Bump logstash from 8.11.3 to 8.12.0 in /projects/person-search-index-…

…from-delius/container (#3056) * Bump logstash in /projects/person-search-index-from-delius/container Bumps logstash from 8.11.3 to 8.12.0. --- updated-dependencies: - dependency-name: logstash dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> * Extend suppression for logstash Derby vulnerability --------- Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Marcus Aspin <[email protected]>
ministryofjustice · Jan 31, 2024 · 7676350 · 7676350
1 parent ca0f937
commit 7676350
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/projects/person-search-index-from-delius/.trivyignore b/projects/person-search-index-from-delius/.trivyignore
@@ -2,7 +2,7 @@
 # Reason: LDAP authentication not used + no untrusted username input
 # Package: org.apache.derby:derby:10.14.1.0
 # Reference: https://github.com/logstash-plugins/logstash-integration-jdbc/issues/147
-CVE-2022-46337 exp:2024-01-12
+CVE-2022-46337
 
 # Reason: we don't use Maven
 # Package: org.apache.maven:maven-compat:3.3.9

diff --git a/projects/person-search-index-from-delius/container/Dockerfile b/projects/person-search-index-from-delius/container/Dockerfile
@@ -4,7 +4,7 @@ COPY --chown=yq /pipelines /pipelines
 RUN find /pipelines -type f -name '*.yml' -exec sh -c 'f="$1"; yq -o=json "$f" > "${f%.yml}.json"' shell {} +;
 
 
-FROM logstash:8.11.3
+FROM logstash:8.12.0
 
 USER root
 SHELL ["/bin/bash", "-o", "pipefail", "-c"]