Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump spock-core from 1.3-groovy-2.5 to 2.3-groovy-2.5 #8119

Merged
merged 2 commits into from
Jun 16, 2023

Conversation

kartg
Copy link
Member

@kartg kartg commented Jun 16, 2023

Description

This patches CVE-2020-15250

Related Issues

N/A

Check List

  • New functionality includes testing.
    • All tests pass
  • New functionality has been documented.
    • New functionality has javadoc added
  • Commits are signed per the DCO using --signoff
  • Commit changes are listed out in CHANGELOG.md file (See: Changelog)

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

This patches CVE-2020-15250

Signed-off-by: Kartik Ganesh <gkart@amazon.com>
@kartg
Copy link
Member Author

kartg commented Jun 16, 2023

@reta just FYI, i'm gonna update this to bump the version to 2.3. I noticed that i didn't trigger a backport for #5315 so i'll also create a similar PR for 2.x

@github-actions
Copy link
Contributor

Gradle Check (Jenkins) Run Completed with:

@github-actions
Copy link
Contributor

Gradle Check (Jenkins) Run Completed with:

@codecov
Copy link

codecov bot commented Jun 16, 2023

Codecov Report

Merging #8119 (1d4bfba) into 1.x (b00c84d) will increase coverage by 0.04%.
The diff coverage is n/a.

@@             Coverage Diff              @@
##                1.x    #8119      +/-   ##
============================================
+ Coverage     77.58%   77.62%   +0.04%     
- Complexity    58784    58849      +65     
============================================
  Files          4223     4223              
  Lines        253545   253545              
  Branches      38714    38714              
============================================
+ Hits         196709   196821     +112     
+ Misses        40834    40767      -67     
+ Partials      16002    15957      -45     

see 441 files with indirect coverage changes

CHANGELOG.md Outdated Show resolved Hide resolved
Signed-off-by: Kartik Ganesh <gkart@amazon.com>
@kartg kartg dismissed kotwanikunal’s stale review June 16, 2023 20:15

Feedback incorporated

@github-actions
Copy link
Contributor

Gradle Check (Jenkins) Run Completed with:

@github-actions
Copy link
Contributor

Gradle Check (Jenkins) Run Completed with:

@reta reta merged commit 70aa15b into opensearch-project:1.x Jun 16, 2023
8 checks passed
@kartg kartg added the backport 1.3 Backport to 1.3 branch label Jun 16, 2023
kartg added a commit to kartg/OpenSearch that referenced this pull request Jun 16, 2023
…ject#8119)

* Bump spock-core from 1.3-groovy-2.5 to 2.3-groovy-2.5

This patches CVE-2020-15250

Signed-off-by: Kartik Ganesh <gkart@amazon.com>

* Added CHANGELOG

Signed-off-by: Kartik Ganesh <gkart@amazon.com>

---------

Signed-off-by: Kartik Ganesh <gkart@amazon.com>
(cherry picked from commit 70aa15b)
@kartg kartg changed the title Bump spock-core from 1.3-groovy-2.5 to 2.1-groovy-2.5 Bump spock-core from 1.3-groovy-2.5 to 2.3-groovy-2.5 Jun 16, 2023
kartg added a commit that referenced this pull request Jun 16, 2023
* Bump spock-core from 1.3-groovy-2.5 to 2.3-groovy-2.5

This patches CVE-2020-15250

Signed-off-by: Kartik Ganesh <gkart@amazon.com>

* Added CHANGELOG

Signed-off-by: Kartik Ganesh <gkart@amazon.com>

---------

Signed-off-by: Kartik Ganesh <gkart@amazon.com>
(cherry picked from commit 70aa15b)
@kartg kartg deleted the spock-core-update-1x branch June 20, 2023 19:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
backport 1.3 Backport to 1.3 branch
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants