v44.8.5

matt-boris · matt-boris · commit fb587e060cfb · 2022-03-25T10:57:08.000-04:00
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -3,6 +3,27 @@
 <!-- `yarn release` will insert the existing changelog snippets here: -->
 <!-- NEXT RELEASE HERE -->
 
+## v44.8.5
+
+### GENERAL
+
+▶ [patch]
+Upgrade Node.js version from v16.14.0 to v16.14.2 for OpenSSL security patch.
+
+▶ [patch]
+Upgrade to latest `minimist` version to address https://github.com/taskcluster/taskcluster/security/dependabot/73.
+
+▶ [patch]
+Upgrade to latest `mocha` version to address https://github.com/taskcluster/taskcluster/security/dependabot/70, https://github.com/taskcluster/taskcluster/security/dependabot/71, and https://github.com/taskcluster/taskcluster/security/dependabot/72.
+
+### USERS
+
+▶ [patch] [#5282](https://github.com/taskcluster/taskcluster/issues/5282)
+Fix issue with unicode characters in user profile.
+
+Using Github as oauth provider encodes user profile using base64 encoding,
+which, if contains unicode characters, is not decoded properly by `atob()`.
+
 ## v44.8.4
 
 ### GENERAL
diff --git a/changelog/D7QydcVbRfKTuGMWyaWo5A.md b/changelog/D7QydcVbRfKTuGMWyaWo5A.md
diff --git a/changelog/MzfRpH7EQFibZok7N4WoMQ.md b/changelog/MzfRpH7EQFibZok7N4WoMQ.md
diff --git a/changelog/Q3LMtDLUT8mpnIEvJVysHA.md b/changelog/Q3LMtDLUT8mpnIEvJVysHA.md
diff --git a/changelog/cjZPYS4KS96R3Fqpupq6Lg.md b/changelog/cjZPYS4KS96R3Fqpupq6Lg.md
diff --git a/changelog/issue-5282.md b/changelog/issue-5282.md
diff --git a/clients/client-py/setup.py b/clients/client-py/setup.py
@@ -4,7 +4,7 @@
 from setuptools.command.test import test as TestCommand
 import sys
 
-VERSION = '44.8.4'
+VERSION = '44.8.5'
 
 tests_require = [
     'pytest',
diff --git a/clients/client-rust/Cargo.lock b/clients/client-rust/Cargo.lock
diff --git a/clients/client-rust/client/Cargo.toml b/clients/client-rust/client/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "taskcluster"
-version = "44.8.4"
+version = "44.8.5"
 authors = ["Wander Lairson Costa <wander.lairson@gmail.com>"]
 edition = "2018"
 license = "MPL-2.0"
diff --git a/clients/client-rust/download/Cargo.toml b/clients/client-rust/download/Cargo.toml
@@ -1,14 +1,14 @@
 [package]
 name = "taskcluster-download"
-version = "44.8.4"
+version = "44.8.5"
 authors = ["Dustin J. Mitchell <dustin@mozilla.com>"]
 edition = "2018"
 license = "MPL-2.0"
 description = "Taskcluster Download Support"
 repository = "https://github.com/taskcluster/taskcluster"
 
 [dependencies]
-taskcluster = { version = "44.8.4", path = "../client" }
+taskcluster = { version = "44.8.5", path = "../client" }
 anyhow = "1.0"
 async-trait = "0.1"
 reqwest = { version = "0.11", features = ["json", "stream", "gzip", "brotli"] }
diff --git a/clients/client-rust/integration_tests/Cargo.toml b/clients/client-rust/integration_tests/Cargo.toml
@@ -1,7 +1,7 @@
 [package]
 name = "taskcluster-integration-tests"
 publish = false
-version = "44.8.4"
+version = "44.8.5"
 authors = ["Wander Lairson Costa <wander.lairson@gmail.com>"]
 edition = "2018"
 license = "MPL-2.0"
@@ -12,7 +12,7 @@ description = "API client for Taskcluster"
 # has no non-dev dependencies
 
 [dev-dependencies]
-taskcluster = { version = "44.8.4", path = "../client" }
+taskcluster = { version = "44.8.5", path = "../client" }
 taskcluster-upload = { path = "../upload" }
 taskcluster-download = { path = "../download" }
 httptest = "0.15.3"
diff --git a/clients/client-rust/upload/Cargo.toml b/clients/client-rust/upload/Cargo.toml
@@ -1,14 +1,14 @@
 [package]
 name = "taskcluster-upload"
-version = "44.8.4"
+version = "44.8.5"
 authors = ["Dustin J. Mitchell <dustin@mozilla.com>"]
 edition = "2018"
 license = "MPL-2.0"
 description = "Taskcluster Upload Support"
 repository = "https://github.com/taskcluster/taskcluster"
 
 [dependencies]
-taskcluster = { version = "44.8.4", path = "../client" }
+taskcluster = { version = "44.8.5", path = "../client" }
 anyhow = "1.0"
 async-trait = "0.1"
 reqwest = { version = "0.11", features = ["json", "stream"] }
diff --git a/clients/client-shell/README.md b/clients/client-shell/README.md
@@ -18,14 +18,14 @@ platform, run `chmod +x` and run it!
 
 MacOS users run the following command:
 ```shell
-curl -L https://github.com/taskcluster/taskcluster/releases/download/v44.8.4/taskcluster-darwin-amd64 --output taskcluster
+curl -L https://github.com/taskcluster/taskcluster/releases/download/v44.8.5/taskcluster-darwin-amd64 --output taskcluster
 ```
 This is to ensure the binary is not quarantined by MacOS.
 You will need to `chmod +x` of
 course.
 
- * [linux-amd64](https://github.com/taskcluster/taskcluster/releases/download/v44.8.4/taskcluster-linux-amd64)
- * [darwin-amd64](https://github.com/taskcluster/taskcluster/releases/download/v44.8.4/taskcluster-darwin-amd64)
+ * [linux-amd64](https://github.com/taskcluster/taskcluster/releases/download/v44.8.5/taskcluster-linux-amd64)
+ * [darwin-amd64](https://github.com/taskcluster/taskcluster/releases/download/v44.8.5/taskcluster-darwin-amd64)
 
 ## Usage
 
diff --git a/clients/client-shell/cmds/version/version.go b/clients/client-shell/cmds/version/version.go
@@ -44,7 +44,7 @@ var (
 
 	// VersionNumber is a formatted string with the version information. This is
 	// filled in by `yarn release`
-	VersionNumber = "44.8.4"
+	VersionNumber = "44.8.5"
 )
 
 var log = root.Logger
diff --git a/clients/client-web/package.json b/clients/client-web/package.json
@@ -1,6 +1,6 @@
 {
   "name": "taskcluster-client-web",
-  "version": "44.8.4",
+  "version": "44.8.5",
   "main": "src/index.js",
   "author": "Eli Perelman <eli@eliperelman.com>",
   "license": "MPL-2.0",
diff --git a/clients/client/package.json b/clients/client/package.json
@@ -1,6 +1,6 @@
 {
   "name": "taskcluster-client",
-  "version": "44.8.4",
+  "version": "44.8.5",
   "author": "Jonas Finnemann Jensen <jopsen@gmail.com>",
   "description": "Client for interfacing taskcluster components",
   "license": "MPL-2.0",
diff --git a/db/package.json b/db/package.json
@@ -1,7 +1,7 @@
 {
   "name": "taskcluster-db",
   "private": true,
-  "version": "44.8.4",
+  "version": "44.8.5",
   "license": "MPL-2.0",
   "scripts": {
     "test": "mocha test/*_test.js test/**/*_test.js",
diff --git a/db/releases.txt b/db/releases.txt
@@ -87,3 +87,4 @@ v44.8.1: 68
 v44.8.2: 68
 v44.8.3: 69
 v44.8.4: 69
+v44.8.5: 69
diff --git a/infrastructure/k8s/Chart.yaml b/infrastructure/k8s/Chart.yaml
@@ -1,5 +1,5 @@
 name: taskcluster
-appVersion: '44.8.4'
+appVersion: '44.8.5'
 description:  Framework that supports Mozilla's continuous integration and release processes.
 version: 0.1.0
 keywords:
diff --git a/infrastructure/k8s/values.yaml b/infrastructure/k8s/values.yaml
@@ -1,4 +1,4 @@
-dockerImage: taskcluster/taskcluster:v44.8.4
+dockerImage: taskcluster/taskcluster:v44.8.5
 trustProxy: true
 forceSSL: false
 nodeEnv: production
diff --git a/infrastructure/tooling/current-release.yml b/infrastructure/tooling/current-release.yml
@@ -1 +1 @@
-image: taskcluster/taskcluster:v44.8.4
+image: taskcluster/taskcluster:v44.8.5
diff --git a/internal/version.go b/internal/version.go
@@ -7,5 +7,5 @@ const (
 	// If modifying/formatting this line, please ensure that the regular
 	// expression in /infrastructure/tooling/src/release/tasks.js continues to
 	// work.
-	Version = "44.8.4"
+	Version = "44.8.5"
 )
diff --git a/libraries/api/package.json b/libraries/api/package.json
@@ -1,7 +1,7 @@
 {
   "name": "taskcluster-lib-api",
   "private": true,
-  "version": "44.8.4",
+  "version": "44.8.5",
   "author": "Jonas Finnemann Jensen <jopsen@gmail.com>",
   "description": "taskcluster-lib-api",
   "license": "MPL-2.0",
diff --git a/libraries/app/package.json b/libraries/app/package.json
@@ -1,7 +1,7 @@
 {
   "name": "taskcluster-lib-app",
   "private": true,
-  "version": "44.8.4",
+  "version": "44.8.5",
   "author": "Jonas Finnemann Jensen <jopsen@gmail.com>",
   "description": "taskcluster-lib-app",
   "license": "MPL-2.0",
diff --git a/libraries/azqueue/package.json b/libraries/azqueue/package.json
@@ -1,7 +1,7 @@
 {
   "name": "taskcluster-lib-azqueue",
   "private": true,
-  "version": "44.8.4",
+  "version": "44.8.5",
   "license": "MPL-2.0",
   "scripts": {
     "coverage": "c8 yarn test",
diff --git a/libraries/azure/package.json b/libraries/azure/package.json
@@ -1,7 +1,7 @@
 {
   "name": "taskcluster-lib-azure",
   "private": true,
-  "version": "44.8.4",
+  "version": "44.8.5",
   "author": "Dustin J. Mitchell <dustin@mozilla.com>",
   "description": "Azure SAS credential shim for Taskcluster.",
   "license": "MPL-2.0",
diff --git a/libraries/config/package.json b/libraries/config/package.json
@@ -1,7 +1,7 @@
 {
   "name": "taskcluster-lib-config",
   "private": true,
-  "version": "44.8.4",
+  "version": "44.8.5",
   "author": "Jonas Finnemann Jensen <jopsen@gmail.com>",
   "description": "Configuration loader that injects env variables into YAML",
   "license": "MPL-2.0",
diff --git a/libraries/iterate/package.json b/libraries/iterate/package.json
@@ -1,7 +1,7 @@
 {
   "name": "taskcluster-lib-iterate",
   "private": true,
-  "version": "44.8.4",
+  "version": "44.8.5",
   "description": "A library to share iteration logic",
   "main": "src/index.js",
   "scripts": {
diff --git a/libraries/loader/package.json b/libraries/loader/package.json
@@ -1,7 +1,7 @@
 {
   "name": "taskcluster-lib-loader",
   "private": true,
-  "version": "44.8.4",
+  "version": "44.8.5",
   "description": "a component loader for taskcluster",
   "main": "src/index.js",
   "directories": {
diff --git a/libraries/monitor/package.json b/libraries/monitor/package.json
@@ -1,7 +1,7 @@
 {
   "name": "taskcluster-lib-monitor",
   "private": true,
-  "version": "44.8.4",
+  "version": "44.8.5",
   "author": "Brian Stack <bstack@mozilla.com>",
   "description": "Make it easy to hook up monitoring and metrics for taskcluster services.",
   "license": "MPL-2.0",
diff --git a/libraries/postgres/package.json b/libraries/postgres/package.json
@@ -1,7 +1,7 @@
 {
   "name": "taskcluster-lib-postgres",
   "private": true,
-  "version": "44.8.4",
+  "version": "44.8.5",
   "license": "MPL-2.0",
   "scripts": {
     "coverage": "c8 yarn test",
diff --git a/libraries/pulse/package.json b/libraries/pulse/package.json
@@ -1,7 +1,7 @@
 {
   "name": "taskcluster-lib-pulse",
   "private": true,
-  "version": "44.8.4",
+  "version": "44.8.5",
   "description": "Library for interacting with Pulse and Taskcluster-Pulse",
   "main": "src/index.js",
   "author": "Dustin J. Mitchell <dustin@mozilla.com>",
diff --git a/libraries/references/package.json b/libraries/references/package.json
@@ -1,7 +1,7 @@
 {
   "name": "taskcluster-lib-references",
   "private": true,
-  "version": "44.8.4",
+  "version": "44.8.5",
   "main": "src/index.js",
   "scripts": {
     "coverage": "c8 yarn test",
diff --git a/libraries/testing/package.json b/libraries/testing/package.json
@@ -1,7 +1,7 @@
 {
   "name": "taskcluster-lib-testing",
   "private": true,
-  "version": "44.8.4",
+  "version": "44.8.5",
   "author": "Jonas Finnemann Jensen <jopsen@gmail.com>",
   "description": "taskcluster-lib-testing",
   "license": "MPL-2.0",
diff --git a/libraries/validate/package.json b/libraries/validate/package.json
@@ -1,7 +1,7 @@
 {
   "name": "taskcluster-lib-validate",
   "private": true,
-  "version": "44.8.4",
+  "version": "44.8.5",
   "author": "Brian Stack <bstack@mozilla.com>",
   "description": "Validate schemas for Taskcluster projects",
   "license": "MPL-2.0",
diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "taskcluster",
-  "version": "44.8.4",
+  "version": "44.8.5",
   "private": true,
   "engine-strict": true,
   "engines": {
diff --git a/services/auth/package.json b/services/auth/package.json
@@ -1,6 +1,6 @@
 {
   "name": "taskcluster-auth",
-  "version": "44.8.4",
+  "version": "44.8.5",
   "private": true,
   "main": "node src/server production",
   "scripts": {
diff --git a/services/built-in-workers/package.json b/services/built-in-workers/package.json
@@ -1,6 +1,6 @@
 {
   "name": "taskcluster-built-in-workers",
-  "version": "44.8.4",
+  "version": "44.8.5",
   "private": true,
   "scripts": {
     "coverage": "c8 yarn test",
diff --git a/services/github/package.json b/services/github/package.json
@@ -1,6 +1,6 @@
 {
   "name": "taskcluster-github",
-  "version": "44.8.4",
+  "version": "44.8.5",
   "private": true,
   "scripts": {
     "coverage": "c8 yarn test",
diff --git a/services/hooks/package.json b/services/hooks/package.json
@@ -1,6 +1,6 @@
 {
   "name": "taskcluster-hooks",
-  "version": "44.8.4",
+  "version": "44.8.5",
   "private": true,
   "scripts": {
     "coverage": "c8 yarn test",
diff --git a/services/index/package.json b/services/index/package.json
diff --git a/services/notify/package.json b/services/notify/package.json
diff --git a/services/object/package.json b/services/object/package.json
diff --git a/services/purge-cache/package.json b/services/purge-cache/package.json
diff --git a/services/queue/package.json b/services/queue/package.json
diff --git a/services/secrets/package.json b/services/secrets/package.json
diff --git a/services/web-server/package.json b/services/web-server/package.json
diff --git a/services/worker-manager/package.json b/services/worker-manager/package.json
diff --git a/ui/package.json b/ui/package.json
diff --git a/ui/test/e2e/package.json b/ui/test/e2e/package.json
diff --git a/workers/docker-worker/package.json b/workers/docker-worker/package.json
