From 00665aab13ffd64e88736f99ab6b46391d520c1e Mon Sep 17 00:00:00 2001 From: David Ribeiro Date: Mon, 24 Nov 2025 16:10:30 +0000 Subject: [PATCH 01/15] [UPKEEP][DEV-1] Update versions --- .circleci/config.yml | 4 ++-- .github/workflows/main.yml | 6 +++--- pom.xml | 6 +++--- riskified-sdk/pom.xml | 11 +++++++---- 4 files changed, 15 insertions(+), 12 deletions(-) diff --git a/.circleci/config.yml b/.circleci/config.yml index 337d2cc5..8a0abb77 100644 --- a/.circleci/config.yml +++ b/.circleci/config.yml @@ -1,9 +1,9 @@ -version: 2.0 +version: 2.1 jobs: build: resource_class: riskified/container-agent docker: - - image: 284309667046.dkr.ecr.us-east-1.amazonaws.com/riskified/images-library/openjdk-cimg:master-8.0 + - image: 284309667046.dkr.ecr.us-east-1.amazonaws.com/riskified/images-library/openjdk-cimg:master-21.0 working_directory: ~/repo steps: diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index 5e678e6e..552299bf 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -31,11 +31,11 @@ jobs: env: GPG_SIGNING_KEY: ${{ secrets.SECRING_GPG_ASC_BASE64 }} - - name: Set up JDK 8 - uses: actions/setup-java@v4 ##this action sets up a java environment that our job can run in + - name: Set up JDK 21 + uses: actions/setup-java@v5 ##this action sets up a java environment that our job can run in with: distribution: 'zulu' - java-version: 8 + java-version: 21 overwrite-settings: false - name: Build project with Maven diff --git a/pom.xml b/pom.xml index 75c3171a..e6c7384c 100644 --- a/pom.xml +++ b/pom.xml @@ -8,10 +8,10 @@ maven-compiler-plugin - 3.1 + 3.14.1 - - + 1.8 + 1.8 diff --git a/riskified-sdk/pom.xml b/riskified-sdk/pom.xml index d3ab00e9..af6f8969 100644 --- a/riskified-sdk/pom.xml +++ b/riskified-sdk/pom.xml @@ -29,10 +29,10 @@ org.apache.maven.plugins maven-compiler-plugin - 3.2 + 3.14.1 - 1.5 - 1.5 + 1.8 + 1.8 @@ -68,7 +68,10 @@ org.apache.maven.plugins maven-javadoc-plugin - 2.9 + 3.6.3 + + 1.8 + attach-javadocs From a6327bf656d81fd7f289042bfbf6a1a4f0b40ca2 Mon Sep 17 00:00:00 2001 From: David Ribeiro Date: Mon, 24 Nov 2025 16:22:21 +0000 Subject: [PATCH 02/15] Update sdk sample's sdk version --- README.md | 4 ++-- riskified-sample/pom.xml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index c9a1e857..cc50f8c2 100644 --- a/README.md +++ b/README.md @@ -1,7 +1,7 @@ Riskified JAVA SDK ================= -version: 3.3.0 +version: 4.0.0 ------------------ See http://apiref.riskified.com for full API documentation @@ -104,7 +104,7 @@ curl -H "Content-Type: application/json" -H "X-RISKIFIED-HMAC-SHA256: 071ef80d5 com.riskified riskified-sdk - v3.3.0 + v4.0.0 ``` diff --git a/riskified-sample/pom.xml b/riskified-sample/pom.xml index 480f99b9..53f82e8d 100644 --- a/riskified-sample/pom.xml +++ b/riskified-sample/pom.xml @@ -9,7 +9,7 @@ com.riskified riskified-sdk - v2.2.2 + v4.0.0 From 7c5579621b59052ef1e8cd0f1875d3c271b0b848 Mon Sep 17 00:00:00 2001 From: David Ribeiro Date: Thu, 8 Jan 2026 07:46:00 +0000 Subject: [PATCH 03/15] fix: javadoc issue --- .../src/main/java/com/riskified/RuntimeTypeAdapterFactory.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/riskified-sdk/src/main/java/com/riskified/RuntimeTypeAdapterFactory.java b/riskified-sdk/src/main/java/com/riskified/RuntimeTypeAdapterFactory.java index 5784183d..20d0b1b5 100644 --- a/riskified-sdk/src/main/java/com/riskified/RuntimeTypeAdapterFactory.java +++ b/riskified-sdk/src/main/java/com/riskified/RuntimeTypeAdapterFactory.java @@ -93,7 +93,7 @@ * Both the type field name ({@code "type"}) and the type labels ({@code * "Rectangle"}) are configurable. * - *

Registering Types

+ *

Registering Types

* Create a {@code RuntimeTypeAdapterFactory} by passing the base type and type field * name to the {@link #of} factory method. If you don't supply an explicit type * field name, {@code "type"} will be used.
   {@code

From 68f9214f46dd7b0be7f09318f890d62b4e94afa3 Mon Sep 17 00:00:00 2001
From: David Ribeiro 
Date: Thu, 8 Jan 2026 08:39:26 +0000
Subject: [PATCH 04/15] fix: compilation errors for sample

---
 .../riskified/samples/orderClient/AccountActionClient.java    | 4 +++-
 .../java/com/riskified/samples/orderClient/JsonClient.java    | 2 +-
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/riskified-sample/src/main/java/com/riskified/samples/orderClient/AccountActionClient.java b/riskified-sample/src/main/java/com/riskified/samples/orderClient/AccountActionClient.java
index ed2c7ea8..e0ae33a0 100644
--- a/riskified-sample/src/main/java/com/riskified/samples/orderClient/AccountActionClient.java
+++ b/riskified-sample/src/main/java/com/riskified/samples/orderClient/AccountActionClient.java
@@ -183,7 +183,9 @@ private static Contact generateContact() {
     }
 
     private static Verification generateVerification() {
-        Verification verification = new Verification(new Date(2020,06,25,13,53,19), VerificationStatus.success, "12345");
+        Calendar cal = Calendar.getInstance();
+        cal.set(2020, Calendar.JUNE, 25, 13, 53, 19);
+        Verification verification = new Verification(cal.getTime(), VerificationStatus.success, "12345", "555-625-1199");
         verification.setEmail("customer_email@test.com");
         VerificationSessionDetails verificationSessionDetails = new VerificationSessionDetails();
         verificationSessionDetails.setBrowserIp("111.111.111.111");
diff --git a/riskified-sample/src/main/java/com/riskified/samples/orderClient/JsonClient.java b/riskified-sample/src/main/java/com/riskified/samples/orderClient/JsonClient.java
index a8d51938..9b92ca2c 100644
--- a/riskified-sample/src/main/java/com/riskified/samples/orderClient/JsonClient.java
+++ b/riskified-sample/src/main/java/com/riskified/samples/orderClient/JsonClient.java
@@ -41,7 +41,7 @@ public static void main(String[] args) throws ParseException, FileNotFoundExcept
         billingAddress.setCountryCode("US");
         billingAddress.setProvinceCode("NY");
         billingAddress.setZip("64155");
-        order.setBillingAddress(billingAddress);
+        order.setBillingAddress(Collections.singletonList(billingAddress));
 
 
         

From 73b75cf9da54e37cfe00b342f59ea71db33af07f Mon Sep 17 00:00:00 2001
From: David Ribeiro 
Date: Thu, 8 Jan 2026 11:04:59 +0000
Subject: [PATCH 05/15] refactor: remove unused import

---
 pom.xml                                                     | 3 +--
 riskified-sdk/src/main/java/com/riskified/JSONFormater.java | 2 --
 2 files changed, 1 insertion(+), 4 deletions(-)

diff --git a/pom.xml b/pom.xml
index e6c7384c..777d332c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -10,8 +10,7 @@
                 maven-compiler-plugin
                 3.14.1
                 
-                    1.8
-                    1.8
+                    8
                 
             
         
diff --git a/riskified-sdk/src/main/java/com/riskified/JSONFormater.java b/riskified-sdk/src/main/java/com/riskified/JSONFormater.java
index e62d66d1..1d99db73 100644
--- a/riskified-sdk/src/main/java/com/riskified/JSONFormater.java
+++ b/riskified-sdk/src/main/java/com/riskified/JSONFormater.java
@@ -12,8 +12,6 @@
 import com.riskified.models.PaypalPaymentDetails;
 import com.riskified.models.StripePaymentDetails;
 
-import sun.security.x509.IPAddressName;
-
 public class JSONFormater {
 
 	public static String toJson(Object obj) {

From a32f2e6e667dedcc78821b195df6a58046f6f6ce Mon Sep 17 00:00:00 2001
From: David Ribeiro 
Date: Thu, 8 Jan 2026 11:05:23 +0000
Subject: [PATCH 06/15] refactor: update tags to use 'release' instead of
 'source' & 'target'

---
 riskified-sdk/pom.xml | 6 +-----
 1 file changed, 1 insertion(+), 5 deletions(-)

diff --git a/riskified-sdk/pom.xml b/riskified-sdk/pom.xml
index 6ae0ffb1..4d5517b3 100644
--- a/riskified-sdk/pom.xml
+++ b/riskified-sdk/pom.xml
@@ -31,8 +31,7 @@
                 maven-compiler-plugin
                 3.14.1
                 
-                    1.8
-                    1.8
+                    8
                 
             
 
@@ -69,9 +68,6 @@
                  org.apache.maven.plugins
                  maven-javadoc-plugin
                  3.6.3
-                 
-                     1.8
-                 
                  
                      
                          attach-javadocs

From 3397ff06b60492566a31dce184c08c80b74aa090 Mon Sep 17 00:00:00 2001
From: David Ribeiro 
Date: Fri, 9 Jan 2026 17:21:53 +0000
Subject: [PATCH 07/15] refactor: update circleci pipeline

---
 .circleci/config.yml | 70 ++++++++++++++++++++++++++++++--------------
 1 file changed, 48 insertions(+), 22 deletions(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 8a0abb77..50a592bd 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -1,47 +1,73 @@
 version: 2.1
-jobs:
-  build:
+
+orbs:
+  git-shallow-clone: riskified/git-shallow-clone@2.8.0
+
+executors:
+  java-executor:
     resource_class: riskified/container-agent
     docker:
       - image: 284309667046.dkr.ecr.us-east-1.amazonaws.com/riskified/images-library/openjdk-cimg:master-21.0
 
-    working_directory: ~/repo
+jobs:
+  package:
+    executor: java-executor
+    working_directory: ~/RiskifiedJavaSDK
     steps:
-      - checkout
-
-      # Download and cache dependencies
+      - git-shallow-clone/checkout:
+          depth: 1
       - restore_cache:
           keys:
-          - v1-dependencies-{{ checksum "pom.xml" }}
-          - v1-dependencies-
-      - run: mvn dependency:go-offline
-          
+            - v1-dependencies-{{ checksum "pom.xml" }}
+            - v1-dependencies-
+      - run:
+          command: mvn dependency:go-offline
       - save_cache:
           paths:
             - ~/.m2
           key: v1-dependencies-{{ checksum "pom.xml" }}
-      - run: 
-          command: |
-            echo $SERVER_OSSRH_USERNAME
-      - run: 
+      - run:
+          name: Build project with Maven
+          command: mvn -B package --file pom.xml
+  deploy:
+    executor: java-executor
+    working_directory: ~/RiskifiedJavaSDK
+    steps:
+      - run:
+          name: "Configure GPG"
           command: |
             mkdir -p ~/.gnupg
-            echo use-agent >> ~/.gnupg/gpg.conf
             echo pinentry-mode loopback >> ~/.gnupg/gpg.conf
             echo allow-loopback-pinentry >> ~/.gnupg/gpg-agent.conf
-            echo RELOADAGENT | gpg-connect-agent
+            gpg-connect-agent reloadagent /bye
             echo $SECRING_GPG_ASC_BASE64 | base64 --decode | gpg --batch --no-tty --import --yes
             GPG_TTY=$(tty)
             export GPG_TTY
+      - restore_cache:
+          keys:
+            - v1-dependencies-{{ checksum "pom.xml" }}
+            - v1-dependencies-
       - run:
-          command: |
-            mvn -s .circleci/maven-release-settings.xml clean deploy -DdeployAtEnd=true -DperformRelease=true -DskipTests -Dspotbugs.skip=true        
-      
+          command: mvn -s .circleci/maven-release-settings.xml clean deploy -DdeployAtEnd=true -DperformRelease=true -DskipTests -Dspotbugs.skip=true
+
 workflows:
-  version: 2
   main:
     jobs:
-      - build:
+      - package
+      - hold_on_deploy:
+          type: approval
+          requires:
+            - build
+          filters:
+            tags:
+              only: /^v.*/
+            branches:
+              ignore: /.*/
+      - deploy:
+          requires:
+            - hold_on_deploy
           filters:
+            tags:
+              only: /^v.*/
             branches:
-              only: [master, /release-.*/]
+              ignore: /.*/

From c4f57355114a51fed6231a88e47a22b30cc9b7e8 Mon Sep 17 00:00:00 2001
From: David Ribeiro 
Date: Fri, 9 Jan 2026 17:22:09 +0000
Subject: [PATCH 08/15] refactor: remove github workflows

---
 .github/workflows/main.yml                  | 50 ---------------------
 .github/workflows/maven-release-setting.xml | 22 ---------
 2 files changed, 72 deletions(-)
 delete mode 100644 .github/workflows/main.yml
 delete mode 100644 .github/workflows/maven-release-setting.xml

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
deleted file mode 100644
index 552299bf..00000000
--- a/.github/workflows/main.yml
+++ /dev/null
@@ -1,50 +0,0 @@
-name: Maven CI/CD
-on:
-  push:
-    branches:
-      - master
-  pull_request:
-    branches:
-      - master
-  workflow_dispatch:
-
-jobs:
-  build_and_test:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checking out
-        uses: actions/checkout@v4 ##action to give our job access to code in our repo
-
-      - name: Cache local mvn repo
-        uses: actions/cache@v4
-        with:
-          path: ~/.m2/repository
-          key: v1-dependencies-{{ hashFiles('**/pom.xml') }}
-          restore-keys: |
-            v1-dependencies-
-
-      - run: mvn dependency:go-offline
-
-      - name: Configuring GPG key
-        run: |
-          echo $GPG_SIGNING_KEY | base64 --decode | gpg --batch --import
-        env:
-          GPG_SIGNING_KEY: ${{ secrets.SECRING_GPG_ASC_BASE64 }}
-
-      - name: Set up JDK 21
-        uses: actions/setup-java@v5 ##this action sets up a java environment that our job can run in
-        with:
-          distribution: 'zulu'
-          java-version: 21
-          overwrite-settings: false
-
-      - name: Build project with Maven
-        run: mvn -B package --file pom.xml
-
-      # - name: Publish to Apache Maven Central
-      #   if: github.event_name == 'push' && github.ref == 'refs/heads/master'
-      #   run: GPG_TTY=$(tty); mvn -s .github/workflows/maven-release-setting.xml clean deploy -DdeployAtEnd=true -DperformRelease=true -DskipTests -Dspotbugs.skip=true
-      #   env:
-      #     SERVER_OSSRH_USERNAME: ${{ secrets.SERVER_OSSRH_USERNAME }}
-      #     SERVER_OSSRH_PASSWORD: ${{ secrets.SERVER_OSSRH_PASSWORD }}
-      #     GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
diff --git a/.github/workflows/maven-release-setting.xml b/.github/workflows/maven-release-setting.xml
deleted file mode 100644
index f478962c..00000000
--- a/.github/workflows/maven-release-setting.xml
+++ /dev/null
@@ -1,22 +0,0 @@
-
-    
-        
-            ossrh
-            ${env.SERVER_OSSRH_USERNAME}
-            ${env.SERVER_OSSRH_PASSWORD}
-        
-    
-
-    
-        
-            gpg
-            
-                gpg
-                ${env.GPG_PASSPHRASE}
-            
-        
-    
-    
-        gpg
-    
-
\ No newline at end of file

From 8994c619ccf60322997b84e03115acd4a58bf30c Mon Sep 17 00:00:00 2001
From: David Ribeiro 
Date: Fri, 9 Jan 2026 17:22:55 +0000
Subject: [PATCH 09/15] upkeep: update version of sdk & publishing plugin

---
 riskified-sample/pom.xml                                  | 2 +-
 riskified-sdk/pom.xml                                     | 8 ++------
 .../src/main/java/com/riskified/RiskifiedClient.java      | 2 +-
 3 files changed, 4 insertions(+), 8 deletions(-)

diff --git a/riskified-sample/pom.xml b/riskified-sample/pom.xml
index 53f82e8d..901c16bd 100644
--- a/riskified-sample/pom.xml
+++ b/riskified-sample/pom.xml
@@ -9,7 +9,7 @@
         
             com.riskified
             riskified-sdk
-            v4.0.0
+            v5.1.0
         
 
         
diff --git a/riskified-sdk/pom.xml b/riskified-sdk/pom.xml
index 4d5517b3..2571940d 100644
--- a/riskified-sdk/pom.xml
+++ b/riskified-sdk/pom.xml
@@ -4,16 +4,12 @@
     4.0.0
     com.riskified
     riskified-sdk
-    v4.1.0
+    v5.1.0
     Riskified SDK
     Riskified rest api SDK for java
     https://www.riskified.com
 
     
-        
         
             central
             https://central.sonatype.com/api/v1/publisher/deployments/
@@ -38,7 +34,7 @@
             
                 org.sonatype.central
                 central-publishing-maven-plugin
-                0.8.0
+                0.10.0
                 true
                 
                     central
diff --git a/riskified-sdk/src/main/java/com/riskified/RiskifiedClient.java b/riskified-sdk/src/main/java/com/riskified/RiskifiedClient.java
index 08a06fa5..0ef51935 100644
--- a/riskified-sdk/src/main/java/com/riskified/RiskifiedClient.java
+++ b/riskified-sdk/src/main/java/com/riskified/RiskifiedClient.java
@@ -1075,7 +1075,7 @@ private HttpPost createPostRequest(String url) {
         postRequest.setHeader(HttpHeaders.ACCEPT, "application/vnd.riskified.com; version=2");
         postRequest.setHeader(HttpHeaders.ACCEPT, "application/json");
         postRequest.setHeader("X-RISKIFIED-SHOP-DOMAIN", shopUrl);
-        postRequest.setHeader("User-Agent","riskified_java_sdk/4.1.0"); // TODO: take the version automatically
+        postRequest.setHeader("User-Agent","riskified_java_sdk/5.1.0"); // TODO: take the version automatically
         postRequest.setHeader("Version",versionHeaderValue);
         return postRequest;
     }

From bb04682f51a34d1425192d9c2b2f6c2d62510708 Mon Sep 17 00:00:00 2001
From: David Ribeiro 
Date: Fri, 9 Jan 2026 17:24:43 +0000
Subject: [PATCH 10/15] fix: typo

---
 .circleci/config.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 50a592bd..fc136feb 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -57,7 +57,7 @@ workflows:
       - hold_on_deploy:
           type: approval
           requires:
-            - build
+            - package
           filters:
             tags:
               only: /^v.*/

From d44a58c4e3b1b2b9ab5409066ed5c0b5c488fc81 Mon Sep 17 00:00:00 2001
From: David Ribeiro 
Date: Fri, 9 Jan 2026 17:28:38 +0000
Subject: [PATCH 11/15] docs: update version in docs

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index cc50f8c2..b628a46a 100644
--- a/README.md
+++ b/README.md
@@ -1,7 +1,7 @@
 Riskified JAVA SDK
 =================
 
-version: 4.0.0
+version: 5.1.0
 ------------------
 
 See http://apiref.riskified.com for full API documentation

From f0312f592c436e682eec39b93e5e11eee60734d2 Mon Sep 17 00:00:00 2001
From: David Ribeiro 
Date: Fri, 9 Jan 2026 17:42:02 +0000
Subject: [PATCH 12/15] docs: update readme versions

---
 README.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/README.md b/README.md
index b628a46a..48aff4bd 100644
--- a/README.md
+++ b/README.md
@@ -45,7 +45,7 @@ Prerequisites:
 
 ---------------
 
-* Java JDK-1.5 or higher
+* Java JDK-8 or higher
 
 Running the samples:
 
@@ -104,7 +104,7 @@ curl -H "Content-Type: application/json" -H  "X-RISKIFIED-HMAC-SHA256: 071ef80d5
 
     com.riskified
     riskified-sdk
-    v4.0.0
+    v5.1.0
 
 ```
 

From 0ec47c66b311fc5a263c364d8c37c779c0c02da3 Mon Sep 17 00:00:00 2001
From: David Ribeiro 
Date: Mon, 12 Jan 2026 11:38:43 +0000
Subject: [PATCH 13/15] refactor: update client riskified client usage

---
 .../riskified/samples/orderClient/AccommodationClient.java    | 3 ++-
 .../main/java/com/riskified/samples/orderClient/Client.java   | 4 +++-
 2 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/riskified-sample/src/main/java/com/riskified/samples/orderClient/AccommodationClient.java b/riskified-sample/src/main/java/com/riskified/samples/orderClient/AccommodationClient.java
index 70cce488..269c1b66 100644
--- a/riskified-sample/src/main/java/com/riskified/samples/orderClient/AccommodationClient.java
+++ b/riskified-sample/src/main/java/com/riskified/samples/orderClient/AccommodationClient.java
@@ -19,7 +19,8 @@ public static void main(String[] arg) throws FieldBadFormatException {
         try {
             // Riskified client parameters can be set in the constructor, like this:
         	 RiskifiedClient client = new RiskifiedClient("", "", Environment.SANDBOX);
-            // Or according 'riskified_sdk.properties' configuration file, like this:
+            // Or using 'riskified_sdk.properties' configuration file, like this:
+            //RiskifiedClient client = new RiskifiedClient();
 
             Response resCreateOrder = client.createOrder(order);
 
diff --git a/riskified-sample/src/main/java/com/riskified/samples/orderClient/Client.java b/riskified-sample/src/main/java/com/riskified/samples/orderClient/Client.java
index bac81a9b..46064acb 100644
--- a/riskified-sample/src/main/java/com/riskified/samples/orderClient/Client.java
+++ b/riskified-sample/src/main/java/com/riskified/samples/orderClient/Client.java
@@ -43,7 +43,9 @@ public static void main(String[] arg) throws FieldBadFormatException, ParseExcep
 
         try {
             // Riskified client parameters can be set in the constructor, like this:
-            RiskifiedClient client = new RiskifiedClient("shopurl", "authtoken", Environment.SANDBOX);
+        	RiskifiedClient client = new RiskifiedClient("shopurl", "authtoken", Environment.SANDBOX);
+            // Or using 'riskified_sdk.properties' configuration file, like this:
+            //RiskifiedClient client = new RiskifiedClient();
 
 
 //            Response resAdviseOrder = client.adviseOrder(adviseOrder);

From 772ad19f5381e3f0341ebef5fe80d60d49f7ae34 Mon Sep 17 00:00:00 2001
From: David Ribeiro 
Date: Mon, 12 Jan 2026 17:02:40 +0000
Subject: [PATCH 14/15] fix: allow package to run in tags as well

---
 .circleci/config.yml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index fc136feb..7dc7f9e7 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -53,7 +53,10 @@ jobs:
 workflows:
   main:
     jobs:
-      - package
+      - package:
+          filters:
+            tags:
+              only: /^v.*/
       - hold_on_deploy:
           type: approval
           requires:

From 21b4e2a8c3606f3bc4f3b50c4dcd9738092717c5 Mon Sep 17 00:00:00 2001
From: David Ribeiro 
Date: Mon, 12 Jan 2026 17:47:42 +0000
Subject: [PATCH 15/15] refactor: Add SSH configuration to avoid unknown hosts
 for GitHub

---
 .circleci/config.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 7dc7f9e7..6edb2320 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -14,6 +14,9 @@ jobs:
     executor: java-executor
     working_directory: ~/RiskifiedJavaSDK
     steps:
+      - run:
+          name: Avoid hosts unknown for github
+          command: mkdir -p ~/.ssh/ && echo -e "Host github.com\n\tStrictHostKeyChecking no\n" > ~/.ssh/config
       - git-shallow-clone/checkout:
           depth: 1
       - restore_cache:
@@ -33,6 +36,9 @@ jobs:
     executor: java-executor
     working_directory: ~/RiskifiedJavaSDK
     steps:
+      - run:
+          name: Avoid hosts unknown for github
+          command: mkdir -p ~/.ssh/ && echo -e "Host github.com\n\tStrictHostKeyChecking no\n" > ~/.ssh/config
       - run:
           name: "Configure GPG"
           command: |