Project

General

Profile

Actions
Copy link

Bug #21933

closed

Upgrade dependencies with security reports in GitHub

Added by Lucas Di Pentima 5 months ago. Updated 5 months ago.

Status:
Resolved
Priority:
Normal
Assigned To:
Lucas Di Pentima
Category:
API
Target version:
Development 2024-07-03 sprint
Story points:
-
Release:
Arvados 3.0
Release relationship:
Auto
Actions
Copy link
 #1

Updated by Lucas Di Pentima 5 months ago

Updates at 1f1cbc1 - branch 21933-deps-upgrade
Test run: developer-run-tests: #4315

  • Upgrades github.com/hashicorp/go-retryablehttp to address CVE-2024-6104
  • Upgrades rails to 7.0.8.4 to address CVE-2024-28103
  • Replaces gopkg.in/square/go-jose.v2 with gopkg.in/go-jose/go-jose.v2 v2.6.3 to address CVE-2024-28180
Actions
Copy link
 #2

Updated by Lucas Di Pentima 5 months ago

  • Status changed from In Progress to Resolved
Actions
Copy link
 #3

Updated by Peter Amstutz 5 months ago

  • Release changed from 73 to 70
Actions
Copy link

Also available in: Atom PDF