<!-- 
RSS generated by JIRA (1001.0.0-SNAPSHOT#100246-sha1:7a5c50119eb0633d306e14180817ddef5e80c75d) at Thu Feb 08 23:29:50 UTC 2024

It is possible to restrict the fields that are returned in this document by specifying the 'field' parameter in your request.
For example, to request only the issue key and summary add field=key&field=summary to the URL of your request.
-->
<rss version="0.92" >
<channel>
    <title>FOLIO Jira</title>
    <link>https://folio-org.atlassian.net</link>
    <description>This file is an XML representation of an issue</description>
    <language>en-us</language>    <build-info>
        <version>1001.0.0-SNAPSHOT</version>
        <build-number>100246</build-number>
        <build-date>07-02-2024</build-date>
    </build-info>

<item>
            <title>[FOLIO-3669] add SONAR_TOKEN to dependabot secrets in stripes-components</title>
                <link>https://folio-org.atlassian.net/browse/FOLIO-3669</link>
                <project id="10290" key="FOLIO">FOLIO</project>
                    <description>&lt;p&gt;&lt;b&gt;Summary:&lt;/b&gt; Add &lt;tt&gt;SONAR_TOKEN&lt;/tt&gt; to the dependabot secrets for stripes-components and ui-users.&lt;/p&gt;

&lt;p&gt;&lt;b&gt;Details:&lt;/b&gt; Dependabot should have all necessary permissions to open a PR successfully, but currently &lt;a href=&quot;https://github.com/folio-org/stripes-components/actions/runs/3733987565/jobs/6335486328&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;lacks permission to publish test results&lt;/a&gt;.&#160;In 
    &lt;span class=&quot;jira-issue-macro resolved&quot; data-jira-key=&quot;STCOM-1068&quot; &gt;
                &lt;a href=&quot;https://folio-org.atlassian.net/browse/STCOM-1068&quot; class=&quot;jira-issue-macro-key issue-link&quot;  title=&quot;leverage dependabot to update dependencies&quot; &gt;
            &lt;img class=&quot;icon&quot; src=&quot;https://folio-org.atlassian.net/rest/api/2/universal_avatar/view/type/issuetype/avatar/10318?size=medium&quot; /&gt;
            STCOM-1068
        &lt;/a&gt;
                                                    &lt;span class=&quot;aui-lozenge aui-lozenge-subtle aui-lozenge-success jira-macro-single-issue-export-pdf&quot;&gt;Closed&lt;/span&gt;
            &lt;/span&gt;
 we turned on dependabot as a POC. It started opening PRs (yay!) but they fail due to a permissions problem. This failure is reminiscent of the PR failures that led to the&#160;&lt;a href=&quot;https://dev.folio.org/guidelines/github-actions-frontend/#forked-repositories&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;process for merging PRs from forks&lt;/a&gt;, yet the situation here is a bit is different: the calls are coming from INSIDE the house!!!11!1! Further research (see comment below) suggests we can resolve this by adding &lt;tt&gt;SONAR_TOKEN&lt;/tt&gt; to dependabot&apos;s secrets. &lt;/p&gt;

&lt;p&gt;Given 
    &lt;span class=&quot;jira-issue-macro&quot; data-jira-key=&quot;FOLIO-3664&quot; &gt;
                &lt;a href=&quot;https://folio-org.atlassian.net/browse/FOLIO-3664&quot; class=&quot;jira-issue-macro-key issue-link&quot;  title=&quot;UI repositories should leverage dependabot to update dependencies&quot; &gt;
            &lt;img class=&quot;icon&quot; src=&quot;https://folio-org.atlassian.net/rest/api/2/universal_avatar/view/type/issuetype/avatar/10307?size=medium&quot; /&gt;
            FOLIO-3664
        &lt;/a&gt;
                                                    &lt;span class=&quot;aui-lozenge aui-lozenge-subtle aui-lozenge-current jira-macro-single-issue-export-pdf&quot;&gt;In Code Review&lt;/span&gt;
            &lt;/span&gt;
 is just a POC, we just want to try this out in a few repositories for now. If successful, we will want to include this setting in all UI repositories. &lt;/p&gt;</description>
                <environment></environment>
        <key id="82457">FOLIO-3669</key>
            <summary>add SONAR_TOKEN to dependabot secrets in stripes-components</summary>
                <type id="10003" iconUrl="https://folio-org.atlassian.net/rest/api/2/universal_avatar/view/type/issuetype/avatar/10318?size=medium">Task</type>
                                            <priority id="10002" iconUrl="https://dev.folio.org/assets/jira-priority/jira-p3.svg">P3</priority>
                        <status id="6" iconUrl="https://folio-org.atlassian.net/images/icons/statuses/closed.png" description="The issue is considered finished, the resolution is correct. Issues which are closed can be reopened.">Closed</status>
                    <statusCategory id="3" key="done" colorName="green"/>
                                    <resolution id="10003">Done</resolution>
                                                        <assignee accountid="5f9abc1eb45b2e007453f423">John Malconian</assignee>
                                                                <reporter accountid="615afd1cd9820f0070a09ef0">Zak Burke</reporter>
                                    <labels>
                    </labels>
                <created>Mon, 19 Dec 2022 22:03:00 +0000</created>
                <updated>Tue, 17 Jan 2023 14:12:23 +0000</updated>
                            <resolved>Tue, 10 Jan 2023 16:10:08 +0000</resolved>
                                                                        <due></due>
                            <votes>0</votes>
                                    <watches>3</watches>
                                                                <comments>
                                                            <comment id="198439" author="615afd1cd9820f0070a09ef0" created="Tue, 27 Dec 2022 22:20:01 +0000"  >&lt;p&gt;&lt;a href=&quot;https://community.sonarsource.com/t/github-action-ci-build-fail-with-set-the-sonar-token-env-variable/38997/25&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;SonarCloud forums/documentation&lt;/a&gt; state,&lt;/p&gt;
&lt;blockquote&gt;&lt;p&gt;For you dependabots PRs, SONAR_TOKEN should be added to the Dependabot secrets (repo settings-&amp;gt;secrets&amp;gt;Dependabot). Then the dependabot will expose the secret to the github secret context.&lt;/p&gt;&lt;/blockquote&gt;
&lt;p&gt;Can we try this in stripes-components and ui-users? I don&apos;t have access to Settings &amp;gt; Secrets.&#160;&lt;/p&gt;</comment>
                                                            <comment id="198440" author="5f9abc1eb45b2e007453f423" created="Tue, 10 Jan 2023 16:09:59 +0000"  >&lt;p&gt;SONAR_TOKEN has been set as a repo-level dependabot secret for both stripes-components and ui-users.   Closing.   &lt;/p&gt;</comment>
                    </comments>
                <issuelinks>
                            <issuelinktype id="10000">
                    <name>Blocks</name>
                                            <outwardlinks description="blocks">
                                        <issuelink>
            <issuekey id="79840">FOLIO-3664</issuekey>
        </issuelink>
                            </outwardlinks>
                                                        </issuelinktype>
                            <issuelinktype id="10003">
                    <name>Relates</name>
                                            <outwardlinks description="relates to">
                                        <issuelink>
            <issuekey id="82486">FOLIO-3687</issuekey>
        </issuelink>
                            </outwardlinks>
                                                        </issuelinktype>
                    </issuelinks>
                <attachments>
                    </attachments>
                <subtasks>
                    </subtasks>
                <customfields>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                <customfield id="customfield_10000" key="com.atlassian.jira.plugins.jira-development-integration-plugin:devsummarycf">
                        <customfieldname>Development</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10057" key="com.atlassian.jira.plugin.system.customfieldtypes:select">
                        <customfieldname>Development Team</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue key="10155"><![CDATA[FOLIO DevOps]]></customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                <customfield id="customfield_10063" key="com.atlassian.jira.plugin.system.customfieldtypes:float">
                        <customfieldname>PO Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>0.0</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                    <customfield id="customfield_10106" key="com.atlassian.jira.plugin.system.customfieldtypes:select">
                        <customfieldname>RCA Group</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue key="10367"><![CDATA[TBD]]></customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                            <customfield id="customfield_10019" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>0|i05zqr:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_10020" key="com.pyxis.greenhopper.jira:gh-sprint">
                        <customfieldname>Sprint</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue id="2014">DevOps Sprint 157</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        <customfield id="customfield_10024" key="com.atlassian.jira.ext.charting:firstresponsedate">
                        <customfieldname>[CHART] Date of First Response</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>Tue, 10 Jan 2023 16:09:59 +0000</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10025" key="com.atlassian.jira.ext.charting:timeinstatus">
                        <customfieldname>[CHART] Time in Status</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                    </customfields>
    </item>
</channel>
</rss>