Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bumped request dependency to remove cryptiles vulnerability in Tasks/DownloadGitHubNugetPackageV1 #16409

Conversation

sbalia
Copy link
Contributor

@sbalia sbalia commented Jun 6, 2022

Task name: Tasks/DownloadGitHubNugetPackageV1

Description: Bumped request dependency to remove cryptiles vulnerability.

Documentation changes required: N

Added unit tests: Y

Attached related issue: Y
GHSA-rq8g-5pc5-wrhr

Checklist:

  • Task version was bumped - please check instruction how to do it
  • Checked that applied changes work as expected - checked in the local pipeline and added a few very-very basic unit tests.

@sbalia sbalia requested a review from v-nmursapall as a code owner June 6, 2022 07:32
@sbalia sbalia force-pushed the users/sbalia/fixed-cryptiles-vulnerability-in-download-github-nuget-package-v1 branch 3 times, most recently from e631d25 to b35a28f Compare June 7, 2022 11:14
@sbalia sbalia force-pushed the users/sbalia/fixed-cryptiles-vulnerability-in-download-github-nuget-package-v1 branch 4 times, most recently from 70d4915 to c2b32cc Compare June 14, 2022 16:20
@sbalia
Copy link
Contributor Author

sbalia commented Jun 15, 2022

/azp run

@azure-pipelines
Copy link

Azure Pipelines successfully started running 4 pipeline(s).

@sbalia sbalia force-pushed the users/sbalia/fixed-cryptiles-vulnerability-in-download-github-nuget-package-v1 branch from c2b32cc to dc99752 Compare June 15, 2022 10:44
Added very-very basic unit tests.
@sbalia sbalia force-pushed the users/sbalia/fixed-cryptiles-vulnerability-in-download-github-nuget-package-v1 branch from dc99752 to 1c9c176 Compare June 15, 2022 11:24
@sbalia sbalia merged commit 1805327 into microsoft:master Jun 15, 2022
@sbalia sbalia deleted the users/sbalia/fixed-cryptiles-vulnerability-in-download-github-nuget-package-v1 branch June 15, 2022 12:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants