Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

*: bump some dependencies for release-6.5 hot patch #57271

Closed

Conversation

bb7133
Copy link
Member

@bb7133 bb7133 commented Nov 11, 2024

What problem does this PR solve?

Issue Number: NA

Problem Summary:

What changed and how does it work?

The change is made for the following dependencies to prevent some potential security vulnerabilities:

  • google.golang.org/grpc v1.51.0 -> v1.59.0
  • github.com/lestrrat-go/jwx/v2 v2.0.17 -> v2.0.21
  • golang.org/x/crypto v0.15.0 -> v0.24.0
  • golang.org/x/net v0.18.0 -> v0.26.0
  • google.golang.org/protobuf v1.28.1 -> v1.33.0

Check List

Tests

  • Unit test
  • Integration test
  • Manual test (add detailed scripts or steps below)
  • No need to test
    • I checked and no code files have been changed.

Side effects

  • NA

Documentation

  • NA

Release note

Please refer to Release Notes Language Style Guide to write a quality release note.

None

ti-chi-bot and others added 30 commits January 8, 2024 10:24
ti-chi-bot and others added 24 commits September 4, 2024 02:58
@bb7133 bb7133 requested a review from a team as a code owner November 11, 2024 04:12
@ti-chi-bot ti-chi-bot bot added release-note-none Denotes a PR that doesn't merit a release note. size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files. labels Nov 11, 2024
Copy link

ti-chi-bot bot commented Nov 11, 2024

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please ask for approval from bb7133, ensuring that each of them provides their approval before proceeding. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

Copy link

ti-chi-bot bot commented Nov 11, 2024

@bb7133: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
idc-jenkins-ci-tidb/unit-test 44c0793 link true /test unit-test
idc-jenkins-ci-tidb/build 44c0793 link true /test build
idc-jenkins-ci-tidb/mysql-test 44c0793 link true /test mysql-test
idc-jenkins-ci-tidb/check_dev_2 44c0793 link true /test check-dev2

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

@bb7133 bb7133 closed this Nov 11, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
release-note-none Denotes a PR that doesn't merit a release note. size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.