Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: bump dependencies #23581

Merged
merged 4 commits into from
May 16, 2023
Merged

chore: bump dependencies #23581

merged 4 commits into from
May 16, 2023

Conversation

betodealmeida
Copy link
Member

SUMMARY

Bump a few dependencies dues to CVEs in them:

BEFORE/AFTER SCREENSHOTS OR ANIMATED GIF

N/A

TESTING INSTRUCTIONS

N/A

ADDITIONAL INFORMATION

  • Has associated issue:
  • Required feature flags:
  • Changes UI
  • Includes DB Migration (follow approval process in SIP-59)
    • Migration is atomic, supports rollback & is backwards-compatible
    • Confirm DB migration upgrade and downgrade tested
    • Runtime estimates and downtime expectations provided
  • Introduces new feature or API
  • Removes existing feature or API

@betodealmeida betodealmeida changed the title chore: bump dependencies chore: bump dependencies Apr 6, 2023
@tooptoop4
Copy link
Contributor

@betodealmeida can u also help with upgrade Flask-Caching to 1.11.0 to resolve GHSA-656c-6cxf-hvcv ?

@codecov
Copy link

codecov bot commented May 8, 2023

Codecov Report

Merging #23581 (582f23a) into master (de96372) will increase coverage by 1.73%.
The diff coverage is 45.45%.

❗ Current head 582f23a differs from pull request most recent head 37a1d4e. Consider uploading reports for the commit 37a1d4e to get more accurate results

@@            Coverage Diff             @@
##           master   #23581      +/-   ##
==========================================
+ Coverage   66.46%   68.20%   +1.73%     
==========================================
  Files        1942     1941       -1     
  Lines       75205    75074     -131     
  Branches     8145     8105      -40     
==========================================
+ Hits        49986    51203    +1217     
+ Misses      23134    21808    -1326     
+ Partials     2085     2063      -22     
Flag Coverage Δ
hive 53.16% <9.09%> (?)
mysql 78.91% <9.09%> (-0.03%) ⬇️
postgres 78.99% <9.09%> (-0.03%) ⬇️
presto 53.09% <45.45%> (?)
python 82.77% <45.45%> (+3.62%) ⬆️
sqlite 77.51% <9.09%> (-0.03%) ⬇️
unit 53.03% <9.09%> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

Impacted Files Coverage Δ
superset/models/helpers.py 69.11% <45.45%> (-0.10%) ⬇️

... and 115 files with indirect coverage changes

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more

@hughhhh hughhhh self-requested a review May 15, 2023 16:53
@betodealmeida betodealmeida merged commit 78bc069 into master May 16, 2023
@dpgaspar dpgaspar mentioned this pull request May 23, 2023
@mistercrunch mistercrunch added 🏷️ bot A label used by `supersetbot` to keep track of which PR where auto-tagged with release labels 🚢 3.0.0 labels Mar 13, 2024
@mistercrunch mistercrunch deleted the cves branch March 26, 2024 16:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
🏷️ bot A label used by `supersetbot` to keep track of which PR where auto-tagged with release labels size/S 🚢 3.0.0
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants