Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

SPLAT-1007 Release v3.14.2 #1532

Merged
merged 55 commits into from Mar 26, 2021
Merged

SPLAT-1007 Release v3.14.2 #1532

merged 55 commits into from Mar 26, 2021

Conversation

bender-wk
Copy link
Contributor

@bender-wk bender-wk commented Mar 26, 2021 •
edited

JIRA: https://jira.atl.workiva.net/browse/SPLAT-1007

@Workiva/product2

dependabot-preview bot and others added 30 commits March 9, 2021 20:19
@dependabot-preview
Java: Bump mockito-core from 3.7.7 to 3.8.0 in /lib/java
c8c9735 
Bumps [mockito-core](https://github.com/mockito/mockito) from 3.7.7 to 3.8.0.
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v3.7.7...v3.8.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
@dependabot-preview
Python: Bump coverage from 5.4 to 5.5 in /lib/python
e87f2c8 
Bumps [coverage](https://github.com/nedbat/coveragepy) from 5.4 to 5.5.
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](nedbat/coveragepy@coverage-5.4...coverage-5.5)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
@dependabot-preview
Java: Bump checkstyle from 8.40 to 8.41 in /lib/java
fb2b19a 
Bumps [checkstyle](https://github.com/checkstyle/checkstyle) from 8.40 to 8.41.
- [Release notes](https://github.com/checkstyle/checkstyle/releases)
- [Commits](checkstyle/checkstyle@checkstyle-8.40...checkstyle-8.41)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
@dependabot-preview
Java: Bump jmh.version from 1.27 to 1.28 in /lib/java
dc1875d 
Bumps `jmh.version` from 1.27 to 1.28.

Updates `jmh-core` from 1.27 to 1.28

Updates `jmh-generator-annprocess` from 1.27 to 1.28

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
@rmconsole5-wk
Merge pull request #1468 from Workiva/dependabot/maven/lib/java/devel…
bc3d82d 
…op/com.puppycrawl.tools-checkstyle-8.41

Java: Bump checkstyle from 8.40 to 8.41 in /lib/java
@dependabot
Examples: Bump activemq-client from 5.15.11 to 5.16.1 in /examples/java
10b96f5 
Bumps [activemq-client](https://github.com/apache/activemq) from 5.15.11 to 5.16.1.
- [Release notes](https://github.com/apache/activemq/releases)
- [Commits](apache/activemq@activemq-5.15.11...activemq-5.16.1)

Signed-off-by: dependabot[bot] <support@github.com>
@rmconsole5-wk
Merge pull request #1474 from Workiva/dependabot/maven/lib/java/devel…
ca0e98c 
…op/jmh.version-1.28

Java: Bump jmh.version from 1.27 to 1.28 in /lib/java
@dependabot
java-exam: bump libthrift from 0.13.0 to 0.14.0 in /examples/java
51dc827 
Bumps [libthrift](https://github.com/apache/thrift) from 0.13.0 to 0.14.0.
- [Release notes](https://github.com/apache/thrift/releases)
- [Changelog](https://github.com/apache/thrift/blob/master/CHANGES.md)
- [Commits](apache/thrift@v0.13.0...v0.14.0)

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
Java: Bump junit from 4.13.1 to 4.13.2 in /lib/java
9785d1f 
Bumps [junit](https://github.com/junit-team/junit4) from 4.13.1 to 4.13.2.
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.13.1.md)
- [Commits](junit-team/junit4@r4.13.1...r4.13.2)

Signed-off-by: dependabot[bot] <support@github.com>
@rmconsole5-wk
Merge pull request #1467 from Workiva/dependabot/pip/lib/python/devel…
55b6024 
…op/coverage-5.5

Python: Bump coverage from 5.4 to 5.5 in /lib/python
@dependabot
Tests: Bump netty-all in /test/integration/java/frugal-integration-test
317b429 
Bumps [netty-all](https://github.com/netty/netty) from 4.1.59.Final to 4.1.60.Final.
- [Release notes](https://github.com/netty/netty/releases)
- [Commits](netty/netty@netty-4.1.59.Final...netty-4.1.60.Final)

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
Examples: Bump netty-all in /examples/java
5a4b9ef 
Bumps [netty-all](https://github.com/netty/netty) from 4.1.59.Final to 4.1.60.Final.
- [Release notes](https://github.com/netty/netty/releases)
- [Commits](netty/netty@netty-4.1.59.Final...netty-4.1.60.Final)

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
Java: Bump netty-all from 4.1.59.Final to 4.1.60.Final in /lib/java
aafb53c 
Bumps [netty-all](https://github.com/netty/netty) from 4.1.59.Final to 4.1.60.Final.
- [Release notes](https://github.com/netty/netty/releases)
- [Commits](netty/netty@netty-4.1.59.Final...netty-4.1.60.Final)

Signed-off-by: dependabot[bot] <support@github.com>
@rmconsole7-wk
Merge pull request #1484 from Workiva/dependabot/maven/examples/java/…
ffec92c 
…develop/org.apache.activemq-activemq-client-5.16.1

Examples: Bump activemq-client from 5.15.11 to 5.16.1 in /examples/java
@rmconsole7-wk
Merge pull request #1487 from Workiva/dependabot/maven/lib/java/devel…
c1b6a81 
…op/junit-junit-4.13.2

Java: Bump junit from 4.13.1 to 4.13.2 in /lib/java
@dependabot
Tests: Bump junit in /test/integration/java/frugal-integration-test
8b7da35 
Bumps [junit](https://github.com/junit-team/junit4) from 4.13.1 to 4.13.2.
- [Release notes](https://github.com/junit-team/junit4/releases)
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.13.1.md)
- [Commits](junit-team/junit4@r4.13.1...r4.13.2)

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
Tests: Bump activemq-client
165cb4b 
Bumps [activemq-client](https://github.com/apache/activemq) from 5.15.11 to 5.16.1.
- [Release notes](https://github.com/apache/activemq/releases)
- [Commits](apache/activemq@activemq-5.15.11...activemq-5.16.1)

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
Java: Bump libthrift from 0.14.0 to 0.14.1 in /lib/java
85c197d 
Bumps [libthrift](https://github.com/apache/thrift) from 0.14.0 to 0.14.1.
- [Release notes](https://github.com/apache/thrift/releases)
- [Changelog](https://github.com/apache/thrift/blob/v0.14.1/CHANGES.md)
- [Commits](apache/thrift@v0.14.0...v0.14.1)

Signed-off-by: dependabot[bot] <support@github.com>
@rmconsole2-wf
Merge pull request #1486 from Workiva/dependabot/maven/lib/java/devel…
d836353 
…op/io.netty-netty-all-4.1.60.Final

Java: Bump netty-all from 4.1.59.Final to 4.1.60.Final in /lib/java
@rmconsole3-wf
Merge pull request #1491 from Workiva/dependabot/maven/test/integrati…
064635b 
…on/java/frugal-integration-test/develop/io.netty-netty-all-4.1.60.Final

Tests: Bump netty-all from 4.1.59.Final to 4.1.60.Final in /test/integration/java/frugal-integration-test
@rmconsole3-wf
Merge pull request #1483 from Workiva/dependabot/maven/examples/java/…
d5be086 
…develop/io.netty-netty-all-4.1.60.Final

Examples: Bump netty-all from 4.1.59.Final to 4.1.60.Final in /examples/java
@rmconsole3-wf
Merge pull request #1492 from Workiva/dependabot/maven/test/integrati…
3a497c0 
…on/java/frugal-integration-test/develop/junit-junit-4.13.2

Tests: Bump junit from 4.13.1 to 4.13.2 in /test/integration/java/frugal-integration-test
@rmconsole3-wf
Merge pull request #1466 from Workiva/dependabot/maven/lib/java/devel…
84748c5 
…op/org.mockito-mockito-core-3.8.0

Java: Bump mockito-core from 3.7.7 to 3.8.0 in /lib/java
@dependabot
Go: Bump github.com/sirupsen/logrus from 1.8.0 to 1.8.1 in /lib/go
19cf20a 
Bumps [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) from 1.8.0 to 1.8.1.
- [Release notes](https://github.com/sirupsen/logrus/releases)
- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md)
- [Commits](sirupsen/logrus@v1.8.0...v1.8.1)

Signed-off-by: dependabot[bot] <support@github.com>
@rmconsole3-wf
Merge pull request #1493 from Workiva/dependabot/maven/test/integrati…
e76a864 
…on/java/frugal-integration-test/develop/org.apache.activemq-activemq-client-5.16.1

Tests: Bump activemq-client from 5.15.11 to 5.16.1 in /test/integration/java/frugal-integration-test
@dependabot
go-exam: bump github.com/go-stomp/stomp in /examples/go
c08f7f7 
Bumps [github.com/go-stomp/stomp](https://github.com/go-stomp/stomp) from 2.1.2+incompatible to 2.1.3+incompatible.
- [Release notes](https://github.com/go-stomp/stomp/releases)
- [Changelog](https://github.com/go-stomp/stomp/blob/master/breaking_changes.md)
- [Commits](go-stomp/stomp@v2.1.2...v2.1.3)

Signed-off-by: dependabot[bot] <support@github.com>
@rmconsole6-wk
Merge pull request #1497 from Workiva/dependabot/maven/lib/java/devel…
ae2fdbf 
…op/org.apache.thrift-libthrift-0.14.1

Java: Bump libthrift from 0.14.0 to 0.14.1 in /lib/java
@rmconsole6-wk
Merge pull request #1489 from Workiva/dependabot/go_modules/lib/go/de…
4598646 
…velop/github.com/sirupsen/logrus-1.8.1

Go: Bump github.com/sirupsen/logrus from 1.8.0 to 1.8.1 in /lib/go
@rmconsole7-wk
Merge pull request #1510 from Workiva/dependabot/go_modules/examples/…
4baa245 
…go/develop/github.com/go-stomp/stomp-2.1.3incompatible

go-exam: bump github.com/go-stomp/stomp from 2.1.2+incompatible to 2.1.3+incompatible in /examples/go
@dependabot
go-tool: bump github.com/sirupsen/logrus from 1.8.0 to 1.8.1
c647855 
Bumps [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) from 1.8.0 to 1.8.1.
- [Release notes](https://github.com/sirupsen/logrus/releases)
- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md)
- [Commits](sirupsen/logrus@v1.8.0...v1.8.1)

Signed-off-by: dependabot[bot] <support@github.com>
dependabot bot and others added 19 commits March 16, 2021 19:39
@dependabot
go-tool: bump github.com/urfave/cli from 1.19.1 to 1.22.5
7db302f 
Bumps [github.com/urfave/cli](https://github.com/urfave/cli) from 1.19.1 to 1.22.5.
- [Release notes](https://github.com/urfave/cli/releases)
- [Changelog](https://github.com/urfave/cli/blob/master/docs/CHANGELOG.md)
- [Commits](urfave/cli@v1.19.1...v1.22.5)

Signed-off-by: dependabot[bot] <support@github.com>
@rmconsole5-wk
Merge pull request #1501 from Workiva/dependabot/pip/lib/python/devel…
d6ad653 
…op/flake8-3.9.0

Python: Bump flake8 from 3.8.4 to 3.9.0 in /lib/python
@rmconsole5-wk
Merge pull request #1490 from Workiva/dependabot/go_modules/lib/go/de…
c2625b6 
…velop/github.com/apache/thrift-0.14.1

Go: Bump github.com/apache/thrift from 0.14.0 to 0.14.1 in /lib/go
@rmconsole5-wk
Merge pull request #1512 from Workiva/dependabot/go_modules/examples/…
56df530 
…go/develop/github.com/sirupsen/logrus-1.8.1

go-exam: bump github.com/sirupsen/logrus from 1.8.0 to 1.8.1 in /examples/go
@dependabot
Go: Bump github.com/nats-io/nats-server/v2 in /lib/go
f44ebfc 
Bumps [github.com/nats-io/nats-server/v2](https://github.com/nats-io/nats-server) from 2.1.9 to 2.2.0.
- [Release notes](https://github.com/nats-io/nats-server/releases)
- [Changelog](https://github.com/nats-io/nats-server/blob/master/.goreleaser.yml)
- [Commits](nats-io/nats-server@v2.1.9...v2.2.0)

Signed-off-by: dependabot[bot] <support@github.com>
@rmconsole3-wf
Merge pull request #1508 from Workiva/dependabot/go_modules/develop/g…
0671359 
…ithub.com/urfave/cli-1.22.5

go-tool: bump github.com/urfave/cli from 1.19.1 to 1.22.5
@rmconsole4-wk
Merge pull request #1503 from Workiva/dependabot/go_modules/lib/go/de…
83b233e 
…velop/github.com/nats-io/nats-server/v2-2.2.0

Go: Bump github.com/nats-io/nats-server/v2 from 2.1.9 to 2.2.0 in /lib/go
@dependabot
go-test: bump github.com/sirupsen/logrus in /test/integration
1e0ae4a 
Bumps [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) from 1.7.0 to 1.8.1.
- [Release notes](https://github.com/sirupsen/logrus/releases)
- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md)
- [Commits](sirupsen/logrus@v1.7.0...v1.8.1)

Signed-off-by: dependabot[bot] <support@github.com>
@rmconsole3-wf
Merge pull request #1514 from Workiva/dependabot/go_modules/test/inte…
630c482 
…gration/develop/github.com/sirupsen/logrus-1.8.1

go-test: bump github.com/sirupsen/logrus from 1.7.0 to 1.8.1 in /test/integration
@dependabot
go-exam: bump github.com/apache/thrift in /examples/go
cddc365 
Bumps [github.com/apache/thrift](https://github.com/apache/thrift) from 0.14.0 to 0.14.1.
- [Release notes](https://github.com/apache/thrift/releases)
- [Changelog](https://github.com/apache/thrift/blob/v0.14.1/CHANGES.md)
- [Commits](apache/thrift@v0.14.0...v0.14.1)

Signed-off-by: dependabot[bot] <support@github.com>
@rmconsole4-wk
Merge pull request #1511 from Workiva/dependabot/go_modules/examples/…
157046c 
…go/develop/github.com/apache/thrift-0.14.1

go-exam: bump github.com/apache/thrift from 0.14.0 to 0.14.1 in /examples/go
@rmconsole7-wk
Merge pull request #1516 from Workiva/dependabot/maven/examples/java/…
fb3351a 
…develop/org.apache.thrift-libthrift-0.14.0

java-exam: bump libthrift from 0.13.0 to 0.14.0 in /examples/java
@dependabot
go-tool: bump gopkg.in/yaml.v2 from 2.2.2 to 2.4.0
84b654b 
Bumps [gopkg.in/yaml.v2](https://github.com/go-yaml/yaml) from 2.2.2 to 2.4.0.
- [Release notes](https://github.com/go-yaml/yaml/releases)
- [Commits](go-yaml/yaml@v2.2.2...v2.4.0)

Signed-off-by: dependabot[bot] <support@github.com>
@rmconsole7-wk
Merge pull request #1519 from Workiva/dependabot/go_modules/develop/g…
f9db31b 
…opkg.in/yaml.v2-2.4.0

go-tool: bump gopkg.in/yaml.v2 from 2.2.2 to 2.4.0
@natewoods-wf
Merge branch 'master' into develop
f1eda49
@houstonking-wf
fix: revert all changes from PR #1476
c62f025
@houstonking-wf
Merge remote-tracking branch 'origin/develop' into revert-pr-1476
b13926f
@rmconsole3-wf
Merge pull request #1528 from Workiva/revert-pr-1476
68efcd5 
fix: revert all changes from PR #1476
@bender-wk
RELEASE Frugal v3.14.2
64b248d
@aviary3-wk
Copy link

Security Insights

(3) Vulnerable direct dependencies were detected
  • 1 vulns in aiohttp < 3.7.4 via lib/python/requirements_dev_asyncio.txt
  • 1 vulns in org.apache.thrift:libthrift < 0.14.0 via examples/java/pom.xml
  • 1 vulns in org.apache.thrift:libthrift < 0.14.0 via test/integration/java/frugal-integration-test/pom.xml

    • Action Items

    Questions or Comments? Reach out on Slack: #support-infosec.

    houstonking-wf
    houstonking-wf approved these changes Mar 26, 2021
    View reviewed changes
    lib/go/go.mod
    github.com/go-stomp/stomp v2.1.2+incompatible
    github.com/nats-io/nats-server/v2 v2.1.9
    github.com/nats-io/nats.go v1.10.0
    github.com/apache/thrift v0.14.1
    Copy link
    Contributor

    Choose a reason for hiding this comment

    The reason will be displayed to describe this comment to others. Learn more.

    Note: bumping to v0.14.1 for go

    lib/java/pom.xml
    @@ -50,7 +50,7 @@
    <dependency>
    <groupId>org.apache.thrift</groupId>
    <artifactId>libthrift</artifactId>
    <version>0.14.0</version>
    <version>0.13.0</version>
    Copy link
    Contributor

    Choose a reason for hiding this comment

    The reason will be displayed to describe this comment to others. Learn more.

    Note: here's the downgrade to 0.13.0 for java.

    examples/java/pom.xml
    @@ -17,17 +17,17 @@
    <dependency>
    <groupId>org.apache.thrift</groupId>
    <artifactId>libthrift</artifactId>
    <version>0.13.0</version>
    <version>0.14.0</version>
    Copy link
    Contributor

    Choose a reason for hiding this comment

    The reason will be displayed to describe this comment to others. Learn more.

    Note: this probably isn't desirable, but we've got a backlog of repairs to do on the examples anyway.

    @houstonking-wf
    Copy link
    Contributor

    QA +1; tests are passing on my PR -- it's a direct revert of another PR.

    @houstonking-wf
    Copy link
    Contributor

    @Workiva/release-management-p for merge

    rmconsole-wf
    rmconsole-wf approved these changes Mar 26, 2021
    View reviewed changes
    Copy link

    @rmconsole-wf rmconsole-wf left a comment

    Choose a reason for hiding this comment

    The reason will be displayed to describe this comment to others. Learn more.

    +1 from RM

    @rmconsole6-wk rmconsole6-wk merged commit daacef7 into master Mar 26, 2021
    @rmconsole6-wk rmconsole6-wk deleted the release_v3_14_2 branch March 26, 2021 15:43
    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
    Reviewers

    @rmconsole-wf rmconsole-wf rmconsole-wf approved these changes

    @houstonking-wf houstonking-wf houstonking-wf approved these changes

    Assignees
    No one assigned
    Labels
    Merge Requirements Met RM Ready
    Projects
    None yet
    Milestone
    No milestone
    Development

    Successfully merging this pull request may close these issues.

    None yet