Skip to content

chore(deps): update dependency org.assertj:assertj-core to v3.27.7 [security] - #1491

Closed
dd-octo-sts[bot] wants to merge 1 commit into
developfrom
engraver-auto-version-upgrade/renovate/maven-org.assertj-assertj-core-vulnerability
Closed

dd-octo-sts[bot] wants to merge 1 commit into
developfrom
engraver-auto-version-upgrade/renovate/maven-org.assertj-assertj-core-vulnerability

Conversation

@dd-octo-sts

@dd-octo-sts dd-octo-sts Bot commented Oct 12, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
org.assertj:assertj-core (source) dependencies minor 3.18.1 → 3.27.7

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

🚨 Security Vulnerability Fix

Severity: HIGH

This PR addresses a detected security vulnerability. Please review and merge promptly.

@dd-octo-sts
dd-octo-sts Bot marked this pull request as ready for review October 12, 2026 20:09
@dd-octo-sts
dd-octo-sts Bot requested a review from a team as a code owner October 12, 2026 20:09
Copilot AI balanced review requested due to automatic review settings October 12, 2026 20:09

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

The valid dependency upgrade is complete and consistently applied to every AssertJ consumer.

0 open findings

What changed in this PR

Updates AssertJ across all Android test modules to address the reported security vulnerability.

Changes:

  • Upgrades org.assertj:assertj-core from 3.18.1 to 3.27.7.
  • Applies the update consistently across all four consumers.
File Description
packages/​react-native-webview/​android/​build.gradle Updates AssertJ test dependency.
packages/​react-native-session-replay/​android/​build.gradle Updates AssertJ test dependency.
packages/​internal-testing-tools/​android/​build.gradle Updates AssertJ test dependency.
packages/​core/​android/​build.gradle Updates AssertJ test dependency.

🧠 Review effort: Balanced


💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

@sbarrio sbarrio closed this Oct 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants