Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cherry-pick #5096 #5099 #5108 #5113 #5114 #5115 #5116 #5118 #5126 #5136

Conversation

github-actions[bot]
Copy link
Contributor

What this PR does / why we need it:
Cherry pick of #5096 #5099 #5108 #5113 #5114 #5115 #5116 #5118 #5126.

ffjlabo and others added 9 commits August 15, 2024 02:11
… as much as possible (#5096)

Signed-off-by: Yoshiki Fujikane <ffjlabo@gmail.com>
Signed-off-by: pipecd-bot <pipecd.dev@gmail.com>
Bumps [postcss](https://github.com/postcss/postcss) from 7.0.39 to 8.4.40.
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@7.0.39...8.4.40)

---
updated-dependencies:
- dependency-name: postcss
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: pipecd-bot <pipecd.dev@gmail.com>
* Use LRUCache for Application Manifests Cache

Signed-off-by: Shinnosuke Sawada-Dazai <shin@warashi.dev>

* Use not constant but config value

Co-authored-by: Yoshiki Fujikane <40124947+ffjlabo@users.noreply.github.com>
Signed-off-by: Shinnosuke Sawada-Dazai <shin@warashi.dev>

---------

Signed-off-by: Shinnosuke Sawada-Dazai <shin@warashi.dev>
Co-authored-by: Yoshiki Fujikane <40124947+ffjlabo@users.noreply.github.com>
Signed-off-by: pipecd-bot <pipecd.dev@gmail.com>
Signed-off-by: khanhtc1202 <khanhtc1202@gmail.com>
Signed-off-by: pipecd-bot <pipecd.dev@gmail.com>
Bumps [postcss](https://github.com/postcss/postcss) to 8.4.40 and updates ancestor dependency [autoprefixer](https://github.com/postcss/autoprefixer). These dependencies need to be updated together.

Updates `postcss` from 7.0.39 to 8.4.40
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@7.0.39...8.4.40)

Updates `autoprefixer` from 9.8.8 to 10.4.20
- [Release notes](https://github.com/postcss/autoprefixer/releases)
- [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md)
- [Commits](postcss/autoprefixer@9.8.8...10.4.20)

---
updated-dependencies:
- dependency-name: postcss
  dependency-type: indirect
- dependency-name: autoprefixer
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: pipecd-bot <pipecd.dev@gmail.com>
Snyk has created this PR to upgrade google-protobuf from 3.21.0 to 3.21.4.

See this package in yarn:
google-protobuf

See this project in Snyk:
https://app.snyk.io/org/pipecd/project/f41c5767-b506-4f59-beb9-ef662258eb9a?utm_source=github&utm_medium=referral&page=upgrade-pr

Signed-off-by: t-kikuc <tkikuchi07f@gmail.com>
Co-authored-by: snyk-bot <snyk-bot@snyk.io>
Signed-off-by: pipecd-bot <pipecd.dev@gmail.com>
Snyk has created this PR to upgrade react-markdown from 6.0.2 to 6.0.3.

See this package in yarn:
react-markdown

See this project in Snyk:
https://app.snyk.io/org/pipecd/project/f41c5767-b506-4f59-beb9-ef662258eb9a?utm_source=github&utm_medium=referral&page=upgrade-pr

Signed-off-by: t-kikuc <tkikuchi07f@gmail.com>
Co-authored-by: snyk-bot <snyk-bot@snyk.io>
Signed-off-by: pipecd-bot <pipecd.dev@gmail.com>
)

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-ALPINE320-OPENSSL-7413532
- https://snyk.io/vuln/SNYK-ALPINE320-OPENSSL-7413532

Signed-off-by: khanhtc1202 <khanhtc1202@gmail.com>
Co-authored-by: snyk-bot <snyk-bot@snyk.io>
Signed-off-by: pipecd-bot <pipecd.dev@gmail.com>
Snyk has created this PR to upgrade dayjs from 1.8.28 to 1.11.12.

See this package in yarn:
dayjs

See this project in Snyk:
https://app.snyk.io/org/pipecd/project/f41c5767-b506-4f59-beb9-ef662258eb9a?utm_source=github&utm_medium=referral&page=upgrade-pr

Signed-off-by: t-kikuc <tkikuchi07f@gmail.com>
Co-authored-by: snyk-bot <snyk-bot@snyk.io>
Signed-off-by: pipecd-bot <pipecd.dev@gmail.com>
@ffjlabo
Copy link
Member

ffjlabo commented Aug 15, 2024

This is for v0.48.6-rc0 release.
I added the label v0.48.6 on the previous cherry-picked expect for #5029, #5097, #5128, #5130
(previous PR: #5132)

We can check the PRs for v0.48.5 below.
https://github.com/pipe-cd/pipecd/pulls?q=is%3Apr+is%3Aclosed+label%3Acherry-pick+label%3Av0.48.5

We can check the PRs for v0.48.6-rc0 below.
https://github.com/pipe-cd/pipecd/pulls?q=is%3Apr+is%3Aclosed+label%3Acherry-pick+label%3Av0.48.6

Copy link

codecov bot commented Aug 15, 2024

Codecov Report

Attention: Patch coverage is 0% with 11 lines in your changes missing coverage. Please review.

Please upload report for BASE (release-v0.48.x@49f7ec0). Learn more about missing BASE report.

Files Patch % Lines
pkg/app/piped/cmd/piped/piped.go 0.00% 11 Missing ⚠️
Additional details and impacted files
@@                Coverage Diff                 @@
##             release-v0.48.x    #5136   +/-   ##
==================================================
  Coverage                   ?   22.52%           
==================================================
  Files                      ?      519           
  Lines                      ?    56917           
  Branches                   ?        0           
==================================================
  Hits                       ?    12818           
  Misses                     ?    43071           
  Partials                   ?     1028           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@ffjlabo ffjlabo merged commit d8d1df0 into release-v0.48.x Aug 15, 2024
24 checks passed
@ffjlabo ffjlabo deleted the cherry-pick-#5096-#5099-#5108-#5113-#5114-#5115-#5116-#5118-#5126-to-release-v0.48.x branch August 15, 2024 02:51
@ffjlabo
Copy link
Member

ffjlabo commented Aug 15, 2024

📝
I added the label v0.48.6-rc0 instead of v0.48.6.
https://github.com/pipe-cd/pipecd/pulls?q=is%3Apr+is%3Aclosed+label%3Av0.48.6-rc0+

@github-actions github-actions bot mentioned this pull request Aug 26, 2024
@github-actions github-actions bot mentioned this pull request Sep 10, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants