You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@linkis.apache.org by GitBox <gi...@apache.org> on 2022/06/17 10:17:33 UTC
[GitHub] [incubator-linkis] jackxu2011 opened a new pull request, #2301: fix(cves): update dependency to fix CVEs
jackxu2011 opened a new pull request, #2301:
URL: https://github.com/apache/incubator-linkis/pull/2301
### What is the purpose of the change
Update dependency to fix ant-1.9.1 4 CVEs, commons-compress-1.9 5 CVEs, commons-io-2.4 1 CVE,
jetty-webapp-9.4.42.v20210604 1 CVE, netty-codec-http-4.1.65.Final 2 CVE and unify
commons-configuration, commons-lang3, javassist versions
### Brief change log
(for example:)
- upgrade ant to 1.10.12
- upgrade commons-compress to 1.21
- upgrade commons-io to 2.11.0
- upgrade jetty to 9.4.46.v20220331
- upgrade netty to 4.1.78.Final
- upgrade and unify commons-configuration to 1.10
- upgrade and unify commons-lang3 to 3.12.0
- upgrade and unify javassist to 3.27.0-GA
### Verifying this change
(Please pick either of the following options)
This change is a trivial rework / code cleanup without any test coverage.
### Does this pull request potentially affect one of the following parts:
- Dependencies (does it add or upgrade a dependency): (yes )
- Anything that affects deployment: ( no )
- The MGS(Microservice Governance Services), i.e., Spring Cloud Gateway, OpenFeign, Eureka.: (no)
### Documentation
- Does this pull request introduce a new feature? (no)
- If yes, how is the feature documented? (not applicable / docs / JavaDocs / not documented)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@linkis.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@linkis.apache.org
For additional commands, e-mail: notifications-help@linkis.apache.org
[GitHub] [incubator-linkis] codecov[bot] commented on pull request #2301: fix(cves): update dependency to fix CVEs
Posted by GitBox <gi...@apache.org>.
codecov[bot] commented on PR #2301:
URL: https://github.com/apache/incubator-linkis/pull/2301#issuecomment-1158744679
# [Codecov](https://codecov.io/gh/apache/incubator-linkis/pull/2301?src=pr&el=h1&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation) Report
> Merging [#2301](https://codecov.io/gh/apache/incubator-linkis/pull/2301?src=pr&el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation) (708b70b) into [dev-1.2.0](https://codecov.io/gh/apache/incubator-linkis/commit/caccf89dd4fec12dc0aa155d3f18fe392dbf53ee?el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation) (caccf89) will **not change** coverage.
> The diff coverage is `n/a`.
```diff
@@ Coverage Diff @@
## dev-1.2.0 #2301 +/- ##
============================================
Coverage 20.56% 20.56%
Complexity 1055 1055
============================================
Files 455 455
Lines 13920 13920
Branches 2192 2192
============================================
Hits 2863 2863
Misses 10668 10668
Partials 389 389
```
------
[Continue to review full report at Codecov](https://codecov.io/gh/apache/incubator-linkis/pull/2301?src=pr&el=continue&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation).
> **Legend** - [Click here to learn more](https://docs.codecov.io/docs/codecov-delta?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation)
> `Δ = absolute <relative> (impact)`, `ø = not affected`, `? = missing data`
> Powered by [Codecov](https://codecov.io/gh/apache/incubator-linkis/pull/2301?src=pr&el=footer&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation). Last update [caccf89...708b70b](https://codecov.io/gh/apache/incubator-linkis/pull/2301?src=pr&el=lastupdated&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation). Read the [comment docs](https://docs.codecov.io/docs/pull-request-comments?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation).
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@linkis.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@linkis.apache.org
For additional commands, e-mail: notifications-help@linkis.apache.org
[GitHub] [incubator-linkis] peacewong merged pull request #2301: fix(cves): update dependency to fix CVEs
Posted by GitBox <gi...@apache.org>.
peacewong merged PR #2301:
URL: https://github.com/apache/incubator-linkis/pull/2301
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@linkis.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@linkis.apache.org
For additional commands, e-mail: notifications-help@linkis.apache.org