Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[CVE-2022-2499][backport 1.x] Resolve qs from 6.5.3 to 6.11.0 #3451

Merged
merged 2 commits into from
Feb 18, 2023
Merged

[CVE-2022-2499][backport 1.x] Resolve qs from 6.5.3 to 6.11.0 #3451

merged 2 commits into from
Feb 18, 2023

Conversation

ananzh
Copy link
Member

@ananzh ananzh commented Feb 17, 2023

Issues Resolved

#3449

Check List

  • All tests pass
    • yarn test:jest
    • yarn test:jest_integration
    • yarn test:ftr
  • New functionality includes testing.
  • New functionality has been documented.
  • Update CHANGELOG.md
  • Commits are signed per the DCO using --signoff

@ananzh
[CVE-2022-2499][backport 1.x] Resolve qs to 6.11.0 in 1.x
dceac61 
Issue Resolved:
opensearch-project#3449

Signed-off-by: Anan Zhuang <ananzh@amazon.com>
@ananzh ananzh self-assigned this Feb 17, 2023
@codecov-commenter
Copy link

codecov-commenter commented Feb 17, 2023 •
edited
Loading

Codecov Report

Merging #3451 (dceac61) into 1.x (5ad84f9) will increase coverage by 0.04%.
The diff coverage is n/a.

📣 This organization is not using Codecov’s GitHub App Integration. We recommend you install it so Codecov can continue to function properly for your repositories. Learn more

@@            Coverage Diff             @@
##              1.x    #3451      +/-   ##
==========================================
+ Coverage   67.45%   67.49%   +0.04%     
==========================================
  Files        3044     3044              
  Lines       58696    58696              
  Branches     8902     8902              
==========================================
+ Hits        39591    39617      +26     
+ Misses      16952    16931      -21     
+ Partials     2153     2148       -5
Flag Coverage Δ
Linux 67.45% <ø> (ø)
Windows 67.44% <ø> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

Impacted Files Coverage Δ
...ic/application/models/sense_editor/sense_editor.ts 65.77% <0.00%> (+0.88%) ⬆️
src/setup_node_env/harden/child_process.js 88.46% <0.00%> (+3.84%) ⬆️
src/dev/build/lib/config.ts 85.29% <0.00%> (+5.88%) ⬆️
...ges/osd-apm-config-loader/src/config.test.mocks.ts 100.00% <0.00%> (+8.69%) ⬆️
packages/osd-cross-platform/src/path.ts 86.04% <0.00%> (+37.20%) ⬆️
src/dev/build/lib/get_build_number.ts 100.00% <0.00%> (+42.85%) ⬆️

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

abbyhu2000
abbyhu2000 previously approved these changes Feb 17, 2023
View reviewed changes
joshuarrrr
joshuarrrr reviewed Feb 17, 2023
View reviewed changes
CHANGELOG.md Outdated Show resolved Hide resolved
@ananzh ananzh changed the title [CVE-2022-2499][backport 1.x] Resolve qs to 6.11.0 in 1.x [CVE-2022-2499][backport 1.x] Resolve qs from 6.5.3 to 6.11.0 Feb 18, 2023
@ananzh @joshuarrrr
Update CHANGELOG.md
63b44a3 
Co-authored-by: Josh Romero <rmerqg@amazon.com>
@abbyhu2000 abbyhu2000 merged commit 9a4f6ad into opensearch-project:1.x Feb 18, 2023
@opensearch-trigger-bot opensearch-trigger-bot bot mentioned this pull request Feb 18, 2023
Merged
opensearch-trigger-bot bot pushed a commit that referenced this pull request Feb 18, 2023
@github-actions
[CVE-2022-2499][backport 1.x] Resolve qs from 6.5.3 to 6.11.0 (#3451)
9271b22 
(cherry picked from commit 9a4f6ad)
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
ananzh pushed a commit that referenced this pull request Feb 21, 2023
@opensearch-trigger-bot @github-actions
[CVE-2022-2499][backport 1.x] Resolve qs from 6.5.3 to 6.11.0 (#3451) (…
ddd7f50 
…#3460)

(cherry picked from commit 9a4f6ad)
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@abbyhu2000 abbyhu2000 abbyhu2000 approved these changes

@joshuarrrr joshuarrrr joshuarrrr approved these changes

@kristenTian kristenTian Awaiting requested review from kristenTian

@AMoo-Miki AMoo-Miki Awaiting requested review from AMoo-Miki AMoo-Miki is a code owner

Assignees

@ananzh ananzh

Labels
backport 1.3 v1.3.9
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
4 participants
@ananzh @codecov-commenter @joshuarrrr @abbyhu2000