-
Notifications
You must be signed in to change notification settings - Fork 1.9k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Bump versions of reactor-core and reactor-netty #11500
Conversation
Signed-off-by: Marc Handalian <marc.handalian@gmail.com>
Gradle Check (Jenkins) Run Completed with:
|
Gradle Check (Jenkins) Run Completed with:
|
Signed-off-by: Marc Handalian <marc.handalian@gmail.com>
@reta @kotwanikunal Made changes here after approvals - the versions I bumped to required a bump in jackson-databind that is not compatible with our gradle version on 1.x. Instead moved these to the latest patch versions within the same minor that also resolve this CVE. |
You also need to rebase for the changelog :) |
Gradle Check (Jenkins) Run Completed with:
|
Signed-off-by: Marc Handalian <handalm@amazon.com>
This comment was marked as outdated.
This comment was marked as outdated.
Signed-off-by: Marc Handalian <marc.handalian@gmail.com>
Signed-off-by: Marc Handalian <marc.handalian@gmail.com>
Gradle Check (Jenkins) Run Completed with:
|
Gradle Check (Jenkins) Run Completed with:
|
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## 1.x #11500 +/- ##
============================================
+ Coverage 77.60% 77.64% +0.03%
- Complexity 58777 58837 +60
============================================
Files 4223 4223
Lines 253559 253559
Branches 38701 38701
============================================
+ Hits 196768 196865 +97
+ Misses 40753 40735 -18
+ Partials 16038 15959 -79 ☔ View full report in Codecov by Sentry. |
…1500) * Bump versions of reactor-core and reactor-netty Signed-off-by: Marc Handalian <marc.handalian@gmail.com> * Change to 3.4 line of reactore-core and 1.0 line of reactor-netty. Signed-off-by: Marc Handalian <marc.handalian@gmail.com> * update SHAs Signed-off-by: Marc Handalian <marc.handalian@gmail.com> * fix thirdPartyAudit Signed-off-by: Marc Handalian <marc.handalian@gmail.com> --------- Signed-off-by: Marc Handalian <marc.handalian@gmail.com> Signed-off-by: Marc Handalian <handalm@amazon.com>
…1500) * Bump versions of reactor-core and reactor-netty Signed-off-by: Marc Handalian <marc.handalian@gmail.com> * Change to 3.4 line of reactore-core and 1.0 line of reactor-netty. Signed-off-by: Marc Handalian <marc.handalian@gmail.com> * update SHAs Signed-off-by: Marc Handalian <marc.handalian@gmail.com> * fix thirdPartyAudit Signed-off-by: Marc Handalian <marc.handalian@gmail.com> --------- Signed-off-by: Marc Handalian <marc.handalian@gmail.com> Signed-off-by: Marc Handalian <handalm@amazon.com> Signed-off-by: Marc Handalian <marc.handalian@gmail.com>
* Bump versions of reactor-core and reactor-netty * Change to 3.4 line of reactore-core and 1.0 line of reactor-netty. * update SHAs * fix thirdPartyAudit --------- Signed-off-by: Marc Handalian <marc.handalian@gmail.com> Signed-off-by: Marc Handalian <handalm@amazon.com>
Description
Bump versions of reactor-core and reactor-netty on 1.x line.
Related Issues
Resolves CVE-2023-34062 and CVE-2023-34054
Check List
By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.