Commit graph

117424 commits

Author SHA1 Message Date
Pedro Algarvio
53aafe7eba Bump to pyyaml==6.0.1 due to https://github.com/yaml/pyyaml/issues/601
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-07-18 14:21:40 +01:00
Pedro Algarvio
5b2e752d5e Bump to cryptography==41.0.2 to address GHSA-cf7p-gm2m-833m
The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options.
References:

https://nvd.nist.gov/vuln/detail/CVE-2023-38325
[https://github.com/pyca/cryptography/issues/9207](pyca/cryptography#9207)
[https://github.com/pyca/cryptography/issues/9208](pyca/cryptography#9208)
[https://github.com/pyca/cryptography/compare/41.0.1...41.0.2](pyca/cryptography@41.0.1...41.0.2)
https://pypi.org/project/cryptography/#history
[1ca7adc97b](pyca/cryptography@1ca7adc)

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-07-16 17:44:45 -07:00
David Murphy
b85a3ab8a0 Removed extraous logging from debugging 2023-07-15 13:31:47 +01:00
David Murphy
d0851b498f Revert some reviewer suggestions as broke existing tests 2023-07-15 13:31:47 +01:00
David Murphy
2958d3747e Remove line left over from debugging 2023-07-15 13:31:47 +01:00
David Murphy
ba15a8c64b Updates due to reviewer comments 2023-07-15 13:31:47 +01:00
David Murphy
ddb98b698c Updated test to check for multiple user keys presented when authenticating 2023-07-15 13:31:47 +01:00
David Murphy
c022270025 Added changelog 2023-07-15 13:31:47 +01:00
David Murphy
9b11da3ee7 Allow for multiple user's keys presented, root, salt, etc. 2023-07-15 13:31:47 +01:00
David Murphy
89b6c78629 WIP - holding changes still debugging 2023-07-15 13:31:47 +01:00
Pedro Algarvio
439b365817 Allow randomizing the GH Actions cache seed value by setting the test:random-cache-seed label
This allows us to force a PR to not use any caches at all(since they are
all getting build from scratch again) to debug potential GH Actions caching issues.

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-07-14 16:41:02 +01:00
Pedro Algarvio
7a2eeada09 Allow forcing the package tests to run by the test:pkg label
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-07-07 16:02:07 +00:00
Pedro Algarvio
dc9c22ab9b Switch to Debian 12 to build packages.
The latest cryptography 1.41.1 requires a version of rustc which is not
available on Debian 11

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-07-06 18:04:43 +01:00
Pedro Algarvio
3d097b8ed5 Upgrade to cryptography==41.0.1(and therefor pyopenssl==23.2.0 due to https://github.com/advisories/GHSA-5cpq-8wj7-hf2v
This only really impacts pip installs of Salt and the windows onedir
since the linux and macos onedir build every package dependency from
source, not from pre-existing wheels.

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-07-06 18:04:43 +01:00
Salt Project Packaging
e235b82912 Update the bootstrap script to v2023.06.28
(cherry picked from commit 1ef02f5e1d)
2023-07-06 07:00:47 +01:00
twangboy
2fa9684169 Fix an issue caching the installer when version=latest 2023-07-01 08:45:29 +01:00
cmcmarrow
9eac9cdef5 flip default on --no-fast 2023-06-30 08:21:30 +01:00
cmcmarrow
89e41f3155 unflip no-fast 2023-06-30 08:21:30 +01:00
MKLeb
e11d6a478a More fixes for upgrades of NSIS packages from relenv-based previous versions 2023-06-29 13:01:04 -07:00
MKLeb
d007ebd8d9 Some more fixes for the NSIS package tests 2023-06-29 13:01:04 -07:00
MKLeb
0d622479b2 Additional fixes for mac and windows upgrade tests 2023-06-29 13:01:04 -07:00
MKLeb
f952418e90 Use download_file for the windows packages as well 2023-06-29 13:01:04 -07:00
MKLeb
0ec60c70d2 Fix mac upgrade test urls 2023-06-29 13:01:04 -07:00
MKLeb
9a4e026d59 The major version needs to be cast to an int for comparison 2023-06-29 13:01:04 -07:00
MKLeb
5c7269aee6 The slash needs to be separate from the command 2023-06-29 13:01:04 -07:00
MKLeb
7aadeaf792 Account for upgrades from new relenv-based repos 2023-06-29 13:01:04 -07:00
MKLeb
296ec76a34 Generate the pkg test matrix and include the versions to test upgrades against within it 2023-06-29 13:01:04 -07:00
MKLeb
f670b637e4 Propogate the now testing-releases through to the package tests 2023-06-29 13:01:04 -07:00
MKLeb
d4312c6acf Join the Array with spaces for use in the tools command 2023-06-29 13:01:04 -07:00
MKLeb
6b55d99154 Pass the list of Salt releases from the prior step that queried the GH API 2023-06-29 13:01:04 -07:00
MKLeb
350c9982ff Use ctx.web for requests and require the --salt-version kwarg 2023-06-29 13:01:04 -07:00
MKLeb
5289a2d50a Add get-latest-release command so we can dynamically get the previous versions to test upgrades and downgrades for 2023-06-29 13:01:04 -07:00
Charles McMarrow
8869972f07 fix pre 2023-06-29 09:09:17 +01:00
Charles McMarrow
a7b178beca Fix Fast Tests 2023-06-29 09:09:17 +01:00
cmcmarrow
1f8dc3c510 allow flaky to double group 2023-06-29 09:09:17 +01:00
Charles McMarrow
ffa67b257c Update conftest.py 2023-06-29 09:09:17 +01:00
Charles McMarrow
115f3f6d6c Update conftest.py error msg 2023-06-29 09:09:17 +01:00
cmcmarrow
a1a414813b stop double test_labels 2023-06-29 09:09:17 +01:00
Pedro Algarvio
34f13a7632 pathlib.Path.__enter__() usage is deprecated and not required, a no-op
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-06-28 18:06:15 +00:00
Pedro Algarvio
f4eea34984 Stop accessing deprecated attributes
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-06-28 18:06:15 +00:00
Pedro Algarvio
aacdfc9b98 Stop using the deprecated locale.getdefaultlocale() function
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-06-28 18:06:15 +00:00
Pedro Algarvio
6c772d4d64 Only try to get pull-request labels on pull-requests
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-06-28 07:43:26 +01:00
MKLeb
58174eb8e1 Hash the noxfile when calculating part of the cache key for our testing steps, they could be conditionally installing extra dependencies, etc... 2023-06-28 07:27:31 +01:00
Pedro Algarvio
b6a9599a70 Just confirm that the expected error messages is in stderr
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-06-28 07:26:05 +01:00
Pedro Algarvio
57e0156e64 Add change log files
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-06-28 07:26:05 +01:00
Pedro Algarvio
ba733b3a63 Don't hide output
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-06-28 07:26:05 +01:00
Pedro Algarvio
fb9f0bc54a Don't hardcode the python version on pkg/debian/salt-cloud.postinst
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-06-28 07:26:05 +01:00
Pedro Algarvio
e4876d2e49 Don't hardcode the python version in the test.
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-06-28 07:26:05 +01:00
Pedro Algarvio
7b99572095 Stop using the deprecated imp module
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-06-28 07:26:05 +01:00
Pedro Algarvio
1f9d094b8f Stop using the deprecated pipes module
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-06-28 07:26:05 +01:00