[MSCOSDU-1857] fix json vulnerability

Change details

• upgraded core-lib-azure to 0.25.0-rc2 to remediate org.json:json vulnerability
• upgrade io.netty:netty-bom version to 4.1.101.Final
• upgrade reactor-netty-http version to 1.1.13

Changes in:

• GCP
• Azure
• AWS
• IBM

assigned to @vidya

added 1 commit

• da4378cd - [MSCOSDU-1857] fix json vulnerability

Compare with previous version

changed the description

added 1 commit

• c45af244 - [MSCOSDU-1857] fix json vulnerability

Compare with previous version

changed the description

marked this merge request as ready

changed milestone to %M22 - Release 0.25

added Azure Vulnerability Management labels

added 1 commit

• 16ac5225 - [MSCOSDU-1857] upgrade reactor-netty version

Compare with previous version

Hi, this is an automated friendly reminder- this MR is targeted for M22 - Release 0.25 as indicated by the Milestone label. We are going to fork the release branch at the end of the day as per the timeline. Please merge this MR if this is ready. As per the PMC policy:

• For CSP-specific change, you can merge this once you get another approval from your team.
• For common code change, please ensure the pipelines are passing and we get 2+ approvals from the other maintainers, ADR approved as needed for new features.
• For lib upgrades/security fixes, you can merge as long as the pipelines are passing.

Otherwise, please move this to the next milestone for us to unblock the release process. Thank you.

added 1 commit

• 405539da - [MSCOSDU-1857] update notice

Compare with previous version

removed milestone %M22 - Release 0.25

added 7 commits

• 405539da...c1974a03 - 6 commits from branch master
• 098cd049 - Merge branch 'master' into 'az/vl-fix-json-vulnerability'

Compare with previous version

added 1 commit

• cfd634d4 - [MSCOSDU-1857]Update pom.xml

Compare with previous version

changed the description

changed milestone to %M22 - Release 0.25

approved this merge request

approved this merge request

Hello Team,

Merging azure vulnerability fixes with passing pipelines [azure] as per policy.

Thanks.

merged

mentioned in commit 5bb51f70

mentioned in merge request !499 (merged)