From fa26184a62e96093c27b84ca436dfe4af64ba726 Mon Sep 17 00:00:00 2001 From: Nik Frunza Date: Thu, 5 Dec 2019 18:17:23 -0500 Subject: [PATCH] BE-716 v1.0.0-rc2 release (#63) Signed-off-by: nfrunza --- CHANGELOG.md | 12 ++++ README.md | 1 + release_notes/v1.0.0-rc2.md | 129 ++++++++++++++++++++++++++++++++++++ 3 files changed, 142 insertions(+) create mode 100644 release_notes/v1.0.0-rc2.md diff --git a/CHANGELOG.md b/CHANGELOG.md index 0085974cc..d0470b6e5 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,15 @@ +## v1.0.0-rc2 + +* [d754835](https://github.com/hyperledger/blockchain-explorer/commit/d754835) Be 711 code quality (#62) +* [db55e92](https://github.com/hyperledger/blockchain-explorer/commit/db55e92) [BE-702](https://jira.hyperledger.org/browse/BE-702) Update documents, azure (#60) +* [621a12a](https://github.com/hyperledger/blockchain-explorer/commit/621a12a) [BE-713](https://jira.hyperledger.org/browse/BE-713) Fix an issue to fail detecting newly added channel (#59) +* [5b8ec0b](https://github.com/hyperledger/blockchain-explorer/commit/5b8ec0b) [BE-710](https://jira.hyperledger.org/browse/BE-710) Security vulnerability (#57) +* [7f889ff](https://github.com/hyperledger/blockchain-explorer/commit/7f889ff) [BE-708](https://jira.hyperledger.org/browse/BE-708) Online docs issues (#56) +* [6367cee](https://github.com/hyperledger/blockchain-explorer/commit/6367cee) [BE-709](https://jira.hyperledger.org/browse/BE-709) Add code coverage report to AZP +* [27f06a2](https://github.com/hyperledger/blockchain-explorer/commit/27f06a2) [BE-708](https://jira.hyperledger.org/browse/BE-708) Online docs issues (#54) +* [c6bd828](https://github.com/hyperledger/blockchain-explorer/commit/c6bd828) [BE-708](https://jira.hyperledger.org/browse/BE-708)Jenkins is no longer used +* [a790ef3](https://github.com/hyperledger/blockchain-explorer/commit/a790ef3) [BE-708](https://jira.hyperledger.org/browse/BE-708) Update build status badge (#52) + ## v1.0.0-rc1 * [5b89717](https://github.com/hyperledger/blockchain-explorer/commit/5b89717) [BE-706](https://jira.hyperledger.org/browse/BE-706) Switching to GitHub diff --git a/README.md b/README.md index 7151637d7..4567d8cb1 100644 --- a/README.md +++ b/README.md @@ -54,6 +54,7 @@ Hyperledger Explorer is a simple, powerful, easy-to-use, well maintained, open s | Hyperledger Explorer Version | Fabric Version Supported | NodeJS Version Supported | | -- | -- | -- | +| [v1.0.0-rc2](release_notes/v1.0.0-rc2.md) (Dec 5, 2019) | [v1.4.0-v1.4.4](https://hyperledger-fabric.readthedocs.io/en/release-1.4) | [8.11.x](https://nodejs.org/en/download/releases) | | [v1.0.0-rc1](release_notes/v1.0.0-rc1.md) (Nov 18, 2019) | [v1.4.2](https://hyperledger-fabric.readthedocs.io/en/release-1.4) | [8.11.x](https://nodejs.org/en/download/releases) | | [v0.3.9.5](release_notes/v0.3.9.5.md) (Sep 8, 2019) | [v1.4.2](https://hyperledger-fabric.readthedocs.io/en/release-1.4) | [8.11.x](https://nodejs.org/en/download/releases) | | [v0.3.9.4](release_notes/v0.3.9.4.md) (June 18, 2019) | [v1.4.1](https://hyperledger-fabric.readthedocs.io/en/release-1.4) | [8.11.x](https://nodejs.org/en/download/releases) | diff --git a/release_notes/v1.0.0-rc2.md b/release_notes/v1.0.0-rc2.md new file mode 100644 index 000000000..7da137976 --- /dev/null +++ b/release_notes/v1.0.0-rc2.md @@ -0,0 +1,129 @@ + + +## New Features + +* Support for HLFabric v1.4.0 - v1.4.4 + +## Bug Fixes and Updates + +* Fix an issue to fail detecting newly added channel +* Update packages +* Fix an issue to fail detecting newly added channel +* Online docs updates +* CI/CD, add code coverage report to Azure Pipeline +* CI/CD, code quality configuration + +## Known Vulnerabilities + +┌───────────────┬──────────────────────────────────────────────────────────────┐ +│ Moderate │ Denial of Service │ +├───────────────┼──────────────────────────────────────────────────────────────┤ +│ Package │ handlebars │ +├───────────────┼──────────────────────────────────────────────────────────────┤ +│ Dependency of │ nyc [dev] │ +├───────────────┼──────────────────────────────────────────────────────────────┤ +│ Path │ nyc > istanbul-reports > handlebars │ +├───────────────┼──────────────────────────────────────────────────────────────┤ +│ More info │ https://npmjs.com/advisories/1300 │ +└───────────────┴──────────────────────────────────────────────────────────────┘ + + +┌───────────────┬──────────────────────────────────────────────────────────────┐ +│ High │ Arbitrary Code Execution │ +├───────────────┼──────────────────────────────────────────────────────────────┤ +│ Package │ handlebars │ +├───────────────┼──────────────────────────────────────────────────────────────┤ +│ Dependency of │ nyc [dev] │ +├───────────────┼──────────────────────────────────────────────────────────────┤ +│ Path │ nyc > istanbul-reports > handlebars │ +├───────────────┼──────────────────────────────────────────────────────────────┤ +│ More info │ https://npmjs.com/advisories/1316 │ +└───────────────┴──────────────────────────────────────────────────────────────┘ + + +┌───────────────┬──────────────────────────────────────────────────────────────┐ +│ High │ Arbitrary Code Execution │ +├───────────────┼──────────────────────────────────────────────────────────────┤ +│ Package │ handlebars │ +├───────────────┼──────────────────────────────────────────────────────────────┤ +│ Dependency of │ nyc [dev] │ +├───────────────┼──────────────────────────────────────────────────────────────┤ +│ Path │ nyc > istanbul-reports > handlebars │ +├───────────────┼──────────────────────────────────────────────────────────────┤ +│ More info │ https://npmjs.com/advisories/1324 │ +└───────────────┴──────────────────────────────────────────────────────────────┘ + + +┌───────────────┬──────────────────────────────────────────────────────────────┐ +│ High │ Prototype Pollution │ +├───────────────┼──────────────────────────────────────────────────────────────┤ +│ Package │ handlebars │ +├───────────────┼──────────────────────────────────────────────────────────────┤ +│ Dependency of │ nyc [dev] │ +├───────────────┼──────────────────────────────────────────────────────────────┤ +│ Path │ nyc > istanbul-reports > handlebars │ +├───────────────┼──────────────────────────────────────────────────────────────┤ +│ More info │ https://npmjs.com/advisories/1325 │ +└───────────────┴──────────────────────────────────────────────────────────────┘ + +┌───────────────┬──────────────────────────────────────────────────────────────┐ +│ Moderate │ Denial of Service │ +├───────────────┼──────────────────────────────────────────────────────────────┤ +│ Package │ handlebars │ +├───────────────┼──────────────────────────────────────────────────────────────┤ +│ Dependency of │ react-scripts │ +├───────────────┼──────────────────────────────────────────────────────────────┤ +│ Path │ react-scripts > jest > jest-cli > @jest/core > │ +│ │ @jest/reporters > istanbul-reports > handlebars │ +├───────────────┼──────────────────────────────────────────────────────────────┤ +│ More info │ https://npmjs.com/advisories/1300 │ +└───────────────┴──────────────────────────────────────────────────────────────┘ + + +┌───────────────┬──────────────────────────────────────────────────────────────┐ +│ High │ Arbitrary Code Execution │ +├───────────────┼──────────────────────────────────────────────────────────────┤ +│ Package │ handlebars │ +├───────────────┼──────────────────────────────────────────────────────────────┤ +│ Dependency of │ react-scripts │ +├───────────────┼──────────────────────────────────────────────────────────────┤ +│ Path │ react-scripts > jest > jest-cli > @jest/core > │ +│ │ @jest/reporters > istanbul-reports > handlebars │ +├───────────────┼──────────────────────────────────────────────────────────────┤ +│ More info │ https://npmjs.com/advisories/1316 │ +└───────────────┴──────────────────────────────────────────────────────────────┘ + + +┌───────────────┬──────────────────────────────────────────────────────────────┐ +│ High │ Arbitrary Code Execution │ +├───────────────┼──────────────────────────────────────────────────────────────┤ +│ Package │ handlebars │ +├───────────────┼──────────────────────────────────────────────────────────────┤ +│ Dependency of │ react-scripts │ +├───────────────┼──────────────────────────────────────────────────────────────┤ +│ Path │ react-scripts > jest > jest-cli > @jest/core > │ +│ │ @jest/reporters > istanbul-reports > handlebars │ +├───────────────┼──────────────────────────────────────────────────────────────┤ +│ More info │ https://npmjs.com/advisories/1324 │ +└───────────────┴──────────────────────────────────────────────────────────────┘ + + +┌───────────────┬──────────────────────────────────────────────────────────────┐ +│ High │ Prototype Pollution │ +├───────────────┼──────────────────────────────────────────────────────────────┤ +│ Package │ handlebars │ +├───────────────┼──────────────────────────────────────────────────────────────┤ +│ Dependency of │ react-scripts │ +├───────────────┼──────────────────────────────────────────────────────────────┤ +│ Path │ react-scripts > jest > jest-cli > @jest/core > │ +│ │ @jest/reporters > istanbul-reports > handlebars │ +├───────────────┼──────────────────────────────────────────────────────────────┤ +│ More info │ https://npmjs.com/advisories/1325 │ +└───────────────┴──────────────────────────────────────────────────────────────┘ + + +## Resolved Vulnerabilities + +* Fixes to above security vulnerability applied + +