Skip to content

Commit eac5845

Browse files
lokeshranginenifranciscojavierarceosnyk-botdmartinol
authored and
dharmisha
committed
feat: Snyk vulnerability issues fix. (feast-dev#4867)
* Update README.md Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * chore: Update quickstart.md Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * fix: java/serving/pom.xml & java/pom.xml to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEOAUTHCLIENT-2807808 - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEPROTOBUF-8055227 - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEPROTOBUF-8055228 - https://snyk.io/vuln/SNYK-JAVA-ORGYAML-3152153 - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEPROTOBUF-3167772 - https://snyk.io/vuln/SNYK-JAVA-ORGAPACHETHRIFT-1074898 - https://snyk.io/vuln/SNYK-JAVA-IONETTY-6483812 - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLECODEGSON-1730327 - https://snyk.io/vuln/SNYK-JAVA-COMSQUAREUPOKHTTP3-2958044 - https://snyk.io/vuln/SNYK-JAVA-IOGRPC-571957 - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEPROTOBUF-3040284 - https://snyk.io/vuln/SNYK-JAVA-JUNIT-1017047 Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * fix: sdk/python/feast/ui/package.json & sdk/python/feast/ui/yarn.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-TRIM-1017038 Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * Feature/lrangine master (feast-dev#6) * Snyk scan vulnerability fixes. Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * Reverting the grpc version so hoping that it will fix the java integration tests. Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * Upgrading the grpc version as it didn't fix the problem Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * adding grpc-api libraries as dependency to solve some of the class not found exceptions with the grpc upgrades. Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * fix: sdk/python/feast/ui/package.json & sdk/python/feast/ui/yarn.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-TRIM-1017038 Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * [Snyk] Fix for 2 vulnerabilities (feast-dev#3) * chore: Update quickstart.md * fix: java/serving/pom.xml & java/pom.xml to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEOAUTHCLIENT-2807808 - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEPROTOBUF-8055227 - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEPROTOBUF-8055228 - https://snyk.io/vuln/SNYK-JAVA-ORGYAML-3152153 - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEPROTOBUF-3167772 - https://snyk.io/vuln/SNYK-JAVA-ORGAPACHETHRIFT-1074898 - https://snyk.io/vuln/SNYK-JAVA-IONETTY-6483812 - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLECODEGSON-1730327 - https://snyk.io/vuln/SNYK-JAVA-COMSQUAREUPOKHTTP3-2958044 - https://snyk.io/vuln/SNYK-JAVA-IOGRPC-571957 - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEPROTOBUF-3040284 - https://snyk.io/vuln/SNYK-JAVA-JUNIT-1017047 * fix: sdk/python/feast/ui/package.json & sdk/python/feast/ui/yarn.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-TRIM-1017038 Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * fix: java/pom.xml to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEPROTOBUF-8055228 - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEGUAVA-5710356 Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * Updating the requirements files. Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * Updating the requirements files. Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * Changing the python httpx package to 0.27.2 because after 0.28.0 version is giving errors related to proxies which is removed. Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * [Snyk] Security upgrade io.grpc:grpc-services from 1.53.0 to 1.63.0 (feast-dev#4) * chore: Update quickstart.md * fix: java/serving/pom.xml & java/pom.xml to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEOAUTHCLIENT-2807808 - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEPROTOBUF-8055227 - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEPROTOBUF-8055228 - https://snyk.io/vuln/SNYK-JAVA-ORGYAML-3152153 - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEPROTOBUF-3167772 - https://snyk.io/vuln/SNYK-JAVA-ORGAPACHETHRIFT-1074898 - https://snyk.io/vuln/SNYK-JAVA-IONETTY-6483812 - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLECODEGSON-1730327 - https://snyk.io/vuln/SNYK-JAVA-COMSQUAREUPOKHTTP3-2958044 - https://snyk.io/vuln/SNYK-JAVA-IOGRPC-571957 - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEPROTOBUF-3040284 - https://snyk.io/vuln/SNYK-JAVA-JUNIT-1017047 * fix: sdk/python/feast/ui/package.json & sdk/python/feast/ui/yarn.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-TRIM-1017038 Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * fix: java/pom.xml to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEPROTOBUF-8055228 Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> --------- Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> Co-authored-by: Francisco Arceo <arceofrancisco@gmail.com> Co-authored-by: snyk-bot <snyk-bot@snyk.io> Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * [Snyk] Fix for 1 vulnerabilities (feast-dev#5) Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * chore: Update quickstart.md * fix: java/serving/pom.xml & java/pom.xml to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEOAUTHCLIENT-2807808 - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEPROTOBUF-8055227 - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEPROTOBUF-8055228 - https://snyk.io/vuln/SNYK-JAVA-ORGYAML-3152153 - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEPROTOBUF-3167772 - https://snyk.io/vuln/SNYK-JAVA-ORGAPACHETHRIFT-1074898 - https://snyk.io/vuln/SNYK-JAVA-IONETTY-6483812 - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLECODEGSON-1730327 - https://snyk.io/vuln/SNYK-JAVA-COMSQUAREUPOKHTTP3-2958044 - https://snyk.io/vuln/SNYK-JAVA-IOGRPC-571957 - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEPROTOBUF-3040284 - https://snyk.io/vuln/SNYK-JAVA-JUNIT-1017047 * fix: sdk/python/feast/ui/package.json & sdk/python/feast/ui/yarn.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-TRIM-1017038 Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * fix: java/pom.xml to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEGUAVA-5710356 --------- Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> Co-authored-by: Francisco Arceo <arceofrancisco@gmail.com> Co-authored-by: snyk-bot <snyk-bot@snyk.io> Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * trying to fix some vulnerabilities in the requirements.txt files. Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> --------- Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> Co-authored-by: snyk-bot <snyk-bot@snyk.io> Co-authored-by: Francisco Arceo <arceofrancisco@gmail.com> Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * Feature/lrangine master (feast-dev#7) * feat: Loading the CA trusted store certificate into Feast to verify the public certificate. (feast-dev#4852) * Initial Draft version to load the CA trusted store code. Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * Initial Draft version to load the CA trusted store code. Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * Fixing the lint error. Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * Trying to fix the online store test cases. Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * Formatted the python to fix lint errors. Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * Fixing the unit test cases. Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * Fixing the unit test cases. Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * removing unnecessary cli args. Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * Now configuring the SSL ca store configurations on the feast client side rather than on the server side. And also fixing the integration tests. Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * Renamed the remote registry is_tls_mode variable to is_tls. Changed the offline store TLS setting decision from cert to scheme. Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * Adding the existing trust store certificates to the newly created trust store. Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * Clearing the existing trust store configuration to see if it fixes the PR integration failures. Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * Clearing the existing trust store configuration to see if it fixes the PR integration failures. Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * Clearing the existing trust store configuration to see if it fixes the PR integration failures. Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * combining the default system ca store with the custom one to fix the integration tests. Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * Final clean up and adding documentation. Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * Incorporating the code review comments from Francisco. Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> --------- Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * fix: Updated python-helm-demo example to use MinIO instead of GS (feast-dev#4691) * Updated python-helm-demo example to use MinIO instead of GS Signed-off-by: Daniele Martinoli <dmartino@redhat.com> * Update examples/python-helm-demo/README.md Co-authored-by: Francisco Arceo <farceo@redhat.com> Signed-off-by: Daniele Martinoli <dmartino@redhat.com> * Adding explicit wait to container to validate CI failures Signed-off-by: Daniele Martinoli <dmartino@redhat.com> * restored original conftest Signed-off-by: Daniele Martinoli <dmartino@redhat.com> --------- Signed-off-by: Daniele Martinoli <dmartino@redhat.com> Co-authored-by: Francisco Arceo <farceo@redhat.com> Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * fix: Fixing some of the warnings with the github actions (feast-dev#4763) Fixing some of the warnings with the github actions, most of them related to deprecated actions or libraries. Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * Update README.md Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * Snyk scan vulnerability fixes. Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * Reverting the grpc version so hoping that it will fix the java integration tests. Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * Upgrading the grpc version as it didn't fix the problem Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * adding grpc-api libraries as dependency to solve some of the class not found exceptions with the grpc upgrades. Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * fix: sdk/python/feast/ui/package.json & sdk/python/feast/ui/yarn.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-TRIM-1017038 Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * [Snyk] Fix for 2 vulnerabilities (feast-dev#3) * chore: Update quickstart.md * fix: java/serving/pom.xml & java/pom.xml to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEOAUTHCLIENT-2807808 - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEPROTOBUF-8055227 - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEPROTOBUF-8055228 - https://snyk.io/vuln/SNYK-JAVA-ORGYAML-3152153 - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEPROTOBUF-3167772 - https://snyk.io/vuln/SNYK-JAVA-ORGAPACHETHRIFT-1074898 - https://snyk.io/vuln/SNYK-JAVA-IONETTY-6483812 - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLECODEGSON-1730327 - https://snyk.io/vuln/SNYK-JAVA-COMSQUAREUPOKHTTP3-2958044 - https://snyk.io/vuln/SNYK-JAVA-IOGRPC-571957 - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEPROTOBUF-3040284 - https://snyk.io/vuln/SNYK-JAVA-JUNIT-1017047 * fix: sdk/python/feast/ui/package.json & sdk/python/feast/ui/yarn.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-TRIM-1017038 Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * fix: java/pom.xml to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEPROTOBUF-8055228 - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEGUAVA-5710356 Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * Updating the requirements files. Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * Updating the requirements files. Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * Changing the python httpx package to 0.27.2 because after 0.28.0 version is giving errors related to proxies which is removed. Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * [Snyk] Security upgrade io.grpc:grpc-services from 1.53.0 to 1.63.0 (feast-dev#4) * chore: Update quickstart.md * fix: java/serving/pom.xml & java/pom.xml to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEOAUTHCLIENT-2807808 - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEPROTOBUF-8055227 - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEPROTOBUF-8055228 - https://snyk.io/vuln/SNYK-JAVA-ORGYAML-3152153 - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEPROTOBUF-3167772 - https://snyk.io/vuln/SNYK-JAVA-ORGAPACHETHRIFT-1074898 - https://snyk.io/vuln/SNYK-JAVA-IONETTY-6483812 - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLECODEGSON-1730327 - https://snyk.io/vuln/SNYK-JAVA-COMSQUAREUPOKHTTP3-2958044 - https://snyk.io/vuln/SNYK-JAVA-IOGRPC-571957 - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEPROTOBUF-3040284 - https://snyk.io/vuln/SNYK-JAVA-JUNIT-1017047 * fix: sdk/python/feast/ui/package.json & sdk/python/feast/ui/yarn.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-TRIM-1017038 Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * fix: java/pom.xml to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEPROTOBUF-8055228 Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> --------- Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> Co-authored-by: Francisco Arceo <arceofrancisco@gmail.com> Co-authored-by: snyk-bot <snyk-bot@snyk.io> Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * [Snyk] Fix for 1 vulnerabilities (feast-dev#5) Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * chore: Update quickstart.md * fix: java/serving/pom.xml & java/pom.xml to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEOAUTHCLIENT-2807808 - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEPROTOBUF-8055227 - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEPROTOBUF-8055228 - https://snyk.io/vuln/SNYK-JAVA-ORGYAML-3152153 - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEPROTOBUF-3167772 - https://snyk.io/vuln/SNYK-JAVA-ORGAPACHETHRIFT-1074898 - https://snyk.io/vuln/SNYK-JAVA-IONETTY-6483812 - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLECODEGSON-1730327 - https://snyk.io/vuln/SNYK-JAVA-COMSQUAREUPOKHTTP3-2958044 - https://snyk.io/vuln/SNYK-JAVA-IOGRPC-571957 - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEPROTOBUF-3040284 - https://snyk.io/vuln/SNYK-JAVA-JUNIT-1017047 * fix: sdk/python/feast/ui/package.json & sdk/python/feast/ui/yarn.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-TRIM-1017038 Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * fix: java/pom.xml to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEGUAVA-5710356 --------- Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> Co-authored-by: Francisco Arceo <arceofrancisco@gmail.com> Co-authored-by: snyk-bot <snyk-bot@snyk.io> Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * trying to fix some vulnerabilities in the requirements.txt files. Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * Updating the lettuce-core to fix the snyk vulnerability. Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> --------- Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> Signed-off-by: Daniele Martinoli <dmartino@redhat.com> Co-authored-by: Daniele Martinoli <86618610+dmartinol@users.noreply.github.com> Co-authored-by: Francisco Arceo <farceo@redhat.com> Co-authored-by: Francisco Arceo <arceofrancisco@gmail.com> Co-authored-by: snyk-bot <snyk-bot@snyk.io> Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * updating netty library Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * updating netty library Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * Updating aws java sdk libraries. Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * Adding verbose logs to debug the sudden failure of tests without any error messages. Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> * Adding verbose logs to debug the sudden failure of tests without any error messages. Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> --------- Signed-off-by: lrangine <19699092+lokeshrangineni@users.noreply.github.com> Signed-off-by: Daniele Martinoli <dmartino@redhat.com> Co-authored-by: Francisco Arceo <arceofrancisco@gmail.com> Co-authored-by: snyk-bot <snyk-bot@snyk.io> Co-authored-by: Daniele Martinoli <86618610+dmartinol@users.noreply.github.com> Co-authored-by: Francisco Arceo <farceo@redhat.com>
1 parent 8520610 commit eac5845

7 files changed

+397
-6
lines changed

‎sdk/python/requirements/py3.10-ci-requirements.txt

+102-1
Original file line numberDiff line numberDiff line change
@@ -6,13 +6,17 @@ aiohappyeyeballs==2.4.4
66
# via aiohttp
77
<<<<<<< HEAD
88
<<<<<<< HEAD
9+
<<<<<<< HEAD
910
aiohttp==3.11.11
1011
=======
1112
aiohttp==3.10.11
1213
>>>>>>> 5397bdd2f (chore: Bump aiohttp from 3.10.10 to 3.10.11 in /sdk/python/requirements (#4768))
1314
=======
1415
aiohttp==3.11.7
1516
>>>>>>> 26647afaa (chore: Update packages and fix lint issues (#4790))
17+
=======
18+
aiohttp==3.11.11
19+
>>>>>>> 50b1288d1 (feat: Snyk vulnerability issues fix. (#4867))
1620
# via aiobotocore
1721
aioitertools==0.12.0
1822
# via aiobotocore
@@ -139,10 +143,14 @@ comm==0.2.2
139143
couchbase==4.3.2
140144
# via feast (setup.py)
141145
<<<<<<< HEAD
146+
<<<<<<< HEAD
142147
coverage[toml]==7.6.9
143148
=======
144149
coverage[toml]==7.6.8
145150
>>>>>>> 26647afaa (chore: Update packages and fix lint issues (#4790))
151+
=======
152+
coverage[toml]==7.6.9
153+
>>>>>>> 50b1288d1 (feat: Snyk vulnerability issues fix. (#4867))
146154
# via pytest-cov
147155
cryptography==43.0.3
148156
# via
@@ -161,6 +169,7 @@ cryptography==43.0.3
161169
cython==3.0.11
162170
# via thriftpy2
163171
<<<<<<< HEAD
172+
<<<<<<< HEAD
164173
dask[dataframe]==2024.12.1
165174
# via
166175
# feast (setup.py)
@@ -172,25 +181,36 @@ db-dtypes==1.3.1
172181
debugpy==1.8.11
173182
=======
174183
dask[dataframe]==2024.11.2
184+
=======
185+
dask[dataframe]==2024.12.1
186+
>>>>>>> 50b1288d1 (feat: Snyk vulnerability issues fix. (#4867))
175187
# via
176188
# feast (setup.py)
177189
# dask-expr
178-
dask-expr==1.1.19
190+
dask-expr==1.1.21
179191
# via dask
180192
db-dtypes==1.3.1
181193
# via google-cloud-bigquery
194+
<<<<<<< HEAD
182195
debugpy==1.8.9
183196
>>>>>>> 26647afaa (chore: Update packages and fix lint issues (#4790))
197+
=======
198+
debugpy==1.8.11
199+
>>>>>>> 50b1288d1 (feat: Snyk vulnerability issues fix. (#4867))
184200
# via ipykernel
185201
decorator==5.1.1
186202
# via ipython
187203
defusedxml==0.7.1
188204
# via nbconvert
189205
<<<<<<< HEAD
206+
<<<<<<< HEAD
190207
deltalake==0.22.3
191208
=======
192209
deltalake==0.22.0
193210
>>>>>>> 26647afaa (chore: Update packages and fix lint issues (#4790))
211+
=======
212+
deltalake==0.22.3
213+
>>>>>>> 50b1288d1 (feat: Snyk vulnerability issues fix. (#4867))
194214
# via feast (setup.py)
195215
deprecation==2.1.0
196216
# via python-keycloak
@@ -207,10 +227,14 @@ duckdb==1.1.3
207227
elastic-transport==8.15.1
208228
# via elasticsearch
209229
<<<<<<< HEAD
230+
<<<<<<< HEAD
210231
elasticsearch==8.17.0
211232
=======
212233
elasticsearch==8.16.0
213234
>>>>>>> 26647afaa (chore: Update packages and fix lint issues (#4790))
235+
=======
236+
elasticsearch==8.17.0
237+
>>>>>>> 50b1288d1 (feat: Snyk vulnerability issues fix. (#4867))
214238
# via feast (setup.py)
215239
entrypoints==0.4
216240
# via altair
@@ -228,10 +252,14 @@ executing==2.1.0
228252
faiss-cpu==1.9.0.post1
229253
# via feast (setup.py)
230254
<<<<<<< HEAD
255+
<<<<<<< HEAD
231256
fastapi==0.115.6
232257
=======
233258
fastapi==0.115.5
234259
>>>>>>> 26647afaa (chore: Update packages and fix lint issues (#4790))
260+
=======
261+
fastapi==0.115.6
262+
>>>>>>> 50b1288d1 (feat: Snyk vulnerability issues fix. (#4867))
235263
# via feast (setup.py)
236264
fastjsonschema==2.21.1
237265
# via nbformat
@@ -252,10 +280,14 @@ fsspec==2024.9.0
252280
geomet==0.2.1.post1
253281
# via cassandra-driver
254282
<<<<<<< HEAD
283+
<<<<<<< HEAD
255284
google-api-core[grpc]==2.24.0
256285
=======
257286
google-api-core[grpc]==2.23.0
258287
>>>>>>> 26647afaa (chore: Update packages and fix lint issues (#4790))
288+
=======
289+
google-api-core[grpc]==2.24.0
290+
>>>>>>> 50b1288d1 (feat: Snyk vulnerability issues fix. (#4867))
259291
# via
260292
# feast (setup.py)
261293
# google-cloud-bigquery
@@ -265,10 +297,14 @@ google-api-core[grpc]==2.23.0
265297
# google-cloud-datastore
266298
# google-cloud-storage
267299
<<<<<<< HEAD
300+
<<<<<<< HEAD
268301
google-auth==2.37.0
269302
=======
270303
google-auth==2.36.0
271304
>>>>>>> 26647afaa (chore: Update packages and fix lint issues (#4790))
305+
=======
306+
google-auth==2.37.0
307+
>>>>>>> 50b1288d1 (feat: Snyk vulnerability issues fix. (#4867))
272308
# via
273309
# google-api-core
274310
# google-cloud-bigquery
@@ -313,10 +349,14 @@ great-expectations==0.18.22
313349
grpc-google-iam-v1==0.13.1
314350
# via google-cloud-bigtable
315351
<<<<<<< HEAD
352+
<<<<<<< HEAD
316353
grpcio==1.68.1
317354
=======
318355
grpcio==1.68.0
319356
>>>>>>> 26647afaa (chore: Update packages and fix lint issues (#4790))
357+
=======
358+
grpcio==1.68.1
359+
>>>>>>> 50b1288d1 (feat: Snyk vulnerability issues fix. (#4867))
320360
# via
321361
# feast (setup.py)
322362
# google-api-core
@@ -426,10 +466,14 @@ jmespath==1.0.1
426466
# boto3
427467
# botocore
428468
<<<<<<< HEAD
469+
<<<<<<< HEAD
429470
json5==0.10.0
430471
=======
431472
json5==0.9.28
432473
>>>>>>> 26647afaa (chore: Update packages and fix lint issues (#4790))
474+
=======
475+
json5==0.10.0
476+
>>>>>>> 50b1288d1 (feat: Snyk vulnerability issues fix. (#4867))
433477
# via jupyterlab-server
434478
jsonpatch==1.33
435479
# via great-expectations
@@ -475,10 +519,14 @@ jupyter-server==2.14.2
475519
jupyter-server-terminals==0.5.3
476520
# via jupyter-server
477521
<<<<<<< HEAD
522+
<<<<<<< HEAD
478523
jupyterlab==4.3.4
479524
=======
480525
jupyterlab==4.2.6
481526
>>>>>>> 26647afaa (chore: Update packages and fix lint issues (#4790))
527+
=======
528+
jupyterlab==4.3.4
529+
>>>>>>> 50b1288d1 (feat: Snyk vulnerability issues fix. (#4867))
482530
# via notebook
483531
jupyterlab-pygments==0.3.0
484532
# via nbconvert
@@ -504,6 +552,9 @@ markupsafe==3.0.2
504552
# nbconvert
505553
# werkzeug
506554
<<<<<<< HEAD
555+
<<<<<<< HEAD
556+
=======
557+
>>>>>>> 50b1288d1 (feat: Snyk vulnerability issues fix. (#4867))
507558
marshmallow==3.23.2
508559
# via
509560
# environs
@@ -527,10 +578,14 @@ mdurl==0.1.2
527578
milvus-lite==2.4.10
528579
# via pymilvus
529580
<<<<<<< HEAD
581+
<<<<<<< HEAD
530582
minio==7.2.11
531583
=======
532584
minio==7.1.0
533585
>>>>>>> 702a5fbb8 (feat: Adding packages for Milvus Online Store (#4854))
586+
=======
587+
minio==7.2.11
588+
>>>>>>> 50b1288d1 (feat: Snyk vulnerability issues fix. (#4867))
534589
# via feast (setup.py)
535590
mistune==3.0.2
536591
# via
@@ -670,10 +725,14 @@ prometheus-client==0.21.1
670725
prompt-toolkit==3.0.48
671726
# via ipython
672727
<<<<<<< HEAD
728+
<<<<<<< HEAD
673729
propcache==0.2.1
674730
=======
675731
propcache==0.2.0
676732
>>>>>>> 26647afaa (chore: Update packages and fix lint issues (#4790))
733+
=======
734+
propcache==0.2.1
735+
>>>>>>> 50b1288d1 (feat: Snyk vulnerability issues fix. (#4867))
677736
# via
678737
# aiohttp
679738
# yarl
@@ -746,6 +805,7 @@ pycparser==2.22
746805
# via cffi
747806
<<<<<<< HEAD
748807
<<<<<<< HEAD
808+
<<<<<<< HEAD
749809
pycryptodome==3.21.0
750810
# via minio
751811
pydantic==2.10.4
@@ -755,16 +815,25 @@ pydantic==2.10.1
755815
=======
756816
pydantic==2.10.2
757817
>>>>>>> 702a5fbb8 (feat: Adding packages for Milvus Online Store (#4854))
818+
=======
819+
pycryptodome==3.21.0
820+
# via minio
821+
pydantic==2.10.4
822+
>>>>>>> 50b1288d1 (feat: Snyk vulnerability issues fix. (#4867))
758823
# via
759824
# feast (setup.py)
760825
# fastapi
761826
# great-expectations
762827
# qdrant-client
763828
<<<<<<< HEAD
829+
<<<<<<< HEAD
764830
pydantic-core==2.27.2
765831
=======
766832
pydantic-core==2.27.1
767833
>>>>>>> 26647afaa (chore: Update packages and fix lint issues (#4790))
834+
=======
835+
pydantic-core==2.27.2
836+
>>>>>>> 50b1288d1 (feat: Snyk vulnerability issues fix. (#4867))
768837
# via pydantic
769838
pygments==2.18.0
770839
# via
@@ -774,10 +843,14 @@ pygments==2.18.0
774843
# rich
775844
# sphinx
776845
<<<<<<< HEAD
846+
<<<<<<< HEAD
777847
pyjwt[crypto]==2.10.1
778848
=======
779849
pyjwt[crypto]==2.10.0
780850
>>>>>>> 26647afaa (chore: Update packages and fix lint issues (#4790))
851+
=======
852+
pyjwt[crypto]==2.10.1
853+
>>>>>>> 50b1288d1 (feat: Snyk vulnerability issues fix. (#4867))
781854
# via
782855
# feast (setup.py)
783856
# msal
@@ -856,10 +929,14 @@ python-dotenv==1.0.1
856929
# environs
857930
# uvicorn
858931
<<<<<<< HEAD
932+
<<<<<<< HEAD
859933
python-json-logger==3.2.1
860934
=======
861935
python-json-logger==2.0.7
862936
>>>>>>> 702a5fbb8 (feat: Adding packages for Milvus Online Store (#4854))
937+
=======
938+
python-json-logger==3.2.1
939+
>>>>>>> 50b1288d1 (feat: Snyk vulnerability issues fix. (#4867))
863940
# via jupyter-events
864941
python-keycloak==4.2.2
865942
# via feast (setup.py)
@@ -936,10 +1013,14 @@ rfc3986-validator==0.1.1
9361013
rich==13.9.4
9371014
# via ibis-framework
9381015
<<<<<<< HEAD
1016+
<<<<<<< HEAD
9391017
rpds-py==0.22.3
9401018
=======
9411019
rpds-py==0.21.0
9421020
>>>>>>> 26647afaa (chore: Update packages and fix lint issues (#4790))
1021+
=======
1022+
rpds-py==0.22.3
1023+
>>>>>>> 50b1288d1 (feat: Snyk vulnerability issues fix. (#4867))
9431024
# via
9441025
# jsonschema
9451026
# referencing
@@ -950,10 +1031,14 @@ ruamel-yaml==0.17.40
9501031
ruamel-yaml-clib==0.2.12
9511032
# via ruamel-yaml
9521033
<<<<<<< HEAD
1034+
<<<<<<< HEAD
9531035
ruff==0.8.4
9541036
=======
9551037
ruff==0.8.0
9561038
>>>>>>> 26647afaa (chore: Update packages and fix lint issues (#4790))
1039+
=======
1040+
ruff==0.8.4
1041+
>>>>>>> 50b1288d1 (feat: Snyk vulnerability issues fix. (#4867))
9571042
# via feast (setup.py)
9581043
s3transfer==0.10.4
9591044
# via boto3
@@ -1038,10 +1123,14 @@ tinycss2==1.4.0
10381123
toml==0.10.2
10391124
# via feast (setup.py)
10401125
<<<<<<< HEAD
1126+
<<<<<<< HEAD
10411127
tomli==2.2.1
10421128
=======
10431129
tomli==2.1.0
10441130
>>>>>>> 26647afaa (chore: Update packages and fix lint issues (#4790))
1131+
=======
1132+
tomli==2.2.1
1133+
>>>>>>> 50b1288d1 (feat: Snyk vulnerability issues fix. (#4867))
10451134
# via
10461135
# build
10471136
# coverage
@@ -1170,10 +1259,14 @@ urllib3==2.2.3
11701259
# responses
11711260
# testcontainers
11721261
<<<<<<< HEAD
1262+
<<<<<<< HEAD
11731263
uvicorn[standard]==0.34.0
11741264
=======
11751265
uvicorn[standard]==0.32.1
11761266
>>>>>>> 26647afaa (chore: Update packages and fix lint issues (#4790))
1267+
=======
1268+
uvicorn[standard]==0.34.0
1269+
>>>>>>> 50b1288d1 (feat: Snyk vulnerability issues fix. (#4867))
11771270
# via
11781271
# feast (setup.py)
11791272
# uvicorn-worker
@@ -1186,10 +1279,14 @@ virtualenv==20.23.0
11861279
# feast (setup.py)
11871280
# pre-commit
11881281
<<<<<<< HEAD
1282+
<<<<<<< HEAD
11891283
watchfiles==1.0.3
11901284
=======
11911285
watchfiles==1.0.0
11921286
>>>>>>> 26647afaa (chore: Update packages and fix lint issues (#4790))
1287+
=======
1288+
watchfiles==1.0.3
1289+
>>>>>>> 50b1288d1 (feat: Snyk vulnerability issues fix. (#4867))
11931290
# via uvicorn
11941291
wcwidth==0.2.13
11951292
# via prompt-toolkit
@@ -1220,10 +1317,14 @@ wrapt==1.17.0
12201317
xmltodict==0.14.2
12211318
# via moto
12221319
<<<<<<< HEAD
1320+
<<<<<<< HEAD
12231321
yarl==1.18.3
12241322
=======
12251323
yarl==1.18.0
12261324
>>>>>>> 26647afaa (chore: Update packages and fix lint issues (#4790))
1325+
=======
1326+
yarl==1.18.3
1327+
>>>>>>> 50b1288d1 (feat: Snyk vulnerability issues fix. (#4867))
12271328
# via aiohttp
12281329
zipp==3.21.0
12291330
# via importlib-metadata

0 commit comments

Comments
 (0)