Commit graph

73 commits

Author SHA1 Message Date
Pedro Algarvio
53aafe7eba Bump to pyyaml==6.0.1 due to https://github.com/yaml/pyyaml/issues/601
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-07-18 14:21:40 +01:00
Pedro Algarvio
5b2e752d5e Bump to cryptography==41.0.2 to address GHSA-cf7p-gm2m-833m
The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options.
References:

https://nvd.nist.gov/vuln/detail/CVE-2023-38325
[https://github.com/pyca/cryptography/issues/9207](pyca/cryptography#9207)
[https://github.com/pyca/cryptography/issues/9208](pyca/cryptography#9208)
[https://github.com/pyca/cryptography/compare/41.0.1...41.0.2](pyca/cryptography@41.0.1...41.0.2)
https://pypi.org/project/cryptography/#history
[1ca7adc97b](pyca/cryptography@1ca7adc)

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-07-16 17:44:45 -07:00
Pedro Algarvio
3d097b8ed5 Upgrade to cryptography==41.0.1(and therefor pyopenssl==23.2.0 due to https://github.com/advisories/GHSA-5cpq-8wj7-hf2v
This only really impacts pip installs of Salt and the windows onedir
since the linux and macos onedir build every package dependency from
source, not from pre-existing wheels.

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-07-06 18:04:43 +01:00
MKLeb
a7d7c4151b Lock to immutables>0.16, as that version has problems installing now 2023-06-21 15:39:42 -07:00
Pedro Algarvio
3ae4e2aba5 Add wempy template library to CI requirements now that it supports Py3
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-05-31 14:39:59 +00:00
Megan Wilhite
dc8baed208 Update requests 2023-05-29 18:08:57 +01:00
Pedro Algarvio
4112f05b77 Bump to sqlparse>=0.4.4 due to https://github.com/advisories/GHSA-rrm6-wvj7-cwh2
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-04-25 12:14:52 +01:00
Gareth J. Greenaway
a533bb8c93 MD4 is disabled in later versions of openssl, but NTLM authentication needs it. Lock pyspnego to 0.8.0, which has added support for MD4, and smbprotocol to 1.10.1 which takes advantage of the support in this version of pyspnego. 2023-04-10 04:41:20 +01:00
Pedro Algarvio
9a32f14e41 Upgrade to pyopenssl==23.0.0 due to the cryptography upgrade.
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-03-22 15:08:20 +00:00
Pedro Algarvio
5e7d4e3021 Upgrade to cryptography>=39.0.1
Due to:
  * GHSA-x4qr-2fvf-3mr5
  * GHSA-w7pp-m8wf-vj6r

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-03-22 15:08:20 +00:00
Pedro Algarvio
a5dc669214 Upgrade to oauthlib==3.2.2
Due to:
  * https://github.com/advisories/GHSA-3pgj-pg6c-r5p7

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-02-23 05:49:08 +00:00
Pedro Algarvio
4b708715f2 Upgrade to werkzeug==2.2.3
This addresses:
  * https://github.com/advisories/GHSA-px8h-6qxv-m22q
  * https://github.com/advisories/GHSA-xg9f-g7g7-2323

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-02-23 05:49:08 +00:00
Pedro Algarvio
3fa827925f Fix pre-commit by changing the pyzmq requirements.
It's now `pyzmq>=20.0.0` on all platforms, and `<=22.0.3` just for windows.

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-02-09 05:37:59 +00:00
Pedro Algarvio
cea048be5f Update docs related requirements
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-02-04 14:11:36 +00:00
Pedro Algarvio
6acef263b1 Stop triggering the jinja2.contextfunction deprecation warning
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-01-18 11:54:43 +00:00
Pedro Algarvio
5a0fd275eb Update setptoctitle requirements to stop getting the PY_SSIZE_T_CLEAN warning
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-01-18 11:54:43 +00:00
Pedro Algarvio
e8b8df84bd Match CI requirements to those of PKG 2023-01-17 06:42:27 +00:00
Pedro Algarvio
4ecfd3d3d5 Use packaging for version parsing. looseversion when needed only.
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-01-09 12:31:51 -07:00
Pedro Algarvio
e47e47a7e6 Bump to gitpython==3.1.30 because of https://github.com/advisories/GHSA-hcpj-qp55-gfph
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2022-12-31 15:02:22 +00:00
David Murphy
75b1be30a6 Further cleanup, removed used of looseversion and packaging 2022-12-20 07:07:21 -07:00
David Murphy
e8441238e1 Initial removal usage of distutils and replacement with setuptools 2022-12-20 07:07:21 -07:00
Pedro Algarvio
a350c4474a Revert "Bump to pytest-salt-factories==1.0.0rc23 on Python >= 3.7"
This reverts commit 8bd0b7dabb.
2022-12-17 14:30:12 +00:00
Pedro Algarvio
cc91a1bf64 Bump to pytest-salt-factories==1.0.0rc23 on Python >= 3.7
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2022-12-15 09:17:47 -07:00
Pedro Algarvio
d93717384f Bump to certifi>=2022.12.7
See https://github.com/advisories/GHSA-43fp-rhv2-5gv8 for additional context.

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2022-12-10 09:55:49 +00:00
Pedro Algarvio
97e2994bd5 Revert "Bump to pytest-salt-factories==1.0.0rc22"
This reverts commit f62df06b24.
2022-12-09 11:12:15 +00:00
Gareth J. Greenaway
7dcafc60d2
Merge pull request #63194 from s0undt3ch/hotfix/pycurl
Drop `pycurl` requirement, see https://github.com/saltstack/relative-environment-for-python/issues/50
2022-12-06 15:17:33 -08:00
Pedro Algarvio
f62df06b24
Bump to pytest-salt-factories==1.0.0rc22
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2022-12-06 16:51:46 +00:00
Pedro Algarvio
f59bf99cda
Drop pycurl requirement, see https://github.com/saltstack/relative-environment-for-python/issues/50
Properly compile windows requirements on Py3.10

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2022-12-05 05:03:44 +00:00
Pedro Algarvio
7c9d0fa371 Bump passlib to 1.7.4 for CI testing. Include it for windows too. 2022-12-02 11:19:30 +00:00
Megan Wilhite
d9d8627164 Update pytest to 7.2.0 2022-11-23 09:48:28 -07:00
Pedro Algarvio
0f6b9efbea Bump to pytest-salt-factories==1.0.0rc21
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2022-11-07 12:22:08 -07:00
Gareth J. Greenaway
50b76ab075 Some better handling when the device is not accessible, bumping up junos-eznc version. 2022-10-11 12:46:08 -06:00
MKLeb
58ec510d26
Merge tag 'v3005.1' into merge-forward/3005.1
Version 3005.1
2022-10-04 20:52:23 -04:00
Megan Wilhite
ea431b2c2f Bump oauthlib to 3.2.1 2022-10-03 11:02:28 -07:00
Megan Wilhite
863df6de7e Update mako requirement to 1.2.2 2022-09-22 15:21:26 -07:00
Gareth J. Greenaway
20fb0beb38 package jmespath 2022-09-12 12:13:00 -07:00
Carlos Álvaro
b3c6d949ba fix: Update setproctitle version for all platforms 2022-09-01 13:33:16 -06:00
Pedro Algarvio
1ed20998c8 Bump to pytest-salt-factories==1.0.0rc20
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2022-08-29 13:23:23 -07:00
Pedro Algarvio
420b168a33 Bump to pytest-shell-utilities==1.6.0
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2022-08-26 15:39:58 +01:00
Megan Wilhite
fc7d0a9296
Merge freeze into master (#62438)
* fixes saltstack/salt#62372 unable to use random shuffle and sample functions as Jinja filters

* move random_shuffle and random_sample logic to utils

* static seed in tests seems to have shifted

* static seed in tests require hash module

* Change Tiamat to onedir in release notes

* Reinstate known issues

* Update release notes with onedir package support policy

* need to check the version of Netmiko python library and then import the exceptions from different locations depending on the result.

* Adding changelog.

* swap out if...else for double try...except.

* Remove extra fix we don't need anymore

* [Docs] include onedir system python note

* Update all platforms to use pycparser 2.21 or greater for Py 3.9 or higher, fixes fips fault with openssl v3.x

* Remove the PyObjC dependency

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>

* Add "<tiamat> python" subcommand to allow execution or arbitrary scripts via bundled Python runtime

* Document usage of bundled Python runtime for Client API

* Use explicit locals for custom script execution, handle exception in similar fashion as Python

* Remove old __file__ replacement

* Apply suggestions from code review

Co-authored-by: Pedro Algarvio <pedro@algarvio.me>

Co-authored-by: nicholasmhughes <nicholasmhughes@gmail.com>
Co-authored-by: Alyssa Rock <alyssa.rock@gmail.com>
Co-authored-by: Gareth J. Greenaway <gareth@saltstack.com>
Co-authored-by: Twangboy <leesh@vmware.com>
Co-authored-by: David Murphy < dmurphy@saltstack.com>
Co-authored-by: Pedro Algarvio <palgarvio@vmware.com>
Co-authored-by: Lukas Raska <lukas@raska.me>
Co-authored-by: Pedro Algarvio <pedro@algarvio.me>
2022-08-08 11:27:10 -06:00
David Murphy
b63534c6e5 Update all platforms to use pycparser 2.21 or greater for Py 3.9 or higher, fixes fips fault with openssl v3.x 2022-08-05 09:05:38 -06:00
Pedro Algarvio
33c9b12fa8 Add `pytest-custom-exit-code==0.3.0` as a dependency.
When running the test suite it chunks, specially when running against
the changed files, some of the test groups might not collect any test
and Jenkins does not help with getting the exit code from scripts.
This is where ``pytest-custom-exit-code` comes in, it allows exiting
with a 0 exit code when no tests are collected.

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2022-07-18 14:56:16 -07:00
Pedro Algarvio
e3929c59d1 Bump to `pyzmq==23.2.0` for Python >=3.9
This way we can use wheel packages on Py3.10 instead of having it build
from source.

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2022-07-10 09:42:59 +01:00
Pedro Algarvio
e68cd5e991 Bump to `lxml==4.9.1 to address CVE-2022-2309`
See https://github.com/advisories/GHSA-wrxv-2j5q-m38w

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2022-07-08 11:29:32 +01:00
Pedro Algarvio
ab26044a9f Bump to pytest-salt-factories 1.0.0rc17
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2022-06-21 06:56:55 -06:00
Pedro Algarvio
d92567a192 Bump to `pyjwt==2.4.0` due to CVE-2022-29217
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2022-06-12 15:19:13 -07:00
Pedro Algarvio
f6fd24f125 Upgrade some requirements
These requirements should be kept up-to-date as much as possible.

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2022-06-06 07:18:12 -06:00
Pedro Algarvio
639ebc00bc Bump to `pytest==7.0.1` for Py>=3.6
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2022-06-02 07:05:09 -06:00
Pedro Algarvio
23598fad13 Bump to `pytest-salt-factories[docker]==1.0.0rc16`
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2022-06-02 07:05:09 -06:00
Caleb Beard
5a18c14b0f
Add etcd API v3 implementation (#61911)
* add etcd3-py to CI requirements for python_version >= 3.6

* Add intial etcd3 implementation and adjust the functional tests

* adjust etcd test suite to test new v3 impl where applicable

* pre-commit fun

* add documentation for new option

* change warnings per suggestions

* change names for backwards compatibility and add back profile kwarg

* pre-commit and lint fixes

* switch docker logic in etcd sdb integration tests

* fix sdb etcd tests v2

* add ls pseudo-functionality to etcd api v3

* move towards recursive kwarg deprecation by adding recurse kwarg as preferred

* add encoding feature and other etcd client args for v3

* precommit

* add deprecations changelog and deprecate waitIndex/index kwargs in favor of start_revision

* pre-commit and revert etcd sdb tests to master version

* remove unused import

* fix mod_watch disbatching

* Make sure to warn if no profile is given and we have a possible connection error

* precommit

* Fix test failures with wrong profile

* Fix v3 -> no v2 error

Previously, when the API was v3-only, but the profile wasn't present
leading to the v2 fallback, it would 404 in certain circumstances.

We can't use a more particular exception in the `_etcd_action` because
the salt loader plays havoc with things.

Co-authored-by: Wayne Werner <wwerner@vmware.com>
Co-authored-by: Gareth J. Greenaway <gareth@saltstack.com>
2022-05-31 07:40:35 -06:00