You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pulsar.apache.org by "poorbarcode (via GitHub)" <gi...@apache.org> on 2023/06/30 17:12:09 UTC
[GitHub] [pulsar] poorbarcode opened a new pull request, #20699: [fix][sec] Upgrade Guava to 32.0.1 to address CVE-2023-2976
poorbarcode opened a new pull request, #20699:
URL: https://github.com/apache/pulsar/pull/20699
### Motivation
The PR https://github.com/apache/pulsar/pull/20459 was addressed CVE-2023-2976 3 weeks ago
In the doc of https://github.com/advisories/GHSA-7g45-4rm6-3mm3, the version `32.0.1` is suggested now
### Modifications
Upgrade Guava to 32.0.1
### Documentation
<!-- DO NOT REMOVE THIS SECTION. CHECK THE PROPER BOX ONLY. -->
- [ ] `doc` <!-- Your PR contains doc changes. -->
- [ ] `doc-required` <!-- Your PR changes impact docs and you will update later -->
- [x] `doc-not-needed` <!-- Your PR changes do not impact docs -->
- [ ] `doc-complete` <!-- Docs have been already added -->
### Matching PR in forked repository
PR in forked repository: x
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] lhotari merged pull request #20699: [fix][sec] Upgrade Guava to 32.1.1 to address CVE-2023-2976
Posted by "lhotari (via GitHub)" <gi...@apache.org>.
lhotari merged PR #20699:
URL: https://github.com/apache/pulsar/pull/20699
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] [fix][sec] Upgrade Guava to 32.1.1 to address CVE-2023-2976 [pulsar]
Posted by "codecov-commenter (via GitHub)" <gi...@apache.org>.
codecov-commenter commented on PR #20699:
URL: https://github.com/apache/pulsar/pull/20699#issuecomment-4169305557
## [Codecov](https://app.codecov.io/gh/apache/pulsar/pull/20699?dropdown=coverage&src=pr&el=h1&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) Report
:white_check_mark: All modified and coverable lines are covered by tests.
:white_check_mark: Project coverage is 73.14%. Comparing base ([`e360379`](https://app.codecov.io/gh/apache/pulsar/commit/e360379cae536924ad1aebeda17e335cb9d61d6b?dropdown=coverage&el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache)) to head ([`e41a819`](https://app.codecov.io/gh/apache/pulsar/commit/e41a81938812779c7131c83862d52fbf68427dc8?dropdown=coverage&el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache)).
:warning: Report is 2346 commits behind head on master.
<details><summary>Additional details and impacted files</summary>
[](https://app.codecov.io/gh/apache/pulsar/pull/20699?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache)
```diff
@@ Coverage Diff @@
## master #20699 +/- ##
============================================
+ Coverage 72.69% 73.14% +0.44%
- Complexity 31878 32126 +248
============================================
Files 1871 1868 -3
Lines 138982 139002 +20
Branches 15283 15292 +9
============================================
+ Hits 101037 101676 +639
+ Misses 29873 29273 -600
+ Partials 8072 8053 -19
```
| [Flag](https://app.codecov.io/gh/apache/pulsar/pull/20699/flags?src=pr&el=flags&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) | Coverage Δ | |
|---|---|---|
| [inttests](https://app.codecov.io/gh/apache/pulsar/pull/20699/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) | `24.25% <ø> (+0.12%)` | :arrow_up: |
| [systests](https://app.codecov.io/gh/apache/pulsar/pull/20699/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) | `25.09% <ø> (+0.04%)` | :arrow_up: |
| [unittests](https://app.codecov.io/gh/apache/pulsar/pull/20699/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) | `72.42% <ø> (+0.49%)` | :arrow_up: |
Flags with carried forward coverage won't be shown. [Click here](https://docs.codecov.io/docs/carryforward-flags?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache#carryforward-flags-in-the-pull-request-comment) to find out more.
[see 155 files with indirect coverage changes](https://app.codecov.io/gh/apache/pulsar/pull/20699/indirect-changes?src=pr&el=tree-more&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache)
</details>
<details><summary> :rocket: New features to boost your workflow: </summary>
- :snowflake: [Test Analytics](https://docs.codecov.com/docs/test-analytics): Detect flaky tests, report on failures, and find test suite problems.
- :package: [JS Bundle Analysis](https://docs.codecov.com/docs/javascript-bundle-analysis): Save yourself from yourself by tracking and limiting bundle sizes in JS merges.
</details>
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] poorbarcode closed pull request #20699: [fix][sec] Upgrade Guava to 32.0.1 to address CVE-2023-2976
Posted by "poorbarcode (via GitHub)" <gi...@apache.org>.
poorbarcode closed pull request #20699: [fix][sec] Upgrade Guava to 32.0.1 to address CVE-2023-2976
URL: https://github.com/apache/pulsar/pull/20699
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] poorbarcode commented on pull request #20699: [fix][sec] Upgrade Guava to 32.0.1 to address CVE-2023-2976
Posted by "poorbarcode (via GitHub)" <gi...@apache.org>.
poorbarcode commented on PR #20699:
URL: https://github.com/apache/pulsar/pull/20699#issuecomment-1619867624
@lhotari
>Please use version 32.1.1-jre since 32.0.1-jre has broken Gradle metadata. See https://github.com/google/guava/releases
FIxed, please take a look again, thanks
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org