Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

slack-vitess-r14.0.5 bump up package versions for cve/snyk tickets #74

Merged
merged 1 commit into from
May 8, 2023

Conversation

tanjinx
Copy link

@tanjinx tanjinx commented May 8, 2023

Description

bump up package versions due to CVE tickets.

Related Issue(s)

Checklist

  • "Backport to:" labels have been added if this change should be back-ported
  • Tests were added or are not required
  • Did the new or modified tests pass consistently locally and on the CI
  • Documentation was added or is not required

Deployment Notes

@tanjinx tanjinx requested a review from a team as a code owner May 8, 2023 18:24
@tanjinx tanjinx changed the title bump up package versions slack-vitess-r14.0.5 bump up package versions for cve/snyk tickets May 8, 2023
@tanjinx tanjinx requested a review from vmogilev May 8, 2023 18:42
Copy link

@vmogilev vmogilev left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I reviewed the list of tickets here: https://jira.tinyspeck.com/browse/DRE-8466?filter=28915&jql=project%20in%20(DRE)%20AND%20labels%20in%20(snyk)%20AND%20labels%20in%20(vitess)%20AND%20status%20not%20in%20(Done%2C%20Resolved)%20ORDER%20BY%20created%20DESC%2C%20due%20ASC%2C%20summary%20ASC%2C%20resolved%20DESC

and the following pkgs are no longer found in this repo:

golang.org/x/net/http2/hpack package to version 0.7.0
golang.org/x/text/language package to version 0.3.8
golang.org/x/net/http2 package to version 0.4.0
github.com/prometheus/client_golang/prometheus/promhttp package to version 1.11.1
io.netty:netty-transport package to version 4.1.59.Final

verified as follows:

go list -u -m all > /tmp/all.pkgs
grep golang.org/x/net/http2/hpack /tmp/all.pkgs | awk '{print $2}'
grep golang.org/x/text/language /tmp/all.pkgs | awk '{print $2}'
grep golang.org/x/net/http2 /tmp/all.pkgs | awk '{print $2}'
grep github.com/prometheus/client_golang/prometheus/promhttp /tmp/all.pkgs | awk '{print $2}'

other than that confusion - looks good. Thank you

@tanjinx tanjinx merged commit 920ae99 into slack-vitess-r14.0.5 May 8, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants