From 27b82c9fb14019528bb5c288bf6989dfbdeaabe8 Mon Sep 17 00:00:00 2001 From: Ramon Perez Date: Tue, 19 Dec 2023 23:11:43 +0000 Subject: [PATCH 1/3] Create readme-micro.yaml --- .github/workflows/readme-micro.yaml | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) create mode 100644 .github/workflows/readme-micro.yaml diff --git a/.github/workflows/readme-micro.yaml b/.github/workflows/readme-micro.yaml new file mode 100644 index 0000000000..451e48c282 --- /dev/null +++ b/.github/workflows/readme-micro.yaml @@ -0,0 +1,21 @@ +name: ReadMe Micro + +# Run workflow for every push to the `master` branch +on: + push: + branches: [master] + pull_request: + branches: [master] +jobs: + sync: + runs-on: ubuntu-latest + steps: + - name: Checkout this repo + uses: actions/checkout@v3 + + # Run GitHub Action to sync all OpenAPI files in the repo + - name: GitHub Action + uses: readmeio/readme-micro@v2 + + with: + readme-micro: "'**/*.{yaml,yml,json}' --key=${{ secrets.README_MICRO_SECRET }}" From 1d7b3469091aa519107f8ef230a80153dd207388 Mon Sep 17 00:00:00 2001 From: Ramon Perez Date: Wed, 20 Dec 2023 11:55:05 +1100 Subject: [PATCH 2/3] readme test deleted --- .github/workflows/readme-micro.yaml | 21 --------------------- 1 file changed, 21 deletions(-) delete mode 100644 .github/workflows/readme-micro.yaml diff --git a/.github/workflows/readme-micro.yaml b/.github/workflows/readme-micro.yaml deleted file mode 100644 index 451e48c282..0000000000 --- a/.github/workflows/readme-micro.yaml +++ /dev/null @@ -1,21 +0,0 @@ -name: ReadMe Micro - -# Run workflow for every push to the `master` branch -on: - push: - branches: [master] - pull_request: - branches: [master] -jobs: - sync: - runs-on: ubuntu-latest - steps: - - name: Checkout this repo - uses: actions/checkout@v3 - - # Run GitHub Action to sync all OpenAPI files in the repo - - name: GitHub Action - uses: readmeio/readme-micro@v2 - - with: - readme-micro: "'**/*.{yaml,yml,json}' --key=${{ secrets.README_MICRO_SECRET }}" From 869526723c7b2f8baba47338521a80579cb800c6 Mon Sep 17 00:00:00 2001 From: Ramon Perez Date: Thu, 3 Oct 2024 22:57:02 +1000 Subject: [PATCH 3/3] open requirements to address CVEs --- python/setup.py | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/python/setup.py b/python/setup.py index ed3cd020b1..2f0ebfc394 100644 --- a/python/setup.py +++ b/python/setup.py @@ -33,12 +33,12 @@ "jaeger-client >= 4.1.0, < 4.5.0", "grpcio-opentracing >= 1.1.4, < 1.2.0", "grpcio-reflection < 2.0.0", - "gunicorn >= 19.9.0, < 20.2.0", + "gunicorn >= 19.9.0", "setuptools >= 65.5.1", "prometheus_client >= 0.7.1, < 0.9.0", - "werkzeug >= 2.1.1, < 2.3", + "werkzeug==3.0.4", # Addresses CVE SNYK-PYTHON-CRYPTOGRAPHY-3315328 - "cryptography >= 39.0.1, < 41.1", + "cryptography==43.0.1", # Addresses CVE SNYK-PYTHON-PYYAML-590151 "PyYAML >= 5.4, <= 6.0.1", # Addresses CVE PRISMA-2021-0020