Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[AIRFLOW-6632] Bump dagre-d3 to resolve lodash CVE advisory #7280

Merged
merged 1 commit into from
Jan 29, 2020
Merged

[AIRFLOW-6632] Bump dagre-d3 to resolve lodash CVE advisory #7280

merged 1 commit into from
Jan 29, 2020

Conversation

ryw
Copy link
Member

@ryw ryw commented Jan 28, 2020

Bump dagre-d3 to resolve lodash CVE advisory https://npmjs.com/advisories/577

  • Description above provides context of the change
  • Commit message/PR title starts with [AIRFLOW-NNNN]. AIRFLOW-NNNN = JIRA ID*
  • Unit tests coverage for changes (not needed for documentation changes)
  • Commits follow "How to write a good git commit message"
  • Relevant documentation is updated including usage instructions.
  • I will engage committers as explained in Contribution Workflow Example.

* For document-only changes commit message can start with [AIRFLOW-XXXX].


In case of fundamental code change, Airflow Improvement Proposal (AIP) is needed.
In case of a new dependency, check compliance with the ASF 3rd Party License Policy.
In case of backwards incompatible changes please leave a note in UPDATING.md.
Read the Pull Request Guidelines for more information.

@boring-cyborg boring-cyborg bot added the area:webserver Webserver related Issues label Jan 28, 2020
@ryw ryw changed the base branch from v1-10-test to master January 28, 2020 20:11
@ryw ryw requested a review from ashb January 28, 2020 20:15
@ashb
Copy link
Member

ashb commented Jan 28, 2020

Looks like you'll need to update the yarn lockfile the too - tests are failing cos it is out of sync

@ashb ashb merged commit 6dc9d9f into apache:master Jan 29, 2020
@ryw ryw deleted the bump-dagre-d3 branch January 29, 2020 21:48
kaxil pushed a commit that referenced this pull request Feb 3, 2020
kaxil pushed a commit to astronomer/airflow that referenced this pull request Mar 10, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area:dev-tools area:webserver Webserver related Issues
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants