Mariell Hoversholm 5c0ee5cfcc [v11.6] App Platform: Pin bleve to fix CVE-2022-31022 (#102531) ...

App Platform: Pin bleve to fix CVE-2022-31022

This pins Bleve to a soon-to-be v2.5.0 commit.

Fixes CVE-2022-31022. We can unpin when v2.5.0 releases (likely March 25th).
We do not need any new features or similar, though there are some fixes that are nice to receive.

We will **not** backport this fix farther as we aren't actually vulnerable to anything via CVE-2022-31022; we never use its code, nor does Bleve. The reason we are fixing this is to get Trivy to stop complaining.

2025-03-20 14:19:44 +01:00

..

legacysql

fix(unified-storage): break dependency from dualwriter in resource module (#101788)

2025-03-07 15:27:31 +01:00

unified

[v11.6] App Platform: Pin bleve to fix CVE-2022-31022 (#102531)

2025-03-20 14:19:44 +01:00