You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@seata.apache.org by "ptyin (via GitHub)" <gi...@apache.org> on 2024/02/23 15:59:32 UTC
[PR] optimize: bump @alicloud/console-components and extract subprojects to fix vulnerabilities [incubator-seata]
ptyin opened a new pull request, #6375:
URL: https://github.com/apache/incubator-seata/pull/6375
<!-- Please make sure you have read and understood the contributing guidelines -->
- [ ] I have registered the PR [changes](../changes).
### Ⅰ. Describe what this PR did
To fix console-fe vulnerabilities, I bump @alicloud/console-components from 1.6.2 to 2.1.15 (1.6.2 published a year ago). However, I found the subprojects of it (e.g., @alicloud/console-components-actions, @alicloud/console-components-app-layout, etc.) has no subsequent updates, which leads to broken dependencies of newest version of their root project. Therefore, I extracted subprojects and modified some code.
### Ⅱ. Does this pull request fix one issue?
<!-- If that, add "fixes #xxx" below in the next line, for example, fixes #97. -->
This PR aims to fix following CVEs.
<img width="946" alt="image" src="https://github.com/apache/incubator-seata/assets/32592585/6a7b16b2-3dac-413d-98c0-fac08baee851">
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@seata.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@seata.apache.org
For additional commands, e-mail: notifications-help@seata.apache.org
Re: [PR] optimize: override nested dependencies to fix vulnerabilities [incubator-seata]
Posted by "codecov-commenter (via GitHub)" <gi...@apache.org>.
codecov-commenter commented on PR #6375:
URL: https://github.com/apache/incubator-seata/pull/6375#issuecomment-1962315864
## [Codecov](https://app.codecov.io/gh/apache/incubator-seata/pull/6375?src=pr&el=h1&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) Report
All modified and coverable lines are covered by tests :white_check_mark:
> Project coverage is 52.39%. Comparing base [(`a866c2d`)](https://app.codecov.io/gh/apache/incubator-seata/commit/a866c2d129e2c9f981ede8474679a3580ae69880?el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) to head [(`dafa8df`)](https://app.codecov.io/gh/apache/incubator-seata/pull/6375?src=pr&el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache).
> Report is 1 commits behind head on 2.x.
<details><summary>Additional details and impacted files</summary>
[](https://app.codecov.io/gh/apache/incubator-seata/pull/6375?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache)
```diff
@@ Coverage Diff @@
## 2.x #6375 +/- ##
============================================
- Coverage 52.40% 52.39% -0.01%
+ Complexity 5245 5244 -1
============================================
Files 924 924
Lines 32066 32066
Branches 3833 3833
============================================
- Hits 16805 16802 -3
- Misses 13608 13610 +2
- Partials 1653 1654 +1
```
[see 5 files with indirect coverage changes](https://app.codecov.io/gh/apache/incubator-seata/pull/6375/indirect-changes?src=pr&el=tree-more&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache)
</details>
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@seata.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@seata.apache.org
For additional commands, e-mail: notifications-help@seata.apache.org
Re: [PR] security: override nested dependencies to fix vulnerabilities [incubator-seata]
Posted by "liuqiufeng (via GitHub)" <gi...@apache.org>.
liuqiufeng merged PR #6375:
URL: https://github.com/apache/incubator-seata/pull/6375
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@seata.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@seata.apache.org
For additional commands, e-mail: notifications-help@seata.apache.org