[1.3] Force commons-io transitive dependency version #16816
Conversation
dbwiddis
requested review from
anasalkouz,
andrross,
ashking94,
Bukhtawar,
CEHENKLE,
dblock,
gbbafna,
kotwanikunal,
mch2,
msfroh,
nknize,
owaiskazi19,
reta,
Rishikesh1159,
sachinpkale,
saratvemulapalli,
shwetathareja,
sohami and
VachaShah
as code owners
dbwiddis
changed the title
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## 1.3 #16816 +/- ##
============================================
+ Coverage 77.56% 77.67% +0.10%
- Complexity 58760 58792 +32
============================================
Files 4223 4223
Lines 253441 253459 +18
Branches 38701 38692 -9
============================================
+ Hits 196590 196878 +288
+ Misses 40844 40564 -280
- Partials 16007 16017 +10 ☔ View full report in Codecov by Sentry. |
dbwiddis
force-pushed
the
commons-io-cve
branch
2 times, most recently
from
f72de17 to
b4ef51e
Compare
|
❌ Gradle check result for f72de17: ABORTED Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change? |
|
❌ Gradle check result for b4ef51e: FAILURE Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change? |
|
❌ Gradle check result for b4ef51e: FAILURE Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change? |
|
❌ Gradle check result for b4ef51e: FAILURE Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change? |
Signed-off-by: Daniel Widdis <[email protected]>
dbwiddis
force-pushed
the
commons-io-cve
branch
from
b4ef51e to
10fe354
Compare
|
Thank you @dbwiddis ! |
Description
Forces the transitive dependency on commons-io to a non-impacted version.
Fixes CVE-2024-47554
Note: as a transitive dependency, no SHAs, and the version bump (#16780) is already included in release notes for the OpenSearch bump
By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.