Jamie Strandboge
Jamie Strandboge
https://groups.google.com/g/golang-announce/c/YqYYG87xB10/m/NzQjeXshBAAJ announced 1.18.5 for a security issue. I've not yet determined if that fix is relevant for chronograf, but it would be nice to recompile and upgrade to 1.18.5 before...
In looking at https://github.com/moovweb/gvm/blob/master/scripts/install I noticed that `download_binary()` downloads the go tarball via [curl](https://github.com/moovweb/gvm/blob/master/scripts/install#L197) and then proceeds to [untar](https://github.com/moovweb/gvm/blob/master/scripts/install#L207) the binary without verifying it, which is susceptible to a supply...
We've been getting dependabot alerts for `ws` and traced this back to our use of https://www.npmjs.com/package/pm2-metrics. https://github.com/saikatharryc/pm2-prometheus-exporter/blob/master/package.json specifies `"pm2": "^4.4.0"`, which pulls in the old pm2/agent 1.0.8 that pulls in...
* chore: update d3 deps to use newer versions for d3-color security update Update giraffe/packages.json to use: * d3-color ^3.1.0 * d3-format ^3.0.1 * d3-interpolate ^3.0.1 * d3-scale ^4.0.2 This...
Recent [security research](https://blog.oversecured.com/Introducing-MavenGate-a-supply-chain-attack-method-for-Java-and-Android-applications) discussed problems in the maven ecosystem where the DNS of a no longer maintained project expires and is taken over. https://github.com/mathieucarbou/license-maven-plugin/issues/715 discussed some specifics around maven central...
Trying to run the tests, it fails: ``` $ go test -v ./... ... cmd/bulk_load_timescale/main.go:20:2: module github.com/jackc/pgx@latest found (v3.6.2+incompatible), but does not contain package github.com/jackc/pgx/pgxpool ``` [Googling](https://github.com/jackc/pgx/issues/655#issuecomment-569834589), this should be...
An external reporter sent an issue in for an InfluxQL crash in influx-cli. Tested with influxdb2 2.7.6-1 and influxdb2-cli 2.7.5-1 on Ubuntu 20.04 LTS amd64. ``` $ export V1AUTH=$(echo -n...
https://github.com/influxdata/flightsql-dbapi/actions/runs/6501255996/job/17658240765?pr=23 show that unit tests failed when trying to apply https://github.com/influxdata/flightsql-dbapi/pull/23. These should be fixed for future maintenance.
Superset-generated time range causes SQL error: ParserError("Expected end of statement, found: 00")
Superset has the ability to set a time range in its Chart Graph functionality. When set, the resulting SQL has a WHERE clause of this form: ``` WHERE time >=...
An external reporter sent an issue regarding InfluxQL queries in 2.x. Using 2.7.6, comparing a field to a signed integer works as expected. Eg: ``` $ export V1AUTH=$(echo -n "anything:$TOKEN"...