Issue #34890: Use Spotless to reduce the pain on fixing checkstyle issues#34880
Issue #34890: Use Spotless to reduce the pain on fixing checkstyle issues#34880Pankraz76 wants to merge 1 commit intogradle:masterfrom
Spotless to reduce the pain on fixing checkstyle issues#34880Conversation
There was a problem hiding this comment.
It seems ether check or the config is broken.
As check is kind of obsolete, serving mostly as a second gate, as automation tools like spot, or rewrite, can handle this much cheaper.
There was a problem hiding this comment.
plz how to fix this?
Did not worked out with: ./gradlew --write-verification-metadata sha256 help
| org.gradle.dependency.verification=lenient | |
| org.gradle.dependency.verification=strict |
* What went wrong:
A problem occurred configuring root project 'gradle'.
> Dependency verification failed for configuration 'classpath'
7 artifacts failed verification:
- durian-swt.os-4.3.0.jar (com.diffplug.durian:durian-swt.os:4.3.0) from repository Gradle Central Plugin Repository
- org.eclipse.osgi-3.23.100.jar (org.eclipse.platform:org.eclipse.osgi:3.23.100) from repository Gradle Central Plugin Repository
- solstice-1.8.1.jar (dev.equo.ide:solstice:1.8.1) from repository Gradle Central Plugin Repository
- spotless-lib-3.3.1.jar (com.diffplug.spotless:spotless-lib:3.3.1) from repository Gradle Central Plugin Repository
- spotless-lib-extra-3.3.1.jar (com.diffplug.spotless:spotless-lib-extra:3.3.1) from repository Gradle Central Plugin Repository
- spotless-plugin-gradle-7.2.1.jar (com.diffplug.spotless:spotless-plugin-gradle:7.2.1) from repository Gradle Central Plugin Repository
- xz-1.9.jar (org.tukaani:xz:1.9) from repository Gradle Central Plugin Repository
This can indicate that a dependency has been compromised. Please carefully verify the signatures and checksums. Key servers are disabled, this can indicate that you need to update the local keyring with the missing keys.
Open this report for more details: file:///Users/vincent.potucek/IdeaProjects/gradle/build/reports/dependency-verification/at-1756896991953/dependency-verification-report.html
There was a problem hiding this comment.
…issues Signed-off-by: Vincent Potucek <[email protected]>
ov7a
left a comment
There was a problem hiding this comment.
Thank you for being interested in improving the code quality of OSS.
While this PR has some potential useful changes, most of them are white-space ones.
There are unused imports, but they are in the code that predates the configuration of code-quality tools we have. I believe it will be autofixed once any change will be done to these files.
Regarding the setup: we don't think it should be set up as a GH action. We already have sanity check task with static analysis tools enabled.
Lastly, we write our gradle scripts with Kotlin Script, not Groovy. And verification failures is a no-go.
I don't think we have a solid reason to change the static analysis tool at this point.
Given that the PR is mostly white space and has little impact on users, closing this.
Issue #34890: Use
Spotlessto reduce the pain on fixing checkstyle issuesIm wondering how such a big projects does not follow the common path to apply the check burden with spot to improve the developer experience, as an example discussed in:
Also was trying to use rewrite to fix the wildcard imports but it does not scale.
Context
Contributor Checklist
<subproject>/src/integTest) to verify changes from a user perspective.<subproject>/src/test) to verify logic../gradlew sanityCheck../gradlew <changed-subproject>:quickTest.Reviewing cheatsheet
Before merging the PR, comments starting with
ref:
Rewrite & PMDcovering S1144: Unused "private" methods should be removed opensearch-project/OpenSearch#18791Rewritecovering S1144: Unused "private" methods should be removed checkstyle/checkstyle#17545Rewrite:UpgradeToJava17checkstyle/checkstyle#17730Spotlessto reduce the pain on fixing checkstyle issues checkstyle/checkstyle#17733Spotlessto reduce the pain on fixing checkstyle issues checkstyle/checkstyle#17732