Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): upgrade ui deps to fix high security cve's #2345

Merged
merged 2 commits into from
Nov 1, 2022

Conversation

zachaller
Copy link
Collaborator

Signed-off-by: zachaller zachaller@users.noreply.github.com

Signed-off-by: zachaller <zachaller@users.noreply.github.com>
@zachaller zachaller changed the title ui: upgrade deps to fix high security cve's chore(dep): upgrade deps to fix high security cve's Oct 18, 2022
@zachaller zachaller changed the title chore(dep): upgrade deps to fix high security cve's chore(dep): upgrade ui deps to fix high security cve's Oct 18, 2022
@zachaller zachaller changed the title chore(dep): upgrade ui deps to fix high security cve's chore(deps): upgrade ui deps to fix high security cve's Oct 18, 2022
@zachaller zachaller added the ready-for-review Ready for final review label Oct 18, 2022
@github-actions
Copy link
Contributor

github-actions bot commented Oct 18, 2022

Go Published Test Results

1 778 tests   1 778 ✔️  2m 30s ⏱️
   101 suites         0 💤
       1 files           0

Results for commit 24b7ac2.

♻️ This comment has been updated with latest results.

@github-actions
Copy link
Contributor

github-actions bot commented Oct 18, 2022

E2E Tests Published Test Results

  1 files    1 suites   49m 48s ⏱️
89 tests 84 ✔️ 3 💤 2
91 runs  86 ✔️ 3 💤 2

For more details on these failures, see this check.

Results for commit 24b7ac2.

♻️ This comment has been updated with latest results.

Signed-off-by: zachaller <zachaller@users.noreply.github.com>
@sonarcloud
Copy link

sonarcloud bot commented Oct 18, 2022

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
2.3% 2.3% Duplication

@codecov
Copy link

codecov bot commented Oct 18, 2022

Codecov Report

Base: 82.76% // Head: 82.76% // No change to project coverage 👍

Coverage data is based on head (24b7ac2) compared to base (a247080).
Patch has no changes to coverable lines.

Additional details and impacted files
@@           Coverage Diff           @@
##           master    #2345   +/-   ##
=======================================
  Coverage   82.76%   82.76%           
=======================================
  Files         121      121           
  Lines       18522    18522           
=======================================
  Hits        15330    15330           
  Misses       2408     2408           
  Partials      784      784           

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

☔ View full report at Codecov.
📢 Do you have feedback about the report comment? Let us know in this issue.

Copy link
Contributor

@leoluz leoluz left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@leoluz leoluz merged commit 69af551 into argoproj:master Nov 1, 2022
itsme2980 pushed a commit to itsme2980/argo-rollouts that referenced this pull request Nov 3, 2022
* ui: upgrade deps to fix high security cve's

Signed-off-by: zachaller <zachaller@users.noreply.github.com>

* github trigger re-run

Signed-off-by: zachaller <zachaller@users.noreply.github.com>

Signed-off-by: zachaller <zachaller@users.noreply.github.com>
Signed-off-by: toann <toann@axon.com>
jandersen-plaid pushed a commit to jandersen-plaid/argo-rollouts that referenced this pull request Nov 8, 2022
* ui: upgrade deps to fix high security cve's

Signed-off-by: zachaller <zachaller@users.noreply.github.com>

* github trigger re-run

Signed-off-by: zachaller <zachaller@users.noreply.github.com>

Signed-off-by: zachaller <zachaller@users.noreply.github.com>
jandersen-plaid pushed a commit to jandersen-plaid/argo-rollouts that referenced this pull request Nov 26, 2022
* ui: upgrade deps to fix high security cve's

Signed-off-by: zachaller <zachaller@users.noreply.github.com>

* github trigger re-run

Signed-off-by: zachaller <zachaller@users.noreply.github.com>

Signed-off-by: zachaller <zachaller@users.noreply.github.com>
zachaller added a commit that referenced this pull request Jul 11, 2024
…2388)

* chore(deps): bump actions/upload-artifact from 2 to 3 (#1973)

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 2 to 3.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v2...v3)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: toann <toann@axon.com>

* chore: sign container images and checksum assets (#2334)

Signed-off-by: Justin Marquis <34fathombelow@protonmail.com>
Signed-off-by: toann <toann@axon.com>

* chore(deps): upgrade ui deps to fix high security cve's (#2345)

* ui: upgrade deps to fix high security cve's

Signed-off-by: zachaller <zachaller@users.noreply.github.com>

* github trigger re-run

Signed-off-by: zachaller <zachaller@users.noreply.github.com>

Signed-off-by: zachaller <zachaller@users.noreply.github.com>
Signed-off-by: toann <toann@axon.com>

* chore(deps): bump imjasonh/setup-crane from 0.1 to 0.2 (#2387)

Bumps [imjasonh/setup-crane](https://github.com/imjasonh/setup-crane) from 0.1 to 0.2.
- [Release notes](https://github.com/imjasonh/setup-crane/releases)
- [Commits](imjasonh/setup-crane@v0.1...v0.2)

---
updated-dependencies:
- dependency-name: imjasonh/setup-crane
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: toann <toann@axon.com>

* docs: Fix the case that autoPromotionSeconds feature is ignored
Signed-off-by: Toan Nguyen <toann241196@gmail.com>

Signed-off-by: toann <toann@axon.com>

* chore(deps): bump dependabot/fetch-metadata from 1.3.4 to 1.3.5 (#2390)

Bumps [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata) from 1.3.4 to 1.3.5.
- [Release notes](https://github.com/dependabot/fetch-metadata/releases)
- [Commits](dependabot/fetch-metadata@v1.3.4...v1.3.5)

---
updated-dependencies:
- dependency-name: dependabot/fetch-metadata
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: toann <toann@axon.com>

* Update docs/features/bluegreen.md

Co-authored-by: Rohit Agrawal <rohit.agrawal@databricks.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: toann <toann@axon.com>
Signed-off-by: Justin Marquis <34fathombelow@protonmail.com>
Signed-off-by: zachaller <zachaller@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Justin Marquis <34fathombelow@protonmail.com>
Co-authored-by: Zach Aller <zachaller@users.noreply.github.com>
Co-authored-by: toann <toann@axon.com>
Co-authored-by: Rohit Agrawal <rohit.agrawal@databricks.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
ready-for-review Ready for final review
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants