Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Security upgrade python from 3.10-alpine to 3.12.3-alpine #52

Merged
merged 7 commits into from
Jul 9, 2024
Merged
6 changes: 6 additions & 0 deletions CHANGES.rst
Original file line number Diff line number Diff line change
Expand Up @@ -9,6 +9,12 @@ Changes

Features / Changes
~~~~~~~~~~~~~~~~~~~~~
* Pin ``crim-ca/pyramid_celery==5.0.0a`` fork
(`crim-ca/[email protected] <https://github.com/crim-ca/pyramid_celery/tree/5.0.0a>`_)
to support Python 3.12 and other package cross-dependency improvements
(relates to `sontek/pyramid_celery#102 <https://github.com/sontek/pyramid_celery/pull/102>`_).
* Pin ``threddsclient==0.4.6`` to support Python 3.12
(relates to `bird-house/threddsclient#17 <https://github.com/bird-house/threddsclient/pull/17>`_).
* Pin ``urllib3>=2.2.2`` to address CVE-2024-37891.
* Pin ``gunicorn>=22`` to address CVE-2024-1135.
* Pin Docker base to ``python:3.11-alpine3.19`` for various security fixes.
Expand Down
2 changes: 1 addition & 1 deletion docker/Dockerfile-base
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
FROM python:3.11-alpine3.19
FROM python:3.12.3-alpine
LABEL description.short="Cowbird base"
LABEL description.long="Cowbird middleware to manage interactions between various birds of the bird-house stack."
LABEL Maintainer="Ouranos, CRIM"
Expand Down
5 changes: 3 additions & 2 deletions requirements.txt
Original file line number Diff line number Diff line change
Expand Up @@ -12,14 +12,15 @@ pastedeploy
pymongo[srv]>=4.4,<5 # required to work with pinned celery
pyramid>=1.10.2,<2
pyramid_mako>=1.0.2
pyramid_celery
# see https://github.com/sontek/pyramid_celery/pull/102 to fix Python 3.12 support and other improvements
pyramid_celery @ git+https://github.com/crim-ca/[email protected]
python-dotenv
pyyaml>=5.1
requests
requests_file
schema
simplejson
threddsclient==0.4.4
threddsclient==0.4.6
typing_extensions
urllib3>=2.2.2
watchdog>=4
Expand Down
Loading