Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

5509-upgrade gitpython #5534

Merged
merged 1 commit into from
Jan 3, 2023
Merged

5509-upgrade gitpython #5534

merged 1 commit into from
Jan 3, 2023

Conversation

cnlucas
Copy link
Member

@cnlucas cnlucas commented Jan 3, 2023

Summary (required)

GitPython is in maintenance mode. I did some research and as we use Gitpython for our automated releases it will be challenging to switch over to Pygit2 or Dulwich, but we will probably need to do it in the future. Currently, GitPython is most widely used and have releases/patches faster than the other two main options, even though it's in maintenance mode.

Required reviewers

1 dev

Impacted areas of the application

General components of the application that this PR will affect:

  • Interaction with git libraries, release process

Screenshots

Before:
Screen Shot 2023-01-03 at 12 16 38 PM

After:

Screen Shot 2023-01-03 at 12 15 54 PM

How to test

  • checkout and pull the latest develop branch
  • 'pyenv virtualenv 3.9.14 cms'
  • 'pyenv activate cms'
  • run pip install -r requirements.txt
  • run snyk test --all-projects. Shows vulnerability.
  • gh pr checkout 5534
  • run pip install -r requirements.txt
  • run snyk test --all-projects
  • run pytest
  • python manage.py runserver

Copy link
Member

@patphongs patphongs left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me, thanks @cnlucas

@patphongs patphongs merged commit b29609a into develop Jan 3, 2023
@cnlucas cnlucas deleted the feature/5509-upgrade-gitpython branch January 11, 2023 17:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[Snyk:High] Upgrade gitpython(due by 01/7/2023)
2 participants