Skip to content

Conversation

Kaniska244
Copy link
Contributor

@Kaniska244 Kaniska244 commented May 30, 2025

Ref# #267

Description: This change is to create the ability to pin extra python packages to specific versions provided as input instead of looking for higher version.

Changelog: The following changes have been made.

  • Change done in images/src/anaconda/.devcontainer/apply_security_patches.sh to introduce an array pin_to_required_version which should consist of package names for which the install should stick to the given version in vulnerable_packages array instead of looking for higher version.
  • Version bump.

Checklist:

  • All checks are passed.

@Mathiyarasy Mathiyarasy requested review from Mathiyarasy and removed request for Mathiyarasy May 30, 2025 09:32
@Kaniska244 Kaniska244 marked this pull request as ready for review May 30, 2025 09:43
@Kaniska244 Kaniska244 requested a review from a team as a code owner May 30, 2025 09:43
Copy link
Contributor

@AlvaroRausell AlvaroRausell left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Not in the scope of this PR, but I think the right way to do this would be to use requirements.txt instead of this

@AlvaroRausell AlvaroRausell merged commit 3dc5502 into devcontainers:main May 30, 2025
2 checks passed
@Kaniska244 Kaniska244 deleted the anaconda_cookiecutter_version_issue branch May 30, 2025 09:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants