Skip to content

Commit 7c021bb

Browse files
erikboscherikbosch
committed
Update dependencies to fix vulnerabilities
Also changed: - After discussion in ETAS dev team proposing to use fixed versions also in *.in files - Fixing backward incompatible changes when updating Paho - Fixing workflow so that we really test with example from current branch
1 parent e94654a commit 7c021bb

File tree

13 files changed

+162
-147
lines changed

13 files changed

+162
-147
lines changed

‎.project-creation/.skeleton/requirements.in

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
#
1313
# SPDX-License-Identifier: Apache-2.0
1414

15-
grpcio==1.59.0
16-
protobuf==4.24.4
17-
cloudevents==1.10.0
18-
aiohttp==3.9.3
15+
grpcio==1.64.1
16+
protobuf==5.27.2
17+
cloudevents==1.11.0
18+
aiohttp==3.9.5

‎.project-creation/.skeleton/requirements.txt

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -4,33 +4,33 @@
44
#
55
# pip-compile
66
#
7-
aiohttp==3.9.3
7+
aiohttp==3.9.5
88
# via -r requirements.in
99
aiosignal==1.3.1
1010
# via aiohttp
1111
async-timeout==4.0.3
1212
# via aiohttp
13-
attrs==23.1.0
13+
attrs==23.2.0
1414
# via aiohttp
15-
cloudevents==1.10.0
15+
cloudevents==1.11.0
1616
# via -r requirements.in
1717
deprecation==2.1.0
1818
# via cloudevents
19-
frozenlist==1.4.0
19+
frozenlist==1.4.1
2020
# via
2121
# aiohttp
2222
# aiosignal
23-
grpcio==1.59.0
23+
grpcio==1.64.1
2424
# via -r requirements.in
25-
idna==3.4
25+
idna==3.7
2626
# via yarl
27-
multidict==6.0.4
27+
multidict==6.0.5
2828
# via
2929
# aiohttp
3030
# yarl
31-
packaging==23.2
31+
packaging==24.1
3232
# via deprecation
33-
protobuf==4.24.4
33+
protobuf==5.27.2
3434
# via -r requirements.in
35-
yarl==1.9.2
35+
yarl==1.9.4
3636
# via aiohttp

‎NOTICE-3RD-PARTY-CONTENT.md

Lines changed: 46 additions & 44 deletions
Original file line numberDiff line numberDiff line change
@@ -3,70 +3,72 @@
33
## Python
44
| Dependency | Version | License |
55
|:-----------|:-------:|--------:|
6-
|aiohttp|3.9.3|Apache 2.0|
6+
|aiohttp|3.9.5|Apache 2.0|
77
|aiosignal|1.3.1|Apache 2.0|
88
|APScheduler|3.10.4|MIT|
99
|async-timeout|4.0.3|Apache 2.0|
10-
|attrs|23.1.0|MIT|
11-
|build|1.0.3|MIT|
12-
|cachetools|5.3.2|MIT|
10+
|attrs|23.2.0|MIT|
11+
|build|1.2.1|MIT|
12+
|cachetools|5.4.0|MIT|
1313
|cfgv|3.4.0|MIT|
1414
|chardet|5.2.0|LGPL|
1515
|click|8.1.7|New BSD|
16-
|cloudevents|1.10.1|Apache 2.0|
16+
|cloudevents|1.11.0|Apache 2.0|
1717
|colorama|0.4.6|BSD|
18-
|coverage|7.4.1|Apache 2.0|
18+
|coverage|7.6.0|Apache 2.0|
1919
|Deprecated|1.2.14|MIT|
2020
|deprecation|2.1.0|Apache 2.0|
2121
|distlib|0.3.8|Python Software Foundation License|
22-
|exceptiongroup|1.2.0|MIT|
23-
|filelock|3.13.1|The Unlicense (Unlicense)|
24-
|frozenlist|1.4.0|Apache 2.0|
22+
|exceptiongroup|1.2.2|MIT|
23+
|filelock|3.15.4|The Unlicense (Unlicense)|
24+
|frozenlist|1.4.1|Apache 2.0|
2525
|grpc-stubs|1.53.0.5|MIT|
26-
|grpcio|1.59.0|Apache 2.0|
27-
|grpcio-tools|1.59.0|Apache 2.0|
28-
|identify|2.5.33|MIT|
29-
|idna|3.4|BSD|
26+
|grpcio|1.64.1|Apache 2.0|
27+
|grpcio-tools|1.64.1|Apache 2.0|
28+
|identify|2.6.0|MIT|
29+
|idna|3.7|BSD|
30+
|importlib-metadata|7.1.0|Apache 2.0|
3031
|iniconfig|2.0.0|MIT|
31-
|multidict|6.0.4|Apache 2.0|
32-
|mypy|1.8.0|MIT|
32+
|multidict|6.0.5|Apache 2.0|
33+
|mypy|1.11.0|MIT|
3334
|mypy-extensions|1.0.0|MIT|
34-
|mypy-protobuf|3.4.0|Apache 2.0|
35-
|nodeenv|1.8.0|BSD|
36-
|opentelemetry-api|1.15.0|Apache 2.0|
37-
|opentelemetry-distro|0.36b0|Apache 2.0|
38-
|opentelemetry-instrumentation|0.36b0|Apache 2.0|
39-
|opentelemetry-instrumentation-logging|0.36b0|Apache 2.0|
40-
|opentelemetry-sdk|1.15.0|Apache 2.0|
41-
|opentelemetry-semantic-conventions|0.36b0|Apache 2.0|
42-
|packaging|23.1|Apache 2.0<br/>BSD|
43-
|paho-mqtt|1.6.1|OSI Approved|
35+
|mypy-protobuf|3.6.0|Apache 2.0|
36+
|nodeenv|1.9.1|BSD|
37+
|opentelemetry-api|1.25.0|Apache 2.0|
38+
|opentelemetry-distro|0.46b0|Apache 2.0|
39+
|opentelemetry-instrumentation|0.46b0|Apache 2.0|
40+
|opentelemetry-instrumentation-logging|0.46b0|Apache 2.0|
41+
|opentelemetry-sdk|1.25.0|Apache 2.0|
42+
|opentelemetry-semantic-conventions|0.46b0|Apache 2.0|
43+
|packaging|24.1|Apache 2.0<br/>BSD|
44+
|paho-mqtt|2.1.0|OSI Approved|
4445
|pip|23.0.1|MIT|
45-
|pip-tools|7.3.0|BSD|
46-
|platformdirs|4.2.0|MIT|
47-
|pluggy|1.4.0|MIT|
48-
|pre-commit|3.6.0|MIT|
49-
|protobuf|4.21.12|Google License|
50-
|pyproject-api|1.6.1|MIT|
51-
|pyproject-hooks|1.0.0|MIT|
52-
|pytest|7.4.4|MIT|
53-
|pytest-asyncio|0.23.4|Apache 2.0|
54-
|pytest-cov|4.1.0|MIT|
46+
|pip-tools|7.4.1|BSD|
47+
|platformdirs|4.2.2|MIT|
48+
|pluggy|1.5.0|MIT|
49+
|pre-commit|3.8.0|MIT|
50+
|protobuf|5.27.2|Google License|
51+
|pyproject-api|1.7.1|MIT|
52+
|pyproject-hooks|1.1.0|MIT|
53+
|pytest|8.3.2|MIT|
54+
|pytest-asyncio|0.23.8|Apache 2.0|
55+
|pytest-cov|5.0.0|MIT|
5556
|pytz|2024.1|MIT|
5657
|PyYAML|6.0.1|MIT|
5758
|setuptools|65.5.1|MIT|
5859
|six|1.16.0|MIT|
5960
|tomli|2.0.1|MIT|
60-
|tox|4.11.4|MIT|
61-
|types-Deprecated|1.2.9.20240106|Apache 2.0|
62-
|types-mock|5.1.0.20240106|Apache 2.0|
63-
|types-protobuf|4.24.0.20240129|Apache 2.0|
64-
|typing-extensions|4.7.1|Python Software Foundation License|
61+
|tox|4.16.0|MIT|
62+
|types-Deprecated|1.2.9.20240311|Apache 2.0|
63+
|types-mock|5.1.0.20240425|Apache 2.0|
64+
|types-protobuf|5.27.0.20240626|Apache 2.0|
65+
|typing-extensions|4.12.2|Python Software Foundation License|
6566
|tzlocal|5.2|MIT|
66-
|virtualenv|20.25.0|MIT|
67-
|wheel|0.42.0|MIT|
68-
|wrapt|1.15.0|BSD|
69-
|yarl|1.9.2|Apache 2.0|
67+
|virtualenv|20.26.3|MIT|
68+
|wheel|0.43.0|MIT|
69+
|wrapt|1.16.0|BSD|
70+
|yarl|1.9.4|Apache 2.0|
71+
|zipp|3.19.2|MIT|
7072
## Workflows
7173
| Dependency | Version | License |
7274
|:-----------|:-------:|--------:|

‎examples/seat-adjuster/requirements.in

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -12,8 +12,8 @@
1212
#
1313
# SPDX-License-Identifier: Apache-2.0
1414

15-
grpcio==1.59.0
16-
protobuf==4.24.4
17-
cloudevents==1.10.0
18-
aiohttp==3.9.3
19-
packaging==23.0
15+
grpcio==1.64.1
16+
protobuf==5.27.2
17+
cloudevents==1.11.0
18+
aiohttp==3.9.5
19+
packaging==24.1

‎examples/seat-adjuster/requirements.txt

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -4,35 +4,35 @@
44
#
55
# pip-compile
66
#
7-
aiohttp==3.9.3
7+
aiohttp==3.9.5
88
# via -r requirements.in
99
aiosignal==1.3.1
1010
# via aiohttp
1111
async-timeout==4.0.3
1212
# via aiohttp
13-
attrs==23.1.0
13+
attrs==23.2.0
1414
# via aiohttp
15-
cloudevents==1.10.0
15+
cloudevents==1.11.0
1616
# via -r requirements.in
1717
deprecation==2.1.0
1818
# via cloudevents
19-
frozenlist==1.4.0
19+
frozenlist==1.4.1
2020
# via
2121
# aiohttp
2222
# aiosignal
23-
grpcio==1.59.0
23+
grpcio==1.64.1
2424
# via -r requirements.in
25-
idna==3.4
25+
idna==3.7
2626
# via yarl
27-
multidict==6.0.4
27+
multidict==6.0.5
2828
# via
2929
# aiohttp
3030
# yarl
31-
packaging==23.0
31+
packaging==24.1
3232
# via
3333
# -r requirements.in
3434
# deprecation
35-
protobuf==4.24.4
35+
protobuf==5.27.2
3636
# via -r requirements.in
37-
yarl==1.9.2
37+
yarl==1.9.4
3838
# via aiohttp

‎examples/seat-adjuster/tests/requirements.in

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17,4 +17,3 @@ pytest-ordering
1717
pytest-asyncio
1818
pytest-cov
1919
types-mock
20-
packaging==23.0

‎examples/seat-adjuster/tests/requirements.txt

Lines changed: 9 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -4,35 +4,33 @@
44
#
55
# pip-compile
66
#
7-
coverage[toml]==7.4.1
7+
coverage[toml]==7.6.0
88
# via
99
# coverage
1010
# pytest-cov
11-
exceptiongroup==1.2.0
11+
exceptiongroup==1.2.2
1212
# via pytest
1313
iniconfig==2.0.0
1414
# via pytest
15-
packaging==23.0
16-
# via
17-
# -r requirements.in
18-
# pytest
19-
pluggy==1.4.0
15+
packaging==24.1
16+
# via pytest
17+
pluggy==1.5.0
2018
# via pytest
21-
pytest==7.4.4
19+
pytest==8.3.2
2220
# via
2321
# -r requirements.in
2422
# pytest-asyncio
2523
# pytest-cov
2624
# pytest-ordering
27-
pytest-asyncio==0.23.4
25+
pytest-asyncio==0.23.8
2826
# via -r requirements.in
29-
pytest-cov==4.1.0
27+
pytest-cov==5.0.0
3028
# via -r requirements.in
3129
pytest-ordering==0.6
3230
# via -r requirements.in
3331
tomli==2.0.1
3432
# via
3533
# coverage
3634
# pytest
37-
types-mock==5.1.0.20240106
35+
types-mock==5.1.0.20240425
3836
# via -r requirements.in

0 commit comments

Comments
 (0)