Commit graph

719 commits

Author SHA1 Message Date
Pedro Algarvio
5241abd10a Bump to cryptography==41.0.4 due to https://github.com/advisories/GHSA-v8gr-m533-ghj9
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-09-25 21:03:45 +01:00
Pedro Algarvio
e348a49ed5 Bump to pytest-salt-factories==1.0.0rc26
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-09-25 17:26:12 +01:00
Pedro Algarvio
070774f38c Fix pre-commit regarding static requirements compilation
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-09-25 11:29:15 +01:00
Pedro Algarvio
519666b0cf Set cgroupns to host to fix the libvirt migration tests.
This needs a newer version of the python docker package.

The breakage was due to updating the docker container used. - https://github.com/saltstack/salt-ci-containers/pull/42

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-09-24 22:10:53 +01:00
Pedro Algarvio
9fb51b083a Bump to docker==6.1.2
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-09-24 22:10:53 +01:00
Pedro Algarvio
cbcbe14d47 Bump to pytest-salt-factories==1.0.0rc25
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-09-19 20:37:29 +00:00
Pedro Algarvio
5033860d2a Don't use requirements with extras as that breaks pip constraints usage
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-09-19 20:37:29 +00:00
Pedro Algarvio
fd0a725d7e Bump to gitpython==3.1.35
Due to https://github.com/advisories/GHSA-cwvm-v4w8-q58c
Due to https://github.com/advisories/GHSA-wfm5-v35h-vwf4

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-09-12 09:23:32 +01:00
Pedro Algarvio
c3477da2dd The 3006.x branch is Python >= 3.7 already. Remove unnecessary python_version markers.
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-09-12 09:23:32 +01:00
Pedro Algarvio
3c75f00c7f Bump to python-tools-scripts>=0.18.1
This version allows command descriptions to maintain indentation which
is required for proper examples rendering.

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-08-30 13:20:34 +00:00
Pedro Algarvio
386799f623 Update to gitpython>=3.1.32 due to https://github.com/advisories/GHSA-pr76-5cm5-w9cj
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-08-16 01:38:20 +01:00
MKLeb
28bb55922b Release v3006.2
-----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCAAdFiEE0pCPs6gjsPqzvSH1uza/ZYSimP8FAmTVMykACgkQuza/ZYSi
 mP+iug/8Dc+YFX8WNH5VluC51ClaXezeRTOlLwlI+GFftOVnjdLpoR9/Z+BbDtZn
 zUrEeXzr/mrFy4cIE2ebpMlYb1G/DCUZU/aBhIpChANDIE46nF4YUyKUjfLqqRE0
 LNFXKCkRYE0Vrbr+9U3Ey1tpsX3fldq2wWJq69Mkkj4FS8EAzYBauTgdkX5frri1
 CQsR682tUNVRZGLldE58oxmjDybDYInlPqwXwRuFG5NCfeRrfRVeTdxgMQt8qwfg
 rjVy0Aa31qqEqfPn9Ubo0dRLoGLziTKzoqjGWccKiT33QJlgSsarU9k6ZKY4BJKZ
 5WQTJB+pEjCPztcQvznx0reA4OXK8x0wQC7+EW8Q/PLiu9dJtWPJqYCrzCcKMXzK
 6THpU045ZNYD98WtOQAFtmxc74IIM/ua8kQ531l14sePrI97h4svjxy4qwnG66S6
 5OQQMr9LuyIEXYGF01iVUcuXtRsolJTR2Di72+9TTizFcIow2AQJCVPd7DkWugxI
 1gscFzxvkhhqBYwVzTJYftosIPEbvRnBqfJe8gg3TMtCMaw1Sz6KIdDh80eTa44L
 MRVp20gmudiuEyWWZm5kw8pIFyzRVXuCkbXT5GqAlpoteO6bh+4Oo6qqCPg//ADu
 oLx+nWBxf1aQHTZfsQKl4ba+hZklea3ChnKkeRcEm0CpME3qyZ8=
 =wxG/
 -----END PGP SIGNATURE-----
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQJGBAABCAAwFiEEoUAOmrRrwYAMsPVACJtk6hqZ3dEFAmTVdVASHGNhbGViYkB2
 bXdhcmUuY29tAAoJEAibZOoamd3RVV8P/3FhVP6WZz9ojgh0I+kqmEs2MCKsK06t
 KY+2Rd8aI9HezlHhQu5NYRIEPNOt5Ygpxf2GHudjy8AL9sruea9qjPrlTGOb4KS0
 e8hHfBnEXHVrbwv1pT26Mjhqjndo9jczQdUCRT8nfr7rrlh/d8Iah6figwk55Y04
 ihTslkaCZK8EqJ+M3pyt4rX1QhTrfS19mLKWEaOGj4AabeXb8CfssE89w8dEVuqt
 i4/DDweBU6pz0sLcf/KbtnhcrS6wlSmb/3YG44Kbk1WRm5IC8aUJ4vqf2xBqRzXV
 j74B6trID1JZQY9/iVhgCc+7YsLUxE0XuUwhfYPIbFhDs3b0Gzizh8acYCKkxmMT
 duPY561pae4lSFZL96q8sIwUpi1z3ob3JokZbBwiZ2Rw4wzOB+OnWWQKu5qddn7z
 hrK8T38A0zjdJU3g/mBzPSVzzd3eepxaRgZqo/0s6WUtGYGRX1tn8x5h2xKdWQR1
 njTn2VofLezeu+Hq4C5QzEdVbixkxNdKjqN7Il0fGwc0XHDXazkC6lEQ2YTgJabJ
 EcmVcSS5YNgaf98QRdzby6o5Ezxf2Q8Fv0V5RTpOu6pU6lRTAFYHgrpi6+gOf/37
 76OhlHky/3FAlaZwJni+8uZeBCZok1Wq2J845BR/ny0WSuhImt/lxxdY+oxxakH6
 Oi2XC2B7vAEx
 =AOgK
 -----END PGP SIGNATURE-----

Merge tag 'v3006.2' into mf/3006.2/3006.x

Release v3006.2
2023-08-10 19:39:38 -04:00
Megan Wilhite
a46d846ab6 Update to cryptography==41.0.3 due to https://github.com/advisories/GHSA-jm77-qphf-c4w8 2023-08-06 07:31:13 +01:00
Pedro Algarvio
bdb04c3f73 Bump to saltpylint==2023.8.3
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-08-03 19:19:33 +00:00
Megan Wilhite
b0dfa09544 [3006.2] Update cryptography to 41.0.3 2023-08-03 13:11:11 +00:00
David Murphy
80785185ac Remove cython and other pyyaml changes, now pyyaml 6.0.1 fixes cython 3.0 issue 2023-07-28 18:24:59 +01:00
David Murphy
af8d19061a Updated test to use importorskip, downgrade pyyaml to 5.3.1 to work around cython 3.0 issues 2023-07-28 18:24:59 +01:00
David Murphy
2d2b720871 Removed debug logging and updated requirements per reviewer suggestions 2023-07-28 18:24:59 +01:00
David Murphy
726e6d351a Cleaned up py3.7 use of immutables in requirements 2023-07-28 18:24:59 +01:00
David Murphy
244f4a7dad Updat4ed immutables==0.15 where applicable as per reviewer comments 2023-07-28 18:24:59 +01:00
David Murphy
d65aed8ced Updated immutables as per reviewer comments 2023-07-28 18:24:59 +01:00
David Murphy
016861ddaa Revert pylint to version 2.4.4 2023-07-28 18:24:59 +01:00
David Murphy
664bce9d01 Trying different versions of pylint to get past py3.8 issue 2023-07-28 18:24:59 +01:00
David Murphy
4f868389ae Updated pylint to 2.17.4 from 2.4.4, needs support for later versions of Python 3 2023-07-28 18:24:59 +01:00
David Murphy
497b9b117d Remove debig log statements and update immutables version used 2023-07-28 18:24:59 +01:00
David Murphy
c6b4671b86 Updated versions of cffi used 2023-07-28 18:24:59 +01:00
David Murphy
d2f1900bd9 Adjusted pynacl version per python version 2023-07-28 18:24:59 +01:00
David Murphy
2824bb9263 Updates due to rebase 2023-07-28 18:24:59 +01:00
Pedro Algarvio
301df340e7 Bump to certifi==2023.07.22 due to https://github.com/advisories/GHSA-xqr8-7jwr-rhp7
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-07-28 10:51:00 +01:00
Pedro Algarvio
ad847f86c4 Bump to certifi==2023.07.22 due to https://github.com/advisories/GHSA-xqr8-7jwr-rhp7
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-07-27 19:19:26 +01:00
Pedro Algarvio
145a0ed6fc Bump to aiohttp==3.8.5 due to https://github.com/advisories/GHSA-45c4-8wx5-qw6w
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-07-21 18:00:56 +01:00
Megan Wilhite
18c7a1f8f1 [3006.2] update requests 2023-07-20 17:56:31 +01:00
Megan Wilhite
c069d99ea8 [3006.2] Update cryptography 2023-07-20 08:03:43 +01:00
Pedro Algarvio
bdb77bfee7 Bump to pyyaml==6.0.1 due to https://github.com/yaml/pyyaml/issues/601
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-07-19 08:49:10 +01:00
Pedro Algarvio
ef7082126d Switch to Debian 12 to build packages.
The latest cryptography 1.41.1 requires a version of rustc which is not
available on Debian 11

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-07-19 08:49:10 +01:00
MKLeb
798787e884 Lock to immutables>0.16, as that version has problems installing now 2023-07-19 08:49:10 +01:00
Pedro Algarvio
53aafe7eba Bump to pyyaml==6.0.1 due to https://github.com/yaml/pyyaml/issues/601
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-07-18 14:21:40 +01:00
Pedro Algarvio
5b2e752d5e Bump to cryptography==41.0.2 to address GHSA-cf7p-gm2m-833m
The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options.
References:

https://nvd.nist.gov/vuln/detail/CVE-2023-38325
[https://github.com/pyca/cryptography/issues/9207](pyca/cryptography#9207)
[https://github.com/pyca/cryptography/issues/9208](pyca/cryptography#9208)
[https://github.com/pyca/cryptography/compare/41.0.1...41.0.2](pyca/cryptography@41.0.1...41.0.2)
https://pypi.org/project/cryptography/#history
[1ca7adc97b](pyca/cryptography@1ca7adc)

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-07-16 17:44:45 -07:00
Pedro Algarvio
dc9c22ab9b Switch to Debian 12 to build packages.
The latest cryptography 1.41.1 requires a version of rustc which is not
available on Debian 11

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-07-06 18:04:43 +01:00
Pedro Algarvio
3d097b8ed5 Upgrade to cryptography==41.0.1(and therefor pyopenssl==23.2.0 due to https://github.com/advisories/GHSA-5cpq-8wj7-hf2v
This only really impacts pip installs of Salt and the windows onedir
since the linux and macos onedir build every package dependency from
source, not from pre-existing wheels.

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-07-06 18:04:43 +01:00
MKLeb
a7d7c4151b Lock to immutables>0.16, as that version has problems installing now 2023-06-21 15:39:42 -07:00
Pedro Algarvio
3ae4e2aba5 Add wempy template library to CI requirements now that it supports Py3
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-05-31 14:39:59 +00:00
Megan Wilhite
dc8baed208 Update requests 2023-05-29 18:08:57 +01:00
Pedro Algarvio
4112f05b77 Bump to sqlparse>=0.4.4 due to https://github.com/advisories/GHSA-rrm6-wvj7-cwh2
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-04-25 12:14:52 +01:00
Megan Wilhite
4013d4e9a5 Use system configs if user is salt 2023-04-15 20:49:08 +01:00
Megan Wilhite
60d790597a Add test to ensure salt user is running salt-master 2023-04-15 20:49:08 +01:00
Twangboy
e5c58d9ab9 Bump pyzmq to 25.0.2 on Windows 2023-04-13 12:32:43 +01:00
Twangboy
be7dd894d8 Fix pre-commit/lint 2023-04-11 21:38:05 +01:00
Twangboy
4cc0388850 Add workflow to upload to VirusTotal 2023-04-11 21:38:05 +01:00
Gareth J. Greenaway
a533bb8c93 MD4 is disabled in later versions of openssl, but NTLM authentication needs it. Lock pyspnego to 0.8.0, which has added support for MD4, and smbprotocol to 1.10.1 which takes advantage of the support in this version of pyspnego. 2023-04-10 04:41:20 +01:00