saltstack/salt
1
0
Fork 0
mirror of https://github.com/saltstack/salt.git synced 2025-04-17 10:10:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 4
117424 commits 34 branches 292 tags 803 MiB
Commit graph

683 commits

Author SHA1 Message Date
Pedro Algarvio
53aafe7eba Bump to pyyaml==6.0.1 due to https://github.com/yaml/pyyaml/issues/601 
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
 2023-07-18 14:21:40 +01:00
Pedro Algarvio
5b2e752d5e Bump to cryptography==41.0.2 to address GHSA-cf7p-gm2m-833m 
The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options.
References:

https://nvd.nist.gov/vuln/detail/CVE-2023-38325
[https://github.com/pyca/cryptography/issues/9207](pyca/cryptography#9207)
[https://github.com/pyca/cryptography/issues/9208](pyca/cryptography#9208)
[https://github.com/pyca/cryptography/compare/41.0.1...41.0.2](pyca/cryptography@41.0.1...41.0.2)
https://pypi.org/project/cryptography/#history
[1ca7adc97b](pyca/cryptography@1ca7adc)

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
 2023-07-16 17:44:45 -07:00
Pedro Algarvio
dc9c22ab9b Switch to Debian 12 to build packages. 
The latest cryptography 1.41.1 requires a version of rustc which is not
available on Debian 11

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
 2023-07-06 18:04:43 +01:00
Pedro Algarvio
3d097b8ed5 Upgrade to cryptography==41.0.1(and therefor pyopenssl==23.2.0 due to https://github.com/advisories/GHSA-5cpq-8wj7-hf2v 
This only really impacts pip installs of Salt and the windows onedir
since the linux and macos onedir build every package dependency from
source, not from pre-existing wheels.

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
 2023-07-06 18:04:43 +01:00
MKLeb
a7d7c4151b Lock to immutables>0.16, as that version has problems installing now 2023-06-21 15:39:42 -07:00
Pedro Algarvio
3ae4e2aba5 Add wempy template library to CI requirements now that it supports Py3 
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
 2023-05-31 14:39:59 +00:00
Megan Wilhite
dc8baed208 Update requests 2023-05-29 18:08:57 +01:00
Pedro Algarvio
4112f05b77 Bump to sqlparse>=0.4.4 due to https://github.com/advisories/GHSA-rrm6-wvj7-cwh2 
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
 2023-04-25 12:14:52 +01:00
Megan Wilhite
4013d4e9a5 Use system configs if user is salt 2023-04-15 20:49:08 +01:00
Megan Wilhite
60d790597a Add test to ensure salt user is running salt-master 2023-04-15 20:49:08 +01:00
Twangboy
e5c58d9ab9 Bump pyzmq to 25.0.2 on Windows 2023-04-13 12:32:43 +01:00
Twangboy
be7dd894d8 Fix pre-commit/lint 2023-04-11 21:38:05 +01:00
Twangboy
4cc0388850 Add workflow to upload to VirusTotal 2023-04-11 21:38:05 +01:00
Gareth J. Greenaway
a533bb8c93 MD4 is disabled in later versions of openssl, but NTLM authentication needs it. Lock pyspnego to 0.8.0, which has added support for MD4, and smbprotocol to 1.10.1 which takes advantage of the support in this version of pyspnego. 2023-04-10 04:41:20 +01:00
Twangboy
2a34b95c80 Fix pre-commit 2023-04-04 08:33:30 +01:00
Twangboy
a32b2f82db Remove mako from Windows and MacOS 2023-04-04 08:33:30 +01:00
Pedro Algarvio
3f6f5a6078 Update to markdown-it-py==2.2.0 
Due to:
* https://github.com/advisories/GHSA-jrwr-5x3p-hvc3
* https://github.com/advisories/GHSA-vrjv-mxr7-vjf8

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
 2023-03-22 15:08:20 +00:00
Pedro Algarvio
9a32f14e41 Upgrade to pyopenssl==23.0.0 due to the cryptography upgrade. 
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
 2023-03-22 15:08:20 +00:00
Pedro Algarvio
5e7d4e3021 Upgrade to cryptography>=39.0.1 
Due to:
  * GHSA-x4qr-2fvf-3mr5
  * GHSA-w7pp-m8wf-vj6r

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
 2023-03-22 15:08:20 +00:00
MKLeb
2676db097e Bump python-tools-scripts to 0.12.0 2023-03-21 14:44:51 +00:00
Pedro Algarvio
f661bda53b Migrate the package download tests to onedir 
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
 2023-03-16 21:00:40 +00:00
Pedro Algarvio
b7d8a30ccc Remove nox sessions and requirements files which are no longer necessary 
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
 2023-03-08 23:48:54 +00:00
Pedro Algarvio
779a9af1b9 Drop Python 3.6 requirements files 
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
 2023-03-07 20:23:36 +00:00
Twangboy
3643d65358 Fix pre-commit 2023-02-28 15:27:46 +00:00
Twangboy
99e8846b50 Fix some pre-commit 2023-02-28 15:27:46 +00:00
Twangboy
ef773ece29 Fix pre-commit 2023-02-28 15:27:46 +00:00
Twangboy
7f6b871580 Add pkgtest-windows requirement file 2023-02-28 15:27:46 +00:00
Twangboy
41810b433d Run pre-commit to update static reqs 2023-02-28 15:27:46 +00:00
Twangboy
1edc532723 Add wmi and pythonnet for Windows tests 2023-02-28 15:27:46 +00:00
MKLeb
8e1886d20f add py 3.6 requirements for centos package tests 2023-02-28 15:27:46 +00:00
Megan Wilhite
60e35a1990 Use and older version of pytest-salt-factories for pkg tests 2023-02-28 15:27:46 +00:00
Megan Wilhite
1a2c2bb443 Initial setup of package tests (migrated from salt-pkg) 2023-02-28 15:27:46 +00:00
Pedro Algarvio
8c21ec2b06 Bump to python-tools-scripts==0.11.1 
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
 2023-02-28 07:40:38 +00:00
MKLeb
463d97e95f Revert "Upgrade to cryptography==39.0.1" 
This reverts commit 78fedf1656.
 2023-02-24 07:20:18 +00:00
Pedro Algarvio
c63e801603 Match the pytest-salt-factories version to the other requirements 
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
 2023-02-23 05:49:08 +00:00
Pedro Algarvio
a5dc669214 Upgrade to oauthlib==3.2.2 
Due to:
  * https://github.com/advisories/GHSA-3pgj-pg6c-r5p7

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
 2023-02-23 05:49:08 +00:00
Pedro Algarvio
78fedf1656 Upgrade to cryptography==39.0.1 
Due to:
  * https://github.com/advisories/GHSA-x4qr-2fvf-3mr5
  * https://github.com/advisories/GHSA-w7pp-m8wf-vj6r

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
 2023-02-23 05:49:08 +00:00
Pedro Algarvio
4b708715f2 Upgrade to werkzeug==2.2.3 
This addresses:
  * https://github.com/advisories/GHSA-px8h-6qxv-m22q
  * https://github.com/advisories/GHSA-xg9f-g7g7-2323

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
 2023-02-23 05:49:08 +00:00
Pedro Algarvio
4a2759a80e Bump to ansible>=7.0.0 on Py>=3.9 due to https://github.com/advisories/GHSA-cpx3-93w7-457x 
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
 2023-02-23 05:49:08 +00:00
Pedro Algarvio
5176520713 Add a spellcheck docs build 
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
 2023-02-18 17:38:23 +00:00
Pedro Algarvio
c4beeb8fb9 Fix doc builds 
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
 2023-02-18 17:38:23 +00:00
Pedro Algarvio
a749ec551a Start writing the release notes in markdown. 
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
 2023-02-17 05:28:37 +00:00
Daniel A. Wozniak
990728fe46 Bump pyzmq to latest version on Windows 2023-02-15 14:24:35 -07:00
Pedro Algarvio
61a7bd94b1 Bump to python-tools-scripts==0.10.4 
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
 2023-02-15 07:11:45 +00:00
Pedro Algarvio
4270c816c4 Make pkg-repo a repo sub-command for pkg 
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
 2023-02-09 05:37:59 +00:00
Pedro Algarvio
3fa827925f Fix pre-commit by changing the pyzmq requirements. 
It's now `pyzmq>=20.0.0` on all platforms, and `<=22.0.3` just for windows.

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
 2023-02-09 05:37:59 +00:00
Pedro Algarvio
cea048be5f Update docs related requirements 
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
 2023-02-04 14:11:36 +00:00
Pedro Algarvio
cb08e8038c Add tools/pkgrepo.py to start managing repositories 
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
 2023-02-02 10:39:55 +00:00
Pedro Algarvio
326f091904
Template the workflows. 
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
 2023-01-31 05:48:44 +00:00
Pedro Algarvio
8d5a309fa0
Upgrade to python-tools-scripts==0.10.1 and make use of it's virtualenv support 
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
 2023-01-30 20:54:05 +00:00