Skip to content

Bumped qs version for CVE-2025-15284.#428

Merged
amsiglan merged 2 commits intoopensearch-project:2.19from
AWSHurneyt:2.19-cve-2025-15284
Mar 5, 2026
Merged

Bumped qs version for CVE-2025-15284.#428
amsiglan merged 2 commits intoopensearch-project:2.19from
AWSHurneyt:2.19-cve-2025-15284

Conversation

@AWSHurneyt
Copy link
Collaborator

Description

Bumped qs version for CVE-2025-15284.

Issues Resolved

[List any issues this PR will resolve]

Check List

  • Commits are signed per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

Signed-off-by: Thomas Hurney <hurneyt@amazon.com>
@AWSHurneyt
Copy link
Collaborator Author

The cypress test workflows will fail as OSD core has bumped to a version of cypress on the 2.19 branch that requires infrastructure changes to the plugin. I'll make those changes in a separate PR since the release team will run the tests using the functional test repo anyway.

Cypress version 10.0.0 no longer supports cypress.json.

Signed-off-by: Thomas Hurney <hurneyt@amazon.com>
@amsiglan amsiglan merged commit 19fb0ee into opensearch-project:2.19 Mar 5, 2026
5 of 8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants