-
Notifications
You must be signed in to change notification settings - Fork 153
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
chore(deps): [release-1.3] Bump path-to-regexp to v0.1.12 to fix CVE-2024-52798 #2611
chore(deps): [release-1.3] Bump path-to-regexp to v0.1.12 to fix CVE-2024-52798 #2611
Conversation
Signed-off-by: Kim Tsao <[email protected]>
🦋 Changeset detectedLatest commit: 1afa62b The changes in this PR will be included in the next version bump. This PR includes changesets to release 5 packages
Not sure what this means? Click here to learn what changesets are. Click here if you're a maintainer who wants to add another changeset to this PR |
Signed-off-by: Kim Tsao <[email protected]>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I also see [email protected]
in these plugins as well, I believe we need to bump them too?
Thanks, I missed bulk import. Feedback was deprecated in 1.3. |
Signed-off-by: Kim Tsao <[email protected]>
Quality Gate passedIssues Measures |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
lgtm
lgtm (orchestrator) |
lgtm (bulk import, ocm) |
e3665ac
into
janus-idp:release-1.3
Regen the dist-dynamic/yarn.lock files to update to Express v4.21.2 in order to bump path-to-regexp to v0.1.12
Fixes:
CVE-2024-52798
https://issues.redhat.com/browse/RHIDP-5179