Forbid using Hasura instances running vulnerable versions (#548)

droserasprout · web-flow · commit 4bbf8e44f982 · 2022-11-25T18:12:23.000+04:00
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -16,6 +16,10 @@ The format is based on [Keep a Changelog], and this project adheres to [Semantic
 * index: Do not deserialize originations matched by the `source` filter.
 * index: Wrap storage deserialization exceptions with `InvalidDataError`.
 
+### Security
+
+* hasura: Forbid using Hasura instances running vulnerable versions.
+
 ## [6.3.0] - 2022-11-15
 
 ### Added
diff --git a/demos/demo-domains-big-map/docker-compose.swarm.yml b/demos/demo-domains-big-map/docker-compose.swarm.yml
@@ -53,7 +53,7 @@ services:
     logging: *logging
 
   hasura:
-    image: hasura/graphql-engine:v2.15.0
+    image: hasura/graphql-engine:v2.15.2
     depends_on:
       - db
     environment:
diff --git a/demos/demo-domains-big-map/docker-compose.yml b/demos/demo-domains-big-map/docker-compose.yml
@@ -31,7 +31,7 @@ services:
       retries: 5
 
   hasura:
-    image: hasura/graphql-engine:v2.15.0
+    image: hasura/graphql-engine:v2.15.2
     ports:
       - 127.0.0.1:8080:8080
     depends_on:
diff --git a/demos/demo-domains-big-map/replay.json b/demos/demo-domains-big-map/replay.json
@@ -6,7 +6,7 @@
   "crash_reporting": false,
   "description": "My shiny new indexer based on DipDup",
   "dipdup_version": "6",
-  "hasura_image": "hasura/graphql-engine:v2.15.0",
+  "hasura_image": "hasura/graphql-engine:v2.15.2",
   "license": "MIT",
   "line_length": "120",
   "linters": "default",
diff --git a/demos/demo-domains/docker-compose.swarm.yml b/demos/demo-domains/docker-compose.swarm.yml
@@ -53,7 +53,7 @@ services:
     logging: *logging
 
   hasura:
-    image: hasura/graphql-engine:v2.15.0
+    image: hasura/graphql-engine:v2.15.2
     depends_on:
       - db
     environment:
diff --git a/demos/demo-domains/docker-compose.yml b/demos/demo-domains/docker-compose.yml
@@ -31,7 +31,7 @@ services:
       retries: 5
 
   hasura:
-    image: hasura/graphql-engine:v2.15.0
+    image: hasura/graphql-engine:v2.15.2
     ports:
       - 127.0.0.1:8080:8080
     depends_on:
diff --git a/demos/demo-domains/replay.json b/demos/demo-domains/replay.json
@@ -6,7 +6,7 @@
   "crash_reporting": false,
   "description": "My shiny new indexer based on DipDup",
   "dipdup_version": "6",
-  "hasura_image": "hasura/graphql-engine:v2.15.0",
+  "hasura_image": "hasura/graphql-engine:v2.15.2",
   "license": "MIT",
   "line_length": "120",
   "linters": "default",
diff --git a/demos/demo-events/docker-compose.swarm.yml b/demos/demo-events/docker-compose.swarm.yml
@@ -53,7 +53,7 @@ services:
     logging: *logging
 
   hasura:
-    image: hasura/graphql-engine:v2.15.0
+    image: hasura/graphql-engine:v2.15.2
     depends_on:
       - db
     environment:
diff --git a/demos/demo-events/docker-compose.yml b/demos/demo-events/docker-compose.yml
@@ -31,7 +31,7 @@ services:
       retries: 5
 
   hasura:
-    image: hasura/graphql-engine:v2.15.0
+    image: hasura/graphql-engine:v2.15.2
     ports:
       - 127.0.0.1:8080:8080
     depends_on:
diff --git a/demos/demo-events/replay.json b/demos/demo-events/replay.json
@@ -6,7 +6,7 @@
   "crash_reporting": false,
   "description": "My shiny new indexer based on DipDup",
   "dipdup_version": "6",
-  "hasura_image": "hasura/graphql-engine:v2.15.0",
+  "hasura_image": "hasura/graphql-engine:v2.15.2",
   "license": "MIT",
   "line_length": "120",
   "linters": "default",
diff --git a/demos/demo-head/docker-compose.swarm.yml b/demos/demo-head/docker-compose.swarm.yml
@@ -53,7 +53,7 @@ services:
     logging: *logging
 
   hasura:
-    image: hasura/graphql-engine:v2.15.0
+    image: hasura/graphql-engine:v2.15.2
     depends_on:
       - db
     environment:
diff --git a/demos/demo-head/docker-compose.yml b/demos/demo-head/docker-compose.yml
@@ -31,7 +31,7 @@ services:
       retries: 5
 
   hasura:
-    image: hasura/graphql-engine:v2.15.0
+    image: hasura/graphql-engine:v2.15.2
     ports:
       - 127.0.0.1:8080:8080
     depends_on:
diff --git a/demos/demo-head/replay.json b/demos/demo-head/replay.json
@@ -6,7 +6,7 @@
   "crash_reporting": false,
   "description": "My shiny new indexer based on DipDup",
   "dipdup_version": "6",
-  "hasura_image": "hasura/graphql-engine:v2.15.0",
+  "hasura_image": "hasura/graphql-engine:v2.15.2",
   "license": "MIT",
   "line_length": "120",
   "linters": "default",
diff --git a/demos/demo-hic-et-nunc/docker-compose.swarm.yml b/demos/demo-hic-et-nunc/docker-compose.swarm.yml
@@ -53,7 +53,7 @@ services:
     logging: *logging
 
   hasura:
-    image: hasura/graphql-engine:v2.15.0
+    image: hasura/graphql-engine:v2.15.2
     depends_on:
       - db
     environment:
diff --git a/demos/demo-hic-et-nunc/docker-compose.yml b/demos/demo-hic-et-nunc/docker-compose.yml
@@ -31,7 +31,7 @@ services:
       retries: 5
 
   hasura:
-    image: hasura/graphql-engine:v2.15.0
+    image: hasura/graphql-engine:v2.15.2
     ports:
       - 127.0.0.1:8080:8080
     depends_on:
diff --git a/demos/demo-hic-et-nunc/replay.json b/demos/demo-hic-et-nunc/replay.json
@@ -6,7 +6,7 @@
   "crash_reporting": false,
   "description": "My shiny new indexer based on DipDup",
   "dipdup_version": "6",
-  "hasura_image": "hasura/graphql-engine:v2.15.0",
+  "hasura_image": "hasura/graphql-engine:v2.15.2",
   "license": "MIT",
   "line_length": "120",
   "linters": "default",
diff --git a/demos/demo-quipuswap/docker-compose.swarm.yml b/demos/demo-quipuswap/docker-compose.swarm.yml
@@ -53,7 +53,7 @@ services:
     logging: *logging
 
   hasura:
-    image: hasura/graphql-engine:v2.15.0
+    image: hasura/graphql-engine:v2.15.2
     depends_on:
       - db
     environment:
diff --git a/demos/demo-quipuswap/docker-compose.yml b/demos/demo-quipuswap/docker-compose.yml
@@ -31,7 +31,7 @@ services:
       retries: 5
 
   hasura:
-    image: hasura/graphql-engine:v2.15.0
+    image: hasura/graphql-engine:v2.15.2
     ports:
       - 127.0.0.1:8080:8080
     depends_on:
diff --git a/demos/demo-quipuswap/replay.json b/demos/demo-quipuswap/replay.json
@@ -6,7 +6,7 @@
   "crash_reporting": false,
   "description": "My shiny new indexer based on DipDup",
   "dipdup_version": "6",
-  "hasura_image": "hasura/graphql-engine:v2.15.0",
+  "hasura_image": "hasura/graphql-engine:v2.15.2",
   "license": "MIT",
   "line_length": "120",
   "linters": "default",
diff --git a/demos/demo-registrydao/docker-compose.swarm.yml b/demos/demo-registrydao/docker-compose.swarm.yml
@@ -53,7 +53,7 @@ services:
     logging: *logging
 
   hasura:
-    image: hasura/graphql-engine:v2.15.0
+    image: hasura/graphql-engine:v2.15.2
     depends_on:
       - db
     environment:
diff --git a/demos/demo-registrydao/docker-compose.yml b/demos/demo-registrydao/docker-compose.yml
@@ -31,7 +31,7 @@ services:
       retries: 5
 
   hasura:
-    image: hasura/graphql-engine:v2.15.0
+    image: hasura/graphql-engine:v2.15.2
     ports:
       - 127.0.0.1:8080:8080
     depends_on:
diff --git a/demos/demo-registrydao/replay.json b/demos/demo-registrydao/replay.json
@@ -6,7 +6,7 @@
   "crash_reporting": false,
   "description": "My shiny new indexer based on DipDup",
   "dipdup_version": "6",
-  "hasura_image": "hasura/graphql-engine:v2.15.0",
+  "hasura_image": "hasura/graphql-engine:v2.15.2",
   "license": "MIT",
   "line_length": "120",
   "linters": "default",
diff --git a/demos/demo-tzbtc-transfers/docker-compose.swarm.yml b/demos/demo-tzbtc-transfers/docker-compose.swarm.yml
@@ -53,7 +53,7 @@ services:
     logging: *logging
 
   hasura:
-    image: hasura/graphql-engine:v2.15.0
+    image: hasura/graphql-engine:v2.15.2
     depends_on:
       - db
     environment:
diff --git a/demos/demo-tzbtc-transfers/docker-compose.yml b/demos/demo-tzbtc-transfers/docker-compose.yml
@@ -31,7 +31,7 @@ services:
       retries: 5
 
   hasura:
-    image: hasura/graphql-engine:v2.15.0
+    image: hasura/graphql-engine:v2.15.2
     ports:
       - 127.0.0.1:8080:8080
     depends_on:
diff --git a/demos/demo-tzbtc-transfers/replay.json b/demos/demo-tzbtc-transfers/replay.json
@@ -6,7 +6,7 @@
   "crash_reporting": false,
   "description": "My shiny new indexer based on DipDup",
   "dipdup_version": "6",
-  "hasura_image": "hasura/graphql-engine:v2.15.0",
+  "hasura_image": "hasura/graphql-engine:v2.15.2",
   "license": "MIT",
   "line_length": "120",
   "linters": "default",
diff --git a/demos/demo-tzbtc/docker-compose.swarm.yml b/demos/demo-tzbtc/docker-compose.swarm.yml
@@ -53,7 +53,7 @@ services:
     logging: *logging
 
   hasura:
-    image: hasura/graphql-engine:v2.15.0
+    image: hasura/graphql-engine:v2.15.2
     depends_on:
       - db
     environment:
diff --git a/demos/demo-tzbtc/docker-compose.yml b/demos/demo-tzbtc/docker-compose.yml
@@ -31,7 +31,7 @@ services:
       retries: 5
 
   hasura:
-    image: hasura/graphql-engine:v2.15.0
+    image: hasura/graphql-engine:v2.15.2
     ports:
       - 127.0.0.1:8080:8080
     depends_on:
diff --git a/demos/demo-tzbtc/replay.json b/demos/demo-tzbtc/replay.json
@@ -6,7 +6,7 @@
   "crash_reporting": false,
   "description": "My shiny new indexer based on DipDup",
   "dipdup_version": "6",
-  "hasura_image": "hasura/graphql-engine:v2.15.0",
+  "hasura_image": "hasura/graphql-engine:v2.15.2",
   "license": "MIT",
   "line_length": "120",
   "linters": "default",
diff --git a/demos/demo-tzcolors/docker-compose.swarm.yml b/demos/demo-tzcolors/docker-compose.swarm.yml
@@ -53,7 +53,7 @@ services:
     logging: *logging
 
   hasura:
-    image: hasura/graphql-engine:v2.15.0
+    image: hasura/graphql-engine:v2.15.2
     depends_on:
       - db
     environment:
diff --git a/demos/demo-tzcolors/docker-compose.yml b/demos/demo-tzcolors/docker-compose.yml
@@ -31,7 +31,7 @@ services:
       retries: 5
 
   hasura:
-    image: hasura/graphql-engine:v2.15.0
+    image: hasura/graphql-engine:v2.15.2
     ports:
       - 127.0.0.1:8080:8080
     depends_on:
diff --git a/demos/demo-tzcolors/replay.json b/demos/demo-tzcolors/replay.json
@@ -6,7 +6,7 @@
   "crash_reporting": false,
   "description": "My shiny new indexer based on DipDup",
   "dipdup_version": "6",
-  "hasura_image": "hasura/graphql-engine:v2.15.0",
+  "hasura_image": "hasura/graphql-engine:v2.15.2",
   "license": "MIT",
   "line_length": "120",
   "linters": "default",
diff --git a/docs/cookiecutter.json b/docs/cookiecutter.json
@@ -8,7 +8,7 @@
   "license": "MIT",
   "author": "John Smith <john_smith@localhost.lan>",
   "postgresql_image": "postgres:14",
-  "hasura_image": "hasura/graphql-engine:v2.15.0",
+  "hasura_image": "hasura/graphql-engine:v2.15.2",
   "crash_reporting": false,
   "linters": "default",
   "line_length": "120"
diff --git a/poetry.lock b/poetry.lock
diff --git a/pyproject.toml b/pyproject.toml
diff --git a/src/dipdup/exceptions.py b/src/dipdup/exceptions.py
diff --git a/src/dipdup/hasura.py b/src/dipdup/hasura.py
diff --git a/src/dipdup/http.py b/src/dipdup/http.py
diff --git a/src/dipdup/project.py b/src/dipdup/project.py
diff --git a/tests/test_hasura.py b/tests/test_hasura.py
