Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

0.6.7 sync #2239

Merged
merged 17 commits into from
Nov 14, 2022
Merged

0.6.7 sync #2239

merged 17 commits into from
Nov 14, 2022

Conversation

scudette
Copy link
Contributor

No description provided.

scudette and others added 17 commits November 11, 2022 22:36
* Refactored the ACL manager to be a org specific service.

* Also fixed #2218
* Fixed a race between enrollment and accepting a message from the
  client. If we can decrypt a message from the client, we assume it
  has a valid client_info record even if none are yet found in the
  datastore. This fixed a bug where under load first messages from
  enrolled clients were lost because we were unable to find their
  client records in time.
* Implement concurrency control for unauthenticated messages. This
  rate limits enrollment and avoids the server performing too many RSA
  operations during initial enrollment. This change slows down initial
  enrollment to acceptable rate thereby limiting server load.
fix: upgrade moment-timezone from 0.5.37 to 0.5.38

Snyk has created this PR to upgrade moment-timezone from 0.5.37 to 0.5.38.

See this package in npm:
https://www.npmjs.com/package/moment-timezone

See this project in Snyk:
https://app.snyk.io/org/scudette/project/76f4d127-566b-42ef-86f4-bdcbc92b90b4?utm_source=github&utm_medium=referral&page=upgrade-pr

Co-authored-by: snyk-bot <snyk-bot@snyk.io>
fix: upgrade ace-builds from 1.11.1 to 1.12.0

Snyk has created this PR to upgrade ace-builds from 1.11.1 to 1.12.0.

See this package in npm:
https://www.npmjs.com/package/ace-builds

See this project in Snyk:
https://app.snyk.io/org/scudette/project/76f4d127-566b-42ef-86f4-bdcbc92b90b4?utm_source=github&utm_medium=referral&page=upgrade-pr

Co-authored-by: snyk-bot <snyk-bot@snyk.io>
* This code manages adding, deleting and granting users in different
  orgs taking into account the permissions given to the principal that
  is making the call.
* Added tests
#2227)

users: AddUserToOrg needs GetUserWithHashes or it will remove password (#2226)

When AddUserToOrg rewrites the user record and local authentication is
in use, it clears the password fields.  We need to use GetUserWithHashes
instead.
Bumps [loader-utils](https://github.com/webpack/loader-utils) from 1.4.0 to 1.4.1.
- [Release notes](https://github.com/webpack/loader-utils/releases)
- [Changelog](https://github.com/webpack/loader-utils/blob/v1.4.1/CHANGELOG.md)
- [Commits](webpack/loader-utils@v1.4.0...v1.4.1)

---
updated-dependencies:
- dependency-name: loader-utils
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
added a typo to ensure MappingNameRegex is applied
When the user sets their preferred timezone in the user preferences
the UI adjusts the output. This PR also ensures this preference is
propagated to the download table API so the encoded timestamps are
also presented in the correct timezone.

The user may always adjust the timezone back to UTC to receive their
times in UTC again.
fix: upgrade ace-builds from 1.12.0 to 1.12.3

Snyk has created this PR to upgrade ace-builds from 1.12.0 to 1.12.3.

See this package in npm:
https://www.npmjs.com/package/ace-builds

See this project in Snyk:
https://app.snyk.io/org/scudette/project/76f4d127-566b-42ef-86f4-bdcbc92b90b4?utm_source=github&utm_medium=referral&page=upgrade-pr
Also changed client_set_metadata() to be additive - so it does not
require reading the metadata first. It will now just set the specified
fields.

Fixed: #2235
Also fixed a bug in VQL group by: Expression not properly
materialized.

Added ListOrgs() helper function which shows a filtered view of the
orgs the principal has access to.
Previously user_delete() would delete from all orgs but this can lead
to an accident when the orgs parameter is omitted. The new behavior is
to delete from the current org when no orgs are specified.
Older versions of the parse_mft() artifact did not produce the Links
fields and do not accept a prefix. This ensures the artifact can
continue to run on them.

Also fixed a bug in reading the build time during enrolment.
@CLAassistant
Copy link

CLAassistant commented Nov 12, 2022

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you all sign our Contributor License Agreement before we can accept your contribution.
4 out of 6 committers have signed the CLA.

✅ scudette
✅ mgreen27
✅ jeffmahoney
✅ predictiple
❌ dependabot[bot]
❌ snyk-bot
You have signed the CLA already but the status is still pending? Let us recheck it.

@scudette scudette merged commit 2c7a64a into v0.6.7 Nov 14, 2022
@scudette scudette deleted the 0.6.7-sync branch November 14, 2022 06:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

6 participants