Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SNOW-1165817 SNOW-1165815 Update vulnerable dependencies #693

Merged
merged 4 commits into from
Feb 29, 2024

Conversation

sfc-gh-lsembera
Copy link
Contributor

@sfc-gh-lsembera sfc-gh-lsembera commented Feb 28, 2024

Fix PR updates two vulnerable dependencies found by Snyk.
Additional two depenencies are updated to satisfy the requireUpperBoundDeps enforcer rule.

Copy link
Contributor

@sfc-gh-tzhang sfc-gh-tzhang left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Could you run the new version with the long running tests to make sure it works? Also do we need to update the dependencies in e2e pom as well?

Copy link
Contributor

@sfc-gh-asen sfc-gh-asen left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

thank you

@sfc-gh-lsembera
Copy link
Contributor Author

@sfc-gh-lsembera sfc-gh-lsembera merged commit f594e64 into master Feb 29, 2024
14 checks passed
@sfc-gh-lsembera sfc-gh-lsembera deleted the lsembera/snyk branch February 29, 2024 18:14
This was referenced Feb 29, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants