Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update undici dependency to 5.8.24 due to CVE-2024-30260. #8138

Merged
merged 1 commit into from Apr 8, 2024
Merged

Update undici dependency to 5.8.24 due to CVE-2024-30260. #8138

merged 1 commit into from Apr 8, 2024

Conversation

DellaBitta
Copy link
Contributor

@DellaBitta DellaBitta commented Apr 7, 2024 •
edited

Discussion

Update our undici dependency to 5.8.24 due to CVE-2024-30260.

Fixes #8132.

Testing

CI.

API Changes

N/A.

@changeset-bot changeset-bot
Copy link

changeset-bot bot commented Apr 7, 2024

🦋 Changeset detected

Latest commit: b985462

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 9 packages
Name Type
@firebase/auth-compat Patch
@firebase/firestore Patch
@firebase/functions Patch
@firebase/storage Patch
@firebase/auth Patch
firebase Patch
@firebase/storage-compat Patch
@firebase/firestore-compat Patch
@firebase/functions-compat Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@google-oss-bot
Copy link
Contributor

Size Report 1

Affected Products

No changes between base commit (b64b947) and merge commit (2e2b1d3).

Test Logs

  1. https://storage.googleapis.com/firebase-sdk-metric-reports/Uo9c2ew7f2.html

@google-oss-bot
Copy link
Contributor

Size Analysis Report 1

Affected Products

No changes between base commit (b64b947) and merge commit (2e2b1d3).

Test Logs

  1. https://storage.googleapis.com/firebase-sdk-metric-reports/V3qfFAGpPv.html

@DellaBitta DellaBitta marked this pull request as ready for review April 7, 2024 20:37
hsubox76
hsubox76 approved these changes Apr 8, 2024
View reviewed changes
Copy link
Contributor

@hsubox76 hsubox76 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for staying on top of this!

@DellaBitta DellaBitta merged commit fe09d83 into master Apr 8, 2024
44 checks passed
@DellaBitta DellaBitta deleted the ddb-undici-update-april-24 branch April 8, 2024 17:33
@google-oss-bot google-oss-bot mentioned this pull request Apr 9, 2024
Merged
@firebase firebase locked and limited conversation to collaborators May 9, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Reviewers

@hsubox76 hsubox76 hsubox76 approved these changes

@lisajian lisajian Awaiting requested review from lisajian lisajian is a code owner

@Xiaoshouzi-gh Xiaoshouzi-gh Awaiting requested review from Xiaoshouzi-gh Xiaoshouzi-gh is a code owner

@renkelvin renkelvin Awaiting requested review from renkelvin

@sam-gc sam-gc Awaiting requested review from sam-gc sam-gc is a code owner

@zwu52 zwu52 Awaiting requested review from zwu52 zwu52 is a code owner

@maneesht maneesht Awaiting requested review from maneesht maneesht is a code owner

@tonyjhuang tonyjhuang Awaiting requested review from tonyjhuang tonyjhuang is a code owner

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

Update dependency undici
3 participants
@DellaBitta @google-oss-bot @hsubox76