You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pulsar.apache.org by te...@apache.org on 2022/08/29 14:17:57 UTC

[pulsar] branch branch-2.11 updated (731897244c0 -> a53aaa3e527)

This is an automated email from the ASF dual-hosted git repository.

technoboy pushed a change to branch branch-2.11
in repository https://gitbox.apache.org/repos/asf/pulsar.git


    from 731897244c0 [fix][client] Fix reach redeliverCount client can't send batch messages to DLQ (#17317)
     new fa0bfc31d50 [cleanup][owasp] Supress false positive netty-tcnative (#17282)
     new a53aaa3e527 Exclude jsr305 from objectsize. (#17277)

The 2 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.


Summary of changes:
 pulsar-sql/presto-distribution/pom.xml         | 6 ++++++
 src/owasp-dependency-check-false-positives.xml | 7 +++++++
 2 files changed, 13 insertions(+)


[pulsar] 01/02: [cleanup][owasp] Supress false positive netty-tcnative (#17282)

Posted by te...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

technoboy pushed a commit to branch branch-2.11
in repository https://gitbox.apache.org/repos/asf/pulsar.git

commit fa0bfc31d50d633c1b7d94b994367a528e3f4a8b
Author: Nicolò Boschi <bo...@gmail.com>
AuthorDate: Mon Aug 29 08:45:25 2022 +0200

    [cleanup][owasp] Supress false positive netty-tcnative (#17282)
---
 src/owasp-dependency-check-false-positives.xml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/src/owasp-dependency-check-false-positives.xml b/src/owasp-dependency-check-false-positives.xml
index 54b703f0108..e69afb31a68 100644
--- a/src/owasp-dependency-check-false-positives.xml
+++ b/src/owasp-dependency-check-false-positives.xml
@@ -54,6 +54,13 @@
     <packageUrl regex="true">^pkg:maven/io\.netty/netty\-tcnative\-classes@.*$</packageUrl>
     <cpe>cpe:/a:netty:netty</cpe>
   </suppress>
+  <suppress>
+    <notes><![CDATA[
+   file name: netty-tcnative-boringssl-static-2.0.52.Final-osx-aarch_64.jar
+   ]]></notes>
+    <packageUrl regex="true">^pkg:maven/io\.netty/netty\-tcnative\-boringssl\-static@.*$</packageUrl>
+    <cpe>cpe:/a:chromium_project:chromium</cpe>
+  </suppress>
   <suppress>
 <!--    Zookkeeper false positive about Jetty and commons-io-->
 <!--    https://github.com/apache/zookeeper/pull/1824-->


[pulsar] 02/02: Exclude jsr305 from objectsize. (#17277)

Posted by te...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

technoboy pushed a commit to branch branch-2.11
in repository https://gitbox.apache.org/repos/asf/pulsar.git

commit a53aaa3e527de3631c2acccc4069c249fe8e3f0a
Author: Jiwei Guo <te...@apache.org>
AuthorDate: Mon Aug 29 22:03:59 2022 +0800

    Exclude jsr305 from objectsize. (#17277)
---
 pulsar-sql/presto-distribution/pom.xml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/pulsar-sql/presto-distribution/pom.xml b/pulsar-sql/presto-distribution/pom.xml
index bdf3f88360d..43b92ff9aac 100644
--- a/pulsar-sql/presto-distribution/pom.xml
+++ b/pulsar-sql/presto-distribution/pom.xml
@@ -136,6 +136,12 @@
       <groupId>com.twitter.common</groupId>
       <artifactId>objectsize</artifactId>
       <version>${objectsize.version}</version>
+      <exclusions>
+        <exclusion>
+          <artifactId>jsr305</artifactId>
+          <groupId>com.google.code.findbugs</groupId>
+        </exclusion>
+      </exclusions>
     </dependency>
 
     <!-- jackson dependencies -->