Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Upgrade OCM library to same version as used in KLM (0.6.0) #1907

Closed
6 tasks done
jeremyharisch opened this issue Jan 11, 2024 · 0 comments · Fixed by #1934
Closed
6 tasks done

Upgrade OCM library to same version as used in KLM (0.6.0) #1907

jeremyharisch opened this issue Jan 11, 2024 · 0 comments · Fixed by #1934
Assignees
@Tomasz-Smelcerz-SAP
Labels
area/security Issues or PRs related to security dependencies Pull requests that update a dependency file

Comments

@jeremyharisch
Copy link
Contributor

jeremyharisch commented Jan 11, 2024 •
edited by janmedrek
Loading

Description
To mitigate the identified security risks, we propose upgrading the OCM package to version 0.6.0 (same as used in KLM), which includes patches and updates addressing the reported vulnerabilities.

Acceptance Criterias

  • Update the OCM package in the project's dependency file.
  • Fix breaking changes.
  • Test the application thoroughly to ensure compatibility with the new version.
  • Update documentation to reflect the new package version and any breaking changes.
  • Resolve this dependabot PR
  • Prepare knowledge sharing about OCM pkg findings.
@jeremyharisch jeremyharisch added area/security Issues or PRs related to security dependencies Pull requests that update a dependency file labels Jan 11, 2024
@Tomasz-Smelcerz-SAP Tomasz-Smelcerz-SAP mentioned this issue Jan 29, 2024
Merged
@Tomasz-Smelcerz-SAP Tomasz-Smelcerz-SAP linked a pull request Jan 29, 2024 that will close this issue
chore: Bump ocm library to v0.6.0 #1934
Merged
@janmedrek janmedrek reopened this Jan 29, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@Tomasz-Smelcerz-SAP Tomasz-Smelcerz-SAP

Labels
area/security Issues or PRs related to security dependencies Pull requests that update a dependency file
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

chore: Bump ocm library to v0.6.0 Tomasz-Smelcerz-SAP/cli
4 participants
@ruanxin @Tomasz-Smelcerz-SAP @janmedrek @jeremyharisch