Skip to content

Package update#36

Closed
finestructure wants to merge 1 commit intomainfrom
package-update
Closed

Package update#36
finestructure wants to merge 1 commit intomainfrom
package-update

Conversation

@finestructure
Copy link
Copy Markdown
Member

No description provided.

@finestructure
Copy link
Copy Markdown
Member Author

The build fails within AWS Lambda runtime. We are two major versions behind and the best path to fix this is probably to update both the Lambda runtime and the Swift version. That's a nontrivial undertaking.

The uploader runs in ephemeral lambda containers and it not open to HTTP requests. It cannot be impacted by the moderate severity CVE https://github.com/SwiftPackageIndex/DocUploader/security/dependabot/2

Closing this, the proper fix is a major update of all components.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants