Skip to content
This repository was archived by the owner on Feb 25, 2025. It is now read-only.

Conversation

@sealesj
Copy link
Contributor

@sealesj sealesj commented Dec 18, 2023

Flutter dependencies coming from Github origins need to be mirrored so that they are not taken directly from github. This is part of an effort to standardize the dependency sources from third party dependencies.

Google is creating internal mirrors for these public repos, but we would be limited by the relatively strict access placed on those new repos, requiring this solution of Flutter GoB mirrors (as has already been done with non-Google Github repos and also Fuchsia-owned mirrors)

List which issues are fixed by this PR. You must list at least one issue.
Addresses b/316597637

If you had to change anything in the flutter/tests repo, include a link to the migration guide as per the breaking change policy.

Pre-launch Checklist

  • I read the Contributor Guide and followed the process outlined there for submitting PRs.
  • I read the Tree Hygiene wiki page, which explains my responsibilities.
  • I read and followed the Flutter Style Guide and the C++, Objective-C, Java style guides.
  • I listed at least one issue that this PR fixes in the description above.
  • I added new tests to check the change I am making or feature I am adding, or the PR is test-exempt. See testing the engine for instructions on writing and running engine tests.
  • I updated/added relevant documentation (doc comments with ///).
  • I signed the CLA.
  • All existing and new tests are passing.

If you need help, consider asking for advice on the #hackers-new channel on Discord.

@sealesj sealesj added the Work in progress (WIP) Not ready (yet) for review! label Dec 18, 2023
@sealesj sealesj marked this pull request as ready for review December 20, 2023 22:44
@sealesj sealesj requested review from dnfield and removed request for jason-simmons December 21, 2023 15:53
@sealesj sealesj requested a review from zanderso January 9, 2024 15:15
@sealesj sealesj removed the Work in progress (WIP) Not ready (yet) for review! label Jan 9, 2024
@sealesj sealesj mentioned this pull request Jan 9, 2024
8 tasks
@sealesj sealesj added the autosubmit Merge PR when tree becomes green via auto submit App label Jan 9, 2024
@auto-submit auto-submit bot merged commit f989a55 into flutter:main Jan 9, 2024
engine-flutter-autoroll added a commit to engine-flutter-autoroll/flutter that referenced this pull request Jan 9, 2024
engine-flutter-autoroll added a commit to engine-flutter-autoroll/flutter that referenced this pull request Jan 9, 2024
auto-submit bot pushed a commit to flutter/flutter that referenced this pull request Jan 9, 2024
…141191)

flutter/engine@036b39f...a35e3b0

2024-01-09 [email protected] Simplify PlatformViewRenderTarget interface (flutter/engine#49639)
2024-01-09 [email protected] Roll Skia from 05039d6ed8d8 to 8c8be76a62c0 (3 revisions) (flutter/engine#49638)
2024-01-09 [email protected] Skip flaky test on mac in http_disallow_http_connections_test.dart (flutter/engine#49635)
2024-01-09 [email protected] Resize the RenderTarget before creating and passing its Surface to the VirtualDisplay (flutter/engine#49619)
2024-01-09 [email protected] Migrate to Flutter mirrors for Google-owned Github repositories (flutter/engine#49203)
2024-01-09 [email protected] Roll Skia from ee263c34e03d to 05039d6ed8d8 (2 revisions) (flutter/engine#49636)

If this roll has caused a breakage, revert this CL and stop the roller
using the controls here:
https://autoroll.skia.org/r/flutter-engine-flutter-autoroll
Please CC [email protected],[email protected],[email protected] on the revert to ensure that a human
is aware of the problem.

To file a bug in Flutter: https://github.com/flutter/flutter/issues/new/choose

To report a problem with the AutoRoller itself, please file a bug:
https://issues.skia.org/issues/new?component=1389291&template=1850622

Documentation for the AutoRoller is here:
https://skia.googlesource.com/buildbot/+doc/main/autoroll/README.md
@whesse
Copy link
Contributor

whesse commented Jan 10, 2024

The mirror https://flutter.googlesource.com/third_party/googleapis.dart.git is not publicly readable, so checkouts of Flutter engine aren't working on monorepo and probably for the public.

I can't see the GoB ACLs for this repo, or fix them. I'll try and revert this change.

@whesse whesse added the revert Label used to revert changes in a closed and merged pull request. label Jan 10, 2024
auto-submit bot pushed a commit that referenced this pull request Jan 10, 2024
@auto-submit auto-submit bot removed the revert Label used to revert changes in a closed and merged pull request. label Jan 10, 2024
auto-submit bot added a commit that referenced this pull request Jan 10, 2024
…ies" (#49671)

Reverts #49203
Initiated by: whesse
This change reverts the following previous change:
Original Description:
Flutter dependencies coming from Github origins need to be mirrored so that they are not taken directly from github. This is part of an effort to standardize the dependency sources from third party dependencies.

Google is creating internal mirrors for these public repos, but we would be limited by the relatively strict access placed on those new repos, requiring this solution of Flutter GoB mirrors (as has already been done with non-Google Github repos and also Fuchsia-owned mirrors)

*List which issues are fixed by this PR. You must list at least one issue.*
Addresses b/316597637

*If you had to change anything in the [flutter/tests] repo, include a link to the migration guide as per the [breaking change policy].*

[C++, Objective-C, Java style guides]: https://github.com/flutter/engine/blob/main/CONTRIBUTING.md#style
@zanderso zanderso added the revert Label used to revert changes in a closed and merged pull request. label Jan 10, 2024
@auto-submit
Copy link
Contributor

auto-submit bot commented Jan 10, 2024

Unable to create the revert pull request due to ProcessException: Standard out
Auto-merging DEPS
On branch revert_f989a5529ab6b8d52d0e972d4d53d212514c9a91
You are in a sparse checkout with 1% of tracked files present.

nothing to commit, working tree clean
Command: git revert --no-edit -m 1 f989a55

@auto-submit auto-submit bot removed the revert Label used to revert changes in a closed and merged pull request. label Jan 10, 2024
@sealesj sealesj deleted the mirror_google_github branch January 10, 2024 16:14
@sealesj sealesj mentioned this pull request Jan 11, 2024
8 tasks
auto-submit bot pushed a commit that referenced this pull request Jan 11, 2024
This change integrates directly with osv-scanner rather than using the OSV API to query each dependency for vulnerabilities.

- use [lockfile format](#49203) for third party deps rather than a flat file
- let osv-scanner do the work of checking for vulns rather than API calls to OSV database
- let osv-scanner create and populate the SARIF results 

A successful run of the vulnerability scanner can be seen in the tests of this PR.

*If you had to change anything in the [flutter/tests] repo, include a link to the migration guide as per the [breaking change policy].*

[C++, Objective-C, Java style guides]: https://github.com/flutter/engine/blob/main/CONTRIBUTING.md#style
auto-submit bot pushed a commit that referenced this pull request Jan 11, 2024
Reland of #49203 after permissions issue. The googleapis.dart mirror is now verified to be publicly available.

Also remove github dependency variable since there are no more existing uses.

[C++, Objective-C, Java style guides]: https://github.com/flutter/engine/blob/main/CONTRIBUTING.md#style
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

autosubmit Merge PR when tree becomes green via auto submit App

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants