Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk + GH Actions] Update requirements #578

Closed
wants to merge 1 commit into from

Conversation

nickumia-reisys
Copy link
Contributor

Update requirements

  • Updated requirements.in + requirements.txt
  • Auto-generated by snyk.yml

requirements.txt Outdated
cryptography==39.0.1
cryptography==40.0.1
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Seems questionable...

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This one is more concerning, as I know we've had trouble with crypto and authenticating with the s3 bucket... I would deploy this to dev and test run the sitemap command to see if there are any failures. https://cryptography.io/en/latest/changelog/#v40-0-0

requirements.txt Outdated
ckanext-envvars==0.0.2
ckanext-envvars==0.0.3
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What? How? ... uhh, oh...😌 just CKAN 2.10 support: https://github.com/okfn/ckanext-envvars/releases/tag/v0.0.3

requirements.txt Outdated
Comment on lines 94 to 96
watchdog==2.2.1
watchdog==3.0.0
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Also seems suspicious..

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

robert-bryson
robert-bryson previously approved these changes Mar 30, 2023
@nickumia-reisys
Copy link
Contributor Author

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants