Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump joda-time from 2.12.2 to 2.12.7 #13203

Closed
wants to merge 2 commits into from

Conversation

peternied
Copy link
Member

Description

Bump joda-time from 2.12.2 to 2.12.7
Addresses CVE-2024-23080

Related Issues

Check List

  • New functionality includes testing.
    • [] All tests pass
  • New functionality has been documented.
    • New functionality has javadoc added
  • Failing checks are inspected and point to the corresponding known issue(s) (See: Troubleshooting Failing Builds)
  • Commits are signed per the DCO using --signoff
  • Commit changes are listed out in CHANGELOG.md file (See: Changelog)
  • Public documentation issue/PR created

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

Addresses CVE-2024-23080

Signed-off-by: Peter Nied <petern@amazon.com>
@peternied peternied added the backport 2.x Backport to 2.x branch label Apr 15, 2024
@github-actions github-actions bot added >FORK Related to the fork process enhancement Enhancement or improvement to existing feature or request Rename Renaming to OpenSearch v1.1.0 Issues, PRs, related to the 1.1.0 release labels Apr 15, 2024
@github-actions github-actions bot added the v2.0.0 Version 2.0.0 label Apr 15, 2024
Signed-off-by: Peter Nied <petern@amazon.com>
Copy link
Contributor

❌ Gradle check result for a9f36bf: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

Copy link
Contributor

❌ Gradle check result for 9ab41b0: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

Copy link
Member

@owaiskazi19 owaiskazi19 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Duplicate of #13193?

@peternied peternied closed this Apr 15, 2024
@peternied
Copy link
Member Author

@owaiskazi19 Thanks for picking that one up, didn't see it when I created my PR.

@peternied peternied deleted the bump-joda-time branch April 15, 2024 21:15
Copy link
Contributor

github-actions bot commented Apr 15, 2024

Compatibility status:

Checks if related components are compatible with change 9ab41b0

Incompatible components

Skipped components

Compatible components

Compatible components: [https://github.com/opensearch-project/custom-codecs.git, https://github.com/opensearch-project/neural-search.git, https://github.com/opensearch-project/flow-framework.git, https://github.com/opensearch-project/observability.git, https://github.com/opensearch-project/job-scheduler.git, https://github.com/opensearch-project/cross-cluster-replication.git, https://github.com/opensearch-project/security-analytics.git, https://github.com/opensearch-project/opensearch-oci-object-storage.git, https://github.com/opensearch-project/k-nn.git, https://github.com/opensearch-project/geospatial.git, https://github.com/opensearch-project/notifications.git, https://github.com/opensearch-project/asynchronous-search.git, https://github.com/opensearch-project/sql.git, https://github.com/opensearch-project/reporting.git, https://github.com/opensearch-project/ml-commons.git, https://github.com/opensearch-project/index-management.git, https://github.com/opensearch-project/common-utils.git, https://github.com/opensearch-project/anomaly-detection.git, https://github.com/opensearch-project/alerting.git, https://github.com/opensearch-project/performance-analyzer-rca.git, https://github.com/opensearch-project/security.git, https://github.com/opensearch-project/performance-analyzer.git]

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
backport 2.x Backport to 2.x branch enhancement Enhancement or improvement to existing feature or request >FORK Related to the fork process Rename Renaming to OpenSearch v1.1.0 Issues, PRs, related to the 1.1.0 release v2.0.0 Version 2.0.0
Projects
None yet
2 participants