Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update 2.36.md to fix typo's in version number #11319

Open
wants to merge 1 commit into
base: dev
Choose a base branch
from

Conversation

valentijnscholten
Copy link
Member

@valentijnscholten valentijnscholten commented Nov 25, 2024

Fix 3.36.x -> 2.36.x

@github-actions github-actions bot added the docs label Nov 25, 2024
Copy link

dryrunsecurity bot commented Nov 25, 2024

DryRun Security Summary

The provided code change is related to the upgrade of the DefectDojo application from version 2.35.4 to version 2.36.0, which requires a change in the underlying PostgreSQL version, manual data migration, and clear and comprehensive upgrade instructions to ensure a smooth and secure upgrade process.

Expand for full summary

Summary:

The provided code change is related to the upgrade of the DefectDojo application from version 2.35.4 to version 2.36.0. The key security-related points to highlight are:

  1. Database Compatibility: The upgrade requires a change in the underlying PostgreSQL version, from 11.x to 12.x or higher, to ensure compatibility with the newer version of Django used in DefectDojo 2.36.0. Ensuring compatibility between the application and the database is essential for maintaining the integrity and security of the application's data.

  2. Data Migration: The upgrade process requires manual migration of the data, as PostgreSQL does not support automatic migration of data structures between major versions. This introduces potential risks, as the migration process may introduce errors or data loss if not handled properly. Thorough testing of the migration process is crucial to ensure the integrity of the migrated data.

  3. Upgrade Documentation: The provided documentation in the code change emphasizes the importance of clear and comprehensive upgrade instructions for users. This helps ensure a smooth and secure upgrade process, reducing the risk of errors or security vulnerabilities during the upgrade.

Files Changed:

  • docs/content/en/open_source/upgrading/2.36.md: This file contains the documentation for upgrading the DefectDojo application from version 2.35.4 to 2.36.0. The changes highlight the need to upgrade the underlying PostgreSQL version, the challenges with data migration, and the importance of following the provided upgrade instructions to ensure a secure and successful upgrade process.

Code Analysis

We ran 9 analyzers against 1 file and 0 analyzers had findings. 9 analyzers had no findings.

Riskiness

🟢 Risk threshold not exceeded.

View PR in the DryRun Dashboard.

@valentijnscholten valentijnscholten changed the base branch from master to dev November 25, 2024 15:53
Copy link
Contributor

This pull request has conflicts, please resolve those before we can evaluate the pull request.

Copy link
Contributor

@mtesauro mtesauro left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved

Copy link
Contributor

Conflicts have been resolved. A maintainer will review the pull request shortly.

Copy link
Contributor

@Maffooch Maffooch left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nice to see you @valentijnscholten hope you're doing well 😄

@madchap
Copy link
Contributor

madchap commented Nov 29, 2024

Massive @valentijnscholten ;-)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants