Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

MINOR: Removed stale examples. Update dependencies #15951

Merged
merged 2 commits into from
Apr 18, 2024

Conversation

IceS2
Copy link
Contributor

@IceS2 IceS2 commented Apr 18, 2024

Describe your changes:

Updated dependencies to address some reported secvul.

DONE

  • Update avro python package to 1.11.3 (avoid 1.11.2)
  • Remove okta
  • Remove ldap-users
  • Update Cryptography to 42.0.0

TODO

  • Update delta-spark to 3.1
    • Needs testing to understand what it might have changed. This could help diminish the Pyspark vulnerabilities that keep appearing
  • Update sqlparse to 0.5

NOTES

  • Debian related issues not tackled here
  • Pyspark related issues not tackled here
  • There are a few reported issues that come from airflow 2.9 dependencies but we use airflow 2.7.

Type of change:

  • Improvement

Checklist:

  • I have read the CONTRIBUTING document.
  • My PR title is Fixes <issue-number>: <short explanation>
  • I have commented on my code, particularly in hard-to-understand areas.
  • For JSON Schema changes: I updated the migration scripts or explained why it is not needed.

@IceS2 IceS2 requested a review from a team as a code owner April 18, 2024 14:50
@github-actions github-actions bot added Ingestion safe to test Add this label to run secure Github workflows on PRs labels Apr 18, 2024
Copy link
Contributor

JSON/YAML Validations failed.

Please run ./scripts/validate_json_yaml.sh to find any bad json/yaml files and fix them.
You can also use pre-commit to automate the Python code formatting.

You can install the pre-commit hooks with make install_test precommit_install.

Copy link
Contributor

JSON/YAML Validations failed.

Please run ./scripts/validate_json_yaml.sh to find any bad json/yaml files and fix them.
You can also use pre-commit to automate the Python code formatting.

You can install the pre-commit hooks with make install_test precommit_install.

Copy link
Contributor

JSON/YAML Validations failed.

Please run ./scripts/validate_json_yaml.sh to find any bad json/yaml files and fix them.
You can also use pre-commit to automate the Python code formatting.

You can install the pre-commit hooks with make install_test precommit_install.

Copy link

Quality Gate Passed Quality Gate passed for 'open-metadata-ingestion'

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarCloud

@pmbrull pmbrull merged commit fd51df2 into open-metadata:main Apr 18, 2024
11 of 12 checks passed
@IceS2 IceS2 deleted the assess-secvul branch April 18, 2024 15:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Ingestion safe to test Add this label to run secure Github workflows on PRs
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants