Fixed many dependabot warnings (#89)

MarleneKress79789 · web-flow · commit 215f8e78c097 · 2024-02-19T12:00:45.000-03:00
diff --git a/doc/changes/changes_0.2.0.md b/doc/changes/changes_0.2.0.md
@@ -29,4 +29,5 @@ n/a
 ## Security
 
  - #77: Update Ubuntu packages and added `cloudformation:ListStacks` to the roles for the CI runs
+ - #88: Updated many dependencies in poetry.lock file for security reason (Ansible and ansible-core not updated because it requires python version change)
 
diff --git a/exasol_script_languages_developer_sandbox/runtime/ansible/roles/docker/defaults/main.yml b/exasol_script_languages_developer_sandbox/runtime/ansible/roles/docker/defaults/main.yml
@@ -1,6 +1,6 @@
 ---
 
 apt_dependencies:
-  - apt-transport-https=2.0.9
+  - apt-transport-https=2.0.10
   - ca-certificates=20230311ubuntu0.20.04.1
-  - software-properties-common=0.99.9.11
+  - software-properties-common=0.99.9.12
diff --git a/exasol_script_languages_developer_sandbox/runtime/ansible/roles/jupyter/files/requirements_jupyter.txt b/exasol_script_languages_developer_sandbox/runtime/ansible/roles/jupyter/files/requirements_jupyter.txt
@@ -1,4 +1,4 @@
-jupyterlab==3.4.3
+jupyterlab==3.6.7
 # enable interactive Javascript widgets in the notebooks
 ipywidgets==7.7.1
 pexpect==4.8.0
diff --git a/exasol_script_languages_developer_sandbox/runtime/ansible/roles/jupyter/tasks/motd.yml b/exasol_script_languages_developer_sandbox/runtime/ansible/roles/jupyter/tasks/motd.yml
@@ -12,7 +12,7 @@
   set_fact:
     jupyter_server_hashed_password: "{{ jupyter_server_config_jsondata | json_query(password_query) }}"
   vars:
-    password_query: 'ServerApp.password'
+    password_query: 'IdentityProvider.hashed_password'
 
 - name: Put motd python script in place
   ansible.builtin.template:
diff --git a/exasol_script_languages_developer_sandbox/runtime/ansible/roles/jupyter/templates/etc/update-motd.d/999-jupyter b/exasol_script_languages_developer_sandbox/runtime/ansible/roles/jupyter/templates/etc/update-motd.d/999-jupyter
@@ -14,7 +14,7 @@ server_config_file = pathlib.Path("{{jupyter_server_config_file}}")
 
 if server_config_file.exists():
     with open(server_config_file) as f:
-        hashed_server_password = json.load(f)["ServerApp"]["password"]
+        hashed_server_password = json.load(f)["IdentityProvider"]["hashed_password"]
     # server_hashed_password was set by ansible (see motd.yml)
     if hashed_server_password == "{{jupyter_server_hashed_password}}":
         print(motd_message)
diff --git a/exasol_script_languages_developer_sandbox/runtime/ansible/roles/poetry/defaults/main.yml b/exasol_script_languages_developer_sandbox/runtime/ansible/roles/poetry/defaults/main.yml
@@ -1,6 +1,6 @@
 ---
 
 apt_dependencies:
-  - curl=7.68.0-1ubuntu2.18
-  - python3.8-venv=3.8.10-0ubuntu1~20.04.8
-  - python3-pip=20.0.2-5ubuntu1.9
+  - curl=7.68.0-1ubuntu2.21
+  - python3.8-venv=3.8.10-0ubuntu1~20.04.9
+  - python3-pip=20.0.2-5ubuntu1.10
diff --git a/poetry.lock b/poetry.lock
diff --git a/test/test_motd_jupyter_template.py b/test/test_motd_jupyter_template.py
@@ -40,8 +40,8 @@ def test_motd_jupyter_template_prints_password_message(motd_file):
     """
     python_file, jupyter_server_config_file = motd_file
     mock_data = {
-        "ServerApp": {
-        "password": "dummy_password_hash"
+        "IdentityProvider": {
+        "hashed_password": "dummy_password_hash"
         }
     }
     with open(jupyter_server_config_file, "w") as f:
@@ -58,8 +58,8 @@ def test_motd_jupyter_template_prints_password_message_not_if_passward_was_chang
     """
     python_file, jupyter_server_config_file = motd_file
     mock_data = {
-        "ServerApp": {
-        "password": "NOT_MATCHING_PASSWORD"
+        "IdentityProvider": {
+        "hashed_password": "NOT_MATCHING_PASSWORD"
         }
     }
     with open(jupyter_server_config_file, "w") as f:

Original file line number	Diff line number	Diff line change
`@@ -29,4 +29,5 @@ n/a`
`29`	`29`	`## Security`
`30`	`30`
`31`	`31`	- #77: Update Ubuntu packages and added `cloudformation:ListStacks` to the roles for the CI runs
	`32`	`+ - #88: Updated many dependencies in poetry.lock file for security reason (Ansible and ansible-core not updated because it requires python version change)`
`32`	`33`
Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-jupyterlab==3.4.3`
	`1`	`+jupyterlab==3.6.7`
`2`	`2`	`# enable interactive Javascript widgets in the notebooks`
`3`	`3`	`ipywidgets==7.7.1`
`4`	`4`	`pexpect==4.8.0`
Original file line number	Diff line number	Diff line change
`@@ -40,8 +40,8 @@ def test_motd_jupyter_template_prints_password_message(motd_file):`
`40`	`40`	`"""`
`41`	`41`	`python_file, jupyter_server_config_file = motd_file`
`42`	`42`	`mock_data = {`
`43`		`- "ServerApp": {`
`44`		`- "password": "dummy_password_hash"`
	`43`	`+ "IdentityProvider": {`
	`44`	`+ "hashed_password": "dummy_password_hash"`
`45`	`45`	`}`
`46`	`46`	`}`
`47`	`47`	`with open(jupyter_server_config_file, "w") as f:`
`@@ -58,8 +58,8 @@ def test_motd_jupyter_template_prints_password_message_not_if_passward_was_chang`
`58`	`58`	`"""`
`59`	`59`	`python_file, jupyter_server_config_file = motd_file`
`60`	`60`	`mock_data = {`
`61`		`- "ServerApp": {`
`62`		`- "password": "NOT_MATCHING_PASSWORD"`
	`61`	`+ "IdentityProvider": {`
	`62`	`+ "hashed_password": "NOT_MATCHING_PASSWORD"`
`63`	`63`	`}`
`64`	`64`	`}`
`65`	`65`	`with open(jupyter_server_config_file, "w") as f:`