Skip to content

Conversation

@sumukhswamy
Copy link
Collaborator

@sumukhswamy sumukhswamy commented Oct 28, 2025

Description

CVE fixed for
[CVE-2025-9287 CRITICAL]
[CVE-2025-9288 CRITICAL]
[CVE-2025-6547 CRITICAL]
[CVE-2025-6545 CRITICAL]

Issues Resolved

Screenshot

Testing the changes

Changelog

  • chore: CVE Fixed for 2.19, Update Webpack to support jspdf upgrade

Check List

  • All tests pass
    • yarn test:jest
    • yarn test:jest_integration
  • New functionality includes testing.
  • New functionality has been documented.
  • Update CHANGELOG.md
  • Commits are signed per the DCO using --signoff

Signed-off-by: sumukhswamy <[email protected]>
@github-actions
Copy link
Contributor

❌ Invalid Prefix

Invalid description prefix. Found "chore ". Expected "breaking", "deprecate", "feat", "fix", "infra", "doc", "chore", "refactor", "security", "skip", or "test".

@github-actions
Copy link
Contributor

❌ Changelog Entry Missing Hyphen

Changelog entries must begin with a hyphen (-).

TackAdam
TackAdam previously approved these changes Oct 28, 2025
@codecov
Copy link

codecov bot commented Oct 28, 2025

Codecov Report

❌ Patch coverage is 0% with 2 lines in your changes missing coverage. Please review.
✅ Project coverage is 59.28%. Comparing base (a659762) to head (6cfb3f8).

Files with missing lines Patch % Lines
...s/osd-test/src/failed_tests_reporter/github_api.ts 0.00% 2 Missing ⚠️
Additional details and impacted files
@@            Coverage Diff             @@
##             2.19   #10822      +/-   ##
==========================================
- Coverage   61.16%   59.28%   -1.88%     
==========================================
  Files        3815     3618     -197     
  Lines       91512    86413    -5099     
  Branches    14459    13631     -828     
==========================================
- Hits        55975    51234    -4741     
+ Misses      31980    31949      -31     
+ Partials     3557     3230     -327     
Flag Coverage Δ
Linux_1 ?
Linux_2 ?
Linux_3 ?
Linux_4 ?
Windows_1 29.65% <0.00%> (+0.49%) ⬆️
Windows_2 57.06% <ø> (+0.50%) ⬆️
Windows_3 40.87% <ø> (+2.80%) ⬆️
Windows_4 30.79% <ø> (+1.61%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@sumukhswamy sumukhswamy changed the title added cve fix [Maintainenece]CVE fixes for 2.19.4 Oct 28, 2025
@gaiksaya gaiksaya changed the title [Maintainenece]CVE fixes for 2.19.4 [Maintainence] CVE fixes for 2.19.4 Oct 28, 2025
Signed-off-by: sumukhswamy <[email protected]>
Signed-off-by: sumukhswamy <[email protected]>
angle943
angle943 previously approved these changes Oct 28, 2025
ps48
ps48 previously approved these changes Oct 28, 2025
@ps48
Copy link
Member

ps48 commented Oct 28, 2025

@sumukhswamy can you please check why is the build failing:

Error: Package subpath './lib/adapters/http' is not defined by "exports" in /home/runner/work/OpenSearch-Dashboards/OpenSearch-Dashboards/artifacts/node_modules/axios/package.json

@sumukhswamy sumukhswamy dismissed stale reviews from ps48 and angle943 via b700de0 October 28, 2025 23:45
Signed-off-by: sumukhswamy <[email protected]>
Signed-off-by: sumukhswamy <[email protected]>
Signed-off-by: sumukhswamy <[email protected]>
Signed-off-by: sumukhswamy <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

maintenance v2.19.4 Issues targeting release v2.19.4

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants