Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update ini component version in test package.json #14454

Merged
merged 2 commits into from
Dec 28, 2020

Conversation

anamnavi
Copy link
Member

@anamnavi anamnavi commented Dec 17, 2020

Updated ini component minimum version in package.json based on CVE listed in security alert

PR Summary

Updated ini component version from 1.3.5 to 1.3.6 and greater in package.json

PR Context

Satisfies safety alert for ini component, so tests can run without alert being raised

PR Checklist

@ghost ghost assigned anmenaga Dec 17, 2020
@TravisEz13 TravisEz13 assigned TravisEz13 and unassigned anmenaga Dec 18, 2020
@TravisEz13 TravisEz13 added WG-Security security related areas such as JEA CL-Test Indicates that a PR should be marked as a test change in the Change Log labels Dec 18, 2020
@anamnavi
Copy link
Member Author

/azp list

@azure-pipelines
Copy link

Commenter does not have sufficient privileges for PR 14454 in repo PowerShell/PowerShell

@rjmholt rjmholt closed this Dec 23, 2020
@rjmholt rjmholt reopened this Dec 23, 2020
@anamnavi anamnavi closed this Dec 23, 2020
@anamnavi anamnavi reopened this Dec 28, 2020
@TravisEz13 TravisEz13 merged commit f72c7fc into PowerShell:master Dec 28, 2020
@TravisEz13 TravisEz13 added this to the 7.2.0-preview.3 milestone Dec 28, 2020
@anamnavi anamnavi deleted the node-component-updates branch December 28, 2020 20:46
@anamnavi anamnavi restored the node-component-updates branch February 1, 2021 15:10
@ghost
Copy link

ghost commented Feb 12, 2021

🎉v7.2.0-preview.3 has been released which incorporates this pull request.:tada:

Handy links:

@ghost
Copy link

ghost commented Mar 11, 2021

🎉v7.1.3 has been released which incorporates this pull request.:tada:

Handy links:

WamWooWam pushed a commit to WamWooWam/PowerShell that referenced this pull request Mar 16, 2021
WamWooWam added a commit to WamWooWam/PowerShell that referenced this pull request Mar 16, 2021
[7.1.3] - 2021-03-11

*** Engine Updates and Fixes

- Remove the 32K character limit on the environment block for `Start-Process` (PowerShell#14111)
- Fix webcmdlets to properly construct URI from body when using `-NoProxy` (PowerShell#14673)

*** General Cmdlet Updates and Fixes

- Fix `PromptForCredential()` to add `targetName` as domain (PowerShell#14504)

*** Build and Packaging Improvements

<details>

<summary>

Bump .NET SDK to 5.0.4

</summary>

<ul>
<li>Bump .NET SDK to 5.0.4 (Internal 14775)</li>
<li>Disable running markdown link verification in release build CI (PowerShell#14971, PowerShell#14974, PowerShell#14975)</li>
<li>Use template that disables component governance for CI (PowerShell#14938)</li>
<li>Declare which variable group is used for checking the blob in the release build (PowerShell#14970)</li>
<li>Add suppress for nuget multi-feed warning (PowerShell#14893)</li>
<li>Disable code signing validation where the file type is not supported (PowerShell#14885)</li>
<li>Install wget on <code>CentOS</code> 7 docker image (PowerShell#14857)</li>
<li>Fix install-dotnet download (PowerShell#14856)</li>
<li>Make universal Deb package based on deb package spec (PowerShell#14681)</li>
<li>Fix release build to upload global tool packages to artifacts (PowerShell#14620)</li>
<li>Update <code>ini</code> component version in test <code>package.json</code> (PowerShell#14454)</li>
<li>Add manual release automation steps and improve changelog script (PowerShell#14445)</li>
<li>Update markdown test packages with security fixes (PowerShell#14145)</li>
<li>Fix a typo in the <code>Get-ChangeLog</code> function (PowerShell#14129)</li>
<li>Disable global tool copy to unblock release</li>
</ul>

</details>

[7.1.3]: PowerShell/PowerShell@v7.1.2...v7.1.3
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Backport-7.0.x-Done BackPort-7.1.x-Done Backport to 7.1.x completed CL-Test Indicates that a PR should be marked as a test change in the Change Log WG-Security security related areas such as JEA
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

5 participants