Skip to content

Commit 366fd64

Browse files
authored
Fix all open Dependabot Python alerts in Pipfiles (#8488)
## Summary This PR addresses all currently open Dependabot alerts in this repository by updating vulnerable Python dependencies in both mirrored regression-test environments: - src/test/regress/Pipfile / Pipfile.lock - .devcontainer/src/test/regress/Pipfile / Pipfile.lock ## Updated dependencies - cryptography: 44.0.3 -> 46.0.5 (patched: >=46.0.5) - Werkzeug: 3.1.4 -> 3.1.5 (patched: >=3.1.5) - filelock: resolved to 3.25.0 (patched: >=3.20.3) - pyasn1: resolved to 0.6.2 (patched: >=0.6.2) ## Alerts covered Closes Dependabot alerts: #98, #99, #100, #101, #102, #103, #104, #105, #106, #107, #108, #109. ## Notes Lockfiles were regenerated with pipenv lock in both directories to ensure consistent, hashed resolution.
1 parent d3330fd commit 366fd64

File tree

6 files changed

+218
-194
lines changed

6 files changed

+218
-194
lines changed

.devcontainer/Dockerfile

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -97,7 +97,7 @@ RUN cp -r .pgenv/src .pgenv/pgsql-* .pgenv/config .pgenv-staging/
9797
RUN rm .pgenv-staging/config/default.conf
9898

9999
FROM base AS pg18
100-
RUN MAKEFLAGS="-j $(nproc)" pgenv build 18.1
100+
RUN MAKEFLAGS="-j $(nproc)" pgenv build 18.3
101101
RUN rm .pgenv/src/*.tar*
102102
RUN make -C .pgenv/src/postgresql-*/ clean
103103
RUN make -C .pgenv/src/postgresql-*/src/include install
@@ -216,7 +216,7 @@ COPY --chown=citus:citus .psqlrc .
216216
RUN sudo chown --from=root:root citus:citus -R ~
217217

218218
# sets default pg version
219-
RUN pgenv switch 18.1
219+
RUN pgenv switch 18.3
220220

221221
# make connecting to the coordinator easy
222222
ENV PGPORT=9700

.devcontainer/src/test/regress/Pipfile

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ tornado = ">=6.5.1,<6.6.0"
1616
zstandard = ">=0.25.0"
1717
construct = "*"
1818
docopt = "==0.6.2"
19-
cryptography = "==44.0.3"
19+
cryptography = "==46.0.5"
2020
pytest = "*"
2121
psycopg = "*"
2222
filelock = "*"
@@ -25,7 +25,7 @@ pytest-timeout = "*"
2525
pytest-xdist = "*"
2626
pytest-repeat = "*"
2727
pyyaml = "*"
28-
werkzeug = "==3.1.4"
28+
werkzeug = "==3.1.5"
2929
"typing-extensions" = ">=4.13.2,<5"
3030
pyperclip = "==1.9.0"
3131

.devcontainer/src/test/regress/Pipfile.lock

Lines changed: 103 additions & 91 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)