@jocosti.bsky.social
Today is another day when I spend time with Kotlin upgrade PRs that fail because CodeQL is behind. If you have faced the same issue, help get some traction at github.com/github/codeq...
Consider testing CodeQL also against Kotlin EA versions · Issue #22219 · github/codeql
Description of the issue For some time now, all projects using Kotlin and CodeQL face the following situation: A new Kotlin version is released Dependabot, Renovate, or equivalent creates a PR to u...
github.com
I had a blast at JUG Lucerne, with a small but engaging crowd whom I spent almost three hours with! 😍 What stuck with me the most: • AssertJ should be renamed to AssertJoy • They would love a hands-on follow-up with more advanced use cases Many thanks again to @mcpringle.bsky.social for having me!
Stefano Cordio@scordio.github.io · last mo.No good weather today 🌧️ ☔ so why not join me in JUG Lucerne and find out what a handful of developers are doing to ship the next major version of AssertJ? 🧑💻 www.jug.ch/html/events/...
No good weather today 🌧️ ☔ so why not join me in JUG Lucerne and find out what a handful of developers are doing to ship the next major version of AssertJ? 🧑💻 www.jug.ch/html/events/...
Java User Group Switzerland: Event "What's wrong with AssertJ?! - How a decade of technical debt is addressed in version 4.0"
AssertJ has been a player in Java testing for over a decade, providing an intuitive set of strongly typed assertions designed to maximize test readability. Since the launch of version 3.0, the library...
jug.ch
This is massive for the future of un-enshittified Social Media in Europe. Atmosphere ❤️ Fediverse ❤️ Matrix
Newsmast Foundation@newsmastfoundation.org · 2mo agoJust launched at Public Spaces in Amsterdam, The European Social Stack Open Declaration! A set of common principles agreed by complementary technology leaders 🫶 Read the declaration, add your signature, and share: european.social #EUSocialStack #Europe
📢 Nous recherchons aux Restos du Coeur des ordinateurs portables fonctionnels pour aider nos équipes au quotidien (administratif, accompagnement, communication…). Si vous avez des laptops qui prennent la poussière dans votre entreprise, donnez lui une seconde vie solidaire💕
Now the Java User Group in Zurich knows what's wrong with AssertJ! And also how we're working to improve things. We're still in the early stages, but I can't wait to see all this work shipped to our users 🚀 Thank you so much to everyone who joined and @patbaumgartner.com for hosting! I had a blast!
Less than a week to go! 🚀 Join me this Tuesday at PH Zürich to discover how AssertJ 4 is about breaking things (carefully) to make your testing life better. Come for the technical debt, stay for the drinks and networking! 🍻 www.jug.ch/html/events/...
Java User Group Switzerland: Event "What's wrong with AssertJ?! - How a decade of technical debt is addressed in version 4.0"
AssertJ has been a player in Java testing for over a decade, providing an intuitive set of strongly typed assertions designed to maximize test readability. Since the launch of version 3.0, the library...
jug.ch
Good morning @jcon.one ! For the most dedicated audience there's a 9AM testing talk. 😅 See you there!
Today, from the venue of Spring I/O, I'm open-sourcing a new library to make data-driven testing in Java a little bit easier: JUnit Converters! A collection of ready-to-use argument converters designed to streamline parameterized testing in JUnit 6 (and 5!) 🚀 🧵 stefano.codes/junit-conver...
JUnit Converters
Collection of argument converters for JUnit parameterized testing
stefano.codes
📢 AssertJ joined the GitHub Secure Open Source Fund, a program that leveled up security across 67 open source projects. What changed for us: SHA pinning, immutable releases, incident response plan, and a mindset shift toward security awareness 🔒 The impact? More robust JVM assertions 🚀
Today's the day! Happy to share what I've been working on with Benedikt and Jendrik. Let us know if you are interested in participating in the private beta or have any questions! #TestLens
TestLens@testlens.app · 6mo agoKnow this problem? You’re done implementing a feature, but getting your PR through the CI pipeline is tedious. TestLens launches to accelerate #Java and #Kotlin pull request workflows with easy-to-read test failure summaries and faster retries. Join the private beta! testlens.app/blog/2026/02...
CVE-2026-24400 - AssertJ has XML External Entity (XXE) vulnerability when parsing untrusted XML via isXmlEqualTo assertion CVE ID : CVE-2026-24400 Published : Jan. 26, 2026, 10:19 p.m. | 57 minutes ago Description : AssertJ provides Fluent testing assertions for Java and...
CVE-2026-24400 - AssertJ has XML External Entity (XXE) vulnerability when parsing untrusted XML via isXmlEqualTo assertion
AssertJ provides Fluent testing assertions for Java and the Java Virtual Machine (JVM). Starting in version 1.4.0 and prior to version 3.27.7, an XML External Entity (XXE) vulnerability exists in `org.assertj.core.util.xml.XmlStringPrettyFormatter`: the `toXmlDocument(String)` method initializes `DocumentBuilderFactory` with default settings, without disabling DTDs or external entities. This formatter is used by …
cvefeed.io
🚨 EUVD-2026-4724 📊 8.2/10 🏢 assertj 📝 AssertJ provides Fluent testing assertions for Java and the Java Virtual Machine (JVM). Starting in version 1.4.0 and prior to version 3.27.7, an XML Extern... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-4724 #cybersecurity #infosec #cve #euvd
📢 AssertJ 3.27.7 has been released! This fixes CVE-2026-24400 🔒 Happy assertions! github.com/assertj/asse...
Release v3.27.7 · assertj/assertj
🔒 Security Core Fix XXE vulnerability in isXmlEqualTo assertion (CVE-2026-24400) See GHSA-rqfh-9r24-8c9r for details; many thanks to @wxt201 and @Song-Li for responsibly reporting it! 🚫 Deprec...
github.com
JUnit is undoubtedly one of the most important projects in the #Java ecosystem. And it's 100% free and open! Let me be frank: If we can't get THIS project to the point where a single maintainer can focus on it, then what does that say about our commitment to Free & Open Source Software? 1/3 ⏩
Support JUnit
JUnit is maintained by a team of passionate volunteers. This is your chance to give back and support the project!
steady.page
Many thanks to you, @mcpringle.bsky.social, and Alexandra, for the amazing organization! 🙏 So many new contributors to @assertj.github.io in a single day! github.com/hack-commit-...
Add AssertJ contributions by scordio · Pull Request #7 · hack-commit-push/switzerland2025
github.com
Hack.Commit.Push Switzerland 2025 was a success! Plenty of contributions made, with close to 20% of attendees making their first contribution ever 🤩
🤔 Who said that AssertJ 3 is in maintenance mode? 📢 We're planning an exceptional 3.28 release – let us know what you'd like to see in there! 👇 github.com/orgs/assertj...
Backport Scope for AssertJ 3.28.0 · assertj · Discussion #4018
We recently talked about how version 4 still needs a bit more work and probably won't be ready until at least the first half of 2026. Releasing a new major version is a rare opportunity for us: we ...
github.com
Hack.Commit.Push Switzerland is just one week away! 🇨🇭 This is a great opportunity to get involved in Open Source projects like @assertj.github.io, with direct guidance from the maintainers!
Andres Almiray@andresalmiray.com · 11mo agoThe next edition of Hack.Commit.Push Switzerland🇨🇭will take place in Rotkreuz LU this November 22nd. Care to join us for some Open Source hacking? It’s for a good cause! switzerland2025.hack-commit-pu.sh
Sur le blog de #norsys, mon collègue Kelean vient de publier un billet qui présente @assertj.github.io et comment le mettre à profit pour améliorer ses tests unitaires. medium.com/norsys-octog... #JUnit #AssertJ #Java #Test #TestUnitaire
"Nobody stops in to check on you. They check on the project. There’s also nobody standing up and saying, ‘hey, thank you for the good work you’re doing to remediate this issue.’" The harsh truth: maintainers give their spare time, yet positive feedback is rare. Appreciate who is behind the code. 💛
Christian Grobmeier@grobmeier.de · 10mo agoI never imagined GitHub would ask me to speak about #Log4Shell. But it happened. @github.com asked me to share the story as I lived it, for the benefit of users of #opensource. How could I say no? I hope it helps build a more secure future. No more Log4Shell. #java
📢 Jimfs JUnit Jupiter 1.0.0 is also released! ✨ Java 17 baseline ⬆️ Upgrade to JUnit 6 📖 Brand new user guide 🧑💻 Any feedback is welcome! github.com/scordio/jimf...
Release v1.0.0 · scordio/jimfs-junit-jupiter
💥 Breaking Changes Jimfs JUnit Jupiter now requires Java 17, in line with JUnit 6 requirements. ⚡ Improvements Add user guide #41 🔨 Dependency Upgrades Upgrade to JUnit 6 #29
github.com
JUnit Team@junit.org · 10mo ago#JUnit 6.0.0 is released! ✨ Java 17 and Kotlin 2.2 baseline 🌄 JSpecify nullability annotations 🛫 Integrated JFR support 🚟 Kotlin suspend function support 🛑 Support for cancelling test execution ⏭️ New `--fail-fast` mode for ConsoleLauncher 🧹 Removal of deprecated APIs docs.junit.org/6.0.0/releas...
📢 AssertJ 3.27.6 has been released! This fixes a 🐛 regression related to the module descriptor 🧩 Happy assertions! github.com/assertj/asse...
Release v3.27.6 · assertj/assertj
🐛 Bug Fixes Core Add missing export for org.assertj.core.annotation #3951 ❤️ Contributors Thanks to all the contributors who worked on this release: @duponter
github.com
📢 AssertJ 3.27.5 has been released! This 🛠️ upgrades ByteBuddy to its latest version to ensure smooth compatibility with Java 25 ☕ Happy assertions! github.com/assertj/asse...
Release v3.27.5 · assertj/assertj
⚡ Improvements Core ByteBuddy in AssertJ 3.27.4 not compatible with Java 25 #3946 🔨 Dependency Upgrades Core Upgrade to Byte Buddy 1.17.7 #3947 Upgrade to JUnit BOM 5.13.4 #3947 Guava Upgrade ...
github.com
🍃 Better Assertions with AssertJ by @timtebeek.github.io @ Spring I/O 2025 ▶️ Video: youtu.be/k7sXn1v4fYc 🔗 Slides: 2025.springio.net/slides/bette... 🛠️ Repo: github.com/timtebeek/be... #springio25
Better Assertions with AssertJ by Tim te Beek @ Spring I/O 2025
YouTube video by Spring I/O
youtu.be
Hard assertions = fast feedback ✅ But when one failure hides others, you lose valuable insight. 😥 Here’s how to use custom soft assertions with AssertJ to make your tests graceful, readable, and thorough: eliasnogueira.com/assert-with-... #java #testing #quality
Assert with Grace: Custom Soft Assertions using AssertJ for Cleaner Code - Elias Nogueira
Introduction If you don't know what a soft assertion is, please read Soft Asserts – Why should you use them for Unit and Integration tests? This article is a continuation of Assert with Grace: Custom…
eliasnogueira.com
