-
Notifications
You must be signed in to change notification settings - Fork 4
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Bom #147
Bom #147
Conversation
Codecov Report
@@ Coverage Diff @@
## main #147 +/- ##
=========================================
Coverage 57.57% 57.57%
Complexity 264 264
=========================================
Files 91 91
Lines 1445 1445
Branches 42 42
=========================================
Hits 832 832
Misses 583 583
Partials 30 30
Flags with carried forward coverage won't be shown. Click here to find out more. 📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more |
io.grpc:grpc-api:1.57.2=runtimeClasspath | ||
io.grpc:grpc-bom:1.57.2=compileClasspath,runtimeClasspath | ||
io.grpc:grpc-context:1.57.2=runtimeClasspath | ||
io.grpc:grpc-core:1.57.2=runtimeClasspath |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This could be tangential but does this grpc version have the fix for RST stream vulnerability?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
transport level concern, but netty does as of 100:
https://netty.io/news/2023/10/10/4-1-100-Final.html
we constrain to at least that version via the BOM (see
hypertrace-core-graphql-service/gradle.lockfile lines 55-66)
Description
Migrate project to use common BOM