Bump enrich to 3.3.1 (close #100)

snowplow-incubator / snowplow-micro

Standalone application to automate testing of trackers

Other

47 stars 15 forks source link

Bump enrich to 3.3.1 (close #100) #101

Closed greg-el closed 2 years ago

greg-el commented 2 years ago

update EnrichmentManager.enrichEvent to use FeatureFlags with acceptInvalid and legacyEnrichmentOrder set false

This resolves the following vulnerabilities in Micro:

https://security.snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-2421244
https://security.snyk.io/vuln/SNYK-JAVA-ORGPOSTGRESQL-2970521
https://security.snyk.io/vuln/SNYK-JAVA-ORGYAML-2806360

snowplowcla commented 2 years ago

Thanks for your pull request. Is this your first contribution to a Snowplow open source project? Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

:memo: Please visit https://docs.snowplowanalytics.com/docs/contributing/contributor-license-agreement/ to learn more and sign.

Once you've signed, please reply here (e.g. I signed it!) and we'll verify. Thanks.