Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump certifi to address CVE #889

Merged
merged 1 commit into from
Aug 22, 2023
Merged

Bump certifi to address CVE #889

merged 1 commit into from
Aug 22, 2023

Conversation

chmeliik
Copy link
Contributor

@chmeliik chmeliik commented Aug 17, 2023 •
edited by ben-alkov
Loading

GHSA-xqr8-7jwr-rhp7

Maintainers will complete the following section

  • Commit messages are descriptive enough
  • Code coverage from testing does not decrease and new code is covered
  • [n/a] New code has type annotations
  • [n/a] OpenAPI schema is updated (if applicable)
  • [n/a] DB schema change has corresponding DB migration (if applicable)
  • [n/a] README updated (if worker configuration changed, or if applicable)
  • [n/a] Draft release notes are updated before merging

@taylormadore
Copy link
Contributor

Something changed in the latest version of the npm package and is causing the npm-pack failures

@chmeliik
Copy link
Contributor Author

Well, I've filed a bug for npm npm/cli#6723

In the meantime, we probably need to figure out how to install npm <= 9.6.4 in the container

@chmeliik
Copy link
Contributor Author

In the meantime, we probably need to figure out how to install npm <= 9.6.4 in the container

Filed an issue in Jira

@chmeliik
Copy link
Contributor Author

nevermind, there's still 9.5.0 available in the f38 repos #890

@chmeliik chmeliik added this pull request to the merge queue Aug 22, 2023
Merged via the queue into containerbuildsystem:master with commit bc7dcba Aug 22, 2023
14 checks passed
@chmeliik chmeliik deleted the bump-certifi branch August 22, 2023 12:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@ben-alkov ben-alkov ben-alkov approved these changes

@taylormadore taylormadore taylormadore approved these changes

@brunoapimentel brunoapimentel Awaiting requested review from brunoapimentel

@lkolacek lkolacek Awaiting requested review from lkolacek

@fepas fepas Awaiting requested review from fepas

@ejegrova ejegrova Awaiting requested review from ejegrova

@slimreaper35 slimreaper35 Awaiting requested review from slimreaper35

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@chmeliik @taylormadore @ben-alkov