Skip to content

Upload gathered SDK log lines only with consents - #618

Merged
arifBurakDemiray merged 5 commits into
stagingfrom
board/sdk-log-gathering-feature-consent-countly-sdk-android
Oct 8, 2026
Merged

arifBurakDemiray merged 5 commits into
stagingfrom
board/sdk-log-gathering-feature-consent-countly-sdk-android

Conversation

@arifBurakDemiray

@arifBurakDemiray arifBurakDemiray commented Oct 7, 2026 •

Copy link
Copy Markdown
Member

No description provided.

@github-actions

github-actions Bot commented Oct 7, 2026 •

Copy link
Copy Markdown

Dependency security scan

Scanned 569 resolved dependencies — 343 buildscript, 14 published, 212 sample.

Findings Count
Blocking (HIGH+ in published/sample) 0
Below HIGH, in dependencies we control 1
Waived via allowlist 2
Build tooling — not upgradeable from this repo 95
Below the HIGH threshold, but ours to upgrade (1)
Severity Dependency Advisory Fixed in Used by
MODERATE com.google.android.gms:play-services-basement:18.0.0 GHSA-cm6r-892j-jv2g — Google Play Services SDK leads to apps having incorrectly set mutability flag 18.0.2 :app
Waived via allowlist (2)
Advisory Dependency Expires Reason
GHSA-r937-wjx7-w2jp org.jetbrains.kotlin:kotlin-gradle-plugin:2.2.10 2026-11-30 Kotlin Gradle plugin build-cache deserialization. First fixed in 2.4.20-Beta1; no stable Kotlin release carries the fix yet. Build-machine only (CVSS AV:L/AC:H/PR:H), never shipped to integrators. Drop this entry once 2.4.20 is stable.
GHSA-r937-wjx7-w2jp org.jetbrains.kotlin:kotlin-gradle-plugin:2.4.10 2026-11-30 Kotlin Gradle plugin build-cache deserialization. First fixed in 2.4.20-Beta1; no stable Kotlin release carries the fix yet. Build-machine only (CVSS AV:L/AC:H/PR:H), never shipped to integrators. Drop this entry once 2.4.20 is stable.

95 further finding(s) in Gradle plugin internals are reported in the job summary and the resolved-dependencies artifact. They ship inside the build plugins and cannot be upgraded from this repository.

Result: passed

Full run log

@github-actions

github-actions Bot commented Oct 7, 2026 •

Copy link
Copy Markdown

Unit Test Results 🚀

1 120 tests  +12   1 117 ✅ +12   6m 48s ⏱️ - 1m 7s
   69 suites ± 0       3 💤 ± 0 
    4 files   ± 0       0 ❌ ± 0 

Results for commit 9f2e7f9. ± Comparison against base commit 879a5e1.

♻️ This comment has been updated with latest results.

@arifBurakDemiray arifBurakDemiray changed the title [board] Upload gathered SDK log lines only with events and users consent Upload gathered SDK log lines only with events and users consent Oct 7, 2026
@arifBurakDemiray
arifBurakDemiray force-pushed the board/sdk-log-gathering-feature-consent-countly-sdk-android branch from 3c99444 to cb2518a Compare October 7, 2026 12:58
@arifBurakDemiray
arifBurakDemiray marked this pull request as ready for review October 8, 2026 11:13
@arifBurakDemiray arifBurakDemiray changed the title Upload gathered SDK log lines only with events and users consent Upload gathered SDK log lines only with consents Oct 8, 2026
@arifBurakDemiray
arifBurakDemiray merged commit f728806 into staging Oct 8, 2026
18 of 19 checks passed
@arifBurakDemiray
arifBurakDemiray deleted the board/sdk-log-gathering-feature-consent-countly-sdk-android branch October 8, 2026 14:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants