Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[CVE-2024-45801] Bump dompurify from 3.0.11 to 3.1.6 #8346

Merged
merged 2 commits into from
Sep 25, 2024
Merged

[CVE-2024-45801] Bump dompurify from 3.0.11 to 3.1.6 #8346

merged 2 commits into from
Sep 25, 2024

Conversation

AMoo-Miki
Copy link
Collaborator

Description

[CVE-2024-45801] Bump dompurify from 3.0.11 to 3.1.6

Changelog

-security: [CVE-2024-45801] Bump dompurify from 3.0.11 to 3.1.6

Check List

  • All tests pass
    • yarn test:jest
    • yarn test:jest_integration
  • New functionality includes testing.
  • New functionality has been documented.
  • Update CHANGELOG.md
  • Commits are signed per the DCO using --signoff

@codecov Codecov
Copy link

codecov bot commented Sep 25, 2024 •
edited
Loading

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 64.14%. Comparing base (8d45530) to head (4484304).
Report is 1 commits behind head on main.

Additional details and impacted files 
@@           Coverage Diff           @@
##             main    #8346   +/-   ##
=======================================
  Coverage   64.14%   64.14%           
=======================================
  Files        3743     3743           
  Lines       88841    88841           
  Branches    13855    13855           
=======================================
  Hits        56985    56985           
  Misses      31241    31241           
  Partials      615      615
Flag Coverage Δ
Linux_1 30.06% <ø> (ø)
Linux_2 58.86% <ø> (ø)
Linux_3 40.35% <ø> (?)
Linux_4 31.58% <ø> (ø)
Windows_1 30.08% <ø> (ø)
Windows_2 58.81% <ø> (ø)
Windows_3 40.35% <ø> (ø)
Windows_4 31.58% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@AMoo-Miki AMoo-Miki merged commit ee9785c into opensearch-project:main Sep 25, 2024
72 of 73 checks passed
opensearch-trigger-bot bot pushed a commit that referenced this pull request Sep 25, 2024
@github-actions @opensearch-changeset-bot
[CVE-2024-45801] Bump dompurify from 3.0.11 to 3.1.6 (#8346)
001b9f4 
* [CVE-2024-45801] Bump `dompurify` from 3.0.11 to 3.1.6

Signed-off-by: Miki <[email protected]>

* Changeset file for PR #8346 created/updated

---------

Signed-off-by: Miki <[email protected]>
Co-authored-by: opensearch-changeset-bot[bot] <154024398+opensearch-changeset-bot[bot]@users.noreply.github.com>
(cherry picked from commit ee9785c)
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
@opensearch-trigger-bot opensearch-trigger-bot bot mentioned this pull request Sep 25, 2024
Merged
opensearch-trigger-bot bot pushed a commit that referenced this pull request Sep 25, 2024
@github-actions @opensearch-changeset-bot
[CVE-2024-45801] Bump dompurify from 3.0.11 to 3.1.6 (#8346)
c35f7f1 
* [CVE-2024-45801] Bump `dompurify` from 3.0.11 to 3.1.6

Signed-off-by: Miki <[email protected]>

* Changeset file for PR #8346 created/updated

---------

Signed-off-by: Miki <[email protected]>
Co-authored-by: opensearch-changeset-bot[bot] <154024398+opensearch-changeset-bot[bot]@users.noreply.github.com>
(cherry picked from commit ee9785c)
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
@opensearch-trigger-bot opensearch-trigger-bot bot mentioned this pull request Sep 25, 2024
Merged
ashwin-pc pushed a commit that referenced this pull request Sep 26, 2024
@opensearch-trigger-bot @github-actions @opensearch-changeset-bot
[CVE-2024-45801] Bump dompurify from 3.0.11 to 3.1.6 (#8346) (#8350)
62cc032 
* [CVE-2024-45801] Bump `dompurify` from 3.0.11 to 3.1.6



* Changeset file for PR #8346 created/updated

---------



(cherry picked from commit ee9785c)

Signed-off-by: Miki <[email protected]>
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: opensearch-changeset-bot[bot] <154024398+opensearch-changeset-bot[bot]@users.noreply.github.com>
AMoo-Miki pushed a commit that referenced this pull request Oct 4, 2024
@opensearch-trigger-bot @github-actions @opensearch-changeset-bot
[CVE-2024-45801] Bump dompurify from 3.0.11 to 3.1.6 (#8346) (#8349)
cb6a3ff 
* [CVE-2024-45801] Bump `dompurify` from 3.0.11 to 3.1.6



* Changeset file for PR #8346 created/updated

---------



(cherry picked from commit ee9785c)

Signed-off-by: Miki <[email protected]>
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: opensearch-changeset-bot[bot] <154024398+opensearch-changeset-bot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@sejli sejli sejli approved these changes

@zhongnansu zhongnansu zhongnansu approved these changes

@joshuali925 joshuali925 joshuali925 approved these changes

@ashwin-pc ashwin-pc ashwin-pc approved these changes

@ananzh ananzh Awaiting requested review from ananzh ananzh is a code owner

@kavilla kavilla Awaiting requested review from kavilla kavilla is a code owner

@joshuarrrr joshuarrrr Awaiting requested review from joshuarrrr joshuarrrr is a code owner

@abbyhu2000 abbyhu2000 Awaiting requested review from abbyhu2000 abbyhu2000 is a code owner

@zengyan-amazon zengyan-amazon Awaiting requested review from zengyan-amazon zengyan-amazon is a code owner

@manasvinibs manasvinibs Awaiting requested review from manasvinibs manasvinibs is a code owner

@ZilongX ZilongX Awaiting requested review from ZilongX ZilongX is a code owner

@Flyingliuhub Flyingliuhub Awaiting requested review from Flyingliuhub Flyingliuhub is a code owner

@curq curq Awaiting requested review from curq curq is a code owner

@bandinib-amzn bandinib-amzn Awaiting requested review from bandinib-amzn bandinib-amzn is a code owner

@SuZhou-Joe SuZhou-Joe Awaiting requested review from SuZhou-Joe SuZhou-Joe is a code owner

@ruanyl ruanyl Awaiting requested review from ruanyl ruanyl is a code owner

@BionIT BionIT Awaiting requested review from BionIT BionIT is a code owner

@xinruiba xinruiba Awaiting requested review from xinruiba xinruiba is a code owner

@zhyuanqi zhyuanqi Awaiting requested review from zhyuanqi zhyuanqi is a code owner

@mengweieric mengweieric Awaiting requested review from mengweieric mengweieric is a code owner

@LDrago27 LDrago27 Awaiting requested review from LDrago27 LDrago27 is a code owner

@virajsanghvi virajsanghvi Awaiting requested review from virajsanghvi virajsanghvi is a code owner

@huyaboo huyaboo Awaiting requested review from huyaboo huyaboo is a code owner

Assignees
No one assigned
Labels
2.17.1 backport 2.x backport 2.17 distinguished-contributor
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
5 participants
@AMoo-Miki @ashwin-pc @joshuali925 @zhongnansu @sejli