Skip to content

Bump form-data, cipher-base, sha.js version#1296

Merged
peterzhuamazon merged 1 commit intoopensearch-project:mainfrom
peterzhuamazon:bump-dep-versions
Oct 8, 2025
Merged

Bump form-data, cipher-base, sha.js version#1296
peterzhuamazon merged 1 commit intoopensearch-project:mainfrom
peterzhuamazon:bump-dep-versions

Conversation

@peterzhuamazon
Copy link
Copy Markdown
Member

@peterzhuamazon peterzhuamazon commented Oct 8, 2025

Description

Bump form-data, cipher-base, sha.js version

Issues Resolved

opensearch-project/opensearch-build#5693

Check List

  • New functionality includes testing.
    • All tests pass
  • New functionality has been documented.
    • New functionality has javadoc added
  • Commits are signed per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

@peterzhuamazon
Bump form-data, cipher-base, sha.js version
683b7d4 
Signed-off-by: Peter Zhu <zhujiaxi@amazon.com>
@peterzhuamazon peterzhuamazon self-assigned this Oct 8, 2025
@peterzhuamazon peterzhuamazon added v3.3.0 Issues targeting release v3.3.0 backport 3.3 labels Oct 8, 2025
@peterzhuamazon peterzhuamazon moved this from Backlog to In review in OpenSearch Engineering Effectiveness Oct 8, 2025
@peterzhuamazon peterzhuamazon mentioned this pull request Oct 8, 2025
Closed
66 tasks
@peterzhuamazon peterzhuamazon merged commit 147e2e7 into opensearch-project:main Oct 8, 2025
11 of 15 checks passed
@peterzhuamazon peterzhuamazon deleted the bump-dep-versions branch October 8, 2025 16:19
@github-project-automation github-project-automation bot moved this from 👀 In Review to ✅ Done in Engineering Effectiveness Board Oct 8, 2025
opensearch-trigger-bot bot pushed a commit that referenced this pull request Oct 8, 2025
@github-actions
Bump form-data, cipher-base, sha.js version (#1296)
321c77a 
Signed-off-by: Peter Zhu <zhujiaxi@amazon.com>
(cherry picked from commit 147e2e7)
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
@opensearch-trigger-bot opensearch-trigger-bot bot mentioned this pull request Oct 8, 2025
Merged
peterzhuamazon pushed a commit that referenced this pull request Oct 8, 2025
@opensearch-trigger-bot @github-actions
Bump form-data, cipher-base, sha.js version (#1296) (#1297)
f0c57a8 
(cherry picked from commit 147e2e7)

Signed-off-by: Peter Zhu <zhujiaxi@amazon.com>
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
amsiglan pushed a commit to amsiglan/alerting-dashboards-plugin that referenced this pull request Oct 29, 2025
@peterzhuamazon @amsiglan
Bump form-data, cipher-base, sha.js version (opensearch-project#1296)
1db1855 
Signed-off-by: Peter Zhu <zhujiaxi@amazon.com>
@amsiglan amsiglan mentioned this pull request Oct 29, 2025
Merged
5 tasks
amsiglan added a commit that referenced this pull request Oct 29, 2025
@amsiglan @gaiksaya @peterzhuamazon
[Backport 2.19] Cherry pick CVE fixes #1296, #1280 (#1303)
a52d774 
* Resolve pbkdf2 to resolve CVE-2025-6545 CVE-2025-6547 (#1280)

Signed-off-by: Sayali Gaikawad <gaiksaya@amazon.com>

* Bump form-data, cipher-base, sha.js version (#1296)

Signed-off-by: Peter Zhu <zhujiaxi@amazon.com>

---------

Signed-off-by: Sayali Gaikawad <gaiksaya@amazon.com>
Signed-off-by: Peter Zhu <zhujiaxi@amazon.com>
Co-authored-by: Sayali Gaikawad <gaiksaya@amazon.com>
Co-authored-by: Peter Zhu <zhujiaxi@amazon.com>
AWSHurneyt pushed a commit that referenced this pull request Feb 2, 2026
@KashKondaka @opensearch-trigger-bot @github-actions
Ppl Alerting (#1333)
b0b970c 
* Add release notes for 3.3.0 (#1293) (#1295)

(cherry picked from commit a232821)

Signed-off-by: opensearch-ci <opensearch-infra@amazon.com>
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

* Bump form-data, cipher-base, sha.js version (#1296) (#1297)

(cherry picked from commit 147e2e7)

Signed-off-by: Peter Zhu <zhujiaxi@amazon.com>
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

* Onboarded opensearch apis to use MDS client for Neo (#1313) (#1323)

cr: https://code.amazon.com/reviews/CR-234395069
(cherry picked from commit 36ccb85)

Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

* added v2 apis

add feature flag

add v2 create monitor

fix cypress test

trigger v2 implemented

add monitor details v2

update dashboard pages with v2

fix cypress test

discover flyout and explore dependency added

in progress, broken monitor details

Revert "in progress, broken monitor details"

This reverts commit f2da5e8.

api bug fixes for edit, disable/enable,export as json,delete

finalized edits for monitor detailsv2 page(title still in progress

v2 alerts flyout fixed

added more alert separation, fix v2 alert flyout and pagination

fix duplicate buttons on dashbaord classic

fix double v1/v2 get call for monitor details

remove combined v1/v2 calls in monitor details page

fix buttons in dashboard and monitors pages

set view to classic for v1

create monitor depends on view

fix search monitors call

v2 trigger impl

fix create monitor flyout

fix delete in monitor details page

fix notification validation issue and v2 creation w/ notifs

Parse the monitor payload in V2 to conform with the v1 execute API

remove false failed to load destination toast

fix send test message for alert flyout

fix trigger not loading in v2 monitor edit

allow monitor creation without actions set

dont set default throttle issue when edit/creating

validate on change to true

fix padding in alerting new/classic

update unit tests

refresh monitor list when switching views

remove sequence no and primary term from update monitor call

fix mustache message for notification action

look back window no longer selected when editing monitor w/o lookback

check box disappeared for v1 monitor creation

submitting monitor create wihout trigger name is invalid

add validation error for trigger condition value >=10000

remove debug logs

remove debug logs

use seq no to fix race condition to properly update lookback window

provide clear toast message for invalid ppl query

add look back window to monitor overview stats

fix description layout in monitor detail stats card and change limit to 500 chars

make text labels for fields unclickable on hover

cannot acknowledge monitor in empty classic monitor list

if editing a monitor, do not allow switching monitor view

add info to monitor details v2

add monitor datasource to ppl alert flyout

Revert "add monitor datasource to ppl alert flyout"

This reverts commit a1c7a35.

remove execute ppl on keystroke and add update graph button

graph formatting

small utc formatting fix for look back window

remove comment action from alerts table in monitorv2 details

update unit tests

remove debug logs

remove logs and add helper for dupe code

switch back to euitheme

trigger condition cannot be negative

address comments

get rid of redundant v2 api declaratoin for v2 monitor details

get rid of classic monitor code in v2 file and remove seq no/primary term

Remove acknowledge action from PPL monitor actions and add edit action

Fix improper import causing acknowledge alerts modal to break

cr: https://code.amazon.com/reviews/CR-234635093

Fix action on create monitor from alerts page

cr: https://code.amazon.com/reviews/CR-234678247
Signed-off-by: KashKondaka <37753523+KashKondaka@users.noreply.github.com>

* update unit tests

Signed-off-by: KashKondaka <37753523+KashKondaka@users.noreply.github.com>

---------

Signed-off-by: opensearch-ci <opensearch-infra@amazon.com>
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Signed-off-by: Peter Zhu <zhujiaxi@amazon.com>
Signed-off-by: KashKondaka <37753523+KashKondaka@users.noreply.github.com>
Co-authored-by: opensearch-trigger-bot[bot] <98922864+opensearch-trigger-bot[bot]@users.noreply.github.com>
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@getsaurabh02 getsaurabh02 getsaurabh02 approved these changes

@lezzago lezzago Awaiting requested review from lezzago lezzago is a code owner

@AWSHurneyt AWSHurneyt Awaiting requested review from AWSHurneyt AWSHurneyt is a code owner

@amsiglan amsiglan Awaiting requested review from amsiglan amsiglan is a code owner

@sbcd90 sbcd90 Awaiting requested review from sbcd90

@eirsep eirsep Awaiting requested review from eirsep eirsep is a code owner

@praveensameneni praveensameneni Awaiting requested review from praveensameneni

@bowenlan-amzn bowenlan-amzn Awaiting requested review from bowenlan-amzn bowenlan-amzn is a code owner

@rishabhmaurya rishabhmaurya Awaiting requested review from rishabhmaurya rishabhmaurya is a code owner

@riysaxen-amzn riysaxen-amzn Awaiting requested review from riysaxen-amzn riysaxen-amzn is a code owner

Assignees

@peterzhuamazon peterzhuamazon

Labels

backport 3.3 release v3.3.0 Issues targeting release v3.3.0

Projects

Engineering Effectiveness Board
Status: ✅ Done
OpenSearch Engineering Effectiveness
Status: Done

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@peterzhuamazon @getsaurabh02
⚡