search

Open-EO / openeo-python-driver

Common parts of a Python driver implementation for OpenEO
Apache License 2.0
11 stars 6 forks source link

Require Werkzeug >=3.0.3 #281

Closed soxofaan closed 5 months ago

soxofaan commented 6 months ago

Recently a security issue (https://github.com/advisories/GHSA-2g68-c3qc-8985) was addressed in Werkzeug 3.0.3

openeo-python-driver is pinned down below that. https://github.com/Open-EO/openeo-python-driver/blob/16f324aa067fd28c43851127c466a69ecb516203/setup.py#L54

I already tried to lift the constraint, but had to backtrack because of some deployments that are stuck with too low flask versions: https://github.com/Open-EO/openeo-python-driver/commit/4af799cec67dadb7f88bccfd49a5bcf9b5c5c945

soxofaan commented 5 months ago

Pushed another attempt to bump the werkzeug constraint. Now it's matter of waiting for all related CI pipelines to give it a stamp of approval

soxofaan commented 5 months ago

it passed CI, and is now running in dev