You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@solr.apache.org by ep...@apache.org on 2026/07/31 17:14:33 UTC

(solr-site) branch main updated (6bb766605 -> 91c0231e8)

This is an automated email from the ASF dual-hosted git repository.

epugh pushed a change to branch main
in repository https://gitbox.apache.org/repos/asf/solr-site.git


    from 6bb766605 Merge pull request #204 from epugh/add_openvex_support
     add c75f41bc1 Update VEX file with false positives
     add 2b2c4ab9c Merge remote-tracking branch 'upstream/main' into Update-vex
     add f84b24f5c Use the CycloneDX version, not OpenVex version
     add c37e54cb7 Merge remote-tracking branch 'upstream/main' into Update-vex
     add 9f1690dc5 Merge remote-tracking branch 'upstream/main' into Update-vex
     add defafdc5a Convert older json content into our vex statement markdown.  Expanded versions to be accurate.
     add 9e6d39f10 Filter out shaded code that doesn't actually ship.  It conflicts between our licenses listing and what syft finds and is a false positive.
     add d6ff765b3 Update dependencies napping for new jars.
     new 91c0231e8 Merge pull request #173 from apache/Update-vex

The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.


Summary of changes:
 content/solr/vex/2026-07-18-cve-2025-48734.md      | 18 +++++++++++
 content/solr/vex/2026-07-18-cve-2026-33870.md      | 22 ++++++++++++++
 content/solr/vex/2026-07-18-ghsa-72hv-8253-57qq.md | 18 +++++++++++
 plugins/vex/regenerate_dependency_mappings.py      | 26 ++++++++++++++--
 plugins/vex/solr-dependency-versions.json          | 35 ++++++++++++++++++----
 5 files changed, 110 insertions(+), 9 deletions(-)
 create mode 100644 content/solr/vex/2026-07-18-cve-2025-48734.md
 create mode 100644 content/solr/vex/2026-07-18-cve-2026-33870.md
 create mode 100644 content/solr/vex/2026-07-18-ghsa-72hv-8253-57qq.md

(solr-site) 01/01: Merge pull request #173 from apache/Update-vex

Posted by ep...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

epugh pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/solr-site.git

commit 91c0231e81bce63d9ade04bb9b0a98e4c5a6fed8
Merge: 6bb766605 d6ff765b3
Author: Eric Pugh <ep...@opensourceconnections.com>
AuthorDate: Fri Jul 31 13:14:27 2026 -0400

    Merge pull request #173 from apache/Update-vex
    
    Update VEX file with false positives

 content/solr/vex/2026-07-18-cve-2025-48734.md      | 18 +++++++++++
 content/solr/vex/2026-07-18-cve-2026-33870.md      | 22 ++++++++++++++
 content/solr/vex/2026-07-18-ghsa-72hv-8253-57qq.md | 18 +++++++++++
 plugins/vex/regenerate_dependency_mappings.py      | 26 ++++++++++++++--
 plugins/vex/solr-dependency-versions.json          | 35 ++++++++++++++++++----
 5 files changed, 110 insertions(+), 9 deletions(-)