Release 1.28.6

CHANGELOG.rst

@@ -1,6 +1,14 @@
 OasisPlatform Changelog
 =======================
 
+`1.28.6`_
+ ---------
+* [#962](https://github.com/OasisLMF/OasisPlatform/pull/962) - Remove pip from 2nd stage server build
+* [#939](https://github.com/OasisLMF/OasisPlatform/pull/939) - Fix Azure support for workers (platform 1)
+* [#987](https://github.com/OasisLMF/OasisPlatform/pull/987) - Fixed CVE issues 1.28.8
+* [#935](https://github.com/OasisLMF/OasisPlatform/pull/935) - Release 1.28.5
+.. _`1.28.6`:  https://github.com/OasisLMF/OasisPlatform/compare/1.28.5...1.28.6
+
 .. _`1.28.5`:  https://github.com/OasisLMF/OasisPlatform/compare/1.28.4...1.28.5
 
 .. _`1.28.4`:  https://github.com/OasisLMF/OasisPlatform/compare/1.28.3...1.28.4

Dockerfile.api_server

@@ -20,7 +20,7 @@ USER server
 FROM ubuntu:22.04
 RUN apt-get update \
  && apt-get upgrade -y \
- && apt-get install -y --no-install-recommends sudo python3 python3-pip curl libmariadbclient-dev-compat \
+ && apt-get install -y --no-install-recommends sudo python3 python3-pkg-resources curl libmariadbclient-dev-compat \
  && rm -rf /var/lib/apt/lists/
 
 RUN adduser --home /home/server --shell /bin/bash --disabled-password --gecos "" server

VERSION

@@ -1 +1 @@
-1.28.5
+1.28.6

requirements-server.txt

@@ -71,7 +71,7 @@ coreschema==0.0.4
     # via
     #   coreapi
     #   drf-yasg
-cryptography==41.0.6
+cryptography==42.0.4
     # via
     #   autobahn
     #   azure-storage-blob
@@ -198,7 +198,7 @@ pyjwt==2.6.0
     # via djangorestframework-simplejwt
 pymysql==1.1.0
     # via -r requirements-server.in
-pyopenssl==23.2.0
+pyopenssl==24.0.0
     # via twisted
 pyrsistent==0.19.3
     # via jsonschema

requirements-worker.txt

@@ -68,7 +68,7 @@ configparser==5.3.0
     # via -r requirements-worker.in
 cramjam==2.6.2
     # via fastparquet
-cryptography==41.0.6
+cryptography==42.0.4
     # via azure-storage-blob
 exceptiongroup==1.1.1
     # via pytest
@@ -128,10 +128,8 @@ numpy==1.22.4
     #   scikit-learn
     #   scipy
     #   shapely
-oasislmf[extra]==1.28.5
-    # via
-    #   -r requirements-worker.in
-    #   oasislmf
+oasislmf[extra]==1.28.6
+    # via -r requirements-worker.in
 ods-tools==3.1.4
     # via oasislmf
 packaging==23.0

requirements.txt

@@ -121,7 +121,7 @@ coverage[toml]==7.2.1
     #   pytest-cov
 cramjam==2.6.2
     # via fastparquet
-cryptography==41.0.6
+cryptography==42.0.4
     # via
     #   autobahn
     #   azure-storage-blob
@@ -276,10 +276,8 @@ numpy==1.22.4
     #   scikit-learn
     #   scipy
     #   shapely
-oasislmf[extra]==1.28.5
-    # via
-    #   -r ./requirements-worker.in
-    #   oasislmf
+oasislmf[extra]==1.28.6
+    # via -r ./requirements-worker.in
 ods-tools==3.1.4
     # via
     #   -r ./requirements-server.in
@@ -343,7 +341,7 @@ pymysql==1.1.0
     # via
     #   -r ./requirements-server.in
     #   -r ./requirements-worker.in
-pyopenssl==23.2.0
+pyopenssl==24.0.0
     # via
     #   -r requirements.in
     #   twisted

src/conf/celeryconf.py

@@ -1,3 +1,4 @@
+import urllib
 from src.conf.iniconf import settings
 
 #: Celery config - ignore result?
@@ -21,8 +22,8 @@
 else:
     CELERY_RESULT_BACKEND = '{DB_ENGINE}://{DB_USER}:{DB_PASS}@{DB_HOST}:{DB_PORT}/{DB_NAME}'.format(
         DB_ENGINE=settings.get('celery', 'db_engine'),
-        DB_USER=settings.get('celery', 'db_user'),
-        DB_PASS=settings.get('celery', 'db_pass'),
+        DB_USER=urllib.parse.quote(settings.get('celery', 'db_user')),
+        DB_PASS=urllib.parse.quote(settings.get('celery', 'db_pass')),
         DB_HOST=settings.get('celery', 'db_host'),
         DB_PORT=settings.get('celery', 'db_port'),
         DB_NAME=settings.get('celery', 'db_name', fallback='celery'),

src/model_execution_worker/storage_manager.py

@@ -130,7 +130,7 @@ def _store_file(self, file_path, suffix=None):
             self.media_root,
             self._get_unique_filename(ext))
         self.logger.info('Store file: {} -> {}'.format(file_path, stored_fp))
-        return shutil.copy(file_path, stored_fp)
+        return shutil.copyfile(file_path, stored_fp)
 
     def _store_dir(self, directory_path, suffix=None, arcname=None):
         """ Compress and store a directory

src/model_execution_worker/tasks.py

@@ -639,7 +639,7 @@ def prepare_complex_model_file_inputs(complex_model_files, run_directory):
             to_path = os.path.join(run_directory, orig_fn)
             if os.name == 'nt':
                 logging.info(f'complex_model_file: copy {from_path} to {to_path}')
-                shutil.copy(from_path, to_path)
+                shutil.copyfile(from_path, to_path)
             else:
                 logging.info(f'complex_model_file: link {from_path} to {to_path}')
                 os.symlink(from_path, to_path)