Skip to content

Commit 9d0e8c1

Browse files
committed
Update python dependencies
- Bump openshift 0.12 to 0.13 - Skip pipenv check for pyup-45114 https://nvd.nist.gov/vuln/detail/CVE-2021-29923 This CVE is filed against k8s on Golang < 1.17 and is attached to this lib because python-kubernetes uses the Kubernetes API. Signed-off-by: Austin Macdonald <[email protected]>
1 parent 0674d68 commit 9d0e8c1

File tree

5 files changed

+198
-232
lines changed

5 files changed

+198
-232
lines changed

images/ansible-operator-2.11-preview/Pipfile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ name = "pypi"
77
ansible-runner = "~=1.4.7"
88
ansible-runner-http = "==1.0.0"
99
ipaddress = "==1.0.23"
10-
openshift = "~=0.12.0"
10+
openshift = "~=0.13.0"
1111
jmespath = "==0.10.0"
1212
# cryptography needs to be pinned to 3.3.2 as this is the last version
1313
# before its setup requires rust, which is not available via RPM in the

images/ansible-operator-2.11-preview/base.Dockerfile

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -32,8 +32,9 @@ RUN yum clean all && rm -rf /var/cache/yum/* \
3232
&& yum install -y libffi-devel openssl-devel python38-devel gcc python38-pip python38-setuptools \
3333
&& pip3 install --upgrade pip~=21.1.0 \
3434
&& pip3 install pipenv==2022.1.8 \
35+
&& pipenv lock \
3536
&& pipenv install --deploy \
36-
&& pipenv check \
37+
&& pipenv check -i 45114 \
3738
&& yum remove -y gcc libffi-devel openssl-devel python38-devel \
3839
&& yum clean all \
3940
&& rm -rf /var/cache/yum

images/ansible-operator/Pipfile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ name = "pypi"
77
ansible-runner = "~=2.0.2"
88
ansible-runner-http = "~=1.0.0"
99
ipaddress = "==1.0.23"
10-
openshift = "~=0.12.0"
10+
openshift = "~=0.13.0"
1111
ansible = "~=2.9.15"
1212
jmespath = "==0.10.0"
1313
# cryptography needs to be pinned to 3.3.2 as this is the last version

0 commit comments

Comments
 (0)