Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump common-compress package to fix CVE #2186

Merged
merged 4 commits into from
Mar 8, 2024
Merged

Bump common-compress package to fix CVE #2186

merged 4 commits into from
Mar 8, 2024

Conversation

b4sjoo
Copy link
Collaborator

@b4sjoo b4sjoo commented Mar 8, 2024

Description

Bump common-compress package to 1.26 to fix CVE

Check List

  • New functionality includes testing.
    • All tests pass
  • New functionality has been documented.
    • New functionality has javadoc added
  • Commits are signed per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

@b4sjoo b4sjoo had a problem deploying to ml-commons-cicd-env March 8, 2024 01:36 — with GitHub Actions Error
@b4sjoo b4sjoo had a problem deploying to ml-commons-cicd-env March 8, 2024 01:36 — with GitHub Actions Failure
@b4sjoo b4sjoo had a problem deploying to ml-commons-cicd-env March 8, 2024 01:36 — with GitHub Actions Failure
@b4sjoo b4sjoo had a problem deploying to ml-commons-cicd-env March 8, 2024 01:36 — with GitHub Actions Error
@b4sjoo b4sjoo had a problem deploying to ml-commons-cicd-env March 8, 2024 01:36 — with GitHub Actions Failure
@b4sjoo b4sjoo had a problem deploying to ml-commons-cicd-env March 8, 2024 01:36 — with GitHub Actions Failure
@b4sjoo b4sjoo had a problem deploying to ml-commons-cicd-env March 8, 2024 01:38 — with GitHub Actions Error
@b4sjoo b4sjoo had a problem deploying to ml-commons-cicd-env March 8, 2024 01:38 — with GitHub Actions Failure
@b4sjoo b4sjoo had a problem deploying to ml-commons-cicd-env March 8, 2024 01:38 — with GitHub Actions Error
@b4sjoo b4sjoo had a problem deploying to ml-commons-cicd-env March 8, 2024 01:38 — with GitHub Actions Error
@b4sjoo b4sjoo had a problem deploying to ml-commons-cicd-env March 8, 2024 01:38 — with GitHub Actions Failure
@b4sjoo b4sjoo had a problem deploying to ml-commons-cicd-env March 8, 2024 01:38 — with GitHub Actions Error
dhrubo-os
dhrubo-os previously approved these changes Mar 8, 2024
View reviewed changes
@b4sjoo
Bump commons-io
bbe9b9c 
Signed-off-by: Sicheng Song <[email protected]>
@b4sjoo b4sjoo had a problem deploying to ml-commons-cicd-env March 8, 2024 01:43 — with GitHub Actions Failure
@b4sjoo b4sjoo had a problem deploying to ml-commons-cicd-env March 8, 2024 01:43 — with GitHub Actions Failure
@b4sjoo b4sjoo had a problem deploying to ml-commons-cicd-env March 8, 2024 01:43 — with GitHub Actions Failure
@b4sjoo b4sjoo had a problem deploying to ml-commons-cicd-env March 8, 2024 01:43 — with GitHub Actions Error
@b4sjoo b4sjoo had a problem deploying to ml-commons-cicd-env March 8, 2024 01:43 — with GitHub Actions Error
@b4sjoo b4sjoo had a problem deploying to ml-commons-cicd-env March 8, 2024 01:43 — with GitHub Actions Failure
@b4sjoo
Bump commons-io
13db2c4 
Signed-off-by: Sicheng Song <[email protected]>
@b4sjoo b4sjoo temporarily deployed to ml-commons-cicd-env March 8, 2024 01:48 — with GitHub Actions Inactive
@b4sjoo b4sjoo temporarily deployed to ml-commons-cicd-env March 8, 2024 01:48 — with GitHub Actions Inactive
@b4sjoo b4sjoo temporarily deployed to ml-commons-cicd-env March 8, 2024 01:48 — with GitHub Actions Inactive
@b4sjoo b4sjoo temporarily deployed to ml-commons-cicd-env March 8, 2024 01:49 — with GitHub Actions Inactive
@b4sjoo b4sjoo temporarily deployed to ml-commons-cicd-env March 8, 2024 01:49 — with GitHub Actions Inactive
@b4sjoo b4sjoo temporarily deployed to ml-commons-cicd-env March 8, 2024 01:49 — with GitHub Actions Inactive
@codecov Codecov
Copy link

codecov bot commented Mar 8, 2024 •
edited
Loading

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 81.90%. Comparing base (0d5e58a) to head (13db2c4).

Additional details and impacted files 
@@            Coverage Diff            @@
##               main    #2186   +/-   ##
=========================================
  Coverage     81.90%   81.90%           
  Complexity     5718     5718           
=========================================
  Files           547      547           
  Lines         23063    23063           
  Branches       2378     2378           
=========================================
  Hits          18890    18890           
  Misses         3228     3228           
  Partials        945      945
Flag Coverage Δ
ml-commons 81.90% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@b4sjoo b4sjoo temporarily deployed to ml-commons-cicd-env March 8, 2024 02:15 — with GitHub Actions Inactive
@b4sjoo b4sjoo temporarily deployed to ml-commons-cicd-env March 8, 2024 02:15 — with GitHub Actions Inactive
@b4sjoo b4sjoo temporarily deployed to ml-commons-cicd-env March 8, 2024 02:15 — with GitHub Actions Inactive
@b4sjoo b4sjoo merged commit 2e0946a into opensearch-project:main Mar 8, 2024
14 checks passed
opensearch-trigger-bot bot pushed a commit that referenced this pull request Mar 8, 2024
@b4sjoo @github-actions
Bump common-compress package to fix CVE (#2186)
22779a7 
(cherry picked from commit 2e0946a)
@opensearch-trigger-bot opensearch-trigger-bot bot mentioned this pull request Mar 8, 2024
Merged
b4sjoo added a commit that referenced this pull request Mar 8, 2024
@opensearch-trigger-bot @b4sjoo
Bump common-compress package to fix CVE (#2186) (#2187)
897b69c 
(cherry picked from commit 2e0946a)

Co-authored-by: Sicheng Song <[email protected]>
austintlee pushed a commit to austintlee/ml-commons that referenced this pull request Mar 18, 2024
@b4sjoo @austintlee
Bump common-compress package to fix CVE (opensearch-project#2186)
902891d
austintlee pushed a commit to austintlee/ml-commons that referenced this pull request Mar 19, 2024
@b4sjoo @austintlee
Bump common-compress package to fix CVE (opensearch-project#2186)
d51553d
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@mingshl mingshl mingshl approved these changes

@dhrubo-os dhrubo-os dhrubo-os approved these changes

@jngz-es jngz-es Awaiting requested review from jngz-es jngz-es is a code owner

@model-collapse model-collapse Awaiting requested review from model-collapse model-collapse is a code owner

@rbhavna rbhavna Awaiting requested review from rbhavna rbhavna is a code owner

@ylwu-amzn ylwu-amzn Awaiting requested review from ylwu-amzn ylwu-amzn is a code owner

@zane-neo zane-neo Awaiting requested review from zane-neo zane-neo is a code owner

@Zhangxunmt Zhangxunmt Awaiting requested review from Zhangxunmt Zhangxunmt is a code owner

@austintlee austintlee Awaiting requested review from austintlee austintlee is a code owner

@HenryL27 HenryL27 Awaiting requested review from HenryL27 HenryL27 is a code owner

@sam-herman sam-herman Awaiting requested review from sam-herman

Assignees
No one assigned
Labels
backport 2.x infra
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@b4sjoo @dhrubo-os @mingshl