Skip to content
This repository was archived by the owner on Dec 4, 2023. It is now read-only.

Conversation

@LeeParrishMSFT
Copy link
Contributor

@LeeParrishMSFT LeeParrishMSFT commented Jan 4, 2022

#minor

Additional security updates for log4j consisting of the following updates:

Update log4j to version 2.17.1.
Update spring-core to version 5.3.14
Update spring-boot to version 2.6.2
Minor fix for #1404 to put correct SDK version in UserAgent string.

dependabot bot and others added 5 commits January 4, 2022 14:45
Bumps log4j-core from 2.17.0 to 2.17.1.

---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps log4j-api from 2.17.0 to 2.17.1.

---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-api
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Update to pick up correct SDK version

* Fix unit test in QnAMaker and spelling in comment.

Co-authored-by: Gabo Gilabert <gabog@users.noreply.github.com>
Bump log4j-core from 2.17.0 to 2.17.1 (#1406)

Bumps log4j-core from 2.17.0 to 2.17.1.

---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Gabo Gilabert <gabog@users.noreply.github.com>
Copy link
Member

@tracyboehrer tracyboehrer left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We'll probably want those user agents changes in main.

@tracyboehrer tracyboehrer merged commit 423349e into 4.14 Jan 5, 2022
@tracyboehrer tracyboehrer deleted the lparrish/4.14.2 branch January 5, 2022 16:56
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants