Skip to content

deps: bump nghttp2 -> 1.57.0#30207

Merged
phlax merged 2 commits intoenvoyproxy:mainfrom
RiverPhillips:nghttp2-1.57.0
Oct 22, 2023
Merged

deps: bump nghttp2 -> 1.57.0#30207
phlax merged 2 commits intoenvoyproxy:mainfrom
RiverPhillips:nghttp2-1.57.0

Conversation

@RiverPhillips
Copy link
Copy Markdown
Contributor

Commit Message:
Additional Description:
Risk Level:
Testing:
Docs Changes:
Release Notes:
Platform Specific Features:
[Optional Runtime guard:]
[Optional Fixes #Issue] Resolves : #30087
[Optional Fixes commit #PR or SHA]
[Optional Deprecated:]
[Optional API Considerations:]

@repokitteh-read-only repokitteh-read-only bot added the deps Approval required for changes to Envoy's external dependencies label Oct 14, 2023
@repokitteh-read-only
Copy link
Copy Markdown

CC @envoyproxy/dependency-shepherds: Your approval is needed for changes made to (bazel/.*repos.*\.bzl)|(bazel/dependency_imports\.bzl)|(api/bazel/.*\.bzl)|(.*/requirements\.txt)|(.*\.patch).
envoyproxy/dependency-shepherds assignee is @moderation

🐱

Caused by: #30207 was opened by RiverPhillips.

see: more, trace.

Signed-off-by: River Phillips <riverphillips1@gmail.com>
@moderation
Copy link
Copy Markdown
Contributor

/lgtm deps

@repokitteh-read-only repokitteh-read-only bot removed the deps Approval required for changes to Envoy's external dependencies label Oct 14, 2023
@RiverPhillips
Copy link
Copy Markdown
Contributor Author

/retest

@repokitteh-read-only repokitteh-read-only bot added the deps Approval required for changes to Envoy's external dependencies label Oct 17, 2023
@phlax phlax self-assigned this Oct 19, 2023
@phlax
Copy link
Copy Markdown
Member

phlax commented Oct 19, 2023

/retest mobile

@phlax phlax enabled auto-merge (squash) October 20, 2023 09:25
@moderation
Copy link
Copy Markdown
Contributor

/lgtm deps

@repokitteh-read-only repokitteh-read-only bot removed the deps Approval required for changes to Envoy's external dependencies label Oct 22, 2023
@phlax phlax disabled auto-merge October 22, 2023 10:47
Copy link
Copy Markdown
Member

@phlax phlax left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm, thanks @RiverPhillips

we should have landed this before the release - it seems it resolves another instance of CVE-2023-44487

@phlax phlax merged commit fbac4c7 into envoyproxy:main Oct 22, 2023
phlax pushed a commit to phlax/envoy that referenced this pull request Oct 22, 2023
Signed-off-by: River Phillips <riverphillips1@gmail.com>
Signed-off-by: Ryan Northey <ryan@synca.io>
phlax pushed a commit to phlax/envoy that referenced this pull request Oct 22, 2023
Signed-off-by: River Phillips <riverphillips1@gmail.com>
Signed-off-by: Ryan Northey <ryan@synca.io>
phlax pushed a commit to phlax/envoy that referenced this pull request Oct 22, 2023
Signed-off-by: River Phillips <riverphillips1@gmail.com>
Signed-off-by: Ryan Northey <ryan@synca.io>
phlax pushed a commit to phlax/envoy that referenced this pull request Oct 22, 2023
Signed-off-by: River Phillips <riverphillips1@gmail.com>
Signed-off-by: Ryan Northey <ryan@synca.io>
phlax pushed a commit that referenced this pull request Oct 22, 2023
Signed-off-by: River Phillips <riverphillips1@gmail.com>
Signed-off-by: Ryan Northey <ryan@synca.io>
phlax pushed a commit that referenced this pull request Oct 22, 2023
Signed-off-by: River Phillips <riverphillips1@gmail.com>
Signed-off-by: Ryan Northey <ryan@synca.io>
phlax pushed a commit that referenced this pull request Oct 23, 2023
Signed-off-by: River Phillips <riverphillips1@gmail.com>
Signed-off-by: Ryan Northey <ryan@synca.io>
SeanKilleen pushed a commit to SeanKilleen/envoy that referenced this pull request Apr 3, 2024
Signed-off-by: River Phillips <riverphillips1@gmail.com>
Signed-off-by: Ryan Northey <ryan@synca.io>
Signed-off-by: Sean Killeen <SeanKilleen@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Newer release available com_github_nghttp2_nghttp2: v1.57.0 (current: v1.55.1)

3 participants