Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Manual backport 1.x][CVE-2023-25653] Bump node-jose to 2.2.0 #3446

Merged
merged 2 commits into from
Mar 2, 2023

Conversation

ananzh
Copy link
Member

@ananzh ananzh commented Feb 17, 2023

Backport PR:
#3445

Check List

  • All tests pass
    • yarn test:jest
    • yarn test:jest_integration
    • yarn test:ftr
  • New functionality includes testing.
  • New functionality has been documented.
  • Update CHANGELOG.md
  • Commits are signed per the DCO using --signoff

Backport PR:
opensearch-project#3445

Signed-off-by: Anan Zhuang <ananzh@amazon.com>
@ananzh ananzh self-assigned this Feb 17, 2023
@ananzh ananzh added backport 1.3 cve Security vulnerabilities detected by Dependabot or Mend labels Feb 17, 2023
abbyhu2000
abbyhu2000 previously approved these changes Feb 17, 2023
@ananzh ananzh added the v1.3.9 label Feb 17, 2023
@codecov-commenter
Copy link

codecov-commenter commented Feb 17, 2023

Codecov Report

Merging #3446 (ab51e52) into 1.x (9a4f6ad) will not change coverage.
The diff coverage is n/a.

📣 This organization is not using Codecov’s GitHub App Integration. We recommend you install it so Codecov can continue to function properly for your repositories. Learn more

@@           Coverage Diff           @@
##              1.x    #3446   +/-   ##
=======================================
  Coverage   67.45%   67.45%           
=======================================
  Files        3044     3044           
  Lines       58696    58696           
  Branches     8902     8902           
=======================================
  Hits        39591    39591           
  Misses      16952    16952           
  Partials     2153     2153           
Flag Coverage Δ
Linux 67.45% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

@joshuarrrr
Copy link
Member

ignoring mend error/failure.

@joshuarrrr joshuarrrr merged commit 63e15a9 into opensearch-project:1.x Mar 2, 2023
opensearch-trigger-bot bot pushed a commit that referenced this pull request Mar 7, 2023
Backport PR:
#3445

Signed-off-by: Anan Zhuang <ananzh@amazon.com>
(cherry picked from commit 63e15a9)
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

# Conflicts:
#	CHANGELOG.md
joshuarrrr pushed a commit that referenced this pull request Mar 7, 2023
…#3541)

Backport PR:
#3445

Signed-off-by: Anan Zhuang <ananzh@amazon.com>
(cherry picked from commit 63e15a9)
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

# Conflicts:
#	CHANGELOG.md

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
backport 1.3 cve Security vulnerabilities detected by Dependabot or Mend v1.3.9
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants