Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fix(vulnerability): Remove fixed version of postgres dependency to accommodate safer version from kork. #1052

Merged
merged 2 commits into from
Aug 4, 2021
Merged

fix(vulnerability): Remove fixed version of postgres dependency to accommodate safer version from kork. #1052

merged 2 commits into from
Aug 4, 2021

Conversation

j-sandy
Copy link
Contributor

@j-sandy j-sandy commented Aug 4, 2021

@j-sandy
Copy link
Contributor Author

j-sandy commented Aug 4, 2021

./gradlew front50-sql:dependencyInsight --dependency org.postgresql --configuration testRuntimeClasspath

org.postgresql:postgresql:42.2.13
\--- io.spinnaker.kork:kork-bom:7.114.0
     +--- testRuntimeClasspath
     +--- project :front50-core
     |    \--- testRuntimeClasspath
     +--- project :front50-api
     |    +--- testRuntimeClasspath
     |    \--- project :front50-core (*)
     +--- project :front50-sql-mysql
     |    \--- testRuntimeClasspath
     \--- project :front50-sql-postgres
          \--- testRuntimeClasspath

org.postgresql:postgresql -> 42.2.13
+--- testRuntimeClasspath
\--- project :front50-sql-postgres
     \--- testRuntimeClasspath

@dbyron-sf dbyron-sf added the ready to merge Approved and ready for merge label Aug 4, 2021
@mergify mergify bot merged commit 1e15b24 into spinnaker:master Aug 4, 2021
@mergify mergify bot added the auto merged label Aug 4, 2021
@j-sandy j-sandy deleted the postgresql-cve-fix branch August 4, 2021 16:36
@j-sandy j-sandy mentioned this pull request Aug 25, 2021
Closed
3 tasks
pemmasanikrishna pushed a commit to pemmasanikrishna/front50 that referenced this pull request Sep 21, 2021
@j-sandy
fix(vulnerability): Remove fixed version of postgres dependency to ac…
a0e2d39 
…commodate safer version from kork. (spinnaker#1052)

* fix(vulnerability): Remove fixed version of postgres dependency to accommodate safer version from kork.
CVE-2020-13692

* Removed redundant comment

Co-authored-by: j-sandy <jsandy>
@j-sandy j-sandy mentioned this pull request Mar 31, 2022
Closed
6 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@dbyron-sf dbyron-sf dbyron-sf approved these changes

Assignees
No one assigned
Labels
auto merged ready to merge Approved and ready for merge target-release/1.27
Projects
None yet
Milestone
No milestone
3 participants
@j-sandy @dbyron-sf @spinnakerbot