Skip to content

Conversation

@jfreden
Copy link
Contributor

@jfreden jfreden commented Feb 17, 2025

Bump json-smart and oauth2-oidc-sdk

@jfreden jfreden marked this pull request as ready for review February 17, 2025 10:42
@jfreden jfreden requested a review from a team as a code owner February 17, 2025 10:42
@elasticsearchmachine elasticsearchmachine added the needs:triage Requires assignment of a team area label label Feb 17, 2025
@jfreden jfreden added :Security/Authentication Logging in, Usernames/passwords, Realms (Native/LDAP/AD/SAML/PKI/etc) and removed needs:triage Requires assignment of a team area label labels Feb 17, 2025
@elasticsearchmachine elasticsearchmachine added the Team:Security Meta label for security team label Feb 17, 2025
@elasticsearchmachine
Copy link
Collaborator

Pinging @elastic/es-security (Team:Security)

@elasticsearchmachine elasticsearchmachine added the Team:Security Meta label for security team label Feb 17, 2025
@jfreden jfreden added >upgrade auto-backport Automatically create backport pull requests when merged and removed Team:Security Meta label for security team labels Feb 17, 2025
@elasticsearchmachine
Copy link
Collaborator

Hi @jfreden, I've created a changelog YAML for you.

@elasticsearchmachine elasticsearchmachine added the Team:Security Meta label for security team label Feb 17, 2025
@slobodanadamovic slobodanadamovic self-requested a review February 17, 2025 14:06
@jfreden
Copy link
Contributor Author

jfreden commented Feb 18, 2025

I've updated most of the transitive dependencies. There are a bunch of dependencies for oauth2-oidc-sdk that are very widely used and were not updated as part of the previous upgrade. For example commons-codec, bcprov-jdk18on and opensaml. Since those are optional and have a pretty large surface area, I think excluding updating them here makes sense.

}
}

public static Date getEpochSecondAsDate(final Map<String, Object> o, final String key) throws ParseException {
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copy link
Contributor

@slobodanadamovic slobodanadamovic left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM 👍

@jfreden jfreden merged commit e166645 into elastic:main Feb 18, 2025
22 checks passed
jfreden added a commit to jfreden/elasticsearch that referenced this pull request Feb 18, 2025
* Bump json-smart and oauth2-oidc-sdk

---------

Co-authored-by: elasticsearchmachine <[email protected]>
jfreden added a commit to jfreden/elasticsearch that referenced this pull request Feb 18, 2025
* Bump json-smart and oauth2-oidc-sdk

---------

Co-authored-by: elasticsearchmachine <[email protected]>
jfreden added a commit to jfreden/elasticsearch that referenced this pull request Feb 18, 2025
* Bump json-smart and oauth2-oidc-sdk

---------

Co-authored-by: elasticsearchmachine <[email protected]>
@elasticsearchmachine
Copy link
Collaborator

💔 Backport failed

Status Branch Result
8.18
8.x
9.0
8.16 Commit could not be cherrypicked due to conflicts
8.17 Commit could not be cherrypicked due to conflicts

You can use sqren/backport to manually backport by running backport --upstream elastic/elasticsearch --pr 122737

jfreden added a commit to jfreden/elasticsearch that referenced this pull request Feb 19, 2025
* Bump json-smart and oauth2-oidc-sdk

---------

Co-authored-by: elasticsearchmachine <[email protected]>
(cherry picked from commit e166645)

# Conflicts:
#	gradle/verification-metadata.xml
@jfreden
Copy link
Contributor Author

jfreden commented Feb 19, 2025

💚 All backports created successfully

Status Branch Result
8.17
8.16

Questions ?

Please refer to the Backport tool documentation

jfreden added a commit to jfreden/elasticsearch that referenced this pull request Feb 19, 2025
* Bump json-smart and oauth2-oidc-sdk

---------

Co-authored-by: elasticsearchmachine <[email protected]>
(cherry picked from commit e166645)

# Conflicts:
#	gradle/verification-metadata.xml
jfreden added a commit that referenced this pull request Feb 19, 2025
* Bump json-smart and oauth2-oidc-sdk (#122737)

* Bump json-smart and oauth2-oidc-sdk

---------

Co-authored-by: elasticsearchmachine <[email protected]>
(cherry picked from commit e166645)

# Conflicts:
#	gradle/verification-metadata.xml

* fixup! Add back verification data for test dep
jfreden added a commit that referenced this pull request Feb 19, 2025
* Bump json-smart and oauth2-oidc-sdk (#122737)

* Bump json-smart and oauth2-oidc-sdk

---------

Co-authored-by: elasticsearchmachine <[email protected]>
(cherry picked from commit e166645)

# Conflicts:
#	gradle/verification-metadata.xml

* fixup! Add back verification data for test dep
kezhenxu94 pushed a commit to tetrateio/elasticsearch that referenced this pull request Feb 20, 2025
…122915)

* Bump json-smart and oauth2-oidc-sdk (elastic#122737)

* Bump json-smart and oauth2-oidc-sdk

---------

Co-authored-by: elasticsearchmachine <[email protected]>
(cherry picked from commit e166645)

# Conflicts:
#	gradle/verification-metadata.xml

* fixup! Add back verification data for test dep
kezhenxu94 pushed a commit to tetrateio/elasticsearch that referenced this pull request Feb 20, 2025
…122915)

* Bump json-smart and oauth2-oidc-sdk (elastic#122737)

* Bump json-smart and oauth2-oidc-sdk

---------

Co-authored-by: elasticsearchmachine <[email protected]>
(cherry picked from commit e166645)

# Conflicts:
#	gradle/verification-metadata.xml

* fixup! Add back verification data for test dep
elasticsearchmachine pushed a commit that referenced this pull request Feb 21, 2025
* Bump json-smart and oauth2-oidc-sdk (#122737)

* Bump json-smart and oauth2-oidc-sdk

---------

Co-authored-by: elasticsearchmachine <[email protected]>

* fixup! Add back verification data for test dep

---------

Co-authored-by: elasticsearchmachine <[email protected]>
elasticsearchmachine pushed a commit that referenced this pull request Feb 21, 2025
* Bump json-smart and oauth2-oidc-sdk

---------

Co-authored-by: elasticsearchmachine <[email protected]>
elasticsearchmachine pushed a commit that referenced this pull request Feb 21, 2025
* Bump json-smart and oauth2-oidc-sdk (#122737)

* Bump json-smart and oauth2-oidc-sdk

---------

Co-authored-by: elasticsearchmachine <[email protected]>

* fixup! Add back verification data for test dep

---------

Co-authored-by: elasticsearchmachine <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

auto-backport Automatically create backport pull requests when merged backport pending :Security/Authentication Logging in, Usernames/passwords, Realms (Native/LDAP/AD/SAML/PKI/etc) Team:Security Meta label for security team >upgrade v8.16.5 v8.17.3 v8.18.1 v8.19.0 v9.0.1 v9.1.0

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants