Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[CVE-2022-2499][backport 1.x] Resolve qs from 6.5.3 to 6.11.0 #3451

Merged
merged 2 commits into from
Feb 18, 2023

Conversation

ananzh
Copy link
Member

@ananzh ananzh commented Feb 17, 2023

Issues Resolved

#3449

Check List

  • All tests pass
    • yarn test:jest
    • yarn test:jest_integration
    • yarn test:ftr
  • New functionality includes testing.
  • New functionality has been documented.
  • Update CHANGELOG.md
  • Commits are signed per the DCO using --signoff

@codecov-commenter
Copy link

codecov-commenter commented Feb 17, 2023

Codecov Report

Merging #3451 (dceac61) into 1.x (5ad84f9) will increase coverage by 0.04%.
The diff coverage is n/a.

📣 This organization is not using Codecov’s GitHub App Integration. We recommend you install it so Codecov can continue to function properly for your repositories. Learn more

@@            Coverage Diff             @@
##              1.x    #3451      +/-   ##
==========================================
+ Coverage   67.45%   67.49%   +0.04%     
==========================================
  Files        3044     3044              
  Lines       58696    58696              
  Branches     8902     8902              
==========================================
+ Hits        39591    39617      +26     
+ Misses      16952    16931      -21     
+ Partials     2153     2148       -5     
Flag Coverage Δ
Linux 67.45% <ø> (ø)
Windows 67.44% <ø> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

Impacted Files Coverage Δ
...ic/application/models/sense_editor/sense_editor.ts 65.77% <0.00%> (+0.88%) ⬆️
src/setup_node_env/harden/child_process.js 88.46% <0.00%> (+3.84%) ⬆️
src/dev/build/lib/config.ts 85.29% <0.00%> (+5.88%) ⬆️
...ges/osd-apm-config-loader/src/config.test.mocks.ts 100.00% <0.00%> (+8.69%) ⬆️
packages/osd-cross-platform/src/path.ts 86.04% <0.00%> (+37.20%) ⬆️
src/dev/build/lib/get_build_number.ts 100.00% <0.00%> (+42.85%) ⬆️

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

abbyhu2000
abbyhu2000 previously approved these changes Feb 17, 2023
CHANGELOG.md Outdated Show resolved Hide resolved
@ananzh ananzh changed the title [CVE-2022-2499][backport 1.x] Resolve qs to 6.11.0 in 1.x [CVE-2022-2499][backport 1.x] Resolve qs from 6.5.3 to 6.11.0 Feb 18, 2023
Co-authored-by: Josh Romero <[email protected]>
@abbyhu2000 abbyhu2000 merged commit 9a4f6ad into opensearch-project:1.x Feb 18, 2023
opensearch-trigger-bot bot pushed a commit that referenced this pull request Feb 18, 2023
(cherry picked from commit 9a4f6ad)
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
ananzh pushed a commit that referenced this pull request Feb 21, 2023
…#3460)

(cherry picked from commit 9a4f6ad)
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants