Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fix: [RTD-2347] Fix high CVE on Logback and OpenSSL dependencies #382

Merged
merged 5 commits into from
Jan 25, 2024
Merged

fix: [RTD-2347] Fix high CVE on Logback and OpenSSL dependencies #382

merged 5 commits into from
Jan 25, 2024

Conversation

TommasoLencioni
Copy link
Contributor

@TommasoLencioni TommasoLencioni commented Jan 23, 2024 •
edited
Loading

Description

This PR proposes to bump dependencies to solve CVE.

List of Changes

Dependency Previous version Updated version
amazoncorretto 17.0.8-alpine3.18 17.0.10-alpine3.19
spring-boot-starter-parent 3.1.3 3.2.2
springframework-cloud 4.0.4 4.1.0

Motivation and Context

With this change we remove the currently found CVE.

How Has This Been Tested?

  • Unit Test Suite
  • Integration Test Suite
  • Load Tests

Types of changes

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Chore change (non-breaking change which doesn't provide a direct value to users)
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)

Checklist:

  • My change requires a change to the documentation.
  • I have updated the documentation accordingly.

@TommasoLencioni TommasoLencioni changed the base branch from master to develop January 24, 2024 10:30
@sonarqubecloud SonarQubeCloud
Copy link

Quality Gate Passed Quality Gate passed

Kudos, no new issues were introduced!

0 New issues
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarCloud

@TommasoLencioni TommasoLencioni marked this pull request as ready for review January 24, 2024 14:33
@TommasoLencioni TommasoLencioni changed the title fix: [RTD-2347] Fix high CVE fix: [RTD-2347] Fix high CVE on Logback and OpenSSL dependencies Jan 25, 2024
@TommasoLencioni TommasoLencioni merged commit 4b867ec into develop Jan 25, 2024
6 of 7 checks passed
@TommasoLencioni TommasoLencioni deleted the RTD-2347-fix-high-CVE branch January 25, 2024 13:10
@TommasoLencioni TommasoLencioni mentioned this pull request Jan 25, 2024
Merged
9 tasks
@github-actions GitHub Actions
Copy link

🎉 This PR is included in version 2.1.2 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@and-mora and-mora and-mora approved these changes

@GiovanniMancini GiovanniMancini Awaiting requested review from GiovanniMancini

@petretiandrea petretiandrea Awaiting requested review from petretiandrea

@lucaconsalvi lucaconsalvi Awaiting requested review from lucaconsalvi lucaconsalvi is a code owner

Assignees
No one assigned
Labels
released
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@TommasoLencioni @and-mora