-
Notifications
You must be signed in to change notification settings - Fork 1.4k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Bump cryptography and orjson #17054
Bump cryptography and orjson #17054
Conversation
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files
Flags with carried forward coverage won't be shown. Click here to find out more. |
Test Results 32 files 32 suites 21m 37s ⏱️ Results for commit 8e6466b. ♻️ This comment has been updated with latest results. |
Signed-off-by: Vivekanand Ilango <vivekanand.ilango@datadoghq.com>
08b2d66
to
8e6466b
Compare
The backport to
To backport manually, run these commands in your terminal: # Fetch latest updates from GitHub
git fetch
# Create a new working tree
git worktree add .worktrees/backport-7.52.x 7.52.x
# Navigate to the new working tree
cd .worktrees/backport-7.52.x
# Create a new branch
git switch --create backport-17054-to-7.52.x
# Cherry-pick the merged commit of this pull request and resolve the conflicts
git cherry-pick -x --mainline 1 2966389860a17128ffc6fec0b1e292c6d01a221f
# Push it to GitHub
git push --set-upstream origin backport-17054-to-7.52.x
# Go back to the original working tree
cd ../..
# Delete the working tree
git worktree remove .worktrees/backport-7.52.x Then, create a pull request where the |
* bump cryptography * Bump orjson to 3.9.15 for addressing CVE-2024-27454 Signed-off-by: Vivekanand Ilango <vivekanand.ilango@datadoghq.com> * changelogs * changelogs --------- Signed-off-by: Vivekanand Ilango <vivekanand.ilango@datadoghq.com> Co-authored-by: Vivekanand Ilango <vivekanand.ilango@datadoghq.com>
What does this PR do?
Bump cryptography and orjson
Motivation
To fix CVE. We are deprecating Centos 6 so we can bump them
Additional Notes
Build dependencies / Target linux-x86_64 on ubuntu-22.04
will be red because it still uses centos 6Review checklist (to be filled by reviewers)
qa/skip-qa
label if the PR doesn't need to be tested during QA.