Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Backport 2.x] Upgrade micromatch to 4.0.8 (#423) #424

Merged
merged 1 commit into from
Sep 6, 2024

Conversation

ps48
Copy link
Member

@ps48 ps48 commented Sep 6, 2024

  • updated micromatch dependency to 4.0.8

Signed-off-by: Shenoy Pratik sgguruda@amazon.com

  • add resolution for micromatch

Signed-off-by: Shenoy Pratik sgguruda@amazon.com


Signed-off-by: Shenoy Pratik sgguruda@amazon.com
(cherry picked from commit f9a236d)

Description

Backport for #423

Issues Resolved

https://nvd.nist.gov/vuln/detail/CVE-2024-4067

Check List

  • New functionality includes testing.
    • All tests pass, including unit test, integration test and doctest
  • New functionality has been documented.
    • New functionality has javadoc added
    • New functionality has user manual doc added
  • Commits are signed per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

* updated micromatch dependency to 4.0.8

Signed-off-by: Shenoy Pratik <sgguruda@amazon.com>

* add resolution for micromatch

Signed-off-by: Shenoy Pratik <sgguruda@amazon.com>

---------

Signed-off-by: Shenoy Pratik <sgguruda@amazon.com>
(cherry picked from commit f9a236d)
@ps48 ps48 changed the title Upgrade micromatch to 4.0.8 (#423) [Backport 2.x] Upgrade micromatch to 4.0.8 (#423) Sep 6, 2024
@ps48 ps48 merged commit 4c2f078 into opensearch-project:2.x Sep 6, 2024
7 of 10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants