Arvados

12/30/2024

10:20 PM Arvados Bug #22422 (Resolved): Update Go (and other) dependencies to address security issues

Applied in changeset commit:arvados|841d4dd7fe8d0559b675670d8edf0f24f8cf3c3f. Lucas Di Pentima

10:10 PM Arvados Bug #22422: Update Go (and other) dependencies to address security issues

Updates at commit:353a19e - branch @22422-dependencies-update@
Test run: https://ci.arvados.org/job/developer-run-te... Lucas Di Pentima

07:08 PM Arvados Bug #22422 (Resolved): Update Go (and other) dependencies to address security issues

Lucas Di Pentima

10:10 PM Arvados Revision 841d4dd7 (arvados): Merge branch '22422-dependencies-update'

closes #22422
Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas.dipentima@curii.com> Lucas Di Pentima

09:21 PM Arvados Revision 353a19e8 (arvados): 22422: Upgrades RailsAPI's dependencies to the latest versions

Addresses some potential security issues:
* actionpack: CVE-2024-47887, CVE-2024-41128, CVE-2024-54133
* actiomailer... Lucas Di Pentima

08:37 PM Arvados Revision 038e164f (arvados): 22422: Upgrades github.com/golang-jwt/jwt/v4 to address CVE-2024-51744

Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas.dipentima@curii.com> Lucas Di Pentima

08:08 PM Arvados Revision 9b8175bb (arvados): 22422: Upgrades golang.org/x/net to address CWE-770

Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas.dipentima@curii.com> Lucas Di Pentima

07:57 PM Arvados Revision 2cab128c (arvados): 22422: Upgrades golang.org/x/crypto to address CVE-2024-45337

Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas.dipentima@curii.com> Lucas Di Pentima

12/19/2024

02:12 PM Arvados Task #22310 (In Progress): Review

Lucas Di Pentima

12/17/2024

02:58 PM Arvados Bug #22400: broken paging logic causes arvados-dispatch-cloud to hang at startup while looking up spot prices

This LGTM, thanks. Lucas Di Pentima