-
Notifications
You must be signed in to change notification settings - Fork 968
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[CVE-2024-4067][CVE-2024-4068] Bump packages dependent on braces
versions lower than 3.0.3
#6911
Conversation
❌ Changelog Entry Missing HyphenChangelog entries must begin with a hyphen (-). |
Codecov ReportAttention: Patch coverage is
Additional details and impacted files@@ Coverage Diff @@
## main #6911 +/- ##
=======================================
Coverage 67.44% 67.44%
=======================================
Files 3444 3444
Lines 67849 67849
Branches 11035 11035
=======================================
Hits 45764 45764
Misses 19418 19418
Partials 2667 2667
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Sentry. |
670ee35
to
f02878c
Compare
…rsions lower than 3.0.3 Bumped packages: * `@amoo-miki/webpack` to `4.46.0-xxhash.1` * `micromatch` to `4.0.7` * `@types/watchpack` to `2.4.4` * `watchpack` to `2.4.1` Removed: * `@types/globby` Signed-off-by: Miki <miki@amazon.com>
@@ -49,6 +49,6 @@ | |||
"sass-embedded": "1.66.1", | |||
"sass-loader": "npm:@amoo-miki/sass-loader@10.4.1-node-sass-9.0.0-libsass-3.6.5-with-sass-embedded.rc1", | |||
"val-loader": "^2.1.2", | |||
"webpack": "npm:@amoo-miki/webpack@4.46.0-rc.2" | |||
"webpack": "npm:@amoo-miki/webpack@4.46.0-xxhash.1" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
xxhash?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yeah. The patched webpack I released was to add and make that algo the default.
❌ Changeset File Must Not Exist With Skip EntryChangeset file 6911.yml under folder changelogs/fragments must not exist if ##Changelog section in PR description includes a "skip" entry option. Please remove the changeset file and try again. |
The backport to
To backport manually, run these commands in your terminal: # Navigate to the root of your repository
cd $(git rev-parse --show-toplevel)
# Fetch latest updates from GitHub
git fetch
# Create a new working tree
git worktree add ../.worktrees/OpenSearch-Dashboards/backport-2.x 2.x
# Navigate to the new working tree
pushd ../.worktrees/OpenSearch-Dashboards/backport-2.x
# Create a new branch
git switch --create backport/backport-6911-to-2.x
# Cherry-pick the merged commit of this pull request and resolve the conflicts
git cherry-pick -x --mainline 1 418bf192692627ce32f4b9c0fb1a4eca1c8f26f5
# Push it to GitHub
git push --set-upstream origin backport/backport-6911-to-2.x
# Go back to the original working tree
popd
# Delete the working tree
git worktree remove ../.worktrees/OpenSearch-Dashboards/backport-2.x Then, create a pull request where the |
…rsions lower than 3.0.3 (opensearch-project#6911) Bumped packages: * `@amoo-miki/webpack` to `4.46.0-xxhash.1` * `micromatch` to `4.0.7` * `@types/watchpack` to `2.4.4` * `watchpack` to `2.4.1` Removed: * `@types/globby` cherry-picked from 418bf19 Signed-off-by: Miki <miki@amazon.com>
…rsions lower than 3.0.3 (opensearch-project#6911) Bumped packages: * `@amoo-miki/webpack` to `4.46.0-xxhash.1` * `micromatch` to `4.0.7` * `@types/watchpack` to `2.4.4` * `watchpack` to `2.4.1` Removed: * `@types/globby` cherry-picked from 418bf19 Signed-off-by: Miki <miki@amazon.com>
…rsions lower than 3.0.3 (opensearch-project#6911) Bumped packages: * `@amoo-miki/webpack` to `4.46.0-xxhash.1` * `micromatch` to `4.0.7` * `@types/watchpack` to `2.4.4` * `watchpack` to `2.4.1` Removed: * `@types/globby` cherry-picked from 418bf19 Signed-off-by: Miki <miki@amazon.com>
Bumped packages:
@amoo-miki/webpack
to4.46.0-xxhash.1
micromatch
to4.0.7
@types/watchpack
to2.4.4
watchpack
to2.4.1
Removed:
@types/globby
Issues Resolved
Fixes #6791
Fixes #6792
Changelog
Check List
yarn test:jest
yarn test:jest_integration