Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Security] Upgrade next to 14.2.3 #1369

Merged
merged 4 commits into from
May 17, 2024
Merged

[Security] Upgrade next to 14.2.3 #1369

merged 4 commits into from
May 17, 2024

Conversation

anafilipadealmeida
Copy link
Contributor

@anafilipadealmeida anafilipadealmeida commented May 17, 2024 •
edited

Description

  • Upgrade next to 14.2.3 to address CWE-918 vulnerability.

Motivation

CWE-918: Solves https://cwe.mitre.org/data/definitions/918.html high security vulnerability flagged by dependabot
https://github.com/inngest/inngest/security/dependabot/126

Type of change (choose one)

  • Chore (refactors, upgrades, etc.)
  • Bug fix (non-breaking change that fixes an issue)
  • Security fix (non-breaking change that fixes a potential vulnerability)
  • Docs
  • New feature (non-breaking change that adds functionality)
  • Breaking change (fix or feature that would cause existing functionality not to work as expected)

Checklist

  • I've linked any associated issues to this PR.
  • I've tested my own changes.

Check our Pull Request Guidelines

@vercel Vercel
Copy link

vercel bot commented May 17, 2024 •
edited

The latest updates on your projects. Learn more about Vercel for Git ↗︎

1 Ignored Deployment
Name Status Preview Comments Updated (UTC)
ui ⬜️ Ignored (Inspect) Visit Preview May 17, 2024 7:42pm

@anafilipadealmeida anafilipadealmeida changed the title Upgrade next to 14.2.3 [Security] Upgrade next to 14.2.3 May 17, 2024
@anafilipadealmeida anafilipadealmeida marked this pull request as ready for review May 17, 2024 19:34
@anafilipadealmeida anafilipadealmeida merged commit c9ecb28 into main May 17, 2024
13 checks passed
@anafilipadealmeida anafilipadealmeida deleted the ana/upgrade-next branch May 17, 2024 19:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@darwin67 darwin67 darwin67 approved these changes

@goodoldneon goodoldneon Awaiting requested review from goodoldneon goodoldneon is a code owner

@djfarrelly djfarrelly Awaiting requested review from djfarrelly djfarrelly is a code owner

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
2 participants
@anafilipadealmeida @darwin67