Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore: update dependencies to fix dependabot findings #34

Merged
merged 1 commit into from
Jan 2, 2025
Merged

chore: update dependencies to fix dependabot findings #34

merged 1 commit into from
Jan 2, 2025

Conversation

JTaeuber
Copy link
Member

@JTaeuber JTaeuber commented Jan 2, 2025 •
edited
Loading

Motivation

Dependabot stated vulnerabilities with jinja2 in https://github.com/caas-team/new-pykube/security/dependabot/12 and https://github.com/caas-team/new-pykube/security/dependabot/13. This PR fixes this and updates all other dependencies while at it.

Changes

  • Updating certifi (2024.8.30 -> 2024.12.14)
  • Updating charset-normalizer (3.4.0 -> 3.4.1)
  • Updating urllib3 (2.2.3 -> 2.3.0)
  • Updating jinja2 (3.1.4 -> 3.1.5)
  • Updating identify (2.6.3 -> 2.6.4)
  • Updating coverage (7.6.9 -> 7.6.10)
  • Bumped version number to 25.1.0 for new release

Tests done

Ran the python tests.

TODO

  • I've assigned myself to this PR

@JTaeuber JTaeuber added fix dependencies Pull requests that update a dependency file labels Jan 2, 2025
@JTaeuber JTaeuber self-assigned this Jan 2, 2025
@github-actions GitHub Actions
Copy link

github-actions bot commented Jan 2, 2025

File Coverage
All files 99% ✅
__init__.py 100% ✅
test_api.py 100% ✅
test_config.py 98% ✅
test_console.py 100% ✅
test_http.py 100% ✅
test_httpclient.py 100% ✅
test_objects.py 100% ✅
test_query.py 100% ✅
test_session.py 100% ✅
test_utils.py 100% ✅
test_watch.py 100% ✅

Minimum allowed coverage is 70%

Generated by 🐒 cobertura-action against c3c53cb

jonathan-mayer
jonathan-mayer approved these changes Jan 2, 2025
View reviewed changes
Copy link
Member

@jonathan-mayer jonathan-mayer left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ok sure

@JTaeuber JTaeuber merged commit f283fe8 into main Jan 2, 2025
5 checks passed
@JTaeuber JTaeuber deleted the chore/UpdateDependencies branch January 2, 2025 10:09
Fovty
Fovty approved these changes Jan 2, 2025
View reviewed changes
Copy link
Member

@Fovty Fovty left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@jonathan-mayer jonathan-mayer jonathan-mayer approved these changes

@Fovty Fovty Fovty approved these changes

Assignees

@JTaeuber JTaeuber

Labels
dependencies Pull requests that update a dependency file fix
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@JTaeuber @Fovty @jonathan-mayer