Skip to content

Commit bb05fd4

Browse files
ArBridgemanArBridgeman
authored
Security/578 resolve vulnerabilities and update dependencies (#579)
* Resolve CVE-2024-12797 for cryptography and CVE-2025-8869 for pip by updating lock file * Update Exasol DB versions to use in tests * Update actions/checkout to v5 * Update actions/download-artifact to v6 * Update actions/upload-artifact to v5 * Prepare release 1.11.0 * Add recommendation to switch to README.rst * Modify PTB exasol_version to just one and modify template to use it when creating file * Update to today's date * Set DBs to latest provided in ITDE. Newer versions upcoming.
1 parent 10dbd4f commit bb05fd4

29 files changed

+954
-617
lines changed

‎.github/actions/security-issues/action.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -39,7 +39,7 @@ runs:
3939
- name: Install Python Toolbox / Security tool
4040
shell: bash
4141
run: |
42-
pip install exasol-toolbox==1.10.0
42+
pip install exasol-toolbox==1.11.0
4343
4444
- name: Create Security Issue Report
4545
shell: bash

‎.github/workflows/build-and-publish.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ jobs:
1515
contents: write
1616
steps:
1717
- name: SCM Checkout
18-
uses: actions/checkout@v4
18+
uses: actions/checkout@v5
1919

2020
- name: Setup Python & Poetry Environment
2121
uses: ./.github/actions/python-environment

‎.github/workflows/check-release-tag.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ jobs:
1212
contents: read
1313
steps:
1414
- name: SCM Checkout
15-
uses: actions/checkout@v4
15+
uses: actions/checkout@v5
1616

1717
- name: Setup Python & Poetry Environment
1818
uses: ./.github/actions/python-environment

‎.github/workflows/checks.yml‎

Lines changed: 12 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ jobs:
1111
contents: read
1212
steps:
1313
- name: SCM Checkout
14-
uses: actions/checkout@v4
14+
uses: actions/checkout@v5
1515
with:
1616
fetch-depth: 0
1717

@@ -29,7 +29,7 @@ jobs:
2929
contents: read
3030
steps:
3131
- name: SCM Checkout
32-
uses: actions/checkout@v4
32+
uses: actions/checkout@v5
3333

3434
- name: Setup Python & Poetry Environment
3535
uses: ./.github/actions/python-environment
@@ -56,7 +56,7 @@ jobs:
5656
if: ${{ github.ref != 'refs/heads/main' && github.ref != 'refs/heads/master' }}
5757
steps:
5858
- name: SCM Checkout
59-
uses: actions/checkout@v4
59+
uses: actions/checkout@v5
6060

6161
- name: Setup Python & Poetry Environment
6262
uses: ./.github/actions/python-environment
@@ -75,7 +75,7 @@ jobs:
7575
matrix: ${{ fromJson(needs.build-matrix.outputs.matrix) }}
7676
steps:
7777
- name: SCM Checkout
78-
uses: actions/checkout@v4
78+
uses: actions/checkout@v5
7979

8080
- name: Setup Python & Poetry Environment
8181
uses: ./.github/actions/python-environment
@@ -86,7 +86,7 @@ jobs:
8686
run: poetry run -- nox -s lint:code
8787

8888
- name: Upload Artifacts
89-
uses: actions/upload-artifact@v4.6.2
89+
uses: actions/upload-artifact@v5
9090
with:
9191
name: lint-python${{ matrix.python-version }}
9292
path: |
@@ -106,7 +106,7 @@ jobs:
106106

107107
steps:
108108
- name: SCM Checkout
109-
uses: actions/checkout@v4
109+
uses: actions/checkout@v5
110110

111111
- name: Setup Python & Poetry Environment
112112
uses: ./.github/actions/python-environment
@@ -128,7 +128,7 @@ jobs:
128128

129129
steps:
130130
- name: SCM Checkout
131-
uses: actions/checkout@v4
131+
uses: actions/checkout@v5
132132

133133
- name: Setup Python & Poetry Environment
134134
uses: ./.github/actions/python-environment
@@ -139,7 +139,7 @@ jobs:
139139
run: poetry run -- nox -s lint:security
140140

141141
- name: Upload Artifacts
142-
uses: actions/upload-artifact@v4.6.2
142+
uses: actions/upload-artifact@v5
143143
with:
144144
name: security-python${{ matrix.python-version }}
145145
path: .security.json
@@ -152,7 +152,7 @@ jobs:
152152
contents: read
153153
steps:
154154
- name: SCM Checkout
155-
uses: actions/checkout@v4
155+
uses: actions/checkout@v5
156156

157157
- name: Setup Python & Poetry Environment
158158
uses: ./.github/actions/python-environment
@@ -168,7 +168,7 @@ jobs:
168168
contents: read
169169
steps:
170170
- name: SCM Checkout
171-
uses: actions/checkout@v4
171+
uses: actions/checkout@v5
172172

173173
- name: Setup Python & Poetry Environment
174174
uses: ./.github/actions/python-environment
@@ -188,7 +188,7 @@ jobs:
188188

189189
steps:
190190
- name: SCM Checkout
191-
uses: actions/checkout@v4
191+
uses: actions/checkout@v5
192192
# The PTB has unit tests which require the fetch-depth to be 0.
193193
with:
194194
fetch-depth: 0
@@ -202,7 +202,7 @@ jobs:
202202
run: poetry run -- nox -s test:unit -- --coverage
203203

204204
- name: Upload Artifacts
205-
uses: actions/upload-artifact@v4.6.2
205+
uses: actions/upload-artifact@v5
206206
with:
207207
name: coverage-python${{ matrix.python-version }}-fast
208208
path: .coverage

‎.github/workflows/gh-pages.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ jobs:
1212
contents: read
1313
steps:
1414
- name: SCM Checkout
15-
uses: actions/checkout@v4
15+
uses: actions/checkout@v5
1616
with:
1717
fetch-depth: 0
1818

‎.github/workflows/matrix-all.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ jobs:
1414
contents: read
1515
steps:
1616
- name: SCM Checkout
17-
uses: actions/checkout@v4
17+
uses: actions/checkout@v5
1818

1919
- name: Setup Python & Poetry Environment
2020
uses: ./.github/actions/python-environment

‎.github/workflows/matrix-exasol.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ jobs:
1414
contents: read
1515
steps:
1616
- name: SCM Checkout
17-
uses: actions/checkout@v4
17+
uses: actions/checkout@v5
1818

1919
- name: Setup Python & Poetry Environment
2020
uses: ./.github/actions/python-environment

‎.github/workflows/matrix-python.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ jobs:
1414
contents: read
1515
steps:
1616
- name: SCM Checkout
17-
uses: actions/checkout@v4
17+
uses: actions/checkout@v5
1818

1919
- name: Setup Python & Poetry Environment
2020
uses: ./.github/actions/python-environment

‎.github/workflows/report.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -14,15 +14,15 @@ jobs:
1414

1515
steps:
1616
- name: SCM Checkout
17-
uses: actions/checkout@v4
17+
uses: actions/checkout@v5
1818
with:
1919
fetch-depth: 0
2020

2121
- name: Setup Python & Poetry Environment
2222
uses: ./.github/actions/python-environment
2323

2424
- name: Download Artifacts
25-
uses: actions/download-artifact@v5.0.0
25+
uses: actions/download-artifact@v6
2626
with:
2727
path: ./artifacts
2828

@@ -41,7 +41,7 @@ jobs:
4141
run: poetry run -- nox -s project:report -- --format json | tee metrics.json
4242

4343
- name: Upload Artifacts
44-
uses: actions/upload-artifact@v4.6.2
44+
uses: actions/upload-artifact@v5
4545
with:
4646
name: metrics.json
4747
path: metrics.json

‎.github/workflows/slow-checks.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ jobs:
2424

2525
steps:
2626
- name: SCM Checkout
27-
uses: actions/checkout@v4
27+
uses: actions/checkout@v5
2828

2929
- name: Setup Python & Poetry Environment
3030
uses: ./.github/actions/python-environment
@@ -35,7 +35,7 @@ jobs:
3535
run: poetry run -- nox -s test:integration -- --coverage --db-version ${{ matrix.exasol-version }}
3636

3737
- name: Upload Artifacts
38-
uses: actions/upload-artifact@v4.6.2
38+
uses: actions/upload-artifact@v5
3939
with:
4040
name: coverage-python${{ matrix.python-version }}-slow
4141
path: .coverage
@@ -65,7 +65,7 @@ jobs:
6565

6666
steps:
6767
- name: SCM Checkout
68-
uses: actions/checkout@v4
68+
uses: actions/checkout@v5
6969

7070
- name: Set up Python & Poetry Environment
7171
uses: ./.github/actions/python-environment

0 commit comments

Comments
 (0)