CVE-2022-40897

Advisory

Mlrun 1.3.0rc19 requires 'setuptools~=65.5' to include a security fix.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

Features / Enhancements
* **Setup.py**: Added missing package, 3029, liranbg
* **Logs**: Check logs collected for new log collection implementation, 3024, tankilevitch
* **Runtimes**: Add global secret option - secret whose keys will be attached to all functions, 3025, theSaarco
* **Requirements**: Add graphivz to `mlrun[complete]`, 3023, tankilevitch
* **CI**: Update prepare.py to getch provctl from specific endpoint, 3022, liranbg
* **UI**: [Features & enhancement](https://github.com/mlrun/ui/releases/tag/v1.3.0-rc19#features-and-enhancements)

Bug fixes
* **CI**: Fix order in release workflow of the `checkout` action, 3031, tankilevitch
* **Feature Store**: Fix outer-join when user pass `entity_rows` to `get_offline_feature`, 3014, davesh0812
* **Requirements**: Add setuptools requirement to fix vulnerability, 3026, tankilevitch
* **UI**: [Bug fixes](https://github.com/mlrun/ui/releases/tag/v1.3.0-rc19#bug-fixes)


Pull requests:
63c0b6d4 [CI] Fix order in release workflow of the `checkout` action (3031)
1febb793 [Setup.py] Added missing package (3029)
06ade06f [Feature Store] Fix outer-join when user pass `entity_rows` to `get_offline_feature` (3014)
cb18214d [Logs] Check logs collected for new log collection implementation (3024)
595f657b [Requirements] Add setuptools requirement to fix vulnerability (3026)
de9ef213 [Runtimes] Add global secret option - secret whose keys will be attached to all functions (3025)
6a5eec2c [Requirements] Add graphivz to `mlrun[complete]` (3023)
d9b8f5a3 [CI] Update prepare.py to getch provctl from specific endpoint (3022)

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40897