Skip to content
This repository has been archived by the owner on May 1, 2023. It is now read-only.

Releases: facebookarchive/profilo

release-3530f83b: Back out "Update fmt to 8.1.1"

29 Jan 04:54
Compare
Choose a tag to compare
Summary:
Original commit changeset: 1bdb91c5731d

Original Phabricator Diff: D33713304 (https://github.com/facebookincubator/profilo/commit/c2430027a0f02d21012c77cdb57906c144c47f97)

(Note: this ignores all push blocking failures!)

Differential Revision: D33864749

fbshipit-source-id: c3a621c89d62216720fa9ee86593c3e6481a6e9c

release-464a5785: Revert D33633205: address path traversal vulnerability

28 Jan 05:56
Compare
Choose a tag to compare
Differential Revision:
D33633205 (https://github.com/facebookincubator/profilo/commit/62b922a1a4c7530c2dc9b4e6a34d48cb20b8f355)

Original commit changeset: 1834fcdfa96b

Original Phabricator Diff: D33633205 (https://github.com/facebookincubator/profilo/commit/62b922a1a4c7530c2dc9b4e6a34d48cb20b8f355)

fbshipit-source-id: bb09fe48749b284f4cc5e7d9e7e51e985a9897de

release-62b922a1: address path traversal vulnerability

27 Jan 15:37
Compare
Choose a tag to compare
Summary: Address vulnerability task as per the suggested fix

Reviewed By: BurntBrunch

Differential Revision: D33633205

fbshipit-source-id: 1834fcdfa96ba1e4fce4d59edabdc4ebfd45fb87

release-f5392214: Bump follow-redirects from 1.13.0 to 1.14.7 in /website (#101)

26 Jan 03:39
Compare
Choose a tag to compare
Summary:
Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.13.0 to 1.14.7.
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/follow-redirects/follow-redirects/commit/2ede36d7c60d3acdcd324dcd99a9dbd52e4fb3a6"><code>2ede36d</code></a> Release version 1.14.7 of the npm package.</li>
<li><a href="https://github.com/follow-redirects/follow-redirects/commit/8b347cbcef7c7b72a6e9be20f5710c17d6163c22"><code>8b347cb</code></a> Drop Cookie header across domains.</li>
<li><a href="https://github.com/follow-redirects/follow-redirects/commit/6f5029ae1a0fdab4dc25f6379a5ee303c2319070"><code>6f5029a</code></a> Release version 1.14.6 of the npm package.</li>
<li><a href="https://github.com/follow-redirects/follow-redirects/commit/af706bee57de954414c0bde0a9f33e62beea3e52"><code>af706be</code></a> Ignore null headers.</li>
<li><a href="https://github.com/follow-redirects/follow-redirects/commit/d01ab7a5c5df3617c7a40a03de7af6427fdfac55"><code>d01ab7a</code></a> Release version 1.14.5 of the npm package.</li>
<li><a href="https://github.com/follow-redirects/follow-redirects/commit/40052ea8aa13559becee5795715c1d45b1f0eb76"><code>40052ea</code></a> Make compatible with Node 17.</li>
<li><a href="https://github.com/follow-redirects/follow-redirects/commit/86f7572f9365dadc39f85916259b58973819617f"><code>86f7572</code></a> Fix: clear internal timer on request abort to avoid leakage</li>
<li><a href="https://github.com/follow-redirects/follow-redirects/commit/2e1eaf0218c5315a2ab27f53964d0535d4dafb51"><code>2e1eaf0</code></a> Keep Authorization header on subdomain redirects.</li>
<li><a href="https://github.com/follow-redirects/follow-redirects/commit/2ad9e82b6277ae2104f7770e9ff1186cc6da29d4"><code>2ad9e82</code></a> Carry over Host header on relative redirects (<a href="https://github-redirect.dependabot.com/follow-redirects/follow-redirects/issues/172">#172</a>)</li>
<li><a href="https://github.com/follow-redirects/follow-redirects/commit/77e2a581e1d1811674b7b74745a9c20a5b939488"><code>77e2a58</code></a> Release version 1.14.4 of the npm package.</li>
<li>Additional commits viewable in <a href="https://github.com/follow-redirects/follow-redirects/compare/v1.13.0...v1.14.7">compare view</a></li>
</ul>
</details>
<br />

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=follow-redirects&package-manager=npm_and_yarn&previous-version=1.13.0&new-version=1.14.7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

 ---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `dependabot rebase` will rebase this PR
- `dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `dependabot merge` will merge this PR after your CI passes on it
- `dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `dependabot cancel merge` will cancel a previously requested merge and block automerging
- `dependabot reopen` will reopen this PR if it is closed
- `dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/facebookincubator/profilo/network/alerts).

</details>

Pull Request resolved: https://github.com/facebookincubator/profilo/pull/101

Reviewed By: yukonfb

Differential Revision: D33749977

Pulled By: aandreyeu

fbshipit-source-id: 6d09ea73c839ec8eff003b0eb1b0bf73d2f45538

release-acc8bc09: Backport fmt::underlying

25 Jan 04:45
Compare
Choose a tag to compare
Summary: Backport `fmt::underlying` to `third-party/fmt` so that it can be used for migration to fmt 8.x. This function can be used to format enum classes as underlying type and is similar to existing `fmt::ptr` for pointers.

Reviewed By: h-friederich

Differential Revision: D33744056

fbshipit-source-id: c17797d37e955892f3c9c44d2e590f227e4e401c

release-96353d05: Fix compilation with fmt 8.x

24 Jan 21:24
Compare
Choose a tag to compare
Summary:
Existing build config uses glob to collect fmt sources. This pulls in the modular interface `fmt.cc` resulting in the following error with fmt 8.x:

```
deps/fmt/src/fmt.cc:1:1: error: C++ requires a type specifier for all declarations
module;
^
deps/fmt/src/fmt.cc:3:4: error: Module not supported.
#  error Module not supported.
   ^
```
Log: https://www.internalfb.com/intern/sandcastle/log/?instance_id=4503600182989071&step_id=4503605552409418&step_index=6&name=Build%20oss%20profilo

Fix the issue by replacing the glob with the (only) source file name that is actually needed.

Reviewed By: bobhansen

Differential Revision: D33714553

fbshipit-source-id: 6f6441f9b61e30008d014d0241e3ce241c4752ee

release-efb16786: Slots overflow and tracers dependency fix

20 Jan 02:31
Compare
Choose a tag to compare
Reviewed By: yukonfb

Differential Revision: D33540591

fbshipit-source-id: 2d114ce15c9a200579c5541f677420cd6548b057

release-cf868556: Restore TraceControlTest without powermock static verifications

18 Jan 20:33
Compare
Choose a tag to compare
Summary:
Turns out, TraceControlTest doesn't *actually* need to verify buffer writes, so
it can just be refactored and re-enabled.

Reviewed By: aandreyeu

Differential Revision: D33433827

fbshipit-source-id: 799da01715f0faf96babf36adf4b6b1576c87c05

release-d4b1ff0b: Store full mmap file path

07 Jan 01:35
Compare
Choose a tag to compare
Summary: This changes the MmapBufferHeader class to store the full path of the mapping file, instead of only the file name.

Reviewed By: aandreyeu

Differential Revision: D33246595

fbshipit-source-id: e72a363e332e27f753625edb3535458bc157043d

release-dc799bc8: Add installer package

05 Jan 20:21
Compare
Choose a tag to compare
Reviewed By: yukonfb

Differential Revision: D33284842

fbshipit-source-id: 5c75b47a63a89bb5431a53485b1d63b63639f7a6