Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Release: Merge back 2.41.0 into bugfix from: master-into-dev/2.41.0-2.42.0-dev #11359

Merged
merged 4 commits into from
Dec 2, 2024

Conversation

Maffooch
Copy link
Contributor

@Maffooch Maffooch commented Dec 2, 2024

No description provided.

DefectDojo release bot and others added 3 commits December 2, 2024 18:07
@Maffooch Maffooch marked this pull request as ready for review December 2, 2024 18:59
@github-actions github-actions bot added the helm label Dec 2, 2024
Copy link

dryrunsecurity bot commented Dec 2, 2024

DryRun Security Summary

The provided code changes appear to be a series of updates related to the DefectDojo application, including documentation updates, version number changes, dependency management, and automated workflow changes to manage the release process, all of which are part of a routine release process and do not introduce any obvious security concerns.

Expand for full summary

Summary:

The provided code changes appear to be a series of updates related to the DefectDojo application, including documentation updates, version number changes, and dependency management. These changes are part of a routine release process and do not introduce any obvious security concerns.

The key changes include:

  1. Documentation updates for upgrading to DefectDojo Version 2.42.x, providing users with necessary information about the upgrade process.
  2. Version updates in the dojo/__init__.py file, moving the application from a development version to a release version.
  3. Dependency updates in the components/package.json file, ensuring that the project is using the latest stable versions of its dependencies.
  4. Automated workflow changes to manage the release process, including version updates, upgrade note generation, and pull request creation.
  5. Helm chart updates to reflect the new version of the DefectDojo application and its dependencies.

From an application security perspective, these changes are generally positive, as they focus on maintaining up-to-date versions of the application and its dependencies, which helps address known vulnerabilities and improve the overall security posture. However, it is essential to thoroughly test the application after these updates to ensure that no regressions or new security issues have been introduced.

Files Changed:

  1. docs/content/en/open_source/upgrading/2.42.md: This file has been updated with information about the upgrade process for DefectDojo Version 2.42.x, providing users with necessary instructions and directing them to the release notes.
  2. dojo/__init__.py: The __version__ variable has been updated from "2.41.0-dev" to "2.41.0", indicating a move from a development version to a release version.
  3. components/package.json: The project version has been updated from 2.41.0-dev to 2.41.0, and the dependencies have been updated to their latest versions.
  4. .github/workflows/release-3-master-into-dev.yml: This GitHub Actions workflow has been updated to handle the process of merging changes from the master branch into the dev and bugfix branches, including version updates and pull request creation.
  5. helm/defectdojo/Chart.yaml: The appVersion and version of the Helm chart have been updated from "2.41.0-dev" and 1.6.162-dev to "2.41.0" and 1.6.162, respectively, reflecting the move to a stable release version.

Code Analysis

We ran 9 analyzers against 5 files and 1 analyzer had findings. 8 analyzers had no findings.

Analyzer Findings
Sensitive Files Analyzer 1 finding

View PR in the DryRun Dashboard.

@github-actions github-actions bot added the docs label Dec 2, 2024
@rossops rossops merged commit 62bec0e into dev Dec 2, 2024
75 checks passed
@rossops rossops deleted the master-into-dev/2.41.0-2.42.0-dev branch December 2, 2024 19:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants