Guard eclipse() to spotless tasks and keep P2 mirror on pinned version (common-utils)

[peterzhuamazon]

Description

Guard eclipse() to spotless tasks and keep P2 mirror on pinned version.

Issues Resolved

opensearch-project/opensearch-build#6421

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

[peterzhuamazon]

expected version pin

[github-actions]

PR Code Analyzer ❗

AI-powered 'Code-Diff-Analyzer' found issues on commit c7f42e8.

⛔ Hard block: Issues at High severity or above will block this PR from merging.

Path	Line	Severity	Description
build.gradle	35	high	Build plugin version bumped from com.diffplug.spotless 6.25.0 to 8.10.1 — a major version jump (6→8). Per mandatory supply chain rule, all build plugin version changes must be flagged for maintainer verification regardless of apparent legitimacy. Verify the artifact at the Gradle Plugin Portal matches the expected publisher and SHA before merging.
build.gradle	141	high	Eclipse JDT formatter dependency explicitly pinned to version '4.29' where previously no version was specified (resolved implicitly). Per mandatory supply chain rule, any new explicit dependency version specification must be flagged. Confirm that eclipse('4.29') resolves to the intended artifact from Maven Central through the ci.opensearch.org mirror and that the mirror itself has not been compromised or substituted.

The table above displays the top 10 most important findings.

Total: 2 | Critical: 0 | High: 2 | Medium: 0 | Low: 0

---

Pull Requests Author(s): Please update your Pull Request according to the report above.

Repository Maintainer(s): You can bypass diff analyzer by adding label skip-diff-analyzer after reviewing the changes carefully, then re-run failed actions. To re-enable the analyzer, remove the label, then re-run all actions.

---

⚠️ Note: The Code-Diff-Analyzer helps protect against potentially harmful code patterns. Please ensure you have thoroughly reviewed the changes beforehand.

Thanks.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 70.55%. Comparing base (3a69aab) to head (c7f42e8).
⚠️ Report is 119 commits behind head on main.

❌ Your project check has failed because the head coverage (70.55%) is below the target coverage (75.00%). You can increase the head coverage or adjust the target coverage.

Additional details and impacted files

@@             Coverage Diff              @@
##               main    #1004      +/-   ##
============================================
- Coverage     73.97%   70.55%   -3.42%     
- Complexity      916     1149     +233     
============================================
  Files           135      175      +40     
  Lines          6102     7971    +1869     
  Branches        753      956     +203     
============================================
+ Hits           4514     5624    +1110     
- Misses         1253     1948     +695     
- Partials        335      399      +64     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[opensearch-ci-bot]

The backport to 2.19 failed. Please backport manually. See failed workflow run: https://github.com/opensearch-project/common-utils/actions/runs/34004602288