Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[release/1.1] Update vulnerable regex versions and fix compilation errors #6083

Merged
merged 4 commits into from
Feb 5, 2022

Conversation

onalante-msft
Copy link
Contributor

Component governance identified a vulnerability in thread_local, which
was a transitive dependency brought in by older regex versions.

This has the additional benefit of unifying our regex dependency
versions.

RUSTSEC advisory: https://rustsec.org/advisories/RUSTSEC-2022-0006.html

Azure IoT Edge PR checklist:

This checklist is used to make sure that common guidelines for a pull request are followed.

General Guidelines and Best Practices

  • I have read the contribution guidelines.
  • Title of the pull request is clear and informative.
  • Description of the pull request includes a concise summary of the enhancement or bug fix.

Testing Guidelines

  • Pull request includes test coverage for the included changes.
  • Description of the pull request includes
    • concise summary of tests added/modified
    • local testing done.

Also remove executable bits on code files.
arsing
arsing previously approved these changes Feb 4, 2022
@onalante-msft
Copy link
Contributor Author

Not sure why the review was dismissed, sorry.

@kodiakhq kodiakhq bot merged commit 9f56fd2 into Azure:release/1.1 Feb 5, 2022
@onalante-msft onalante-msft deleted the threadlocal-1.1 branch April 27, 2022 21:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants