Skip to content

Bump vulnerable packages - #175

Merged
nevoodoo merged 5 commits into
mainfrom
bump-vuln-packages
May 5, 2026
Merged

nevoodoo merged 5 commits into
mainfrom
bump-vuln-packages

Conversation

@nevoodoo

@nevoodoo nevoodoo commented May 5, 2026

Copy link
Copy Markdown
Contributor

Bumps vulnerable packages and adds a patch bump to cpg-flow

@nevoodoo
nevoodoo requested a review from a team as a code owner May 5, 2026 01:39
@github-actions

github-actions Bot commented May 5, 2026

Copy link
Copy Markdown
Contributor

Vulnerability Audit

Found 1 vulnerabilities across 1 packages.
1 blocked.

Blocked upstream — needs a fix in a parent package

Package Current → Fix CVEs Blocked by
bokeh 3.4.3 → 3.8.2 CVE-2026-21883 hail==0.2.137 pins <3.5,>=3

@github-actions

github-actions Bot commented May 5, 2026

Copy link
Copy Markdown
Contributor

🐳 Docker Image Built

A new Docker image has been built for this PR:

Image: australia-southeast1-docker.pkg.dev/cpg-common/images-dev/cpg_flow:1c5f5ff43b560bd905c2625eaa86fcc3cbb884cd

Pull command:

docker pull australia-southeast1-docker.pkg.dev/cpg-common/images-dev/cpg_flow:1c5f5ff43b560bd905c2625eaa86fcc3cbb884cd

🔗 View in Google Cloud Console


This comment was automatically generated by the Docker workflow.

@nevoodoo
nevoodoo requested a review from rameshka May 5, 2026 02:01
@nevoodoo
nevoodoo merged commit a588848 into main May 5, 2026
5 of 6 checks passed
@nevoodoo
nevoodoo deleted the bump-vuln-packages branch May 5, 2026 03:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants