Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[universal] Bump Python SDK versions #831

Merged
merged 7 commits into from
Nov 6, 2023
Merged

[universal] Bump Python SDK versions #831

Show file tree
Hide file tree
Changes from 4 commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
7d3d80f
Bump Python SDKs versions
alexander-smolyakov Nov 3, 2023
3de14df
[patch-conda] Remove outdated patches
alexander-smolyakov Nov 3, 2023
013b423
[patch-python] Remove outdated patches
alexander-smolyakov Nov 3, 2023
4b88409
Merge branch 'main' into universal-update_python
alexander-smolyakov Nov 6, 2023
236928a
[patch-python/patch-conda] Add `pip show` command
alexander-smolyakov Nov 6, 2023
72645b5
[test-utils] Update `checkPythonPackageVersion` function to make it g…
alexander-smolyakov Nov 6, 2023
de805d3
[patch-python] Rework `update_package` feature
alexander-smolyakov Nov 6, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions src/universal/.devcontainer/devcontainer.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -23,8 +23,8 @@
},
"./local-features/nvs": "latest",
"ghcr.io/devcontainers/features/python:1": {
"version": "3.10.8",
"additionalVersions": "3.9.16",
"version": "3.10.13",
"additionalVersions": "3.9.18",
"installJupyterlab": "true",
"configureJupyterlabAllowOrigin": "*",
"useOryxIfAvailable": "false"
Expand Down
6 changes: 0 additions & 6 deletions src/universal/.devcontainer/local-features/patch-conda/install.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -50,14 +50,8 @@ sudo_if /opt/conda/bin/python3 -m pip install --upgrade pip
# Temporary: Upgrade python packages due to security vulnerabilities
# They are installed by the conda feature and Conda distribution does not have the patches.

# pyopenssl should be updated to be compatible with latest version of cryptography
update_conda_package pyopenssl "23.2.0"

# https://github.com/advisories/GHSA-v8gr-m533-ghj9
update_python_package /opt/conda/bin/python3 cryptography "41.0.4"

# https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32681
update_conda_package requests "2.31.0"

# https://github.com/advisories/GHSA-v845-jxx5-vc9f
update_conda_package urllib3 "1.26.18"
4 changes: 0 additions & 4 deletions src/universal/.devcontainer/local-features/patch-python/install.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -42,7 +42,3 @@ update_package() {

# https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40897
update_package /usr/local/python/3.9.*/bin/python setuptools==65.5.1
update_package /usr/local/python/3.10.*/bin/python setuptools==68.0.0

# https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32681
update_package /usr/local/python/3.10.*/bin/python requests==2.31.0