From f2a54b5dec59e27ebb57efb5ff88956fca96c986 Mon Sep 17 00:00:00 2001 From: Bin Yang Date: Thu, 17 Mar 2022 12:45:59 +0800 Subject: [PATCH] Updated releast notes for transitive dependency on multicloud log4j Issue-ID: MULTICLOUD-1448 Signed-off-by: Bin Yang Change-Id: I110e10a631542d03e2aee0b4bd7a71a78b34803a --- docs/release-notes.rst | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/docs/release-notes.rst b/docs/release-notes.rst index 8ba0858..1c189ea 100644 --- a/docs/release-notes.rst +++ b/docs/release-notes.rst @@ -16,6 +16,21 @@ This document provides the release notes for the ``istanbul`` release. Summary ======= + +Version: 9.0.1 +-------------- + +The ``istanbul`` maintenance release addresses some vulnerabilities mainly +for the log4j dependencies. + +- Updated the direct dependency log4j libraries to 2.14.1 +- Please note log4j is still on older versions in a transitive dependencies for + * onap/multicloud-framework-artifactbroker:1.7.2 + + +Version: 9.0.0 +-------------- + This release introduces new features in k8splugin, including many bug-fixes bringing better compatibility with Helm 3.5 specification. Release Data -- 2.16.6