Skip to content

Fix Orchestrator CVEs for RHDH 1.9.6 Release#3480

Open
JessicaJHee wants to merge 4 commits into
workspace/orchestratorfrom
orchestrator/release-1.9
Open

Fix Orchestrator CVEs for RHDH 1.9.6 Release#3480
JessicaJHee wants to merge 4 commits into
workspace/orchestratorfrom
orchestrator/release-1.9

Conversation

@JessicaJHee

Copy link
Copy Markdown
Member

Hey, I just made a Pull Request!

Fixes RHIDP-14959

  • See Jira description for details on each dependency and relavant notes
  • axios, shell-quote, ws couldn't be fully patched but because the vulnerable versions are of dev dependencies like cli and repo-tools we are safe

✔️ Checklist

  • A changeset describing the change and affected packages. (more info)
  • Added or Updated documentation
  • Tests for new functionality and regression tests for bug fixes
  • Screenshots attached (for UI changes)

…r workspace (#3422)

Signed-off-by: Jessica He <jhe@redhat.com>
…rkspace (#3453)

* [release-1.9] chore(deps): bumps ip-address in Orchestrator workspace

Signed-off-by: Jessica He <jhe@redhat.com>

* bump ws to 8.21.0

Signed-off-by: Jessica He <jhe@redhat.com>

---------

Signed-off-by: Jessica He <jhe@redhat.com>
Signed-off-by: Jessica He <jhe@redhat.com>
* Revert "[release-1.9] chore(deps): bumps axios and shell-quote in Orchestrator workspace (#3422)"

This reverts commit 49015c5.

* [release-1.9] chore(deps): bumps non-dev axios and shell-quote in Orchestrator workspace

Signed-off-by: Jessica He <jhe@redhat.com>

---------

Signed-off-by: Jessica He <jhe@redhat.com>
@sonarqubecloud

Copy link
Copy Markdown

@alizard0

Copy link
Copy Markdown
Member

/lgtm

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants