fabric-chaincode-java

fabric-chaincode-java copied to clipboard

setEvent documentation should include information about it being only usable in the outer most chaincode

1

As mentioned here https://hlf.readthedocs.io/en/latest/developapps/transactioncontext.html#stub and also https://github.com/hyperledger/fabric-chaincode-go/blob/main/shim/interfaces.go The information about it only be usable in the outer most chaincode should be added

davidkel

Patched 🐛 Deserialization of Untrusted Data

1

**CVE-2017-5929** `9.8/ 10` CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H ## Sumarry of issue vulnerabilities: QOS.ch Logback before 1.2.0 has a serialization vulnerability affecting the SocketServer and ServerSocketReceiver components. The RemoteStreamAppenderClient class in logback-classic and the...

imhunterand

Upgrade the version of JUnit vintage gradle used

1

Again for CVE-2020-15250. testImplementation 'org.junit.vintage:junit-vintage-engine:5.3.1' imports `junit:junit:4.12`... gotta move to `org.junit.vintage:junit-vintage-engine:5.10.2` to get to `junit:junit:4.13.2`.

benjsmi

A few remaining vulnerable dependencies

1

@bestbeforetoday thanks in advance for your time on this. Two PRs open that have both passed the checks. Should be helpful for keeping us up-to-snuff on the security/dependency side of...

benjsmi

With java records, getters are accessed fluently (e.g. `getId()` -> `id()`). The current serializer requires traditional getters and is not compatible with standard records without explicitly adding getters to it.

Breina

The choice of delimiter key used in the CompositeKey is subjective. The chaincode implementer may choose to have their own delimiter logic in place. The keys added in the CompositeKey...

arsulegai

**As a** contributor **I want** integration tests to use the development chaincode Docker image **So that** I can confirm that a release version of the codebase will function correctly The...

bestbeforetoday

**As a** contributor **I want** snapshot versions of fabric-chaincode-shim to be published to GitHub Packages on every change **So that** I can use development fixes or features before a formal...

bestbeforetoday

**As a** chaincode developer **I want** chaincode contained images tagged as `3.0` in Docker Hub **So that** I can deploy chaincode to Fabric v3 using the default (Docker) chaincode builder...

bestbeforetoday

Use Spotless for code formatting

1

Spotless is widely used opinionated Java code formatter. It will also fix incorrect formatting using `./gradlew spotlessApply`, avoiding the need for contributors to manually correct any formatting violations flagged by...

bestbeforetoday