Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Updated mockery because of vulnerabilities #878

Conversation

Roman-Shchukin
Copy link
Contributor

@Roman-Shchukin Roman-Shchukin commented Nov 1, 2022

Description:
Upgraded versions of mockery due to vulnerability

Changelog:

  • mockery version bumped up from 1.7.0 to 2.1.0
  • bumped up version of library

Documentation changes required: No

Added unit tests: No

Attached related issue: #874

@Roman-Shchukin Roman-Shchukin merged commit 1bed886 into releases/4.x Nov 2, 2022
KonstantinTyukalov added a commit that referenced this pull request Dec 2, 2022
* Migrating to Node 16 (#844)

* create new release/4.x branch

* release for 4 version

* update pipeline

* update package.json

* fix test and build commands

* fixed tests on node18

* change image version for linux

* fix test for linux

* add separete test for linux

* node v16.13

* add v16.13.0 to test

* test on windows-2022, macOS-11

* separate branch for node16

* remove temporary code

* update package.json

* changed pipeline

* updated pipeline

* Microsoft mandatory file (#839)

* Update pipeline to include a step for publishing artifacts. (#848) (#849)

* Update pipeline

* Update azure-pipelines.yml

* nodeversion as variable

* Added node16 to schema (#852)

Co-authored-by: Andrey Ivanov <v-andivanov@microsoft.com>

* bump version (#862)

Co-authored-by: Andrey Ivanov <v-andivanov@microsoft.com>

* Update ci-cd for publishing npm package (#863)

* fix npm publish

Co-authored-by: Andrey Ivanov <v-andivanov@microsoft.com>

* fix add registry (#864)

Co-authored-by: Andrey Ivanov <v-andivanov@microsoft.com>

* fix ToolRunner - _getSpawnSyncOptions (#873)

* Mockery version is updated from 1.7.0 to 2.1.0 because of vulnerability (#878)

* Fixed release path (#888)

* Improvement of the release condition (#889)

* Added test task with test condition. Negative test

* Added test task with test condition. Positive test

* Fix path

* Fix path

* Fix path

* Changed build.sourcebranchname -> build.sourcebranch and path to branch

* Fix path

* Version changed (#894)

* Pipeline fixing (#893)

* Token test

* Test token

* Publish test

* call order changed

* Nmp token syntax reverted

* Changed windows job

* Script clearing

* Uncommented condition

* Token changed

* Test - off publish condition

* Switched on publish condition

* Package version was reverted

* Add escape for more correct working

* Add changelog

* Update package-lock version

* Bump tl version to 4.1.0

* Update changelog

* Remove PS task lib changes from node changelog

* Update changelog for 4.0.1-preview

Co-authored-by: AndreyIvanov42 <93121155+AndreyIvanov42@users.noreply.github.com>
Co-authored-by: Andrey Ivanov <v-andivanov@microsoft.com>
Co-authored-by: Denis Rumyantsev <mr.denis.rumyantsev@gmail.com>
Co-authored-by: Roman-Shchukin <111063382+Roman-Shchukin@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

8 participants