Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[PCUI] Upgrade cross-spawn to 7.0.6 to address CVE #377

Merged
merged 1 commit into from
Dec 6, 2024

Conversation

hehe7318
Copy link
Contributor

@hehe7318 hehe7318 commented Dec 6, 2024

Description

To address CVE-2024-21538

Changes

Upgrade cross-spawn to 7.0.6

PR Quality Checklist

  • I added tests to new or existing code
  • I removed hardcoded strings and used react-i18next library (useTranslation hook and/or Trans component), see an example here
  • I made sure no sensitive info gets logged at any time in the codebase (see here) (e.g. no user info or details, no stacktraces, etc.)
  • I made sure that any GitHub issue solved by this PR is correctly linked
  • I checked that infrastructure/update_infrastructure.sh runs without any error
  • I checked that npm run build builds without any error
  • I checked that clusters are listed correctly
  • I checked that a new cluster can be created (config is produced and dry run passes)
  • I checked that login and logout work as expected

In order to increase the likelihood of your contribution being accepted, please make sure you have read both the Contributing Guidelines and the Project Guidelines

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

@hehe7318 hehe7318 added the dependencies Pull requests that update a dependency file label Dec 6, 2024
@hehe7318 hehe7318 changed the title [PCUI] Update cross-spawn to 7.0.6 to address CVE [PCUI] Upgrade cross-spawn to 7.0.6 to address CVE Dec 6, 2024
@hehe7318 hehe7318 merged commit ac5d9c4 into aws:main Dec 6, 2024
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants