Skip to content

Commit 41ca5b9

Browse files
reactive-firewallreactive-firewall
committed
[SECURITY] minor version bump for pip to fix GHSA-mq26-g339-26xf / PYSEC-2023-228 (- WIP PR #178 -)
### ChangeLog: Changes in file .github/workflows/Tests.yml: jobs: Changes in file Makefile: MANIFEST.in: init clean: clean-docs cleanup Changes in file docs/requirements.txt: setuptools>=75.0 Changes in file requirements.txt: Unknown Changes Changes in file tests/requirements.txt: pytest-enabler>=1.0.1 Changes in file tox.ini: alwayscopy = True passenv = recreate = True
1 parent 43f02e2 commit 41ca5b9

File tree

6 files changed

+20
-20
lines changed

6 files changed

+20
-20
lines changed

‎.github/workflows/Tests.yml‎

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -102,7 +102,7 @@ jobs:
102102
python-version: ${{ matrix.python-version }}
103103
- name: Set up dependencies
104104
run: |
105-
pip install --upgrade "pip>=22.0" "setuptools>=75.0" "wheel>=0.44" "build>=1.2.1";
105+
pip install --upgrade "pip>=24.3.1" "setuptools>=75.0" "wheel>=0.44" "build>=1.2.1";
106106
pip install -r ./requirements.txt ;
107107
- name: Pre-build
108108
id: bootstrap
@@ -167,7 +167,7 @@ jobs:
167167
python-version: ${{ matrix.python-version }}
168168
- name: Install dependencies for ${{ matrix.python-version }}
169169
run: |
170-
pip install --upgrade "pip>=22.0" "setuptools>=75.0" "wheel>=0.44" "build>=1.2.1";
170+
pip install --upgrade "pip>=24.3.1" "setuptools>=75.0" "wheel>=0.44" "build>=1.2.1";
171171
pip install -r ./requirements.txt ;
172172
pip install -r ./tests/requirements.txt || true ;
173173
pip install --upgrade -r ./docs/requirements.txt || true ;
@@ -226,7 +226,7 @@ jobs:
226226
run: python -m pip install --upgrade pip
227227
- name: Install dependencies for python ${{ matrix.python-version }} on ${{ matrix.os }}
228228
run: |
229-
pip install --upgrade "pip>=22.0" "setuptools>=75.0" "wheel>=0.44" "build>=1.2.1";
229+
pip install --upgrade "pip>=24.3.1" "setuptools>=75.0" "wheel>=0.44" "build>=1.2.1";
230230
pip install --upgrade -r ./requirements.txt ;
231231
pip install --upgrade -r ./tests/requirements.txt || true ;
232232
pip install --upgrade -r ./docs/requirements.txt || true ;
@@ -307,7 +307,7 @@ jobs:
307307
python-version: "3.13"
308308
- name: Install dependencies for python Linters
309309
run: |
310-
pip install --upgrade "pip>=22.0" "setuptools>=75.0" "wheel>=0.44" "build>=1.2.2";
310+
pip install --upgrade "pip>=24.3.1" "setuptools>=75.0" "wheel>=0.44" "build>=1.2.2";
311311
pip install --upgrade -r ./requirements.txt ;
312312
pip install --upgrade -r ./tests/requirements.txt || true ;
313313
pip install --upgrade -r ./docs/requirements.txt || true ;
@@ -359,7 +359,7 @@ jobs:
359359
python-version: ${{ matrix.python-version }}
360360
- name: Install dependencies for python ${{ matrix.python-version }} on ${{ matrix.os }}
361361
run: |
362-
pip install --upgrade "pip>=22.0" "setuptools>=75.0" "wheel>=0.44" "build>=1.2.1";
362+
pip install --upgrade "pip>=24.3.1" "setuptools>=75.0" "wheel>=0.44" "build>=1.2.1";
363363
pip install --upgrade -r ./requirements.txt ;
364364
pip install --upgrade -r ./tests/requirements.txt || true ;
365365
pip install --upgrade -r ./docs/requirements.txt || true ;
@@ -477,7 +477,7 @@ jobs:
477477
python-version: ${{ matrix.python-version }}
478478
- name: Install dependencies for python ${{ matrix.python-version }} on ${{ matrix.os }}
479479
run: |
480-
pip install --upgrade "pip>=22.0" "setuptools>=75.0" "wheel>=0.44" "build>=1.2.1";
480+
pip install --upgrade "pip>=24.3.1" "setuptools>=75.0" "wheel>=0.44" "build>=1.2.1";
481481
pip install -r ./requirements.txt ;
482482
pip install -r ./tests/requirements.txt || true ;
483483
- name: Pre-Clean
@@ -552,7 +552,7 @@ jobs:
552552
python-version: ${{ matrix.python-version }}
553553
- name: Install dependencies for python ${{ matrix.python-version }}
554554
run: |
555-
pip install --upgrade "pip>=22.0" "setuptools>=75.0" "wheel>=0.44" "build>=1.2.1" "pip-licenses>=5.0.0";
555+
pip install --upgrade "pip>=24.3.1" "setuptools>=75.0" "wheel>=0.44" "build>=1.2.1" "pip-licenses>=5.0.0";
556556
pip install -r ./requirements.txt ;
557557
pip install -r ./tests/requirements.txt || true ;
558558
pip install --upgrade -r ./docs/requirements.txt || true ;
@@ -611,7 +611,7 @@ jobs:
611611
run: python -m pip install --upgrade pip
612612
- name: Install dependencies for python ${{ matrix.python-version }} on ${{ matrix.os }}
613613
run: |
614-
pip install --upgrade "pip>=22.0" "setuptools>=75.0" "wheel>=0.44" "build>=1.2.1";
614+
pip install --upgrade "pip>=24.3.1" "setuptools>=75.0" "wheel>=0.44" "build>=1.2.1";
615615
pip install -r ./requirements.txt ;
616616
pip install -r ./tests/requirements.txt || true ;
617617
- name: Pre-Clean
@@ -677,7 +677,7 @@ jobs:
677677
if [ "$OS" == "ubuntu-latest" ] ; then { sudo apt-get update || true ;} ; wait ; { sudo apt-get install --assume-yes python3.10 python3.11 || echo "::warning file=.github/workflows/Tests.yml,line=677,endLine=677,title=SKIPPED::SKIP Enhanced TOX Tests." ;} ; wait ; fi
678678
- name: Install dependencies for Tox
679679
run: |
680-
pip install --upgrade "pip>=22.0" "setuptools>=75.0" "wheel>=0.44" "build>=1.2.1";
680+
pip install --upgrade "pip>=24.3.1" "setuptools>=75.0" "wheel>=0.44" "build>=1.2.1";
681681
pip install --upgrade -r ./requirements.txt ;
682682
pip install --upgrade -r ./tests/requirements.txt || true ;
683683
pip install --upgrade -r ./docs/requirements.txt || true ;

‎Makefile‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -188,7 +188,7 @@ build: init ./setup.py MANIFEST.in
188188
$(QUIET)$(ECHO) "build DONE."
189189

190190
init:
191-
$(QUIET)$(PYTHON) -m pip install $(PIP_COMMON_FLAGS) $(PIP_ENV_FLAGS) "pip>=22.0" "setuptools>=75.0" "wheel>=0.44" "build>=1.1.1" 2>$(ERROR_LOG_PATH) || :
191+
$(QUIET)$(PYTHON) -m pip install $(PIP_COMMON_FLAGS) $(PIP_ENV_FLAGS) "pip>=24.3.1" "setuptools>=75.0" "wheel>=0.44" "build>=1.1.1" 2>$(ERROR_LOG_PATH) || :
192192
$(QUIET)$(PYTHON) -m pip install $(PIP_COMMON_FLAGS) $(PIP_ENV_FLAGS) -r requirements.txt 2>$(ERROR_LOG_PATH) || :
193193
$(QUIET)$(ECHO) "$@: Done."
194194

@@ -344,7 +344,7 @@ must_be_root:
344344
if test $$runner != "root" ; then $(ECHO) "You are not root." ; exit 1 ; fi
345345

346346
user-install: build
347-
$(QUIET)$(PYTHON) -m pip install $(PIP_COMMON_FLAGS) $(PIP_ENV_FLAGS) --user "pip>=22.0" "setuptools>=75.0" "wheel>=0.44" "build>=1.1.1" 2>$(ERROR_LOG_PATH) || true
347+
$(QUIET)$(PYTHON) -m pip install $(PIP_COMMON_FLAGS) $(PIP_ENV_FLAGS) --user "pip>=24.3.1" "setuptools>=75.0" "wheel>=0.44" "build>=1.1.1" 2>$(ERROR_LOG_PATH) || true
348348
$(QUIET)$(PYTHON) -m pip install $(PIP_COMMON_FLAGS) $(PIP_ENV_FLAGS) --user -r "https://raw.githubusercontent.com/reactive-firewall/multicast/stable/requirements.txt" 2>$(ERROR_LOG_PATH) || true
349349
$(QUIET)$(PYTHON) -m pip install $(PIP_COMMON_FLAGS) $(PIP_ENV_FLAGS) --user -e "git+https://github.com/reactive-firewall/multicast.git#egg=multicast"
350350
$(QUITE)$(WAIT)

‎docs/requirements.txt‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@ setuptools>=75.0
3232
# wheel - MIT license
3333
wheel>=0.44
3434
# pip - MIT license
35-
pip>=22.0
35+
pip>=24.3.1
3636
# build - MIT license
3737
build>=1.2.1, !=1.2.2.post1
3838
# sphinx - BSD license

‎requirements.txt‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,7 @@ setuptools>=75.0
2929
# virtualenv - MIT license
3030
#virtualenv>=15.0.1
3131
# pip - MIT license
32-
pip>=22.0
32+
pip>=24.3.1
3333
# build - MIT license
3434
build>=1.1.1, !=1.2.2.post1
3535
# multicast - MIT license

‎tests/requirements.txt‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -64,6 +64,6 @@ coverage>=7.2
6464
# wheel - MIT license
6565
wheel>=0.44
6666
# pip - MIT license
67-
pip>=22.0
67+
pip>=24.3.1
6868
# build - MIT license
6969
build>=1.2.1, !=1.2.2.post1

‎tox.ini‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -41,7 +41,7 @@ basepython =
4141
py312: python3.12
4242
py313: python3.13
4343
deps =
44-
pip>=22.0
44+
pip>=24.3.1
4545
coverage>=6.3
4646
codecov>=2.0.15
4747
{[base]deps}
@@ -62,7 +62,7 @@ passenv =
6262
{[base]passenv}
6363
basepython = python3.10
6464
deps =
65-
pip>=22.0
65+
pip>=24.3.1
6666
coverage>=6.3
6767
codecov>=2.0.15
6868
{[base]deps}
@@ -84,7 +84,7 @@ passenv =
8484
{[base]passenv}
8585
basepython = python3.11
8686
deps =
87-
pip>=22.0
87+
pip>=24.3.1
8888
codecov>=2.1.13
8989
{[base]deps}
9090
commands =
@@ -107,7 +107,7 @@ passenv =
107107
basepython = /home/travis/virtualenv/python3.12/bin/python3.12
108108
envdir = {toxworkdir}/py312
109109
deps =
110-
pip>=24.0
110+
pip>=24.3.1
111111
coverage>=7.0
112112
codecov>=2.1.13
113113
{[base]deps}
@@ -129,7 +129,7 @@ passenv =
129129
{[base]passenv}
130130
basepython = python3.12
131131
deps =
132-
pip>=24.0
132+
pip>=24.3.1
133133
coverage>=7.0
134134
codecov>=2.1.13
135135
{[base]deps}
@@ -151,7 +151,7 @@ passenv =
151151
{[base]passenv}
152152
basepython = python3.13
153153
deps =
154-
pip>=24.0
154+
pip>=24.3.1
155155
coverage>=7.0
156156
codecov>=2.1.13
157157
{[base]deps}

0 commit comments

Comments
 (0)