Merge ~jugmac00/lpci:update-deps into lpci:main

Proposed by Jürgen Gmach
Status: Merged
Merged at revision: df444ba13f0a310daf66de4049cc0eb941daff87
Proposed branch: ~jugmac00/lpci:update-deps
Merge into: lpci:main
Diff against target: 123 lines (+21/-16)
3 files modified
NEWS.rst (+4/-1)
lpci/providers/tests/test_buildd.py (+1/-1)
requirements.txt (+16/-14)
Reviewer Review Type Date Requested Status
Ines Almeida Approve
Clinton Fung Approve
Review via email: mp+443435@code.launchpad.net

Commit message

Update Python dependencies

To post a comment you must log in.
Revision history for this message
Clinton Fung (clinton-fung) :
review: Approve
Revision history for this message
Ines Almeida (ines-almeida) :
review: Approve

Preview Diff

[H/L] Next/Prev Comment, [J/K] Next/Prev File, [N/P] Next/Prev Hunk
1diff --git a/NEWS.rst b/NEWS.rst
2index b6e37c7..5258278 100644
3--- a/NEWS.rst
4+++ b/NEWS.rst
5@@ -2,11 +2,14 @@
6 Version history
7 ===============
8
9-0.1.3 (unreleased)
10+0.2.0 (unreleased)
11 ==================
12
13 - Add support for non-LTS devel release, which is currently mantic.
14
15+- Update Python dependencies, especially `Cryptography`, see CVE-2023-0286 and
16+ CVE-2023-23931.
17+
18 0.1.2 (2023-05-02)
19 ==================
20
21diff --git a/lpci/providers/tests/test_buildd.py b/lpci/providers/tests/test_buildd.py
22index 47d4ea8..cb6dd58 100644
23--- a/lpci/providers/tests/test_buildd.py
24+++ b/lpci/providers/tests/test_buildd.py
25@@ -2,7 +2,7 @@
26 # GNU General Public License version 3 (see the file LICENSE).
27
28 import pytest
29-from craft_providers.bases.buildd import BuilddBaseAlias
30+from craft_providers.bases.ubuntu import BuilddBaseAlias
31 from testtools import TestCase
32
33 from lpci.providers._buildd import LPCIBuilddBaseConfiguration
34diff --git a/requirements.txt b/requirements.txt
35index 8a8ca35..9d226a8 100644
36--- a/requirements.txt
37+++ b/requirements.txt
38@@ -4,7 +4,7 @@
39 #
40 # pip-compile
41 #
42-certifi==2022.12.7
43+certifi==2023.5.7
44 # via requests
45 cffi==1.15.1
46 # via cryptography
47@@ -12,21 +12,21 @@ charset-normalizer==3.1.0
48 # via requests
49 craft-cli==1.2.0
50 # via -r requirements.in
51-craft-providers==1.8.1
52+craft-providers==1.12.0
53 # via -r requirements.in
54-cryptography==39.0.0
55+cryptography==40.0.2
56 # via secretstorage
57 distro==1.8.0
58 # via lazr-restfulclient
59-httplib2==0.21.0
60+httplib2==0.22.0
61 # via
62 # launchpadlib
63 # lazr-restfulclient
64 idna==3.4
65 # via requests
66-importlib-metadata==6.0.0
67+importlib-metadata==6.6.0
68 # via keyring
69-importlib-resources==5.10.2
70+importlib-resources==5.12.0
71 # via keyring
72 jaraco-classes==3.2.3
73 # via keyring
74@@ -44,17 +44,17 @@ lazr-uri==1.0.6
75 # via
76 # launchpadlib
77 # wadllib
78-more-itertools==9.0.0
79+more-itertools==9.1.0
80 # via jaraco-classes
81 oauthlib==3.2.2
82 # via lazr-restfulclient
83-platformdirs==3.1.1
84+platformdirs==3.5.1
85 # via craft-cli
86 pluggy==1.0.0
87 # via -r requirements.in
88 pycparser==2.21
89 # via cffi
90-pydantic==1.10.6
91+pydantic==1.10.7
92 # via
93 # -r requirements.in
94 # craft-cli
95@@ -68,7 +68,7 @@ pyyaml==6.0
96 # -r requirements.in
97 # craft-cli
98 # craft-providers
99-requests==2.28.2
100+requests==2.31.0
101 # via requests-unixsocket
102 requests-unixsocket==0.3.0
103 # via craft-providers
104@@ -78,13 +78,15 @@ six==1.16.0
105 # via
106 # launchpadlib
107 # lazr-restfulclient
108-typing-extensions==4.5.0
109+typing-extensions==4.6.0
110 # via pydantic
111-urllib3==1.26.15
112- # via requests
113+urllib3==1.26.16
114+ # via
115+ # craft-providers
116+ # requests
117 wadllib==1.3.6
118 # via lazr-restfulclient
119-zipp==3.11.0
120+zipp==3.15.0
121 # via
122 # importlib-metadata
123 # importlib-resources

Subscribers

People subscribed via source and target branches