Skip to content

Commit 720072a

Browse files
authored
Maintenance: upgrades reqs week 44 (#1921)
* Upgrades cryptography >3.2 due to vulnerability fix (moderate severity) * Upgrades extent of update recipe * Minor fixes in freeze lists * upgrades urllib3 from 1.25.10 to 1.25.11. * Minor fixes in makefile * Updates ONLY tests tool (packages on top of base.txt)
1 parent 4e7ca3c commit 720072a

File tree

25 files changed

+134
-125
lines changed

25 files changed

+134
-125
lines changed

packages/models-library/requirements/_test.txt

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@
44
#
55
# pip-compile --output-file=requirements/_test.txt requirements/_test.in
66
#
7-
aiohttp==3.6.3 # via pytest-aiohttp
7+
aiohttp==3.7.2 # via pytest-aiohttp
88
astroid==2.4.2 # via pylint
99
async-timeout==3.0.1 # via aiohttp
1010
attrs==20.2.0 # via aiohttp, pytest
@@ -20,11 +20,11 @@ icdiff==1.9.1 # via pytest-icdiff
2020
idna-ssl==1.1.0 # via aiohttp
2121
idna==2.10 # via -r requirements/_base.txt, email-validator, idna-ssl, requests, yarl
2222
importlib-metadata==2.0.0 # via pluggy, pytest
23-
iniconfig==1.0.1 # via pytest
23+
iniconfig==1.1.1 # via pytest
2424
isort==5.6.4 # via pylint
2525
lazy-object-proxy==1.4.3 # via astroid
2626
mccabe==0.6.1 # via pylint
27-
multidict==4.7.6 # via aiohttp, yarl
27+
multidict==5.0.0 # via aiohttp, yarl
2828
packaging==20.4 # via pytest, pytest-sugar
2929
pluggy==0.13.1 # via pytest
3030
pprintpp==0.4.0 # via pytest-icdiff
@@ -39,14 +39,14 @@ pytest-instafail==0.4.2 # via -r requirements/_test.in
3939
pytest-mock==3.3.1 # via -r requirements/_test.in
4040
pytest-runner==5.2 # via -r requirements/_test.in
4141
pytest-sugar==0.9.4 # via -r requirements/_test.in
42-
pytest==6.1.1 # via -r requirements/_test.in, pytest-aiohttp, pytest-cov, pytest-icdiff, pytest-instafail, pytest-mock, pytest-sugar
42+
pytest==6.1.2 # via -r requirements/_test.in, pytest-aiohttp, pytest-cov, pytest-icdiff, pytest-instafail, pytest-mock, pytest-sugar
4343
requests==2.24.0 # via coveralls
4444
six==1.15.0 # via astroid, packaging
4545
termcolor==1.1.0 # via pytest-sugar
4646
toml==0.10.1 # via pylint, pytest
4747
typed-ast==1.4.1 # via astroid
4848
typing-extensions==3.7.4.3 # via aiohttp, yarl
49-
urllib3==1.25.10 # via requests
49+
urllib3==1.25.11 # via requests
5050
wrapt==1.12.1 # via astroid
51-
yarl==1.5.1 # via aiohttp
52-
zipp==3.2.0 # via importlib-metadata
51+
yarl==1.6.2 # via aiohttp
52+
zipp==3.4.0 # via importlib-metadata

packages/postgres-database/requirements/_migration.txt

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,6 +21,6 @@ six==1.15.0 # via docker, python-dateutil, tenacity, websocket-cli
2121
sqlalchemy[postgresql_psycopg2binary]==1.3.19 # via -r requirements/_base.txt, alembic
2222
tenacity==6.2.0 # via -r requirements/_migration.in
2323
typing-extensions==3.7.4.3 # via -r requirements/_base.txt, yarl
24-
urllib3==1.25.10 # via -r requirements/_migration.in, requests
24+
urllib3==1.25.11 # via -r requirements/_migration.in, requests
2525
websocket-client==0.57.0 # via docker
2626
yarl==1.6.0 # via -r requirements/_base.txt

packages/postgres-database/requirements/_test.txt

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@
44
#
55
# pip-compile --output-file=requirements/_test.txt requirements/_test.in
66
#
7-
aiohttp==3.6.2 # via pytest-aiohttp
7+
aiohttp==3.7.2 # via pytest-aiohttp
88
aiopg[sa]==1.0.0 # via -r requirements/_test.in
99
alembic==1.4.3 # via -r requirements/_migration.txt
1010
astroid==2.4.2 # via pylint
@@ -18,17 +18,17 @@ chardet==3.0.4 # via -r requirements/_migration.txt, aiohttp, request
1818
click==7.1.2 # via -r requirements/_migration.txt
1919
coverage==5.3 # via -r requirements/_test.in, coveralls, pytest-cov
2020
coveralls==2.1.2 # via -r requirements/_test.in
21-
cryptography==3.1.1 # via paramiko
21+
cryptography==3.2.1 # via paramiko
2222
distro==1.5.0 # via docker-compose
2323
docker-compose==1.27.4 # via pytest-docker
2424
docker[ssh]==4.3.1 # via -r requirements/_migration.txt, docker-compose
2525
dockerpty==0.4.1 # via docker-compose
2626
docopt==0.6.2 # via coveralls, docker-compose
27-
faker==4.4.0 # via -r requirements/_test.in
27+
faker==4.14.0 # via -r requirements/_test.in
2828
idna-ssl==1.1.0 # via aiohttp
2929
idna==2.10 # via -r requirements/_migration.txt, idna-ssl, requests, yarl
3030
importlib-metadata==2.0.0 # via jsonschema, pluggy, pytest
31-
iniconfig==1.0.1 # via pytest
31+
iniconfig==1.1.1 # via pytest
3232
isort==5.6.4 # via pylint
3333
jsonschema==3.2.0 # via docker-compose
3434
lazy-object-proxy==1.4.3 # via astroid
@@ -51,9 +51,9 @@ pytest-cov==2.10.1 # via -r requirements/_test.in
5151
pytest-docker==0.10.1 # via -r requirements/_test.in
5252
pytest-instafail==0.4.2 # via -r requirements/_test.in
5353
pytest-runner==5.2 # via -r requirements/_test.in
54-
pytest==6.1.1 # via -r requirements/_test.in, pytest-aiohttp, pytest-cov, pytest-docker, pytest-instafail
54+
pytest==6.1.2 # via -r requirements/_test.in, pytest-aiohttp, pytest-cov, pytest-docker, pytest-instafail
5555
python-dateutil==2.8.1 # via -r requirements/_migration.txt, alembic, faker
56-
python-dotenv==0.14.0 # via docker-compose
56+
python-dotenv==0.15.0 # via docker-compose
5757
python-editor==1.0.4 # via -r requirements/_migration.txt, alembic
5858
pyyaml==5.3.1 # via -r requirements/_test.in, docker-compose
5959
requests==2.24.0 # via -r requirements/_migration.txt, coveralls, docker, docker-compose
@@ -65,11 +65,11 @@ texttable==1.6.3 # via docker-compose
6565
toml==0.10.1 # via pylint, pytest
6666
typed-ast==1.4.1 # via astroid
6767
typing-extensions==3.7.4.3 # via -r requirements/_migration.txt, aiohttp, yarl
68-
urllib3==1.25.10 # via -r requirements/_migration.txt, requests
68+
urllib3==1.25.11 # via -r requirements/_migration.txt, requests
6969
websocket-client==0.57.0 # via -r requirements/_migration.txt, docker, docker-compose
7070
wrapt==1.12.1 # via astroid
7171
yarl==1.6.0 # via -r requirements/_migration.txt, aiohttp
72-
zipp==3.2.0 # via importlib-metadata
72+
zipp==3.4.0 # via importlib-metadata
7373

7474
# The following packages are considered to be unsafe in a requirements file:
7575
# setuptools

packages/s3wrapper/requirements/_base.txt

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,4 +10,4 @@ minio==6.0.0 # via -r requirements/_base.in
1010
python-dateutil==2.8.1 # via minio
1111
pytz==2020.1 # via minio
1212
six==1.15.0 # via python-dateutil
13-
urllib3==1.25.10 # via -r requirements/_base.in, minio
13+
urllib3==1.25.11 # via -r requirements/_base.in, minio

packages/s3wrapper/requirements/_test.txt

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -14,15 +14,15 @@ chardet==3.0.4 # via requests
1414
configparser==5.0.0 # via -r requirements/_base.txt, minio
1515
coverage==5.3 # via -r requirements/_test.in, coveralls, pytest-cov
1616
coveralls==2.1.2 # via -r requirements/_test.in
17-
cryptography==3.1.1 # via paramiko
17+
cryptography==3.2.1 # via paramiko
1818
distro==1.5.0 # via docker-compose
1919
docker-compose==1.27.4 # via pytest-docker
2020
docker[ssh]==4.3.1 # via docker-compose
2121
dockerpty==0.4.1 # via docker-compose
2222
docopt==0.6.2 # via coveralls, docker-compose
2323
idna==2.10 # via requests
2424
importlib-metadata==2.0.0 # via jsonschema, pluggy, pytest
25-
iniconfig==1.0.1 # via pytest
25+
iniconfig==1.1.1 # via pytest
2626
isort==5.6.4 # via pylint
2727
jsonschema==3.2.0 # via docker-compose
2828
lazy-object-proxy==1.4.3 # via astroid
@@ -40,20 +40,20 @@ pyrsistent==0.17.3 # via jsonschema
4040
pytest-cov==2.10.1 # via -r requirements/_test.in
4141
pytest-docker==0.10.1 # via -r requirements/_test.in
4242
pytest-runner==5.2 # via -r requirements/_test.in
43-
pytest==6.1.1 # via -r requirements/_test.in, pytest-cov, pytest-docker
43+
pytest==6.1.2 # via -r requirements/_test.in, pytest-cov, pytest-docker
4444
python-dateutil==2.8.1 # via -r requirements/_base.txt, minio
45-
python-dotenv==0.14.0 # via docker-compose
45+
python-dotenv==0.15.0 # via docker-compose
4646
pytz==2020.1 # via -r requirements/_base.txt, minio
4747
pyyaml==5.3.1 # via docker-compose
4848
requests==2.24.0 # via -r requirements/_test.in, coveralls, docker, docker-compose
4949
six==1.15.0 # via -r requirements/_base.txt, astroid, bcrypt, cryptography, docker, dockerpty, jsonschema, packaging, pynacl, python-dateutil, websocket-client
5050
texttable==1.6.3 # via docker-compose
5151
toml==0.10.1 # via pylint, pytest
5252
typed-ast==1.4.1 # via astroid
53-
urllib3==1.25.10 # via -r requirements/_base.txt, minio, requests
53+
urllib3==1.25.11 # via -r requirements/_base.txt, minio, requests
5454
websocket-client==0.57.0 # via docker, docker-compose
5555
wrapt==1.12.1 # via astroid
56-
zipp==3.2.0 # via importlib-metadata
56+
zipp==3.4.0 # via importlib-metadata
5757

5858
# The following packages are considered to be unsafe in a requirements file:
5959
# setuptools

packages/service-library/requirements/_test.txt

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ cffi==1.14.3 # via bcrypt, cryptography, pynacl
1818
chardet==3.0.4 # via -r requirements/_base.txt, aiohttp, requests
1919
coverage==5.3 # via -r requirements/_test.in, coveralls, pytest-cov
2020
coveralls==2.1.2 # via -r requirements/_test.in
21-
cryptography==3.1.1 # via paramiko
21+
cryptography==3.2.1 # via paramiko
2222
distro==1.5.0 # via docker-compose
2323
docker-compose==1.27.4 # via pytest-docker
2424
docker[ssh]==4.3.1 # via docker-compose
@@ -27,7 +27,7 @@ docopt==0.6.2 # via coveralls, docker-compose
2727
idna-ssl==1.1.0 # via -r requirements/_base.txt, aiohttp
2828
idna==2.10 # via -r requirements/_base.txt, idna-ssl, requests, yarl
2929
importlib-metadata==2.0.0 # via -r requirements/_base.txt, jsonschema, pluggy, pytest
30-
iniconfig==1.0.1 # via pytest
30+
iniconfig==1.1.1 # via pytest
3131
isodate==0.6.0 # via -r requirements/_base.txt, openapi-core
3232
isort==5.6.4 # via pylint
3333
jsonschema==3.2.0 # via -r requirements/_base.txt, docker-compose, openapi-spec-validator
@@ -54,8 +54,8 @@ pytest-instafail==0.4.2 # via -r requirements/_test.in
5454
pytest-mock==3.3.1 # via -r requirements/_test.in
5555
pytest-runner==5.2 # via -r requirements/_test.in
5656
pytest-sugar==0.9.4 # via -r requirements/_test.in
57-
pytest==6.1.1 # via -r requirements/_test.in, pytest-aiohttp, pytest-cov, pytest-docker, pytest-instafail, pytest-mock, pytest-sugar
58-
python-dotenv==0.14.0 # via docker-compose
57+
pytest==6.1.2 # via -r requirements/_test.in, pytest-aiohttp, pytest-cov, pytest-docker, pytest-instafail, pytest-mock, pytest-sugar
58+
python-dotenv==0.15.0 # via docker-compose
5959
pyyaml==5.3.1 # via -r requirements/_base.txt, docker-compose, openapi-spec-validator
6060
requests==2.24.0 # via coveralls, docker, docker-compose
6161
six==1.15.0 # via -r requirements/_base.txt, astroid, bcrypt, cryptography, docker, dockerpty, isodate, jsonschema, openapi-core, openapi-spec-validator, packaging, pynacl, tenacity, websocket-client
@@ -69,7 +69,7 @@ trafaret==2.1.0 # via -r requirements/_base.txt
6969
typed-ast==1.4.1 # via astroid
7070
typing-extensions==3.7.4.3 # via -r requirements/_base.txt, aiohttp, yarl
7171
ujson==4.0.1 # via -r requirements/_base.txt
72-
urllib3==1.25.10 # via requests
72+
urllib3==1.25.11 # via requests
7373
websocket-client==0.57.0 # via docker, docker-compose
7474
werkzeug==1.0.1 # via -r requirements/_base.txt
7575
wrapt==1.12.1 # via astroid

packages/simcore-sdk/requirements/_base.txt

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -13,10 +13,10 @@ chardet==3.0.4 # via aiohttp
1313
dataclasses==0.7 # via pydantic
1414
decorator==4.4.2 # via networkx
1515
idna-ssl==1.1.0 # via aiohttp
16-
idna==2.10 # via yarl
16+
idna==2.10 # via idna-ssl, yarl
1717
multidict==4.7.6 # via aiohttp, yarl
1818
networkx==2.5 # via -r requirements/_base.in
19-
psycopg2-binary==2.8.6 # via -r requirements/_base.in, aiopg
19+
psycopg2-binary==2.8.6 # via -r requirements/_base.in, aiopg, sqlalchemy
2020
pydantic==1.6.1 # via -r requirements/_base.in
2121
pyyaml==5.3.1 # via trafaret-config
2222
six==1.15.0 # via tenacity

packages/simcore-sdk/requirements/_test.txt

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ cffi==1.14.3 # via bcrypt, cryptography, pynacl
1717
chardet==3.0.4 # via -r requirements/_base.txt, aiohttp, requests
1818
coverage==5.3 # via -r requirements/_test.in, coveralls, pytest-cov
1919
coveralls==2.1.2 # via -r requirements/_test.in
20-
cryptography==3.1.1 # via paramiko
20+
cryptography==3.2.1 # via paramiko
2121
dataclasses==0.7 # via -r requirements/_base.txt, pydantic
2222
decorator==4.4.2 # via -r requirements/_base.txt, networkx
2323
distro==1.5.0 # via docker-compose
@@ -28,7 +28,7 @@ docopt==0.6.2 # via coveralls, docker-compose
2828
idna-ssl==1.1.0 # via -r requirements/_base.txt, aiohttp
2929
idna==2.10 # via -r requirements/_base.txt, idna-ssl, requests, yarl
3030
importlib-metadata==2.0.0 # via jsonschema, pluggy, pytest
31-
iniconfig==1.0.1 # via pytest
31+
iniconfig==1.1.1 # via pytest
3232
isort==5.6.4 # via pylint
3333
jsonschema==3.2.0 # via docker-compose
3434
lazy-object-proxy==1.4.3 # via astroid
@@ -54,8 +54,8 @@ pytest-instafail==0.4.2 # via -r requirements/_test.in
5454
pytest-mock==3.3.1 # via -r requirements/_test.in
5555
pytest-runner==5.2 # via -r requirements/_test.in
5656
pytest-sugar==0.9.4 # via -r requirements/_test.in
57-
pytest==6.1.1 # via -r requirements/_test.in, pytest-aiohttp, pytest-cov, pytest-docker, pytest-instafail, pytest-mock, pytest-sugar
58-
python-dotenv==0.14.0 # via -r requirements/_test.in, docker-compose
57+
pytest==6.1.2 # via -r requirements/_test.in, pytest-aiohttp, pytest-cov, pytest-docker, pytest-instafail, pytest-mock, pytest-sugar
58+
python-dotenv==0.15.0 # via -r requirements/_test.in, docker-compose
5959
pyyaml==5.3.1 # via -r requirements/_base.txt, docker-compose, trafaret-config
6060
requests==2.24.0 # via -r requirements/_test.in, coveralls, docker, docker-compose
6161
six==1.15.0 # via -r requirements/_base.txt, astroid, bcrypt, cryptography, docker, dockerpty, jsonschema, packaging, pynacl, tenacity, websocket-client
@@ -68,11 +68,11 @@ trafaret-config==2.0.2 # via -r requirements/_base.txt
6868
trafaret==2.1.0 # via -r requirements/_base.txt, trafaret-config
6969
typed-ast==1.4.1 # via astroid
7070
typing-extensions==3.7.4.3 # via -r requirements/_base.txt, aiohttp, yarl
71-
urllib3==1.25.10 # via requests
71+
urllib3==1.25.11 # via requests
7272
websocket-client==0.57.0 # via docker, docker-compose
7373
wrapt==1.12.1 # via astroid
7474
yarl==1.5.1 # via -r requirements/_base.txt, aiohttp
75-
zipp==3.2.0 # via importlib-metadata
75+
zipp==3.4.0 # via importlib-metadata
7676

7777
# The following packages are considered to be unsafe in a requirements file:
7878
# setuptools

scripts/requirements/Makefile

Lines changed: 7 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ SERVICES_DIR := $(abspath $(REPODIR)/services)
2222
UPGRADE_OPTION := $(if $(upgrade),upgrade=$(upgrade),)
2323

2424
# tools
25-
MAKE_C := $(MAKE) --no-print-directory --directory
25+
MAKE_C := $(MAKE) --directory
2626

2727

2828
.PHONY: touch reqs _check_py36_version
@@ -32,8 +32,8 @@ _input-requirements = $(shell find ${PACKAGES_DIR} -type f -name _base.in)
3232
_input-requirements += $(shell find $(REPODIR)/api/tests/ -type f -name "*.in")
3333
# system tests
3434
_input-requirements += $(shell find $(REPODIR)/tests/ -type f -name "*.in")
35-
# services/*/_test.in (ONLY tests tools)
36-
_input-requirements = $(shell find ${SERVICES_DIR} -type f -name _test.in)
35+
# services/*/_*.in
36+
_input-requirements += $(shell find ${SERVICES_DIR} -type f -name "_*.in")
3737

3838
$(info Found $(_input-requirements))
3939

@@ -53,8 +53,9 @@ reqs: _check_py36_version ## updates requirements of all package libraries
5353

5454
# SEE https://medium.com/faun/set-current-host-user-for-docker-container-4e521cef9ffc
5555
.PHONY: build
56-
build:
57-
docker build --tag local/python-devkit:latest .
56+
build build-nc:
57+
docker build $(if $(findstring -nc,$@),--no-cache,) --tag local/python-devkit:latest .
58+
5859

5960
.PHONY: run
6061
run: build ## Runs upgrade in a container
@@ -75,7 +76,7 @@ shell:
7576
--workdir="/home/$(USER)" \
7677
--volume="/etc/group:/etc/group:ro" \
7778
--volume="/etc/passwd:/etc/passwd:ro" \
78-
--volume="/etc/shadow:/etc/shadow:ro" \
79+
--volume="/etc/shadow:/etc/shadow:ro" \
7980
--volume=$(REPODIR):/home/$(USER) \
8081
--user=$(shell id -u):$(shell id -g) \
8182
--entrypoint=/bin/bash \

services/api-server/requirements/_base.txt

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ cffi==1.14.2 # via cryptography
1515
chardet==3.0.4 # via httpx, requests
1616
click==7.1.2 # via uvicorn
1717
contextvars==2.4 # via sniffio
18-
cryptography==3.1 # via -r requirements/_base.in
18+
cryptography==3.2.1 # via -r requirements/_base.in
1919
dataclasses==0.7 # via pydantic
2020
dnspython==2.0.0 # via email-validator
2121
email-validator==1.1.1 # via fastapi
@@ -51,7 +51,7 @@ starlette==0.13.6 # via fastapi
5151
tenacity==6.2.0 # via -r requirements/_base.in
5252
typing-extensions==3.7.4.3 # via yarl
5353
ujson==3.2.0 # via fastapi
54-
urllib3==1.25.10 # via requests
54+
urllib3==1.25.11 # via requests
5555
uvicorn==0.11.8 # via fastapi
5656
uvloop==0.14.0 # via uvicorn
5757
websockets==8.1 # via uvicorn

0 commit comments

Comments
 (0)