You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@solr.apache.org by GitBox <gi...@apache.org> on 2022/09/20 20:48:04 UTC
[GitHub] [solr] risdenk opened a new pull request, #1030: Solr 16421
risdenk opened a new pull request, #1030:
URL: https://github.com/apache/solr/pull/1030
https://issues.apache.org/jira/browse/SOLR-16421
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org
For additional commands, e-mail: issues-help@solr.apache.org
[GitHub] [solr] sonatype-lift[bot] commented on a diff in pull request #1030: SOLR-16421: Upgrade Apache Calcite to 1.32.0 and Avatica to 1.22.0
Posted by GitBox <gi...@apache.org>.
sonatype-lift[bot] commented on code in PR #1030:
URL: https://github.com/apache/solr/pull/1030#discussion_r975851916
##########
solr/modules/sql/build.gradle:
##########
@@ -30,18 +30,17 @@ dependencies {
// SQL Parser via Calcite
implementation ('org.apache.calcite:calcite-core', {
Review Comment:
*Medium Vulnerability:*
### pkg:maven/org.apache.calcite/calcite-core@1.32.0
0 Critical, 0 High, 1 Medium, 0 Low, 0 None vulnerabilities have been found across 1 dependencies
To see more details about this component, [go to the Sonatype Lift console](https://lift.sonatype.com/results/github.com/apache/solr/01GDEAWH7EYS748WY149KS22VS?tab=dependencies&component=pkg%3Amaven%2Forg.apache.calcite%2Fcalcite-core%401.32.0)
---
<details><summary><b>âšī¸ Learn about @sonatype-lift commands</b></summary>
You can reply with the following commands. For example, reply with ***@sonatype-lift ignoreall*** to leave out all findings.
| **Command** | **Usage** |
| ------------- | ------------- |
| `@sonatype-lift ignore` | Leave out the above finding from this PR |
| `@sonatype-lift ignoreall` | Leave out all the existing findings from this PR |
| `@sonatype-lift exclude <file\|issue\|path\|tool>` | Exclude specified `file\|issue\|path\|tool` from Lift findings by updating your config.toml file |
**Note:** When talking to LiftBot, you need to **refresh** the page to see its response.
<sub>[Click here](https://github.com/apps/sonatype-lift/installations/new) to add LiftBot to another repo.</sub></details>
---
Was this a good recommendation?
[ [đ Not relevant](https://www.sonatype.com/lift-comment-rating?comment=335041839&lift_comment_rating=1) ] - [ [đ Won't fix](https://www.sonatype.com/lift-comment-rating?comment=335041839&lift_comment_rating=2) ] - [ [đ Not critical, will fix](https://www.sonatype.com/lift-comment-rating?comment=335041839&lift_comment_rating=3) ] - [ [đ Critical, will fix](https://www.sonatype.com/lift-comment-rating?comment=335041839&lift_comment_rating=4) ] - [ [đ Critical, fixing now](https://www.sonatype.com/lift-comment-rating?comment=335041839&lift_comment_rating=5) ]
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org
For additional commands, e-mail: issues-help@solr.apache.org
[GitHub] [solr] dsmiley commented on a diff in pull request #1030: SOLR-16421: Upgrade Apache Calcite to 1.32.0 and Avatica to 1.22.0
Posted by GitBox <gi...@apache.org>.
dsmiley commented on code in PR #1030:
URL: https://github.com/apache/solr/pull/1030#discussion_r975983610
##########
solr/modules/sql/build.gradle:
##########
@@ -30,18 +30,17 @@ dependencies {
// SQL Parser via Calcite
implementation ('org.apache.calcite:calcite-core', {
Review Comment:
FYI `ignore` is pointless for projects like ours that do _not_ gate our PRs on Lift. Lift is just here for an FYI. Any way, I reported the inaccurate CVE finding to Lift developers.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org
For additional commands, e-mail: issues-help@solr.apache.org
[GitHub] [solr] risdenk commented on a diff in pull request #1030: SOLR-16421: Upgrade Apache Calcite to 1.32.0 and Avatica to 1.22.0
Posted by GitBox <gi...@apache.org>.
risdenk commented on code in PR #1030:
URL: https://github.com/apache/solr/pull/1030#discussion_r975856589
##########
solr/modules/sql/build.gradle:
##########
@@ -30,18 +30,17 @@ dependencies {
// SQL Parser via Calcite
implementation ('org.apache.calcite:calcite-core', {
Review Comment:
This is just straight up wrong on the CVE... @sonatype-lift ignore
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org
For additional commands, e-mail: issues-help@solr.apache.org
[GitHub] [solr] sonatype-lift[bot] commented on a diff in pull request #1030: SOLR-16421: Upgrade Apache Calcite to 1.32.0 and Avatica to 1.22.0
Posted by GitBox <gi...@apache.org>.
sonatype-lift[bot] commented on code in PR #1030:
URL: https://github.com/apache/solr/pull/1030#discussion_r975856624
##########
solr/modules/sql/build.gradle:
##########
@@ -30,18 +30,17 @@ dependencies {
// SQL Parser via Calcite
implementation ('org.apache.calcite:calcite-core', {
Review Comment:
I've recorded this as ignored for this pull request.
If you change your mind, just comment `@sonatype-lift unignore`.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org
For additional commands, e-mail: issues-help@solr.apache.org
[GitHub] [solr] risdenk merged pull request #1030: SOLR-16421: Upgrade Apache Calcite to 1.32.0 and Avatica to 1.22.0
Posted by GitBox <gi...@apache.org>.
risdenk merged PR #1030:
URL: https://github.com/apache/solr/pull/1030
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org
For additional commands, e-mail: issues-help@solr.apache.org