Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[CVE-2022-25901][Partical Backport 1.3]Bump supertest #3326

Merged
merged 1 commit into from
Jan 26, 2023

Conversation

ananzh
Copy link
Member

@ananzh ananzh commented Jan 25, 2023

Partically backport:
#3018

This is because npmlog@6.0.2 is incompatible with node 10.24.1.

Issues Resolved

#3283

Check List

  • All tests pass
    • yarn test:jest
    • yarn test:jest_integration
    • yarn test:ftr
  • New functionality includes testing.
  • New functionality has been documented.
  • Update CHANGELOG.md
  • Commits are signed per the DCO using --signoff

Partically backport 3018
opensearch-project#3018

This is because npmlog@6.0.2 is incompatible with node 10.24.1.
So we remove the re2 upgrade and only keep the bump on supertest.

Issue Resolved:
opensearch-project#3283

Signed-off-by: Anan Zhuang <ananzh@amazon.com>
@ananzh ananzh added cve Security vulnerabilities detected by Dependabot or Mend v1.3.8 labels Jan 25, 2023
@codecov-commenter
Copy link

Codecov Report

Merging #3326 (4e4f941) into 1.3 (508ee56) will decrease coverage by 0.06%.
The diff coverage is n/a.

📣 This organization is not using Codecov’s GitHub App Integration. We recommend you install it so Codecov can continue to function properly for your repositories. Learn more

@@            Coverage Diff             @@
##              1.3    #3326      +/-   ##
==========================================
- Coverage   67.49%   67.44%   -0.06%     
==========================================
  Files        3044     3044              
  Lines       58694    58694              
  Branches     8902     8902              
==========================================
- Hits        39615    39584      -31     
- Misses      16931    16958      +27     
- Partials     2148     2152       +4     
Flag Coverage Δ
Linux ?
Windows 67.44% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

Impacted Files Coverage Δ
src/dev/build/lib/get_build_number.ts 57.14% <0.00%> (-42.86%) ⬇️
packages/osd-opensearch/src/artifact.js 35.00% <0.00%> (-14.38%) ⬇️
src/dev/build/lib/config.ts 79.41% <0.00%> (-5.89%) ⬇️
packages/osd-cross-platform/src/path.ts 83.72% <0.00%> (-2.33%) ⬇️
...ic/application/models/sense_editor/sense_editor.ts 64.88% <0.00%> (-0.89%) ⬇️

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

@ananzh ananzh merged commit a855701 into opensearch-project:1.3 Jan 26, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
cve Security vulnerabilities detected by Dependabot or Mend v1.3.8
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants