This is an automated email from the ASF dual-hosted git repository.

sbp pushed a commit to branch sbp
in repository https://gitbox.apache.org/repos/asf/tooling-trusted-releases.git

commit 8027be759a55d703bc71b63cf0510af0b6ac818e
Author: Sean B. Palmer <[email protected]>
AuthorDate: Fri Mar 20 15:21:07 2026 +0000

    Upgrade RAT to version 0.18
---
 Dockerfile.alpine             | 6 +++---
 atr/config.py                 | 2 +-
 tests/unit/test_checks_rat.py | 4 ++--
 3 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/Dockerfile.alpine b/Dockerfile.alpine
index 8207bdd1..f5f4710c 100644
--- a/Dockerfile.alpine
+++ b/Dockerfile.alpine
@@ -42,7 +42,7 @@ RUN apk update && \
       go
 
 # install additional tools
-ENV RAT_VERSION=0.17
+ENV RAT_VERSION=0.18
 
 RUN set -eux; \
     mkdir -p /opt/tools /tmp/apache-rat; \
@@ -81,7 +81,7 @@ ENV PYTHONDONTWRITEBYTECODE=1 \
 ENV JAVA_TOOL_OPTIONS="-XX:MaxMetaspaceSize=32m -Xmx128m -XX:+UseSerialGC 
-XX:MaxRAM=256m -XX:CompressedClassSpaceSize=16m"
 
 # go is required for syft
-# openjdk8 is required for Apache RAT
+# openjdk17 is required for Apache RAT
 # icu-libs are required for cyclonedx
 RUN apk update && \
     apk add --no-cache \
@@ -92,7 +92,7 @@ RUN apk update && \
       gpg \
       gpg-agent \
       icu-libs \
-      openjdk8 \
+      openjdk17 \
       rsync \
       subversion
 
diff --git a/atr/config.py b/atr/config.py
index fe7dc98c..c144cb91 100644
--- a/atr/config.py
+++ b/atr/config.py
@@ -23,7 +23,7 @@ import decouple
 
 _MB: Final = 1024 * 1024
 _GB: Final = 1024 * _MB
-_RAT_VERSION: Final = "0.17"
+_RAT_VERSION: Final = "0.18"
 
 
 def _config_secrets(key: str, state_dir: str, default: str | None = None, 
cast: type = str) -> str | None:
diff --git a/tests/unit/test_checks_rat.py b/tests/unit/test_checks_rat.py
index ebe67458..59be745f 100644
--- a/tests/unit/test_checks_rat.py
+++ b/tests/unit/test_checks_rat.py
@@ -127,7 +127,7 @@ def test_sanitise_command_replaces_absolute_paths():
     command = [
         "java",
         "-jar",
-        "/opt/tools/apache-rat-0.17.jar",
+        "/opt/tools/apache-rat-0.18.jar",
         "--output-file",
         "/fake/path/rat_verify_abc123/rat-report.xml",
         "--input-exclude",
@@ -140,7 +140,7 @@ def test_sanitise_command_replaces_absolute_paths():
         ".",
     ]
     result = rat._sanitise_command_for_storage(command)
-    assert result[2] == "apache-rat-0.17.jar"
+    assert result[2] == "apache-rat-0.18.jar"
     assert result[4] == "rat-report.xml"
     assert result[6] == ".rat-excludes"
     assert result[8] == ".atr-policy-rat-excludes"


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to