Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Manual Backport 1.x][CVE-2023-26486][CVE-2023-26487] Bump vega from 5.22.1 to 5.23.0 #3550

Closed
wants to merge 1 commit into from
Closed

[Manual Backport 1.x][CVE-2023-26486][CVE-2023-26487] Bump vega from 5.22.1 to 5.23.0 #3550

wants to merge 1 commit into from

Conversation

ananzh
Copy link
Member

@ananzh ananzh commented Mar 7, 2023

Description

Bump vega from 5.22.1 to 5.23.0. This will also bump vega-function from 5.13.0 to 5.13.1.

Backport PR:

#3533

Issue Resolved:

#3526 #3525

Check List

  • All tests pass
    • yarn test:jest
    • yarn test:jest_integration
    • yarn test:ftr
  • New functionality includes testing.
  • New functionality has been documented.
  • Update CHANGELOG.md
  • Commits are signed per the DCO using --signoff

@ananzh
[Manual Backport 1.x][CVE-2023-26486][CVE-2023-26487] Bump vega from …
5e5adbe 
…5.22.1 to 5.23.0

Bump vega from 5.22.1 to 5.23.0. This will also bump vega-function
from 5.13.0 to 5.13.1.

Backport PR:
opensearch-project#3533

Issue Resolved:
opensearch-project#3526
opensearch-project#3525

Signed-off-by: Anan Zhuang <ananzh@amazon.com>
@abbyhu2000 abbyhu2000 self-requested a review March 7, 2023 22:18
@ananzh
Copy link
Member Author

ananzh commented Mar 7, 2023

Due to this error d3-array@3.2.2: The engine "node" is incompatible with this module. Expected version ">=12". Got "10.24.1" , this cve can't be fixed in 1.x branches. Close the backport.

@ananzh ananzh closed this Mar 7, 2023
@ananzh ananzh mentioned this pull request Mar 7, 2023
Merged
8 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@abbyhu2000 abbyhu2000 Awaiting requested review from abbyhu2000 abbyhu2000 is a code owner

Assignees
No one assigned
Labels
backport 1.3
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@ananzh @abbyhu2000