opensearch-project / security-dashboards-plugin

🔐 Manage your internal users, roles, access control, and audit logs from OpenSearch Dashboards
https://opensearch.org/docs/latest/security-plugin/index/
Apache License 2.0
71 stars 161 forks source link

Adds resolution for micromatch, updates yarn.lock #2117

Closed derek-ho closed 2 months ago

derek-ho commented 2 months ago

Description

Bump micromatch to 4.0.8 to address CVE: CVE-2024-4067

Category

Maintenance

Why these changes are required?

CVE-2024-4067

What is the old behavior before changes and new behavior after changes?

Issues Resolved

None

Testing

Existing tests pass

Check List

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license. For more information on following Developer Certificate of Origin and signing off your commits, please check here.

codecov[bot] commented 2 months ago

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 73.85%. Comparing base (cc39b75) to head (c405108). Report is 1 commits behind head on 2.17.

Additional details and impacted files ```diff @@ Coverage Diff @@ ## 2.17 #2117 +/- ## ========================================== + Coverage 71.40% 73.85% +2.45% ========================================== Files 97 97 Lines 2651 2651 Branches 411 411 ========================================== + Hits 1893 1958 +65 Misses 642 642 + Partials 116 51 -65 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.