Skip to content
This repository was archived by the owner on Jul 9, 2025. It is now read-only.

Conversation

@beyackle
Copy link
Contributor

Description

We're getting a security advisory on this, so I've updated "archiver" over here to a version that uses a newer version of "bl" without that vulnerability.

Task Item

#minor

@coveralls
Copy link

coveralls commented Oct 28, 2020

Coverage Status

Coverage decreased (-0.005%) to 55.139% when pulling 1b06106 on beyackle/updateArchiverInVACore into 44598c8 on main.

@a-b-r-o-w-n a-b-r-o-w-n merged commit eaaba10 into main Oct 29, 2020
@a-b-r-o-w-n a-b-r-o-w-n deleted the beyackle/updateArchiverInVACore branch October 29, 2020 17:24
alanlong9278 added a commit to alanlong9278/BotFramework-Composer that referenced this pull request Nov 5, 2020
* settingsPage: (110 commits)
  code style
  update qna end point key after update qna subscription key
  handle comments
  handle comments
  chore: remove orchestrator (microsoft#4602)
  feat: taking control recognizer generation enhancements (microsoft#4549)
  chore: Set up Nightly static analysis pipeline in ADO (microsoft#4589)
  feature: show multi-skill project with correct link behavior (microsoft#4466)
  doc: guidelines/help-contents (microsoft#4354)
  Functions runtime: Revert to netcore3.0 for functions and make code more robust to functions variations (microsoft#4570)
  feat: Disable Connect to Skill menu action inside skill (microsoft#4557)
  fix (microsoft#4591)
  fix: Adds validation for form dialogs propery name (microsoft#4574)
  fix: update archive version in extensions/vacore (microsoft#4571)
  fix: e2e test (microsoft#4581)
  perf: avoid redraw when Project Tree selected item not changed (microsoft#4564)
  fix: security analysis failure due to bl package version (microsoft#4580)
  fix publish ut timeout (microsoft#4578)
  fix: Can not add properties in "SetProperties" action (microsoft#4572)
  ci: remove code scanning workflow (microsoft#4569)
  ...
@cwhitten cwhitten mentioned this pull request Nov 13, 2020
lei9444 pushed a commit to lei9444/BotFramework-Composer-1 that referenced this pull request Jun 15, 2021
* Update en-US.json

* update archiver to security-compliant version
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants