New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

update copilot to 24.4.8 #6611

Merged

manolo merged 1 commit into 24.4 from update-copilot-24.4.8-1721374204

Jul 22, 2024

Contributor

vaadin-bot commented Jul 19, 2024

No description provided.

github-actions bot commented Jul 19, 2024 •

edited

Loading

Dependencies Report

🟠 Known Vulnerabilities:
- Vulnerabilities in: pkg:npm/[email protected] [CVE-2024-34394, CVE-2024-34393] (osv-bomber,oss-bomber,osv-scan)
  👌 This is coming from the tools, @cyclonedx/cyclonedx, we have used for sbom module, FP for us.
  ·
- Vulnerabilities in: pkg:npm/[email protected] [CVE-2024-26467] (oss-bomber)
  👌 This is coming from the tools, @cyclonedx/cyclonedx-npm, we have used for sbom module, FP for us.
  ·
- Vulnerabilities in: pkg:maven/com.fasterxml.jackson.core/[email protected] [CVE-2023-35116] (owasp)
  👌 Not a valid CVE report based on the vendor analysis and research
  · cpe:2.3:a:fasterxml:jackson-databind::::::::
- Vulnerabilities in: pkg:maven/me.friwi/jcef-api@jcef-af53d63%2Bcef-104.4.23%2Bg46ae630%2Bchromium-104.0.5112.102 [CVE-2024-21639, CVE-2024-21640] (owasp)
  👌 Wait for the update from the jcefmaven community. Meanwhile the swing-kit is supposed to be used with fixed websites and not to browse the internet, we have a check for that, so the only possible attacker would be the same person that created the swing application, aka our customer devs. so this vulnerability is not classified by us as critical issue
  · cpe:2.3:a:chromiumembedded:chromium_embedded_framework::::::::
📔 No License Issues

[Click for more Details]


update copilot to 24.4.8

774b6fa

manolo force-pushed the update-copilot-24.4.8-1721374204 branch from 2d92ab6 to 774b6fa Compare

July 22, 2024 10:51

manolo merged commit 88fa2ff into 24.4

2 of 3 checks passed

manolo deleted the update-copilot-24.4.8-1721374204 branch

July 22, 2024 11:08

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment