-
Notifications
You must be signed in to change notification settings - Fork 960
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Bump styled-components package to remove political message #3677
Labels
Comments
ananzh
added a commit
to ananzh/OpenSearch-Dashboards
that referenced
this issue
Mar 23, 2023
Issue Resolve opensearch-project#3677 Signed-off-by: Anan Zhuang <ananzh@amazon.com>
ananzh
added a commit
to ananzh/OpenSearch-Dashboards
that referenced
this issue
Mar 23, 2023
This will remove the political message in the package. Issue Resolve opensearch-project#3677 Signed-off-by: Anan Zhuang <ananzh@amazon.com>
ananzh
added a commit
to ananzh/OpenSearch-Dashboards
that referenced
this issue
Mar 23, 2023
This will remove the political message in the package. Issue Resolve opensearch-project#3677 Signed-off-by: Anan Zhuang <ananzh@amazon.com>
8 tasks
ananzh
added a commit
to ananzh/OpenSearch-Dashboards
that referenced
this issue
Mar 23, 2023
This will remove the political message in the package. Issue Resolve opensearch-project#3677 Signed-off-by: Anan Zhuang <ananzh@amazon.com>
pjfitzgibbons
pushed a commit
to pjfitzgibbons/OpenSearch-Dashboards
that referenced
this issue
Mar 24, 2023
This will remove the political message in the package. Issue Resolve opensearch-project#3677 Signed-off-by: Anan Zhuang <ananzh@amazon.com>
joshuarrrr
added a commit
that referenced
this issue
Mar 24, 2023
* Bump styled-components from 5.3.5 to 5.3.9 (#3678) This will remove the political message in the package. Issue Resolve #3677 Signed-off-by: Anan Zhuang <ananzh@amazon.com> (cherry picked from commit 8c541b2) Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com> # Conflicts: # CHANGELOG.md * update changelog Signed-off-by: Josh Romero <rmerqg@amazon.com> --------- Signed-off-by: Josh Romero <rmerqg@amazon.com> Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com> Co-authored-by: Josh Romero <rmerqg@amazon.com>
sikhote
pushed a commit
to sikhote/OpenSearch-Dashboards
that referenced
this issue
Apr 24, 2023
This will remove the political message in the package. Issue Resolve opensearch-project#3677 Signed-off-by: Anan Zhuang <ananzh@amazon.com> Signed-off-by: David Sinclair <david@sinclair.tech>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Currently, we are using
styled-components
v5.3.5 and it containspostinstall.js file
which looks for users using a ru time-zone to show a political protest message using the console.warn() function.This code is malicious. It’s console log with a political message. This is removed in 5.3.7 and here is the changelog:
Therefore, we should also bump the package to v5.3.7+ .
The text was updated successfully, but these errors were encountered: