Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Backport 1.3][CVE-2022-25883] Resolve semver to 7.5.3 and remove unused package #4437

Merged
merged 1 commit into from
Jun 30, 2023

Conversation

ananzh
Copy link
Member

@ananzh ananzh commented Jun 29, 2023

Description

In this PR, we resolve semver to 7.5.3 from 5.x, 6.x and 7.x. There are breaking changes in API in 7.5.3 compared to 5.x/6.x. However, these API changes do not impact any usages.

Backport PR

#4411

Issue Resolve

#4370

Check List

  • All tests pass
    • yarn test:jest
    • yarn test:jest_integration
    • yarn test:ftr
  • New functionality includes testing.
  • New functionality has been documented.
  • Update CHANGELOG.md
  • Commits are signed per the DCO using --signoff

…sed package

In this PR, we resolve semver to 7.5.3 from 5.x, 6.x and 7.x.
There are breaking changes in API in 7.5.3 compared to 5.x/6.x.
However, these API changes do not impact any usages.

Backport PR
opensearch-project#4411

Issue Resolve
opensearch-project#4370

Signed-off-by: ananzh <ananzh@amazon.com>
@codecov
Copy link

codecov bot commented Jun 29, 2023

Codecov Report

Merging #4437 (a384839) into 1.3 (4df4639) will decrease coverage by 0.06%.
The diff coverage is n/a.

@@            Coverage Diff             @@
##              1.3    #4437      +/-   ##
==========================================
- Coverage   67.50%   67.45%   -0.06%     
==========================================
  Files        3044     3044              
  Lines       58692    58692              
  Branches     8902     8902              
==========================================
- Hits        39619    39588      -31     
- Misses      16925    16952      +27     
- Partials     2148     2152       +4     
Flag Coverage Δ
Linux ?
Windows 67.45% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

see 5 files with indirect coverage changes

@AMoo-Miki AMoo-Miki merged commit 96972a2 into opensearch-project:1.3 Jun 30, 2023
49 of 50 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
cve Security vulnerabilities detected by Dependabot or Mend v1.3.12
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants