update dependencies #73
Open
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
|
Hi @mattsains , Do you have an ETA for releasing this change? We need it to address a vulnerability. GHSA-qxp5-gwg8-xv66 |
|
@jiazengcindy hi there, unfortunately, I am not an owner of this repository, and the README says it is not supported, so I don't think this PR is going to be merged any time soon. If you're using this library directly, I recommend switching to the application insights SDK. If you're using it through the opentelemetry azure monitor exporter, I'm not really sure what the solution is - I think it would be reasonable to open an issue there though |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This should help the worst of the vulnerabilities in this repo. I tested this change by manually including it in the opentelemetry Azure Monitor exporter