Fix Spring vulneraibilities
Type of change
-
Bug Fix -
Feature
Please provide link to gitlab issue or ADR(Architecture Decision Record)
Does this introduce a change in the core logic?
- [NO]
Does this introduce a change in the cloud provider implementation, if so which cloud?
-
AWS -
Azure -
Google Cloud -
IBM
Does this introduce a breaking change?
- [NO]
What is the current behavior?
What is the new/expected behavior?
Have you added/updated Unit Tests and Integration Tests?
Any other useful information
Merge request reports
Activity
added 1 commit
- 46847454 - Update Spring-security-core version to 5.8.2
changed milestone to %M22 - Release 0.25
added AWS Azure Common Code GC IBM MRDependencies Upgrade Vulnerability Management labels
- Resolved by Solomon Ayalew
Hi, this is an automated friendly reminder- this MR is targeted for M22 - Release 0.25 as indicated by the Milestone label. We are going to fork the release branch at the end of the week on 08-Dec-23 as per the timeline. Please merge this MR if this is ready. As per the PMC policy:
- For CSP-specific change, you can merge this once you get another approval from your team.
- For common code change, please ensure the pipelines are passing and we get 2+ approvals from the other maintainers, ADR approved as needed for new features.
- For lib upgrades/security fixes, you can merge as long as the pipelines are passing.
Otherwise, please move this to the next milestone for us to unblock the release process. Thank you.
- Resolved by Thulasi Dass Subramanian
Hello @solxget
[Azure, AWS] Integration test has failures with reason
Subscription Error making request to Register service. Check the inner HttpResponse for more info.
Even gc & ibm-test has failures. Kindly verify it
Hi @solxget , seems like there's merge conflict , can you help
Edited by Chad Leongadded 5 commits
-
35143e95...c588a338 - 4 commits from branch
master
- 8958186c - Merge with master
-
35143e95...c588a338 - 4 commits from branch
@chad merged and pipeline is running.
we had a clean pipeline for this as mentioned here. https://opensdu.slack.com/archives/C0152LW723S/p1701815672574569
re-runs do fail due to some unstablity (not caused by this change). will let that handled sepearatly and merge this PR.
mentioned in commit 904f9d8c