New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fix(cactus-validator-socketio-indy): upgrade pyjwt to 2.4.0 #2615

Merged

petermetz merged 2 commits into hyperledger-cacti:main from petermetz:petermetz/issue2614

Aug 17, 2023

Commits on Aug 16, 2023

fix(cactus-validator-socketio-indy): upgrade pyjwt to 2.4.0
```
CVE ID CVE-2022-29217

GHSA ID GHSA-ffqj-6fqr-9h24

GHSA-ffqj-6fqr-9h24

https://github.com/hyperledger/cacti/security/dependabot/175

Fixes hyperledger-cacti#2614

Signed-off-by: Peter Somogyvari <peter.somogyvari@accenture.com>
```
petermetz committed Aug 16, 2023
Configuration menu
View commit details

Copy full SHA for fdeb6b1

Browse repository at this point
Copy the full SHA

fdeb6b1 View commit details

Browse the repository at this point in the history

Commits on Aug 17, 2023

build(deps): swap deprecated Corda artifactory URL to new working one

R3 has phased out some of their artifactory repositories that we've been
using in the past and this broke all our Corda builds.

On their website[1] they explain the solution, see the important part pasted
below:

Note: corda-dependencies is just one example of a repo, any build code
which references https://software.r3.com/artifactory must be updated in
the same manner swapping
https://software.r3.com/artifactory/
to
https://download.corda.net/maven/ and keeping the existing repository name.

When will this change be made?
The Maven repository on https://download.corda.net/maven/corda-dependencies/ is available now.
The Artifactory repositories will become unavailable on 31st July 2023.

[1]: https://developer.r3.com/forums/topic/artifactory-repositories-for-cordapp-developers-becoming-private/

Signed-off-by: Peter Somogyvari <peter.somogyvari@accenture.com>

petermetz committed Aug 17, 2023