|
| 1 | + |
| 2 | +* __Generated THIRD-PARTY file for d553432 (#5956)__ |
| 3 | + |
| 4 | + [opensearch-trigger-bot[bot]](mailto:98922864+opensearch-trigger-bot[bot]@users.noreply.github.com) - Mon, 4 Aug 2025 14:10:08 -0700 |
| 5 | + |
| 6 | + EAD -> refs/heads/2.12, refs/remotes/upstream/2.12 |
| 7 | + Signed-off-by: GitHub <noreply@github.com> Co-authored-by: dlvenable |
| 8 | + <dlvenable@users.noreply.github.com> |
| 9 | + |
| 10 | +* __Updates to Data Prepper 2.12.1 (#5954)__ |
| 11 | + |
| 12 | + [David Venable](mailto:dlv@amazon.com) - Mon, 4 Aug 2025 13:58:13 -0700 |
| 13 | + |
| 14 | + |
| 15 | + Signed-off-by: David Venable <dlv@amazon.com> |
| 16 | + |
| 17 | +* __Updates the Postgresql JDBC driver to 42.7.1 to fix CVE-2025-49146. (#5935) (#5936)__ |
| 18 | + |
| 19 | + [opensearch-trigger-bot[bot]](mailto:98922864+opensearch-trigger-bot[bot]@users.noreply.github.com) - Fri, 1 Aug 2025 08:38:27 -0700 |
| 20 | + |
| 21 | + |
| 22 | + (cherry picked from commit eac98b3031ecbb0c5c86d9b0b45e914743edb3ba) |
| 23 | + |
| 24 | + Signed-off-by: David Venable <dlv@amazon.com> Co-authored-by: David Venable |
| 25 | + <dlv@amazon.com> |
| 26 | + |
| 27 | +* __Fix S3DBService and LocalDBService file overwrite handling during downloads (#5911) (#5934)__ |
| 28 | + |
| 29 | + [opensearch-trigger-bot[bot]](mailto:98922864+opensearch-trigger-bot[bot]@users.noreply.github.com) - Thu, 31 Jul 2025 16:34:02 -0700 |
| 30 | + |
| 31 | + |
| 32 | + Fix S3DBService/LocalDBService file overwrite handling during downloads |
| 33 | + |
| 34 | + |
| 35 | + |
| 36 | + (cherry picked from commit b87890ad33fd50fac700e21758825d651c8f33d9) |
| 37 | + |
| 38 | + Signed-off-by: kirtanhk <kirtanhk@amazon.com> Co-authored-by: Kirtan Kakadiya |
| 39 | + <35823164+KirtanKakadiya@users.noreply.github.com> Co-authored-by: kirtanhk |
| 40 | + <kirtanhk@amazon.com> |
| 41 | + |
| 42 | +* __chore(deps): update dependency setuptools to v78 (#5727) (#5926)__ |
| 43 | + |
| 44 | + [opensearch-trigger-bot[bot]](mailto:98922864+opensearch-trigger-bot[bot]@users.noreply.github.com) - Wed, 30 Jul 2025 12:45:06 -0700 |
| 45 | + |
| 46 | + |
| 47 | + (cherry picked from commit aff23afca7be6eb37ce42d1448e445bc8b72b853) |
| 48 | + |
| 49 | + Co-authored-by: mend-for-github-com[bot] |
| 50 | + <50673670+mend-for-github-com[bot]@users.noreply.github.com> |
| 51 | + |
| 52 | +* __Update dependency aws-cdk-lib (#5886) (#5925)__ |
| 53 | + |
| 54 | + [opensearch-trigger-bot[bot]](mailto:98922864+opensearch-trigger-bot[bot]@users.noreply.github.com) - Wed, 30 Jul 2025 12:44:45 -0700 |
| 55 | + |
| 56 | + |
| 57 | + (cherry picked from commit fe0d8a71143ca5310452406353eb3551656374c5) |
| 58 | + |
| 59 | + Co-authored-by: mend-for-github-com[bot] |
| 60 | + <50673670+mend-for-github-com[bot]@users.noreply.github.com> |
| 61 | + |
| 62 | +* __Bump armeria + grpc + protobuf to fix CVE-2024-7254 (#5891) (#5924)__ |
| 63 | + |
| 64 | + [opensearch-trigger-bot[bot]](mailto:98922864+opensearch-trigger-bot[bot]@users.noreply.github.com) - Wed, 30 Jul 2025 12:44:26 -0700 |
| 65 | + |
| 66 | + |
| 67 | + Bump armeria + grpc + protobuf to fix CVE-2024-7254 |
| 68 | + |
| 69 | + Upgrades protobuf dependencies with versions that fix Fixes CVE-2024-7254. |
| 70 | + |
| 71 | + Use inline mocks in DnsPeerListProviderCreationTest to support mocking final |
| 72 | + classes. Updates to the GrpcRequestExceptionHandlerTest required by the update |
| 73 | + to the Armeria test library. Enforce a consistent JUnit version across the |
| 74 | + project to avoid JUnit consistency issues. |
| 75 | + |
| 76 | + |
| 77 | + |
| 78 | + |
| 79 | + (cherry picked from commit 292a547f61a549a57f173d7c899f7ca697e7b5df) |
| 80 | + |
| 81 | + Signed-off-by: Karsten Schnitter <k.schnitter@sap.com> Signed-off-by: David |
| 82 | + Venable <dlv@amazon.com> Co-authored-by: Karsten Schnitter |
| 83 | + <k.schnitter@sap.com> Co-authored-by: David Venable <dlv@amazon.com> |
| 84 | + |
| 85 | +* __Updates several dependencies to address CVEs (#5914) (#5923)__ |
| 86 | + |
| 87 | + [opensearch-trigger-bot[bot]](mailto:98922864+opensearch-trigger-bot[bot]@users.noreply.github.com) - Wed, 30 Jul 2025 09:53:45 -0700 |
| 88 | + |
| 89 | + |
| 90 | + Updates several dependencies to address CVEs |
| 91 | + |
| 92 | + * CVE-2025-46762 - Parquet 1.15.2 |
| 93 | + * CVE-2025-48734 - commons-beanutils 1.11.0 and Checkstyle 10.26.1 |
| 94 | + * CVE-2024-57699 - json-smart 2.5.2 |
| 95 | + * CVE-2025-24970 - Netty 4.1.123 |
| 96 | + * CVE-2025-27817 - Apache Kafka 3.9.1 and Confluent Kafka 7.9.1 |
| 97 | + |
| 98 | + Also, removes some broken code related to the kafka-client in unused Kafka |
| 99 | + tests. |
| 100 | + |
| 101 | + |
| 102 | + (cherry picked from commit c8f66fa4fd1ed67fdbbeb230daf948e76207cf10) |
| 103 | + |
| 104 | + Signed-off-by: David Venable <dlv@amazon.com> Co-authored-by: David Venable |
| 105 | + <dlv@amazon.com> |
| 106 | + |
| 107 | +* __Updated the smoke tests scripts to use the end-to-end tests (#5903) (#5913)__ |
| 108 | + |
| 109 | + [opensearch-trigger-bot[bot]](mailto:98922864+opensearch-trigger-bot[bot]@users.noreply.github.com) - Tue, 29 Jul 2025 09:46:27 -0700 |
| 110 | + |
| 111 | + |
| 112 | + Updated the smoke tests scripts to use the end-to-end tests to get them running |
| 113 | + as part of the release again. Support validating tar files by skipping the |
| 114 | + Docker pull if the image is local. Skip the Docker validations in the |
| 115 | + run-smoke-tests.sh script altogether to rely on the e2e-tests. Increase |
| 116 | + validation time to 30 minutes. |
| 117 | + |
| 118 | + |
| 119 | + (cherry picked from commit c6f072aa7ff695cdafd6994e0cb959da401c2bb3) |
| 120 | + |
| 121 | + Signed-off-by: David Venable <dlv@amazon.com> Co-authored-by: David Venable |
| 122 | + <dlv@amazon.com> |
| 123 | + |
| 124 | +* __Fixes a regression in core where @SingleThread annotated processors are only running the last instance. (#5902) (#5904)__ |
| 125 | + |
| 126 | + [opensearch-trigger-bot[bot]](mailto:98922864+opensearch-trigger-bot[bot]@users.noreply.github.com) - Mon, 28 Jul 2025 09:54:09 -0700 |
| 127 | + |
| 128 | + |
| 129 | + Fixes a regression in core where @SingleThread annotated processors are only |
| 130 | + running the last instance. Also, disable the ProcessorSwapPipelineIT test since |
| 131 | + this feature is not yet completed. |
| 132 | + |
| 133 | + Fixes #5901 |
| 134 | + |
| 135 | + |
| 136 | + (cherry picked from commit 53f16d786616a19d52d6b998d18d93f3008508f8) |
| 137 | + |
| 138 | + Signed-off-by: David Venable <dlv@amazon.com> Co-authored-by: David Venable |
| 139 | + <dlv@amazon.com> |
| 140 | + |
| 141 | + |
0 commit comments