Skip to content

ddex yaml time - #8515

Merged
stereosteve merged 6 commits into
mainfrom
ddex-docker
May 20, 2024
Merged

ddex yaml time#8515
stereosteve merged 6 commits into
mainfrom
ddex-docker

Conversation

@stereosteve

@stereostevestereosteve commented May 16, 2024

Copy link
Copy Markdown
Contributor

such docker much yaml wow

@changeset-bot

changeset-botBot commented May 16, 2024•
edited
Loading

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 4b63ba9

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@stereosteve
stereosteve requested review from michellebrier and phelpsdb and removed request for michellebrier and phelpsdbMay 16, 2024 18:58
@audius-infra

audius-infra commented May 16, 2024

Copy link
Copy Markdown
Collaborator

Preview this change https://demo.audius.co/ddex-docker

@audius-infra

audius-infra commented May 16, 2024

Copy link
Copy Markdown
Collaborator

Preview this change https://demo.audius.co/ddex-docker

@audius-infra

audius-infra commented May 17, 2024

Copy link
Copy Markdown
Collaborator

Preview this change https://demo.audius.co/ddex-docker

@audius-infra

audius-infra commented May 17, 2024

Copy link
Copy Markdown
Collaborator

Preview this change https://demo.audius.co/ddex-docker

@socket-security

socket-securityBot commented May 17, 2024•
edited
Loading

Copy link
Copy Markdown

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

PackageNew capabilitiesTransitivesSizePublisher
npm/@alch/alchemy-web3@1.4.6network06.65 MBbrian-alchemy
npm/@amplitude/node@1.9.2network+4590 kBkevinpagtakhan
npm/@amplitude/react-native@2.17.2None0187 kBhao.yu
npm/@apollo/client@3.3.7environment, network Transitive: eval+23.3 MBapollo-bot
npm/@babel/cli@7.7.0Transitive: environment, filesystem, shell, unsafe+307.68 MBnicolo-ribaudo
npm/@babel/plugin-proposal-class-static-block@7.21.0Transitive: environment, filesystem, unsafe+377.91 MBnicolo-ribaudo
npm/@babel/plugin-transform-react-jsx@7.21.0Transitive: environment, filesystem, unsafe+327.69 MBnicolo-ribaudo
npm/@babel/plugin-transform-runtime@7.18.2unsafe Transitive: environment, filesystem+307.61 MBnicolo-ribaudo
npm/@babel/preset-env@7.22.15environment Transitive: filesystem, unsafe+1149.64 MBnicolo-ribaudo
npm/@babel/preset-typescript@7.22.15Transitive: environment, filesystem, unsafe+408.1 MBnicolo-ribaudo
npm/@babel/register@7.7.0environment, filesystem Transitive: unsafe+297.6 MBnicolo-ribaudo
npm/@babel/runtime@7.18.3None0201 kBnicolo-ribaudo
npm/@certusone/wormhole-sdk@0.1.1filesystem Transitive: environment, network+315.3 MBevan-gray
npm/@changesets/cli@2.27.1environment, filesystem, shell+271.43 MBchangesets-release-bot
npm/@cloudflare/kv-asset-handler@0.3.1None+1126 kBwrangler-publisher
npm/@coinbase/cbpay-js@1.2.0None0172 kBlachiet
npm/@coinflowlabs/react-native@2.1.5Transitive: environment, eval, network+712.1 MBmeeder-coinflow
npm/@coinflowlabs/react@3.1.5network0206 kBmeeder-coinflow
npm/@coral-xyz/anchor@0.29.0environment, filesystem, network+32.23 MBacheroncrypto
npm/@elastic/elasticsearch@8.1.0Transitive: network+12.45 MBdelvedor
npm/@emotion/babel-plugin@11.11.0environment+92.84 MBemotion-release-bot
npm/@emotion/babel-preset-css-prop@11.11.0environment Transitive: filesystem, unsafe+327.63 MBemotion-release-bot
npm/@emotion/css@11.11.2environment+8527 kBemotion-release-bot
npm/@emotion/eslint-plugin@11.11.0environment0101 kBemotion-release-bot
npm/@emotion/native@11.11.0environment+175.3 kBemotion-release-bot
npm/@emotion/react@11.11.1environment+9856 kBemotion-release-bot
npm/@emotion/server@11.11.0environment+277.7 kBemotion-release-bot
npm/@emotion/styled@11.11.0environment+7311 kBemotion-release-bot
npm/@esbuild-plugins/node-globals-polyfill@0.2.3None0105 kBxmorse
npm/@escape.tech/mookme@2.4.1environment, filesystem, shell+4271 kBsteffthestunt
npm/@ethersproject/solidity@5.0.5None+7475 kBricmoo
npm/@fingerprintjs/fingerprintjs-pro@3.5.6eval, network+1852 kBsurgie
npm/@google/model-viewer@3.3.0network030.9 MBgoogle-wombot
npm/@gorhom/portal@1.0.9None089.6 kBgorhom
npm/@hcaptcha/react-hcaptcha@0.3.6None030.8 kBbrdlyptrs
npm/@improbable-eng/grpc-web-node-http-transport@0.15.0network+177.8 kBmarcuslongmuir
npm/alchemy-sdk@2.0.1None01.44 MBbrian-alchemy
npm/nodemon@2.0.19environment, filesystem, shell Transitive: network+17835 kBremy
npm/prom-client@14.0.1filesystem, network, unsafe0105 kBsimenb
npm/web3@1.7.5Transitive: network+6314.5 MBjdevcs

🚮 Removed packages:npm/@openzeppelin/test-helpers@0.5.5, npm/@openzeppelin/upgrades@2.8.0, npm/@solana-mobile/dapp-store-cli@0.8.2, npm/@truffle/hdwallet-provider@1.7.0, npm/@typescript-eslint/eslint-plugin@5.55.0, npm/@typescript-eslint/parser@5.55.0, npm/async@2.6.4, npm/babel-register@6.26.0, npm/bignumber.js@8.1.1, npm/eslint-config-prettier@8.7.0, npm/eslint-plugin-prettier@4.2.1, npm/eslint@8.36.0, npm/ethereumjs-abi@0.6.7

View full report↗︎

@socket-security

socket-securityBot commented May 17, 2024•
edited
Loading

Copy link
Copy Markdown

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

AlertPackageNoteSource
Install scripts npm/nodemon@2.0.19
  • Install script:postinstall
  • Source:node bin/postinstall || exit 0
Install scripts npm/@apollo/protobufjs@1.2.7
  • Install script:postinstall
  • Source:node scripts/postinstall
  • orphan: npm/@apollo/protobufjs@1.2.7
Install scripts npm/web3@1.7.5
  • Install script:postinstall
  • Source:echo "WARNING: the web3-shh and web3-bzz api will be deprecated in the next version"
Install scripts npm/web3-bzz@1.7.5
  • Install script:postinstall
  • Source:echo "WARNING: the web3-bzz api will be deprecated in the next version"
Install scripts npm/web3-shh@1.7.5
  • Install script:postinstall
  • Source:echo "WARNING: the web3-shh api will be deprecated in the next version"

View full report↗︎

Next steps

What is an install script?

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/foo@1.0.0 or ignore all packages with @SocketSecurity ignore-all

  • @SocketSecurity ignore npm/nodemon@2.0.19
  • @SocketSecurity ignore npm/@apollo/protobufjs@1.2.7
  • @SocketSecurity ignore npm/web3@1.7.5
  • @SocketSecurity ignore npm/web3-bzz@1.7.5
  • @SocketSecurity ignore npm/web3-shh@1.7.5

@audius-infra

audius-infra commented May 17, 2024

Copy link
Copy Markdown
Collaborator

Preview this change https://demo.audius.co/ddex-docker

@stereosteve
stereosteve merged commit 981954f into mainMay 20, 2024
@stereosteve
stereosteve deleted the ddex-docker branch May 20, 2024 14:21
audius-infra pushed a commit that referenced this pull request May 20, 2024
audius-infra
Audius Protocol v0.6.107
bcd8e9b
[981954f] ddex yaml time (#8515) Steve Perkins
[692e5cb] [PROTO-1690] Elasticsearch cluster health check (#8548) Danny
[bebe484] mediorum: in memory image cache (#8544) Steve Perkins
[5a7f3e3] Tighter over-replication threshold (#8539) Steve Perkins
[fdc248d] [C-4277] Prevent empty albums in feed (#8444) Dylan Jeffers
[c7ec583] Local development fixes (lint, compose, deps) (#8486) Danny
[ba67563] Fix CRM log message (#8507) Raymond Jacobson
schottra added a commit that referenced this pull request May 21, 2024
@schottra
Merge remote-tracking branch 'origin/main' intopay-2924-shadow-user-…
2d3b11c
…endpoints
* origin/main: (57 commits)
[PROTO-1836] Add ApiKey with requests (#8567)
Fix allowed api key test (#8571)
Upgrade mobile apps to .98 (#8566)
[PROTO-1835] Enforce allowed api keys for stream (#8565)
[PROTO-1833] Index allowed api keys (#8564)
[PROTO-1832] Add app name along with stream requests (#8559)
[PAY-3049, QA-1307] filter premium albums from feed if flag off; fix feed spacing (#8562)
[PAY-2767] Premium albums mobile analytics (#8549)
PROTO-1823: mri plugin (#8519)
[C-4402] Use completed at for cooldown check (#8557)
[C-4304] Delete image code cruft (#8554)
Filter out all premium content on USDC_PURCHASES flag (#8560)
Lint check should actually fail, not modify in place. (#8558)
[C-4401] Fix reward in cooldown button (#8537)
Parallelize discovery and AAO attestations (#8545)
[QA-1294] Refetch collection tracks after edit (#8553)
Fix mobile-web add track to album and create album (#8551)
ddex docker: keep src dir (#8556)
Audius Protocol v0.6.107
ddex yaml time (#8515)
...
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

1 more reviewer
@michellebriermichellebriermichellebrier approved these changes
Reviewers whose approvals may not affect merge requirements

Assignees

No one assigned

Labels

size/L

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@stereosteve@audius-infra@michellebrier