
- fallback: resourceId

Remove sourceFile from items when file content could not be loaded, so
plugin-level SUCCESS messages do not appear navigable without content.
Add a modal file viewer opened from lint items (data-file, data-target).
Highlight matches and scroll to the first occurrence. Show "View in source"
only when sourceFile is present.

Embed file contents via Thymeleaf inline JavaScript (FILE_CONTENTS).

Make dashboard severity cards clickable; expand collapsed sections and
smooth-scroll to success, error, warning, and info sections.
…-navigation-and-improve-remote-jar-extraction-lifecycle
…t on valid ping tasks (#68)

* Bug: allow message-name slice.

* add test for loading
* build(deps): bump com.fasterxml.jackson.core:jackson-core (#32)

Bumps [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) from 2.18.0 to 2.18.6.
- [Commits](FasterXML/jackson-core@jackson-core-2.18.0...jackson-core-2.18.6)

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson.core:jackson-core
  dependency-version: 2.18.6
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* build(deps): bump org.thymeleaf:thymeleaf in /linter-core (#58)

Bumps org.thymeleaf:thymeleaf from 3.1.2.RELEASE to 3.1.5.RELEASE.

---
updated-dependencies:
- dependency-name: org.thymeleaf:thymeleaf
  dependency-version: 3.1.5.RELEASE
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Downgrade severity of `QUESTIONNAIRE_MISSING_META_PROFILE` and `QUESTIONNAIRE_INVALID_META_PROFILE` from ERROR to WARN.

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* build(deps): bump com.fasterxml.jackson.core:jackson-core (#32)

Bumps [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) from 2.18.0 to 2.18.6.
- [Commits](FasterXML/jackson-core@jackson-core-2.18.0...jackson-core-2.18.6)

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson.core:jackson-core
  dependency-version: 2.18.6
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* build(deps): bump org.thymeleaf:thymeleaf in /linter-core (#58)

Bumps org.thymeleaf:thymeleaf from 3.1.2.RELEASE to 3.1.5.RELEASE.

---
updated-dependencies:
- dependency-name: org.thymeleaf:thymeleaf
  dependency-version: 3.1.5.RELEASE
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* refine the message of the log for:
BPMN_END_EVENT_NOT_PART_OF_SUB_PROCESS("End event is not part of subprocess.")

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the github-actions group with 3 updates: [actions/checkout](https://github.com/actions/checkout), [actions/setup-java](https://github.com/actions/setup-java) and [github/codeql-action](https://github.com/github/codeql-action).


Updates `actions/checkout` from 4 to 6
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v6)

Updates `actions/setup-java` from 4 to 5
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](actions/setup-java@v4...v5)

Updates `github/codeql-action` from 3 to 4
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@v3...v4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/setup-java
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: github/codeql-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps the safe-patch-updates group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.5.4` | `3.5.6` |
| [org.apache.maven.plugins:maven-shade-plugin](https://github.com/apache/maven-shade-plugin) | `3.6.1` | `3.6.2` |
| [jakarta.xml.bind:jakarta.xml.bind-api](https://github.com/jakartaee/jaxb-api) | `4.0.2` | `4.0.5` |
| org.glassfish.jaxb:jaxb-runtime | `4.0.5` | `4.0.9` |
| [info.picocli:picocli](https://github.com/remkop/picocli) | `4.7.4` | `4.7.7` |


Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.4 to 3.5.6
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.4...surefire-3.5.6)

Updates `org.apache.maven.plugins:maven-shade-plugin` from 3.6.1 to 3.6.2
- [Release notes](https://github.com/apache/maven-shade-plugin/releases)
- [Commits](apache/maven-shade-plugin@maven-shade-plugin-3.6.1...maven-shade-plugin-3.6.2)

Updates `jakarta.xml.bind:jakarta.xml.bind-api` from 4.0.2 to 4.0.5
- [Release notes](https://github.com/jakartaee/jaxb-api/releases)
- [Commits](jakartaee/jaxb-api@4.0.2...4.0.5)

Updates `org.glassfish.jaxb:jaxb-runtime` from 4.0.5 to 4.0.9

Updates `info.picocli:picocli` from 4.7.4 to 4.7.7
- [Release notes](https://github.com/remkop/picocli/releases)
- [Changelog](https://github.com/remkop/picocli/blob/main/RELEASE-NOTES.md)
- [Commits](remkop/picocli@v4.7.4...v4.7.7)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.5.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: safe-patch-updates
- dependency-name: org.apache.maven.plugins:maven-shade-plugin
  dependency-version: 3.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: safe-patch-updates
- dependency-name: jakarta.xml.bind:jakarta.xml.bind-api
  dependency-version: 4.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: safe-patch-updates
- dependency-name: org.glassfish.jaxb:jaxb-runtime
  dependency-version: 4.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: safe-patch-updates
- dependency-name: info.picocli:picocli
  dependency-version: 4.7.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: safe-patch-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps the remaining-minor-updates group with 13 updates:

| Package | From | To |
| --- | --- | --- |
| org.camunda.bpm.model:camunda-bpmn-model | `7.22.0` | `7.24.0` |
| [org.junit.jupiter:junit-jupiter](https://github.com/junit-team/junit-framework) | `5.11.3` | `5.14.4` |
| [net.bytebuddy:byte-buddy](https://github.com/raphw/byte-buddy) | `1.15.8` | `1.18.9` |
| [net.bytebuddy:byte-buddy-agent](https://github.com/raphw/byte-buddy) | `1.15.8` | `1.18.9` |
| [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) | `2.18.0` | `2.22.0` |
| [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) | `2.18.6` | `2.21.4` |
| [com.fasterxml.jackson.core:jackson-annotations](https://github.com/FasterXML/jackson) | `2.18.0` | `2.22` |
| [org.xmlunit:xmlunit-core](https://github.com/xmlunit/xmlunit) | `2.10.3` | `2.12.0` |
| com.fasterxml.jackson.datatype:jackson-datatype-jsr310 | `2.18.2` | `2.22.0` |
| dev.dsf:dsf-bpe-process-api-v1 | `1.7.0` | `1.9.0` |
| dev.dsf:dsf-bpe-process-api-v2 | `2.0.2` | `2.1.0` |
| org.camunda.bpm:camunda-engine | `7.20.0` | `7.24.0` |
| ca.uhn.hapi.fhir:hapi-fhir-base | `5.1.0` | `5.7.9` |


Updates `org.camunda.bpm.model:camunda-bpmn-model` from 7.22.0 to 7.24.0

Updates `org.junit.jupiter:junit-jupiter` from 5.11.3 to 5.14.4
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r5.11.3...r5.14.4)

Updates `net.bytebuddy:byte-buddy` from 1.15.8 to 1.18.9
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](raphw/byte-buddy@byte-buddy-1.15.8...byte-buddy-1.18.9)

Updates `net.bytebuddy:byte-buddy-agent` from 1.15.8 to 1.18.9
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](raphw/byte-buddy@byte-buddy-1.15.8...byte-buddy-1.18.9)

Updates `net.bytebuddy:byte-buddy-agent` from 1.15.8 to 1.18.9
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](raphw/byte-buddy@byte-buddy-1.15.8...byte-buddy-1.18.9)

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.0 to 2.22.0
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `com.fasterxml.jackson.core:jackson-core` from 2.18.6 to 2.21.4
- [Commits](FasterXML/jackson-core@jackson-core-2.18.6...jackson-core-2.21.4)

Updates `com.fasterxml.jackson.core:jackson-annotations` from 2.18.0 to 2.22
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `org.xmlunit:xmlunit-core` from 2.10.3 to 2.12.0
- [Release notes](https://github.com/xmlunit/xmlunit/releases)
- [Changelog](https://github.com/xmlunit/xmlunit/blob/main/RELEASE_NOTES.md)
- [Commits](xmlunit/xmlunit@v2.10.3...v2.12.0)

Updates `com.fasterxml.jackson.datatype:jackson-datatype-jsr310` from 2.18.2 to 2.22.0

Updates `dev.dsf:dsf-bpe-process-api-v1` from 1.7.0 to 1.9.0

Updates `dev.dsf:dsf-bpe-process-api-v2` from 2.0.2 to 2.1.0

Updates `org.camunda.bpm:camunda-engine` from 7.20.0 to 7.24.0

Updates `ca.uhn.hapi.fhir:hapi-fhir-base` from 5.1.0 to 5.7.9

---
updated-dependencies:
- dependency-name: org.camunda.bpm.model:camunda-bpmn-model
  dependency-version: 7.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: remaining-minor-updates
- dependency-name: org.junit.jupiter:junit-jupiter
  dependency-version: 5.14.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: remaining-minor-updates
- dependency-name: net.bytebuddy:byte-buddy
  dependency-version: 1.18.9
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: remaining-minor-updates
- dependency-name: net.bytebuddy:byte-buddy-agent
  dependency-version: 1.18.9
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: remaining-minor-updates
- dependency-name: net.bytebuddy:byte-buddy-agent
  dependency-version: 1.18.9
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: remaining-minor-updates
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-version: 2.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: remaining-minor-updates
- dependency-name: com.fasterxml.jackson.core:jackson-core
  dependency-version: 2.21.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: remaining-minor-updates
- dependency-name: com.fasterxml.jackson.core:jackson-annotations
  dependency-version: '2.22'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: remaining-minor-updates
- dependency-name: org.xmlunit:xmlunit-core
  dependency-version: 2.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: remaining-minor-updates
- dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-jsr310
  dependency-version: 2.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: remaining-minor-updates
- dependency-name: dev.dsf:dsf-bpe-process-api-v1
  dependency-version: 1.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: remaining-minor-updates
- dependency-name: dev.dsf:dsf-bpe-process-api-v2
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: remaining-minor-updates
- dependency-name: org.camunda.bpm:camunda-engine
  dependency-version: 7.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: remaining-minor-updates
- dependency-name: ca.uhn.hapi.fhir:hapi-fhir-base
  dependency-version: 5.7.9
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: remaining-minor-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
…ter-core-for-maven-central-release

Issue/56 prepare linter core for maven central release
…e-html-reports-with-source-navigation-and-improve-remote-jar-extraction-lifecycle
DsfMultiPluginLinterTest failed with NoClassDefFoundError for
jakarta.xml.bind.annotation.XmlElement during full lint runs.

On Java 11+, JAXB is not part of the JDK. Jackson/Thymeleaf can pull in
jackson-module-jakarta-xmlbind, which requires jakarta.xml.bind.*.
Camunda only brings javax-era jakarta.xml.bind-api 2.3.3 transitively.

Declare jakarta.xml.bind-api 4.0.2 explicitly so integration tests and
linting complete without ClassNotFound/NoClassDefFoundError.
- Update linter call sites to use renamed constants
DSF processes are started via incoming messages. Enforce at least one
message start event as a direct child of the process element; start
events inside subprocesses do not count.

- Add BpmnModelUtils.isMessageStartEvent for shared detection
- Route start event linting through message vs generic paths
- Report BPMN_MESSAGE_START_EVENT_NOT_FOUND on the process when missing
- Emit SUCCESS when a valid process-level message start exists
- Add BpmnProcessLinterMessageStartEventTest (missing, present, subprocess-only)
- Assert message start with empty message name in model linter tests
- Adjust integration/golden tests for new lint types or expectations
khalilmalla95 and others added 22 commits June 2, 2026 15:27
…elop/safe-patch-updates-6e4463ee5d

build(deps): bump the safe-patch-updates group with 5 updates
…tions/develop/github-actions-6fd126ec22

build(deps): bump the github-actions group with 3 updates
…elop/remaining-minor-updates-fbde98637e

build(deps): bump the remaining-minor-updates group with 13 updates
Introduce separate LintingType constants for message start/end events,
message intermediate throw events, send tasks, and receive tasks.
Remove the generic BPMN_EVENT_NAME_EMPTY enum value.
…n present

Treat a BPMN message reference on message intermediate throw events as
informational rather than a warning.

- Rename LintingType to BPMN_MESSAGE_INTERMEDIATE_THROW_EVENT_HAS_MESSAGE_REFERENCE
- Downgrade severity from WARN to INFO when a message reference exists
- Remove the lint item when no message reference is defined
- Clarify the lint message text to mention "message reference"
…1 and v2

Fix BpmnMessageEventImplementationLinter so validation matches DSF BPE runtime
requirements for both API versions.

V1:
- Require JavaDelegate (error) for message end and intermediate throw events
- Error when the class does not extend AbstractTaskMessageSend
- Use element-specific LintingTypes for the abstract-class erroring

V2:
- Validate MessageEndEvent vs MessageIntermediateThrowEvent separately
- Use BPMN_END_EVENT_NO_INTERFACE_CLASS_IMPLEMENTING for end events
- Use BPMN_INTERMEDIATE_THROW_EVENT_NO_INTERFACE_CLASS_IMPLEMENTING for
  intermediate throw events (previously both incorrectly used the end-event type)

Add LintingType entries and BpmnMessageEventImplementationLinterTest to cover
class-not-found, wrong-interface, and regression cases per element type.
…PLE_OUTGOING_FLOWS_BUT_NAME_IS_EMPTY to WARN
Field injections provided as camunda:expression were always
reported as BPMN_FIELD_INJECTION_NOT_STRING_LITERAL. For DSF API v2,
expressions are valid; only API v1 still requires string literals.

When an expression is used under API v2, record a success item and
skip static per-field and FHIR cross-checks for that field, since
values cannot be resolved at lint time.
Rename BPMN_PRACTITIONER_ROLE_HAS_NO_VALUE_OR_NULL and
BPMN_PRACTITIONERS_HAS_NO_VALUE_OR_NULL to
BPMN_USER_TASK_LISTENER_PRACTITIONER_ROLE_INPUT_EMPTY and
BPMN_USER_TASK_LISTENER_PRACTITIONERS_INPUT_EMPTY, and move them
into the BPMN user task listener section.

Update default messages to state that the Camunda input parameter is
defined on the task listener but has no value. Adjust references in
BpmnListenerLinter and tests.
…in-dsf-linter-improve-log-messages-and-review-bpmn-types

# Conflicts:
#	linter-core/src/main/java/dev/dsf/linter/bpmn/BpmnProcessLinter.java
#	linter-core/src/main/java/dev/dsf/linter/output/LintingType.java
#	linter-core/src/main/java/dev/dsf/linter/util/bpmn/linters/BpmnEndEventLinter.java
#	linter-core/src/main/java/dev/dsf/linter/util/bpmn/linters/BpmnMessageEventImplementationLinter.java
…l-reports-with-source-navigation-and-improve-remote-jar-extraction-lifecycle

Issue/69 enhance html reports with source navigation and improve remote jar extraction lifecycle
…f-linter-improve-log-messages-and-review-bpmn-types

Issue/71 maintain dsf linter improve log messages and review bpmn types
@khalilmalla95 khalilmalla95 added this to the 0.1.3 milestone Jun 8, 2026
@khalilmalla95 khalilmalla95 requested review from jaboehri and schwzr June 8, 2026 10:28
@khalilmalla95 khalilmalla95 self-assigned this Jun 8, 2026
@khalilmalla95 khalilmalla95 linked an issue Jun 8, 2026 that may be closed by this pull request
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

RELEASE v0.1.3 Add linting rule to validate BPMN class references against Spring configuration beans

3 participants