Skip to content

Run pipenv lock against all Pipfiles in repo#171

Merged
adrianclay merged 1 commit intomainfrom
update-piplocks
Aug 9, 2024
Merged

Run pipenv lock against all Pipfiles in repo#171
adrianclay merged 1 commit intomainfrom
update-piplocks

Conversation

@adrianclay
Copy link
Copy Markdown
Contributor

@adrianclay adrianclay commented Aug 9, 2024

Why

This updates dependencies we have installed, fixing available security issues and bugs.

There are two Pipfiles which couldn't be updated:

  • pipeline/scripts/setup-ec2-opentest/
  • examples/supplier-example/

There were 228 security issues identified by Dependabot before merging this PR, and 147 after.

Script to recreate what we did

#!/bin/bash

piplock () {
  cd $(dirname $1)
  pipenv lock
  cd -
}

piplock integration-tests/fake_spine/Pipfile.lock
piplock integration-tests/fake_spineroutelookup/Pipfile.lock
piplock integration-tests/integration_tests/Pipfile.lock
piplock common/Pipfile.lock
piplock examples/SCR/Pipfile.lock
piplock examples/SCRWebService/Pipfile.lock
piplock mhs/common/Pipfile.lock
piplock mhs/inbound/Pipfile.lock
piplock mhs/outbound/Pipfile.lock
piplock mhs/spineroutelookup/Pipfile.lock
piplock pipeline/scripts/check-target-group-health/Pipfile.lock

# piplock pipeline/scripts/setup-ec2-opentest/Pipfile.lock Errored about 'NoneType' object has no attribute 'url'
# piplock examples/supplier-example/Pipfile.lock Errored about unable to find ./../../SCR

Type of change

Internal change (non-breaking change with no effect on the functionality affecting end users)

Checklist:

  • I have performed a self-review of my code
  • I have made corresponding changes to the documentation
  • My changes generate no new warnings
  • I have added tests that prove my fix is effective or that my feature works
  • New and existing unit tests pass locally with my changes
  • I have updated the Changelog with details of my change in the UNRELEASED section if this change will affect end users

This updates dependencies we have installed, fixing available
security issues and bugs.

There are two Pipfiles which couldn't be updated:
- pipeline/scripts/setup-ec2-opentest/
- examples/supplier-example/
@adrianclay adrianclay enabled auto-merge (squash) August 9, 2024 10:22
@adrianclay adrianclay merged commit 5c02178 into main Aug 9, 2024
@adrianclay adrianclay deleted the update-piplocks branch August 9, 2024 10:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants