Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix case-sensitivity for automated snyk update script #906

Merged
merged 11 commits into from
Apr 4, 2023

Conversation

nickumia-reisys
Copy link
Contributor

@nickumia-reisys nickumia-reisys commented Apr 3, 2023

Related to

Changes:

  • ckanext-qa doesn't build unless setuptools is pinned to 67.1.0
  • Update snyk-update.py to accommodate case sensitivity for package names (i.e. Flask and flask will both match if it needs to be updated; also flask-??? won't match and cause unintended repercussions)
  • Successful run of make update-dependencies

nickumia-reisys and others added 6 commits April 3, 2023 13:45
- Attempt to check if package was previously being specified before automatically adding it because  of the scan
Otherwise, the first package will set update for every package
This should help cut down on build+install time with the snyk scan
[Snyk + GH Actions] Update requirements
@nickumia-reisys nickumia-reisys marked this pull request as ready for review April 3, 2023 18:45
Jin-Sun-tts
Jin-Sun-tts previously approved these changes Apr 3, 2023
ckan/requirements.txt Outdated Show resolved Hide resolved
btylerburton
btylerburton previously approved these changes Apr 3, 2023
@nickumia-reisys nickumia-reisys requested a review from a team April 3, 2023 21:12
Jin-Sun-tts
Jin-Sun-tts previously approved these changes Apr 3, 2023
ckan/requirements.txt Outdated Show resolved Hide resolved
@nickumia-reisys nickumia-reisys merged commit 5f2b323 into main Apr 4, 2023
@nickumia-reisys nickumia-reisys deleted the fix-snyk-update-script branch April 4, 2023 15:01
@nickumia-reisys
Copy link
Contributor Author

There are currently two open issues for upstream ckan changes that are preventing us from upgrading

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants