Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump tough-cookie and @azure/ms-rest-js #53

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 26, 2023

Removes tough-cookie. It's no longer used after updating ancestor dependency @azure/ms-rest-js. These dependencies need to be updated together.

Removes tough-cookie

Updates @azure/ms-rest-js from 2.6.6 to 2.7.0

Changelog

Sourced from @​azure/ms-rest-js's changelog.

2.7.0 - (2023-07-06)

  • Remove cookie support from nodeFetchHttpClient to address a security issue with the tough-cookie package.
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Removes [tough-cookie](https://github.com/salesforce/tough-cookie). It's no longer used after updating ancestor dependency [@azure/ms-rest-js](https://github.com/Azure/ms-rest-js). These dependencies need to be updated together.


Removes `tough-cookie`

Updates `@azure/ms-rest-js` from 2.6.6 to 2.7.0
- [Changelog](https://github.com/Azure/ms-rest-js/blob/master/Changelog.md)
- [Commits](https://github.com/Azure/ms-rest-js/commits)

---
updated-dependencies:
- dependency-name: tough-cookie
  dependency-type: indirect
- dependency-name: "@azure/ms-rest-js"
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jul 26, 2023
@oracle-contributor-agreement oracle-contributor-agreement bot added the OCA Verified All contributors have signed the Oracle Contributor Agreement. label Jul 26, 2023
@github-actions
Copy link

GraalVM Native Image Build Report

helloworld generated in 1m 49s as part of the 'test-native-image-windows-msvc' job in run #237.

Environment

Java version 17.0.8+9-LTS Vendor version Oracle GraalVM 17.0.8+9.1
Graal compiler optimization level: 2, target machine: x86-64-v3, PGO: ML-inferred
C compiler cl.exe (microsoft, x64, 19.35.32217)
Garbage collector Serial GC

Analysis Results

Category Types in % Fields in % Methods in %
Reachable 1,811 59.260% 1,680 45.814% 7,601 35.707%
Reflection 617 20.190% 0 0.000% 282 1.325%
JNI 53 1.734% 30 0.818% 48 0.225%
Loaded 3,056 100.000% 3,667 100.000% 21,287 100.000%

Image Details

Category Size in % Details
Code area 2.80MB 44.189% 3,438 compilation units
Image heap 3.45MB 54.506% 48,455 objects, 108.00B for 1 resources
Other data 84.53KB 1.304%
Total 6.33MB 100.000%

Resource Usage

Garbage collection 3.03s (2.772% of total time) in 155 GCs
Peak RSS 790.89MB (4.827% of 16.00GB system memory)
CPU load 1.464 (73.194% of 2 CPU cores)

Report generated by setup-graalvm.

@github-actions
Copy link

GraalVM Native Image Build Report

helloworld generated in 1m 8s as part of the 'test-native-image-musl' job in run #237.

Environment

Java version 20.0.1+9 Vendor version GraalVM CE 20.0.1-dev+9.1
Graal compiler optimization level: 2, target machine: x86-64-v3
C compiler x86_64-linux-musl-gcc (linux, x86_64, 10.2.1)
Garbage collector Serial GC

Analysis Results

Category Types in % Fields in % Methods in %
Reachable 3,156 72.452% 3,794 50.092% 15,156 45.895%
Reflection 952 21.855% 81 1.069% 476 1.441%
JNI 57 1.309% 55 0.726% 52 0.157%
Loaded 4,356 100.000% 7,574 100.000% 33,023 100.000%

Image Details

Category Size in % Details
Code area 5.28MB 39.405% 8,611 compilation units
Image heap 7.77MB 58.000% 106,804 objects, 154.26KB for 5 resources
Other data 356.06KB 2.596%
Total 13.40MB 100.000%

Resource Usage

Garbage collection 4.10s (5.983% of total time) in 46 GCs
Peak RSS 1.50GB (22.186% of 6.77GB system memory)
CPU load 1.964 (98.218% of 2 CPU cores)

Report generated by setup-graalvm.

@github-actions
Copy link

GraalVM Native Image Build Report

helloworld generated in 1m 14s as part of the 'test-extensive' job in run #237.

Environment

Java version 17.0.8+9-LTS Vendor version Oracle GraalVM 17.0.8+9.1
Graal compiler optimization level: 2, target machine: x86-64-v3, PGO: ML-inferred
C compiler gcc (linux, x86_64, 11.3.0)
Garbage collector Serial GC

Analysis Results

Category Types in % Fields in % Methods in %
Reachable 1,853 59.145% 1,737 46.369% 7,712 35.615%
Reflection 638 20.364% 0 0.000% 281 1.298%
JNI 49 1.564% 32 0.854% 48 0.222%
Loaded 3,133 100.000% 3,746 100.000% 21,654 100.000%

Image Details

Category Size in % Details
Code area 2.75MB 23.175% 3,484 compilation units
Image heap 3.46MB 29.168% 48,921 objects, 108.00B for 1 resources
Debug info 5.33MB 44.898%
Other data 335.66KB 2.759%
Total 11.88MB 100.000%

Resource Usage

Garbage collection 3.69s (4.982% of total time) in 73 GCs
Peak RSS 1.28GB (18.928% of 6.77GB system memory)
CPU load 1.963 (98.133% of 2 CPU cores)

Report generated by setup-graalvm.

@github-actions
Copy link

GraalVM Native Image Build Report

helloworld generated in 4m 16s as part of the 'test-native-image-windows' job in run #237.

Environment

Java version 20.0.1+9 Vendor version GraalVM CE 20.0.1-dev+9.1
Graal compiler optimization level: 2, target machine: x86-64-v3
C compiler cl.exe (microsoft, x64, 19.35.32217)
Garbage collector Serial GC

Analysis Results

Category Types in % Fields in % Methods in %
Reachable 3,129 73.056% 3,773 50.160% 15,112 46.208%
Reflection 939 21.924% 81 1.077% 478 1.462%
JNI 61 1.424% 51 0.678% 52 0.159%
Loaded 4,283 100.000% 7,522 100.000% 32,704 100.000%

Image Details

Category Size in % Details
Code area 5.42MB 42.171% 8,603 compilation units
Image heap 7.27MB 56.561% 94,666 objects, 154.26KB for 5 resources
Other data 166.97KB 1.268%
Total 12.86MB 100.000%

Resource Usage

Garbage collection 7.77s (3.028% of total time) in 117 GCs
Peak RSS 984.79MB (13.740% of 7.00GB system memory)
CPU load 0.770 (38.516% of 2 CPU cores)

Report generated by setup-graalvm.

@fniephaus fniephaus merged commit 473558a into main Jul 26, 2023
87 of 92 checks passed
@fniephaus fniephaus deleted the dependabot/npm_and_yarn/tough-cookie-and-azure/ms-rest-js--removed branch July 26, 2023 10:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file OCA Verified All contributors have signed the Oracle Contributor Agreement.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant