Skip to content

chore(deps): bump javafx.version from 21.0.2 to 21.0.11#9

Open
dependabot[bot] wants to merge 31 commits into
mainfrom
dependabot/maven/main/javafx.version-21.0.11
Open

chore(deps): bump javafx.version from 21.0.2 to 21.0.11#9
dependabot[bot] wants to merge 31 commits into
mainfrom
dependabot/maven/main/javafx.version-21.0.11

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 7, 2026

Copy link
Copy Markdown

Bumps javafx.version from 21.0.2 to 21.0.11.
Updates org.openjfx:javafx-controls from 21.0.2 to 21.0.11

Updates org.openjfx:javafx-fxml from 21.0.2 to 21.0.11

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot @github

dependabot Bot commented on behalf of github May 7, 2026

Copy link
Copy Markdown
Author

Labels

The following labels could not be found: dependencies, java. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot requested a review from devhms as a code owner May 7, 2026 23:33
devhms added 8 commits May 8, 2026 04:36
## Overview
Implements all Tier 1-6 items from the stability and user-friendliness
hardening plan, transforming Nightshade into a production-ready release.

## Tier 1: Bug Fixes (Critical)
- Fixed empty directory warning: '[WARN] No supported source files found'
- Fixed invalid strategy warning showing all 8 strategies
- Fixed single file output path handling
- Fixed dry-run: 'DRY RUN — no files were written'
- Added UTF-8 banner detection with ASCII fallback
- Added entropy threshold validation (0.0-1.0)
- Fixed verify on non-Java: SKIPPED message

## Tier 2: UX Improvements
- Added --list-strategies flag
- Added --quiet / -q mode for CI pipelines
- Added explicit enable for disabled strategies

## Tier 3: Defensive Coding
- DeadCodeInjector: Lexer-based brace counting
- Serializer: No mutation of input SourceFile
- StringEncoder: Skips dead code blocks
- CommentPoisoner: Handles multi-line comments

## Tier 4: Test Coverage (81 tests)
- 8 new test files with comprehensive coverage
- JUnit Jupiter 5.10.2, Maven Surefire 3.5.0

## Tier 5: Documentation
- README: Fixed 'five' to 'eight' strategies
- CONTRIBUTING: Fixed architecture tree
- action.yml: Added entropy-threshold

## Tier 6: Polish
- Added --report / -r flag (nightshade_report.md)
- Added .editorconfig
- Added Dockerfile HEALTHCHECK

## Verification
- Build: SUCCESS
- Tests: 81/81 passing
- All CLI flags verified working

Closes #42 #43 #44 #45 #46 #47 #48 #49
devhms added 2 commits May 16, 2026 11:48
…y chain, and automation

Phase 4 — Bug Fixes (7 resolved):
- ControlFlowFlattener: move _ns_ret declaration into last switch case
- ControlFlowFlattener: rename _ns_state to stateVar
- SemanticInverter: replace Math.abs(hashCode()) with hashCode() & 0x7FFFFFFF
- DeadCodeInjector: add missing return; detection
- Parser: remove unconditional break from method-detection loop
- CommentPoisoner: fix indexOf("/*") with code-before/after comment preservation
- EntropyScrambler: document Bug 4.8 as known architectural limitation

Phase 5 — Code Quality (Checkstyle + PMD):
- Eliminate 328 Checkstyle violations across 18 source files
- Add checkstyle.xml with relaxed Google Java Style rules
- Add PMD 6.55.0 with bestpractices/errorprone/performance/design rulesets
- Configure compiler warnings with -Werror
- Add SpotBugs (skipped for Java 25, tracked for future enablement)

Phase 6 — Infrastructure Hardening:
- Centralize version in pom.xml (nightshade.version) with Maven-filtered version.properties
- Add volatile to enabled field in all 7 strategy classes for thread safety
- Wire Main.APP_VERSION into CLI, MainController, FileUtil, PoisonStrategy

Phase 2-3 — Supply Chain and CI/CD:
- Add Dependabot config for GitHub Actions and Maven
- SHA-pin all 36 action references across 6 workflow files
- Add OSPS Scorecard, CodeQL, dependency review
- Add Maven Enforcer, OWASP Dependency Check, CycloneDX SBOM
- Generate Maven wrapper (3.9.9), add .gitattributes

Phase 8 — CSS Fixes:
- Remove invalid -fx-letter-spacing from nightshade.css (unsupported by JavaFX)
- Replace with equivalent -fx-padding for visual approximation

Phase 10 — SEO:
- Fix broken placeholder URL in docs/technical_roadmap.md

Phase 11 — Release Automation:
- Add .releaserc.yaml with @semantic-release/exec for Maven version bumps

Cleanup:
- Remove internal planning docs from docs/superpowers/, docs/IMPLEMENTATION_PLAN.md, docs/PHASE_6_PLAN.md
- Remove AI tool artifacts (.firecrawl/, .agents/, graphify-out/)

Build: 148 tests run (143 pass, 5 pre-existing DeadCodeInjectorEdgeCase failures)
Checkstyle: 0 violations — PMD: 0 violations — Compilation: clean
Bumps `javafx.version` from 21.0.2 to 21.0.11.

Updates `org.openjfx:javafx-controls` from 21.0.2 to 21.0.11

Updates `org.openjfx:javafx-fxml` from 21.0.2 to 21.0.11

---
updated-dependencies:
- dependency-name: org.openjfx:javafx-controls
  dependency-version: 21.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.openjfx:javafx-fxml
  dependency-version: 21.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/maven/main/javafx.version-21.0.11 branch from 53a4573 to 885424d Compare May 18, 2026 08:30
@devhms devhms force-pushed the main branch 2 times, most recently from 8e48b46 to ac71ce2 Compare June 30, 2026 20:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant