Skip to content

Commit

Permalink
Bump pytest version to the latest version to avoid py usage.
Browse files Browse the repository at this point in the history
pytest old version may use 'py' which has some CVE [1].
So it is advised to use pytest latest version 7.2.0
which completely removes usage of py. Also, pytest-html
version is bumped to the latest version 3.2.0 to include
[2] fix. The next step will be updating the pytest version
in the horizon and any other places.

[1] https://nvd.nist.gov/vuln/detail/CVE-2022-42969
[2] pytest-dev/pytest#10428

Co-Authored-By: mitya-eremeev-2 <mitossvyaz@mail.ru>
Change-Id: Ia4b554d5acb1e4586b3d058908cec53d46243dc9
  • Loading branch information
manchandavishal and Dmitry-Eremeev committed Nov 7, 2022
1 parent 3f65964 commit 5053de6
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions upper-constraints.txt
Expand Up @@ -33,7 +33,7 @@ vintage===0.4.1
ntc-templates===3.1.0
rst2txt===1.1.0
setproctitle===1.3.2
pytest===7.1.3
pytest===7.2.0
python-slugify===6.1.2
cursive===0.2.2
oslo.service===3.0.0
Expand Down Expand Up @@ -238,7 +238,7 @@ django-debreach===2.1.0
sphinx-feature-classification===1.1.0
django-pymemcache===1.0.0
XStatic-JQuery-Migrate===1.2.1.2
pytest-html===3.1.1
pytest-html===3.2.0
appdirs===1.4.4
tinyrpc===1.1.5
google-auth-httplib2===0.1.0
Expand Down

0 comments on commit 5053de6

Please sign in to comment.