-
Notifications
You must be signed in to change notification settings - Fork 1.9k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Bump versions of reactor-core and reactor-netty #11500
Conversation
Signed-off-by: Marc Handalian <[email protected]>
Gradle Check (Jenkins) Run Completed with:
|
Gradle Check (Jenkins) Run Completed with:
|
Signed-off-by: Marc Handalian <[email protected]>
@reta @kotwanikunal Made changes here after approvals - the versions I bumped to required a bump in jackson-databind that is not compatible with our gradle version on 1.x. Instead moved these to the latest patch versions within the same minor that also resolve this CVE. |
You also need to rebase for the changelog :) |
Gradle Check (Jenkins) Run Completed with:
|
Signed-off-by: Marc Handalian <[email protected]>
This comment was marked as outdated.
This comment was marked as outdated.
Signed-off-by: Marc Handalian <[email protected]>
Signed-off-by: Marc Handalian <[email protected]>
Gradle Check (Jenkins) Run Completed with:
|
Gradle Check (Jenkins) Run Completed with:
|
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## 1.x #11500 +/- ##
============================================
+ Coverage 77.60% 77.64% +0.03%
- Complexity 58777 58837 +60
============================================
Files 4223 4223
Lines 253559 253559
Branches 38701 38701
============================================
+ Hits 196768 196865 +97
+ Misses 40753 40735 -18
+ Partials 16038 15959 -79 ☔ View full report in Codecov by Sentry. |
…1500) * Bump versions of reactor-core and reactor-netty Signed-off-by: Marc Handalian <[email protected]> * Change to 3.4 line of reactore-core and 1.0 line of reactor-netty. Signed-off-by: Marc Handalian <[email protected]> * update SHAs Signed-off-by: Marc Handalian <[email protected]> * fix thirdPartyAudit Signed-off-by: Marc Handalian <[email protected]> --------- Signed-off-by: Marc Handalian <[email protected]> Signed-off-by: Marc Handalian <[email protected]>
…1500) * Bump versions of reactor-core and reactor-netty Signed-off-by: Marc Handalian <[email protected]> * Change to 3.4 line of reactore-core and 1.0 line of reactor-netty. Signed-off-by: Marc Handalian <[email protected]> * update SHAs Signed-off-by: Marc Handalian <[email protected]> * fix thirdPartyAudit Signed-off-by: Marc Handalian <[email protected]> --------- Signed-off-by: Marc Handalian <[email protected]> Signed-off-by: Marc Handalian <[email protected]> Signed-off-by: Marc Handalian <[email protected]>
* Bump versions of reactor-core and reactor-netty * Change to 3.4 line of reactore-core and 1.0 line of reactor-netty. * update SHAs * fix thirdPartyAudit --------- Signed-off-by: Marc Handalian <[email protected]> Signed-off-by: Marc Handalian <[email protected]>
Description
Bump versions of reactor-core and reactor-netty on 1.x line.
Related Issues
Resolves CVE-2023-34062 and CVE-2023-34054
Check List
By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.