Fixed numpy to be build from source

.github/workflows/check_github_pages_docs_for_feature_branch.yaml

@@ -25,6 +25,9 @@ jobs:
       uses: abatilo/actions-poetry@v2.0.0
       with:
         poetry-version: 1.1.4
+    - name: Install lapack/blas for Numpy from source
+      run: sudo apt-get update && sudo apt-get install -y liblapack-dev libblas-dev
+      #highly recommended for numpy from source, check https://numpy.org/devdocs/user/building.html#prerequisites
     - name: Poetry install
       run: poetry install
     - name: Test documentation deployment for current feature branch

.github/workflows/check_setup_py.yaml

@@ -21,6 +21,9 @@ jobs:
     - uses: abatilo/actions-poetry@v2.0.0
       with:
         poetry-version: 1.1.4
+    - name: Install lapack/blas for Numpy from source
+      run: sudo apt-get update && sudo apt-get install -y liblapack-dev libblas-dev
+      #highly recommended for numpy from source, check https://numpy.org/devdocs/user/building.html#prerequisites
     - name: Poetry install
       run: poetry install
     - name: Run packaging update

.github/workflows/deploy_github_pages_docs_for_main.yaml

@@ -23,6 +23,9 @@ jobs:
       uses: abatilo/actions-poetry@v2.0.0
       with:
         poetry-version: 1.1.4
+    - name: Install lapack/blas for Numpy from source
+      run: sudo apt-get update && sudo apt-get install -y liblapack-dev libblas-dev
+      #highly recommended for numpy from source, check https://numpy.org/devdocs/user/building.html#prerequisites
     - name: Poetry install
       run: poetry install
     - name: Deploy documentation to github-pages-main branch

.github/workflows/pytest.yaml

@@ -21,6 +21,9 @@ jobs:
       - uses: abatilo/actions-poetry@v2.0.0
         with:
           poetry-version: 1.1.4
+      - name: Install lapack/blas for Numpy from source
+        run: sudo apt-get update && sudo apt-get install -y liblapack-dev libblas-dev
+        #highly recommended for numpy from source, check https://numpy.org/devdocs/user/building.html#prerequisites
       - name: Poetry install
         run: poetry install
       - name: Poetry build

.github/workflows/release_droid_upload_github_release_assets.yml

@@ -43,6 +43,9 @@ jobs:
       - uses: abatilo/actions-poetry@v2.0.0
         with:
           poetry-version: 1.1.4
+      - name: Install lapack/blas for Numpy from source
+        run: sudo apt-get update && sudo apt-get install -y liblapack-dev libblas-dev
+        #highly recommended for numpy from source, check https://numpy.org/devdocs/user/building.html#prerequisites
       - name: Poetry install
         run: poetry install
       - name: Poetry build

doc/changes/changelog.md

@@ -1,11 +1,13 @@
 # Changes
 
+* [0.2.0](changes_0.2.0.md)
 * [0.1.0](changes_0.1.0.md)
 
 <!--- This MyST Parser Sphinx directive is necassary to keep Sphinx happy. We need list here all release letters again, because release droid and other scripts assume Markdown --->
 ```{toctree}
 ---
 hidden:
 ---
+changes_0.2.0
 changes_0.1.0
 ```

doc/changes/changes_0.2.0.md

@@ -0,0 +1,18 @@
+# BucketFs Utils Python 0.2.0, released t.b.d
+Code name: t.b.d
+
+## Summary
+ t.b.d
+
+## Features / Enhancements
+
+## Bug Fixes
+
+## Documentation
+
+## Refactoring
+
+## Security
+
+ - #51: Added fixed numpy version build from source because of Buffer Overflow vulnerability in NumPy
+

pyproject.toml

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "exasol-bucketfs-utils-python"
-version = "0.1.0"
+version = "0.2.0"
 description = "BucketFS utilities for the Python programming language"
 
 license = "MIT"

scripts/build/check_release.py

@@ -47,7 +47,7 @@ def get_change_log_version():
     if latest_tag is None and poetry_version != "0.1.0":
         raise ValueError("You don't have yet a release. Your Poetry version needs to be 0.1.0!")
 
-    # We expect that the current version in pyproject.toml is alway greater than the latest tag.
+    # We expect that the current version in pyproject.toml is always greater than the latest tag.
     # Thus we avoid creating a release without having the version number updated.
     if poetry_version == latest_tag:
         raise ValueError("Poetry version needs to be updated!")

setup.py

@@ -12,7 +12,7 @@
 
 setup_kwargs = {
     'name': 'exasol-bucketfs-utils-python',
-    'version': '0.1.0',
+    'version': '0.2.0',
     'description': 'BucketFS utilities for the Python programming language',
     'long_description': '#####################\nBucketFS Utils Python\n#####################\n\n********\nOverview\n********\n\nThis project provides a python library for accessing the Exasol BucketFS system.\nIt provides functions to upload and download files to and from the BucketFS.\n\nIn a Nutshell\n=============\n\nPrerequisites\n-------------\n\n- Python 3.6+\n\nInstallation\n-------------\n\nInstall the package from Github via `pip`::\n\n    pip install -e git://github.com/exasol/bucketfs-utils-python.git@{tag name}#egg=exasol-bucketfs-utils-python\n\nDocumentation\n-------------\n\n`Documentation for the latest release <https://exasol.github.io/bucketfs-utils-python/main>`_ is hosted on the Github Pages of this project.\n\nFeatures\n========\n\n* Download or upload files from/to the Exasol BucketFS\n* Supported sources and targets for the uploads and downloads:\n\n  * Files on the local Filesystem\n  * Python file objects\n  * Python Strings\n  * Python objects ((De-)Serialization with [Joblib](https://joblib.readthedocs.io/en/latest/persistence.html))\n\n* Loading an artefact from a public Github Release into the BucketFS\n',
     'author': 'Torsten Kilias',