-
Notifications
You must be signed in to change notification settings - Fork 5.5k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
chore: fix superagent vulnerability #16305
chore: fix superagent vulnerability #16305
Conversation
Signed-off-by: zhaque44 <haque.zubair@gmail.com>
bc1a211
to
231dc29
Compare
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## master #16305 +/- ##
==========================================
+ Coverage 49.50% 49.52% +0.01%
==========================================
Files 269 269
Lines 47011 47011
==========================================
+ Hits 23274 23280 +6
+ Misses 21453 21447 -6
Partials 2284 2284 ☔ View full report in Codecov by Sentry. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Tested locally, spot check lgtm!
Not cherry-picking since it's not a high/critical vuln. |
Signed-off-by: zhaque44 <haque.zubair@gmail.com>
Signed-off-by: zhaque44 <haque.zubair@gmail.com>
Signed-off-by: zhaque44 <haque.zubair@gmail.com> Signed-off-by: Kevin Lyda <kevin@lyda.ie>
Signed-off-by: zhaque44 <haque.zubair@gmail.com>
fixing the npm superagent vulnerability:
https://argo-cd.readthedocs.io/en/stable/snyk/master/argocd-test.html
updated superagent and semver, the real underlying comes from:
semver npm library we need to update that to version 7.5.2 or higher
Checklist: