search

FundingCircle / jackdaw

A Clojure library for the Apache Kafka distributed streaming platform.
https://fundingcircle.github.io/jackdaw/
BSD 3-Clause "New" or "Revised" License
369 stars 80 forks source link

Override Netty version to fix CVE-2020-11612 #261

Closed gphilipp closed 3 years ago

gphilipp commented 4 years ago

Checklist

codecov[bot] commented 4 years ago

Codecov Report

Merging #261 (0c9d0a2) into master (e7f41ab) will decrease coverage by 0.38%. The diff coverage is n/a.

Impacted file tree graph

@@            Coverage Diff             @@
##           master     #261      +/-   ##
==========================================
- Coverage   81.22%   80.84%   -0.39%     
==========================================
  Files          41       41              
  Lines        2594     2594              
  Branches      153      153              
==========================================
- Hits         2107     2097      -10     
- Misses        334      344      +10     
  Partials      153      153
Impacted Files Coverage Δ
src/jackdaw/serdes/edn2.clj 45.45% <0.00%> (-45.46%) :arrow_down:

Continue to review full report at Codecov.

Legend - Click here to learn more Δ = absolute <relative> (impact), ø = not affected, ? = missing data Powered by Codecov. Last update e7f41ab...0c9d0a2. Read the comment docs.

cddr commented 3 years ago

btw @gphilipp, I think the only thing requiring netty in jackdaw is the test machine which I have now factored out into it's own repo (I think you can't get at it via jackdaw without merging this anyway https://github.com/FundingCircle/jackdaw/pull/266).