Skip to content

Removes beta1 qualifier and solves CVE-2024-52798 #2231

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged

Conversation

DarshitChanpura
Copy link
Member

Description

Fixes https://advisories.opensearch.org/advisories/CVE-2024-52798 and forward-ports #2229

Check List

  • New functionality includes testing
  • New functionality has been documented
  • Commits are signed per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

opensearch-trigger-bot bot and others added 2 commits April 28, 2025 21:57
…ct#2230)

* Changes to remove tenant panels from roles pages when multitenancy is disabled (opensearch-project#2215) (opensearch-project#2218)

* Changes to remove tenant panels from roles pages when multitenancy is disabled

* Modified test files as per comments on PR

---------

(cherry picked from commit e7ffb2e)





* Explicitly cd to security-dashboards-plugin directory before running cypress tests (opensearch-project#2216) (opensearch-project#2222)

(cherry picked from commit d17ac9e)





* Add cat shard api permission (opensearch-project#2217) (opensearch-project#2223)

(cherry picked from commit f0baa61)







* Increment version to 3.0.0.0 (opensearch-project#2226)




* Removes beta1 qualifier from security-dashboards-plugin



---------












(cherry picked from commit cf24968)

Signed-off-by: nishthm <[email protected]>
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Signed-off-by: Craig Perkins <[email protected]>
Signed-off-by: Swetha Guptha <[email protected]>
Signed-off-by: opensearch-ci-bot <[email protected]>
Signed-off-by: Darshit Chanpura <[email protected]>
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: opensearch-trigger-bot[bot] <98922864+opensearch-trigger-bot[bot]@users.noreply.github.com>
Co-authored-by: Swetha Guptha <[email protected]>
Co-authored-by: Derek Ho <[email protected]>
Co-authored-by: opensearch-ci-bot <[email protected]>
Copy link

codecov bot commented Apr 29, 2025

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 72.01%. Comparing base (4bd4025) to head (fb6ce04).
Report is 1 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #2231   +/-   ##
=======================================
  Coverage   72.01%   72.01%           
=======================================
  Files          98       98           
  Lines        2691     2691           
  Branches      420      412    -8     
=======================================
  Hits         1938     1938           
  Misses        638      638           
  Partials      115      115           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@RyanL1997
Copy link
Collaborator

should we merge this in? @cwperks @DarshitChanpura

@cwperks
Copy link
Member

cwperks commented May 8, 2025

Yes we can merge this. Eventually the express test dependency should be removed once the node-based SAML IdP is replaced (maybe with Keycloak) for testing: #2182

@cwperks cwperks merged commit 0a9ba07 into opensearch-project:main May 8, 2025
19 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants