This is an automated email from the ASF dual-hosted git repository. spmallette pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/tinkerpop.git
commit b7cb0e1e5e325d04942217551cd041542ee0c9a3 Author: Stephen Mallette <[email protected]> AuthorDate: Thu Jul 1 10:46:01 2021 -0400 Bumped ws to 6.2.2 to address CVE-2021-32640 CTR --- CHANGELOG.asciidoc | 1 + docs/src/upgrade/release-3.4.x.asciidoc | 7 +++++++ gremlin-javascript/glv/PackageJson.template | 2 +- .../src/main/javascript/gremlin-javascript/package.json | 2 +- 4 files changed, 10 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.asciidoc b/CHANGELOG.asciidoc index cfbae4f..bca2b82 100644 --- a/CHANGELOG.asciidoc +++ b/CHANGELOG.asciidoc @@ -27,6 +27,7 @@ image::https://raw.githubusercontent.com/apache/tinkerpop/master/docs/static/ima * Fixed bug in the `vertexLabelKey` validation for `GraphMLWriter` which was inadvertently validating the `edgeLabelKey`. * Changed `IndexStep` to make it easier for providers to determine the type of indexer being used. * Allowed Javascript `Translator` to take `Bytecode` or a `Traversal`. +* Addressed CVE-2021-32640 for gremlin-javascript. [[release-3-4-11]] === TinkerPop 3.4.11 (Release Date: May 3, 2021) diff --git a/docs/src/upgrade/release-3.4.x.asciidoc b/docs/src/upgrade/release-3.4.x.asciidoc index a9cefa9..83662cf 100644 --- a/docs/src/upgrade/release-3.4.x.asciidoc +++ b/docs/src/upgrade/release-3.4.x.asciidoc @@ -21,6 +21,13 @@ image::https://raw.githubusercontent.com/apache/tinkerpop/master/docs/static/ima *Avant-Gremlin Construction #3 for Theremin and Flowers* +== TinkerPop 3.4.12 + +*Release Date: NOT OFFICIALLY RELEASED YET* + +Please see the link:https://github.com/apache/tinkerpop/blob/3.4.12/CHANGELOG.asciidoc#release-3-4-12[changelog] for a +complete list of all the modifications that are part of this release. + == TinkerPop 3.4.11 *Release Date: May 3, 2021* diff --git a/gremlin-javascript/glv/PackageJson.template b/gremlin-javascript/glv/PackageJson.template index 094c298..88b6466 100644 --- a/gremlin-javascript/glv/PackageJson.template +++ b/gremlin-javascript/glv/PackageJson.template @@ -33,7 +33,7 @@ ], "license": "Apache-2.0", "dependencies": { - "ws": "^6.2.1" + "ws": "^6.2.2" }, "devDependencies": { "chai": "~4.1.2", diff --git a/gremlin-javascript/src/main/javascript/gremlin-javascript/package.json b/gremlin-javascript/src/main/javascript/gremlin-javascript/package.json index ff33604..72126ce 100644 --- a/gremlin-javascript/src/main/javascript/gremlin-javascript/package.json +++ b/gremlin-javascript/src/main/javascript/gremlin-javascript/package.json @@ -14,7 +14,7 @@ ], "license": "Apache-2.0", "dependencies": { - "ws": "^6.2.1" + "ws": "^6.2.2" }, "devDependencies": { "chai": "~4.1.2",
