diff --git a/images/ansible-operator/Dockerfile b/images/ansible-operator/Dockerfile index d3728fe..1ff96d6 100644 --- a/images/ansible-operator/Dockerfile +++ b/images/ansible-operator/Dockerfile @@ -27,10 +27,7 @@ RUN set -e && dnf clean all && rm -rf /var/cache/dnf/* \ && pip3 install --upgrade pip~=23.3.2 \ && pip3 install pipenv==2023.11.15 \ && pipenv install --deploy \ - # NOTE: This ignored vulnerability (71064) was detected in requests, \ - # but the upgraded version doesn't support the use case (protocol we are using).\ - # Ref: https://github.com/operator-framework/ansible-operator-plugins/pull/67#issuecomment-2189164688 \ - && pipenv check --ignore 71064 --ignore 77680 \ + && pipenv check \ && dnf remove -y gcc libffi-devel openssl-devel python3.12-devel \ && dnf clean all \ && rm -rf /var/cache/dnf diff --git a/images/ansible-operator/Pipfile b/images/ansible-operator/Pipfile index c40a012..dd98a9e 100644 --- a/images/ansible-operator/Pipfile +++ b/images/ansible-operator/Pipfile @@ -9,7 +9,7 @@ ansible-runner-http = "~=1.0.0" ansible-core = "~=2.18.3" urllib3 = "~=2.5.0" kubernetes = "==33.1.0" -requests = "~=2.31.0" +requests = "~=2.32.5" [dev-packages] diff --git a/images/ansible-operator/Pipfile.lock b/images/ansible-operator/Pipfile.lock index 9c3569b..0a0f5ef 100644 --- a/images/ansible-operator/Pipfile.lock +++ b/images/ansible-operator/Pipfile.lock @@ -1,7 +1,7 @@ { "_meta": { "hash": { - "sha256": "2c82094bb3049d373257752b763f79a7803c9af2f8ec05c991b39c2c18338217" + "sha256": "a9f91deff24534d3f569e202a816d62f9873149edf7875a678b7c5eef0447d97" }, "pipfile-spec": 6, "requires": { @@ -504,12 +504,12 @@ }, "requests": { "hashes": [ - "sha256:58cd2187c01e70e6e26505bca751777aa9f2ee0b7f4300988b709f44e013003f", - "sha256:942c5a758f98d790eaed1a29cb6eefc7ffb0d1cf7af05c3d2791656dbd6ad1e1" + "sha256:2462f94637a34fd532264295e186976db0f5d453d1cdd31473c85a6a161affb6", + "sha256:dbba0bac56e100853db0ea71b82b4dfd5fe2bf6d3754a8893c3af500cec7d7cf" ], "index": "pypi", - "markers": "python_version >= '3.7'", - "version": "==2.31.0" + "markers": "python_version >= '3.9'", + "version": "==2.32.5" }, "requests-oauthlib": { "hashes": [ diff --git a/images/ansible-operator/pipfile.Dockerfile b/images/ansible-operator/pipfile.Dockerfile index f8d5c63..78175df 100644 --- a/images/ansible-operator/pipfile.Dockerfile +++ b/images/ansible-operator/pipfile.Dockerfile @@ -23,10 +23,7 @@ RUN set -e && dnf clean all && rm -rf /var/cache/dnf/* \ && pip3 install --upgrade pip~=23.3.2 \ && pip3 install pipenv==2023.11.15 \ && pipenv lock \ - # NOTE: This ignored vulnerability (71064) was detected in requests, \ - # but the upgraded version doesn't support the use case (protocol we are using).\ - # Ref: https://github.com/operator-framework/ansible-operator-plugins/pull/67#issuecomment-2189164688 - && pipenv check --ignore 71064 --ignore 77680 \ + && pipenv check \ && dnf remove -y gcc libffi-devel openssl-devel python3.12-devel \ && dnf clean all \ && rm -rf /var/cache/dnf