Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
19 changes: 19 additions & 0 deletions .github/workflows/dependency-review.yml
Original file line number Diff line number Diff line change
Expand Up @@ -93,3 +93,22 @@ jobs:
- id: dependency-review
name: Review dependency changes for vulnerabilities and license changes
uses: actions/dependency-review-action@v4
with:
# We have to ignore this vulnerability since the code in
# this repo is currently incompatible with ansible>=12.2.0
# where the vulnerability is fixed. Making the code
# compatible would require a rewrite using ansible-runner as
# that is the preferred method instead of monkeying with
# ansible internals:
# -
# https://docs.ansible.com/projects/ansible/latest/dev_guide/developing_api.html
# -
# https://docs.ansible.com/projects/runner/en/latest/python_interface/#
#
# This isn't a big deal since the vulnerability only impacts
# users of the Keycloak modules in
# ansible.community.general, and we don't use these modules.
#
# TODO: Remove this when it becomes possible. See #48 for
# more details.
allow-ghsas: GHSA-8ggh-xwr9-3373
2 changes: 1 addition & 1 deletion pyproject.toml
Original file line number Diff line number Diff line change
Expand Up @@ -51,7 +51,7 @@ dependencies = [
# It is also a good idea to go ahead and upgrade to version 10
# since version 9 is now EOL as of the end of November 2024:
# https://endoflife.date/ansible
"ansible>=10,<11",
"ansible>=10.7.0,<11",
"docopt",
"python-dateutil",
"schema",
Expand Down
Loading