Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Snyk fix fa54db963893c35faaaa0144bf2d51a9 #1070

Closed
wants to merge 6 commits into from
Closed

Snyk fix fa54db963893c35faaaa0144bf2d51a9 #1070

wants to merge 6 commits into from

Conversation

MarcelRaschke
Copy link

@MarcelRaschke MarcelRaschke commented Mar 24, 2022 •
edited
Loading

Snyk fix fa54db963893c35faaaa0144bf2d51a9

MarcelRaschke and others added 6 commits March 12, 2021 23:05
@MarcelRaschke
Merge pull request #1 from ipfs-shipyard/master
ac42cff 
[pull] master from ipfs-shipyard:master
@dependabot
chore(deps-dev): bump tar from 6.1.0 to 6.1.9
28be46f 
Bumps [tar](https://github.com/npm/node-tar) from 6.1.0 to 6.1.9.
- [Release notes](https://github.com/npm/node-tar/releases)
- [Changelog](https://github.com/npm/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v6.1.0...v6.1.9)

---
updated-dependencies:
- dependency-name: tar
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@MarcelRaschke
Merge pull request #21 from MarcelRaschke/dependabot/npm_and_yarn/tar…
22a86fb 
…-6.1.9

chore(deps-dev): bump tar from 6.1.0 to 6.1.9
@snyk-bot @MarcelRaschke
fix: Dockerfile to reduce vulnerabilities
6315f64 
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-DEBIAN9-SUBVERSION-1071813
- https://snyk.io/vuln/SNYK-UPSTREAM-NODE-1078517
- https://snyk.io/vuln/SNYK-UPSTREAM-NODE-1243765
- https://snyk.io/vuln/SNYK-UPSTREAM-NODE-1315789
- https://snyk.io/vuln/SNYK-UPSTREAM-NODE-1315790
@dependabot @MarcelRaschke
chore(deps): bump nth-check from 2.0.0 to 2.0.1
6d80211 
Bumps [nth-check](https://github.com/fb55/nth-check) from 2.0.0 to 2.0.1.
- [Release notes](https://github.com/fb55/nth-check/releases)
- [Commits](fb55/nth-check@v2.0.0...v2.0.1)

---
updated-dependencies:
- dependency-name: nth-check
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@snyk-bot
fix: Dockerfile to reduce vulnerabilities
df7889c 
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-DEBIAN9-CURL-1585151
- https://snyk.io/vuln/SNYK-DEBIAN9-OPENSSL-2426305
- https://snyk.io/vuln/SNYK-DEBIAN9-OPENSSL10-2426307
- https://snyk.io/vuln/SNYK-DEBIAN9-PYTHON27-1063180
- https://snyk.io/vuln/SNYK-DEBIAN9-PYTHON35-1570179
@MarcelRaschke MarcelRaschke requested a review from lidel as a code owner March 24, 2022 22:58
@welcome
Copy link

welcome bot commented Mar 24, 2022

Thank you for submitting this PR!
A maintainer will be here shortly to review it.
We are super grateful, but we are also overloaded! Help us by making sure that:

  • The context for this PR is clear, with relevant discussion, decisions
    and stakeholders linked/mentioned.

  • Your contribution itself is clear (code comments, self-review for the
    rest) and in its best form. Follow the code contribution
    guidelines
    if they apply.

Getting other community members to do a review would be great help too on complex PRs (you can ask in the chats/forums). If you are unsure about something, just leave us a comment.
Next steps:

  • A maintainer will triage and assign priority to this PR, commenting on
    any missing things and potentially assigning a reviewer for high
    priority items.

  • The PR gets reviews, discussed and approvals as needed.

  • The PR is merged by maintainers when it has been approved and comments addressed.

We currently aim to provide initial feedback/triaging within seven business days. Please keep an eye on any labelling actions, as these will indicate priorities and status of your contribution.
We are very grateful for your contribution!

@lidel
Copy link
Member

lidel commented Mar 25, 2022 •
edited
Loading

Thank you, but we can't release this without changes from #1054.
Closing this PR, let's continue there.

@lidel lidel closed this Mar 25, 2022
@lidel lidel mentioned this pull request Mar 25, 2022
Merged
19 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@lidel lidel Awaiting requested review from lidel lidel is a code owner

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@MarcelRaschke @lidel @snyk-bot