Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

py3-google-api-core/2.21.0 package update #30401

Merged
merged 1 commit into from
Oct 9, 2024

Conversation

octo-sts[bot]
Copy link
Contributor

@octo-sts octo-sts bot commented Oct 9, 2024

Signed-off-by: wolfi-bot <121097084+wolfi-bot@users.noreply.github.com>
@octo-sts octo-sts bot added request-version-update request for a newer version of a package automated pr labels Oct 9, 2024
Copy link
Contributor

github-actions bot commented Oct 9, 2024

Package py3-google-api-core: Click to expand/collapse

Package py3-google-api-core:

.PKGINFO metadata:

  (
  	"""
  	# Generated by melange
  	pkgname = py3-google-api-core
- 	pkgver = 2.20.0-r0
+ 	pkgver = 2.21.0-r0
  	arch = x86_64
- 	size = 549240
+ 	size = 603781
  	origin = py3-google-api-core
  	pkgdesc = Google API client core library
  	url = 
- 	commit = 1720bc7fe9d8dd57c145c948bce0a9b93bc3614e
- 	builddate = 1726879781
+ 	commit = 7c57cffa80db0657ba3b7f8636e0c792e6621322
+ 	builddate = 1728481843
  	license = Apache-2.0
  	depend = py3-google-auth
  	... // 2 identical lines
  	depend = py3-requests
  	depend = python-3
- 	datahash = 3777f416c892cdb432da835b1a83cd4f75c662759a617a35423b32ace480d695
+ 	datahash = 99f4f0ef589328b24821239667b422854b3078340e5a6fd962daafd7feed6850
  	"""
  )

Added: /usr/lib/python3.12/site-packages/google/api_core/operations_v1/abstract_operations_base_client.py
Added: /usr/lib/python3.12/site-packages/google/api_core/operations_v1/operations_rest_client_async.py
Added: /usr/lib/python3.12/site-packages/google/api_core/operations_v1/pagers_async.py
Added: /usr/lib/python3.12/site-packages/google/api_core/operations_v1/pagers_base.py
Added: /usr/lib/python3.12/site-packages/google/api_core/operations_v1/transports/rest_asyncio.py
Added: /usr/lib/python3.12/site-packages/google_api_core-2.21.0.dist-info/LICENSE
Added: /usr/lib/python3.12/site-packages/google_api_core-2.21.0.dist-info/METADATA
Added: /usr/lib/python3.12/site-packages/google_api_core-2.21.0.dist-info/RECORD
Added: /usr/lib/python3.12/site-packages/google_api_core-2.21.0.dist-info/WHEEL
Added: /usr/lib/python3.12/site-packages/google_api_core-2.21.0.dist-info/top_level.txt
Modified: /usr/lib/python3.12/site-packages/google/api_core/client_info.py
Modified: /usr/lib/python3.12/site-packages/google/api_core/gapic_v1/client_info.py
Modified: /usr/lib/python3.12/site-packages/google/api_core/operations_v1/init.py
Modified: /usr/lib/python3.12/site-packages/google/api_core/operations_v1/abstract_operations_client.py
Modified: /usr/lib/python3.12/site-packages/google/api_core/operations_v1/pagers.py
Modified: /usr/lib/python3.12/site-packages/google/api_core/operations_v1/transports/init.py
Modified: /usr/lib/python3.12/site-packages/google/api_core/operations_v1/transports/base.py
Modified: /usr/lib/python3.12/site-packages/google/api_core/operations_v1/transports/rest.py
Modified: /usr/lib/python3.12/site-packages/google/api_core/rest_streaming_async.py
Modified: /usr/lib/python3.12/site-packages/google/api_core/version.py
Deleted: /usr/lib/python3.12/site-packages/google_api_core-2.20.0.dist-info/LICENSE
Deleted: /usr/lib/python3.12/site-packages/google_api_core-2.20.0.dist-info/METADATA
Deleted: /usr/lib/python3.12/site-packages/google_api_core-2.20.0.dist-info/RECORD
Deleted: /usr/lib/python3.12/site-packages/google_api_core-2.20.0.dist-info/WHEEL
Deleted: /usr/lib/python3.12/site-packages/google_api_core-2.20.0.dist-info/top_level.txt

malcontent found differences: Click to expand/collapse

Added: py3-google-api-core/usr/lib/python3.12/site-packages/google/api_core/operations_v1/pagers_base.py [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTP URLs http://www.apache.org/licenses/LICENSE-2.0

Added: py3-google-api-core/usr/lib/python3.12/site-packages/google/api_core/operations_v1/operations_rest_client_async.py [🔥 HIGH]

RISK KEY DESCRIPTION EVIDENCE
+HIGH admin/pip_install Installs software using pip from python pip install google-api-core
+LOW ref/site/url contains embedded HTTPS URLs googleapis/python-api-core#722

Added: py3-google-api-core/usr/lib/python3.12/site-packages/google/api_core/operations_v1/abstract_operations_base_client.py [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTP URLs http://www.apache.org/licenses/LICENSE-2.0

Added: py3-google-api-core/usr/lib/python3.12/site-packages/google/api_core/operations_v1/transports/rest_asyncio.py [🔥 HIGH]

RISK KEY DESCRIPTION EVIDENCE
+HIGH admin/pip_install Installs software using pip from python pip install google-api-core
+LOW encoding/json/decode Decodes JSON messages json.loads
+LOW fd/read reads from a file handle response.read()
+LOW net/http/request makes HTTP requests HTTP/1.
+LOW ref/site/url contains embedded HTTPS URLs googleapis/python-api-core#708
googleapis/python-api-core#709
googleapis/python-api-core#715
googleapis/python-api-core#716
googleapis/python-api-core#717
googleapis/python-api-core#718
googleapis/python-api-core#720
googleapis/python-api-core#721
googleapis/python-api-core#722
googleapis/python-api-core#725

Added: py3-google-api-core/usr/lib/python3.12/site-packages/google/api_core/operations_v1/pagers_async.py [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTP URLs http://www.apache.org/licenses/LICENSE-2.0

Changed: /tmp/wolfictl-apk-200214505/py3-google-api-core/usr/lib/python3.12/site-packages/google/api_core/rest_streaming_async.py [✅ LOW → 🔥 HIGH]

1 new behaviors

RISK KEY DESCRIPTION EVIDENCE
+HIGH admin/pip_install Installs software using pip from python pip install google-api-core

Moved: py3-google-api-core/var/lib/db/sbom/py3-google-api-core-2.20.0-r0.spdx.json -> /tmp/wolfictl-apk-200214505/py3-google-api-core/var/lib/db/sbom/py3-google-api-core-2.21.0-r0.spdx.json (similarity: 0.99)

@octo-sts octo-sts bot added bincapz/pass bincapz/pass Bincapz (aka. malcontent) scan didn't detect any CRITICALs on the scanned packages. tests/missing labels Oct 9, 2024
@mamccorm mamccorm merged commit b372f3f into main Oct 9, 2024
15 checks passed
@mamccorm mamccorm deleted the wolfictl-ec87159e-a318-4f92-8100-07f008fcf901 branch October 9, 2024 16:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
automated pr bincapz/pass bincapz/pass Bincapz (aka. malcontent) scan didn't detect any CRITICALs on the scanned packages. request-version-update request for a newer version of a package tests/missing
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants