fix: upgrade axios #1178

olexii4 · 2024-08-27T13:44:30Z

What does this PR do?

This PR upgrades the next libs:

Screenshot/screencast of this PR

What issues does this PR fix or reference?

fixes eclipse-che/che#23152

che-bot · 2024-08-27T13:44:45Z

Click here to review and test in web IDE:

svor

lgtm

openshift-ci · 2024-08-27T13:49:27Z

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: olexii4, svor

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

github-actions · 2024-08-27T13:53:07Z

Docker image build succeeded: quay.io/eclipse/che-dashboard:pr-1178

kubectl patch command

kubectl patch -n eclipse-che "checluster/eclipse-che" --type=json -p="[{"op": "replace", "path": "/spec/components/dashboard/deployment", "value": {containers: [{image: "quay.io/eclipse/che-dashboard:pr-1178", name: che-dashboard}]}}]"

github-actions · 2024-08-27T13:57:48Z

Docker image build succeeded: quay.io/eclipse/che-dashboard:pr-1178

kubectl patch command

kubectl patch -n eclipse-che "checluster/eclipse-che" --type=json -p="[{"op": "replace", "path": "/spec/components/dashboard/deployment", "value": {containers: [{image: "quay.io/eclipse/che-dashboard:pr-1178", name: che-dashboard}]}}]"

Signed-off-by: Oleksii Orel <[email protected]>

openshift-ci · 2024-08-27T14:05:35Z

New changes are detected. LGTM label has been removed.

github-actions · 2024-08-27T14:14:29Z

Docker image build succeeded: quay.io/eclipse/che-dashboard:pr-1178

kubectl patch command

kubectl patch -n eclipse-che "checluster/eclipse-che" --type=json -p="[{"op": "replace", "path": "/spec/components/dashboard/deployment", "value": {containers: [{image: "quay.io/eclipse/che-dashboard:pr-1178", name: che-dashboard}]}}]"

devstudio-release · 2024-08-27T14:58:39Z

Build 3.16 :: dashboard_3.16/17: Console, Changes, Git Data

devstudio-release · 2024-08-27T15:04:56Z

Build 3.16 :: sync-to-downstream_3.16/100: Console, Changes, Git Data

devstudio-release · 2024-08-27T15:09:40Z

Build 3.16 :: get-sources-rhpkg-container-build_3.16/97: Console, Changes, Git Data

devstudio-release · 2024-08-27T18:38:51Z

Build 3.16 :: push-latest-container-to-quay_3.16/61: Console, Changes, Git Data

devstudio-release · 2024-08-27T18:42:40Z

Build 3.16 :: get-sources-rhpkg-container-build_3.16/97:

dashboard : 3.16 :: Build 63704212 : quay.io/devspaces/dashboard-rhel8:3.16-25
SUCCESS; copied to quay; /DS_CI/push-latest-container-to-quay_3.16/61 triggered

devstudio-release · 2024-08-27T18:42:43Z

Build 3.16 :: dashboard_3.16/17:

Upstream sync done; /DS_CI/sync-to-downstream_3.16/100 triggered

devstudio-release · 2024-08-27T18:42:47Z

Build 3.16 :: update-digests_3.16/155: Console, Changes, Git Data

devstudio-release · 2024-08-27T18:47:51Z

Build 3.16 :: operator-bundle_3.16/44: Console, Changes, Git Data

devstudio-release · 2024-08-27T18:55:29Z

Build 3.16 :: sync-to-downstream_3.16/103: Console, Changes, Git Data

devstudio-release · 2024-08-27T19:00:32Z

Build 3.16 :: get-sources-rhpkg-container-build_3.16/100: Console, Changes, Git Data

devstudio-release · 2024-08-27T21:00:06Z

Build 3.16 :: push-latest-container-to-quay_3.16/62: Console, Changes, Git Data

devstudio-release · 2024-08-27T21:01:58Z

Build 3.16 :: copyIIBsToQuay/2769: Console, Changes, Git Data

devstudio-release · 2024-08-27T21:02:56Z

Build 3.16 :: get-sources-rhpkg-container-build_3.16/100:

devspaces-operator-bundle : 3.16 :: Build 63712706 : quay.io/devspaces/devspaces-operator-bundle:3.16-61
SUCCESS; copied to quay; /DS_CI/push-latest-container-to-quay_3.16/62 triggered;
Bundle CSV related images:
- quay.io/devspaces/code-rhel8:3.16-17
- quay.io/devspaces/configbump-rhel8:3.16-4
- quay.io/devspaces/dashboard-rhel8:3.16-25
- quay.io/devspaces/devfileregistry-rhel8:3.16-66
- quay.io/devspaces/devspaces-rhel8-operator:3.16-11
- quay.io/devspaces/idea-rhel8:3.16-3
- quay.io/devspaces/pluginregistry-rhel8:3.16-14
- quay.io/devspaces/server-rhel8:3.16-14
- quay.io/devspaces/traefik-rhel8:3.16-2
- quay.io/devspaces/udi-rhel8:3.16-6
= registry.redhat.io/openshift4/ose-kube-rbac-proxy:v4.12.0-202408071159.p0.gb17014f.assembly.stream.el8
= registry.redhat.io/openshift4/ose-oauth-proxy:v4.12.0-202408071159.p0.g03e5b13.assembly.stream.el8
= registry.redhat.io/rhscl/mongodb-36-rhel7:1-50
= registry.redhat.io/ubi8/ubi-minimal:8.8-1072.1697626218

devstudio-release · 2024-08-27T21:02:59Z

Build 3.16 :: sync-to-downstream_3.16/103:

Build container: devspaces-operator-bundle synced; /DS_CI/get-sources-rhpkg-container-build_3.16/100 triggered; /job/DS_CI/job/dsc_3.16 triggered;

devstudio-release · 2024-08-27T21:03:00Z

Build 3.16 :: operator-bundle_3.16/44:

Upstream sync done; /DS_CI/sync-to-downstream_3.16/103 triggered

devstudio-release · 2024-08-27T21:05:43Z

Build 3.16 :: update-digests_3.16/155:

Detected new images: rebuild operator-bundle
* dashboard; /DS_CI/operator-bundle_3.16/44 triggered

devstudio-release · 2024-08-27T21:07:33Z

Build 3.16 :: dsc_3.16/23: Console, Changes, Git Data

devstudio-release · 2024-08-27T21:14:35Z

Build 3.16 :: dsc_3.16/23:

3.16.0-CI

devstudio-release · 2024-08-27T22:16:11Z

Build 3.16 :: copyIIBsToQuay/2769:

3.16
arches = x86_64, s390x, ppc64le;
  * LATEST DS OPERATOR BUNDLE = <a href=https://quay.io/repository/devspaces/devspaces-operator-bundle?tab=tags>registry-proxy.engineering.redhat.com/rh-osbs/devspaces-operator-bundle:3.16-61
  * LATEST DWO OPERATOR BUNDLE = <a href=https://quay.io/repository/devworkspace/devworkspace-operator-bundle?tab=tags>registry-proxy.engineering.redhat.com/rh-osbs/devworkspace-operator-bundle:0.30-1
+ s390x-rhel8 IIB(s) copied:
  + quay.io/devspaces/iib:3.16-v4.16-799374-793242-s390x
  + quay.io/devspaces/iib:3.16-v4.16-s390x
  + quay.io/devspaces/iib:latest-v4.16-s390x
  + quay.io/devspaces/iib:3.16-v4.15-799373-793245-s390x
  + quay.io/devspaces/iib:3.16-v4.15-s390x
  + quay.io/devspaces/iib:latest-v4.15-s390x
  + quay.io/devspaces/iib:3.16-v4.14-799372-793239-s390x
  + quay.io/devspaces/iib:3.16-v4.14-s390x
  + quay.io/devspaces/iib:latest-v4.14-s390x
  + quay.io/devspaces/iib:3.16-v4.13-800059-793241-s390x
  + quay.io/devspaces/iib:3.16-v4.13-s390x
  + quay.io/devspaces/iib:latest-v4.13-s390x
  + quay.io/devspaces/iib:3.16-v4.12-800057-793240-s390x
  + quay.io/devspaces/iib:3.16-v4.12-s390x
  + quay.io/devspaces/iib:latest-v4.12-s390x
+ x86_64-rhel8 IIB(s) copied:
  + quay.io/devspaces/iib:3.16-v4.16-799374-793242-x86_64
  + quay.io/devspaces/iib:3.16-v4.16-x86_64
  + quay.io/devspaces/iib:latest-v4.16-x86_64
  + quay.io/devspaces/iib:3.16-v4.15-799373-793245-x86_64
  + quay.io/devspaces/iib:3.16-v4.15-x86_64
  + quay.io/devspaces/iib:latest-v4.15-x86_64
  + quay.io/devspaces/iib:3.16-v4.14-799372-793239-x86_64
  + quay.io/devspaces/iib:3.16-v4.14-x86_64
  + quay.io/devspaces/iib:latest-v4.14-x86_64
  + quay.io/devspaces/iib:3.16-v4.13-800059-793241-x86_64
  + quay.io/devspaces/iib:3.16-v4.13-x86_64
  + quay.io/devspaces/iib:latest-v4.13-x86_64
  + quay.io/devspaces/iib:3.16-v4.12-800057-793240-x86_64
  + quay.io/devspaces/iib:3.16-v4.12-x86_64
  + quay.io/devspaces/iib:latest-v4.12-x86_64
+ ppc64le-rhel8 IIB(s) copied:
  + quay.io/devspaces/iib:3.16-v4.16-799374-793242-ppc64le
  + quay.io/devspaces/iib:3.16-v4.15-799373-793245-ppc64le
  + quay.io/devspaces/iib:3.16-v4.14-800058-793239-ppc64le
  + quay.io/devspaces/iib:3.16-v4.14-ppc64le
  + quay.io/devspaces/iib:latest-v4.14-ppc64le
  + quay.io/devspaces/iib:3.16-v4.13-800059-793241-ppc64le
  + quay.io/devspaces/iib:3.16-v4.13-ppc64le
  + quay.io/devspaces/iib:latest-v4.13-ppc64le
  + quay.io/devspaces/iib:3.16-v4.12-800057-793240-ppc64le
  + quay.io/devspaces/iib:3.16-v4.12-ppc64le
  + quay.io/devspaces/iib:latest-v4.12-ppc64le

devstudio-release · 2024-08-29T20:21:30Z

Build 3.16 :: dashboard_3.16/18: Console, Changes, Git Data

devstudio-release · 2024-08-29T20:28:51Z

Build 3.16 :: sync-to-downstream_3.16/106: Console, Changes, Git Data

devstudio-release · 2024-08-29T20:36:30Z

Build 3.16 :: get-sources-rhpkg-container-build_3.16/103: Console, Changes, Git Data

devstudio-release · 2024-08-29T21:56:42Z

Build 3.16 :: push-latest-container-to-quay_3.16/65: Console, Changes, Git Data

devstudio-release · 2024-08-29T22:01:19Z

Build 3.16 :: get-sources-rhpkg-container-build_3.16/103:

dashboard : 3.16 :: Build 63814875 : quay.io/devspaces/dashboard-rhel8:3.16-26
SUCCESS; copied to quay; /DS_CI/push-latest-container-to-quay_3.16/65 triggered

devstudio-release · 2024-08-29T22:01:23Z

Build 3.16 :: dashboard_3.16/18:

Upstream sync done; /DS_CI/sync-to-downstream_3.16/106 triggered

devstudio-release · 2024-08-29T22:06:09Z

Build 3.16 :: update-digests_3.16/170: Console, Changes, Git Data

devstudio-release · 2024-08-29T22:10:00Z

Build 3.16 :: operator-bundle_3.16/46: Console, Changes, Git Data

devstudio-release · 2024-08-29T22:17:55Z

Build 3.16 :: sync-to-downstream_3.16/107: Console, Changes, Git Data

devstudio-release · 2024-08-29T22:23:22Z

Build 3.16 :: get-sources-rhpkg-container-build_3.16/104: Console, Changes, Git Data

devstudio-release · 2024-08-29T22:34:20Z

Build 3.16 :: push-latest-container-to-quay_3.16/66: Console, Changes, Git Data

devstudio-release · 2024-08-29T22:39:50Z

Build 3.16 :: get-sources-rhpkg-container-build_3.16/104:

devspaces-operator-bundle : 3.16 :: Build 63815690 : quay.io/devspaces/devspaces-operator-bundle:3.16-63
SUCCESS; copied to quay; /DS_CI/push-latest-container-to-quay_3.16/66 triggered;
Bundle CSV related images:
- quay.io/devspaces/code-rhel8:3.16-20
- quay.io/devspaces/configbump-rhel8:3.16-4
- quay.io/devspaces/dashboard-rhel8:3.16-26
- quay.io/devspaces/devfileregistry-rhel8:3.16-66
- quay.io/devspaces/devspaces-rhel8-operator:3.16-11
- quay.io/devspaces/idea-rhel8:3.16-3
- quay.io/devspaces/pluginregistry-rhel8:3.16-14
- quay.io/devspaces/server-rhel8:3.16-14
- quay.io/devspaces/traefik-rhel8:3.16-2
- quay.io/devspaces/udi-rhel8:3.16-6
= registry.redhat.io/openshift4/ose-kube-rbac-proxy:v4.12.0-202408220304.p0.gb17014f.assembly.stream.el8
= registry.redhat.io/openshift4/ose-oauth-proxy:v4.12.0-202408220304.p0.g03e5b13.assembly.stream.el8
= registry.redhat.io/rhscl/mongodb-36-rhel7:1-50
= registry.redhat.io/ubi8/ubi-minimal:8.8-1072.1697626218

devstudio-release · 2024-08-29T22:39:53Z

Build 3.16 :: sync-to-downstream_3.16/107:

Build container: devspaces-operator-bundle synced; /DS_CI/get-sources-rhpkg-container-build_3.16/104 triggered; /job/DS_CI/job/dsc_3.16 triggered;

devstudio-release · 2024-08-29T22:39:54Z

Build 3.16 :: operator-bundle_3.16/46:

Upstream sync done; /DS_CI/sync-to-downstream_3.16/107 triggered

devstudio-release · 2024-08-29T22:41:20Z

Build 3.16 :: update-digests_3.16/170:

Detected new images: rebuild operator-bundle
* dashboard; /DS_CI/operator-bundle_3.16/46 triggered

devstudio-release · 2024-08-29T22:43:06Z

Build 3.16 :: dsc_3.16/25: Console, Changes, Git Data

devstudio-release · 2024-08-29T22:49:00Z

Build 3.16 :: copyIIBsToQuay/2773: Console, Changes, Git Data

devstudio-release · 2024-08-29T22:53:38Z

Build 3.16 :: dsc_3.16/25:

3.16.0-CI

olexii4 requested a review from svor August 27, 2024 13:44

olexii4 requested review from akurinnoy and ibuziuk as code owners August 27, 2024 13:44

olexii4 force-pushed the CRW-6929 branch from ff5c156 to a169d1f Compare August 27, 2024 13:49

svor approved these changes Aug 27, 2024

View reviewed changes

openshift-ci bot assigned svor Aug 27, 2024

openshift-ci bot added the lgtm label Aug 27, 2024

fix: upgrade axios

011ea3e

Signed-off-by: Oleksii Orel <[email protected]>

olexii4 force-pushed the CRW-6929 branch from a169d1f to 011ea3e Compare August 27, 2024 14:05

openshift-ci bot removed the lgtm label Aug 27, 2024

olexii4 merged commit 97dd4a7 into 7.90.x Aug 27, 2024
10 checks passed

olexii4 deleted the CRW-6929 branch August 27, 2024 14:58

olexii4 mentioned this pull request Sep 17, 2024

Security Vulnerability: Server-Side Request Forgery (SSRF) in Axios eclipse-che/che#23152

Closed

fix: upgrade axios #1178

fix: upgrade axios #1178

Conversation

olexii4 commented Aug 27, 2024 • edited Loading

What does this PR do?

Screenshot/screencast of this PR

What issues does this PR fix or reference?

che-bot commented Aug 27, 2024

svor left a comment

Choose a reason for hiding this comment

openshift-ci bot commented Aug 27, 2024

github-actions bot commented Aug 27, 2024

github-actions bot commented Aug 27, 2024

openshift-ci bot commented Aug 27, 2024

github-actions bot commented Aug 27, 2024

devstudio-release commented Aug 27, 2024

devstudio-release commented Aug 27, 2024

devstudio-release commented Aug 27, 2024

devstudio-release commented Aug 27, 2024

devstudio-release commented Aug 27, 2024

devstudio-release commented Aug 27, 2024

devstudio-release commented Aug 27, 2024

devstudio-release commented Aug 27, 2024

devstudio-release commented Aug 27, 2024

devstudio-release commented Aug 27, 2024

devstudio-release commented Aug 27, 2024

devstudio-release commented Aug 27, 2024

devstudio-release commented Aug 27, 2024

devstudio-release commented Aug 27, 2024

devstudio-release commented Aug 27, 2024

devstudio-release commented Aug 27, 2024

devstudio-release commented Aug 27, 2024

devstudio-release commented Aug 27, 2024

devstudio-release commented Aug 27, 2024

devstudio-release commented Aug 29, 2024

devstudio-release commented Aug 29, 2024

devstudio-release commented Aug 29, 2024

devstudio-release commented Aug 29, 2024

devstudio-release commented Aug 29, 2024

devstudio-release commented Aug 29, 2024

devstudio-release commented Aug 29, 2024

devstudio-release commented Aug 29, 2024

devstudio-release commented Aug 29, 2024

devstudio-release commented Aug 29, 2024

devstudio-release commented Aug 29, 2024

devstudio-release commented Aug 29, 2024

devstudio-release commented Aug 29, 2024

devstudio-release commented Aug 29, 2024

devstudio-release commented Aug 29, 2024

devstudio-release commented Aug 29, 2024

devstudio-release commented Aug 29, 2024

devstudio-release commented Aug 29, 2024

olexii4 commented Aug 27, 2024 •

edited

Loading