From e252eb62951d525d793fc2cf658c02e7ffdf1275 Mon Sep 17 00:00:00 2001 From: Andreas Maier Date: Sun, 29 Dec 2024 12:59:11 +0100 Subject: [PATCH] Addressed safety issues up to 2024-12-29 Signed-off-by: Andreas Maier --- .safety-policy-install.yml | 4 ++++ docs/source/release_notes.rst | 2 +- minimum-constraints-install.txt | 2 +- requirements.txt | 2 +- 4 files changed, 7 insertions(+), 3 deletions(-) diff --git a/.safety-policy-install.yml b/.safety-policy-install.yml index ae25279b..90c5588c 100644 --- a/.safety-policy-install.yml +++ b/.safety-policy-install.yml @@ -44,6 +44,10 @@ security: reason: Fixed ansible-core version is 2.15.2, but we support older ansible versions 73302: reason: Advice to use no_log when reading sensitive variables - not related to any fixes + 74221: + reason: Fixed ansible-core version is 2.14.18rc1, but we support older ansible versions + 74261: + reason: Fixed ansible-core version is 2.18, but we support older ansible versions # Continue with exit code 0 when vulnerabilities are found. continue-on-vulnerability-error: False diff --git a/docs/source/release_notes.rst b/docs/source/release_notes.rst index 2df7856c..ab3f279a 100644 --- a/docs/source/release_notes.rst +++ b/docs/source/release_notes.rst @@ -35,7 +35,7 @@ Availability: `AutomationHub`_, `Galaxy`_, `GitHub`_ **Bug fixes:** -* Fixed safety issues up to 2024-11-21. +* Fixed safety issues up to 2024-12-29. * Increased zhmcclient version to 1.18.2 to pick up fixes. (issue #1074) diff --git a/minimum-constraints-install.txt b/minimum-constraints-install.txt index 845127ab..cee7b5f9 100644 --- a/minimum-constraints-install.txt +++ b/minimum-constraints-install.txt @@ -25,7 +25,7 @@ ansible==9.0.1; python_version >= '3.12' # ansible-core is pulled in by ansible>=4.0, and is needed for pip-check-reqs checks. ansible-core==2.11.12; python_version == '3.9' ansible-core==2.12.10; python_version == '3.10' -ansible-core==2.14.14; python_version == '3.11' +ansible-core==2.14.18; python_version == '3.11' ansible-core==2.16.3; python_version >= '3.12' # other ansible or ansible-core dependencies diff --git a/requirements.txt b/requirements.txt index 80c3b15a..88e938bf 100644 --- a/requirements.txt +++ b/requirements.txt @@ -32,7 +32,7 @@ ansible>=9.0.1; python_version >= '3.12' # ansible-core is pulled in by ansible>=4.0, and is needed for pip-check-reqs checks. ansible-core>=2.11.12; python_version == '3.9' ansible-core>=2.12.10; python_version == '3.10' -ansible-core>=2.14.14; python_version == '3.11' +ansible-core>=2.14.18; python_version == '3.11' ansible-core>=2.16.0; python_version >= '3.12' requests>=2.32.2