Skip to content

Upgrade Gradle to 9.8.1 - #12796

Open
bric3 wants to merge 1 commit into
masterfrom
bdu/upgrade-gradle-9.8.1
Open

Upgrade Gradle to 9.8.1#12796
bric3 wants to merge 1 commit into
masterfrom
bdu/upgrade-gradle-9.8.1

Conversation

@bric3

@bric3 bric3 commented Oct 8, 2026

Copy link
Copy Markdown
Contributor

What Does This Do

Upgrade the Gradle wrapper from 9.8.0 to 9.8.1, pin its distribution checksum, regenerate the wrapper JAR, and align the GitLab CI version.

Motivation

Gradle 9.8.1 addresses three security vulnerabilities and three regressions:

  • Prevent unauthenticated Java deserialization in worker-to-daemon communication.
  • Prevent Java deserialization before client-to-daemon authentication.
  • Disable repositories that fail to establish SSL connections, preventing malicious artifact exposure.
  • Resolve invalid-toolchain warnings on Debian and Ubuntu packaged systems.
  • Preserve root java.util.logging handlers installed by a custom LogManager, restoring Quarkus test log capture.
  • Fix a dependency resolution regression.

Additional Notes

The full test suite was not run locally. Akka HTTP 10.6 was omitted from local configuration because akkaRepositoryToken is not configured.

Contributor Checklist

@bric3 bric3 added type: bug fix Bug fix tag: no release notes Changes to exclude from release notes tag: dependencies Dependencies related changes comp: tooling Build & Tooling tag: ai generated Largely based on code generated by an AI or LLM labels Oct 8, 2026
@bric3
bric3 marked this pull request as ready for review October 8, 2026 17:19
@bric3
bric3 requested review from a team as code owners October 8, 2026 17:19
@bric3
bric3 requested review from amarziali and erikayasuda and removed request for a team October 8, 2026 17:19
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 8, 2026 •
edited
Loading

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-08T17:21:18.583197Z 59c7210 Draft marked ready
🔒 Security Review ✅ Completed 2026-10-08T17:23:18.062832Z 59c7210 Draft marked ready
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

datadog-datadog-us1-prod[bot]
datadog-datadog-us1-prod Bot reviewed Oct 8, 2026
View reviewed changes

@datadog-datadog-us1-prod datadog-datadog-us1-prod Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Bits Code Review: PASS

More details

The regenerated wrapper JAR matches the cached Gradle 9.8.1 distribution, and the wrapper URL agrees with the CI version. The distribution checksum was not independently verified.

Was this helpful? React 👍 or 👎

Open Bits AI session

🤖 Bits Code Review · Commit 59c7210 · @DataDog review to ask questions

@datadog-datadog-us1-prod

This comment has been minimized.

Sign in to view
@dd-octo-sts

dd-octo-sts Bot commented Oct 8, 2026

Copy link
Copy Markdown
Contributor

🟢 Java Benchmark SLOs — All performance SLOs passed

Suite Status
Startup 🟢 pass

SLO thresholds are defined here based on automatically generated metrics. A warning is raised when results are within 5% of the threshold.

PR vs. master results
Scenario Candidate master Δ (95% CI of mean)
startup:insecure-bank:iast:Agent 14.77 s 14.63 s [+0.2%; +1.8%] (maybe worse)
startup:insecure-bank:tracing:Agent 13.56 s 13.61 s [-1.1%; +0.3%] (no difference)
startup:petclinic:appsec:Agent 17.68 s 17.54 s [-0.0%; +1.6%] (no difference)
startup:petclinic:iast:Agent 17.39 s 17.56 s [-1.8%; -0.2%] (maybe better)
startup:petclinic:profiling:Agent 17.44 s 17.25 s [+0.1%; +2.1%] (maybe worse)
startup:petclinic:sca:Agent 16.96 s 17.54 s [-7.5%; +0.9%] (no difference)
startup:petclinic:tracing:Agent 16.63 s 16.67 s [-1.1%; +0.6%] (no difference)

Commit: 59c72108 · CI Pipeline · Benchmarking Platform UI

Load and DaCapo benchmarks can be triggered manually in the GitLab pipeline. Results will appear in the Benchmarking Platform UI after completion.

@bric3
bric3 enabled auto-merge October 9, 2026 07:34
@bric3
bric3 added this pull request to the merge queue Oct 10, 2026
@dd-octo-sts

dd-octo-sts Bot commented Oct 10, 2026

Copy link
Copy Markdown
Contributor

/merge

@gh-worker-devflow-routing-ef8351

gh-worker-devflow-routing-ef8351 Bot commented Oct 10, 2026 •
edited
Loading

Copy link
Copy Markdown

View all feedbacks in Devflow UI.

2026-10-10 17:30:51 UTC ℹ️ Start processing command /merge

2026-10-10 17:30:56 UTC ℹ️ MergeQueue: pull request added to the queue

The expected merge time in master is approximately 1h (p90).

2026-10-10 19:31:19 UTC ❌ MergeQueue: The build pipeline has timeout

The merge request has been interrupted because the build 2274605235783063712 took longer than expected. The current limit for the base branch 'master' is 120 minutes.

@github-merge-queue
github-merge-queue Bot removed this pull request from the merge queue due to failed status checks Oct 10, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@datadog-datadog-us1-prod datadog-datadog-us1-prod[bot] datadog-datadog-us1-prod[bot] left review comments
@AlexeyKuznetsov-DD AlexeyKuznetsov-DD AlexeyKuznetsov-DD approved these changes
@amarziali amarziali Awaiting requested review from amarziali amarziali is a code owner automatically assigned from DataDog/apm-lang-platform-java
@erikayasuda erikayasuda Awaiting requested review from erikayasuda erikayasuda is a code owner automatically assigned from DataDog/apm-release-platform

Assignees

No one assigned

Labels

comp: tooling Build & Tooling tag: ai generated Largely based on code generated by an AI or LLM tag: dependencies Dependencies related changes tag: no release notes Changes to exclude from release notes type: bug fix Bug fix

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@bric3 @AlexeyKuznetsov-DD