Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Manual Backport 1.x][CVE-2023-26486][CVE-2023-26487] Bump vega from 5.22.1 to 5.23.0 #3550

Closed
wants to merge 1 commit into from

Conversation

ananzh
Copy link
Member

@ananzh ananzh commented Mar 7, 2023

Description

Bump vega from 5.22.1 to 5.23.0. This will also bump vega-function from 5.13.0 to 5.13.1.

Backport PR:

#3533

Issue Resolved:

#3526 #3525

Check List

  • All tests pass
    • yarn test:jest
    • yarn test:jest_integration
    • yarn test:ftr
  • New functionality includes testing.
  • New functionality has been documented.
  • Update CHANGELOG.md
  • Commits are signed per the DCO using --signoff

…5.22.1 to 5.23.0

Bump vega from 5.22.1 to 5.23.0. This will also bump vega-function
from 5.13.0 to 5.13.1.

Backport PR:
opensearch-project#3533

Issue Resolved:
opensearch-project#3526
opensearch-project#3525

Signed-off-by: Anan Zhuang <[email protected]>
@abbyhu2000 abbyhu2000 self-requested a review March 7, 2023 22:18
@ananzh
Copy link
Member Author

ananzh commented Mar 7, 2023

Due to this error [email protected]: The engine "node" is incompatible with this module. Expected version ">=12". Got "10.24.1" , this cve can't be fixed in 1.x branches. Close the backport.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants