Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update awscli, botocore, select requirements #4970

Merged
merged 1 commit into from Jul 1, 2019

Conversation

jwhitlock
Copy link
Member

  • awscli 1.16.169 → 1.16.183: Update various commands to latest versions
  • botocore 1.12.159 → 1.12.173: Update clients to latest versions

These allowed additional updates of requirements:

  • urllib3 1.24.3 → 1.25.3: Validate certs, and load system CA certs when specific cert locations are unspecified.
  • PyYAML 3.13 → 5.1: Resolved CVE-2017-18342, load() now does the same as safe_load() by default. awscli was already using safe_load, and we we do not use PyYAML in our app code.

Copy link
Collaborator

@willkg willkg left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks super! r+!

* awscli 1.16.169 → 1.16.190: Update various commands to latest versions
* botocore 1.12.159 → 1.12.180: Update clients to latest versions

These allowed additional updates of requirements:

* urllib3 1.24.3 → 1.25.3: Validate certs, and load system CA certs when
  specific cert locations are unspecified.
* PyYAML 3.13 → 5.1: Resolved CVE-2017-18342, load() now does the same
  as safe_load() by default. awscli was already using an equivalent to
  safe_load, and we we do not use PyYAML in our app code.
@jwhitlock
Copy link
Member Author

Rebase on master, and update to awscli 1.16.190 and boto-core 1.12.180. These packages change often, updating a few commands to the latest versions. I wish they synced version numbers...

@jwhitlock jwhitlock merged commit 0ab5dc9 into mozilla-services:master Jul 1, 2019
@jwhitlock jwhitlock deleted the update-awscli branch July 1, 2019 17:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
2 participants