Skip to content

Bump JWT core to 1.87.0 for Cognito support & Fix Sonar Scanner's Missing blob error.#93

Merged
Duslerke merged 2 commits intomasterfrom
bump-jwt-version-for-cognito-token-support
Feb 27, 2026
Merged

Bump JWT core to 1.87.0 for Cognito support & Fix Sonar Scanner's Missing blob error.#93
Duslerke merged 2 commits intomasterfrom
bump-jwt-version-for-cognito-token-support

Conversation

@Duslerke
Copy link
Copy Markdown
Contributor

@Duslerke Duslerke commented Feb 26, 2026

What:

  • Update the Hackney.Core.JWT package multiple versions up (1.72 -> 1.84 -> 1.87).
  • Fix Sonar Scanner's "Missing Blob" error caused by a recent change of CircleCI's inbuilt checkout step's default settings from pulling full git history to pulling only the latest commit's code snapshot.

Why:

  • To get the latest version of the ITokenFactory implementation that adds support for the Cognito token schema.
  • Fix the pipeline to unblock deployment.

Notes:

  • The version 1.84.0 in between is an unintentional release triggered by a renamed variable in nuget.config. So 1.84.0 is identical to the 1.72.0.
  • What changes does latest (v1.87.0) JWT intoduce? See PR: Add cognito authentication flow token schema support. lbh-core#68.
  • These changes do not require immediate deployment, they merely need to be present within the repo's main branch. This is so those changes would already be there for when anyone would introduce new changes attempting to access Google groups from the token. Without this JWT version bump, any attempted access of Groups within the token would make the API wouldn't fall over.

Fixed pipeline error snippet:

ERROR: Error during SonarScanner Engine execution
java.lang.IllegalStateException: java.util.concurrent.ExecutionException: java.lang.IllegalStateException:
org.eclipse.jgit.errors.MissingObjectException: Missing blob 2f079fa36777adb2885771f2260d160aae7e7510
        at org.sonar.scm.git.blame.FileBlamer.waitForTasks(FileBlamer.java:239)
        at org.sonar.scm.git.blame.FileBlamer.blameWithFileDiffs(FileBlamer.java:214)
        at org.sonar.scm.git.blame.FileBlamer.blameParent(FileBlamer.java:134)
        at org.sonar.scm.git.blame.BlameGenerator.process(BlameGenerator.java:149)

@Duslerke Duslerke requested a review from a team as a code owner February 26, 2026 13:37
…t default settings copying only the latest snapshot of code w/o any git history.
@sonarqubecloud
Copy link
Copy Markdown

@Duslerke Duslerke changed the title Bump JWT core to 1.87.0 for Cognito support. Bump JWT core to 1.87.0 for Cognito support & Fix Sonar Scanner's Missing blob error. Feb 26, 2026
@Duslerke Duslerke merged commit bde9d7b into master Feb 27, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants