Commit graph

57 commits

Author SHA1 Message Date
Pedro Algarvio
53aafe7eba Bump to pyyaml==6.0.1 due to https://github.com/yaml/pyyaml/issues/601
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-07-18 14:21:40 +01:00
Megan Wilhite
dc8baed208 Update requests 2023-05-29 18:08:57 +01:00
Pedro Algarvio
3f6f5a6078 Update to markdown-it-py==2.2.0
Due to:
* https://github.com/advisories/GHSA-jrwr-5x3p-hvc3
* https://github.com/advisories/GHSA-vrjv-mxr7-vjf8

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-03-22 15:08:20 +00:00
Pedro Algarvio
4b708715f2 Upgrade to werkzeug==2.2.3
This addresses:
  * https://github.com/advisories/GHSA-px8h-6qxv-m22q
  * https://github.com/advisories/GHSA-xg9f-g7g7-2323

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-02-23 05:49:08 +00:00
Pedro Algarvio
5176520713 Add a spellcheck docs build
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-02-18 17:38:23 +00:00
Pedro Algarvio
c4beeb8fb9 Fix doc builds
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-02-18 17:38:23 +00:00
Pedro Algarvio
a749ec551a Start writing the release notes in markdown.
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-02-17 05:28:37 +00:00
Pedro Algarvio
3fa827925f Fix pre-commit by changing the pyzmq requirements.
It's now `pyzmq>=20.0.0` on all platforms, and `<=22.0.3` just for windows.

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-02-09 05:37:59 +00:00
Pedro Algarvio
cea048be5f Update docs related requirements
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-02-04 14:11:36 +00:00
Daniel A. Wozniak
b01be3494b Fix docs requirements 2023-01-27 07:35:00 -07:00
Daniel A. Wozniak
682777e1d1 Add tools docs 2023-01-27 07:35:00 -07:00
Pedro Algarvio
5a0fd275eb Update setptoctitle requirements to stop getting the PY_SSIZE_T_CLEAN warning
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-01-18 11:54:43 +00:00
Pedro Algarvio
c375c752c1 Bump to future==0.18.3 due to https://github.com/advisories/GHSA-v3c5-jqr6-7qm8
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-01-17 10:17:45 +00:00
Pedro Algarvio
e8b8df84bd Match CI requirements to those of PKG 2023-01-17 06:42:27 +00:00
Pedro Algarvio
4ecfd3d3d5 Use packaging for version parsing. looseversion when needed only.
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-01-09 12:31:51 -07:00
Pedro Algarvio
e47e47a7e6 Bump to gitpython==3.1.30 because of https://github.com/advisories/GHSA-hcpj-qp55-gfph
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2022-12-31 15:02:22 +00:00
David Murphy
75b1be30a6 Further cleanup, removed used of looseversion and packaging 2022-12-20 07:07:21 -07:00
David Murphy
e8441238e1 Initial removal usage of distutils and replacement with setuptools 2022-12-20 07:07:21 -07:00
Pedro Algarvio
d93717384f Bump to certifi>=2022.12.7
See https://github.com/advisories/GHSA-43fp-rhv2-5gv8 for additional context.

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2022-12-10 09:55:49 +00:00
Gareth J. Greenaway
4212c320e6 Restore the previous slack engine and deprecate it, rename replace the slack engine to slack_bolt until deprecation 2022-12-07 09:13:55 -07:00
Pedro Algarvio
f59bf99cda
Drop pycurl requirement, see https://github.com/saltstack/relative-environment-for-python/issues/50
Properly compile windows requirements on Py3.10

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2022-12-05 05:03:44 +00:00
Pedro Algarvio
7c9d0fa371 Bump passlib to 1.7.4 for CI testing. Include it for windows too. 2022-12-02 11:19:30 +00:00
Gareth J. Greenaway
50b76ab075 Some better handling when the device is not accessible, bumping up junos-eznc version. 2022-10-11 12:46:08 -06:00
MKLeb
58ec510d26
Merge tag 'v3005.1' into merge-forward/3005.1
Version 3005.1
2022-10-04 20:52:23 -04:00
Megan Wilhite
ea431b2c2f Bump oauthlib to 3.2.1 2022-10-03 11:02:28 -07:00
Megan Wilhite
863df6de7e Update mako requirement to 1.2.2 2022-09-22 15:21:26 -07:00
Gareth J. Greenaway
20fb0beb38 package jmespath 2022-09-12 12:13:00 -07:00
Pedro Algarvio
e68cd5e991 Bump to `lxml==4.9.1 to address CVE-2022-2309`
See https://github.com/advisories/GHSA-wrxv-2j5q-m38w

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2022-07-08 11:29:32 +01:00
Pedro Algarvio
9bccfcf9c4 Bump to pyjwt==2.4.0 due to CVE-2022-29217
Twilio also had to be upgraded because it was locked to the vulnerable pyjwt version.

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2022-06-15 12:15:36 -06:00
Pedro Algarvio
f6fd24f125 Upgrade some requirements
These requirements should be kept up-to-date as much as possible.

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2022-06-06 07:18:12 -06:00
Pedro Algarvio
9983b1df09 Move test requirements to requirements files
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2022-06-02 07:05:09 -06:00
Caleb Beard
5a18c14b0f
Add etcd API v3 implementation (#61911)
* add etcd3-py to CI requirements for python_version >= 3.6

* Add intial etcd3 implementation and adjust the functional tests

* adjust etcd test suite to test new v3 impl where applicable

* pre-commit fun

* add documentation for new option

* change warnings per suggestions

* change names for backwards compatibility and add back profile kwarg

* pre-commit and lint fixes

* switch docker logic in etcd sdb integration tests

* fix sdb etcd tests v2

* add ls pseudo-functionality to etcd api v3

* move towards recursive kwarg deprecation by adding recurse kwarg as preferred

* add encoding feature and other etcd client args for v3

* precommit

* add deprecations changelog and deprecate waitIndex/index kwargs in favor of start_revision

* pre-commit and revert etcd sdb tests to master version

* remove unused import

* fix mod_watch disbatching

* Make sure to warn if no profile is given and we have a possible connection error

* precommit

* Fix test failures with wrong profile

* Fix v3 -> no v2 error

Previously, when the API was v3-only, but the profile wasn't present
leading to the v2 fallback, it would 404 in certain circumstances.

We can't use a more particular exception in the `_etcd_action` because
the salt loader plays havoc with things.

Co-authored-by: Wayne Werner <wwerner@vmware.com>
Co-authored-by: Gareth J. Greenaway <gareth@saltstack.com>
2022-05-31 07:40:35 -06:00
Pedro Algarvio
924e17f6d9 Bump to `paramiko==2.10.1 because of CVE-2022-24302`
https://github.com/advisories/GHSA-f8q4-jwww-x3wv

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2022-04-08 09:10:15 -04:00
Pedro Algarvio
46e6416e5b Update to `python-gnupg==0.4.8`
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2022-04-08 09:10:15 -04:00
Thomas Phipps
062637a17e
yaml modules for working towards troubleshooting easement (#61183)
* create a yamllint utils module. as well as a yaml module that will
eventually be yaml tools to help in troubleshooting yaml
functionality.

* included unit tests for the yaml module. also not happy about moving
from __salt__.module.function to __salt__["module.function"] for the
test to work

* added pre_render test and minor correct to heredoc in yamllint

* changelog

* fix tests running in py3.5, also try and fix pre-commit.

* attempt to fix pre-commit

* still trying to fix pre-commit.

* forgot freebsd, added yamllint to freebsd

* update adding versionadded and depends

* fix pre-commit?

* fix pre-commit

* attempt to fix pre-commit again

Co-authored-by: Megan Wilhite <mwilhite@vmware.com>
2022-04-06 14:53:21 -04:00
Megan Wilhite
bb610f761e Fix requested feedback 2022-03-30 15:28:41 -07:00
Megan Wilhite
fb3033f032 Use the correct Markup from jinja for each version 2022-03-30 15:28:41 -07:00
Pedro Algarvio
eb137f185b Don't install napalm on Py3.10, it pulls `pyeapi which is not compatible with 3.10
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2022-02-28 08:29:49 -08:00
Pedro Algarvio
76b7b549ed Fix docs requirements
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2022-02-09 14:20:12 -05:00
Pedro Algarvio
75ed972d72 Update requirements to address know security vulnerabilities
Closes #61516
Closes #61515
Closes #61514
Closes #61513
Closes #61520
Closes #61096
Closes #60944
Closes #61558
Closes #61559
Closes #61560
Closes #61561

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2022-02-08 06:34:43 -08:00
MKLeb
5d860e1744 bump lxml to >=4.6.5 2022-01-14 16:21:28 -08:00
Kirill Ponomarev
306aa6dd29
Update pytest to 6.2.5 for python 3.10 (#61295)
* Update pytest to 6.2.5 for python 3.10

* bump junos-eznc to 2.6.0

* bump setproctitle version and fix integration tests

* Skip tests for python 3.10

* Fix test with py3.10

* bump jinja2 version and dependencies

* Fix test with py3.10

* Skip tests for python 3.10 and new moto version

* Use tempfile library to test perms on directories

* Maintain static requirements changes, revert `requirements/base.txt`

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>

Co-authored-by: Megan Wilhite <mwilhite@vmware.com>
Co-authored-by: Pedro Algarvio <palgarvio@vmware.com>
2021-12-22 09:02:56 -05:00
cmcmarrow
86d7c2dd05 fix pre 2021-09-24 20:20:32 -07:00
Megan Wilhite
8bb4ed5b06 Fix pre-commit 2021-09-23 07:19:21 -04:00
Megan Wilhite
0751d505f1 Add rpm-vercmp to tiamat builds 2021-09-23 07:19:21 -04:00
Pedro Algarvio
93a3caeacb Bump sqlparse requirements to 0.4.2
GHSA-p5w8-wqhj-9hhf (high severity)
Vulnerable versions: >= 0.4.0, < 0.4.2
Patched version: 0.4.2

Impact

The formatter function that strips comments from a SQL contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service). The regular expression may cause exponential backtracking on strings containing many repetitions of '\r\n' in SQL comments.
2021-09-21 13:42:53 -07:00
Pedro Algarvio
2ed6d1a974 Enforce requirements and their versions consistency
Use use the packaging requirements as version constraints to all other
requirements files which should include Salt's base requirements.

The nox sessions now don't install the base requirements since the "top"
requirements file includes the base requirements.

All of this, ensuring that the same versions are used on all of them.
2021-09-21 13:42:53 -07:00
Pedro Algarvio
2c6da2a5c5 Best salt-extensions load at runtime support is using `importlib-metadata` 2021-08-27 07:21:24 -04:00
Pedro Algarvio
a46aa3a55c Bump to `urllib3==1.26.6`
GHSA-q2q7-5pp4-w6pg

high severity

Vulnerable versions: < 1.26.5
Patched version: 1.26.5

Impact

When provided with a URL containing many @ characters in the authority component the authority regular expression exhibits
catastrophic backtracking causing a denial of service if a URL were passed as a parameter or redirected to via an HTTP redirect.

Patches

The issue has been fixed in urllib3 v1.26.5.

References

* [CVE-2021-33503](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33503)
* [JVNVU#92413403 (English)](https://jvn.jp/en/vu/JVNVU92413403/)
* [JVNVU#92413403 (Japanese)](https://jvn.jp/vu/JVNVU92413403/)
* [urllib3 v1.26.5](https://github.com/urllib3/urllib3/releases/tag/1.26.5)
2021-08-02 16:13:40 -07:00
Pedro Algarvio
ec6e96a036 Upgrade to six==1.16.0 to avoid problems on CI runs
```
13:59:02  nox > Session invoke-pre-commit was successful.
13:59:02  nox > Running session invoke-pre-commit
13:59:02  nox > pip install --progress-bar=off -r requirements/static/ci/py3.7/invoke.txt
13:59:02  Collecting blessings==1.7
13:59:02    Using cached blessings-1.7-py3-none-any.whl (18 kB)
13:59:02  Collecting invoke==1.4.1
13:59:02    Using cached invoke-1.4.1-py3-none-any.whl (210 kB)
13:59:02  Collecting pyyaml==5.3.1
13:59:02    Using cached PyYAML-5.3.1.tar.gz (269 kB)
13:59:02  Collecting six==1.15.0
13:59:02    Using cached six-1.15.0-py2.py3-none-any.whl (10 kB)
13:59:02  Building wheels for collected packages: pyyaml
13:59:02    Building wheel for pyyaml (setup.py) ... - \ | / - \ | done
13:59:02    Created wheel for pyyaml: filename=PyYAML-5.3.1-cp37-cp37m-linux_x86_64.whl size=546391 sha256=e42e1d66cc32087f4d33ceb81268c86b59f1a97029b19459f91b8d6ad1430167
13:59:02    Stored in directory: /var/jenkins/.cache/pip/wheels/5e/03/1e/e1e954795d6f35dfc7b637fe2277bff021303bd9570ecea653
13:59:02  Successfully built pyyaml
13:59:02  Installing collected packages: six, pyyaml, invoke, blessings
13:59:02    Attempting uninstall: six
13:59:02      Found existing installation: six 1.16.0
13:59:02      Uninstalling six-1.16.0:
13:59:02  ERROR: Could not install packages due to an OSError: [Errno 2] No such file or directory: '/var/jenkins/.cache/pre-commit/repomw8oee1s/py_env-python3/lib/python3.7/site-packages/__pycache__/six.cpython-37.pyc'
13:59:02
13:59:02  nox > Command pip install --progress-bar=off -r requirements/static/ci/py3.7/invoke.txt failed with exit code 1
13:59:02  nox > Session invoke-pre-commit failed.
```
2021-05-27 09:32:39 -04:00