-
Notifications
You must be signed in to change notification settings - Fork 277
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Upgrade library version to fix CVEs #4984
Conversation
Seems like upgrading spring-security-web explicitly will cause gradle issue. Looking into it. |
After researching, we can't upgrade spring libraries without upgrading jenkins core version and potential JDK upgrade. Explicitly upgrading will cause compatibility issue. Removing that line. |
Signed-off-by: Zelin Hao <[email protected]>
The version of shhdcore plugin used in prod jenkins is |
Signed-off-by: Zelin Hao <[email protected]>
Updated the version in the latest commit. Thanks. |
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## main #4984 +/- ##
==========================================
+ Coverage 92.17% 92.20% +0.02%
==========================================
Files 197 197
Lines 6634 6656 +22
==========================================
+ Hits 6115 6137 +22
Misses 519 519 ☔ View full report in Codecov by Sentry. |
991fcbd
into
opensearch-project:main
Description
Upgrade library version to fix CVEs
Issues Resolved
#4979
By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.