Skip to content

security: fix VULN-9754#5315

Merged
tlhunter merged 1 commit into
masterfrom
tlhunter/VULN-9754
Feb 25, 2025
Merged

security: fix VULN-9754#5315
tlhunter merged 1 commit into
masterfrom
tlhunter/VULN-9754

Conversation

@tlhunter

Copy link
Copy Markdown
Member

What does this PR do?

  • fixes a bogus security issue

Motivation

  • security warnings scary

@tlhunter
tlhunter requested review from a team as code owners February 25, 2025 00:21
@github-actions

github-actions Bot commented Feb 25, 2025

Copy link
Copy Markdown
Contributor

Overall package size

Self size: 8.78 MB
Deduped: 94.98 MB
No deduping: 95.49 MB

Dependency sizes | name | version | self size | total size | |------|---------|-----------|------------| | @datadog/libdatadog | 0.4.0 | 29.44 MB | 29.44 MB | | @datadog/native-appsec | 8.4.0 | 19.25 MB | 19.26 MB | | @datadog/native-iast-taint-tracking | 3.3.0 | 13.77 MB | 13.78 MB | | @datadog/pprof | 5.5.1 | 9.79 MB | 10.17 MB | | protobufjs | 7.2.5 | 2.77 MB | 5.16 MB | | @datadog/native-iast-rewriter | 2.8.0 | 2.6 MB | 2.74 MB | | @opentelemetry/core | 1.14.0 | 872.87 kB | 1.47 MB | | @datadog/native-metrics | 3.1.0 | 1.06 MB | 1.46 MB | | @opentelemetry/api | 1.8.0 | 1.21 MB | 1.21 MB | | import-in-the-middle | 1.11.2 | 112.74 kB | 835.4 kB | | source-map | 0.7.4 | 226 kB | 226 kB | | opentracing | 0.14.7 | 194.81 kB | 194.81 kB | | lru-cache | 7.18.3 | 133.92 kB | 133.92 kB | | pprof-format | 2.1.0 | 111.69 kB | 111.69 kB | | @datadog/sketches-js | 2.1.0 | 109.9 kB | 109.9 kB | | lodash.sortby | 4.7.0 | 75.76 kB | 75.76 kB | | ignore | 5.3.2 | 53.63 kB | 53.63 kB | | shell-quote | 1.8.1 | 44.96 kB | 44.96 kB | | istanbul-lib-coverage | 3.2.0 | 29.34 kB | 29.34 kB | | rfdc | 1.3.1 | 25.21 kB | 25.21 kB | | @isaacs/ttlcache | 1.4.1 | 25.2 kB | 25.2 kB | | tlhunter-sorted-set | 0.1.0 | 24.94 kB | 24.94 kB | | limiter | 1.1.5 | 23.17 kB | 23.17 kB | | dc-polyfill | 0.1.4 | 23.1 kB | 23.1 kB | | retry | 0.13.1 | 18.85 kB | 18.85 kB | | semifies | 1.0.0 | 15.84 kB | 15.84 kB | | jest-docblock | 29.7.0 | 8.99 kB | 12.76 kB | | crypto-randomuuid | 1.0.0 | 11.18 kB | 11.18 kB | | ttl-set | 1.0.0 | 4.61 kB | 9.69 kB | | path-to-regexp | 0.1.12 | 6.6 kB | 6.6 kB | | koalas | 1.0.2 | 6.47 kB | 6.47 kB | | module-details-from-path | 1.0.3 | 4.47 kB | 4.47 kB |

🤖 This report was automatically generated by heaviest-objects-in-the-universe

@codecov

codecov Bot commented Feb 25, 2025

Copy link
Copy Markdown

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 80.27%. Comparing base (ddcbcbb) to head (780b592).
Report is 1 commits behind head on master.

Additional details and impacted files
@@           Coverage Diff           @@
##           master    #5315   +/-   ##
=======================================
  Coverage   80.27%   80.27%           
=======================================
  Files         489      489           
  Lines       21859    21859           
=======================================
  Hits        17547    17547           
  Misses       4312     4312           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@datadog-datadog-prod-us1

datadog-datadog-prod-us1 Bot commented Feb 25, 2025

Copy link
Copy Markdown

Datadog Report

Branch report: tlhunter/VULN-9754
Commit report: b393f93
Test service: dd-trace-js-integration-tests

✅ 0 Failed, 668 Passed, 0 Skipped, 15m 34.97s Total Time

@pr-commenter

pr-commenter Bot commented Feb 25, 2025

Copy link
Copy Markdown

Benchmarks

Benchmark execution time: 2025-02-25 16:49:47

Comparing candidate commit 780b592 in PR branch tlhunter/VULN-9754 with baseline commit ddcbcbb in branch master.

Found 0 performance improvements and 0 performance regressions! Performance is the same for 917 metrics, 16 unstable metrics.

@tlhunter
tlhunter merged commit f87acc2 into master Feb 25, 2025
@tlhunter
tlhunter deleted the tlhunter/VULN-9754 branch February 25, 2025 17:25
watson pushed a commit that referenced this pull request Feb 27, 2025
@watson watson mentioned this pull request Feb 27, 2025
watson pushed a commit that referenced this pull request Feb 27, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants