Skip to content

Conversation

@tysonkamp
Copy link
Contributor

The github application "semantic-pull-requests" uses a very old node version and presents security vulnerabilities. The repo manager has not addressed the issue and has become nonresponsive. Influxdata has its own solution based in github reusable workflows.

This change is org-wide to address security vulnerabilites in semantic-pull-requests, by removing it.

Closes #

Proposed Changes

Remove semantic-pull-requests. Add https://github.com/influxdata/validate-semantic-github-messages

Briefly describe your proposed changes:
'nuff said

Checklist

  • [n/a] CHANGELOG.md updated
  • [n/a] Rebased/mergeable
  • [n/a] A test has been added if appropriate
  • [n/a] Tests pass
  • [yes] Commit messages are in semantic format
  • [n/a] Sign CLA (if not already signed)

@tysonkamp tysonkamp requested a review from jacobmarble May 12, 2022 15:11
@tysonkamp tysonkamp self-assigned this May 12, 2022
@tysonkamp tysonkamp requested a review from bednar May 12, 2022 16:19
Copy link
Contributor

@bednar bednar left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for your PR 👍

@bednar bednar merged commit 9ea7eab into master May 12, 2022
@bednar bednar deleted the add-influx-semantic-validator branch May 12, 2022 18:33
@bednar bednar added this to the 1.29.0 milestone May 12, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants