Bump up dependency version to fix CVE (#41)

SkyAPM · Dec 26, 2024 · da28f1b · da28f1b
1 parent 51885ca
commit da28f1b
Show file tree

Hide file tree

Showing 6 changed files with 749 additions and 902 deletions.
diff --git a/.github/workflows/CI.yaml b/.github/workflows/CI.yaml
@@ -37,6 +37,9 @@ jobs:
         uses: actions/checkout@v3
         with:
           submodules: true
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3.13'
       - name: Check License
         uses: apache/skywalking-eyes/header@501a28d2fb4a9b962661987e50cf0219631b32ff
       - name: Lint codes
@@ -74,7 +77,7 @@ jobs:
           submodules: true
       - uses: actions/setup-python@v5
         with:
-          python-version: '3.10'
+          python-version: '3.13'
       - name: Install docker-compose
         shell: bash
         run: |

diff --git a/Dockerfile b/Dockerfile
@@ -13,7 +13,7 @@
 # limitations under the License.
 
 # Stage 1: Builder stage with full Python image
-FROM python:3.11-slim as final
+FROM python:3.13-slim as final
 
 ENV PYTHONUNBUFFERED=1
 
@@ -23,7 +23,7 @@ WORKDIR /app
 COPY . /app
 
 # Build the project with make
-RUN python3 -m pip install grpcio-tools==1.66.0 packaging \
+RUN python3 -m pip install grpcio-tools==1.68.0 packaging \
 	&& python3 -m tools.grpc_gen \
     && python3 -m pip install .[all]
 

diff --git a/Makefile b/Makefile
@@ -53,7 +53,7 @@ endif
 
 .PHONY: gen-basic
 gen-basic:
-	python3 -m pip install grpcio-tools==1.66.0 packaging
+	python3 -m pip install grpcio-tools==1.68.0 packaging
 	python3 -m tools.grpc_gen
 
 .PHONY: install