Skip to content

feat: Upgrade pip to avoid vulnerabilities#99

Open
PavelYadrov wants to merge 1 commit intomainfrom
feature/upgrade_tools_and_3rd_parties
Open

feat: Upgrade pip to avoid vulnerabilities#99
PavelYadrov wants to merge 1 commit intomainfrom
feature/upgrade_tools_and_3rd_parties

Conversation

@PavelYadrov
Copy link
Collaborator

What type of PR is this? (check all applicable)

  • Refactor
  • Feature
  • Bug Fix
  • Optimization
  • Documentation Update

Description

TDB

Related Tickets & Documents

  • Related Issue #
  • Closes #

QA Instructions, Screenshots, Recordings

Please replace this line with instructions on how to test your changes, a note
on the devices and browsers this has been tested on, as well as any relevant
images for UI changes.

Breaking Change checklist

If your PR includes any deployment or processing changes, please utilize this checklist:

  • Does it change any deployment parameters, logic of their working or rename them?
  • Did update from previous version tested with the same set of deployment parameters?

Added/updated tests?

  • Yes
  • No, and this is why: please replace this line with details on why tests
    have not been included
  • I need help with writing tests

[optional] Are there any things to highlight or double check?

[optional] What gif best describes this PR or how it makes you feel?

@github-actions github-actions bot added the enhancement New feature or request label Nov 6, 2025
@PavelYadrov PavelYadrov requested a review from asatt November 7, 2025 08:00
&& usermod -a -G 0 robot \
# Install dependencies
&& python3 -m pip install --no-cache-dir --upgrade \
&& python3 -m pip install --no-cache-dir --upgrade pip==${PIP} \
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Just a question, maybe better to set pip==25.3 inside the RUN instruction? In this case, Dependabot can automatically update the version. Not sure that Dependabot can update when a version is specified as an argument.
Plus, I don't see in GitHub Action for build that this new ARG is really used.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants