Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump Python to 3.6.13 #167

Merged
merged 1 commit into from
Mar 5, 2021
Merged

Bump Python to 3.6.13 #167

merged 1 commit into from
Mar 5, 2021

Conversation

edwardjkim
Copy link
Contributor

@edwardjkim edwardjkim commented Feb 26, 2021

Description of changes:

This PR is for the 1.0-1 branch.

  1. Bump Python to 3.6.13 to fix the following security vulnerability. Python 3.6 was upgraded to 3.6.13 in conda-forge: uptick version to 3.6.13 conda-forge/python-feedstock#451.
  2. The new pip dependency resolver in pip v.20.2+ can't resolve the dependencies in the 1.0-1, 0.90-2, and 0.90-1 branches. (1.2-1 works with v20.2+). This PR also pins the pip version to 20.1 and chooses the old resolver behavior using the flag --use-deprecated=legacy-resolver.

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

downgrade pip to 19.3.1

pin tox version

pin test dependencies

pin pip in tox

pin virtulenv

use python3 in tox

fix typo in tox.ini

pin virtulenv

pin pip

pin pip in dockerfile

clean up tox.ini

retry

pin sagemaker

update
@edwardjkim edwardjkim marked this pull request as ready for review March 1, 2021 18:58
@edwardjkim edwardjkim requested a review from a team March 1, 2021 18:58
@edwardjkim edwardjkim merged commit 1e0072e into aws:1.0-1 Mar 5, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
2 participants