Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

⬆️ [maykinmedia/open-api-framework#93] Security updates #313

Open
wants to merge 3 commits into
base: master
Choose a base branch
from

Conversation

stevenbal
Copy link
Collaborator

@stevenbal stevenbal commented Jan 3, 2025

Requires maykinmedia/open-api-workflows#8 to be merged

Fixes maykinmedia/open-api-framework#93 partially
Fixes maykinmedia/open-api-framework#81 partially

Changes

  • Replace pip-compile with uv
  • Security updates

@stevenbal stevenbal force-pushed the issue/security-updates branch from 1b3310f to 4fe0d18 Compare January 3, 2025 09:52
Copy link
Contributor

@Coperh Coperh left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks fine, but oaf-check.yml is run on PRs in open-klant which might become a problem. So it should be removed before merging.

because the action now creates PRs, which might result in a loop
@stevenbal stevenbal requested a review from Coperh January 6, 2025 08:23
set -ex

command -v uv || (echo "uv not found on PATH. Install it https://astral.sh/uv" >&2 && exit 1)

cwd="${PWD}"
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Comment on lines +1 to +3
-c ci.txt
-r ci.txt

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Bump third party library versions to fix security issues Use UV in the compile_dependencies scripts
3 participants