⬆️🔒️ Upgrade security issue regarding h11 dependencies

[sanderegg]

Highlights on updated libraries (only updated libraries are included)

• #packages before ~ 2
• #packages after ~ 2

#	name	before	after	upgrade	count	packages
1	h11	0.14.0	0.16.0	minor	32	agent⬆️🧪 api-server⬆️🧪 aws-library🧪 catalog⬆️🧪 datcore-adapter⬆️🧪 director⬆️🧪 dynamic-scheduler⬆️🧪 dynamic-sidecar⬆️ e2e-playwright🧪🧪 invitations⬆️🧪 notifications⬆️🧪 payments⬆️🧪 public-api🧪🧪 resource-usage-tracker⬆️🧪 service-library🧪🧪 storage⬆️🧪 web⬆️🧪
2	httpcore	1.0.5, 1.0.7, 1.0.4, 1.0.6	1.0.9		32	agent⬆️🧪 api-server⬆️🧪 aws-library🧪 catalog⬆️🧪 datcore-adapter⬆️🧪 director⬆️🧪 dynamic-scheduler⬆️🧪 dynamic-sidecar⬆️ e2e-playwright🧪🧪 invitations⬆️🧪 notifications⬆️🧪 payments⬆️🧪 public-api🧪🧪 resource-usage-tracker⬆️🧪 service-library🧪🧪 storage⬆️🧪 web⬆️🧪

Legend:

• ⬆️ base dependency (only services because packages are floating)
• 🧪 test dependency
• 🔧 tool dependency

What do these changes do?

Related issue/s

How to test

Dev-ops

[sanderegg]

@mergify queue

[mergify]

queue

🟠 Waiting for conditions to match

• -closed [📌 queue requirement]
• any of: [🔀 queue conditions]
  • all of: [📌 queue conditions of queue default]
    • #approved-reviews-by >= 2 [🛡 GitHub branch protection]
    • #approved-reviews-by>=2
    • branch-protection-review-decision = APPROVED [🛡 GitHub branch protection]
    • any of: [🛡 GitHub branch protection]
      • check-neutral = unit-tests
      • check-skipped = unit-tests
      • check-success = unit-tests
    • #changes-requested-reviews-by = 0 [🛡 GitHub branch protection]
    • #changes-requested-reviews-by=0
    • #review-threads-unresolved = 0 [🛡 GitHub branch protection]
    • #review-threads-unresolved=0
    • -conflict
    • -draft
    • base=master
    • label!=🤖-do-not-merge
    • label=🤖-automerge
    • any of: [🛡 GitHub branch protection]
      • check-skipped = deploy to dockerhub
      • check-neutral = deploy to dockerhub
      • check-success = deploy to dockerhub
    • any of: [🛡 GitHub branch protection]
      • check-success = system-tests
      • check-neutral = system-tests
      • check-skipped = system-tests
    • any of: [🛡 GitHub branch protection]
      • check-success = check OAS' are up to date
      • check-neutral = check OAS' are up to date
      • check-skipped = check OAS' are up to date
    • any of: [🛡 GitHub branch protection]
      • check-success = integration-tests
      • check-neutral = integration-tests
      • check-skipped = integration-tests
    • any of: [🛡 GitHub branch protection]
      • check-success = build-test-images (frontend) / build-test-images
      • check-neutral = build-test-images (frontend) / build-test-images
      • check-skipped = build-test-images (frontend) / build-test-images
• -conflict [📌 queue requirement]
• -draft [📌 queue requirement]
• any of: [📌 queue -> configuration change requirements]
  • -mergify-configuration-changed
  • check-success = Configuration changed

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 87.86%. Comparing base (0eb2563) to head (ebd9668).
Report is 1 commits behind head on master.

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #8052      +/-   ##
==========================================
- Coverage   88.15%   87.86%   -0.29%     
==========================================
  Files        1811     1453     -358     
  Lines       69748    60816    -8932     
  Branches     1258      750     -508     
==========================================
- Hits        61486    53439    -8047     
+ Misses       7898     7136     -762     
+ Partials      364      241     -123     

Flag	Coverage Δ
integrationtests	64.31% <ø> (-0.03%)	⬇️
unittests	86.24% <ø> (-0.50%)	⬇️

Components	Coverage Δ
api	∅ <ø> (∅)
pkg_aws_library	93.93% <ø> (ø)
pkg_celery_library	∅ <ø> (∅)
pkg_dask_task_models_library	∅ <ø> (∅)
pkg_models_library	∅ <ø> (∅)
pkg_notifications_library	∅ <ø> (∅)
pkg_postgres_database	∅ <ø> (∅)
pkg_service_integration	69.92% <ø> (ø)
pkg_service_library	71.42% <ø> (+0.04%)	⬆️
pkg_settings_library	∅ <ø> (∅)
pkg_simcore_sdk	85.05% <ø> (ø)
agent	96.29% <ø> (ø)
api_server	92.83% <ø> (ø)
autoscaling	96.03% <ø> (ø)
catalog	92.58% <ø> (ø)
clusters_keeper	99.13% <ø> (ø)
dask_sidecar	92.13% <ø> (-0.23%)	⬇️
datcore_adapter	∅ <ø> (∅)
director	76.73% <ø> (ø)
director_v2	90.99% <ø> (-0.02%)	⬇️
dynamic_scheduler	96.69% <ø> (ø)
dynamic_sidecar	90.09% <ø> (ø)
efs_guardian	89.65% <ø> (ø)
invitations	93.60% <ø> (ø)
payments	92.57% <ø> (ø)
resource_usage_tracker	92.52% <ø> (∅)
storage	86.65% <ø> (-0.05%)	⬇️
webclient	∅ <ø> (∅)
webserver	88.62% <ø> (+<0.01%)	⬆️

---

Continue to review full report in Codecov by Sentry.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 0eb2563...ebd9668. Read the comment docs.

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud