[GitHub] [metron] nickwallen commented on issue #1536: METRON-2293 Fix some inaccuracies in the MaaS README example

2019-11-01 Thread GitBox
nickwallen commented on issue #1536: METRON-2293 Fix some inaccuracies in the 
MaaS README example
URL: https://github.com/apache/metron/pull/1536#issuecomment-548898301
 
 
   +1  Thanks for the updates.


This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


With regards,
Apache Git Services


[jira] [Assigned] (METRON-2304) Update node and npm version to LTS releases

2019-11-01 Thread Shane Ardell (Jira)


 [ 
https://issues.apache.org/jira/browse/METRON-2304?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Shane Ardell reassigned METRON-2304:


Assignee: Shane Ardell

> Update node and npm version to LTS releases
> ---
>
> Key: METRON-2304
> URL: https://issues.apache.org/jira/browse/METRON-2304
> Project: Metron
>  Issue Type: Improvement
>Reporter: Shane Ardell
>Assignee: Shane Ardell
>Priority: Major
>  Time Spent: 10m
>  Remaining Estimate: 0h
>
> We are currently using node 9.11.1 and npm 6.2.0 in the project (this is 
> specified in both the Alerts UI and Management UI pom.xml files).
> This version of node is no longer supported. Per their documents, "Production 
> applications should only use Active LTS or Maintenance LTS releases." The 
> current active LTS release is 10.17.0. The matching npm version is 6.11.3.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)


[GitHub] [metron] dependabot[bot] opened a new pull request #1552: Bump nimbus-jose-jwt from 4.41.2 to 7.9 in /metron-interface/metron-rest

2019-11-01 Thread GitBox
dependabot[bot] opened a new pull request #1552: Bump nimbus-jose-jwt from 
4.41.2 to 7.9 in /metron-interface/metron-rest
URL: https://github.com/apache/metron/pull/1552
 
 
   Bumps [nimbus-jose-jwt](https://bitbucket.org/connect2id/nimbus-jose-jwt) 
from 4.41.2 to 7.9.
   
   Changelog
   
   *Sourced from [nimbus-jose-jwt's 
changelog](https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt).*
   
   > version 1.0 (2012-03-01)
   >* First version based on the OpenInfoCard JWT, JWS and JWE code base.
   > 
   > version 1.1 (2012-03-06)
   >* Introduces type-safe enumeration of the JSON Web Algorithms (JWA).
   >* Refactors the JWT class.
   > 
   > version 1.2 (2012-03-08)
   >* Moves JWS and JWE code into separate classes.
   > 
   > version 1.3 (2012-03-09)
   >* Switches to Apache Commons Codec for Base64URL encoding and decoding
   >* Consolidates the crypto utilities within the package.
   >* Introduces a JWT content serialiser class.
   > 
   > version 1.4 (2012-03-09)
   >* Refactoring of JWT class and JUnit tests.
   > 
   > version 1.5 (2012-03-18)
   >* Switches to JSON Smart for JSON serialisation and parsing.
   >* Introduces claims set class with JSON objects, string, Base64URL and
   >  byte array views.
   > 
   > version 1.6 (2012-03-20)
   >* Creates class for representing, serialising and parsing JSON Web Keys
   >  (JWK).
   >* Introduces separate class for representing JWT headers.
   > 
   > version 1.7 (2012-04-01)
   >* Introduces separate classes for plain, JWS and JWE headers.
   >* Introduces separate classes for plain, signed and encrypted JWTs.
   >* Removes the JWTContent class.
   >* Removes password-based (PE820) encryption support.
   > 
   > version 1.8 (2012-04-03)
   >* Adds support for the ZIP JWE header parameter.
   >* Removes unsupported algorithms from the JWA enumeration.
   > 
   > version 1.9 (2012-04-03)
   >* Renames JWEHeader.{get|set}EncryptionAlgorithm() to
   >  JWEHeader.{get|set}EncryptionMethod().
   > 
   > version 1.9.1 (2012-04-03)
   >* Upgrades JSON Smart JAR to 1.1.1.
   > 
   > version 1.10 (2012-04-14)
   >* Introduces serialize() method to base abstract JWT class.
   > 
   > version 1.11 (2012-05-13)
   >* JWT.serialize() throws checked JWTException instead of
   > ... (truncated)
   
   
   Commits
   
   - 
[`10dce4f`](https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/10dce4f52d13f515ed20d48b94447d00b6b8fd6f)
 b64 works with JWTClaimsSet
   - 
[`40b1fcf`](https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/40b1fcfe368c6eb0eabd3ed61ba8e102e2a00d9c)
 Adds new static X509CertUtils.parseWithException methods
   - 
[`805fce1`](https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/805fce19a78544524a316c7bbb6568e25b41b9f3)
 [maven-release-plugin] prepare release 7.6
   - 
[`1a72c5f`](https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/1a72c5fa8d2f0c44d39f7ad9d2418e6c7f3e5efa)
 [maven-release-plugin] prepare for next development iteration
   - 
[`af733f9`](https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/af733f963cc1e98949604c6776d22ccfd2cd66b7)
 Changes JWSObject#serialize(boolean) method signature (iss 
[#320](https://bitbucket.org/connect2id/nimbus-jose-jwt/issues/320))
   - 
[`d752e17`](https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/d752e177482d0bf3c42325731c3588dfe5958c03)
 Merge branch 'fixB64'
   - 
[`3fa65f3`](https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/3fa65f3e2c51d8158b0f63b789d031db0ebc7a9b)
 Change log for 7.7
   - 
[`1abe7c2`](https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/1abe7c2ac5addbbefb5b3a061ff7e9c6df40ffa1)
 [maven-release-plugin] prepare release 7.7
   - 
[`dd19a71`](https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/dd19a712b2b8c0f7c64cb6678cbf96f97d81553e)
 [maven-release-plugin] prepare for next development iteration
   - 
[`7f4dbc0`](https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/7f4dbc02f30147806cda74fea5127346c2704523)
 Issue [#325](https://bitbucket.org/connect2id/nimbus-jose-jwt/issues/325) 
Enhancement: Add an optional proxy support to the DefaultResourceR...
   - Additional commits viewable in [compare 
view](https://bitbucket.org/connect2id/nimbus-jose-jwt/branches/compare/7.9..4.41.2)
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.nimbusds:nimbus-jose-jwt=maven=4.41.2=7.9)](https://help.github.com/articles/configuring-automated-security-fixes)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   -