test by debjit-hyland · Pull Request #758 · nuxeo/nuxeo-ai

debjit-hyland · 2026-05-26T12:27:00Z

test

* NXCON-44: Update README.md with latest released versions * NXCON-44: added a missed version

Ecosystems: - Maven - GitHub Actions

…stry

Bumps the version-updates group with 13 updates: | Package | From | To | | --- | --- | --- | | [io.dropwizard.metrics:metrics-core](https://github.com/dropwizard/metrics) | `4.1.17` | `4.1.36` | | [com.google.protobuf:protobuf-java](https://github.com/protocolbuffers/protobuf) | `4.29.3` | `4.29.5` | | [io.grpc:grpc-auth](https://github.com/grpc/grpc-java) | `1.64.0` | `1.64.2` | | [io.grpc:grpc-core](https://github.com/grpc/grpc-java) | `1.64.0` | `1.64.2` | | [io.grpc:grpc-netty-shaded](https://github.com/grpc/grpc-java) | `1.64.0` | `1.64.2` | | [io.grpc:grpc-stub](https://github.com/grpc/grpc-java) | `1.64.0` | `1.64.2` | | [io.grpc:grpc-grpclb](https://github.com/grpc/grpc-java) | `1.64.0` | `1.64.2` | | [io.grpc:grpc-alts](https://github.com/grpc/grpc-java) | `1.64.0` | `1.64.2` | | [io.grpc:grpc-api](https://github.com/grpc/grpc-java) | `1.64.0` | `1.64.2` | | [io.grpc:grpc-context](https://github.com/grpc/grpc-java) | `1.64.0` | `1.64.2` | | [io.grpc:grpc-protobuf](https://github.com/grpc/grpc-java) | `1.64.0` | `1.64.2` | | [io.grpc:grpc-protobuf-lite](https://github.com/grpc/grpc-java) | `1.64.0` | `1.64.2` | | [kr.motd.maven:os-maven-plugin](https://github.com/trustin/os-maven-plugin) | `1.7.0` | `1.7.1` | Updates `io.dropwizard.metrics:metrics-core` from 4.1.17 to 4.1.36 - [Release notes](https://github.com/dropwizard/metrics/releases) - [Commits](dropwizard/metrics@v4.1.17...v4.1.36) Updates `com.google.protobuf:protobuf-java` from 4.29.3 to 4.29.5 - [Release notes](https://github.com/protocolbuffers/protobuf/releases) - [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/protobuf_release.bzl) - [Commits](https://github.com/protocolbuffers/protobuf/commits) Updates `io.grpc:grpc-auth` from 1.64.0 to 1.64.2 - [Release notes](https://github.com/grpc/grpc-java/releases) - [Commits](grpc/grpc-java@v1.64.0...v1.64.2) Updates `io.grpc:grpc-core` from 1.64.0 to 1.64.2 - [Release notes](https://github.com/grpc/grpc-java/releases) - [Commits](grpc/grpc-java@v1.64.0...v1.64.2) Updates `io.grpc:grpc-netty-shaded` from 1.64.0 to 1.64.2 - [Release notes](https://github.com/grpc/grpc-java/releases) - [Commits](grpc/grpc-java@v1.64.0...v1.64.2) Updates `io.grpc:grpc-stub` from 1.64.0 to 1.64.2 - [Release notes](https://github.com/grpc/grpc-java/releases) - [Commits](grpc/grpc-java@v1.64.0...v1.64.2) Updates `io.grpc:grpc-grpclb` from 1.64.0 to 1.64.2 - [Release notes](https://github.com/grpc/grpc-java/releases) - [Commits](grpc/grpc-java@v1.64.0...v1.64.2) Updates `io.grpc:grpc-alts` from 1.64.0 to 1.64.2 - [Release notes](https://github.com/grpc/grpc-java/releases) - [Commits](grpc/grpc-java@v1.64.0...v1.64.2) Updates `io.grpc:grpc-api` from 1.64.0 to 1.64.2 - [Release notes](https://github.com/grpc/grpc-java/releases) - [Commits](grpc/grpc-java@v1.64.0...v1.64.2) Updates `io.grpc:grpc-context` from 1.64.0 to 1.64.2 - [Release notes](https://github.com/grpc/grpc-java/releases) - [Commits](grpc/grpc-java@v1.64.0...v1.64.2) Updates `io.grpc:grpc-protobuf` from 1.64.0 to 1.64.2 - [Release notes](https://github.com/grpc/grpc-java/releases) - [Commits](grpc/grpc-java@v1.64.0...v1.64.2) Updates `io.grpc:grpc-protobuf-lite` from 1.64.0 to 1.64.2 - [Release notes](https://github.com/grpc/grpc-java/releases) - [Commits](grpc/grpc-java@v1.64.0...v1.64.2) Updates `io.grpc:grpc-core` from 1.64.0 to 1.64.2 - [Release notes](https://github.com/grpc/grpc-java/releases) - [Commits](grpc/grpc-java@v1.64.0...v1.64.2) Updates `io.grpc:grpc-netty-shaded` from 1.64.0 to 1.64.2 - [Release notes](https://github.com/grpc/grpc-java/releases) - [Commits](grpc/grpc-java@v1.64.0...v1.64.2) Updates `io.grpc:grpc-stub` from 1.64.0 to 1.64.2 - [Release notes](https://github.com/grpc/grpc-java/releases) - [Commits](grpc/grpc-java@v1.64.0...v1.64.2) Updates `io.grpc:grpc-grpclb` from 1.64.0 to 1.64.2 - [Release notes](https://github.com/grpc/grpc-java/releases) - [Commits](grpc/grpc-java@v1.64.0...v1.64.2) Updates `io.grpc:grpc-alts` from 1.64.0 to 1.64.2 - [Release notes](https://github.com/grpc/grpc-java/releases) - [Commits](grpc/grpc-java@v1.64.0...v1.64.2) Updates `io.grpc:grpc-api` from 1.64.0 to 1.64.2 - [Release notes](https://github.com/grpc/grpc-java/releases) - [Commits](grpc/grpc-java@v1.64.0...v1.64.2) Updates `io.grpc:grpc-context` from 1.64.0 to 1.64.2 - [Release notes](https://github.com/grpc/grpc-java/releases) - [Commits](grpc/grpc-java@v1.64.0...v1.64.2) Updates `io.grpc:grpc-protobuf` from 1.64.0 to 1.64.2 - [Release notes](https://github.com/grpc/grpc-java/releases) - [Commits](grpc/grpc-java@v1.64.0...v1.64.2) Updates `io.grpc:grpc-protobuf-lite` from 1.64.0 to 1.64.2 - [Release notes](https://github.com/grpc/grpc-java/releases) - [Commits](grpc/grpc-java@v1.64.0...v1.64.2) Updates `kr.motd.maven:os-maven-plugin` from 1.7.0 to 1.7.1 - [Release notes](https://github.com/trustin/os-maven-plugin/releases) - [Commits](trustin/os-maven-plugin@os-maven-plugin-1.7.0...os-maven-plugin-1.7.1) --- updated-dependencies: - dependency-name: io.dropwizard.metrics:metrics-core dependency-version: 4.1.36 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: com.google.protobuf:protobuf-java dependency-version: 4.29.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: io.grpc:grpc-auth dependency-version: 1.64.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: io.grpc:grpc-core dependency-version: 1.64.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: io.grpc:grpc-netty-shaded dependency-version: 1.64.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: io.grpc:grpc-stub dependency-version: 1.64.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: io.grpc:grpc-grpclb dependency-version: 1.64.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: io.grpc:grpc-alts dependency-version: 1.64.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: io.grpc:grpc-api dependency-version: 1.64.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: io.grpc:grpc-context dependency-version: 1.64.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: io.grpc:grpc-protobuf dependency-version: 1.64.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: io.grpc:grpc-protobuf-lite dependency-version: 1.64.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: io.grpc:grpc-core dependency-version: 1.64.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: io.grpc:grpc-netty-shaded dependency-version: 1.64.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: io.grpc:grpc-stub dependency-version: 1.64.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: io.grpc:grpc-grpclb dependency-version: 1.64.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: io.grpc:grpc-alts dependency-version: 1.64.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: io.grpc:grpc-api dependency-version: 1.64.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: io.grpc:grpc-context dependency-version: 1.64.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: io.grpc:grpc-protobuf dependency-version: 1.64.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: io.grpc:grpc-protobuf-lite dependency-version: 1.64.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: kr.motd.maven:os-maven-plugin dependency-version: 1.7.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates ... Signed-off-by: dependabot[bot] <support@github.com>

This should fix Dependabot version update jobs timing out, trying to fetch a lot of (old) artifacts from multiple repositories. Also, private registries for Dependabot shouldn't be needed, relying on the organization-level private registry: https://packages.nuxeo.com/repository/maven-internal-build/ with "Replaces base" enabled.

In fact, this repository is still needed to fetch old artifacts. Thus, we need to configure it as a private registry in the Dependabot configuration. Otherwise, the Dependabot version update jobs are unable to authenticate to this registry, complaining with: ``` private_source_authentication_failure {source: "https://packages.nuxeo.com/repository/maven-internal"} ```

Yet, we cannot remove the `maven-internal` repository. It is still needed for the parent POM of `org.nuxeo.ai:nuxeo-jwt-authenticator-core`.

Though the `org.nuxeo.*` dependencies are inherited from the `nuxeo-parent` POM and don't have a version defined, Dependabot tries to fetch them. This leads to version update jobs timing out, because of the big number of old 11.x.y artifacts.

Bumps [io.grpc:grpc-netty-shaded](https://github.com/grpc/grpc-java) from 1.64.0 to 1.75.0. - [Release notes](https://github.com/grpc/grpc-java/releases) - [Commits](grpc/grpc-java@v1.64.0...v1.75.0) --- updated-dependencies: - dependency-name: io.grpc:grpc-netty-shaded dependency-version: 1.75.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

Made with ❤️️ by updatecli

Bumps the version-updates group with 1 update: [com.google.protobuf:protobuf-java](https://github.com/protocolbuffers/protobuf). Updates `com.google.protobuf:protobuf-java` from 4.29.5 to 4.29.6 - [Release notes](https://github.com/protocolbuffers/protobuf/releases) - [Commits](https://github.com/protocolbuffers/protobuf/commits) --- updated-dependencies: - dependency-name: com.google.protobuf:protobuf-java dependency-version: 4.29.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates ... Signed-off-by: dependabot[bot] <support@github.com>

…ty module during image quality check. - Fix 400 error from Sightengine API during image quality check in nuxeo-ai-image-quality module - Update nuxeo-jwt-authenticator dependency to version 2.0.0

Made with ❤️️ by updatecli

…023 (#706)

Made with ❤️️ by updatecli

sonarqubecloud · 2026-05-26T12:27:49Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Copilot

Pull request overview

This PR updates the project’s dependency/repository configuration and CI automation (Dependabot + bot auto-merge), bumps the overall version line to 4.0.4-SNAPSHOT, and includes fixes/improvements for the Sightengine image-quality integration.

Changes:

Bump nuxeo-parent and multiple dependency versions; align Maven repositories on LTS endpoints and simplify repo lists.
Add/adjust GitHub automation: Dependabot configuration, bot auto-merge reusable workflow, scheduled nuxeo-parent bump workflow; update Docker preview build to use gh-build-tools.
Fix Sightengine integration details (model name faces, UTF-8 multipart text parts) and extend image-quality POJOs.

Reviewed changes

Copilot reviewed 35 out of 35 changed files in this pull request and generated 5 comments.

Show a summary per file

File	Description
README.md	Updates the version support matrix for 4.x versions.
pom.xml	Bumps parent/version and dependency versions; adjusts repositories/pluginRepositories.
nuxeo-ai-web-ui/pom.xml	Updates parent version to `4.0.4-SNAPSHOT`.
nuxeo-ai-similar-content/pom.xml	Updates parent version to `4.0.4-SNAPSHOT`.
nuxeo-ai-pipes/pom.xml	Updates parent version to `4.0.4-SNAPSHOT`.
nuxeo-ai-model/pom.xml	Updates parent version to `4.0.4-SNAPSHOT`.
nuxeo-ai-internal/pom.xml	Updates parent version to `4.0.4-SNAPSHOT`.
nuxeo-ai-core/pom.xml	Updates parent version and bumps `os-maven-plugin`.
nuxeo-ai-core-package/pom.xml	Updates parent version to `4.0.4-SNAPSHOT`.
nuxeo-ai-config/pom.xml	Updates parent version to `4.0.4-SNAPSHOT`.
docker/skaffold.yaml	Removes legacy Skaffold config.
docker/nuxeo-private.repo	Removes legacy yum repo file used by the old Docker build.
docker/log4j2.xml	Removes legacy Docker Log4j configuration.
docker/Dockerfile	Removes legacy Dockerfile in favor of reusable build tooling.
charts/utests/Chart.yaml	Bumps Helm chart version to `4.0.4-SNAPSHOT`.
charts/preview/Chart.yaml	Bumps Helm chart version to `4.0.4-SNAPSHOT`.
addons/pom.xml	Updates parent version to `4.0.4-SNAPSHOT`.
addons/nuxeo-ai-image-quality-package/.../ai-image-quality-config.xml.nxftl	Fixes Sightengine model name to `faces` and documents the requirement.
addons/nuxeo-ai-image-quality-package/pom.xml	Updates parent version to `4.0.4-SNAPSHOT`.
addons/nuxeo-ai-image-quality-core/.../Offensive.java	Expands offensive content POJO fields and JSON mapping.
addons/nuxeo-ai-image-quality-core/.../ImageProperties.java	Adds JSON-mapped fields for weapon/drugs subcategories.
addons/nuxeo-ai-image-quality-core/.../Hsv.java	Introduces an HSV value object to model HSV data safely.
addons/nuxeo-ai-image-quality-core/.../Color.java	Refactors HSV handling to use the new HSV value object.
addons/nuxeo-ai-image-quality-core/.../ImageQualityEnrichmentProvider.java	Forces UTF-8 for multipart text fields sent to Sightengine.
addons/nuxeo-ai-image-quality-core/pom.xml	Updates parent version to `4.0.4-SNAPSHOT`.
addons/nuxeo-ai-gcp-package/pom.xml	Updates parent version to `4.0.4-SNAPSHOT`.
addons/nuxeo-ai-gcp-core/pom.xml	Updates parent version to `4.0.4-SNAPSHOT`.
addons/nuxeo-ai-aws-package/pom.xml	Updates parent version to `4.0.4-SNAPSHOT`.
addons/nuxeo-ai-aws-core/pom.xml	Updates parent version to `4.0.4-SNAPSHOT`.
.github/workflows/pipeline_release.yml	Removes now-unused Maven server credentials from CI settings.xml.
.github/workflows/build_and_test.yml	Removes now-unused Maven server credentials from CI settings.xml.
.github/workflows/bot-auto-merge.yml	Adds reusable workflow to auto-merge bot PRs.
.github/workflows/_default_branch-update-nuxeo-parent.yml	Adds scheduled Updatecli workflow to bump `nuxeo-parent` on LTS branches.
.github/dependabot.yaml	Enables Dependabot version updates for Maven and GitHub Actions across branches.
.github/actions/docker-build-preview/action.yml	Switches preview Docker build to `gh-build-tools` reusable action and prepares `docker/` context.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

+    @JsonProperty("prob")
+    public Float getProb() {
        return prob;
    }

-    public void setProb(float prob) {
+    /**
+     * Sets the offensive probability from a boxed Float.
+     */
+    @JsonProperty("prob")
+    public void setProb(Float prob) {
        this.prob = prob;
    }


+| 3.0.x           | 11.1-SNAPSHOT |
+| 4.0.0           | 2023.0        |
+| 4.0.1           | 2023.0        |
+| 4.0.2           | 2023.31       |


+    - name: Build Nuxeo image
+      uses: nuxeo/gh-build-tools/.github/actions/nuxeo-docker-build@v0.8.0
      with:
+        base-registry-username: ${{ inputs.docker-username }}
+        base-registry-password: ${{ inputs.docker-password }}
+        nuxeo-connect-modules: nuxeo-web-ui replace-administrator-user-1.0.0


+    private static final ContentType UTF8_TEXT_PLAIN = ContentType.create(ContentType.TEXT_PLAIN.getMimeType(), StandardCharsets.UTF_8);
+
    @Override
    public void init(EnrichmentDescriptor descriptor) {
        super.init(descriptor);


  <groupId>org.nuxeo.ai</groupId>
  <artifactId>ai-core-parent</artifactId>
-  <version>4.0.3-SNAPSHOT</version>
+  <version>4.0.4-SNAPSHOT</version>
  <name>Ai core parent</name>
  <description>Nuxeo AI functionality</description>


debjit-hyland and others added 30 commits October 8, 2025 17:11

NXCON-44: Update README.md with latest released versions (#664)

0818417

* NXCON-44: Update README.md with latest released versions * NXCON-44: added a missed version

NXBT-3895: Enable Dependabot version updates

76190b0

Ecosystems: - Maven - GitHub Actions

NXBT-3895: Ignore Nuxeo parent POM from Dependabot version updates

8bf4e71

NXBT-3895: Automatically approve and merge Dependabot pull requests

1fa5c00

NXBT-3895: Fix Dependabot access to Connect Studio Maven private regi…

e81b083

…stry

NXBT-3895: Fix Dependabot access to all Maven private registries

b308ae4

NXBT-3895: Fix (again) Dependabot access to all Maven private registries

967f091

NXBT-3895: Fix (#3) Dependabot access to all Maven private registries

748605b

NXBT-3895: Align root POM repositories on Nuxeo LTS

8ab70bd

Yet, we cannot remove the `maven-internal` repository. It is still needed for the parent POM of `org.nuxeo.ai:nuxeo-jwt-authenticator-core`.

NXBT-3895: Fix Maven deploy to maven-public-snapshots repository

98957be

OPSEXP-3635 Use reusable nuxeo docker build action (#681)

8aec638

NXBT-3949: Move GitHub actions/workflows to gh-build-tools

d3de94a

NXBT-3937: Check for nuxeo-parent updates

45f7ae0

chore: deps(maven): update "org.nuxeo/nuxeo-parent" to 2023.41

5b60f22

Made with ❤️️ by updatecli

chore: deps(maven): update "org.nuxeo/nuxeo-parent" to 2023.42

0a18599

Made with ❤️️ by updatecli

NXCON-165: Fix 400 error from Sightengine API in nuxeo-ai-image-quali…

d17a40e

…ty module during image quality check. - Fix 400 error from Sightengine API during image quality check in nuxeo-ai-image-quality module - Update nuxeo-jwt-authenticator dependency to version 2.0.0

NXCON-165: Fix 400 error from Sightengine API in nuxeo-ai-image-quality

8c40575

chore: deps(maven): update "org.nuxeo/nuxeo-parent" to 2023.43

ace9db9

Made with ❤️️ by updatecli

OPSEXP-3756 Use nuxeo-docker-build action from nuxeo/gh-build-tools 2…

620b81c

…023 (#706)

Release 4.0.3

ae0a11d

Release 4.0.3

c9574e9

NXCON-219: Add maven-public-releases server credentials to CI workflow

2e1ce9d

NXCON-219: Add maven-public-releases server credentials to CI workflow

f69bc8d

Release 4.0.3

665e7b0

abhishek-gupta-nuxeo and others added 7 commits February 27, 2026 20:24

Release 4.0.3

dc18a05

Post Release 4.0.3

edc3545

Post Release 4.0.3

1ddcf0f

chore: deps(maven): update "org.nuxeo/nuxeo-parent" to 2023.44

bb1413f

Made with ❤️️ by updatecli

chore: deps(maven): update "org.nuxeo/nuxeo-parent" to 2023.45

1671536

Made with ❤️️ by updatecli

chore: deps(maven): update "org.nuxeo/nuxeo-parent" to 2023.46

06a8476

Made with ❤️️ by updatecli

chore: deps(maven): update "org.nuxeo/nuxeo-parent" to 2023.47

2c36873

Made with ❤️️ by updatecli

Copilot AI review requested due to automatic review settings May 26, 2026 12:27

debjit-hyland closed this May 26, 2026

Copilot started reviewing on behalf of debjit-hyland May 26, 2026 12:27 View session

Copilot AI reviewed May 26, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

test#758

test#758
debjit-hyland wants to merge 37 commits into
2025from
2023

debjit-hyland commented May 26, 2026

Uh oh!

sonarqubecloud Bot commented May 26, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

7 participants

Conversation

debjit-hyland commented May 26, 2026

Uh oh!

sonarqubecloud Bot commented May 26, 2026

Quality Gate passed

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

7 participants