From 9864f65fd6c04c8fa494e8a58e1be8a71a662ec5 Mon Sep 17 00:00:00 2001 From: Timothy Johnson Date: Mon, 26 Aug 2024 14:57:05 -0400 Subject: [PATCH 1/4] Add pip audit workflow Signed-off-by: Timothy Johnson --- .github/workflows/audit.yml | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) create mode 100644 .github/workflows/audit.yml diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml new file mode 100644 index 00000000..9bb178e4 --- /dev/null +++ b/.github/workflows/audit.yml @@ -0,0 +1,21 @@ +name: Audit + +on: + pull_request: + branches: + - main + schedule: + - cron: '0 10 * * *' + +jobs: + audit: + runs-on: ubuntu-latest + + steps: + - name: Checkout + uses: actions/checkout@v4 + + - name: Check Vulnerabilities + uses: pypa/gh-action-pip-audit@v1.1.0 + with: + inputs: requirements.txt docs/requirements.txt From 8e2309f963f956d05968fa1ba36f825de316a8e5 Mon Sep 17 00:00:00 2001 From: Timothy Johnson Date: Mon, 26 Aug 2024 15:28:43 -0400 Subject: [PATCH 2/4] Lock down version of secrets sdk Signed-off-by: Timothy Johnson --- src/core/setup.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/core/setup.py b/src/core/setup.py index b92b2a5b..b607e996 100644 --- a/src/core/setup.py +++ b/src/core/setup.py @@ -40,6 +40,6 @@ "requests~=2.32.0", "urllib3~=1.26.18", ], - extras_require={"secrets": [resolve_sdk_dep("secrets", "~=" + __version__)]}, + extras_require={"secrets": [resolve_sdk_dep("secrets", "~=1.0.0.dev")]}, packages=find_namespace_packages(include=["zowe.*"]), ) From a2347d920cb5e668b183c2c34c0c40f7a78a164f Mon Sep 17 00:00:00 2001 From: Timothy Johnson Date: Mon, 26 Aug 2024 15:31:37 -0400 Subject: [PATCH 3/4] Update changelog Signed-off-by: Timothy Johnson --- CHANGELOG.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 13b94a78..6fc3e1cc 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,6 +2,12 @@ All notable changes to the Zowe Client Python SDK will be documented in this file. +## Recent Changes + +### Bug Fixes + +- Fixed Core SDK package referencing a non-existent version of Secrets SDK. + ## `1.0.0-dev20` ### Enhancements From 206ee84ee296f6fd505123aa568b4d9ee040a8e5 Mon Sep 17 00:00:00 2001 From: Timothy Johnson Date: Mon, 26 Aug 2024 15:36:06 -0400 Subject: [PATCH 4/4] Fix license header script to ignore _version.py Signed-off-by: Timothy Johnson --- scripts/license_header.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scripts/license_header.py b/scripts/license_header.py index 9384aa7d..27541bf5 100644 --- a/scripts/license_header.py +++ b/scripts/license_header.py @@ -40,7 +40,7 @@ def main(): if "build" in root.split(os.path.sep): continue for file in files: - if file.endswith(".py") and file is not "_version.py": + if file.endswith(".py") and os.path.basename(file) != "_version.py": file_path = os.path.join(root, file) if not check_and_add_license_header(file_path, write_header): print(f"License header missing in: {file_path}")