Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Updates to deps for 43 #24666

Merged
merged 2 commits into from
Aug 8, 2022
Merged

Updates to deps for 43 #24666

merged 2 commits into from
Aug 8, 2022

Conversation

rlotun
Copy link
Contributor

@rlotun rlotun commented Aug 8, 2022

Some embedding customers are still on 43 and benefit from some of the dependency bumps made on 44 related to deps that flag for security issues. Though they're no known vulnerabilities in Metabase itself, many customers have infosec policies that require security scans to pass on software they're embedding in their product.

Two specific cherry-picks: bumping have to 3.1.3 and jetty-server to 9.4.48.

@rlotun rlotun requested review from dpsutton and a team August 8, 2022 16:18
@codecov
Copy link

codecov bot commented Aug 8, 2022

Codecov Report

Merging #24666 (58ed35c) into release-x.43.x (7bc9fcc) will increase coverage by 0.00%.
The diff coverage is n/a.

@@               Coverage Diff               @@
##           release-x.43.x   #24666   +/-   ##
===============================================
  Coverage           64.46%   64.47%           
===============================================
  Files                2434     2434           
  Lines               80533    80533           
  Branches             9865     9865           
===============================================
+ Hits                51915    51920    +5     
+ Misses              24542    24537    -5     
  Partials             4076     4076           
Flag Coverage Δ
back-end 85.99% <ø> (+0.01%) ⬆️
front-end 44.21% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

Impacted Files Coverage Δ
src/metabase/task/sync_databases.clj 80.55% <0.00%> (+3.47%) ⬆️

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

@rlotun rlotun merged commit 7a895ac into release-x.43.x Aug 8, 2022
@rlotun rlotun deleted the 43_deps_bump branch August 8, 2022 17:07
@rlotun rlotun added this to the 0.43.5 milestone Aug 8, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants