Skip to content

Conversation

@mikeee
Copy link
Member

@mikeee mikeee commented Nov 20, 2025

Description

Addresses GHSA-56w8-48fp-6mgv & GHSA-9mj6-hxhv-w67j warnings

Issue reference

We strive to have all PR being opened based on an issue, where the problem or feature have been discussed prior to implementation.

Please reference the issue this PR will close: #[issue number]

Checklist

Please make sure you've completed the relevant tasks for this PR, out of the following list:

  • Code compiles correctly
  • Created/updated tests
  • Extended the documentation
    • Created the dapr/docs PR:

Note: We expect contributors to open a corresponding documentation PR in the dapr/docs repository. As the implementer, you are the best person to document your work! Implementation PRs will not be merged until the documentation PR is opened and ready for review.

@mikeee mikeee requested review from a team as code owners November 20, 2025 11:33
@mikeee
Copy link
Member Author

mikeee commented Nov 20, 2025

/ok-to-test

@dapr-bot
Copy link
Collaborator

Complete Build Matrix

The build status is currently not updated here. Please visit the action run below directly.

🔗 Link to Action run

Commit ref: 84f158d

@dapr-bot
Copy link
Collaborator

dapr-bot commented Nov 20, 2025

Components certification test

🔗 Link to Action run

Commit ref: 84f158d

❌ Some certification tests failed

These tests failed:

  • bindings.azure.blobstorage
  • bindings.azure.cosmosdb
  • bindings.azure.eventhubs
  • bindings.azure.servicebusqueues
  • bindings.azure.storagequeues
  • bindings.aws.s3
  • bindings.cron
  • bindings.dubbo
  • bindings.zeebe.command
  • bindings.zeebe.jobworker
  • bindings.kafka
  • bindings.kitex
  • bindings.localstorage
  • bindings.postgres
  • bindings.rabbitmq
  • bindings.redis
  • configuration.postgres
  • configuration.redis
  • middleware.http.bearer
  • middleware.http.ratelimit
  • middleware.http.opa
  • pubsub.aws.snssqs
  • pubsub.gcp.pubsub
  • pubsub.azure.eventhubs
  • pubsub.azure.servicebus.topics
  • pubsub.kafka
  • pubsub.mqtt3
  • pubsub.pulsar
  • pubsub.rabbitmq
  • secretstores.azure.keyvault
  • secretstores.hashicorp.vault
  • secretstores.local.env
  • secretstores.local.file
  • state.aws.dynamodb
  • state.azure.blobstorage
  • state.azure.cosmosdb
  • state.azure.tablestorage
  • state.cassandra
  • state.cockroachdb.v1
  • state.memcached
  • state.mongodb
  • state.mysql
  • state.postgresql.v1
  • state.postgresql.v2
  • state.redis
  • state.sqlite
  • state.sqlserver
  • state.sqlserver.v2
  • state.gcp.firestore

Additionally, some tests did not report a status:

  • bindings.azure.blobstorage
  • bindings.azure.cosmosdb
  • bindings.azure.eventhubs
  • bindings.azure.servicebusqueues
  • bindings.azure.storagequeues
  • bindings.aws.s3
  • bindings.cron
  • bindings.dubbo
  • bindings.zeebe.command
  • bindings.zeebe.jobworker
  • bindings.kafka
  • bindings.kitex
  • bindings.localstorage
  • bindings.postgres
  • bindings.rabbitmq
  • bindings.redis
  • configuration.postgres
  • configuration.redis
  • middleware.http.bearer
  • middleware.http.ratelimit
  • middleware.http.opa
  • pubsub.aws.snssqs
  • pubsub.gcp.pubsub
  • pubsub.azure.eventhubs
  • pubsub.azure.servicebus.topics
  • pubsub.kafka
  • pubsub.mqtt3
  • pubsub.pulsar
  • pubsub.rabbitmq
  • secretstores.azure.keyvault
  • secretstores.hashicorp.vault
  • secretstores.local.env
  • secretstores.local.file
  • state.aws.dynamodb
  • state.azure.blobstorage
  • state.azure.cosmosdb
  • state.azure.tablestorage
  • state.cassandra
  • state.cockroachdb.v1
  • state.memcached
  • state.mongodb
  • state.mysql
  • state.postgresql.v1
  • state.postgresql.v2
  • state.redis
  • state.sqlite
  • state.sqlserver
  • state.sqlserver.v2
  • state.gcp.firestore

@dapr-bot
Copy link
Collaborator

dapr-bot commented Nov 20, 2025

Components conformance test

🔗 Link to Action run

Commit ref: 84f158d

❌ Some conformance tests failed

These tests failed:

  • bindings.azure.blobstorage
  • bindings.azure.cosmosdb
  • bindings.azure.eventgrid
  • bindings.azure.eventhubs
  • bindings.azure.servicebusqueues
  • bindings.azure.storagequeues
  • bindings.aws.s3.terraform
  • bindings.cron
  • bindings.http
  • bindings.influx
  • bindings.kafka-confluent
  • bindings.kafka-wurstmeister
  • bindings.kubemq
  • bindings.mqtt3-emqx
  • bindings.mqtt3-mosquitto
  • bindings.mqtt3-vernemq
  • bindings.postgresql.docker
  • bindings.postgresql.azure
  • bindings.rabbitmq
  • bindings.redis.v6
  • bindings.redis.v7
  • configuration.postgresql.docker
  • configuration.postgresql.azure
  • configuration.redis.v6
  • configuration.redis.v7
  • crypto.azure.keyvault
  • crypto.localstorage
  • crypto.jwks
  • lock.redis.v6
  • lock.redis.v7
  • pubsub.aws.snssqs.terraform
  • pubsub.gcp.pubsub.terraform
  • pubsub.azure.eventhubs
  • pubsub.azure.servicebus.queues
  • pubsub.azure.servicebus.topics
  • pubsub.in-memory
  • pubsub.jetstream
  • pubsub.kafka-confluent
  • pubsub.kafka-wurstmeister
  • pubsub.kubemq
  • pubsub.mqtt3-emqx
  • pubsub.mqtt3-vernemq
  • pubsub.pulsar
  • pubsub.rabbitmq
  • pubsub.redis.v6
  • pubsub.solace
  • secretstores.azure.keyvault.certificate
  • secretstores.azure.keyvault.serviceprincipal
  • secretstores.hashicorp.vault
  • secretstores.kubernetes
  • secretstores.local.env
  • secretstores.local.file
  • secretstores.aws.secretsmanager.terraform
  • secretstores.aws.secretsmanager.docker
  • state.aws.dynamodb.terraform
  • state.azure.blobstorage.v2
  • state.azure.blobstorage.v1
  • state.azure.cosmosdb
  • state.azure.sql
  • state.azure.tablestorage.cosmosdb
  • state.azure.tablestorage.storage
  • state.cassandra
  • state.cloudflare.workerskv
  • state.cockroachdb.v1
  • state.etcd.v1
  • state.etcd.v2
  • state.in-memory
  • state.memcached
  • state.mongodb
  • state.mysql.mariadb
  • state.mysql.mysql
  • state.oracledatabase
  • state.postgresql.v1.docker
  • state.postgresql.v1.azure
  • state.postgresql.v2.docker
  • state.postgresql.v2.azure
  • state.redis.v6
  • state.redis.v7
  • state.rethinkdb
  • state.sqlite
  • state.sqlserver
  • state.sqlserver.v2
  • state.sqlserver.docker
  • state.sqlserver.v2.docker
  • state.gcp.firestore.cloud

Additionally, some tests did not report a status:

  • bindings.azure.blobstorage
  • bindings.azure.cosmosdb
  • bindings.azure.eventgrid
  • bindings.azure.eventhubs
  • bindings.azure.servicebusqueues
  • bindings.azure.storagequeues
  • bindings.aws.s3.terraform
  • bindings.cron
  • bindings.http
  • bindings.influx
  • bindings.kafka-confluent
  • bindings.kafka-wurstmeister
  • bindings.kubemq
  • bindings.mqtt3-emqx
  • bindings.mqtt3-mosquitto
  • bindings.mqtt3-vernemq
  • bindings.postgresql.docker
  • bindings.postgresql.azure
  • bindings.rabbitmq
  • bindings.redis.v6
  • bindings.redis.v7
  • configuration.postgresql.docker
  • configuration.postgresql.azure
  • configuration.redis.v6
  • configuration.redis.v7
  • crypto.azure.keyvault
  • crypto.localstorage
  • crypto.jwks
  • lock.redis.v6
  • lock.redis.v7
  • pubsub.aws.snssqs.terraform
  • pubsub.gcp.pubsub.terraform
  • pubsub.azure.eventhubs
  • pubsub.azure.servicebus.queues
  • pubsub.azure.servicebus.topics
  • pubsub.in-memory
  • pubsub.jetstream
  • pubsub.kafka-confluent
  • pubsub.kafka-wurstmeister
  • pubsub.kubemq
  • pubsub.mqtt3-emqx
  • pubsub.mqtt3-vernemq
  • pubsub.pulsar
  • pubsub.rabbitmq
  • pubsub.redis.v6
  • pubsub.solace
  • secretstores.azure.keyvault.certificate
  • secretstores.azure.keyvault.serviceprincipal
  • secretstores.hashicorp.vault
  • secretstores.kubernetes
  • secretstores.local.env
  • secretstores.local.file
  • secretstores.aws.secretsmanager.terraform
  • secretstores.aws.secretsmanager.docker
  • state.aws.dynamodb.terraform
  • state.azure.blobstorage.v2
  • state.azure.blobstorage.v1
  • state.azure.cosmosdb
  • state.azure.sql
  • state.azure.tablestorage.cosmosdb
  • state.azure.tablestorage.storage
  • state.cassandra
  • state.cloudflare.workerskv
  • state.cockroachdb.v1
  • state.etcd.v1
  • state.etcd.v2
  • state.in-memory
  • state.memcached
  • state.mongodb
  • state.mysql.mariadb
  • state.mysql.mysql
  • state.oracledatabase
  • state.postgresql.v1.docker
  • state.postgresql.v1.azure
  • state.postgresql.v2.docker
  • state.postgresql.v2.azure
  • state.redis.v6
  • state.redis.v7
  • state.rethinkdb
  • state.sqlite
  • state.sqlserver
  • state.sqlserver.v2
  • state.sqlserver.docker
  • state.sqlserver.v2.docker
  • state.gcp.firestore.cloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants