Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Exclude reference packages from CG #1134

Merged
merged 1 commit into from
Jan 28, 2025

Conversation

MichaelSimons
Copy link
Member

@MichaelSimons MichaelSimons requested a review from a team as a code owner January 28, 2025 17:37
@MichaelSimons MichaelSimons requested a review from mmitche January 28, 2025 17:37
Copy link
Member

@mthalman mthalman left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should we also revert the manual edits to the projects to reference non-vulnerable versions?

@MichaelSimons
Copy link
Member Author

Should we also revert the manual edits to the projects to reference non-vulnerable versions?

I am planning on doing that in a separate PR (I should have called it out). I want to keep this simple to make it easy to backport. I do not plan on backporting any regen.

@MichaelSimons MichaelSimons merged commit 59287e7 into dotnet:main Jan 28, 2025
4 checks passed
@MichaelSimons MichaelSimons deleted the cg-ignore branch January 28, 2025 18:56
@MichaelSimons
Copy link
Member Author

/backport to release/9.0

@MichaelSimons
Copy link
Member Author

/backport to release/8.0

Copy link
Contributor

Copy link
Contributor

Copy link
Contributor

@MichaelSimons backporting to "release/9.0" failed, the patch most likely resulted in conflicts:

$ git am --3way --empty=keep --ignore-whitespace --keep-non-patch changes.patch

Applying: Exclude reference packages from CG
Using index info to reconstruct a base tree...
M	README.md
M	azure-pipelines/builds/ci.yml
Falling back to patching base and 3-way merge...
Auto-merging azure-pipelines/builds/ci.yml
CONFLICT (content): Merge conflict in azure-pipelines/builds/ci.yml
Auto-merging README.md
CONFLICT (content): Merge conflict in README.md
error: Failed to merge in the changes.
hint: Use 'git am --show-current-patch=diff' to see the failed patch
hint: When you have resolved this problem, run "git am --continue".
hint: If you prefer to skip this patch, run "git am --skip" instead.
hint: To restore the original branch and stop patching, run "git am --abort".
hint: Disable this message with "git config set advice.mergeConflict false"
Patch failed at 0001 Exclude reference packages from CG
Error: The process '/usr/bin/git' failed with exit code 128

Please backport manually!

Copy link
Contributor

@MichaelSimons backporting to "release/8.0" failed, the patch most likely resulted in conflicts:

$ git am --3way --empty=keep --ignore-whitespace --keep-non-patch changes.patch

Applying: Exclude reference packages from CG
Using index info to reconstruct a base tree...
M	README.md
M	azure-pipelines/builds/ci.yml
Falling back to patching base and 3-way merge...
Auto-merging azure-pipelines/builds/ci.yml
CONFLICT (content): Merge conflict in azure-pipelines/builds/ci.yml
Auto-merging README.md
CONFLICT (content): Merge conflict in README.md
error: Failed to merge in the changes.
hint: Use 'git am --show-current-patch=diff' to see the failed patch
hint: When you have resolved this problem, run "git am --continue".
hint: If you prefer to skip this patch, run "git am --skip" instead.
hint: To restore the original branch and stop patching, run "git am --abort".
hint: Disable this message with "git config set advice.mergeConflict false"
Patch failed at 0001 Exclude reference packages from CG
Error: The process '/usr/bin/git' failed with exit code 128

Please backport manually!

MichaelSimons added a commit to MichaelSimons/source-build-reference-packages that referenced this pull request Jan 28, 2025
MichaelSimons added a commit to MichaelSimons/source-build-reference-packages that referenced this pull request Jan 28, 2025
MichaelSimons added a commit that referenced this pull request Jan 28, 2025
* Exclude reference packages from CG (#1134)

* Revert debug setting
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Devise a strategy to deal with component governance alerts in SBRP
2 participants