Update package dependencies and fix security vulnerabilities#22100
Open
ellendular wants to merge 1 commit intomasterfrom
Open
Update package dependencies and fix security vulnerabilities#22100ellendular wants to merge 1 commit intomasterfrom
ellendular wants to merge 1 commit intomasterfrom
Conversation
|
Azure Pipelines: Successfully started running 3 pipeline(s). |
ellendular
changed the title
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Context
The Packages in the azure-pipeline-tasks repository have been updated to align with version changes from the azure-pipelines-tasks-common-packages repository:
azure-pipelines-tasks-artifacts-common: ^2.273.0
azp-tasks-az-blobstorage-provider: ^3.272.1
azure-pipelines-tasks-utility-common: 3.272.0
azure-pipelines-tasks-webdeployment-common: ^4.272.1
azure-pipelines-tasks-kubernetes-common: ^2.272.0
Additionally, the azure-pipelines-task-lib package has been upgraded to version 5.2.8 to address security vulnerabilities.
Task Names
Description
The packages within the azure-pipeline-tasks repository have been updated to maintain consistency with the recent version changes from the azure-pipelines-tasks-common-packages repository:
azure-pipelines-tasks-artifacts-common: ^2.273.0
azp-tasks-az-blobstorage-provider: ^3.272.1
azure-pipelines-tasks-utility-common: 3.272.0
azure-pipelines-tasks-webdeployment-common: ^4.272.1
azure-pipelines-tasks-kubernetes-common: ^2.272.0
Relevant pull requests:
microsoft/azure-pipelines-tasks-common-packages#608
microsoft/azure-pipelines-tasks-common-packages#606
microsoft/azure-pipelines-tasks-common-packages#597
microsoft/azure-pipelines-tasks-common-packages#610
microsoft/azure-pipelines-tasks-common-packages#603
Additionally , the azure-pipelines-task-lib package has been upgraded to version 5.2.8 to address identified security vulnerabilities.
Below are the reported vulnerabilities:
AB#2362008
AB#2362009
AB#2362012
AB#2362013
AB#2374311
Risk Assessment (Low / Medium / High)
Low- As we are updating the version
Change Behind Feature Flag (Yes / No)
No
Tech Design / Approach
Documentation Changes Required (Yes/No)
NA
Unit Tests Added or Updated (Yes / No)
No
Additional Testing Performed
No - testing done only through CI checks no further testing done.
Logging Added/Updated (Yes/No)
Telemetry Added/Updated (Yes/No)
Rollback Scenario and Process (Yes/No)
Dependency Impact Assessed and Regression Tested (Yes/No)
Checklist