Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Release: Marketplace 1.7 (v2.33.0) #8917

Merged
merged 76 commits into from
Mar 14, 2024
Merged

Release: Marketplace 1.7 (v2.33.0) #8917

merged 76 commits into from
Mar 14, 2024

Conversation

akshaysasidrn
Copy link
Collaborator

@akshaysasidrn akshaysasidrn commented Feb 26, 2024 •
edited

What's Changed

🚀 Features:

🌟 Improvements:

🛠 Fixes:

karan-rathod-316 and others added 21 commits February 20, 2024 10:05
@karan-rathod-316
update whitelist IP address and add warning in workspace constants to…
e9c4155 
… avoid usage in the client
@adishM98
Merge pull request #8853 from ToolJet/docs/fix-security-and-workspace…
0ad3236 
…-constants

[docs]: update whitelist IP address and add warning in workspace constants
@withshubh
[docs] platform milestone 11 (#8847)
5979fc6 
* [docs]reset password

* [docs]edit+archive flow

* [docs]updated docs in v2.29 and v2.30

* [docs]github ssouserinfo

* [docs] openid - id_token_encrypted
@adishM98
Change docker image build's slack message
14df04a
@akshaysasidrn
Merge pull request #8871 from ToolJet/workflow-notification-change-ce
98b56fd 
Change docker image build's slack message
@ganesh8056
tjdb table header row selection checkbox deselect functionality fixed
e22527e
@withshubh
[docs]archive/unarchive workspaces:superadmin (#8880)
ff67c34
@akshaysasidrn
Merge branch 'develop' into release/marketplace-1.7
bacadf5
@karan-rathod-316
mention that workspace constants will not work with workspace constan…
fa6abbd 
…ts (#8887)
@karan-rathod-316
update release notes and project overview sidebar (#8884)
c7352c5
@karan-rathod-316
add rgba example for timeline doc (#8892)
fb81d88
@karan-rathod-316
update commands and solution for migration issues
1d1eacf
@karan-rathod-316
minor grammar fix
583bab2
@adishM98
Merge pull request #8898 from ToolJet/docs/update-google-cloud-run-doc
359e7a9 
[docs]: Update commands and solution for migration issues
@withshubh
[docs] revamped how-to guides (#8688)
8f95801 
* [docs]revamped howto: serverside pagination

* [docs]revamp howto: import ext. js libs

* [docs]revamp howto:run actions from js query

* [docs]revamp howto: intentionally fail js query

* updated run query at specified

* revamped how to: use to_py

* [docs]updated how to access users location

* updated howtos in v2.30
@karan-rathod-316
update typo in Table component doc
c504ef4
@adishM98
Merge pull request #8905 from ToolJet/docs/update-typo-for-table
790bfb9 
[docs]:Update typo in Table component doc
@akshaysasidrn
Merge branch 'develop' into chore/merge-main-to-develop
70f92a1
@akshaysasidrn
Merge pull request #8915 from ToolJet/chore/merge-main-to-develop
fcc9e35 
Chore: Merge main to develop
@akshaysasidrn
Merge branch 'main' into release/marketplace-1.7
084fff8
@akshaysasidrn
Merge pull request #8876 from ToolJet/bugfix/tjdb-table-deselect-sele…
ec4f886 
…ctedrows

Fix: deselect selected rows in the TJDB dashboard
@akshaysasidrn akshaysasidrn added this to the Marketplace 1.7 milestone Feb 26, 2024
@Mekhla-Asopa Mekhla-Asopa added run-cypress Cypress E2E action and removed run-cypress Cypress E2E action labels Mar 12, 2024
@Mekhla-Asopa Mekhla-Asopa added run-cypress Cypress E2E action and removed run-cypress Cypress E2E action labels Mar 12, 2024
@socket-security Socket Security
Copy link

socket-security bot commented Mar 13, 2024 •
edited

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@docusaurus/core@2.4.3 Transitive: environment, eval, filesystem, network, shell, unsafe +411 30.5 MB slorber
npm/@docusaurus/plugin-google-gtag@2.4.3 environment Transitive: eval, filesystem, network, shell, unsafe +412 30.5 MB slorber
npm/@docusaurus/plugin-sitemap@2.4.3 filesystem Transitive: environment, eval, network, shell, unsafe +412 30.5 MB slorber
npm/@docusaurus/preset-classic@2.4.3 environment Transitive: eval, filesystem, network, shell, unsafe +472 39.5 MB slorber
npm/clsx@1.2.1 None 0 5.67 kB lukeed
npm/mariadb@3.0.1 environment, filesystem, network +10 10.5 MB dbart
npm/plugin-image-zoom@1.1.0 None +1 1.05 MB ataft

🚮 Removed packages: npm/@aws-sdk/client-lambda@3.461.0, npm/@aws-sdk/client-s3@3.282.0, npm/@aws-sdk/client-textract@3.321.1, npm/@aws-sdk/s3-request-presigner@3.282.0, npm/@types/jest@29.5.0, npm/@typescript-eslint/eslint-plugin@5.57.0, npm/@typescript-eslint/parser@5.57.0, npm/@vercel/ncc@0.34.0, npm/aws-sdk@2.1511.0, npm/eslint-config-prettier@8.8.0, npm/eslint-plugin-jest@27.2.1, npm/eslint-plugin-prettier@4.2.1, npm/eslint@8.37.0, npm/harperive@2.0.1

View full report↗︎

@socket-security Socket Security
Copy link

socket-security bot commented Mar 13, 2024 •
edited

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert Package NoteSource
Install scripts npm/core-js-pure@3.24.1
  • Install script: postinstall
  • Source: node -e "try{require('./postinstall')}catch(e){}"
Install scripts npm/core-js@3.24.1
  • Install script: postinstall
  • Source: node -e "try{require('./postinstall')}catch(e){}"

View full report↗︎

Next steps

What is an install script?

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/foo@1.0.0 or ignore all packages with @SocketSecurity ignore-all

  • @SocketSecurity ignore npm/core-js-pure@3.24.1
  • @SocketSecurity ignore npm/core-js@3.24.1

@akshaysasidrn akshaysasidrn removed the run-cypress Cypress E2E action label Mar 13, 2024
@akshaysasidrn akshaysasidrn changed the title Release: Marketplace 1.7 Release: Marketplace 1.7 (v2.33.0) Mar 13, 2024
@akshaysasidrn akshaysasidrn added the run-cypress Cypress E2E action label Mar 13, 2024
@akshaysasidrn akshaysasidrn added run-cypress Cypress E2E action suspend-review-app and removed run-cypress Cypress E2E action labels Mar 13, 2024
ajith-k-v and others added 2 commits March 14, 2024 13:08
@ajith-k-v
Modify platform cypress config (#9080)
82da1f0 
* Modify platform cypress config

* Update config

* Rename happy path folder

* Modify group duplication spec
@Mekhla-Asopa
Modified marketplace cypress config (#9084)
3bcba8c 
* modify marketplace config

* updated mysql database name and port value
@akshaysasidrn akshaysasidrn merged commit 641f884 into main Mar 14, 2024
4 of 7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@sherfin94 sherfin94 sherfin94 approved these changes

Assignees
No one assigned
Labels
run-ci CI is run only when this label is added run-cypress Cypress E2E action run-cypress-marketplace
Projects
None yet
Milestone
Marketplace 1.7
Development

Successfully merging this pull request may close these issues.

None yet