Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Backport 1.3] Bump BouncyCastle from jdk15on to jdk15to18 (#8349) #8364

Closed

Conversation

willyborankin
Copy link
Contributor

Backport c8a63ba from #8349

reta and others added 30 commits December 14, 2021 12:19
…#1723)

Signed-off-by: Andriy Redko <andriy.redko@aiven.io>
Signed-off-by: Sarat Vemulapalli <vemulapallisarat@gmail.com>
…ations (opensearch-project#1740)

* [plugin] repository-azure is not working properly hangs on basic operations

Signed-off-by: Andriy Redko <andriy.redko@aiven.io>

* Added tests cases and TODO items, addressing code review comments

Signed-off-by: Andriy Redko <andriy.redko@aiven.io>
Signed-off-by: dblock <dblock@dblock.org>
…#1727) (opensearch-project#1766)

* Updating .gitattributes for additional types

Signed-off-by: Sarat Vemulapalli <vemulapallisarat@gmail.com>
opensearch-project#1718) (opensearch-project#1780)

* Fixing allocation filters to persist existing state on settings update

Signed-off-by: Ankit Jain <jain.ankitk@gmail.com>

* Adding test for filter settings update

Signed-off-by: Ankit Jain <jain.ankitk@gmail.com>

* Adding more tests and review comments

Signed-off-by: Ankit Jain <jain.ankitk@gmail.com>

* Adding assertion and unit test for operation type mismatch

Signed-off-by: Ankit Jain <jain.ankitk@gmail.com>

* Updating test names

Signed-off-by: Ankit Jain <jain.ankitk@gmail.com>
…arch-project#1782)

This unit test asserts that a SHA file for a groovy dependency gets
created. However, a SHA file for javaparser-core also gets created in
the same directory. For some reason, builds were failing on my machine
because `Files::list` was returning the javaparser-core file first. I
don't believe there are any ordering guarantees with that API, so I
relaxed the assertion to not depend on ordering.

Signed-off-by: Andrew Ross <andrross@amazon.com>
…opensearch-project#1784)

I previously added a helper that started a MockLogAppender to ensure it
was never added to a Logger before it was started. I subsequently found
the opposite case in RolloverIT.java where the appender was stopped
before it was closed, therefore creating a race where a concurrently
running test in the same JVM could cause a logging failure. This seems
like a really easy mistake to make when writing a test or introduce when
refactoring a test. I've made a change to use try-with-resources to
ensure that proper setup and teardown is done. This should make it much
harder to introduce this particular test bug in the future.
Unfortunately, it did involve touching a lot of files. The changes here
are purely structural to leverage try-with-resources; no testing logic
has been changed.

Signed-off-by: Andrew Ross <andrross@amazon.com>
Signed-off-by: Rabi Panda <adnapibar@gmail.com>
…te/response/read timeouts (opensearch-project#1789) (opensearch-project#1802)

* [plugin] repository-azure: add configuration settings for connect/write/response/read timeouts

Signed-off-by: Andriy Redko <andriy.redko@aiven.io>

* Addressing code review comments: renaming connectionXxx to connectXxx

Signed-off-by: Andriy Redko <andriy.redko@aiven.io>

* Addressing code review comments: adding timeout comment

Signed-off-by: Andriy Redko <andriy.redko@aiven.io>
…Docker under 'root' user (opensearch-project#1726) (opensearch-project#1775)

Signed-off-by: Andriy Redko <andriy.redko@aiven.io>
…1822)

Signed-off-by: Andriy Redko <andriy.redko@aiven.io>
…msec) (opensearch-project#1827)

Signed-off-by: Andriy Redko <andriy.redko@aiven.io>
…-project#1835)

Signed-off-by: Sarat Vemulapalli <vemulapallisarat@gmail.com>
…project#1834)

Signed-off-by: Sarat Vemulapalli <vemulapallisarat@gmail.com>
…1842)

* Update junit to 4.13.1

Signed-off-by: Ashish Agrawal <ashisagr@amazon.com>

* update junit to 4.13.2

Signed-off-by: Ashish Agrawal <ashisagr@amazon.com>

* update SHA1 file

Signed-off-by: Ashish Agrawal <ashisagr@amazon.com>
…opensearch-project#1757)

* [Remove] Remaining Flavor Serialization (opensearch-project#1751)

This commit removes unnecessary serialization of unused flavor variable in build
metadata from V_1_3_0+

Signed-off-by: Nicholas Walter Knize <nknize@apache.org>

* change flavor version check to V_1_3_0

This commit changes the flavor serialization check in Build from V_2_0_0 to
V_1_3_0.

Signed-off-by: Nicholas Walter Knize <nknize@apache.org>
…pensearch-project#1886)

* Update bc-fips to 1.0.2.1

Signed-off-by: Tianli Feng <ftl94@live.com>

* Update bcpg-fips to 1.0.5.1

Signed-off-by: Tianli Feng <ftl94@live.com>

* Update bctls-fips to 1.0.12.2

Signed-off-by: Tianli Feng <ftl94@live.com>

* Use the unified bouncycastle version for bcpkix-jdk15on in HDFS testing fixture

Signed-off-by: Tianli Feng <ftl94@live.com>
…arch-project#1892)

On February 3 2021, JFrog [announced](https://jfrog.com/blog/into-the-sunset-bintray-jcenter-gocenter-and-chartcenter/) the shutdown of JCenter. Later on April 27 2021, an update was provided that the repository will only be read only and new package and versions are no longer accepted on JCenter.  This means we should no longer use JCenter for our central artifacts repository.

This change replaces JCenter with Maven Central as per the Gradle recommendation - https://blog.gradle.org/jcenter-shutdown

Signed-off-by: Rabi Panda <adnapibar@gmail.com>
Signed-off-by: Marc Handalian <handalm@amazon.com>

Co-authored-by: Rabi Panda <adnapibar@gmail.com>
…st failure (opensearch-project#1900) (opensearch-project#1906)

Attempt to fix o.o.transport.netty4.OpenSearchLoggingHandlerIT fails w/ stack overflow by
hardening test expectation patterns in regex patterns

Signed-off-by: Andriy Redko <andriy.redko@aiven.io>
… (opensearch-project#1911)

This commit restructures InboundHandler to ensure all data 
is consumed over the wire.

Signed-off-by: Andriy Redko <andriy.redko@aiven.io>
…IPv6WithScopeIdInput (opensearch-project#1913) (opensearch-project#1914)

Signed-off-by: Andriy Redko <andriy.redko@aiven.io>
…#1662) (opensearch-project#1663)

In preparation for removing all LegacyESVersion support by 3.0; this commit
largely refactors the LegacyESVersion test logic from the OpenSearch Version
test logic into an independent test class. This PR also updates Version.fromString
to ensure a proper legacy version is returned when major is > 3 (to support
legacy yaml test and build scripts).

Note that bwc w/ legacy versions are still supported so some cross compatibility
testing is retained in the Version test class.

Signed-off-by: Nicholas Walter Knize <nknize@apache.org>
…ject#1915)

Add the ability for plugin authors to add custom sort builders.

Signed-off-by: Matt Weber <matt@mattweber.org>
…roject#1923)

Add and clarify some search plugin point documentation.

Signed-off-by: Matt Weber <matt@mattweber.org>
…Use JDK-17 as bundled JDK distribution to run tests (opensearch-project#1922)

Signed-off-by: Andriy Redko <andriy.redko@aiven.io>
kartg and others added 6 commits June 20, 2023 10:09
…nsearch-project#8160) (opensearch-project#8161)

* Bump json-smart from 2.4.7 to 2.4.11 in plugins/repository-hdfs/

This mirrors similar changes made to the main and 2.x branches - opensearch-project#6944, opensearch-project#7812

Signed-off-by: Kartik Ganesh <gkart@amazon.com>

* Added changelog entry

Signed-off-by: Kartik Ganesh <gkart@amazon.com>

---------

Signed-off-by: Kartik Ganesh <gkart@amazon.com>
(cherry picked from commit 926b69c)
…) (opensearch-project#8225)

(cherry picked from commit 1cf9c5c)

Signed-off-by: Andriy Redko <andriy.redko@aiven.io>
…search-project#8233) (opensearch-project#8234)

Signed-off-by: Andriy Redko <andriy.redko@aiven.io>
(cherry picked from commit c751171)

Co-authored-by: Andriy Redko <andriy.redko@aiven.io>
…project#8318)

(cherry picked from commit 3a1dd3a)

Signed-off-by: Owais Kazi <owaiskazi19@gmail.com>
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Signed-off-by: Owais Kazi <owaiskazi19@gmail.com>
…h-project#8247) (opensearch-project#8349)

jdk15on are not supported anymore since based development was moved from jsk15on to jdk18on.

jdk15to18 contains fixed for:
- CVE-2023-33201
- CVE-2022-45146

(cherry picked from commit 9856cb7)

Signed-off-by: Andrey Pleskach <ples@aiven.io>
(cherry picked from commit c8a63ba)
Signed-off-by: Andrey Pleskach <ples@aiven.io>
@github-actions
Copy link
Contributor

Gradle Check (Jenkins) Run Completed with:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.