Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[CVE-2017-16137] Bump debug via yarn updates and resolutions #5573

Merged
merged 1 commit into from
Dec 6, 2023

Conversation

joshuarrrr
Copy link
Member

Description

Most bumps done to latest compatible versions by deleting the yarn.lock entries and bootstrapping. Two resolutions added for deps with a pinned version of debug.

Issues Resolved

Screenshot

Testing the changes

Check List

  • All tests pass
    • yarn test:jest
    • yarn test:jest_integration
  • New functionality includes testing.
  • New functionality has been documented.
  • Update CHANGELOG.md
  • Commits are signed per the DCO using --signoff

Copy link

codecov bot commented Dec 5, 2023

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (7523e30) 67.44% compared to head (1d21cf4) 67.49%.

Additional details and impacted files
@@            Coverage Diff             @@
##              1.3    #5573      +/-   ##
==========================================
+ Coverage   67.44%   67.49%   +0.05%     
==========================================
  Files        3044     3044              
  Lines       58702    58702              
  Branches     8902     8902              
==========================================
+ Hits        39590    39621      +31     
+ Misses      16958    16931      -27     
+ Partials     2154     2150       -4     
Flag Coverage Δ
Linux 67.45% <ø> (?)
Windows 67.44% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@joshuarrrr joshuarrrr added the Skip-Changelog PRs that are too trivial to warrant a changelog or release notes entry label Dec 6, 2023
@joshuarrrr joshuarrrr merged commit 329f594 into opensearch-project:1.3 Dec 6, 2023
35 of 50 checks passed
@joshuarrrr joshuarrrr deleted the security/bump-debug branch December 6, 2023 00:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Skip-Changelog PRs that are too trivial to warrant a changelog or release notes entry v1.3.14
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants