Skip to content
This repository was archived by the owner on Apr 22, 2025. It is now read-only.

Update protobuf-java dependency to address CVE-2022-3171 (backport #237) - #238

Merged
bestbeforetoday merged 1 commit into
release-2.2from
mergify/bp/release-2.2/pr-237
Oct 6, 2022
Merged

bestbeforetoday merged 1 commit into
release-2.2from
mergify/bp/release-2.2/pr-237

Conversation

@mergify

@mergify mergify Bot commented Oct 5, 2022

Copy link
Copy Markdown
Contributor

This is an automatic backport of pull request #237 done by Mergify.


Mergify commands and options

More conditions and actions can be found in the documentation.

You can also trigger Mergify actions by commenting on this pull request:

  • @Mergifyio refresh will re-evaluate the rules
  • @Mergifyio rebase will rebase this PR on its base branch
  • @Mergifyio update will merge the base branch into this PR
  • @Mergifyio backport <destination> will backport this PR on <destination> branch

Additionally, on Mergify dashboard you can:

  • look at your merge queues
  • generate the Mergify configuration with the config editor.

Finally, you can contact us on https://mergify.com

Also update gRPC dependencies to stay in step with protobuf-java.

Signed-off-by: Mark S. Lewis <[email protected]>
(cherry picked from commit 1d632fc)
@mergify
mergify Bot requested a review from a team October 5, 2022 16:12
@bestbeforetoday

Copy link
Copy Markdown
Member

@Mergifyio rebase

@mergify

mergify Bot commented Oct 6, 2022

Copy link
Copy Markdown
Contributor Author

rebase

☑️ Nothing to do

Details
  • any of:
    • #commits-behind>0 [:pushpin: rebase requirement]
    • -linear-history [:pushpin: rebase requirement]
  • -closed [:pushpin: rebase requirement]

@bestbeforetoday

Copy link
Copy Markdown
Member

GitHub Actions didn't trigger

@mergify
mergify Bot deleted the mergify/bp/release-2.2/pr-237 branch October 6, 2022 17:10
@bestbeforetoday
bestbeforetoday restored the mergify/bp/release-2.2/pr-237 branch October 6, 2022 17:14
@bestbeforetoday

Copy link
Copy Markdown
Member

Re-open to see if GHA will re-trigger

@bestbeforetoday
bestbeforetoday merged commit 641286f into release-2.2 Oct 6, 2022
@bestbeforetoday
bestbeforetoday deleted the mergify/bp/release-2.2/pr-237 branch October 6, 2022 17:56
marcopaulocova added a commit to VOID-SOFTWARE/fabric-sdk-java that referenced this pull request Nov 21, 2022
…a into release-2.2-github

* 'release-2.2' of github.com:VOID-SOFTWARE/fabric-sdk-java:
  Release v2.2.18 (hyperledger#239)
  Update protobuf-java dependency to address CVE-2022-3171 (hyperledger#238)

# Conflicts:
#	pom.xml
marcopaulocova added a commit to VOID-SOFTWARE/fabric-sdk-java that referenced this pull request Nov 21, 2022
* release-2.2:
  no message
  Release v2.2.18 (hyperledger#239)
  Update protobuf-java dependency to address CVE-2022-3171 (hyperledger#238)
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant