-
Notifications
You must be signed in to change notification settings - Fork 283
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Update jenkins versions to fix CVE #3549
Conversation
Signed-off-by: Zelin Hao <zelinhao@amazon.com>
Codecov Report
@@ Coverage Diff @@
## main #3549 +/- ##
=======================================
Coverage 91.48% 91.48%
=======================================
Files 181 181
Lines 5369 5369
=======================================
Hits 4912 4912
Misses 457 457 |
@@ -59,8 +59,8 @@ sourceSets { | |||
} | |||
|
|||
sharedLibrary { | |||
coreVersion = '2.387.1' // https://repo.jenkins-ci.org/public/org/jenkins-ci/main/jenkins-core/ | |||
testHarnessVersion = '1934.v90a_c07cf5b_21' // https://mvnrepository.com/artifact/org.jenkins-ci.main/jenkins-test-harness?repo=jenkins-releases | |||
coreVersion = '2.401' // https://repo.jenkins-ci.org/public/org/jenkins-ci/main/jenkins-core/ |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We do not want to upgrade this version and keep in sync with what we are using as our CI system on https://build.ci.opensearch.org/
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yeah those have not been cleared up with most recent version as well I believe.
Closing this PR for now. |
Description
Update jenkins versions to fix CVE. Let's see how mend catchs them..
Issues Resolved
By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.