Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Manual Backport 2.5][CVE-2022-25860] Bumps simple-git from 3.15.1 to 3.16.0 #3349

Closed
wants to merge 2 commits into from

Conversation

ananzh
Copy link
Member

@ananzh ananzh commented Jan 27, 2023

Backport PR
#3345

Issue Resolved
#3329

Check List

  • All tests pass
    • yarn test:jest
    • yarn test:jest_integration
    • yarn test:ftr
  • New functionality includes testing.
  • New functionality has been documented.
  • Update CHANGELOG.md
  • Commits are signed per the DCO using --signoff

@ananzh ananzh requested a review from a team as a code owner January 27, 2023 04:59
abbyhu2000
abbyhu2000 previously approved these changes Jan 27, 2023
AMoo-Miki
AMoo-Miki previously approved these changes Jan 27, 2023
abbyhu2000
abbyhu2000 previously approved these changes Jan 27, 2023
@codecov-commenter
Copy link

codecov-commenter commented Jan 27, 2023

Codecov Report

Merging #3349 (57903a4) into 2.5 (70c2ba2) will not change coverage.
The diff coverage is n/a.

📣 This organization is not using Codecov’s GitHub App Integration. We recommend you install it so Codecov can continue to function properly for your repositories. Learn more

@@           Coverage Diff           @@
##              2.5    #3349   +/-   ##
=======================================
  Coverage   66.55%   66.55%           
=======================================
  Files        3203     3203           
  Lines       61327    61327           
  Branches     9452     9452           
=======================================
  Hits        40815    40815           
  Misses      18256    18256           
  Partials     2256     2256           
Flag Coverage Δ
Linux 66.50% <ø> (+<0.01%) ⬆️
Windows 66.50% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

CHANGELOG.md Outdated Show resolved Hide resolved
AMoo-Miki
AMoo-Miki previously approved these changes Feb 10, 2023
abbyhu2000
abbyhu2000 previously approved these changes Feb 10, 2023
… 3.16.0

Backport PR
opensearch-project#3345

Issue Resolved
opensearch-project#3329

Signed-off-by: Anan Zhuang <ananzh@amazon.com>
@joshuarrrr joshuarrrr added 2.5.1 cve Security vulnerabilities detected by Dependabot or Mend labels Feb 17, 2023
@abbyhu2000 abbyhu2000 dismissed stale reviews from AMoo-Miki and themself via f9a29e2 February 17, 2023 19:06
@AMoo-Miki
Copy link
Collaborator

Is this needed, now that 2.6.0 is on the way out?

@ananzh
Copy link
Member Author

ananzh commented Feb 24, 2023

2.5 is not an active branch since we cut 2.6

@ananzh ananzh closed this Feb 24, 2023
@joshuarrrr joshuarrrr removed the v2.5.1 label Mar 10, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
cve Security vulnerabilities detected by Dependabot or Mend
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants