Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump taskcluster from 44.2.2 to 44.8.5 in /tools #181

Closed
wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Mar 28, 2022

Bumps taskcluster from 44.2.2 to 44.8.5.

Release notes

Sourced from taskcluster's releases.

v44.8.5

GENERAL

▶ [patch] Upgrade Node.js version from v16.14.0 to v16.14.2 for OpenSSL security patch.

▶ [patch] Upgrade to latest minimist version to address https://github.com/taskcluster/taskcluster/security/dependabot/73.

▶ [patch] Upgrade to latest mocha version to address https://github.com/taskcluster/taskcluster/security/dependabot/70, https://github.com/taskcluster/taskcluster/security/dependabot/71, and https://github.com/taskcluster/taskcluster/security/dependabot/72.

USERS

▶ [patch] #5282 Fix issue with unicode characters in user profile.

Using Github as oauth provider encodes user profile using base64 encoding, which, if contains unicode characters, is not decoded properly by atob().

v44.8.4

GENERAL

▶ [patch] #5003 Allow provisioner to exit instead of being stuck in delayed loop.

OTHER

▶ Additional changes not described here: #4999, #5217.

v44.8.3

DEPLOYERS

▶ [patch] #5235 Added __version__, __lbheartbeat__, and __heartbeat__ endpoints to web-server service. Can be reached at /api/<service name>/v1/{__version__, __lbheartbeat__, __heartbeat__}. __heartbeat__ is simply returning a 200 empty JSON object for now - implementation to follow in individual PRs per service.

WORKER-DEPLOYERS

▶ [patch] #5269 Worker-runner now renews worker credentials at an appropriate time, even if the host hibernates before the credentials expire.

USERS

▶ [patch] #5277 Fix "can't access property length of undefined" that prevented showing missing permissions error.

▶ [patch] #5274 fix: Follow Log enabled by default to automatically load to bottom of log file.

DEVELOPERS

... (truncated)

Changelog

Sourced from taskcluster's changelog.

v44.8.5

GENERAL

▶ [patch] Upgrade Node.js version from v16.14.0 to v16.14.2 for OpenSSL security patch.

▶ [patch] Upgrade to latest minimist version to address https://github.com/taskcluster/taskcluster/security/dependabot/73.

▶ [patch] Upgrade to latest mocha version to address https://github.com/taskcluster/taskcluster/security/dependabot/70, https://github.com/taskcluster/taskcluster/security/dependabot/71, and https://github.com/taskcluster/taskcluster/security/dependabot/72.

USERS

▶ [patch] #5282 Fix issue with unicode characters in user profile.

Using Github as oauth provider encodes user profile using base64 encoding, which, if contains unicode characters, is not decoded properly by atob().

v44.8.4

GENERAL

▶ [patch] #5003 Allow provisioner to exit instead of being stuck in delayed loop.

OTHER

▶ Additional changes not described here: #4999, #5217.

v44.8.3

DEPLOYERS

▶ [patch] #5235 Added __version__, __lbheartbeat__, and __heartbeat__ endpoints to web-server service. Can be reached at /api/<service name>/v1/{__version__, __lbheartbeat__, __heartbeat__}. __heartbeat__ is simply returning a 200 empty JSON object for now - implementation to follow in individual PRs per service.

WORKER-DEPLOYERS

▶ [patch] #5269 Worker-runner now renews worker credentials at an appropriate time, even if the host hibernates before the credentials expire.

USERS

▶ [patch] #5277 Fix "can't access property length of undefined" that prevented showing missing permissions error.

▶ [patch] #5274

... (truncated)

Commits
  • fb587e0 v44.8.5
  • 2154025 Merge pull request #5316 from taskcluster/matt-boris/minimistVuln
  • 77ed5ec Merge branch 'main' into matt-boris/minimistVuln
  • 4cf2411 Merge pull request #5320 from taskcluster/fix-ci-tests-win2012r2
  • 4292598 Fix broken tests on win2012r2 CI
  • 9b3b149 security(deps): upgrade minimist for high vuln
  • d626345 Merge pull request #5310 from taskcluster/pre-commit-ci-update-config
  • 0beb4ff [pre-commit.ci] pre-commit autoupdate
  • 78497a7 feat(auth): Proper handling of unicode in profile
  • 9b4bb4c Merge pull request #5309 from taskcluster/matt-boris/nanoidVulnFix
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [taskcluster](https://github.com/taskcluster/taskcluster) from 44.2.2 to 44.8.5.
- [Release notes](https://github.com/taskcluster/taskcluster/releases)
- [Changelog](https://github.com/taskcluster/taskcluster/blob/main/CHANGELOG.md)
- [Commits](taskcluster/taskcluster@v44.2.2...v44.8.5)

---
updated-dependencies:
- dependency-name: taskcluster
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Mar 28, 2022
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Apr 5, 2022

Superseded by #190.

@dependabot dependabot bot closed this Apr 5, 2022
@dependabot dependabot bot deleted the dependabot/pip/tools/taskcluster-44.8.5 branch April 5, 2022 11:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
0 participants