Merge pull request #36 from hmcts/add-attestation

addition of attest-build-provenance

Author: duncancrawford

.github/workflows/ci-draft.yml

@@ -35,6 +35,9 @@ jobs:
   Update-Spec-Version:
     needs: [Artefact-Version]
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      attestations: write
     outputs:
       upload_artifact_name: ${{ steps.update_spec.outputs.upload_artifact_name }}
     steps:

.github/workflows/ci-released.yml

@@ -31,6 +31,9 @@ jobs:
   Update-Spec-Version:
     needs: [Artefact-Version]
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      attestations: write
     outputs:
       upload_artifact_name: ${{ steps.update_spec.outputs.upload_artifact_name }}
     steps:

build.gradle

@@ -59,19 +59,19 @@ sourceSets {
 }
 
 dependencies {
-  implementation 'com.fasterxml.jackson.core:jackson-core:2.19.0'  // Use a compatible version
-  implementation 'com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.19.0' // For Java 8 date/time
+  implementation 'com.fasterxml.jackson.core:jackson-core:2.19.2'  // Use a compatible version
+  implementation 'com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.19.2' // For Java 8 date/time
   implementation 'org.slf4j:slf4j-api:2.0.17'
   implementation 'ch.qos.logback:logback-classic:1.5.18'
   //If you use the validation, also add this
-  implementation 'io.swagger.parser.v3:swagger-parser:2.1.28'
-  implementation 'io.swagger.core.v3:swagger-annotations:2.2.32'
+  implementation 'io.swagger.parser.v3:swagger-parser:2.1.31'
+  implementation 'io.swagger.core.v3:swagger-annotations:2.2.34'
 
   implementation 'javax.annotation:javax.annotation-api:1.3.2'
 
   implementation 'org.openapitools:jackson-databind-nullable:0.2.6'
 
-  testImplementation(platform('org.junit:junit-bom:5.12.2'))
+  testImplementation(platform('org.junit:junit-bom:5.13.4'))
   testImplementation 'org.junit.jupiter:junit-jupiter-api'
   testRuntimeOnly 'org.junit.jupiter:junit-jupiter-engine'
   testRuntimeOnly 'org.junit.platform:junit-platform-launcher'