You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@flink.apache.org by "r-sidd (via GitHub)" <gi...@apache.org> on 2024/10/09 10:06:05 UTC
[PR] [FLINK-36449] Bump apache-rat-plugin [flink-kubernetes-operator]
r-sidd opened a new pull request, #890:
URL: https://github.com/apache/flink-kubernetes-operator/pull/890
## What is the purpose of the change
Bump apache-rat-plugin
## Brief change log
Bump apache-rat-plugin from 0.12 to 0.16.1 to remediate the underlying vulnerabilities in the dependencies.
Vulnerabilities from dependencies:
[CVE-2022-4245](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4245)
[CVE-2022-4244](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4244)
[CVE-2020-15250](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15250)
## Verifying this change
This change is a trivial rework / code cleanup without any test coverage.
## Does this pull request potentially affect one of the following parts:
- Dependencies (does it add or upgrade a dependency): yes
- The public API, i.e., is any changes to the `CustomResourceDescriptors`: no
- Core observer or reconciler logic that is regularly executed: no
## Documentation
- Does this pull request introduce a new feature? no
- If yes, how is the feature documented? not applicable
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@flink.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] [FLINK-36449] Bump apache-rat-plugin [flink-kubernetes-operator]
Posted by "gyfora (via GitHub)" <gi...@apache.org>.
gyfora commented on PR #890:
URL: https://github.com/apache/flink-kubernetes-operator/pull/890#issuecomment-2407224414
@r-sidd you have about 5 PRs open with one-liner changes, please put them together so we don't need to run the e2es again and again.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@flink.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] [FLINK-36449] Bump apache-rat-plugin [flink-kubernetes-operator]
Posted by "r-sidd (via GitHub)" <gi...@apache.org>.
r-sidd commented on PR #890:
URL: https://github.com/apache/flink-kubernetes-operator/pull/890#issuecomment-2408437653
> @r-sidd you have about 5 PRs open with one-liner changes, please put them together so we don't need to run the e2es again and again.
@gyfora I have two PRs open, each addressing a different scope of changes. Given that they are distinct, should I still consider merging them?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@flink.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] [FLINK-36449] Bump apache-rat-plugin [flink-kubernetes-operator]
Posted by "gyfora (via GitHub)" <gi...@apache.org>.
gyfora commented on PR #890:
URL: https://github.com/apache/flink-kubernetes-operator/pull/890#issuecomment-2408465239
Yes , simple dependency bumps can be done in one PR , open one jira with a list of changes and one PR.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@flink.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] [FLINK-36449] Bump apache-rat-plugin [flink-kubernetes-operator]
Posted by "r-sidd (via GitHub)" <gi...@apache.org>.
r-sidd commented on PR #890:
URL: https://github.com/apache/flink-kubernetes-operator/pull/890#issuecomment-2408471365
> Yes , simple dependency bumps can be done in one PR , open one jira with a list of changes and one PR.
Sure, that makes sense. Right now, one PR includes the version bump, and the other has the exclusion in the POM. I’ll attach for your reference.
https://github.com/apache/flink-kubernetes-operator/pull/889
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@flink.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] [FLINK-36449] Bump apache-rat-plugin [flink-kubernetes-operator]
Posted by "r-sidd (via GitHub)" <gi...@apache.org>.
r-sidd commented on PR #890:
URL: https://github.com/apache/flink-kubernetes-operator/pull/890#issuecomment-2408527004
@gyfora thanks for merging 😃, I’ll make sure to include the dependency bumps in the same Jira moving forward.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@flink.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] [FLINK-36449] Bump apache-rat-plugin [flink-kubernetes-operator]
Posted by "gyfora (via GitHub)" <gi...@apache.org>.
gyfora merged PR #890:
URL: https://github.com/apache/flink-kubernetes-operator/pull/890
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@flink.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org