Commit graph

36 commits

Author SHA1 Message Date
David Murphy
e8441238e1 Initial removal usage of distutils and replacement with setuptools 2022-12-20 07:07:21 -07:00
Pedro Algarvio
d93717384f Bump to certifi>=2022.12.7
See https://github.com/advisories/GHSA-43fp-rhv2-5gv8 for additional context.

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2022-12-10 09:55:49 +00:00
Gareth J. Greenaway
4212c320e6 Restore the previous slack engine and deprecate it, rename replace the slack engine to slack_bolt until deprecation 2022-12-07 09:13:55 -07:00
Gareth J. Greenaway
7dcafc60d2
Merge pull request #63194 from s0undt3ch/hotfix/pycurl
Drop `pycurl` requirement, see https://github.com/saltstack/relative-environment-for-python/issues/50
2022-12-06 15:17:33 -08:00
Pedro Algarvio
f59bf99cda
Drop pycurl requirement, see https://github.com/saltstack/relative-environment-for-python/issues/50
Properly compile windows requirements on Py3.10

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2022-12-05 05:03:44 +00:00
Pedro Algarvio
0d54748a67
Address pytest deprecation warnings
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2022-12-05 04:47:40 +00:00
Pedro Algarvio
7c9d0fa371 Bump passlib to 1.7.4 for CI testing. Include it for windows too. 2022-12-02 11:19:30 +00:00
Gareth J. Greenaway
50b76ab075 Some better handling when the device is not accessible, bumping up junos-eznc version. 2022-10-11 12:46:08 -06:00
MKLeb
58ec510d26
Merge tag 'v3005.1' into merge-forward/3005.1
Version 3005.1
2022-10-04 20:52:23 -04:00
Megan Wilhite
ea431b2c2f Bump oauthlib to 3.2.1 2022-10-03 11:02:28 -07:00
Megan Wilhite
863df6de7e Update mako requirement to 1.2.2 2022-09-22 15:21:26 -07:00
Gareth J. Greenaway
20fb0beb38 package jmespath 2022-09-12 12:13:00 -07:00
Pedro Algarvio
e68cd5e991 Bump to `lxml==4.9.1 to address CVE-2022-2309`
See https://github.com/advisories/GHSA-wrxv-2j5q-m38w

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2022-07-08 11:29:32 +01:00
Pedro Algarvio
9bccfcf9c4 Bump to pyjwt==2.4.0 due to CVE-2022-29217
Twilio also had to be upgraded because it was locked to the vulnerable pyjwt version.

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2022-06-15 12:15:36 -06:00
Pedro Algarvio
f6fd24f125 Upgrade some requirements
These requirements should be kept up-to-date as much as possible.

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2022-06-06 07:18:12 -06:00
Pedro Algarvio
9983b1df09 Move test requirements to requirements files
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2022-06-02 07:05:09 -06:00
Caleb Beard
5a18c14b0f
Add etcd API v3 implementation (#61911)
* add etcd3-py to CI requirements for python_version >= 3.6

* Add intial etcd3 implementation and adjust the functional tests

* adjust etcd test suite to test new v3 impl where applicable

* pre-commit fun

* add documentation for new option

* change warnings per suggestions

* change names for backwards compatibility and add back profile kwarg

* pre-commit and lint fixes

* switch docker logic in etcd sdb integration tests

* fix sdb etcd tests v2

* add ls pseudo-functionality to etcd api v3

* move towards recursive kwarg deprecation by adding recurse kwarg as preferred

* add encoding feature and other etcd client args for v3

* precommit

* add deprecations changelog and deprecate waitIndex/index kwargs in favor of start_revision

* pre-commit and revert etcd sdb tests to master version

* remove unused import

* fix mod_watch disbatching

* Make sure to warn if no profile is given and we have a possible connection error

* precommit

* Fix test failures with wrong profile

* Fix v3 -> no v2 error

Previously, when the API was v3-only, but the profile wasn't present
leading to the v2 fallback, it would 404 in certain circumstances.

We can't use a more particular exception in the `_etcd_action` because
the salt loader plays havoc with things.

Co-authored-by: Wayne Werner <wwerner@vmware.com>
Co-authored-by: Gareth J. Greenaway <gareth@saltstack.com>
2022-05-31 07:40:35 -06:00
Pedro Algarvio
924e17f6d9 Bump to `paramiko==2.10.1 because of CVE-2022-24302`
https://github.com/advisories/GHSA-f8q4-jwww-x3wv

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2022-04-08 09:10:15 -04:00
Pedro Algarvio
46e6416e5b Update to `python-gnupg==0.4.8`
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2022-04-08 09:10:15 -04:00
Thomas Phipps
062637a17e
yaml modules for working towards troubleshooting easement (#61183)
* create a yamllint utils module. as well as a yaml module that will
eventually be yaml tools to help in troubleshooting yaml
functionality.

* included unit tests for the yaml module. also not happy about moving
from __salt__.module.function to __salt__["module.function"] for the
test to work

* added pre_render test and minor correct to heredoc in yamllint

* changelog

* fix tests running in py3.5, also try and fix pre-commit.

* attempt to fix pre-commit

* still trying to fix pre-commit.

* forgot freebsd, added yamllint to freebsd

* update adding versionadded and depends

* fix pre-commit?

* fix pre-commit

* attempt to fix pre-commit again

Co-authored-by: Megan Wilhite <mwilhite@vmware.com>
2022-04-06 14:53:21 -04:00
Pedro Algarvio
eb137f185b Don't install napalm on Py3.10, it pulls `pyeapi which is not compatible with 3.10
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2022-02-28 08:29:49 -08:00
Thomas Phipps
4de025be39 Finalize disabling hgfs and hg_pillar tests on windows. cleanup testing 2022-02-08 10:31:15 -08:00
Thomas Phipps
72196b1c1f this wll break, but hopefully will keep windows from blowing up 2022-02-08 10:31:15 -08:00
Thomas Phipps
bc0e7ed580 remove linux only stuff 2022-02-08 10:31:15 -08:00
Thomas Phipps
c80ed277f5 add hg into ci testing requirments. 2022-02-08 10:31:15 -08:00
Pedro Algarvio
75ed972d72 Update requirements to address know security vulnerabilities
Closes #61516
Closes #61515
Closes #61514
Closes #61513
Closes #61520
Closes #61096
Closes #60944
Closes #61558
Closes #61559
Closes #61560
Closes #61561

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2022-02-08 06:34:43 -08:00
MKLeb
5d860e1744 bump lxml to >=4.6.5 2022-01-14 16:21:28 -08:00
Kirill Ponomarev
306aa6dd29
Update pytest to 6.2.5 for python 3.10 (#61295)
* Update pytest to 6.2.5 for python 3.10

* bump junos-eznc to 2.6.0

* bump setproctitle version and fix integration tests

* Skip tests for python 3.10

* Fix test with py3.10

* bump jinja2 version and dependencies

* Fix test with py3.10

* Skip tests for python 3.10 and new moto version

* Use tempfile library to test perms on directories

* Maintain static requirements changes, revert `requirements/base.txt`

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>

Co-authored-by: Megan Wilhite <mwilhite@vmware.com>
Co-authored-by: Pedro Algarvio <palgarvio@vmware.com>
2021-12-22 09:02:56 -05:00
cmcmarrow
86d7c2dd05 fix pre 2021-09-24 20:20:32 -07:00
Megan Wilhite
8bb4ed5b06 Fix pre-commit 2021-09-23 07:19:21 -04:00
Pedro Algarvio
93a3caeacb Bump sqlparse requirements to 0.4.2
GHSA-p5w8-wqhj-9hhf (high severity)
Vulnerable versions: >= 0.4.0, < 0.4.2
Patched version: 0.4.2

Impact

The formatter function that strips comments from a SQL contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service). The regular expression may cause exponential backtracking on strings containing many repetitions of '\r\n' in SQL comments.
2021-09-21 13:42:53 -07:00
Pedro Algarvio
2ed6d1a974 Enforce requirements and their versions consistency
Use use the packaging requirements as version constraints to all other
requirements files which should include Salt's base requirements.

The nox sessions now don't install the base requirements since the "top"
requirements file includes the base requirements.

All of this, ensuring that the same versions are used on all of them.
2021-09-21 13:42:53 -07:00
Pedro Algarvio
ec6e96a036 Upgrade to six==1.16.0 to avoid problems on CI runs
```
13:59:02  nox > Session invoke-pre-commit was successful.
13:59:02  nox > Running session invoke-pre-commit
13:59:02  nox > pip install --progress-bar=off -r requirements/static/ci/py3.7/invoke.txt
13:59:02  Collecting blessings==1.7
13:59:02    Using cached blessings-1.7-py3-none-any.whl (18 kB)
13:59:02  Collecting invoke==1.4.1
13:59:02    Using cached invoke-1.4.1-py3-none-any.whl (210 kB)
13:59:02  Collecting pyyaml==5.3.1
13:59:02    Using cached PyYAML-5.3.1.tar.gz (269 kB)
13:59:02  Collecting six==1.15.0
13:59:02    Using cached six-1.15.0-py2.py3-none-any.whl (10 kB)
13:59:02  Building wheels for collected packages: pyyaml
13:59:02    Building wheel for pyyaml (setup.py) ... - \ | / - \ | done
13:59:02    Created wheel for pyyaml: filename=PyYAML-5.3.1-cp37-cp37m-linux_x86_64.whl size=546391 sha256=e42e1d66cc32087f4d33ceb81268c86b59f1a97029b19459f91b8d6ad1430167
13:59:02    Stored in directory: /var/jenkins/.cache/pip/wheels/5e/03/1e/e1e954795d6f35dfc7b637fe2277bff021303bd9570ecea653
13:59:02  Successfully built pyyaml
13:59:02  Installing collected packages: six, pyyaml, invoke, blessings
13:59:02    Attempting uninstall: six
13:59:02      Found existing installation: six 1.16.0
13:59:02      Uninstalling six-1.16.0:
13:59:02  ERROR: Could not install packages due to an OSError: [Errno 2] No such file or directory: '/var/jenkins/.cache/pre-commit/repomw8oee1s/py_env-python3/lib/python3.7/site-packages/__pycache__/six.cpython-37.pyc'
13:59:02
13:59:02  nox > Command pip install --progress-bar=off -r requirements/static/ci/py3.7/invoke.txt failed with exit code 1
13:59:02  nox > Session invoke-pre-commit failed.
```
2021-05-27 09:32:39 -04:00
Pedro Algarvio
2ea5ad81a9 Compile the requirements 2021-05-05 06:48:41 -07:00
krionbsd
406f6a625f Update toml to 0.10.2 2021-01-16 17:31:58 -07:00
Pedro Algarvio
7efd60131b
Move CI static requirements to it's own subdirectory 2020-09-30 09:31:48 +01:00
Renamed from requirements/static/py3.9/lint.txt (Browse further)