Skip to content

dependency updates for cve patches (part 2) #5379

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 5 commits into from
Feb 16, 2023

Conversation

bdoyle0182
Copy link
Contributor

@bdoyle0182 bdoyle0182 commented Feb 13, 2023

Description

More dependency upgrades to deal with cve patches.

Have to pin the netty version. There's too many dependencies that pull it in that have breaking changes that it's not worth dealing with if pinning the latest patch works fine.

Related issue and scope

  • I opened an issue to propose and discuss this change (#????)

My changes affect the following components

  • API
  • Controller
  • Message Bus (e.g., Kafka)
  • Loadbalancer
  • Scheduler
  • Invoker
  • Intrinsic actions (e.g., sequences, conductors)
  • Data stores (e.g., CouchDB)
  • Tests
  • Deployment
  • CLI
  • General tooling
  • Documentation

Types of changes

  • Bug fix (generally a non-breaking change which closes an issue).
  • Enhancement or new feature (adds new functionality).
  • Breaking change (a bug fix or enhancement which changes existing behavior).

Checklist:

  • I signed an Apache CLA.
  • I reviewed the style guides and followed the recommendations (Travis CI will check :).
  • I added tests to cover my changes.
  • My changes require further changes to the documentation.
  • I updated the documentation where necessary.

@codecov-commenter
Copy link

codecov-commenter commented Feb 13, 2023

Codecov Report

Merging #5379 (ef9f337) into master (084c2ad) will decrease coverage by 0.18%.
The diff coverage is n/a.

❗ Current head ef9f337 differs from pull request most recent head 5f7e03f. Consider uploading reports for the commit 5f7e03f to get more accurate results

@@            Coverage Diff             @@
##           master    #5379      +/-   ##
==========================================
- Coverage   76.77%   76.60%   -0.18%     
==========================================
  Files         240      240              
  Lines       14569    14569              
  Branches      647      647              
==========================================
- Hits        11186    11161      -25     
- Misses       3383     3408      +25     
Impacted Files Coverage Δ
...whisk/connector/kafka/KafkaConsumerConnector.scala 59.15% <0.00%> (-22.54%) ⬇️
.../scala/org/apache/openwhisk/utils/Exceptions.scala 20.00% <0.00%> (-20.00%) ⬇️
.../org/apache/openwhisk/common/NestedSemaphore.scala 84.84% <0.00%> (-3.04%) ⬇️
.../openwhisk/core/loadBalancer/FPCPoolBalancer.scala 33.08% <0.00%> (-1.13%) ⬇️
...e/openwhisk/core/scheduler/queue/MemoryQueue.scala 81.54% <0.00%> (-0.57%) ⬇️
.../org/apache/openwhisk/core/connector/Message.scala 68.75% <0.00%> (-0.45%) ⬇️

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more

@bdoyle0182 bdoyle0182 merged commit f0e281e into apache:master Feb 16, 2023
mtt-merz pushed a commit to mtt-merz/openwhisk that referenced this pull request Oct 22, 2023
* dependency updates for cve patches

* revert mongodb driver with breaking deprecation

* revert kafka client upgrade

* revert kube client upgrade for now

* remove cve comment

---------

Co-authored-by: Brendan Doyle <[email protected]>
(cherry picked from commit f0e281e)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants