Skip to content

Commit

Permalink
[bump] Ledgerblue version
Browse files Browse the repository at this point in the history
  • Loading branch information
@lpascal-ledger
lpascal-ledger committed May 21, 2024
1 parent b72eadb commit 2db665e
Show file tree
Hide file tree
Showing 2 changed files with 14 additions and 9 deletions.
21 changes: 13 additions & 8 deletions CHANGELOG.md
View file
Original file line number Diff line number Diff line change
Expand Up @@ -5,11 +5,16 @@ All notable changes to this project will be documented in this file.
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

## [3.24.0] - 2024-05-21

### Changed
- lite: Bump Ledgerblue version to 0.1.54

## [3.23.0] - 2024-05-15

### Changed
- Bump all devices SDK version
- dev-tools: Bump ragger version to 1.19.0 and Speculos to 0.9.1 (enabling Flex swipe)
- dev-tools: Bump Ragger version to 1.19.0 and Speculos to 0.9.1 (enabling Flex swipe)

## [3.22.1] - 2024-05-15

Expand All @@ -30,33 +35,33 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0

### Changed
- Bump Flex SDK version
- dev-tools: Bump ragger version to 1.18.0 (enabling Flex testing) and Speculos to 0.8.6
- dev-tools: Bump Ragger version to 1.18.0 (enabling Flex testing) and Speculos to 0.8.6

## [3.19.0] - 2024-04-03

### Added
- Flex target

### Changed
- dev-tools: Bump ragger version to 1.16+
- dev-tools: Bump Ragger version to 1.16+

## [3.18.0] - 2024-03-27

### Changed
- Bump SDK versions with last patchs
- dev-tools: Bump ragger version to 1.16.0
- dev-tools: Bump Ragger version to 1.16.0

## [3.17.0] - 2024-02-21

### Changed
- Bump Stax SDK version to target stax_1.4.0-rc2
- Bump SDK version with last patchs
- dev-tools: Bump ragger version to 1.14.4
- dev-tools: Bump Ragger version to 1.14.4

## [3.16.1] - 2024-02-09

### Changed
- [dev-tools] : specify latest version of ragger.
- [dev-tools] : specify latest version of Ragger.

## [3.16.0] - 2024-02-08

Expand Down Expand Up @@ -105,7 +110,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
## [3.11.1] - 2024-01-03

### Changed
- Bump tj-actions/changed-files from 33 to 41 in /.github/workflows
- Bump tj-actions/changed-files from 33 to 41 in .github/workflows

## [3.11.0] - 2023-12-11

Expand Down Expand Up @@ -205,7 +210,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
## [3.2.6] - 2023-08-02

### Changed
- Use directly pypi.org instead of test.pypi.org for ragger
- Use directly pypi.org instead of test.pypi.org for Ragger

## [3.2.5] - 2023-07-28

Expand Down
2 changes: 1 addition & 1 deletion lite/Dockerfile
View file
Original file line number Diff line number Diff line change
Expand Up @@ -63,7 +63,7 @@ RUN apk add -t python_build_deps eudev-dev \
RUN pip3 install 'Cython<3'

# Python package to load app onto device
RUN pip3 install ledgerblue tomli-w
RUN pip3 install "ledgerblue==0.1.54" tomli-w

Check warning on line 66 in lite/Dockerfile

View check run for this annotation

Ledger Wiz (CSPM & secret detection) / Wiz IaC Scanner

Pip install keeping cached packages 

Rule ID: 825ae084-a21d-4595-9378-0b5b9edbc4d1
Severity: Medium
Resource: FROM={{alpine:3.15}}.{{pip3 install "ledgerblue==0.1.54" tomli-w}}

When installing packages with pip, the '--no-cache-dir' flag should be set to make Docker images smaller
Raw output 
Expected: The '--no-cache-dir' flag should be set when running 'pip/pip3 install'
Found: The '--no-cache-dir' flag isn't set when running 'pip/pip3 install'

Check warning on line 66 in lite/Dockerfile

View check run for this annotation

Ledger Wiz (CSPM & secret detection) / Wiz IaC Scanner

Unpinned Package Version in Pip Install 

Rule ID: c9d92d07-9951-4503-8875-7c96f04359ad
Severity: Medium
Resource: FROM={{alpine:3.15}}.{{RUN pip3 install "ledgerblue==0.1.54" tomli-w}}

Package version pinning reduces the range of versions that can be installed, reducing the chances of failure due to unanticipated changes
Raw output 
Expected: RUN instruction with 'pip/pip3 install <package>' should use package pinning form 'pip/pip3 install <package>=<version>'
Found: RUN instruction pip3 install "ledgerblue==0.1.54" tomli-w does not use package pinning form

ARG GIT_SERVER=https://github.com/LedgerHQ

Expand Down

0 comments on commit 2db665e

Please sign in to comment.